https://support.ruckuswireless.com/articles/000009125 2026-04-09T12:32:10-0700 monthly 0.8 admin,premium knowledge_article_6170 knowledge_article_6170 2019-04-24T12:30:46-0700 000009125 Validated (External) Premium Virtual smartcell gateway Configuration;Installation Configuration, Installation, virtual SmartCell Gateway How to connect a vDP to vSZ? How to onboard a vDP to vSZ? Connecting the vDP to vSZ Execute the following commands from the vDP CLI to connect the vDP to the vSZ: ruckus# config ruckus(config)# controller ruckus(config-controller)# ip <vSZ control IP address> ruckus(config-controller)# end ruckus(config)# end Note: You must enter the vSZ control IP address in the vDP setup process. After completing these steps, verify the vDP connectivity on the vSZ by navigating to System ? Cluster The vDP connection status should be displayed as Managed in the vSZ.

This article gives you information on how to connect a vDP to vSZ.

2026-04-09T12:32:10-0700 2026-04-09T22:00:07-0700 https://support.ruckuswireless.com/articles/000015260 2026-04-07T12:26:41-0700 monthly 0.8 admin,premium knowledge_article_6169 knowledge_article_6169 2026-04-07T12:26:41-0700 000015260 Validated (External) Premium Cloud services System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Cloud Services Why do RUCKUS One switch or client counts appear to be capped at 10,000, or look inconsistent between the Tenant dashboard and Venue-level client views? <ul><li> Engineering has confirmed that: <ul class="ak-ul"><li> This behavior is an Elasticsearch <code class="_ca0qyh40 _u5f3m5ip _n3tdyh40 _19bvm5ip _2rkofajl _11c819w5 _1reo1wug _18m91wug _1dqoglyw _1e0c1nu9 _bfhk187e _16d9qvcn _syazi7uo _vwz41kw7 _1i4q1hna _o5721jtm">max_result_window</code> design limitation. </li><li> The underlying client data is intact and is not lost or corrupted. </li><li> The limitation affects both wired/switch and wireless client lists when a query would otherwise return more than 10,000 records. </li></ul> </li><li> The behavior has been documented in the RUCKUS One User Guide under Viewing Client Details, with an explicit note about the 10,000?entry table limit and the recommendation to use filtering: https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-96C93BA5-BA53-4CBB-9FEB-9B7A804FB697.html </li><li> From a product perspective, this is treated as design intent for RUCKUS One tables to ensure performance and UI responsiveness at scale. </li></ul>

This article explains a design limitation in the underlying Elasticsearch engine used by RUCKUS One, which causes client-related tables and API queries to be limited to a maximum of 10,000 entries. In large deployments, this can make wired/switch and wireless client counts appear capped at 10K or inconsistent between Tenant-level and Venue-level views, even though the underlying client data is intact.

2026-04-07T12:26:41-0700 2026-04-09T14:00:06-0700 https://support.ruckuswireless.com/articles/000015257 2026-04-07T06:15:37-0700 monthly 0.8 admin,premium knowledge_article_6168 knowledge_article_6168 2026-04-07T06:15:37-0700 000015257 Validated (External) Premium Unleashed;Zonedirector;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, Unleashed, ZoneDirector, SmartCell Gateway Why is the LG tv not discovered when using the cast option from YouTube application? Since, the LG Tv uses SSDP protocol for the discovery from the YouTube application, allowing the SSDP port 1900 on the network is required. Once the port 1900 is allowed on the network we are able to discover the LG Tv from the YouTube application.

When using the cast option from YouTube application, unable to discover the LG Tv. When using the Twitch application we can discover the LG Tv.

2026-04-07T06:15:37-0700 2026-04-07T14:00:07-0700 https://support.ruckuswireless.com/articles/000011818 2026-04-06T18:10:32-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_6167 knowledge_article_6167 2021-07-22T18:34:47-0700 000011818 Validated (External) Public Cloud services System network management System Network Management, Cloud Services How to access on-prem Ruckus Analytics? <div style="margin-left: 8px;">For on-prem SZ RA (SZ-RA): <ol><li style="margin-left: 32px;">Login to <a href="https://ruckus.cloud/analytics" style="color: #0563c1;text-decoration: underline;" target="_blank">https://ruckus.cloud/ai</a> and choose your designated region</li></ol> <div style="text-align: center;"><img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002J1l&feoid=00N50000002Cf3M&refid=0EMRk00000IwIyH"></img></div> </div>

2026-04-06T18:10:32-0700 2026-04-07T10:00:07-0700 https://support.ruckuswireless.com/articles/000014256 2026-04-03T10:39:02-0700 monthly 0.8 admin,premium knowledge_article_6166 knowledge_article_6166 2023-10-24T07:08:24-0700 000014256 Validated (External) Premium Ruckus cloud switch;Ruckus cloud wifi Configuration Configuration, Ruckus Cloud Switch, Ruckus Cloud WiFi How to enable SSO with Azure AD on RuckusOne for Administrative purpose? Ruckus One has introduced Single Sign-On feature for Administration. With this, we can use Azure AD credentials to log in to RuckusOne using SAML as the supported protocol. <div> <h2>Prerequisites</h2> <ul><li>Active Azure AD tenant with admin privileges.</li><li>Access to Ruckus One Admin Console.</li><li>R1 SSO configuration details (ACS URL, Entity ID).</li><li>Users/groups identified for admin roles.</li></ul> </div> <div> <h2>Step 1: Create an Enterprise Application in Azure AD</h2> <ol><li>Sign in to Azure Portal.</li><li>Navigate to Azure Active Directory ? Enterprise Applications.</li><li>Click + New application ? Create your own application.</li><li>Name the app (e.g., Ruckus One Admin) and select Integrate any other application you don’t find in the gallery.</li><li>Click Create</li></ol> <img src="https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-27B7A902-802E-4B22-9F70-79B49805F7F5-low.png" width="558" height="349"></img> <ol start="6"><li>In the navigation pane, select Enterprise applications and click the new application. The application overview page is displayed.</li><li>Click Users and groups in the navigation pane or click Assign users and group in the Getting Started section to add users and groups of users to the application.</li><li id="GUID-1D8B1F4C-A277-444D-8886-43064C56C9E4__GUID-5CD22666-98BB-417A-A480-14DA801416B6">Click None Selected to display the Users and groups sidebar. Click the checkbox next to the desired group names to list them on the Selected pane and click Select to add the selected groups to the application. The selected groups are displayed in the Add Assignment page and the Assign button is enabled.</li><li id="GUID-1D8B1F4C-A277-444D-8886-43064C56C9E4__GUID-B5FFC869-1600-4A51-BC49-C131D09C56A1">Click Assign to assign the groups to the application. </li><li id="GUID-1D8B1F4C-A277-444D-8886-43064C56C9E4__GUID-A33C1B7F-44B8-4BEA-9B2E-1F57E6D7661E">Select a group and click Add members. The Add members page is displayed. Select the checkbox against a user to list them on the Selected pane and click Select to add the selected member to the group.</li></ol> <div style="font-family: 'Segoe UI';font-size: 14px;line-height: 20px;"> <h2>Step 2: Download Azure/Entra ID Federation Metadata</h2> After completing the initial SAML application setup in Azure: <ol><li>Open the SAML application in Azure / Microsoft Entra ID.</li><li>Go to Single sign-on ? SAML.</li><li>In the SAML Signing Certificate section: <ul><li>Either download the “Federation Metadata XML”, OR</li><li>Copy the “App Federation Metadata URL”.</li></ul> </li></ol> You will use this metadata file or URL to import Azure’s IdP configuration into R1. <h2>Step 3: Import Azure Metadata into R1</h2> <ol><li>Log in to your R1 environment.</li><li>Navigate to: Network Control ? My Services ? Identity Provider ? Add SAML Identity Provider</li><li>Choose one of the import methods: <ul><li>Import via XML file, or</li><li>Import via XML URL (paste the Azure App Federation Metadata URL).</li></ul> </li></ol> This import will create the initial Identity Provider profile inside R1. <h2>Step 4: Download Metadata From R1 to Extract Required URLs</h2> Once the Identity Provider profile has been created in R1: <ol><li>Select the newly created IdP profile.</li><li>Click Download SAML Metadata.</li><li>Open the downloaded XML file using any text editor (Notepad, Notepad++, VS Code, etc.).</li></ol> Inside this XML file, locate: <ul><li>Entity ID</li><li>Location (Assertion Consumer Service URL / Reply URL)</li></ul> These values are what Azure requires to complete the configuration. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002Grt&feoid=00N50000002Cf3M&refid=0EMRk00000Hfkt8" width="956" height="380" style="cursor: pointer;"></img> <h2>Step 5: Copy the Correct R1 URLs Back Into Azure</h2> In Azure/Entra ID, go back to your SAML configuration screen: <ol><li>Go to Single sign-on ? Basic SAML Configuration.</li><li>Paste the extracted R1 values into the appropriate fields:</li></ol> <div class="___i31lg00 f10pi13n f14t3ns0 f1nbblvp fat0sn4 f1ov4xf1 fekwl8i f1lmfglv f1oz7aqm f1abmfm4 f1w619qj f16h0jq8"> <table class="___1hm93bs f1ddd56o f16vktn6 f1enuhaj fdclmfp f1ev3kgc ftgm304 f1uinfot fibjyge fvueend f9yszdx f1fu4s3n f3l3pb3 f1s2k7dp f8fmt76 fjvbh62 fysh76l fic4ptz f1yenhzu f1yn6nvh f14tj6oe f1jq587y f1el8yx3 f1pymoxg f1ofu761 fe6itr f7coize f1794535 f70r78m f4zgifc fk1v6el f16pyhcb fo436u6 fzy4j18 fc43013 f1hmrcvb fc4t9fq fgp09rh fjnyn6r"><tbody><tr><th colspan="1" rowspan="1">R1 Metadata Value</th><th colspan="1" rowspan="1">Azure Field</th></tr><tr><th colspan="1" rowspan="1">Entity ID</th><td colspan="1" rowspan="1">Identifier (Entity ID)</td></tr><tr><th colspan="1" rowspan="1">Location (ACS URL)</th><td colspan="1" rowspan="1">Reply URL (Assertion Consumer Service URL)</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1"></td></tr></tbody></table> </div> Make sure the URLs match exactly—any deviation will cause SSO failures. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002Grt&feoid=00N50000002Cf3M&refid=0EMRk00000Hflqn" width="1171" height="529" style="cursor: pointer;"></img> </div> Make sure the URLs match exactly—any deviation will cause SSO failures. <h2>Step 6 — Save the changes in Azure. </h2> </div> <div> <h2>Step 7: Configure Ruckus One SSO Settings</h2> <ol><li>Log in to Ruckus One Admin Console.</li><li>Navigate to Administration ? Account Management<abbr title="and then"> ? </abbr>Settings </li><li>In the Enable SSO with 3rd Party provider section, click Set Up.</li></ol> <img src="https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-B5CEB214-8EA2-4702-9185-5900A5AF67A4-low.png" width="827" height="559"></img> <ol start="4"><li>Provide: <ul><li>Azure AD Metadata URL or XML.</li><li>Entity ID and ACS URL.</li></ul> </li></ol> <img src="https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-F71B2EB7-FBE7-42F4-B8E7-FD19D2941520-low.png"></img> <ol start="5"><li>Apply the configuration.</li></ol> </div> <div> <h2>Step 8: Assign Admin Roles</h2> <ol><li>In Azure AD, go to the Ruckus One application ? Users and Groups.</li><li>Assign users or groups who need Admin access.</li><li>In Ruckus One, map these users/groups to appropriate Admin roles.</li></ol> We can either directly add the AD managed Users or add the AD Group ID as an SSO Group from R1 To Add Users Separately: Navigate to Administration ? Account Management ? Users & Privileges <ol id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__OL_WTX_JPK_GCC"><li id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__GUID-8E70559B-C457-4EDA-975B-0C47671E77CC">Click Add User. The Add New User sidebar is displayed.</li><li id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__GUID-5E1F5BD1-76D2-4AC6-B145-7CA92302F989">For Authentication Type, select SSO with 3rd Party.</li><li id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__GUID-BFB6DD16-B16C-4051-9220-EE634A0786EE">For Email, enter the email address of the administrator.</li><li id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__GUID-C8826749-2625-4A02-B47B-56CD5C13C222">(Optional) For First Name, enter the first name of the administrator.</li><li id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__GUID-9F17865E-4A5B-4B8B-B4A2-C62778DC5926">(Optional) For the Family Name, enter the family name of the administrator.</li><li id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__GUID-D6C74675-9810-4D0A-AB83-317EE908A89A">For Privilege Group, select the privilege group of the administrator. Available options are: <ul id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__UL_XTX_JPK_GCC" style="list-style-type: circle;"><li id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__GUID-0EAFC74D-81A1-4BF4-A885-8F7B17F21D8C">Prime Admin</li><li id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__GUID-A1489999-CABF-4393-99DD-6C53DFED3A9F">Administrator</li><li id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__GUID-A516B87B-2B2B-4AB4-93B2-AE7622BE8527">Guest User</li><li id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__GUID-8108A46D-47CA-4CB3-BCD5-7EDE474FEF51">Read-Only</li><li id="GUID-DC39C8C4-5DBA-493C-A1C0-FE2A40440FF1__GUID-40270EF8-BF4B-4CA0-A819-37EC709982AB">DPSK Manager</li></ul> </li><li>Click Add User</li></ol> <img src="https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-50C6B471-D408-4E94-8A28-111D04CC046B-low.png"></img> </div> Adding and Managing an SSO Group: <ol id="GUID-2D29E3E2-A877-410F-8306-B472FB98A4B9__GUID-833AFE31-FD9F-4F4E-B097-566C3DD4181C"><li id="GUID-2D29E3E2-A877-410F-8306-B472FB98A4B9__GUID-A6228972-CDEB-4A4E-B1ED-0084AF91F2CB">From the navigation bar, click Administration ? Account Management<abbr title="and then"> ? </abbr>Users & Privileges.</li><li id="GUID-2D29E3E2-A877-410F-8306-B472FB98A4B9__GUID-27C93F3B-680F-4E0B-BBD1-BDDFBC7E8435">Select the SSO Groups sub-tab <abbr title="and then">?</abbr> Add SSO Group </li></ol> <img src="https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-149E0D44-1B50-4C88-ADD8-3B857F157C0C-low.png" width="974" height="299"></img> <ol start="3" id="GUID-2D29E3E2-A877-410F-8306-B472FB98A4B9__GUID-833AFE31-FD9F-4F4E-B097-566C3DD4181C"><li id="GUID-2D29E3E2-A877-410F-8306-B472FB98A4B9__GUID-C43585F1-704F-404C-ACAF-6CF3BBE0B521">In the Add SSO User Group sidebar, enter the group name.</li><li id="GUID-2D29E3E2-A877-410F-8306-B472FB98A4B9__GUID-B11FBBCD-B6FC-461B-B3CF-B1886578EAD3">For Group ID, enter the group ID as defined in Azure AD user group added to the application</li></ol> <img src="https://docs-be.vistancenetworks.com/bundle/ruckusone-userguide/page/GUID-33485E0D-BB61-4A24-A035-6F3C82418636-low.png?_LANG=enus" width="858" height="523"></img> <ol start="5"><li>Select the desired Privilege Group that you want to assign from the list. Then, click on Add Group</li></ol> <img src="https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-9F81E2AE-E526-4BE3-91B9-52496055396D-low.png"></img> Once an SSO user is logged in, if the users are showing up with both first name and last name as UPN name in R1 Administrators, then modify the namespace for the Attributes & Claims added to the Azure application: <img src="https://ruckus.atlassian.net/rest/api/3/attachment/content/759318"></img>

Integrating Ruckus One (R1) with Azure Active Directory (Azure AD) for admin access provides centralized identity management and secure Single Sign-On (SSO). This guide explains how to configure R1 admin access using Azure (Active Directory) AD.

2026-04-03T10:39:02-0700 2026-04-06T22:00:07-0700 https://support.ruckuswireless.com/articles/000015210 2026-04-02T10:09:18-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_6165 knowledge_article_6165 2026-02-13T00:56:33-0800 000015210 Validated (External) Public Smartcell accessories;Smartcell gateway;Smartcell insight;Smart wireless services;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) Support license activation Support License Activation, SmartCell Accessories, SmartCell Gateway, SmartCell Insight, Smart Wireless Services How do I enable or disable Auto Activation for my account, and how can I verify the activation status in SPA? 1. Terms & Conditions Acceptance <ul><li> The first login to the Support Portal will display a Terms & Conditions (T&C) page. </li><li> All users must accept the T&C to proceed. </li></ul> <img alt="T&C" height="688" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002I7J&feoid=00N50000002Cf3M&refid=0EMRk00000HcsqP" width="500"></img> <h3>2. Auto Activation Selection (Admin Only)</h3> <ul><li> After accepting the T&C, Prime Admin / Account Admin users will see a new Auto Activation Settings pop-up. </li><li> Admins must select one option: <ul><li> Opt IN to Auto Activation </li><li> Opt OUT of Auto Activation </li></ul> </li><li> Click Submit to continue. </li></ul> <blockquote> This selection is mandatory and applies at the account level. </blockquote> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002I7J&feoid=00N50000002Cf3M&refid=0EMRk00000IrYkM" alt=""></img> <h3>3. Behavior Based on Selection</h3> <h4>If OPT-IN is Selected</h4> <ul><li> All new purchase orders and previously purchased, unactivated orders will be automatically activated once Opt-In is submitted. </li><li>Previously purchased unactivated orders may take up to 24 hours to complete auto-activation after Opt-In is enabled.</li><li>Activated licenses are added to the license pool.</li><li>Customers must map licenses to the appropriate serial numbers or devices.</li><li>Manual activation is not required for eligible licenses.</li></ul> Q-If I chose "opt-IN" now, what would happen to my previously purchased Un-Activated licenses? <ul><li>By choosing ‘Opt IN’, all past orders that remain unactivated will be automatically activated for your consumption.</li><li>Please allow up to 24 hours for the system to process and complete auto-activation for previously purchased orders.</li></ul> <h4>If OPT-OUT is Selected</h4> <ul><li> Auto Activation is disabled for eligible licenses. </li><li> Customers must manually activate licenses. </li><li> Existing activation workflows remain unchanged. </li></ul> Operator-level users have read-only access to Auto Activation. <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">They can view whether the account is Opt-In or Opt-Out, but cannot make changes.</li></ul> <img alt="User-added image" height="162" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002I7J&feoid=00N50000002Cf3M&refid=0EMRk00000Hct05" width="500"></img> <h3>4. Changing Auto Activation Preference Later</h3> <ul><li> Admins can change the setting at any time: <ul><li> Navigate to My Profile ? My Support Account </li><li> Update Auto Activation Settings </li><li> Click Submit </li></ul> </li><li> Any change triggers email notifications to all Account Administrators. </li></ul> <div style="margin-bottom: 11px;"> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002I7J&feoid=00N50000002Cf3M&refid=0EMRk00000IraEH" alt=""></img> <h2>5. SPA Status and Auto Activation Behavior</h2> After a Sales Order is closed, customers and support teams can verify Auto Activation behavior through the SPA Status. The following values indicate how licenses were processed: <table><thead><tr><th colspan="1" rowspan="1">SPA Status</th><th colspan="1" rowspan="1">Description</th></tr></thead><tbody><tr><td colspan="1" rowspan="1">Yes – Available in Liman</td><td colspan="1" rowspan="1">All SKUs were auto-activated against the license pool and pushed to Flexera/LiMAN</td></tr><tr><td colspan="1" rowspan="1">Yes</td><td colspan="1" rowspan="1">All SKUs were auto-activated against the license pool, but not pushed to Flexera/LiMAN</td></tr><tr><td colspan="1" rowspan="1">No</td><td colspan="1" rowspan="1">SKUs were eligible for Auto Activation but not auto-activated due to one of the following:• Customer opted OUT of Auto Activation• No virtual asset exists for the account</td></tr><tr><td colspan="1" rowspan="1">N/A</td><td colspan="1" rowspan="1">SKUs are not within the scope of Auto Activation</td></tr></tbody></table> Sample SPA emails Yes - Available in Liman = All SKU's Activated against Pool & Pushed to Flexera. <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002I7J&feoid=00N50000002Cf3M&refid=0EMRk00000HctWL"></img> Yes - Available in Liman = All SKU's Activated against Pool & Pushed to Flexera. <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002I7J&feoid=00N50000002Cf3M&refid=0EMRk00000HctZZ"></img> NO = All SKU's that are eligible for Auto-Activation but not Auto-activated because of previous checks i.e. Customer has NOT Opted in or There is no Virtual Asset for the Account. <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002I7J&feoid=00N50000002Cf3M&refid=0EMRk00000HctbB"></img> N/A - All SKU's that are NOT within the Scope of Auto-Activation. <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002I7J&feoid=00N50000002Cf3M&refid=0EMRk00000Hctcn"></img> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002I7J&feoid=00N50000002Cf3M&refid=0EMRk00000HcteP"></img> </div> Important Notes <ul><li> If no Account Administrator exists, the first login to the Support Portal will display a pop-up requesting administrator assignment before the user can continue. </li><li> To add an Account Administrator in this scenario, customers must contact RUCKUS Support and provide: <ul><li> Company letterhead </li><li> Executive approval authorizing the assignment of a new Account Administrator </li></ul> </li><li> Auto Activation settings cannot be modified unless an Account Administrator is present on the account. </li></ul> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002I7J&feoid=00N50000002Cf3M&refid=0EMRk00000HctOH"></img> What products does Auto Activation apply to? <ul><li>RUCKUS SmartZone (SZ) </li><li>RUCKUS Internet of Things (RIoT suite) </li><li>RUCKUS Network Director (RND) </li><li>RUCKUS Smart Cell Insight (SCI) </li><li>RUCKUS Smart Positioning Technology (SPoT) </li></ul> Full list of SKUs [to which Auto Activation applies] can be found here: (<a id="menur1icf" href="https://support.ruckuswireless.com/articles/000015099" target="_blank" title="https://support.ruckuswireless.com/articles/000015099">https://support.ruckuswireless.com/articles/000015099</a>) AUTO-ACTIVATION CUSTOMER JOURNEY <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002I7J&feoid=00N50000002Cf3M&refid=0EMRk00000I31Rq"></img> Attached Auto Activation- Customer FAQ

Auto Activation simplifies license management by automatically activating eligible licenses once a purchase order is processed. Account Administrators can choose to enable or disable Auto Activation through the Support Portal. This article explains how Auto Activation works, how to opt in or opt out, and what to expect based on the selected option. Applicable to accounts using RUCKUS SmartZone (SZ), IoT Suite, Network Director (RND), Smart Cell Insight (SCI), Smart Positioning Technology (SPoT).

2026-04-02T10:09:18-0700 2026-04-03T14:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA2Rk000000TygjKAC?attachment_index=0 2026-04-03T14:00:06-0700 monthly admin,premium,warranty,guest knowledge_article_6165 knowledge_article_6165_attachment_1 External FAQ_Manual vs Auto .pdf 382445.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA2Rk000000TygjKAC?attachment_index=1 2026-04-03T14:00:06-0700 monthly admin,premium,warranty,guest knowledge_article_6165 knowledge_article_6165_attachment_1 Auto-Activation Cust Journey flow .pdf 71169.0 application/pdf https://support.ruckuswireless.com/articles/000015255 2026-03-29T17:33:14-0700 monthly 0.8 admin,premium knowledge_article_6164 knowledge_article_6164 2026-03-29T17:33:14-0700 000015255 Validated (External) Premium Ruckus analytics;Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;Installation;Troubleshooting;Known issues and workarounds Performance, Configuration, Installation, Troubleshooting, Known Issues and Workarounds, Ruckus Analytics, SmartCell Gateway How is license compliance implemented for RUCKUS AI (RAI) when used with SmartZone controllers? Does a customer need to license 100% of devices, or can licenses be applied to only a subset of APs/switches? <ul style="list-style-type: disc;"><li> Key Behavior Clarification: <ul style="list-style-type: circle;"><li> RUCKUS AI does not require the customer to license 100% of all devices globally. Licenses can be applied to a subset of APs/switches. </li><li> However, many AI features (e.g., AI?Driven Cloud RRM) require 100% licensing at the zone level to function fully. </li></ul> </li><li> Action Plan: <ol start="1" style="list-style-type: lower-alpha;"><li> Explain that: <ul style="list-style-type: square;"><li> Licenses are a tenant?wide pool; devices are licensed individually. </li><li> Customers can license in batches (partial coverage across the total fleet). </li><li> For key AI features, any given zone must be fully licensed (all APs within that zone) to get full AI functionality. </li></ul> </li><li> Review with the customer: <ul style="list-style-type: square;"><li> Which zones are business?critical for AI features. </li><li> How many licenses they own vs how many APs are in those critical zones. </li></ul> </li><li> Help them: <ul style="list-style-type: square;"><li> Either license all APs in selected zones, or </li><li> Re?structure zones so critical APs are grouped together and fully licensed. </li></ul> </li><li> Confirm that: <ul style="list-style-type: square;"><li> Once target zones reach 100% licensing, previously missing AI capabilities (e.g., Cloud RRM recommendations) appear and the zone status no longer shows as non?compliant. </li></ul> </li></ol> </li><li> SmartZone Essentials vs High Scale: <ul style="list-style-type: circle;"><li> There is no different RAI license?compliance behavior between SmartZone Essentials and SmartZone High Scale. </li><li> The enforcement logic is RAI tenant + zone/device based, independent of the SmartZone controller type. </li></ul> </li></ul>

2026-03-29T17:33:14-0700 2026-04-02T14:00:07-0700 https://support.ruckuswireless.com/articles/000014731 2026-03-25T06:23:23-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_6163 knowledge_article_6163 2025-03-12T18:07:19-0700 000014731 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Security Security, SmartCell Gateway Do SZ or AP have the issue of CVE-2025-26465? SZ: No impact from both of CVE-2025-26465 or CVE-2025-26466. AP: No impact from CVE-2025-26465. R7.0+ has the impact from CVE-2025-26466. R7.1.1 patch 1 has the fix for this issue.

Analysis of CVE-2025-26465 for AP and SZ

2026-03-25T06:23:23-0700 2026-03-29T18:00:07-0700 https://support.ruckuswireless.com/articles/000015246 2026-03-20T06:17:00-0700 monthly 0.8 admin,premium knowledge_article_6137 knowledge_article_6137 2026-03-20T06:17:00-0700 000015246 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security;Troubleshooting;Known issues and workarounds Configuration, Security, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway Why getting an error when trying to create a new AP zone using the zone template Need to check from the vSZ WebUI>>Network>>Wireless>>Select the Zone>>Manually check each SSID Firewall option and set the firewall profile to the System default only <img alt="User-added image" height="166" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002EtJ&feoid=00N50000002Cf3M&refid=0EMRk00000IL21F" width="500"></img>

2026-03-20T06:17:00-0700 2026-03-24T10:00:08-0700 https://support.ruckuswireless.com/articles/000015241 2026-03-16T19:49:24-0700 monthly 0.8 admin,premium knowledge_article_6135 knowledge_article_6135 2026-03-16T19:35:03-0700 000015241 Validated (External) Premium Ruckus analytics;Smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;Known issues and workarounds Installation, Known Issues and Workarounds, Ruckus Analytics, SmartCell Gateway How do I verify firewall connectivity between RAI and the SZ controller? Use the RAI Diagnostic Utility KSP to automatically verify connectivity between the SmartZone/vSZ and the RUCKUS AI cloud services. The tool identifies PASS/FAIL results for key services (AI Access, Message Hub, Service Locator) and provides corrective actions if connectivity issues are detected. Procedure on how to use the KSP: <ol><li style="margin-left: 8px;">Download the attached KSP and ensure you select the correct version that matches your SmartZone release (compatible with 6.x and 7.x only).</li><li style="margin-left: 8px;">Upload the KSP on respective SZ (Monitor > troubleshooting & diagnostics > Scripts > Patch/Diagnostics Scripts)</li><li style="margin-left: 8px;">Login via CLI</li><li style="margin-left: 8px;">Do the command: </li></ol> <ul><li style="margin-left: 40px;">debug </li><li style="margin-left: 40px;">diagnostic</li><li style="margin-left: 40px;">execute <filename></li></ul> <div style="margin-left: 40px;">5. Choose the designated RAI region (APAC, EU, US)</div> <div style="margin-bottom: 11px;margin-left: 40px;">6. Wait for the result and advice</div> Note: For SmartZone 6.x, download: RaiOnboardingCheck_6X-v1_67af457.ksp For SmartZone 7.x, download: RaiOnboardingCheck_7X-v1_fb89ab4.ksp Sample result: <img alt="User-added image" height="183" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002Fm9&feoid=00N50000002Cf3M&refid=0EMRk00000IPMhJ" width="500"></img> <img alt="User-added image" height="193" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002Fm9&feoid=00N50000002Cf3M&refid=0EMRk00000IELew" width="500"></img>

To simplify and accelerate the process of collecting RAI?related diagnostic information on SmartZone (SZ) controllers, a new RAI Diagnostic Utility KSP has been created. Two versions of the KSP are available: KSP for SmartZone 6.x KSP for SmartZone 7.x

2026-03-16T19:49:24-0700 2026-03-20T10:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA2Rk000000c0AHKAY?attachment_index=0 2026-03-20T10:00:09-0700 monthly admin,premium knowledge_article_6135 knowledge_article_6135_attachment_1 RaiOnboardingCheck_7X-v1_fb89ab4.ksp 11804.0 application/octet-stream;type=unknown http://support.ruckuswireless.com/article_attachments/kA2Rk000000c0AHKAY?attachment_index=1 2026-03-20T10:00:09-0700 monthly admin,premium knowledge_article_6135 knowledge_article_6135_attachment_1 RaiOnboardingCheck_6X-v1_67af457.ksp 11665.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000004060 2026-03-15T20:00:51-0700 monthly 0.8 admin,premium knowledge_article_6134 knowledge_article_6134 2015-02-23T09:01:17-0800 000004060 Validated (External) Premium Sz144;Zoneflex indoor;Zoneflex outdoor;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Installation;System network management Configuration, Installation, System Network Management, SZ144, ZoneFlex Indoor, ZoneFlex Outdoor, SCG200, virtual SmartCell Gateway, SZ100 Why am is seeing this message "system rebooted Because of [AP Gateway lost more than 1800 seconds]" If ping from the wired PC (on the same subnet as the AP) shows that the gateway is truly failing then consider replacing the gateway or troubleshoot the gateway failure. If on the other hand the ping to the gateway does not fail but the AP still shows the same "[AP Gateway lost more than 1800 seconds]" message it could be the AP, try re-setting the AP to default and rebuilding the config over again. Reset to default: 1. SSH into the AP and issue a "set factory" or 2. Press and hold the "Hard Reset" button down for 8 seconds and release. OR Disable this feature by: <ol start="1" style="list-style-type: decimal;"><li> Network ? Access Points ? Create / Edit Zone </li></ol> Advanced Options <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka22J000000Gxow&feoid=00N50000002Cf3M&refid=0EMRk00000IKwqH" alt=""></img> Change from 30 mins to 0 mins [Disable the feature]

System rebooted Because of [AP Gateway lost more than 1800 seconds]

2026-03-15T20:00:51-0700 2026-03-16T22:00:07-0700 https://support.ruckuswireless.com/articles/000015034 2026-03-11T10:16:47-0700 monthly 0.8 admin,premium knowledge_article_6133 knowledge_article_6133 2026-03-11T10:16:47-0700 000015034 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches Why do some logs appear incomplete or as null on the syslog server? Enable rfc5424 : (config)# logging enable rfc5424 It is necessary to first disable the CLI logging with: (config)# no logging cli-command After disabling cli-command logging, proceed to clear the logging buffer: (config)# clear logging Once the buffer is cleared, enable rfc5424 logging as shown above. You can then re-enable CLI logging if required using: (config)# logging cli-command

switch is sending syslog messages to an external syslog server, some logs appear incomplete or show up as null

2026-03-11T10:16:47-0700 2026-03-15T22:00:08-0700 https://support.ruckuswireless.com/articles/000013953 2026-03-11T10:23:39-0700 monthly 0.8 admin,premium knowledge_article_6132 knowledge_article_6132 2022-12-06T06:44:36-0800 000013953 Validated (External) Premium Icx 7150;RUCKUS ICX 7150 Campus Switches Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ICX 7150 Why does ICX7150 show NAND bad blocks? No corrective action is available or needed.

This Bulletin describes a condition when NAND bad blocks are displayed on the ICX7150

2026-03-11T10:23:39-0700 2026-03-15T22:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000fzCXSAY?attachment_index=0 2026-03-15T22:00:08-0700 monthly admin,premium knowledge_article_6132 knowledge_article_6132_attachment_1 TSB-2022-006.pdf 167406.0 application/pdf https://support.ruckuswireless.com/articles/000014997 2026-03-11T10:27:09-0700 monthly 0.8 admin,premium knowledge_article_6131 knowledge_article_6131 2025-09-25T03:38:01-0700 000014997 Validated (External) Premium Ruckus icx switches Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, Ruckus ICX Switches How do I configure an ICX8200 as a Layer 2 access switch if only the router image is available? Why is it rejecting all the commands that used to work on switching image? Why are commands like <code>ip default-gateway</code> or <code>ma <h3>1. Firmware Change in FastIron 10.0.00</h3> <ul><li> The Layer 2 (switch) image is no longer provided for ICX devices. </li><li> The Layer 3 (router) image fully includes all Layer 2 switching features. </li><li> During upgrade, any switch-image configuration is automatically translated to the router-image equivalent. </li></ul> <h3>Deprecated Features in 10.0.00</h3> The following commands/features are removed: <ul><li> <code>ip default-gateway</code> </li><li> <code>management-vlan</code> </li><li> Global <code>ip address</code> under config mode (? All IP addresses must be assigned on a VE interface.) </li></ul> <h3>2. How to Configure Basic Layer 2 Operation on an L3-Only ICX8200</h3> <h4> </h4> In layer 2 switches you would just enter an ip and a default gateway as shown below: ip address 192.168.0.5/24 ip default gateway 192.168.0.1 However, on layer 3 switches commands change a little but concept is the same, we will need an ip to access and manage the switch and a route that takes the traffic to the router. This is an example with vlan 1 because most of the time that is the one used for management purposes. By default the port is untagged on vlan 1. 1. Make sure the uplink port to the core is untaged on the management/default vlan Command: show vlan 2. Configure the ip: command(s): configure interface ve 1 ip address 192.168.0.3/24 3. Configure a static route to help the switch reach the core. Command: ip route 0.0.0.0/0 192.168.0.1 Notes: this command translates to: any traffic for which the layer 2 switch doesn't know the route, please send it to 192.168.0.1 he is the router and probably knows how to get there. So its very important that the default gateway ip is within the same subnet range as the ip set on ve 1. <img alt="Configuration example" height="348" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001i3p&feoid=00N50000002Cf3M&refid=0EMPH00000Qin7h" width="500"></img> This config allows connectivity to the core switch. Then to configure SSH access please add this config: 1. Create a local username and password if you haven't already. username user1 password password1 2. Add the AAA config: aaa authentication login default local 3. Generate a key: crypto key generate dsa/rsa <h3>Notes:</h3> This configuration provides basic Layer 2 operation and SSH access for management. For advanced needs such as RADIUS authentication or additional routing, consult official documentation or open a support case.

This article provides a basic layer 2 configuration to be applied on switches that only run routing image. Like ICX8200s that will function as access switches. The most common scenario is when you have an ICX8200 and need to configure it as an access switch. This config will allow SSH and basic connectivity on a local network.

2026-03-11T10:27:09-0700 2026-03-15T22:00:08-0700 https://support.ruckuswireless.com/articles/000014231 2026-03-11T10:28:19-0700 monthly 0.8 admin,premium knowledge_article_6130 knowledge_article_6130 2024-08-08T13:44:51-0700 000014231 Validated (External) Premium Knowledge;Ruckus icx switches Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, Knowledge, Ruckus ICX Switches What would be the upgrade path from 8030 versions to 8095 versions? Can upgrading directly from 08.0.30 to 08.0.95j cause configuration issues? Based on the official documentation (FastIron 09.0.10, 08.0.90, and 08.0.95 upgrade guides), the correct upgrade path is: “The upgrade path is 08.0.70 or prior ? 08.0.80f (non-UFI) ? target release (UFI).” For this specific case, upgrading from 08.0.30 to 08.0.95j should follow this sequence: 08.0.30 ? 08.0.80f (non-UFI) ? 08.0.95j (UFI) This ensures that the configuration is properly converted and prevents parsing errors. links: <a href="https://docs.commscope.com/bundle/fastiron-09010-upgradeguide/page/GUID-7894E17A-26A1-4094-BE3A-279649D8E05B.html" style="color: #0563c1;text-decoration: underline;" target="_blank">https://docs.commscope.com/bundle/fastiron-09010-upgradeguide/page/GUID-7894E17A-26A1-4094-BE3A-279649D8E05B.html</a> <a href="https://docs.commscope.com/bundle/fastiron-08095-upgradeguide/page/GUID-5DD7EE86-6988-4CA7-81D2-22EA77BD1992.html" style="color: #0563c1;text-decoration: underline;" target="_blank">https://docs.commscope.com/bundle/fastiron-08095-upgradeguide/page/GUID-5DD7EE86-6988-4CA7-81D2-22EA77BD1992.html</a>

The customer wants to upgrade from 08.0.30 software versions to 08.0.95j.

2026-03-11T10:28:19-0700 2026-03-15T22:00:07-0700 https://support.ruckuswireless.com/articles/000015243 2026-03-11T02:59:57-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_6129 knowledge_article_6129 2026-03-11T02:54:09-0700 000015243 Validated (External) Public Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi Steps to remove an in-use Identity Group from the DPSK Server on Ruckus One. Steps to Remove an In?Use Identity Group 1. Verify Identity Assignments Go to Clients ? Identity Groups ? Identities and check whether any identities are mapped to the target Identity Group. If identities are present, delete them. 2. Check DPSK Service Associations Confirm whether any DPSK Service is currently linked to the Identity Group. 3. Delete the Associated DPSK Service Navigate to Network Control ? My Services ? DPSK and delete the DPSK service associated with the Identity Group. 4. Validate DPSK Service Dependencies Before Deletion Before deleting the DPSK service, ensure the following: WLAN Usage: <ul><li>Check if any WLAN is using the DPSK service.</li><li>If yes, either remove the DPSK service from the WLAN or delete the WLAN itself.</li></ul> Note: If deleting a WLAN, ensure it is not enabled in any Venue. Passphrase Associations: <ul><li>Confirm whether any Passphrases are tied to the DPSK service.</li><li>Delete these Passphrases before proceeding</li></ul> 5. Delete the Identity Group Once all dependencies have been removed, navigate to: Clients ? Identity Groups ? Select the Identity Group ? Delete The Identity Group should now delete successfully.

This article provides guidance on safely removing an identity group from the DPSK Server within Ruckus One, even when the group is currently in use. It outlines the dependencies that must be identified and cleared—such as associated user profiles or policies—before the identity group can be deleted. Following these steps helps prevent configuration conflicts and ensures a smooth removal process.

2026-03-11T02:59:57-0700 2026-03-11T14:00:08-0700 https://support.ruckuswireless.com/articles/000006104 2026-03-10T01:35:12-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_6126 knowledge_article_6126 2016-10-25T16:36:02-0700 000006104 Validated (External) Public All;Brocade Mobility 6511 Wallplate Access Point Known issues and workarounds;Support license activation;Registration Known Issues and Workarounds, Support License Activation, Registration, All How to Renew Your Ruckus Support Contract How to Renew Your Ruckus Support Contract As a valued Ruckus end customer, ensuring continuous support for your Ruckus products is crucial. If your existing Ruckus support contract is nearing expiration and you would like to renew it, follow the steps outlined below: <h3>Step 1: Contact Your Ruckus Reseller</h3> The first and most straightforward way to renew your Ruckus support contract is to get in touch with your Ruckus reseller. Your reseller will have all the necessary information about your current contract and can guide you through the renewal process efficiently. <h3>Step 2: Identifying Your Reseller</h3> If you are unsure who your Ruckus reseller is, don't worry. We have made it easy for you to find out: <ul><li>Email Us: Send an email to <a href="mailto:ruckus.renewals@ruckusnetworks.com" target="_blank">ruckus.renewals@ruckusnetworks.com</a> Please include your company name and any relevant details about your existing contract in the email. Our team will respond promptly with the information you need.</li><li>Call Us: You can also reach out to us by phone at 855-782-5871, then select Option 2. Our Renewals Sales Specialists are ready to assist you in identifying your reseller and answering any questions you may have about the renewal process.</li></ul> <h3>Why Renew Your Ruckus Support Contract?</h3> Renewing your Ruckus support contract ensures that you continue to receive the following benefits: <ul><li>Access to Technical Support: Get 24/7 expert assistance whenever you encounter issues with your Ruckus products.</li><li>Software Updates and Upgrades: Stay up-to-date with the latest features and enhancements by receiving regular software updates.</li><li>Peace of Mind: Enjoy uninterrupted service and support, knowing that help is always available when you need it.</li></ul> <h3>Conclusion</h3> Renewing your Ruckus support contract is a simple process that guarantees ongoing support and updates for your Ruckus products. By contacting your reseller or reaching out to us directly, you can ensure that your network continues to operate smoothly and efficiently. For any additional questions or assistance, please do not hesitate to contact us at <a target="_blank">https://support.ruckuswireless.com/contact-us</a>. We are here to help!

Article has got information about whom to reach for renewing the contract on Ruckus products

2026-03-10T01:35:12-0700 2026-03-11T02:00:09-0700 https://support.ruckuswireless.com/articles/000001754 2026-03-10T01:43:21-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_6125 knowledge_article_6125 2013-03-05T22:09:18-0800 000001754 Validated (External) Public Ruckus support services Website access;Website services Website Access, Website Services, Ruckus Support Services Who do I contact to resolve RUCKUS Partner Portal login issues? If you are unable to login to the Partners portal (https://partners.ruckuswireless.com/), please reach out to our partners team at <a href="mailto:ruckuschannel@ruckusnetworks.com" target="_blank">ruckuschannel@ruckusnetworks.com</a> with the below details. Email ID - One registered in the partner portal Login ID Full Name Ruckus Partners team will get back to you and assist further on the login issue.

Whom to contact on the Partners login issue?

2026-03-10T01:43:21-0700 2026-03-11T02:00:09-0700 https://support.ruckuswireless.com/articles/000015226 2026-03-10T03:13:02-0700 monthly 0.8 admin,premium knowledge_article_6128 knowledge_article_6128 2026-03-10T03:13:02-0700 000015226 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches How do I configure Time Profile on an ICX switch? What is the alternative to Batch commands on ICX switches? Configuration : In the below example VLAN 2 is being added to the switch and date and time of execution is configured Please find the command details below <pre> ICX8200-48P Router(config)#time-profile test ICX8200-48P Router(config-time-profile-turnoff)#start 09-3-2025 ICX8200-48P Router(config-time-profile-turnoff)#command-list ICX8200-48P Router(config-time-profile-turnoff-command-list)#add "vlan 2" ICX8200-48P Router(config-time-profile-turnoff-command-list)#exi ICX8200-48P Router(config-time-profile-turnoff)#execution-time 13:31 ICX8200-48P Router(config-time-profile-turnoff)#schedule</pre> From running config ! time-profile test start-date 09-3-2025 execution-time 13:31 command-list add "vlan 1" exit schedule ! Show outputs: ICX8200-24 Router#show time-profile profile test Time-profile test -------------------------------------- Type : One-time Start date : 09-3-2025 Termination date : Not Applicable Execution time : 13:31 System Time : Sep-03-2025 13:31 GMT+00 Repeat : Not Applicable Command List ------------ vlan 1 Status : Expired Last executed on : 09-03-2025 13:31 ICX8200-24 Router#show time-profile brief Profile Type Status Last executed on ------------------------------------------------------------------------- test One-time Expired 09-03-2025 13:31 Guide link: <ul><li>https://docs.commscope.com/bundle/fastiron-10020-managementguide/page/GUID-AC864014-D291-447C-97CB-5C75B211B80A.html</li></ul>

Time Profile is a configuration feature on ICX devices that allows predefined CLI commands to run automatically on a scheduled basis. This capability streamlines network operations, enhances efficiency, and reduces the risk of manual errors. It also serves as a alternative to the deprecated Batch command functionality and is supported on software versions 10.0.20a and later.

2026-03-10T03:13:02-0700 2026-03-11T02:00:08-0700 https://support.ruckuswireless.com/articles/000015227 2026-03-10T03:25:31-0700 monthly 0.8 admin,premium knowledge_article_6127 knowledge_article_6127 2026-03-10T03:25:31-0700 000015227 Validated (External) Premium Is MCT supported in 7550 switch ? MCT is supported on the 7550 switch starting from version 10.0.20a and above Below is the picture : <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002CI1&feoid=00N50000002Cf3M&refid=0EMRk00000I0geP"></img>Link: https://docs.commscope.com/bundle/fastiron-10020-featuresupportmatrix/page/GUID-32BEF8CA-4A46-4230-8C66-0E2AFBCAF5FF.html

MCT is supported in 7650 and 7850 switch models only on version earlier , from 10.0.20a MCT is also supposed in 7550 models

2026-03-10T03:25:31-0700 2026-03-11T02:00:08-0700 https://support.ruckuswireless.com/articles/000015229 2026-03-02T05:07:02-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6121 knowledge_article_6121 2026-03-02T05:07:02-0800 000015229 Validated (External) Public Ruckus network director rnd;Ruckus diagnostic dashboard rdd;Smartcell gateway;Smart wireless services;SmartCell Gateway 200 (SCG200) Support license activation Support License Activation, Ruckus Network Director RND, Ruckus Diagnostic Dashboard RDD, SmartCell Gateway, Smart Wireless Services Why does the Support Portal display a message requesting administrator assignment during login, and how can a customer add an Account Administrator when none exists on the account? During login, the Support Portal validates whether an Account Administrator exists for the account. If no administrator is present, users will see a pop-up message indicating that administrator assignment is required before continuing. <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002DAr&feoid=00N50000002Cf3M&refid=0EMRk00000I137x"></img> The message informs the user that: <blockquote> No Account Administrator exists for the account and administrator assignment is required before continuing. </blockquote> In this state: <ul><li> Users cannot perform administrative actions. </li><li> Certain account settings are inaccessible. </li><li> Access is limited until an Administrator is assigned. </li></ul> <h2>Why an Account Administrator is Required</h2> The Account Administrator role is responsible for managing: <ul><li> Account-level settings </li><li> User access and permissions </li><li> License and entitlement administration </li><li> Support Portal account ownership </li></ul> For security reasons, administrator privileges cannot be self-assigned by users. <h2>How to Elevate Access from Operator to Administrator</h2> Operator users must request administrator elevation through RUCKUS Support. <h3>Step 1 — Contact RUCKUS Support</h3> Open a support request requesting Administrator assignment for the account. <h3>Step 2 — Provide Required Authorization</h3> The following documentation must be submitted for verification: <ol><li> Company Letterhead <ul><li> Official company document confirming organization identity. </li></ul> </li><li> Executive Approval <ul><li> Written authorization from a company executive approving administrator access. </li><li> Must include: <ul><li> User name </li><li> User email address </li><li> Approval to grant Administrator privileges. </li></ul> </li></ul> </li></ol> <h3>Step 3 — Support Verification</h3> RUCKUS Support will: <ol><li> Validate submitted documentation. </li><li> Confirm authorization. </li><li> Assign Administrator privileges to the approved user.. </li></ol> <h2>After Administrator Assignment</h2> Once elevation is completed: <ul><li> The user role changes from Operator to Administrator. </li><li> Full account administration capabilities become available. </li><li> Restricted account settings can be accessed and managed. </li></ul> <h2>Important Notes</h2> <ul><li> Administrator access cannot be granted without authorization documents. </li><li> Operator users cannot elevate their own privileges. </li><li> At least one Account Administrator must exist for proper account management. </li><li> If all administrators leave an organization, a new administrator must be formally assigned through Support. </li></ul>

2026-03-02T05:07:02-0800 2026-03-06T10:00:07-0800 https://support.ruckuswireless.com/articles/000015224 2026-02-27T01:22:45-0800 monthly 0.8 admin,premium knowledge_article_6120 knowledge_article_6120 2026-02-27T01:22:45-0800 000015224 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security Configuration, Security, SmartCell Gateway How to enable/disable legacy ssh algorithm from SSH SZ ? The user need to login to v/SZ CLI as admin and from config mode enable below : vSZ-2026# config vSZ-2026(config)# ssh-security-level ----- --------- --------------------------------------------------------------------------------------------------- 1 default The default security level with the highest compatibility. 2 medium Fulfill most of the security requirements with less compatibility. 3 high Strong security strength with less compatibility. WARNING: ICX switches/routers running firmware lower than 09.10 will not be able to connect to the SZ in the low compatible ssh algorithm. But connected switches with unsupported firmware continue to be registered until they are rejoined. Do you want to continue? (or input 'no' to cancel)? [yes/no] yes Successful operation - ssh security level [medium] CLI confirm message <table><colgroup></colgroup><tbody><tr><th colspan="1" rowspan="1"> level </th><th colspan="1" rowspan="1"> message </th></tr><tr><td colspan="1" rowspan="1"> default </td><td colspan="1" rowspan="1"> Do you want to continue? </td></tr><tr><td colspan="1" rowspan="1"> medium </td><td colspan="1" rowspan="1"> WARNING: ICX switches/routers running firmware lower than 09.10 will not be able to connect to the SZ in the low compatible ssh algorithm. But connected switches with unsupported firmware continue to be registered until they are rejoined. Do you want to continue? </td></tr><tr><td colspan="1" rowspan="1"> high </td><td colspan="1" rowspan="1"> WARNING: ICX switches/routers running firmware lower than 09.10 will not be able to connect to the SZ in the low compatible ssh algorithm. But connected switches with unsupported firmware continue to be registered until they are rejoined. Do you want to continue? </td></tr></tbody></table> Note : Once the ssh security level is changed it would disconnect all connected APs/Switch since the config change require terminating all existing ssh tunnels. The confirm message on CLI while changing the level would be "The <> level will apply to ssh tunnels.Do you want to terminate all exist ssh tunnels".

This feature is use SZ CLI to update ssh security level from SSH SZ to satisfy customer security concern, and ensure there is no impact for SZ.

2026-02-27T01:22:45-0800 2026-03-02T06:00:07-0800 https://support.ruckuswireless.com/articles/000015223 2026-02-26T13:18:04-0800 monthly 0.8 admin,premium knowledge_article_6119 knowledge_article_6119 2026-02-26T13:18:04-0800 000015223 Validated (External) Premium Cloud services System network management;Troubleshooting System Network Management, Troubleshooting, Cloud Services This message is to reinforce our commitment to protecting your privacy and ensuring complete transparency when accessing your RUCKUS One account for support purposes. How We Handle Remote Support Access: To provide accurate and effective assistance, our support engineers may need temporary access to customers RUCKUS One account. We follow a strict customer?first process to ensure End Customer Approval. 1.Customers can decide when remote support is enabled. We will always ask customers to enable remote support from there side when needed for Troubleshooting. 2. Customers explicit consent is required. If you are unable to enable it, we will request your clear permission before enabling remote support on your behalf. 3. Access is time?limited and requires renewal. Remote support access automatically expires after 7 days. If more time is needed, we will reach out and request your permission again before re?enabling access. 4. No access without Customer approval. Remote support will never be enabled without your confirmation—unless you have already provided approval for the duration of your active case. Why This Matters Customers Privacy and Data Security are our top Priorities. We take your trust seriously, and we ensure that any access to customers account is performed only with your knowledge and consent. This protects your data, ensures transparency, and maintains a secure and professional support experience. <a href="https://support.ruckuswireless.com/ruckus-one-terms-and-conditions" target="_blank">https://support.ruckuswireless.com/ruckus-one-terms-and-conditions</a>

This article provides detailed information about the RUCKUS One Remote Support process, including user consent requirements and remote support access procedures.

2026-02-26T13:18:04-0800 2026-02-27T02:00:08-0800 https://support.ruckuswireless.com/articles/000010061 2026-02-26T07:39:32-0800 monthly 0.8 admin,premium knowledge_article_6118 knowledge_article_6118 2020-01-03T02:28:50-0800 000010061 Validated (External) Premium Icx 7650;RUCKUS ICX 7650 Campus Switches Configuration;Installation Configuration, Installation, ICX 7650 How to change ICX7650 stacking ports from 100G to 40G? The rear module of the ICX7650 can be used as 40G or 100G for stacking. Configure the ICX7650 to use 40G ports as the stacking ports. device# configure terminal device(config)# rear-module stack-40g device(config)# write memory device(config)# exit device# reload Confirm the configuration by running "show run" command Current configuration: ! ver 08.0.70dT233 ! stack unit 1 module 1 icx7650-48p-port-management-module module 3 icx7650-qsfp-4port-160g-module ------> configured as 40G ports ! ! ! ! ! ! ! ! ! ! ! rear-module stack-40g !

ICX7650 stacking ports can only be changed by CLI command.

2026-02-26T07:39:32-0800 2026-02-27T02:00:08-0800 https://support.ruckuswireless.com/articles/000010734 2026-02-23T06:36:50-0800 monthly 0.8 admin,premium knowledge_article_6113 knowledge_article_6113 2020-07-16T02:35:02-0700 000010734 Validated (External) Premium Sz300;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Configuration Configuration, SZ300 What is the port layout information of SZ-300 data plane? The upper card is for Dataplane 1(D1) and the lower card is for Dataplane 0(D0). <img alt="User-added image" height="378" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qiv&feoid=00N50000002Cf3M&refid=0EM2J000001TKWy" width="500"></img>

SZ-300 has port label for CP ports, but no label for DP ports

2026-02-23T06:36:50-0800 2026-02-26T10:00:15-0800 https://support.ruckuswireless.com/articles/000015180 2026-02-23T08:48:27-0800 monthly 0.8 admin knowledge_article_6112 knowledge_article_6112 2026-02-22T19:04:44-0800 000015180 Validated (External) Internal Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath How to block non-domain PCs from joining the corporate WLAN This device configuration allows us to deny network access to non-domain joined PCs using Cloudpath network installer. Users/ employees with valid AD credentials can complete onboarding workflow on their personal PCs, but will be denied access at the time on joining the WLAN shen the .exe or zip network installer file. <ul><li>Login to Cloudpath </li><li>Under device configuration </li><li>OS settings > Windows Setting </li><li>Add setting > Under NAC settings > Set Windows domain needs to be joined > Click Next </li><li>Enter Windows domain name and save settings.</li></ul> <img alt="User-added image" height="309" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002Bqb&feoid=00N50000002Cf3M&refid=0EMRk00000GvNl3" width="595"></img> In the ensuing page, under "NAC Settings" set "Windows Domain needs to be" to "Joined" state and click Nest <img alt="User-added image" height="434" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002Bqb&feoid=00N50000002Cf3M&refid=0EMRk00000GvNrV" width="542"></img> Enter the PCs correct domain name and click Save <img alt="User-added image" height="229" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002Bqb&feoid=00N50000002Cf3M&refid=0EMRk00000GvNjS" width="740"></img> lease note: a non domain device is allowed complete the workflow/ enrollment process and download the network installer file. The check is done only after the installer file is run. The following message is seen when a non domain device tries to run the network installer file. <img alt="User-added image" height="782" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002Bqb&feoid=00N50000002Cf3M&refid=0EMRk00000HnL4j" width="500"></img> Important: The domain check of devices can be bypassed if the user chooses "Other OS Systems" and manually install the CA certificate and the user certificates and connect to the corporate WLAN manually. Hence it would be advisable to disable this under Device Configuration > OS settings > Disable "Manually Configured OS-Settings"

This article explains how Cloudpath can be used to block non-domain joined laptops/ PCs from installing the network configuration and joining the corporate WLAN. This prevents employees with valid AD/ corporate credentials from using their personal or non-domain joined devices on the corporate WLAN

2026-02-23T08:48:27-0800 2026-02-26T10:00:15-0800 https://support.ruckuswireless.com/articles/000014443 2026-02-23T06:35:22-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6114 knowledge_article_6114 2024-09-03T05:07:16-0700 000014443 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How to create Soft GRE profile and map this to the required WLAN You can configure the Soft GRE tunnel profile of the controller to manage AP traffic. Select Services > Tunnels and Ports >Select Soft GRE and click Create. <img alt="User-added image" height="330" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001pA9&feoid=00N50000002Cf3M&refid=0EMPH000009iUDL" width="598"></img> Navigate to Access Points TAB > Choose the AP zone where you have the VoIP WLANs > Click edit (pencil icon) > In the ensuing screen scroll down to "AP GRE Tunnel options" > Click the "Select" button highlighted below > Choose the Soft GRE profile you had created from the "Available profiles" and move it to the "Selected profiles" section and click OK > Click on on the AP zone page as well. <img alt="User-added image" height="357" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001pA9&feoid=00N50000002Cf3M&refid=0EMPH000009ia94" width="666"></img> <img alt="User-added image" height="484" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001pA9&feoid=00N50000002Cf3M&refid=0EMRk00000GRmwz" width="628"></img> Now Navigate to Wireless LAN > select the Wireless LAN from the Zone where you have done the Soft GRE mapping in the AP zone > Choose the VoIP WLAN > Click "Configure" button > Scroll down to "Data Plane options" and enable tunnel WLAN option > Click on the dropdown for GRE tunnel profile , here you can choose the Soft GRE profile you have already created > save settings <img alt="User-added image" height="175" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001pA9&feoid=00N50000002Cf3M&refid=0EMRk00000GRn53" width="633"></img>

This article explains the process of creating a Soft GRE profile and mapping it to a WLAN.

2026-02-23T06:35:22-0800 2026-02-26T10:00:15-0800 https://support.ruckuswireless.com/articles/000014407 2026-02-23T10:23:04-0800 monthly 0.8 admin,premium knowledge_article_6116 knowledge_article_6116 2024-07-29T10:10:30-0700 000014407 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Installation;Known issues and workarounds Installation, Known Issues and Workarounds, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP What actions should be taken if duplicate access point serial numbers are identified on the controller ? Please confirm access point duplicate serial numbers via the following procedure: <ol><li>Verify the access point product, model, serial number, and MAC address sticker, and take a photo to be submitted to Ruckus support.</li><li>Use the AP CLI command "get boarddata" to confirm the product, model, serial number, and MAC address, and save the output to be submitted to Ruckus support.</li></ol> Submit the collected information to Ruckus technical support for resolution.

This article describes the actions that should be taken if duplicate access point serial numbers are identified on the controller

2026-02-23T10:23:04-0800 2026-02-26T10:00:14-0800 https://support.ruckuswireless.com/articles/000013920 2026-02-23T10:18:51-0800 monthly 0.8 admin,premium knowledge_article_6117 knowledge_article_6117 2022-11-15T12:51:30-0800 000013920 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ144, SZ300, virtual SmartCell Gateway, SZ100 <div>Why can't I see any user sessions in the SZ WEB UI Session Management tab?</div> The inability of non-admin users to view session information in the SZ WEB UI is due to permission control. Only admin users have the privilege to view and act upon active sessions for security and operational integrity.

Non-admin (read-only) users cannot view other user sessions in the SZ WEB UI Session Management tab due to role-based permission restrictions.

2026-02-23T10:18:51-0800 2026-02-26T10:00:14-0800 https://support.ruckuswireless.com/articles/000014431 2026-02-23T11:13:18-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6115 knowledge_article_6115 2024-08-27T12:59:01-0700 000014431 Validated (External) Public R720 unl;Sz144;Ruckus cloud wifi;Sz300;Virtual smartcell gateway;Sz100;Zonedirector 1200;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D);ZoneDirector 1200 Configuration;Troubleshooting Configuration, Troubleshooting, R720 UNL, SZ144, Ruckus Cloud WiFi, SZ300, virtual SmartCell Gateway, SZ100, ZoneDirector 1200 How to troubleshoot Captive Portal Redirection and Authentication issues? <ul style="margin-left: 80px;"><li style="margin-left: 40px;">Ensure the user gets the IP address from the initial VLAN and DNS can send the DNS response. </li><li style="margin-left: 40px;">The user should be able to reach to the Captive Portal.</li><li style="margin-left: 40px;">When using the AAA server the respective ports are allowed for the communication with SZ/AP/R1.</li></ul>

This document provides a comprehensive guide to troubleshoot Captive Portal or WISPr redirection issues. It includes understanding the flow of authentication, identifying where it’s breaking, necessary steps, troubleshooting tips, and resolution methods.

2026-02-23T11:13:18-0800 2026-02-26T10:00:13-0800 https://support.ruckuswireless.com/articles/000014639 2026-02-18T06:28:30-0800 monthly 0.8 admin,premium knowledge_article_6111 knowledge_article_6111 2024-12-23T15:57:03-0800 000014639 Validated (External) Premium Vriot Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, vRIoT Why is my vRIOT instance keep hanging and requires a reboot from the Host Server to recover it? We have explained that we have seen similar issues in the past and the resolution to this issue is to upgrade the Hypervisor Platform. While we can use vRIOT on Intel NUC for the Lab and Demo's, we do not recommend using vRIOT on NUC for the production environment. We must ensure that vRIOT is running on an Enterprise Level Blade Server with following resources to a minimum on the Hypervisor: <img alt="User-added image" height="224" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002Ahd&feoid=00N50000002Cf3M&refid=0EMPH00000F4zaY" width="927"></img>

This article explains a scenario where vRIOT would keep locking up every few days and requires a reboot from the host server to recover its access.

2026-02-18T06:28:30-0800 2026-02-23T10:00:13-0800 https://support.ruckuswireless.com/articles/000014850 2026-02-18T06:32:20-0800 monthly 0.8 admin,premium knowledge_article_5784 knowledge_article_5784 2025-06-10T10:48:35-0700 000014850 Validated (External) Premium Vriot Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, vRIoT Why are the Door locks not responding to the Commands sent from the Visionline Server? In order to isolate that, we changed the PAN ID for the Room (which was having the same issue ) by resetting the IOT Radio State from Zigbee-AA to Zigbee and then reverting back to Zigbee-AA. After making this change, the PAN-ID of the Zigbee-AA Radio updated from default value 1234 to a0ae and we ran the command from the Visionline, it was successful. <a href="https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdaemon.info%2F&data=05%7C02%7Cankush.chandan%40commscope.com%7C22ca4306dd154be2442408dd21074e62%7C31472f818fe449ec8bc3fa1c295640d7%7C0%7C0%7C638703037574907010%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=2LbHc3gqlksIH7twJh%2BmEdZlvMrda7X3N8f%2Frqj1Aw0%3D&reserved=0" style="color: blue;text-decoration: underline;" target="_blank">daemon.info</a> IOT_ZIGBEE: [P2][handleAATunnelData] Excecuting AA Tunnel Command <a href="https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdaemon.info%2F&data=05%7C02%7Cankush.chandan%40commscope.com%7C22ca4306dd154be2442408dd21074e62%7C31472f818fe449ec8bc3fa1c295640d7%7C0%7C0%7C638703037574926506%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=vR1%2FVA%2Fp221DZTkJGzIRXe%2B4NUWBh6yhaPAmmEOXqGE%3D&reserved=0" style="color: blue;text-decoration: underline;" target="_blank">daemon.info</a> IOT_ZIGBEE: [P2][AATunnelData] ##Command: custom raw_hex 0x0001 {f9e5d4d89bc4fe8fccd0be7ceb488a1a481836df4cc6affeb2020aa578c2e27654} <a href="https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdaemon.info%2F&data=05%7C02%7Cankush.chandan%40commscope.com%7C22ca4306dd154be2442408dd21074e62%7C31472f818fe449ec8bc3fa1c295640d7%7C0%7C0%7C638703037574941942%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=KB4%2BqYETMmSmncLF6lXhR3vKZ9wEV7NwprfquAV5gqY%3D&reserved=0" style="color: blue;text-decoration: underline;" target="_blank">daemon.info</a> IOT_ZIGBEE: [P2][AATunnelData] ##Command: send 0xa0ae 0x1 0x1 <a href="https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdaemon.info%2F&data=05%7C02%7Cankush.chandan%40commscope.com%7C22ca4306dd154be2442408dd21074e62%7C31472f818fe449ec8bc3fa1c295640d7%7C0%7C0%7C638703037574956705%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=hFvJ0jYhOJmUvZnPLp1k2hO7o5sZ%2FCqKdPIAATkR99U%3D&reserved=0" style="color: blue;text-decoration: underline;" target="_blank">daemon.info</a> IOT_ZIGBEE: [P2][emberLog] CLI command executed: network set 0 <a href="https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdaemon.info%2F&data=05%7C02%7Cankush.chandan%40commscope.com%7C22ca4306dd154be2442408dd21074e62%7C31472f818fe449ec8bc3fa1c295640d7%7C0%7C0%7C638703037574970830%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=arEvzEj9FXpGXKaBO8Ze1gpM28wP5WGcehtcgZaIOeI%3D&reserved=0" style="color: blue;text-decoration: underline;" target="_blank">daemon.info</a> IOT_ZIGBEE: [P2][emberLog] Msg: clus 0x0001, cmd 0xD4, len 33 <a href="https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdaemon.info%2F&data=05%7C02%7Cankush.chandan%40commscope.com%7C22ca4306dd154be2442408dd21074e62%7C31472f818fe449ec8bc3fa1c295640d7%7C0%7C0%7C638703037574984993%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=gha2LijOqWWcjpqHBEnzId4qsemGkEdpeWA8dPRby1Q%3D&reserved=0" style="color: blue;text-decoration: underline;" target="_blank">daemon.info</a> IOT_ZIGBEE: [P2][emberLog] buffer: <a href="https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdaemon.info%2F&data=05%7C02%7Cankush.chandan%40commscope.com%7C22ca4306dd154be2442408dd21074e62%7C31472f818fe449ec8bc3fa1c295640d7%7C0%7C0%7C638703037574999089%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=P7HrllK5hGVTvzLbFPdjz2ITLHDK2jZ56gyS6Y12E%2F0%3D&reserved=0" style="color: blue;text-decoration: underline;" target="_blank">daemon.info</a> IOT_ZIGBEE: [P2][emberLog] F9 <a href="https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdaemon.info%2F&data=05%7C02%7Cankush.chandan%40commscope.com%7C22ca4306dd154be2442408dd21074e62%7C31472f818fe449ec8bc3fa1c295640d7%7C0%7C0%7C638703037575013256%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Pnfhx3bFVRVMaW6NEF5LScekAKyvYn%2BUVLHmCZSlbLI%3D&reserved=0" style="color: blue;text-decoration: underline;" target="_blank">daemon.info</a> IOT_ZIGBEE: [P2][emberLog] E5 <a href="https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdaemon.info%2F&data=05%7C02%7Cankush.chandan%40commscope.com%7C22ca4306dd154be2442408dd21074e62%7C31472f818fe449ec8bc3fa1c295640d7%7C0%7C0%7C638703037575523018%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=TpAtVmtCj0fAHdO4a4UWWJIcscLKLICEid%2FA%2Fp8wV6A%3D&reserved=0" style="color: blue;text-decoration: underline;" target="_blank">daemon.info</a> IOT_ZIGBEE: [P2][emberLog] CLI command executed: custom raw_hex 0x0001 {f9e5d4d89bc4fe8fccd0be7ceb488a1a481836df4cc6affeb2020aa578c2e27654} <a href="https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdaemon.info%2F&data=05%7C02%7Cankush.chandan%40commscope.com%7C22ca4306dd154be2442408dd21074e62%7C31472f818fe449ec8bc3fa1c295640d7%7C0%7C0%7C638703037575537108%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=i90j0Fzb11dO%2BoEKbpWRRSgdK3VhMnEcdBSeCJe%2BqmY%3D&reserved=0" style="color: blue;text-decoration: underline;" target="_blank">daemon.info</a> IOT_ZIGBEE: [P2][emAfSend] Dev nodeid a0ae, Nwk Index 0 <a href="https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdaemon.info%2F&data=05%7C02%7Cankush.chandan%40commscope.com%7C22ca4306dd154be2442408dd21074e62%7C31472f818fe449ec8bc3fa1c295640d7%7C0%7C0%7C638703037575550950%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=aSCQHboJHngpT1WAR%2Fx4bHDNPACnfh8SeMb24NE7x9U%3D&reserved=0" style="color: blue;text-decoration: underline;" target="_blank">daemon.info</a> IOT_ZIGBEE: [P2][emberLog] CLI command executed: send 0xa0ae 0x1 0x1 Further the next task is to identify the list of AP's with default PAN ID, and change the PAN ID on those AP's using following steps: IMPORTANT: Please note, once you change the radio mode, it will delete the associated IOT device and you would need to re-onboard it. <ul><li>Change the Radio Mode of the AP from Zigbee AA to Zigbee using Bulk mode operation available in 2.3.1 Release. For the older versions, . Mode change removes the door lock from the device list.</li><li>After a wait for 3-5 minutes when the Radio will revert its mode to Zigbee, we revert the mode back to Zigbee AA.</li><li>Once we confirm the Mode is changed and the PAN ID is updated to other than 0x1234, scan for the IOT Devices and Tap the Master Key to onboard the lock.</li><li>Once Door lock will show online, repeat the same step to the Next AP/Door.</li></ul> RUCKUS IOT 2.x and above, also offers Orphan recovery mechanism, which will help avoiding us tapping an onboarding each lock. We need to follow below steps for the bulk onboarding: Step1: We have the list of door locks which have default PAN ID, we need to export a prepare a Bulk list csv of these Devices by adding the corresponding AP MAC and Door Lock MAC to the attached Bulk Add List: <img alt="User-added image" height="83" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002Akr&feoid=00N50000002Cf3M&refid=0EMPH00000LC8If" width="500"></img> Step2 : We recommend to perform the test with single door first and confirm if it re-onboards fine. So for the first step, change the Radio Mode of the AP from Zigbee AA to Zigbee and then after a few minutes change it back to Zigbee-AA. Once the mode is changed, upload the pre-approved device list, in this case, single device and in a few minutes, the device will automatically show online on the associated AP <img alt="User-added image" height="499" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002Akr&feoid=00N50000002Cf3M&refid=0EMPH00000LC7BK" width="805"></img> Step3: Followed by that, using the Bulk Device Sheet, we would extend this action to one floor. If everything works great, we would onboard the rest following the Batch process: <img alt="User-added image" height="492" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002Akr&feoid=00N50000002Cf3M&refid=0EMPH00000LC0JZ" width="465"></img>

This article explains a situation where Assa Abloy Door locks are not responding to the Commands sent from the HMS or Visionline Server.

2026-02-18T06:32:20-0800 2026-02-23T10:00:13-0800 https://support.ruckuswireless.com/articles/000014634 2026-02-18T06:36:23-0800 monthly 0.8 admin,premium knowledge_article_6110 knowledge_article_6110 2024-12-16T19:09:37-0800 000014634 Validated (External) Premium Vriot Configuration;Firmware Configuration, Firmware, vRIoT How do I create config DB backup of an IOT controller ? In order to collect the DB backup of the vRIOT, follow below steps: - Navigate to the Admin> DB Backup - Click on the Create Backup button and wait for it to finish - Download the backup file to your local machine and save it for future references. <img alt="DB Backup" height="367" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002AmT&feoid=00N50000002Cf3M&refid=0EMPH00000EnxBm" width="915"></img>

This article is provides guidelines on how to create config db backup of the vRIOT Controller before performing an upgrade.

2026-02-18T06:36:23-0800 2026-02-23T10:00:12-0800 https://support.ruckuswireless.com/articles/000010132 2026-02-17T06:56:53-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4084 knowledge_article_4084 2020-02-28T04:50:19-0800 000010132 Validated (External) Public Vriot Configuration;Troubleshooting Configuration, Troubleshooting, vRIoT <div>Why are the services in an offline state for hours on a new vRIoT controller instance?</div> <div> To bring services online, ensure the following ports are open in the network: <ul><li>Port 123 (NTP) – Required for time synchronization</li><li>Port 1883 – MQTT communication</li><li>Port 8883 – Secure MQTT communication</li></ul> Once these ports are allowed, the vRIoT services will start successfully. </div>

This article explains why services may remain in an offline or starting state for hours on a newly deployed vRIoT (Ruckus IoT Controller) instance.

2026-02-17T06:56:53-0800 2026-02-18T10:00:10-0800 https://support.ruckuswireless.com/articles/000011161 2026-02-17T11:30:28-0800 monthly 0.8 admin,premium knowledge_article_6109 knowledge_article_6109 2020-12-10T01:08:13-0800 000011161 Validated (External) Premium Vriot Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, vRIoT Why does Visionline server shows Door locks offline while Door locks are online of the vRIOT controller? This was an external issue on the Visionline Server configuration. There was problem with the privileges of the admin account (ruckus in this case) configured on the Visonline Server. This is used on vRIOT to configure Assa-Abloy plugin. Privileges were set to Front Desk, while it supposed to be System Manager. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002AXx&feoid=00N50000002Cf3M&refid=0EM2J000002IrrU"></img> To confirm we used a User account with System Manager privileges. The default username and password for Sym Admin Operator is user: sym Password : sym. We used this to test and Door lock status started to show Online on Visionline. Further we changed the privileges for the admin login( ruckus) role to System Manager which fixed the issue. Ruckus strongly recommend consulting Assa-Abloy for any configuration changes on the Visionline server.

This article explains why IOT IOT Zigbee-AA Door locks are online of the vRIOT controller but the Visionline server shows Door locks as offline

2026-02-17T11:30:28-0800 2026-02-18T10:00:09-0800 https://support.ruckuswireless.com/articles/000011350 2026-02-17T07:44:52-0800 monthly 0.8 admin,premium knowledge_article_4500 knowledge_article_4500 2021-02-09T23:57:51-0800 000011350 Validated (External) Premium Vriot Performance;Installation Performance, Installation, vRIoT <div>What are the recommended hardware resource requirements for the Ruckus IoT Controller?</div> <div> <h3>Supported Hypervisors</h3> Ruckus IoT Controller can be deployed on the following hypervisors: <div> <table><tbody><tr><th colspan="1" rowspan="1">Hypervisor</th><th colspan="1" rowspan="1">Vendor</th><th colspan="1" rowspan="1">Version</th></tr><tr><td colspan="1" rowspan="1">ESXi</td><td colspan="1" rowspan="1">VMware</td><td colspan="1" rowspan="1">6.0 and later</td></tr><tr><td colspan="1" rowspan="1">KVM</td><td colspan="1" rowspan="1">Linux</td><td colspan="1" rowspan="1">2.11.1 or later</td></tr><tr><td colspan="1" rowspan="1">Hyper?V</td><td colspan="1" rowspan="1">Microsoft</td><td colspan="1" rowspan="1">Windows 6.2 or later</td></tr></tbody></table> </div> Note: For compatible server hardware, refer to the respective hypervisor vendor’s official documentation. <hr></hr> <h2>Recommended Server Specifications for Typical Deployments</h2> For standard IoT environments involving RUCKUS IoT Controller, VMware ESXi, Ubuntu Server, IP camera VMS, or additional IoT VMs: <ul><li>CPU: 4?core Intel i7 or equivalent</li><li>Memory: 32 GB</li><li>Storage: 1 TB HDD with minimum 500 KBps read/write throughput</li></ul> <blockquote> Actual resource requirements may vary depending on the number of VMs running on the hypervisor. </blockquote> <hr></hr> <h2>Minimum VM Requirements for Ruckus IoT Controller Installation</h2> The virtual machine hosting the Ruckus IoT Controller must meet the following minimum requirements: <ul><li>vCPUs: 4</li><li>RAM: 4 GB</li><li>HDD: 100 GB</li><li>Network Ports: 80, 123 (NTP), 443, 8883 must remain open</li></ul> Note: <ul><li>The HDD allocation is Fixed 20GB</li></ul> <hr></hr> <h2>Recommended VM Resources for High?Scale Deployments</h2> For large-scale or resource?intensive IoT environments: <ul><li>vCPUs: Minimum 8</li><li>RAM: Minimum 8 GB</li></ul> Reference: Always refer to the Controller Installation Guide for the latest hardware requirements <a href="https://support.ruckuswireless.com/documents/5908-ruckus-iot-3-0-0-0-ga-controller-installation-guide" target="_blank">https://support.ruckuswireless.com/documents/5908-ruckus-iot-3-0-0-0-ga-controller-installation-guide</a> </div>

This article outlines the recommended hardware and virtual resource requirements necessary for optimal performance of the Ruckus IoT Controller (vRIOT) across supported hypervisor platforms.

2026-02-17T07:44:52-0800 2026-02-18T10:00:09-0800 https://support.ruckuswireless.com/articles/000014503 2026-02-17T12:18:26-0800 monthly 0.8 admin,premium knowledge_article_5523 knowledge_article_5523 2024-09-22T22:39:18-0700 000014503 Validated (External) Premium Vriot Performance;Installation;System network management;Known issues and workarounds Performance, Installation, System Network Management, Known Issues and Workarounds, vRIoT How do I gracefully shut down VRIOT for maintenance? At present, gracefully shutting down the VRIOT using CLI is not available. However, a feature request has been submitted for its inclusion.

Graceful shutdown of VRIOT is not available using CLI. Currently, to perform shutdown the user has to do it from VM machine.

2026-02-17T12:18:26-0800 2026-02-18T10:00:08-0800 https://support.ruckuswireless.com/articles/000011687 2026-02-17T12:32:31-0800 monthly 0.8 admin,premium knowledge_article_4692 knowledge_article_4692 2021-05-18T18:15:49-0700 000011687 Validated (External) Premium I100;Vriot Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, I100, vRIoT What is the significance of RSSI/LQI values for the IOT devices? *LQI:* Link Quality Indication (LQI) is a cumulative value used in multi-hop networks to assess the cost of a link in Zigbee and other stacks. *RSSI* Received Signal Strength Indicator as the name explains is a signal strength indication.RSSI is a measure of incoherent (raw) RF power in a channel. The RF power can come from any source: other IEEE802.15.4 transmitters, Bluetooth, WiFi, FSK, or background radiation. RSSI is also called Energy Detection (ED) Level and is used for Clear Channel Assessment (CCA). For a single-hop network, RSSI is used to measure LQI. There are four to five "extreme cases" that can be used to illustrate how RSSI and LQI works: 1. A weak signal in the presence of noise may give low RSSI and high LQI. 2. A weak signal in "total" absence of noise may give low RSSI and low LQI. 3. Strong noise (usually coming from an interferer) may give high RSSI and high LQI. 4. A strong signal without much noise may give high RSSI and low LQI. 5. A very strong signal that causes the receiver to saturate may give high RSSI and high LQI. Below Table proves the RSSI and its corresponding LQI range and the Connection Level between the IOT device and the IOT Gateway (AP) <table border="2" style="width: 500px;"><tbody><tr><td colspan="1" rowspan="1">RSSI in dBm</td><td colspan="1" rowspan="1">LQI</td><td colspan="1" rowspan="1">Connection Level</td></tr><tr><td colspan="1" rowspan="1">-95 to -85</td><td colspan="1" rowspan="1">0-30</td><td colspan="1" rowspan="1">Red Level</td></tr><tr><td colspan="1" rowspan="1">-85 to -75</td><td colspan="1" rowspan="1">30-60</td><td colspan="1" rowspan="1">Yellow Level </td></tr><tr><td colspan="1" rowspan="1">-75 and above</td><td colspan="1" rowspan="1">60+</td><td colspan="1" rowspan="1">Green Level</td></tr></tbody></table>

This Article provides the details on the RSSI LQI values seen for the IOT devices and what are the desired values for a stable communication between IOT devices and IOT Gateway

2026-02-17T12:32:31-0800 2026-02-18T10:00:07-0800 https://support.ruckuswireless.com/articles/000013964 2026-02-12T05:17:37-0800 monthly 0.8 admin,premium knowledge_article_4927 knowledge_article_4927 2022-12-20T17:29:33-0800 000013964 Validated (External) Premium I100;Vriot Configuration;Firmware;Installation;Troubleshooting;Known issues and workarounds Configuration, Firmware, Installation, Troubleshooting, Known Issues and Workarounds, I100, vRIoT Why IOT Controller could not see Assa Abloy Door locks in the Scan Window? For AssaAbloy door locks to work with Ruckus, Door will require ZigBee firmware of 3.1.62.1 or higher. We recommended to upgrade the Zigbee firmware on these door locks and after that we started to discover these locks.

This Article explains why IOT Controller could not see Assa Abloy Door locks in the Scan due to an older zigbee firmware in the door lock

2026-02-12T05:17:37-0800 2026-02-17T06:00:07-0800 https://support.ruckuswireless.com/articles/000014518 2026-02-03T07:11:29-0800 monthly 0.8 admin,premium knowledge_article_5528 knowledge_article_5528 2024-10-02T01:16:03-0700 000014518 Validated (External) Premium Ruckus analytics Configuration Configuration, Ruckus Analytics <div>Why does Ruckus AI?Driven Cloud RRM need Rogue AP detection to be enabled on zones or venues for optimum functionality?</div> <div> By design, Ruckus AI?Driven Cloud RRM automatically enables Rogue AP detection whenever it is applied to a venue or zone. This ensures that the RRM engine has access to real?time RF data, including the presence of rogue access points, allowing it to dynamically and intelligently adjust the channel plan. This behavior is documented in the public user guide: <a href="https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-1ADCEF12-8C7C-4DD7-AEC7-3E73608C4070.html" target="_blank">https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-1ADCEF12-8C7C-4DD7-AEC7-3E73608C4070.html</a> </div> <a href="https://RRM by design enables rogue AP detection for the venue when applied. This is mentioned in the public-facing doc: https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-1ADCEF12-8C7C-4DD7-AEC7-3E73608C4070.html" target="_blank"><img alt="User-added image" height="426" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000027mz&feoid=00N50000002Cf3M&refid=0EMPH00000Bgnaf" width="638"></img></a>

This article explains why enabling Rogue AP detection at the zone or venue level is essential for the optimal operation of Ruckus AI?Driven Cloud Radio Resource Management (RRM). Rogue AP detection allows the AI?RRM engine to accurately assess RF interference sources and dynamically optimize channel planning based on real?time RF conditions.

2026-02-03T07:11:29-0800 2026-02-12T06:00:09-0800 https://support.ruckuswireless.com/articles/000014921 2026-02-03T06:41:51-0800 monthly 0.8 admin,premium knowledge_article_5807 knowledge_article_5807 2025-07-11T13:11:26-0700 000014921 Validated (External) Premium Ruckus support services;Cloud services Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, Ruckus Support Services, Cloud Services <div> <ul><li>Why am I seeing an alert or error message when accessing a Venue in RUCKUS One?</li><li>What does the message “Some access points may not be compatible with certain features in this Venue” mean?</li><li>Are my access points <div> Clicking on the error will display the incompatible features along with suggested resolutions, as shown below. <img alt="User-added image" height="288" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000027jl&feoid=00N50000002Cf3M&refid=0EMPH00000MQD8D" width="917"></img> <h3></h3> <h3>1. Check AP Compatibility</h3> <ol><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Navigate to Venue > Access Points in RUCKUS One.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Enable the Feature Compatibility column.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Click the warning icon to view Incompatibility Details, including: <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">AP model</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Current firmware version</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Required firmware version</li></ul> </li></ol> <h3>2. Upgrade Firmware</h3> If the AP model is compatible but running an older firmware version, upgrade it to the minimum required firmware that supports the enabled feature. <h3>3. Replace Legacy APs</h3> If the AP model is end?of?life or fundamentally incompatible with the feature, replace it with a newer supported AP. <h3>4. Split or Segment the Venue</h3> If only some APs support advanced features, consider splitting the venue or creating separate AP groups so advanced features are applied only where supported. <blockquote> Clicking the warning message in the UI will display the incompatible features along with suggested remediation steps. </blockquote> <hr></hr> <h2>Supported Access Points for RUCKUS One</h2> <h3>Wi?Fi 7 Access Points</h3> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">R770</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">R670</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">T670</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">T670sn</li></ul> <h3>Wi?Fi 6E Indoor Access Points</h3> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">R560</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">R760</li></ul> <h3>Wi?Fi 6 (802.11ax) Indoor Access Points</h3> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">H350</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">H550</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">R350</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">R350e</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">R550</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">R650</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">R730 (supported with AP firmware version 6.2.0 or later)</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">R750</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">R850</li></ul> <h3>Wi?Fi 6 (802.11ax) Outdoor Access Points</h3> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">T350 Series</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">T750 Series</li></ul> </div>

When accessing a Venue in RUCKUS One™, you may see a warning stating that some access points are not compatible with certain features. This alert is informational and indicates that one or more APs in the venue do not support advanced Wi?Fi capabilities enabled in the configuration.

2026-02-03T06:41:51-0800 2026-02-12T06:00:09-0800 https://support.ruckuswireless.com/articles/000014709 2026-02-03T08:25:34-0800 monthly 0.8 admin,premium knowledge_article_6106 knowledge_article_6106 2025-02-23T22:30:51-0800 000014709 Validated (External) Premium Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi How to change or disable the “ap reboot timeout” in R1 UI? <div> <h3>Configure AP Reboot Timeout from ACX UI</h3> Administrators can now change or disable the AP reboot timeout directly from the R1 UI by following the steps below: <ol><li>Log in to the R1 UI.</li><li>Navigate to: Venue ? WiFi Configuration ? Advanced</li><li>Locate the option: AP Auto?Reboot on GW Timeout</li><li>Choose one of the following: <ul><li>Disable – Prevent the AP from rebooting on GW/Controller loss.</li><li>Enable and adjust timeout – Specify a custom timeout value.</li></ul> </li></ol> <blockquote> Note: These settings apply to both Gateway Loss and Controller/Server Loss scenarios. </blockquote> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000027ob&feoid=00N50000002Cf3M&refid=0EMRk00000HLtB1" width="690" height="569"></img> </div> Validate the same from AP CLI: rkscli: get acx ------ ACX Information ------ ACX Service is enabled. AP is managed by ACX. State: RUN Connection status: AP is approved by controller Server List: device.ruckus.cloud Configuration Update State: CONF_UPD_COMPLETE Configuration Update Time: Fri Jan 30 15:41:30 2026 Failover List: Not found Failover Max Retry: 2 ACX APR default URL: ap-registrar.ruckuswireless.com ACX heartbeat intervals: 30(sec) ACX gwloss|serverloss timeouts: 1800(sec)|7200(sec) Controller Cert Validation : enable Controller Cert Validation Result: success ----------------------------- OK

This article explains how to change or disable the AP reboot timeout behavior using the Ruckus One (R1) UI. This setting allows administrators to control whether an Access Point (AP) automatically reboots when it detects a Gateway Loss or Controller/Server Loss condition.

2026-02-03T08:25:34-0800 2026-02-12T06:00:08-0800 https://support.ruckuswireless.com/articles/000014009 2026-02-03T08:37:41-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6105 knowledge_article_6105 2023-02-15T05:38:59-0800 000014009 Validated (External) Public Ruckus cloud wifi;Cloudpath;Smartcell gateway;Cloudpath Enrollment System (ES);BPG_Cloudpath;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi, Cloudpath, SmartCell Gateway Why is captive portal appearing to be in a loop after entering the credentials? Add the below entry to the walled garden list of the WLAN *.ruckus.cloud Explanation: R1 listens on the below URL during POST authentication phase of redirection: https://<tenantID>.wispr.ruckus.cloud/SubscriberPortal/hotspotlogin <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026MH&feoid=00N50000002Cf3M&refid=0EM2J000004OLST"></img> If the above entry is not present in the walled garden, POST redirection process will keep looping and come back to the same screen over and over. Similarly in case of vSZ managed APs, add the vSZ controller's management IP in the walled garden list. Explanation: vSZ listens on the below URL during POST authentication phase of redirection. <img alt="User-added image" height="250" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026MH&feoid=00N50000002Cf3M&refid=0EMPH00000A2DD9" width="500"></img>

Explanation on one of the causes of authentication not succeeding . This is a simple solution but one that could be missed in the Cloud and vSZ environments

2026-02-03T08:37:41-0800 2026-02-12T06:00:08-0800 https://support.ruckuswireless.com/articles/000015095 2026-02-03T08:39:19-0800 monthly 0.8 admin,premium knowledge_article_6104 knowledge_article_6104 2025-11-04T08:18:15-0800 000015095 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Cloudpath How to configure the Regex and Variable Name under the User Information plugin in workflow Please find the User information pattern which is normally used. <img height="719" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026Kf&feoid=00N50000002Cf3M&refid=0EMRk00000F3XWf" width="998"></img> <h3>Input Field 1: First Name</h3> <ul><li> Label: First Name </li><li> Regex: <code>^[A-Za-z0-9_\-]+$</code> (This pattern typically allows letters, numbers, underscores, and hyphens.) </li><li> Variable Name: USERNAME </li></ul> <h3>Input Field 2: Last Name</h3> <ul><li> Label: Last Name </li><li> Regex: <code>^[A-Za-z0-9_\-]+$</code> (This pattern typically allows letters, numbers, underscores, and hyphens.) </li><li> Variable Name: SURNAME </li></ul> <h3>Input Field 3: Email</h3> <ul><li> Label: Email </li><li> Regex: <code>.*@.*</code> (A very simple regex that requires an <code>@</code> symbol anywhere in the input.) </li><li> Variable Name: EMAIL </li></ul> <h3>Input Field 4: Phone</h3> <ul><li> Label: Phone </li><li> Regex: (Not required) </li><li> Variable Name: SMS </li></ul>

This article provides a step-by-step guide to configuring Regex and Variable Name in the User Information plugin within a workflow.

2026-02-03T08:39:19-0800 2026-02-12T06:00:07-0800 https://support.ruckuswireless.com/articles/000011711 2026-02-03T08:40:07-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6103 knowledge_article_6103 2021-06-02T19:26:10-0700 000011711 Validated (External) Public Smartcell ap Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell AP Why SZ Server LIst was lost? AP will reboot after default 7200 sec if AP do not have reachability to SZ controller and then SZ Server List will be removed to reduce frequently reboot. The customer needs to power off AP after configuring SZ ip if configured SZ IP is not reachable.

This article provides details on why the server was removed from the SZ/vSZ server list table.

2026-02-03T08:40:07-0800 2026-02-12T06:00:07-0800 https://support.ruckuswireless.com/articles/000015194 2026-02-02T00:59:52-0800 monthly 0.8 admin,premium knowledge_article_6101 knowledge_article_6101 2026-02-02T00:59:52-0800 000015194 Validated (External) Premium Vriot Performance;Configuration;Installation Performance, Configuration, Installation, vRIoT Why do we not see any beacon info for the IOT clients ? To enable beacon services with IoT devices, you must first activate the BaaS (Beacon as a Service) plugin. Only after enabling this plugin will you be able to see the MAC address or the beacon broadcast from the IoT Devices/APs. <h2>Steps to Enable Beacon as a Service</h2> <ol><li> Open the Beacon as a Service tile and click ? Configure to activate the plugin. </li><li> Configure the following parameters: a) Advertisement Interval <ul><li>Sets how frequently advertisement packets are sent.</li><li>Allowed range: 100 – 1000 ms</li><li>Default value: 100 ms</li></ul> b) Beacon Type <ul><li>Select the required beacon type from the drop?down list.</li></ul> c) Beacon Parameters Based on Beacon Type <ul><li>Provide relevant fields depending on the beacon type selected.</li><li>For iBeacon, you can configure a common 32?character UUID which will apply to all APs.</li><li>If Append AP MAC is enabled, the controller will append the last 12 characters of the AP’s MAC address to the first 20 characters of the UUID—making the beacon unique for each AP.</li></ul> </li><li> Click Activate to save the configuration. <ul><li>The BaaS plugin will now move from Available Plugins ? Active Plugins.</li></ul> </li><li> To modify the configuration, go to the Active Plugins tab and select Configure. To remove the plugin, click Delete. </li></ol> <h2> Important Note on IoT Radio MAC vs Broadcasted MAC</h2> If the IoT radio MAC is: 5C:02:72:FF:FE:99:D7:AB The broadcasted MAC will appear as: 5C:02:72:99:D7:AB This is expected. <ul><li>In the Web UI, the system automatically inserts FF:FE (per EUI?64 standard).</li><li>However, during beacon broadcast, the FF:FE portion is removed, resulting in the shortened MAC.</li></ul> This is a normal transformation according to the ZigBee/EUI?64 to BLE/iBeacon MAC conversion rules.

Customer is using nRF contact and IQM app BLE Scan to identify the MAC/beacon of the IOT devices but unable to see any device reporting.

2026-02-02T00:59:52-0800 2026-02-03T10:00:10-0800 https://support.ruckuswireless.com/articles/000012108 2026-02-02T06:56:00-0800 monthly 0.8 admin,premium knowledge_article_6102 knowledge_article_6102 2022-02-28T12:44:13-0800 000012108 Validated (External) Premium Ruckus cloud wifi Known issues and workarounds Known Issues and Workarounds, Ruckus Cloud WiFi Why I am not able to see expired guest pass information which were expired more than 30 day? As per current (At the time of writing this article Feb 2026) product specifications, system will keep expired guest passes only for 30 days, from the date of expiry.

Article explains how long Ruckus Cloud or Ruckus One (R1) keeps expired guest passes in its database.

2026-02-02T06:56:00-0800 2026-02-03T10:00:09-0800 https://support.ruckuswireless.com/articles/000015041 2026-02-02T06:50:48-0800 monthly 0.8 admin,premium knowledge_article_5876 knowledge_article_5876 2025-09-29T00:55:21-0700 000015041 Validated (External) Premium Cloud services System network management System Network Management, Cloud Services <div>How do I add or view stack neighbor information on the stack ports in the Switch Overview panel?</div> <div> <h2>Feature Description</h2> This feature enables Ruckus One to automatically detect and display stack neighbor information for stack ports. When switches are stacked: <ul><li>The system identifies the neighboring switch connected via each stack port.</li><li>It also determines the exact port on the neighboring switch used for the stack connection.</li><li>This information is displayed in the “Connected Device” field within the Switch Overview panel.</li></ul> As a result, administrators can quickly understand: <ul><li>Upstream and downstream stack relationships</li><li>Physical stack cabling and port usage</li><li>Overall stack topology without manual tracing</li></ul> <hr></hr> <h2>Supported Firmware Versions</h2> This feature is supported on the following firmware versions: <ul><li>9010</li><li>10010</li><li>10020 and later in the same series</li></ul> </div> <div> <h2 style="font-family: 'Segoe UI';font-size: 14px;line-height: 20px;">How to View Stack Neighbor Information</h2> To view stack neighbor information in Ruckus One: <ol><li>Log in to Ruckus One.</li><li>Navigate to Wired ? Switches.</li><li>Open the Switch List.</li><li>Click on the switch panel you want to inspect.</li><li>In the Switch Overview panel, locate the stack ports.</li><li>Check the Connected Device field to see the neighboring switch and port details.</li></ol> <img alt="User-added image" height="457" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000027ev&feoid=00N50000002Cf3M&refid=0EMPH00000KDErF" width="500"></img> </div>

This article explains how Ruckus One displays stack neighbor information for stack ports in the Switch Overview panel. The feature helps administrators visualize switch stack topology by showing neighboring switches and the exact ports used for stack connections.

2026-02-02T06:50:48-0800 2026-02-03T10:00:09-0800 https://support.ruckuswireless.com/articles/000011959 2026-01-30T07:49:52-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6100 knowledge_article_6100 2021-10-29T08:24:11-0700 000011959 Validated (External) Public Cloud services Configuration Configuration, Cloud Services <div>How to create and activate DHCP Service on Cloud AP?</div> <div style="margin-left: 40px;"> <div> <h3>Step 1: Create a DHCP Service Profile</h3> <ol><li>Log in to RUCKUS One.</li><li>Navigate to Services ? DHCP.</li><li>Click Add DHCP Profile. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026UL&feoid=00N50000002Cf3M&refid=0EMRk00000HH6Qb" width="1158" height="358"></img> </li><li> <h3>Select DHCP Configuration Type</h3> <ol><li>Choose the appropriate DHCP configuration type: <ul id="GUID-D441B0C7-79DA-40B6-B112-E6043EBC06BE__UL_RBZ_NJ2_2XB" style="list-style-type: circle;"><li id="GUID-D441B0C7-79DA-40B6-B112-E6043EBC06BE__GUID-002ED697-5E3B-4203-ADC5-D3A768B2E21C">Simple DHCP: Each AP in this venue is running it’s own DHCP server instance. In general, simple DHCP is configured when APs are at different sites and roaming is not required.</li><li id="GUID-D441B0C7-79DA-40B6-B112-E6043EBC06BE__GUID-E62AE06C-C0A0-4E26-96B4-0E5477FA0B1D">Multiple AP DHCP: Designated APs in this venue are running the DHCP Server instance. In general, multiple AP DHCP is configured when multiple APs are at the same site and roaming across APs is needed.</li><li id="GUID-D441B0C7-79DA-40B6-B112-E6043EBC06BE__GUID-1739943A-DF4B-46B8-9EC7-791066804E63">Hierarchical AP DHCP: Designated APs in this venue are running the DHCP Server instance. The DHCP server APs connected to the WAN, the rest of APs get their Private IP address from a local IP Pool with VLAN ID 1 from the DHCP Server AP. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026UL&feoid=00N50000002Cf3M&refid=0EMRk00000HH7o5" width="949" height="446"></img> </li></ul> </li></ol> </li><li>Click on Add DHCP Pool to add the required pools <ol><li>Configure the required parameters such as: <ul><li>VLAN ID</li><li>IP address pool</li><li>Subnet mask</li><li>Default gateway (optional)</li><li>DNS servers (optional) <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026UL&feoid=00N50000002Cf3M&refid=0EMRk00000HH5zC"></img></li></ul> </li><li>Click on Add another pool if multiple VLAN scopes are required, else Click Add </li></ol> </li><li>Save the DHCP Service Profile: Click Add <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026UL&feoid=00N50000002Cf3M&refid=0EMRk00000HH9DB" width="1003" height="525"></img></li></ol> <hr></hr> <h3>Step 2: Assign DHCP Service to a Venue</h3> <ol><li>Navigate to the Venue where DHCP service is required.</li><li>Select Services >> DHCP >> Click on Manage Local Service <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026UL&feoid=00N50000002Cf3M&refid=0EMRk00000HH0eZ" width="640" height="269"></img> </li><li>Enable DHCP Service Set, and select the configured profile from the drop down option </li><li>Click Apply <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026UL&feoid=00N50000002Cf3M&refid=0EMRk00000HGwB9" width="713" height="312"></img> </li></ol> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026UL&feoid=00N50000002Cf3M&refid=0EMRk00000HH5ZO" width="1275" height="494"></img> Note: Simple AP DHCP has significance impact in a roaming environment, and hence not recommended in roaming scenarios</div> </div> <div style="margin-left: 40px;"> In Simple AP DHCP, each AP should be able to serve the DHCP for the mentioned VLAN in the profile of their own, and would be NATTed with their own IP while forwarding to uplink</div>

This article explains how to create, configure, and activate the inbuilt DHCP Service on a Cloud AP using RUCKUS One. This is especially useful when customers do not have access to or visibility into uplink switch or VLAN configurations.

2026-01-30T07:49:52-0800 2026-02-02T02:00:09-0800 https://support.ruckuswireless.com/articles/000014671 2026-01-30T08:01:12-0800 monthly 0.8 admin,premium knowledge_article_5673 knowledge_article_5673 2025-01-29T07:40:03-0800 000014671 Validated (External) Premium Ruckus analytics Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Analytics How granularity selection varies in Data studio in the process of creating charts and schedules? For viewing more granular data, the user has to create charts instead of creating a schedule because it cannot provide data granularity below 15 minutes. For any lower granularity below 15 minutes, data can be viewed by creating a chart on Data studio.

Granularity in Data studio while creating charts and schedules

2026-01-30T08:01:12-0800 2026-02-02T02:00:09-0800 https://support.ruckuswireless.com/articles/000012253 2026-01-30T09:49:51-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4837 knowledge_article_4837 2022-06-05T18:09:30-0700 000012253 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway <div>Why is a packet fragmented even if the DF bit is set after R5.2.2?</div> <div> Packet handling for traffic with the DF bit set and packet size exceeding MTU is governed by tunnel configuration flags as shown below: <pre><code>------ TUNNELMGR Information ------ tunnelmgr Service: Enabled Tunnel Establishment: Disabled Tunnel IPSec: Disabled Tunnel Authentication: Enabled Tunnel Cipher: Disabled Tunnel Cipher Key Len: Tunnel Forward Bcast: Disabled PMTU: Auto PMTU Discovery: Disabled Node Affinity: Disabled Force Fragmentation: Disabled Offload: Disabled Dual Tunnels: Disabled </code></pre> <h3>Behavior Introduced After R5.2.2</h3> <pre><code>DF FF PMTU Discovery Packet > MTU ---------------------------------------- not set disabled disabled fragment not set disabled enabled fragment not set enabled disabled fragment not set enabled enabled fragment set disabled disabled fragment set disabled enabled ICMP error + packet drop set enabled disabled fragment set enabled enabled fragment </code></pre> <h3>Rolled-Back Behavior (Same as R5.2.1)</h3> After review, Ruckus reverted the behavior to align with R5.2.1 logic: <pre><code>DF FF PMTU Discovery Packet > MTU ---------------------------------------- not set disabled disabled fragment not set disabled enabled fragment not set enabled disabled fragment not set enabled enabled fragment set disabled disabled ICMP error + packet drop set disabled enabled ICMP error + packet drop set enabled disabled fragment set enabled enabled fragment </code></pre> This ensures that when the DF bit is set and Force Fragmentation is disabled, oversized packets are dropped with an ICMP error instead of being fragmented. </div> Note: This change was made in ER-11149 after R5.2.2 and R6.1.

Packets larger than the MTU may still be fragmented even when the DF (Don’t Fragment) bit is set, depending on tunnel configuration and software version behavior changes introduced after R5.2.2.

2026-01-30T09:49:51-0800 2026-02-02T02:00:08-0800 https://support.ruckuswireless.com/articles/000011252 2026-01-30T09:57:53-0800 monthly 0.8 admin,premium knowledge_article_4489 knowledge_article_4489 2021-01-13T01:01:14-0800 000011252 Validated (External) Premium Ruckus analytics Configuration Configuration, Ruckus Analytics How to integrate RUCKUS AI with ServiceNow? Before Registering the RUCKUS AI to the ServiceNow instance: You will need to configure the Scripted REST API on ServiceNow Service Management console: <img alt="User-added image" height="241" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026an&feoid=00N50000002Cf3M&refid=0EM2J000002JJxx" width="500"></img> Click "New" Type the API name and then submit <img alt="User-added image" height="241" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026an&feoid=00N50000002Cf3M&refid=0EM2J000002JJy2" width="500"></img> Choose the REST API you just created: <img alt="User-added image" height="267" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026an&feoid=00N50000002Cf3M&refid=0EM2J000002JJy7" width="500"></img> Scroll down to the bottom and click new: <img alt="User-added image" height="224" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026an&feoid=00N50000002Cf3M&refid=0EM2J000002JJyC" width="500"></img> Put the name as "Create & update incident" also put "POST" as http method <img alt="User-added image" height="274" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026an&feoid=00N50000002Cf3M&refid=0EM2J000002JJyH" width="500"></img> copy index.js from https://gist.github.com/shiawuen/3aabe5455c20ccad9875521938642239 this is available on user guide once the document indentation is fixed by DOC team. Change the var secret = "<secret>"; the secret into a complex string for anonymous security. Optional to change: var assignment_group = "<assignment_group>" var assigned_to = "<assigned_to>" The above can be based on the customer's specific groups or individuals, and they can assign them accordingly. It can be left as is or left empty, depending on their needs. <img alt="User-added image" height="247" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026an&feoid=00N50000002Cf3M&refid=0EM2J000002JJyM" width="500"></img> Uncheck the "Requires authentication" and then click "Submit". Now we have to configure RUCKUS AI side: Go to RUCKUS AI UI, Choose "Administration"->"Webhooks" Click "Create Webhook" <img alt="User-added image" height="549" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026an&feoid=00N50000002Cf3M&refid=0EM2J000002JJy3" width="500"></img> Please note the Secret has to be the same as var secret = "<secret>", you put previously for this case it is "!qaz2wsX12345". Webhook URL would be "<instance URL>+<Base API path>" <img alt="User-added image" height="263" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026an&feoid=00N50000002Cf3M&refid=0EM2J000002JJyW" width="500"></img> As no specific resource group, so we use "default" as "Resource Group", please note this will be empty on assignment group at ServiceNow incident. You can click "Send Sample Incident" for testing. Once you succeeded in setup, you will have below incident logged on ServiceNow Incident: Please choose "All" for incident <img alt="User-added image" height="189" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026an&feoid=00N50000002Cf3M&refid=0EM2J000002JJyb" width="500"></img> For the user who has specific resource group, they can check the assignment group on ServiceNow.

This article will explain the integration for the RUCKUS AI and ServiceNow ticketing system

2026-01-30T09:57:53-0800 2026-02-02T02:00:08-0800 https://support.ruckuswireless.com/articles/000010969 2026-01-30T11:55:12-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4435 knowledge_article_4435 2020-10-12T01:12:10-0700 000010969 Validated (External) Public Cloud services Knowledge base Knowledge Base, Cloud Services <div>Is the user’s social media authentication data stored in Ruckus’s database?</div> <div> Ruckus One (R1) uses OAuth 2.0 for all supported social media authentication methods. In this process, Ruckus acts solely as a pass-through service and does not store or process user credentials. The authentication itself is performed directly on the respective social media provider’s servers (for example, Facebook, LinkedIn, Google, etc.). Once authentication is completed, the social media provider returns an OAuth 2.0 authorization token to Ruckus One, indicating whether the user is authorized to access the WLAN service. At no point are the user’s username or password shared with or stored by Ruckus One. Credential handling remains entirely within the social media provider’s infrastructure, in accordance with their own security policies and terms and conditions. For more information on how OAuth 2.0 works, refer to the following resource: <a href="https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth" target="_blank">https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth</a> The screenshot below is an example of the terms and conditions. <img alt="User-added image" height="483" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026ir&feoid=00N50000002Cf3M&refid=0EM2J000001CwZ9" width="588"></img> </div>

Ruckus cloud offers social media authentication for WLAN's. This article will provide an insight on how it is done and if the data is stored on Ruckus database.

2026-01-30T11:55:12-0800 2026-02-02T02:00:07-0800 https://support.ruckuswireless.com/articles/000014706 2026-01-30T11:33:30-0800 monthly 0.8 admin,premium knowledge_article_5693 knowledge_article_5693 2025-02-19T23:34:58-0800 000014706 Validated (External) Premium Ruckus analytics Performance;Known issues and workarounds Performance, Known Issues and Workarounds, Ruckus Analytics <div>Why does Classic View display inconsistent or incorrect total uptime values?</div> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026fd&feoid=00N50000002Cf3R&refid=0EMPH00000H66df"></img> <div> Classic View is deprecated and should no longer be used for operational or reporting purposes. Recommended actions: <ul><li>Do not rely on Classic View for uptime or traffic analysis.</li><li>Use the current RUCKUS AI interface and dashboards, which provide accurate, supported, and actively maintained analytics.</li><li>Educate customers that discrepancies observed in Classic View are expected and non-actionable.</li></ul> Once customers transition fully away from Classic View, these inconsistencies will no longer be encountered. </div>

This article explains why customers may observe inconsistent uptime and traffic data in the Classic View of RUCKUS AI (RAI). The inconsistencies are expected behavior because Classic View has been discontinued and no longer reflects accurate or supported analytics data. Customers are advised to rely on the current RUCKUS AI views for accurate and supported reporting.

2026-01-30T11:33:30-0800 2026-02-02T02:00:07-0800 https://support.ruckuswireless.com/articles/000014563 2026-01-30T10:01:41-0800 monthly 0.8 admin,premium knowledge_article_5588 knowledge_article_5588 2024-11-13T19:27:15-0800 000014563 Validated (External) Premium Ruckus analytics System network management System Network Management, Ruckus Analytics What should be expected in the "Config Change" section within AI Assurance? <ul><li>When a WLAN is not linked to any active venues, any configuration changes won’t appear in the "AI Assurance >> Network Assurance >> Config Change" section, as this is expected behavior due to its inactive status.</li><li>Additionally, any modifications made to a newly created WLAN within the first three minutes of creation won’t produce a configDiff entry. The system requires a minimum of three minutes post-creation for any changes to generate a configuration difference record.</li></ul>

This article outlines what information to expect in the "Config Change" section within AI Assurance

2026-01-30T10:01:41-0800 2026-02-02T02:00:07-0800 https://support.ruckuswireless.com/articles/000011983 2026-01-30T05:51:40-0800 monthly 0.8 admin,premium knowledge_article_4827 knowledge_article_4827 2022-04-12T09:49:26-0700 000011983 Validated (External) Premium Ruckus analytics System network management System Network Management, Ruckus Analytics How to modify resource group for any user in RUCKUS AI? Navigate to Admin >> Users Use the pencil icon to edit the resource group <img alt="Img1: Edit user icon" height="138" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026Sj&feoid=00N50000002Cf3M&refid=0EM2J0000038yHm" width="990"></img> Notes: <ul><li>You must be part of the admin resource group</li><li>You cannot edit the resource group of yourself</li><li>You can only edit the resource group of internal users</li><li>You cannot edit the resource group of any 3rd party invited user once added, the only scope is to delete and re-invite with the preferred resource group and role</li></ul>

Limitation and procedure to modify the resource group assigned for users in RUCKUS AI

2026-01-30T05:51:40-0800 2026-01-30T14:00:09-0800 https://support.ruckuswireless.com/articles/000010690 2026-01-29T05:37:21-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4505 knowledge_article_4505 2020-07-02T03:29:55-0700 000010690 Validated (External) Public Ruckus analytics Configuration;System network management;Registration Configuration, System Network Management, Registration, Ruckus Analytics How to add internal and 3rdparty users in RUCKUS AI and manage them? You can add registered users, associate them to resource groups, and manage users from the RUCKUS Analytics web interface. The user must be registered with the system (a valid account on support.ruckuswireless.com). From the web interface of Ruckus Analytics, go to Admin > Users <ul><li>The Users page displays the number of already added users and additional information such as the user email address, first and last names, role, associated resource group, and user account.</li><li>If a user onboards the controller, that user can be added as a user to the account. However, the user has restricted administrator permissions. For example, the user can access account details but cannot delete other users from the account.</li></ul> <h1>Add Internal User:</h1> <ul><li>This option let you select the already registered users with the same company account, as the one you have logged in with. For example: You work for CompanyA (and logged in by your registered email ID with support.ruckuswireless.com) and adding another user of CompanyA.</li><li style="">Resource group: By selecting a group from the Resource Group menu, you can assign one of the following roles to the user from the Role menu:</li></ul> Admin: Provides access to all product functionality. Network Admin: Provides access to all product functionality except administrative operations such as users, resource groups, licenses, support, and onboarded systems. Report Only: Provides access to manage reports <ul><li>Click Add Internal User..</li><li><img alt="User-added image" height="309" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk000000267l&feoid=00N50000002Cf3M&refid=0EM2J000002JoJJ" width="500"></img></li></ul> <h1> Invite 3rd-Party User.</h1> A third-party user is a user who does not belong to your organization. By inviting a third-party user, you are explicitly granting access to someone outside your organization to the RUCKUS Analytics service account. Ensure that you have the necessary authorization to do so. A third-party user or a partner can only access a single resource group as defined by the administrator. <ul><li>This option let you invite any 1st user of any company, which has an account in support.ruckuswireless.com. For example: You work for CompanyA (and logged in with your registered email ID with support.ruckuswireless.com) and adding 1st user of CompanyB or C or etc.</li><li>First you have to find the user's email ID which is registered with support.ruckuswireless.com > It will look into the database and find it, if it has any matching email as a registered support.ruckuswireless.com user.</li><li> IMPORTANT NOTE: Company A as the primary account of the VSZ on RA, it requires company B to help operate the VSZ on RA for company A. Company A (admin user) can invite company B user via 3rd party invitation. Company B user (as admin user in Company A) can add more company B users to Company A by doing the 3rd party invitation under account of company A. Please also note that all the 3rd party invitation to any users, the invited user has to be internal user for that company first (referring to "Add internal user".) </li></ul> <img alt="User-added image" height="405" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk000000267l&feoid=00N50000002Cf3M&refid=0EM2J000002IgLt" width="672"></img> Note: If the Admin role is granted, the third-party user will also be able to invite other users into your account. If this is not desired, you can grant the third-party user a Network Admin or Report Only role. As of RA 2.5, the partner can help end user to onboard the SZ, so this SZ will be primary in partner account. The end user will be granted access to RA UI via 3rd party invitation by the partner. To check who is the first login of the user account: Under Administration-> External Services-> Ruckus Services-> Ruckus Cloud Services Please check "Cloud Account:" <img alt="User-added image" height="297" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk000000267l&feoid=00N50000002Cf3M&refid=0EM2J000003WMLv" width="500"></img> Check list: <ul><li>Make sure invited and inviter users are <ul><li>Already part of their own company account in support.ruckuswireless.com and set as administrator role.</li><li>Invited user should already be part of their own company RA account (Existing RA admin of invited company account need to login and see if user is already added as admin on their own company RA account) </li></ul> </li></ul> Example: User1 of ABC company wants to invite UserB of XYZ company. To do this, UserB of XYZ should have a valid account in support.ruckuswireless.com, same user should also have access to their own RA account (XYZ's RA account). An existing RA admin of XYZ RA account can help adding more internal users (UserB of XYZ account, In this case).

Article explains how to add internal and 3rdparty users in RUCKUS AI and manage them.

2026-01-29T05:37:21-0800 2026-01-30T06:00:08-0800 https://support.ruckuswireless.com/articles/000014925 2026-01-29T05:54:49-0800 monthly 0.8 admin,premium knowledge_article_5810 knowledge_article_5810 2025-07-15T21:34:40-0700 000014925 Validated (External) Premium Cloud services Troubleshooting Troubleshooting, Cloud Services <div>What is the API syntax used to retrieve RSSI and SNR values for associated clients?</div> You can retrieve RSSI and SNR information for associated clients by making an API call with the required parameters in the request body. <h3>API Request Syntax</h3> Under Body > Raw > JSON, use the following syntax: <div class="scriptor-paragraph">{</div> <div class="scriptor-paragraph"> "venueId": "My-Venue",</div> <div class="scriptor-paragraph"> "apMacs": ["70:CA:97:02:46:D0"],</div> <div class="scriptor-paragraph"> "startTime": "2025-07-14T00:00:00Z",</div> <div class="scriptor-paragraph"> "endTime": "2025-07-15T00:00:00Z",</div> <div class="scriptor-paragraph"> "state": "CONNECTED"</div> <div class="scriptor-paragraph">} </div> <div class="scriptor-paragraph"> <h3>Parameters Description</h3> <ul><li>venueId: Name or identifier of the venue where the clients are connected</li><li>apMacs: MAC address of the access point</li><li>startTime / endTime: Time range for which client data is requested (UTC format)</li><li>state: Client connection state (for example, <code>CONNECTED</code>)</li></ul> <div> <h2>Sample Output</h2> The API response provides detailed client information, including RSSI and SNR values, as shown below: <div>{</div> <div> "fields": null,</div> <div> "totalCount": 1,</div> <div> "page": 1,</div> <div> "data": [</div> <div> {</div> <div> "modelName": "Microsoft Windows/Windows 10.0.0",</div> <div> "deviceType": "Laptop",</div> <div> "macAddress": "00:c0:ca:ac:2e:f4",</div> <div> "osType": "Windows",</div> <div> "ipAddress": "10.177.85.83",</div> <div> "username": "00c0caac2ef4",</div> <div> "hostname": "DESKTOP-53A74H8",</div> <div> "authenticationStatus": 1,</div> <div> "band": "5 GHz",</div> <div> "connectedTime": "2025-07-14T04:24:18.000Z",</div> <div> "lastUpdatedTime": "2025-07-14T04:25:39.887Z",</div> <div> "venueInformation": {</div> <div> "id": "f3639aa234ed4e55bddd5c0b42c7fb71",</div> <div> "name": "My-Venue"</div> <div> },</div> <div> "apInformation": {</div> <div> "serialNumber": "122072002726",</div> <div> "name": "AP-Switch",</div> <div> "macAddress": "70:CA:97:02:46:D0",</div> <div> "bssid": "70:ca:97:82:46:d0"</div> <div> },</div> <div> "networkInformation": {</div> <div> "id": "32d723ccf3f84281b8d1acb06fefdd60",</div> <div> "type": "psk",</div> <div> "ssid": "APIPart3",</div> <div> "encryptionMethod": "WPA2-AES",</div> <div> "authenticationMethod": "Standard+Open",</div> <div> "vlan": 1</div> <div> },</div> <div> "signalStatus": {</div> <div> "snr": 53,</div> <div> "rssi": -43,</div> <div> "noiseFloor": -96,</div> <div> "health": "Good",</div> <div> "healthDescription": "RSSI is Good\nSNR is Good\nThroughput is Good"</div> <div> },</div> <div> "radioStatus": {</div> <div> "type": "a/n/ac",</div> <div> "channel": 124</div> <div> },</div> <div> "trafficStatus": {</div> <div> "trafficToClient": 171498,</div> <div> "trafficFromClient": 29560,</div> <div> "packetsToClient": 259,</div> <div> "packetsFromClient": 217,</div> <div> "framesDropped": 3,</div> <div> "totalTraffic": 201058</div> <div> }</div> <div> }</div> <div> ]</div> <div>}</div> <div> </div> <div><img alt="User-added image" height="239" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk000000269N&feoid=00N50000002Cf3M&refid=0EMPH00000MVHZO" width="703"></img></div> <div> </div> <div><img alt="User-added image" height="415" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk000000269N&feoid=00N50000002Cf3M&refid=0EMPH00000MZQHX" width="657"></img></div> <div> <div> <h3>Key Signal Metrics</h3> <ul><li>RSSI: Indicates received signal strength from the access point</li><li>SNR: Indicates signal quality relative to background noise</li><li>Noise Floor: Measured background noise level</li><li>Health: Overall evaluation of client connectivity quality</li></ul> </div> </div> </div> </div>

This article explains the API syntax used to retrieve RSSI and SNR values for associated wireless clients in Ruckus One (R1) by querying client connection data within a specified time range and access point.

2026-01-29T05:54:49-0800 2026-01-30T06:00:08-0800 https://support.ruckuswireless.com/articles/000014923 2026-01-29T05:58:41-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5882 knowledge_article_5882 2025-10-06T08:59:15-0700 000014923 Validated (External) Public Cloud services Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, Cloud Services <div> How can Postman be used with Ruckus One (R1) Cloud APIs to handle arrays of strings in GET and POST API requests? This includes: <ul><li>Retrieving arrays of strings using GET commands</li><li>Sending arrays of strings <div> When using Postman with Ruckus One APIs: <ul><li>Use GET requests to retrieve arrays of strings (for example, client or AP information)</li><li>Use POST or PUT requests only when the API explicitly requires a request body</li><li>No POST command is required when the API endpoint already returns data through GET</li></ul> <h3>Example JSON Output (Array of Strings)</h3> The following example shows a typical response for a client record retrieved via a GET request: { "mac": "00:00:00:00:00:00", "apMac": "00:00:00:00:00:00", "osType": "Android", "venueId": "xxxxxxxxxxxxxxx", "connectedSince": "2025-07-08T05:03:04Z", "apSerialNumber": "xxxxxxxxx", "networkId": "xxxxxxxxxxxxxxx", "ip": "0.0.0.0", "username": "xyz", "hostname": "username", "ssid": "SSIDname", "vlan": vlanID }, <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026Az&feoid=00N50000002Cf3M&refid=0EMPH00000Sxc9D" width="737" height="404"></img> </div>

This article explains how to use Postman with Ruckus One (R1) Cloud APIs to retrieve and work with arrays of strings in API responses. It includes examples of GET and POST requests, regional API endpoints, and sample JSON output demonstrating string?based fields such as MAC addresses, OS type, and device identifiers.

2026-01-29T05:58:41-0800 2026-01-30T06:00:07-0800 http://support.ruckuswireless.com/article_attachments/kA2PH000002Uk5t0AC?attachment_index=0 2026-01-30T06:00:07-0800 monthly admin,premium,warranty,guest knowledge_article_5882 knowledge_article_5882_attachment_1 API-Array of string for POST.PNG 157325.0 image/png http://support.ruckuswireless.com/article_attachments/kA2PH000002Uk5t0AC?attachment_index=1 2026-01-30T06:00:07-0800 monthly admin,premium,warranty,guest knowledge_article_5882 knowledge_article_5882_attachment_1 API-POST-Tenant-Token.PNG 228916.0 image/png http://support.ruckuswireless.com/article_attachments/kA2PH000002Uk5t0AC?attachment_index=2 2026-01-30T06:00:07-0800 monthly admin,premium,warranty,guest knowledge_article_5882 knowledge_article_5882_attachment_1 API_GET-template- Bearer token.PNG 154121.0 image/png http://support.ruckuswireless.com/article_attachments/kA2PH000002Uk5t0AC?attachment_index=3 2026-01-30T06:00:07-0800 monthly admin,premium,warranty,guest knowledge_article_5882 knowledge_article_5882_attachment_1 API-APstatus.PNG 95998.0 image/png http://support.ruckuswireless.com/article_attachments/kA2PH000002Uk5t0AC?attachment_index=4 2026-01-30T06:00:07-0800 monthly admin,premium,warranty,guest knowledge_article_5882 knowledge_article_5882_attachment_1 API-postman.PNG 116752.0 image/png https://support.ruckuswireless.com/articles/000014244 2026-01-29T06:42:03-0800 monthly 0.8 admin,premium knowledge_article_5015 knowledge_article_5015 2023-09-04T02:08:11-0700 000014244 Validated (External) Premium Knowledge;Cloud services Knowledge base;Support license activation Knowledge Base, Support License Activation, Knowledge, Cloud Services 1. What is a Ruckus One li <div class="WordSection1"> You can view the REC licenses in the RUCKUS One Cloud portal after they are activated. Complete the following steps to view the activated REC licenses in the RUCKUS One Cloud portal. <ol><li style="margin-left: 56px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> Log in to the RUCKUS One Cloud portal. </li></ol> Logging in to the RUCKUS One Cloud Portal <img alt="User-added image" height="242" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026ED&feoid=00N50000002Cf3M&refid=0EMHt000005bskL" width="500"></img> The RUCKUS One dashboard is displayed. RUCKUS One Dashboard <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026ED&feoid=00N50000002Cf3M&refid=0EMHt000005bskQ"></img> </div> <div class="WordSection2"> Viewing the Licenses for RUCKUS End Customers in the RUCKUS One Cloud Portal <ol start="2"><li style="margin-top: 4px;margin-left: 56px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> Click Administration > Subscriptions. </li></ol> Navigating to the Subscriptions Tab <img alt="User-added image" height="219" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026ED&feoid=00N50000002Cf3M&refid=0EMHt000005bskV" width="500"></img> The Subscriptions tab is displayed. Subscriptions-->My subscription Viewing License Subscriptions for a REC <img alt="User-added image" height="117" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000026ED&feoid=00N50000002Cf3M&refid=0EMPH000007lfq5" width="500"></img> In the Subscriptions tab, you can view the following subscription details: <ul><li style="list-style-type: none;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> <ul><li style="margin-left: 40px;margin-top: 7px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> Subscription: The network device utilizing subscription. </li><li style="margin-top: 7px;margin-left: 40px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> Part Number: The part number of the purchased subscription </li><li style="margin-left: 40px;margin-top: 7px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> Device Count: The number of licenses associated with the license subscription </li><li style="margin-left: 40px;margin-top: 7px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> Starting Date: The starting date of the subscription </li><li style="margin-top: 7px;margin-left: 40px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> Expiration Date: The date the subscription expires </li><li style="margin-left: 40px;margin-top: 7px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> Time Left: The time remaining before the subscription expires </li></ul> </li></ul> </div> <ol start="2"><li style="list-style-type: none;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> <ul><li style="margin-top: 4px;margin-left: 40px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> Status: The status of the license subscription (active or inactive) </li></ul> </li><li style="margin-top: 7px;margin-left: 56px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> Click Refresh to view any new licenses added in the Subscriptions tab (for example, when additional licenses are activated). </li></ol>

This article provides instructions on how to view RUCKUS One License for RUCKUS End Customers in the RUCKUS One Cloud Portal

2026-01-29T06:42:03-0800 2026-01-30T06:00:07-0800 https://support.ruckuswireless.com/articles/000015189 2026-01-27T18:14:26-0800 monthly 0.8 admin,premium knowledge_article_6099 knowledge_article_6099 2026-01-27T18:14:26-0800 000015189 Validated (External) Premium Icx 8100;RUCKUS ICX 8100 Campus Switches Configuration;Firmware;System network management;Known issues and workarounds Configuration, Firmware, System Network Management, Known Issues and Workarounds, ICX 8100 Why do I get this error message "Maximum limit for VE interfaces exceeded. Unable to create router interface on VLAN" when I try to configure a secondary interface VE on an ICX8100 switch? On ICX8100 there is a limitation that limits the number of VEs to a maximum of 1, this will impact all switches running 10.0.10g_cd6 or previous. Upgrading to 10.0.10h_cd1 will eliminate the limitation. This feature is helpful in scenarios where the ip needs to be changed remotely, on 10.0.10g_cd6 that would require a console connection. The following images show how ICX8100 does support multiple VEs on 10.0.10h_cd1. <img alt="User-added image" height="312" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002417&feoid=00N50000002Cf3M&refid=0EMRk00000HBfqs" width="500"></img> <img alt="User-added image" height="340" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002417&feoid=00N50000002Cf3M&refid=0EMRk00000HBe3a" width="500"></img>

Unable to create more than 1 VE on ICX8100

2026-01-27T18:14:26-0800 2026-01-29T06:00:08-0800 https://support.ruckuswireless.com/articles/000012278 2026-01-27T07:05:30-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6098 knowledge_article_6098 2022-09-29T19:28:09-0700 000012278 Validated (External) Public Knowledge Configuration Configuration, Knowledge How to setup Free radius for sending attributes in the Access Challenge for rfc5580 Assumptions This article assumes the Ubuntu Linux host has been deployed, and user have basic knowledge of working with Linux and radius protocol. Updating host package list As root, issue the following command to receive the latest version of all packages for the system: # apt-get update <pre> <img alt="User-added image" height="84" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043Ska" width="843"></img> </pre> Install FreeRADIUS packages As root, execute the following command to retrieve and install the FreeRADIUS daemon and its related dependencies: # apt-get install freeradius <img alt="User-added image" height="113" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043Skf" width="847"></img> Basic configuration of FreeRADIUS FreeRADIUS configuration files are located in the "/etc/freeradius/3.0" folder in the current freeradius version. The basic configuration requirements include defining your Ruckus controller as a "client" and specifying a shared secret known only to the controller and FreeRADIUS. A client definition may include a single host, or an entire management subnet. To define your Ruckus controller(s) as clients, insert the following lines at the top of the "/etc/freeradius/3.0/clients.conf" file using vi: client Ruckus-vSZ { ipaddr = 10.176.X.X secret = Secret@1234 } <img alt="User-added image" height="57" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043Skk" width="846"></img> <img alt="User-added image" height="184" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043Sl4" width="848"></img> Where 10.176.X.X should be replaced with the Ruckus controller management prefix (or host address) and the secret with your own secret key. Next, add a test user to confirm the FreeRADIUS server is configured correctly. Add a user by inserting the following lines at the top of the file "/etc/freeradius/3.0/users" using vi: rfc5580 Cleartext-Password := "test@123", Max-Daily-Session := 1800 Framed-IP-Address = 10.211.55.100, Reply-Message = "Hello, %{User-Name}" <img alt="User-added image" height="50" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043Sl9" width="846"></img> <img alt="User-added image" height="60" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043SlE" width="846"></img> Save config request the FreeRADIUS service to restart its configuration files by issuing the command: # service freeradius restart Use the radtest application to connect to the FreeRADIUS server and attempt to authenticate user "rfc5580" with password "test@123" (defined in the "users" file): # radtest rfc5580 test@123 localhost 1812 testing123 <img alt="User-added image" height="47" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043SlO" width="847"></img> Note that "localhost" is already defined as a client in clients.conf, with password "testing123". If all the instructions were followed correctly, an Access-Accept message will be dispatched by the FreeRADIUS server, including the attributes specified for the user "demo": Sent Access-Request Id 43 from 0.0.0.0:53904 to 127.0.0.1:1812 length 77 User-Name = "rfc5580" User-Password = "test@123" NAS-IP-Address = 127.0.1.1 NAS-Port = 1812 Message-Authenticator = 0x00 Cleartext-Password = "test@123" Received Access-Accept Id 43 from 127.0.0.1:1812 to 0.0.0.0:0 length 100 Framed-IP-Address = 10.211.55.100 Reply-Message = "Hello, rfc5580" <img alt="User-added image" height="166" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043Skg" width="851"></img> Setting up for Access-Challenge Now we will do configuration t challenge the client with a certain attributes in the Access-Challenge packet, for that we will need to modify default file under /etc/freeradius/3.0/sites-available using vi: <img alt="User-added image" height="39" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043Sld" width="854"></img> In this example we are challenging a certain client with below information, config needs to be done at 3 places in the default file, a reference file is attached below. 578 if ( &User-Name == "rfc5580") { 579 update reply { 580 &Session-Timeout = 10089 581 &Basic-Location-Policy-Rules += "0000123456781234567812345678123456780000" 582 &Requested-Location-Info += "11" 583 &Extended-Location-Policy-Rules += "78" 584 } 585 } <img alt="User-added image" height="113" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043SlY" width="855"></img> Save config request the FreeRADIUS service to restart its configuration files by issuing the command: # service freeradius restart Use the radtest application again to connect to the FreeRADIUS server and attempt to authenticate user "rfc5580" with password "test@123": # radtest rfc5580 test@123 localhost 1812 testing123 <img alt="User-added image" height="47" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043Sln" width="854"></img> You should see the Access-Accept message as below. Sent Access-Request Id 102 from 0.0.0.0:40913 to 127.0.0.1:1812 length 77 User-Name = "rfc5580" User-Password = "test@123" NAS-IP-Address = 127.0.1.1 NAS-Port = 1812 Message-Authenticator = 0x00 Cleartext-Password = "test@123" Received Access-Accept Id 102 from 127.0.0.1:1812 to 0.0.0.0:0 length 100 Framed-IP-Address = 10.211.55.100 Reply-Message = "Hello, rfc5580" Session-Timeout = 10000 Basic-Location-Policy-Rules = 0x30303030313233343536373831323334353637383132333435363738313233343536373830303030 Requested-Location-Info = 11 Extended-Location-Policy-Rules = 0x3738 <img alt="User-added image" height="167" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043Sli" width="855"></img> If we get the output as above, it means we have setup the radius server for sending attributes in Access-Challenge. Now we can test client connectivity and verify the attributes in Access-Challenge as below. <img alt="User-added image" height="394" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023uf&feoid=00N50000002Cf3M&refid=0EM2J0000043Sls" width="851"></img> NOTE: Attaching sample default files, which can be used as a reference to modify or replace the file.

This article explains the configuration setup for using FreeRADIUS to send attributes in an Access-Challenge

2026-01-27T07:05:30-0800 2026-01-27T22:00:13-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000YaTmSAK?attachment_index=0 2026-01-27T22:00:13-0800 monthly admin,premium,warranty,guest knowledge_article_6098 knowledge_article_6098_attachment_1 default-GEO 29321.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000014561 2026-01-27T07:09:26-0800 monthly 0.8 admin,premium knowledge_article_6097 knowledge_article_6097 2024-11-13T07:53:53-0800 000014561 Validated (External) Premium Sz144 d;Vsz dataplane;Sz100d Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, SZ144 D, vSZ Dataplane, SZ100D APs not broadcasting Tunnel WLAN? Internet access not working on tunnel WLAN? Client unable to get IP from DHCP on tunnel WLAN? The VLANs which are required for the Tunnel SSID should be tagged in AP, Switch and DP. For the use of External NAT IP in DP/vDP make sure port 23233 (Both TCP & UDP) is allowed. There should be communication between the DP/vDP, AP on the required subnet/VLAN.

This document provides a comprehensive guide for SZ-Dataplane and vSZ-Dataplance client connectivity Issues. It includes necessary steps, troubleshooting tips, and resolution methods.

2026-01-27T07:09:26-0800 2026-01-27T22:00:13-0800 https://support.ruckuswireless.com/articles/000014332 2026-01-27T07:11:51-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6096 knowledge_article_6096 2024-06-24T12:30:57-0700 000014332 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway I am trying to upload the logs to through the ChatBot interface of the SmartZone and I an get error "Upload Failed". Why is that happening? From the exception, we noticed that SZ cannot resolve "tdi.ruckus.support" while performing the DNS Query. In order to upload the logs to the Support Portal, SmartZone Controller must resolve "tdi.ruckus.support".In this case, SZ was using a local DNS Server which could only resolve internal networks. After changing the DNS Server to Public DNS, file upload succeeded.

This article explains the troubleshooting steps to follow when file uploads through the SmartZone ChatBot interface are not working.

2026-01-27T07:11:51-0800 2026-01-27T22:00:13-0800 https://support.ruckuswireless.com/articles/000014714 2026-01-27T07:12:42-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6095 knowledge_article_6095 2025-03-03T13:08:12-0800 000014714 Validated (External) Public Sz144;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 100-D (SZ100-D) System network management System Network Management, SZ144, virtual SmartCell Gateway, SZ100 How are traffic parameters being calculated in vSZ? Client traffic in vSZ/SZ Total AP traffic (uplink/downlink) WLAN traffic The Traffic information on the AP Zone/WLAN shows the data utilized along with the historical and real time data. Users can check the total amount of Traffic uplink and Traffic downlink traffic of connected clients, WLAN and AP pages respectively. <img alt="User-added image" height="152" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021G9&feoid=00N50000002Cf3M&refid=0EMPH00000HUEVB" width="942"></img> A drop-down selector at the top of the series of charts determines the reporting type: 1. Historical – this is a histogram of past reported data, based on the normal reporting interval of the system (e.g. 5 minutes) When selected, there should also be a drop-down selector for time interval of the histograms. Time interval should support 1hr, 24hr. When selected, there should also be a WLAN selector that allows either a specific WLAN to be selected, or all WLANs to be selected. <img alt="User-added image" height="189" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021G9&feoid=00N50000002Cf3M&refid=0EMPH00000HU7jr" width="937"></img> 2. Real-Time – this is a real-time display based on a live stat subscription to the AP: When selected, there should be a WLAN selector which shows the WLAN specific or all WLANs. <img alt="User-added image" height="327" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021G9&feoid=00N50000002Cf3M&refid=0EMPH00000HU3Jg" width="685"></img> Traffic real time chart can further be modified based on the Bytes, Packets and Rates: Selecting “start” shows the real time traffic. There are 5 total data displays, which are defined below. Historical Traffic – measures the total amount of traffic sent or received by the AP a. Chart Title: Traffic b. Drop-down Option for Charts i) Radio <ul><li>Total – if selected, report aggregate of both radios</li><li>2.4 GHz – if selected, report only 2.4 GHz data</li><li>5 GHz – if selected, report only 5 GHz data</li></ul> <img alt="User-added image" height="354" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021G9&feoid=00N50000002Cf3M&refid=0EMPH00000HU30I" width="936"></img> ii) Metric: <ul><li>Bytes</li><li>Packets</li><li>Rates</li></ul> <img alt="User-added image" height="355" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021G9&feoid=00N50000002Cf3M&refid=0EMPH00000HUEyD" width="936"></img> iii) Direction <ul><li>Rx and Tx (Total uplink + Downlink)</li><li>Tx - Downlink (from AP to client)</li><li>Rx - Uplink (from client to AP)</li></ul> <img alt="User-added image" height="355" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021G9&feoid=00N50000002Cf3M&refid=0EMPH00000HUF33" width="936"></img> c. Chart Type: Line graph d. X-axis: Time e. Y-axis: Auto-adjust from Kbps, Mbps, Gbps f. Hover behavior: show 3 data points: total (aggregate of tx and rx for selected radio bands), tx, and rx for that time coordinate and radio band. The client tab below the traffic shows chart form of the number of clients connected along with the radio band info and the time frame: <img alt="User-added image" height="267" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021G9&feoid=00N50000002Cf3M&refid=0EMPH00000HUFKn" width="935"></img> Second client tab in the traffic info shows the TOP clients and data utilized along with the OS info of all the clients in the Zone. Also, it shows the application details: a. When the administrator hovers: i) Client – show following data with labels <ul><li>Downlink – sent to client</li><li>Uplink – received from client</li><li>Total – total of uplink/downlink</li></ul> ii) OS / Device Type – show total device count for this OS type and % of selected scope (time and WLAN) <ul><li>Devices – count of devices over this time period</li><li>% – percentage of all clients that match this OS type</li></ul> iii) Application – show total uplink bytes for application, downlink for application, and total of uplink/downlink <ul><li>Downlink – sent to client by this app</li><li>Uplink – received from client by this app</li><li>Total – total of uplink/downlink</li></ul> b. When the administrator clicks <ul><li>Client – do nothing</li><li>OS / Device Type – do nothing</li><li>Application – do nothing</li></ul> <img alt="User-added image" height="249" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021G9&feoid=00N50000002Cf3M&refid=0EMPH00000HUD9L" width="932"></img> <img alt="User-added image" height="271" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021G9&feoid=00N50000002Cf3M&refid=0EMPH00000HUFW5" width="911"></img> Note: The Timeframe is limited to 1 hour to 24 hours in the controller. We cannot view the info more than 24 hour in the traffic tab

The traffic information on AP zone provides data utilization insights, including both historical and real-time data. Users can monitor the total amount of uplink and downlink traffic for connected clients, WLANs, and AP pages.

2026-01-27T07:12:42-0800 2026-01-27T22:00:12-0800 https://support.ruckuswireless.com/articles/000011792 2026-01-27T07:14:13-0800 monthly 0.8 admin knowledge_article_6094 knowledge_article_6094 2021-07-15T05:30:09-0700 000011792 Validated (External) Internal Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Installation;Troubleshooting Performance, Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to resolve the "Not enough electricity power is provided to this AP, its capabilities are degraded" warning for the AP's?

This article explains the steps to troubleshoot the power warning issue on an AP connected to the ZD1200.

2026-01-27T07:14:13-0800 2026-01-27T22:00:12-0800 https://support.ruckuswireless.com/articles/000014865 2026-01-27T07:17:09-0800 monthly 0.8 admin,premium knowledge_article_6093 knowledge_article_6093 2025-06-23T01:23:57-0700 000014865 Validated (External) Premium Ap sw registrar Configuration Configuration, AP SW Registrar A We do not support the use of APs in production environments running the SOLO version. All APs must be associated with a controller—either SmartZone (SZ) or Ruckus One (R1)—for configuration and deployment. For customers seeking a controller-less solution, the Unleashed platform (UN) is available. However, Unleashed support is limited to select models, currently including Wi-Fi 6 and Wi-Fi 7 APs. Notably, the R560 and R760 (Wi-Fi 6E models) do not have Unleashed firmware versions available. CLI-based configuration on SOLO APs is intended solely as a backdoor interface for manufacturing purposes and early-stage testing, especially when the controller Web UI was not yet available. As for the latest SOLO Web UI, it is only supported on newer Wi-Fi 7 APs such as the upcoming H670. Even so, it does not offer Wi-Fi configuration capabilities. Please follow the 6GHz Radio Configuration Guide to configure the 6GHz radio using CLI commands: <a href="https://support.ruckuswireless.com/documents/4017-ruckus-solo-ap-configuration-guide-6ghz-radio-configuration-using-cli" target="_blank">https://support.ruckuswireless.com/documents/4017-ruckus-solo-ap-configuration-guide-6ghz-radio-configuration-using-cli</a>

This article explains that the configuration of the 6?GHz radio on a standalone Tri-Radio Wi-Fi 6E APs using the Web UI

2026-01-27T07:17:09-0800 2026-01-27T22:00:11-0800 https://support.ruckuswireless.com/articles/000014649 2026-01-27T07:19:20-0800 monthly 0.8 admin,premium knowledge_article_6092 knowledge_article_6092 2025-01-14T04:03:59-0800 000014649 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management;Troubleshooting;Known issues and workarounds Configuration, System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway Why does the smart zone controller not display the IP Address of a wired client connected to the ICX switch managed by the SZ? The UI behavior of the smart zone is expected and for the SZ to display the wired client IP address, 802.1x must be enabled on the port in question.

Smartzone does not display the IP address of a wired client that is connected to the ICX switch. This is expected behavior and this KB explains why.

2026-01-27T07:19:20-0800 2026-01-27T22:00:11-0800 https://support.ruckuswireless.com/articles/000014855 2026-01-27T07:23:24-0800 monthly 0.8 admin,premium knowledge_article_6091 knowledge_article_6091 2025-06-17T07:32:39-0700 000014855 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Step1: Generate the CSR on SmartZone: a. Login to SmartZone Web UI <ul><li> Open a web browser and log in to the SmartZone controller with admin credentials. </li></ul> b. Go to Certificate Management <ul><li> Navigate to: Administration ? System ? Certificates ? Certificate Signing Request (CSR) </li></ul> c. Click on "Create" or "Generate CSR" Fill in the required details: <ul><li> Common Name (CN): FQDN of the controller (e.g., <code>smartzone.example.com</code>) </li><li> Organization Name </li><li> Organizational Unit </li><li> City/Locality </li><li> State/Province </li><li> Country Code (2-letter code, e.g., <code>US</code>, <code>IN</code>) </li><li> Key Length: Typically 2048 bits </li></ul> d. Generate and Download the CSR Click Generate Once the CSR is created, download the <code>.csr</code> file to submit to your Certificate Authority (CA). <img height="196" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk000000214r&feoid=00N50000002Cf3M&refid=0EMPH00000LJEZS" width="1162"></img> Step 2: Submit CSR to CA and Get Signed Certificate Submit the .csr file to your Certificate Authority (public CA like DigiCert, GoDaddy, etc., or internal CA). Once processed, you’ll receive: A signed certificate file (usually <code>.crt</code> or <code>.pem</code>) <div style="margin-left: 40px;">The intermediate/root certificate chain (if applicable)</div> Step 3: Upload the Signed Certificate to SmartZone a. Go to: <ul><li> Administration ? System ? Certificates ? Certificate mapping </li></ul> b. Click "Import" or "Upload" <ul><li> Upload the signed certificate (from the CA) </li><li> Upload the CA certificate chain (if applicable) </li><li> Match the uploaded certificate with the existing CSR/private key </li></ul> c. Save and Apply <ul><li> After uploading, assign the certificate to the relevant service </li></ul>

This article provides step-by-step instructions for generating a Certificate Signing Request (CSR) and installing a signed certificate on SmartZone.

2026-01-27T07:23:24-0800 2026-01-27T22:00:10-0800 https://support.ruckuswireless.com/articles/000014389 2026-01-27T07:24:37-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6090 knowledge_article_6090 2024-07-23T14:44:55-0700 000014389 Validated (External) Public Zonedirector;Smartcell gateway;Smartcell ap;Cloud services;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, ZoneDirector, SmartCell Gateway, SmartCell AP, Cloud Services How to troubleshoot 802.1X client connectivity issues? Common issues and resolution for those scenarios 1. Newly configured 802.1X/ Radius WLAN does not work. 2. Clients unable to connect to newly configured 802.1X WLAN <ul><li> Make sure that the radius server has a valid CA signed certificate from a well known CA like Godaddy/Commodo/Verisigin etc </li><li> Make sure the radius server configuration for the EAP method / flavor of 802.1x matches that configured / selected on the client </li><li> Newer Android / IOS clients have privacy features they sends a bogus / anonymous user name please check with the device manufacturer on instructions to disable it </li></ul> 3. AAA test does not work <ul><li>The AAA inbuilt AAA test features is based on OpenRadius PAP / CHAP</li><li>Most modern day server have PAP/CHAP disabled </li></ul> 4. Clients connect but do not have internet access after they pass AAA authentication <ul><li> Check client VLAN assigned post authentication / pre authentication. </li><li> Check client IP options like DNS / Subnet </li></ul> 5. 802.1x WLAN that was working suddenly stopped working <ul><li>With changes made </li><li>Try to revert changes made and test if system is working </li></ul> 6. Without any significant changes made <ul><li>Check status of AAA radius server certificate, it could have expired</li><li>Check if connectivity between the nodes that participates in the authentication workflow have broken </li><li>Check outside of both Ruckus and Radius server if there were any changes </li></ul> 7. 802.1x WLAN performance issues <ul><li>Certain types of clients can connect, and certain ones do not <ul><li>Each device vendor has its quirks and features – make sure all advanced features are disabled </li></ul> </li><li>Clients drop connections randomly <ul><li> Troubleshoot RF issues </li></ul> </li><li>Throughput issues on 802.1x/Radius WLAN <ul><li>Validate client loads on each AP </li><li>Validate if a AAA policy is pushed via the Radius server to limit bandwidth</li><li>Validate and troubleshoot RF </li></ul> </li></ul> 8. Clients show insecure or warning when connecting to a 802.1x WLAN <ul><li>Check AAA server certificate</li><li>Make sure its signed by a known CA </li></ul> In each of the above scenarios to narrow down where the problem is, we need to capture data on each node to verify where the problem is. Logs and data to collect when opening a support case for a 802.1X failure issue <ul><li>Please collect the AP support logs shortly after the issue replicates while opening a TAC case</li><li>Please also collect the Client MAC address with MAC randomization disabled and a rough timestamp of when the issue occurred </li><li>Smart Zone Snapshot logs with the radius service in debug mode </li><li>Enable Support access to RuckusOne / RuckusAI via the Administration tab </li></ul>

Troubleshooting an enterprise WLAN that uses port-based network security 802.1x can be challenging. Troubleshooting 802.1X mainly involves understanding the flow of authentication and identifying where it’s breaking. This guide will help you troubleshoot common issues with 802.1X authentication on various Ruckus solutions hosting 802.1x wireless networks.

2026-01-27T07:24:37-0800 2026-01-27T22:00:10-0800 https://support.ruckuswireless.com/articles/000014531 2026-01-27T07:26:03-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6089 knowledge_article_6089 2024-10-17T13:23:50-0700 000014531 Validated (External) Public Ruckus cloud wifi;Unleashed;Zonedirector;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Configuration;System network management;Troubleshooting Performance, Configuration, System Network Management, Troubleshooting, Ruckus Cloud WiFi, Unleashed, ZoneDirector, SmartCell Gateway <div>How do you troubleshoot the roaming, sticky client, and client disconnect while roaming?</div> <h4>SmartZone Controller :</h4> 1. Optimize the AP radios config under AP zones if APs are densely deployed this will help us to reduce co-channel interference and AP flagged issues due to High Airtime, connection failures. On 2.4 Ghz Radio : -Set 2.4 Ghz radio with Min Transmit power -Channels to Auto -Set channelization to 20 Mhz -Set Auto Channel Selection to Background Scan and Background scan interval to 3600 sec On 5 Ghz Radio : -Set 5 Ghz radio with -3,-6, -9 dB Power depending upon APs distance between 2 neighbor APs or set to Auto Transmit power with Auto-cell sizing enabled. -Channels to Auto -Set Channelization to 40 Mhz -Set Auto Channel Selection to Channel fly and Background scan interval to 20 sec 2. Optimize the Min BSS Rate to 12 Mbps on the WLAN Advance configuration. 3. Enable Fast Roaming in the WLAN under Encryption options. <div> <img alt="User-added image" height="393" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000020wn&feoid=00N50000002Cf3M&refid=0EMPH00000CAvcQ" width="889"></img></div> 4. Check all Troubleshooting steps suggested in the troubleshooting section and Connect a live user to the WLAN perform roaming and collect the AP support logs to further investigate with Ruckus support, if you are not able to solve/isolate the issue. <h4> Ruckus Cloud :</h4> 1. Optimize the Min BSS Rate to 12 Mbps on the WLAN Advance configuration. 2. Enable Fast Roaming in the WLAN under More Settings --> Networkings 3. Check all Troubleshooting steps suggested in the troubleshooting section and Connect a live user to the WLAN perform roaming and collect the AP support logs to further investigate with Ruckus support, if you are not able to solve/isolate the issue. <h4> Unleashed APs :</h4> 1. Connect a live user to the WLAN and perform Roaming and check all the Troubleshooting steps suggested above and collect AP debug info. On the Debug Info tab, check all Debug Components and enable Client MAC then click Save Debug Info. Provide that file to Ruckus Support for further diagnostics. <h4> Zone Director (EOL) :</h4> 1. Optimize the AP radios config under AP Groups if APs are densely deployed this will help us to reduce co-channel interference and AP flagged issues due to High Airtime, connection failures. On 2.4 Ghz Radio : -Set 2.4 Ghz radio with Min Transmit power -Channels to Auto -Set channelization to 20 Mhz On 5 Ghz Radio : -Set 5 Ghz radio with -3,-6, -9 dB Power depending upon APs distance between 2 neighbor APs or set to Auto. -Channels to Auto -Set Channelization to 40 Mhz. 2. Optimize the Min BSS Rate to 12 Mbps on the WLAN Advance configuration. 2. Enable Fast Roaming in the WLAN under Authentication. 3. Connect a live user to the WLAN and perform Roaming and check all the Troubleshooting steps suggested in the troubleshooting section, collect debug logs from ZD GUI, and share the debug info to further investigate with Ruckus support.

This document provides a comprehensive guide for troubleshooting Roaming issues on Ruckus Wireless solutions. It includes necessary steps, troubleshooting tips, and resolution methods.

2026-01-27T07:26:03-0800 2026-01-27T22:00:09-0800 https://support.ruckuswireless.com/articles/000010856 2026-01-27T07:58:59-0800 monthly 0.8 admin,premium knowledge_article_6088 knowledge_article_6088 2020-09-08T05:51:13-0700 000010856 Validated (External) Premium Sz144;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 100-D (SZ100-D) Known issues and workarounds Known Issues and Workarounds, SZ144, SZ100 Can I restore a cluster backup of SZ104/SZ124 on SZ144? Cluster backup restore can only be performed on similar hardware platforms.

This article explains the details of SmartZone (SZ) cluster backup and restore, specifically addressing whether a backup from SZ104 or SZ124 can be restored on an SZ144.

2026-01-27T07:58:59-0800 2026-01-27T22:00:09-0800 https://support.ruckuswireless.com/articles/000011247 2026-01-27T08:16:59-0800 monthly 0.8 admin,premium knowledge_article_6085 knowledge_article_6085 2021-01-12T00:50:57-0800 000011247 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway How to update solo AP firmware using the Smart Zone controller and https protocol ? <ul style="margin-left: 36px;font-family: Calibri;font-size: 11pt;font-weight: normal;font-style: normal;"><li style=""> SSH into the AP command line interface (CLI) </li><li style=""> By default, the AP has DHCP enabled </li><li style=""> AP will default to 192.168.0.1/24 IP address if unable to obtain a DHCP IP address </li><li style=""> (Skip if not applicable) - Statically assign an AP IP address, network mask, default gatewa </li></ul> <div style=""> #set ipaddr wan <ipaddr> <netmask> <gateway> </div> <ul style="margin-left: 36px;font-family: Calibri;font-size: 11pt;font-weight: normal;font-style: normal;"><li style=""> SSH into the AP CLI with a host reachable to the AP IP address </li><li style=""> Set the AP firmware update parameters </li></ul> <div style=""> get version fw show fw set proto https fw set host 192.168.x.x fw set control wsg/firmware/R710_5.2.1.0.1050.rcks (*** see below) fw set port 443 fw show fw update reboot set scg ip 192.168.150.110 reboot *** Change the model and version number per example below: R710 AP 5.1.2.0.1072 = R710_5.1.2.0.1072.rcks R710 AP 5.2.1.0.1047 = R710_5.2.1.0.1047.rcks R510 AP 5.1.2.0.1072 = R510_5.1.2.0.1072.rcks R510 AP 5.2.1.0.1047 = R510_5.2.1.0.1047.rcks </div> <ul style="margin-left: 36px;font-family: Calibri;font-size: 11pt;font-weight: normal;font-style: normal;"><li style=""> Example AP log output </li></ul> <div style=""> rkscli: get version Ruckus R710 Multimedia Hotzone Wireless AP Version: 114.0.0.0.6565 rkscli: fw show current primary boot image is Image1 -------------------------------------------------------------- Auto F/W upgrade = disabled Running on image = Image1 FW Control Control File = r710_9991_cntrl.rcks Control File Server = fwupdate1.ruckuswireless.com Protocol = FTP Port = auto User = "957298c6835a2746367cb29513555658d43b5f8b89f96621c8acc0648a37abcc" Password = "2aa0d714f56370e0b184341a69ab8304cc241f8da7f01306dfc29fff24739e99" Boot Flags (Main,Backup,Factory,Reset) = M. .. [MB FR] -------------------------------------------------------------- rkscli:fw set proto https OK rkscli:fw set host x.x.x.x OK rkscli:fw set control wsg/firmware/R710_5.2.1.0.1050.rcks OK rkscli:fw set port 443 OK rkscli: fw show current primary boot image is Image1 -------------------------------------------------------------- Auto F/W upgrade = disabled Running on image = Image1 FW Control Control File = wsg/firmware/R710_5.2.1.0.1050.rcks Control File Server = 192.168.150.110 Protocol = HTTPS Port = 443 Boot Flags (Main,Backup,Factory,Reset) = M. .. [MB FR] -------------------------------------------------------------- OK rkscli: fw update fw: Updating rcks_wlan.bkup ... v54_fw_update: download 192.168.150.110 section=rcks_fw.main image=Image2 ctl_file=wsg/firmware/R710_5.2.1.0.1050.rcks (/writable/fw/main.cntl) net_get_flash_ubi(192.168.150.110, wsg/firmware/R710_5.2.1.0.1050.BL7, rcks_wlan.bkup,, 28060760) flash id is 0 Warning : _check_new_image_hdr(192.168.150.110,wsg/firmware/R710_5.2.1.0.1050.BL7,,,): ctl/hdr file size mismatch (28060760 != 28057600) imghdr.{hdr_len=160, bin_len=28057440} fw_flash_read_open: kernel open(/dev/ubi0_0) rootfs open(/dev/ubi0_1) fw_flash_read_open: kernel open(/dev/ubi1_0) rootfs open(/dev/ubi1_1) flash id is 0 Image2 FW check ... MD5 = D906240EC4282ACEF948186EC184AF0C tail_offset 0 bin_len 28057440 sign 2. net_get_flash_ubi, Upgrading from Fully Signed Image(FSI) to Fully Signed Image(FSI) image. Firmware size mentioned in control file(28060760) fw_ubi_write_open: kernel open(/dev/ubi1_0) fw_ubi_write_open: rootfs open(/dev/ubi1_1) Flashing KERNEL image(2.63MB) [====================================================================================================] 100 Flashing ROOTFS image(24.13MB) [====================================================================================================] 100 Reading Image TAIL:- TLV No-1.TLV INFO Number of TLVS in Tail is 3. Size of Tail is 3160. len 9 tail_len = 9 2. SIGNATURE FOR SHA256 OBTAINED SUCCESSFULLY len 515 tail_len = 524 cert len 2118 pass 3. CERTICATE OBTAINED SUCCESSFULLY len 2121 tail_len = 2645 4. SIGNATURE FOR SHA384 OBTAINED SUCCESSFULLY len 515 tail_len = 3160 MD5 Checksum successful!!!!!!!!! Checking Image hash:- 1. Obtaining public key from Certificate. Executing openssl x509 -in /tmp/in_cert.pem -pubkey -noout >/tmp/pubkey.pem line: Certificate will not expire Certificate validity verified. line: /tmp/in_cert.pem: OK 2. Public key verified. 3. Decrypting the sha256 Image signature. Executing openssl rsautl -verify -pubin -inkey /tmp/pubkey.pem -in /tmp/signsure.bin -out /tmp/ext_sha256. 3.1 Comparing the signatures:- IMAGE TAIL SHA256 : 98c89d566b34374c0fa95c065f6e3259ea3078156c1870ce47ca63e7afe0b32f CALC SHA256 : 98c89d566b34374c0fa95c065f6e3259ea3078156c1870ce47ca63e7afe0b32f SHA256 HASH CHECK PASSED. 4. Decrypting the sha384 Image signature. Executing openssl rsautl -verify -pubin -inkey /tmp/pubkey.pem -in /tmp/signsure_sha384.bin -out /tmp/ext_sha384. 4.1 Comparing the signatures:- IMAGE TAIL SHA384 : a130064f319c67edcdffbb6b52e75f98c9fbf632fe16af93bfbd2dac829ea97e4115cf155d249e58fc237e191597ca79 CALC SHA384 : a130064f319c67edcdffbb6b52e75f98c9fbf632fe16af93bfbd2dac829ea97e4115cf155d249e58fc237e191597ca79 SHA384 HASH CHECK PASSED. AIS cleanup : Removing /tmp/ext_sha256... AIS cleanup : Removing /tmp/in_cert.pem... AIS cleanup : Removing /tmp/signsure.bin... AIS cleanup : Removing /tmp/pubkey.pem... AIS cleanup : Removing /tmp/ext_sha384... AIS cleanup : Removing /tmp/signsure_sha384.bin... AIS cleanup : Completed bdSave: sizeof(bd)=0x7c, sizeof(rbd)=0xd0 caching flash data from /dev/mtd14 [ 0x00000000 - 0x00010000 ] updating flash data [0x00008000 - 0x000080d0] from [0xbead59e8 - 0xbead5ab8] _erase_flash: offset=0x0 count=1 Erasing 64 Kibyte @ 0 -- 100 % complete caching flash data from /dev/mtd14 [ 0x00000000 - 0x00010000 ] verifying flash data [0x00008000 - 0x000080d0] from [0xbead59e8 - 0xbead5ab8] **fw(9234) : Completed rkscli: reboot OK rkscli: set scg ip x.x.x.x rkscli: reboot </div>

In certain cases, user may wish to manually update the AP to a version already loaded on the Smart Zone controller. The following work around will allow AP with solo image 110+ and Smart zone 5.0+ to manually update an AP to match the destination Smart Zone AP version then join the controller.

2026-01-27T08:16:59-0800 2026-01-27T22:00:08-0800 https://support.ruckuswireless.com/articles/000010865 2026-01-27T08:00:55-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6086 knowledge_article_6086 2020-09-09T13:55:53-0700 000010865 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, SmartCell Gateway How do I configure SmartZone to support Google Orion? Configuration and Troubleshooting details are provided by Google at <a href="https://support.google.com/orion-wifi/answer/14528189?hl=en" target="_blank">https://support.google.com/orion-wifi/answer/14528189?hl=en</a> <a href="https://docs.google.com/document/d/e/2PACX-1vRh81adM12GG7lY3vauxEd-rID4A6xbc91mzurin8bGVW9L80XqRnRBgTYOJ75CHwOGl-8v-o6OByrP/pub" target="_blank">https://docs.google.com/document/d/e/2PACX-1vRh81adM12GG7lY3vauxEd-rID4A6xbc91mzurin8bGVW9L80XqRnRBgTYOJ75CHwOGl-8v-o6OByrP/pub</a> Table of Contents from Google documentation (as of 9 September 2020) Log in to the RUCKUS SmartZone wireless LAN controller Create a Wireless LAN and Hotspot 2.0 Profile with RADIUS <ul><li class="c18">Create a wireless LAN <ul><li class="c25">General options</li><li class="c25">Authentication options</li><li class="c25">Encryption options</li><li class="c25">RADIUS options: define your venue</li><li class="c25">Hotspot 2.0 Profile</li><li class="c18">Create Operator</li></ul> </li><li class="c18">Create Identity Provider</li><li class="c18">Set up a secure RADIUS connection <ul><li class="c25">Create RADIUS Authentication Service <ul><li class="c30">No Match Realm configuration (authentication)</li><li class="c30">Unspecified Realm configuration (authentication)</li></ul> </li><li class="c25">Create RADIUS Accounting Service <ul><li class="c30">No Match Realm configuration (accounting)</li><li class="c30">Unspecified Realm configuration (accounting)</li></ul> </li></ul> </li></ul> <div class="c38">Troubleshoot the RUCKUS configuration</div> <ul><li class="c40">Home OI (RCOI)</li><li class="c40">EAP-TLS with Inner Authentication EAP Method Type</li><li class="c40">RADIUS Authentication and Accounting Service <ul><li class="c18">Authentication RADIUS Service</li><li class="c18">Accounting RADIUS Service</li></ul> </li><li class="c40">Wireless LAN Configuration <ul><li class="c18">Option configuration</li><li class="c18">Hardware and software compatibility</li><li class="c34 c43">Device type connectivity issues</li></ul> </li></ul>

This document outlines how to configure and troubleshoot SmartZone 5.2.1 to support Google Orion hot spot 2.0 wifi.

2026-01-27T08:00:55-0800 2026-01-27T22:00:08-0800 https://support.ruckuswireless.com/articles/000010857 2026-01-27T07:59:43-0800 monthly 0.8 admin,premium knowledge_article_6087 knowledge_article_6087 2020-09-08T05:50:45-0700 000010857 Validated (External) Premium Sz144;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 100-D (SZ100-D) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SZ144, SZ100 Can we create a SZ104/SZ124 cluster with an SZ144? Can we create a SZ144 cluster with SZ104 or SZ124? A SZ104 or SZ124 cannot join a SZ144 cluster. Also a SZ144 cannot join a SZ104 or SZ124 cluster due to Hardware limitation and they run different software architectures. Clustering can only be performed on similar hardware and software platforms.

This article provides detailed information on SmartZone (SZ) clustering, including its requirements, limitations, and hardware compatibility guidelines

2026-01-27T07:59:43-0800 2026-01-27T22:00:08-0800 https://support.ruckuswireless.com/articles/000014482 2026-01-27T08:19:21-0800 monthly 0.8 admin,premium knowledge_article_6084 knowledge_article_6084 2024-09-06T16:48:32-0700 000014482 Validated (External) Premium Zoneflex indoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, SmartCell Gateway Why are the Chromecast Devices stuck in the consistent DHCP loop and how to fix this problem? To mitigate issues with the DHCP server delays, we requested to configure the Chromecast SSID to use a different VLAN for the AP we were debugging. Moment we changed the VLAN, the Chromecast got an IP. May 13 17:56:08 RUCKUS-AP daemon.info hostapd: wlan35: STA a4:77:33:aa:bbc:cc WPA: wlan35: WPA: pairwise key handshake completed (RSN) May 13 17:56:08 RUCKUS-AP kern.info kernel: [ 7793.984996] wlan: [1417:I:ANY] [AUTH] vap-21(wlan35): [a4:77:33:aa:bbc:cc]wlan_cfg80211_change_station: authorize May 13 17:56:08 RUCKUS-AP kern.info kernel: [ 7793.985128] wlan: [1417:I:ANY] [AUTH] vap-21(wlan35): [a4:77:33:aa:bbc:cc]ol_ath_node_authorize: authorize:1 May 13 17:56:08 RUCKUS-AP daemon.info hostapd: wlan35: STA a4:77:33:aa:bbc:cc DRIVER: wlan35: DRIVER: STA-ADDR-INFO sta:0x844200, ssid:Chromecast-Device, flags:80000048a23, ip_addr:172.20.5.91, ipv6_addr: , common_state:1, is_wispr:0, ip_update:1, ip_timestamp:1715622968, acct_start:1 May 13 17:56:08 RUCKUS-AP daemon.info hostapd: @@236,clientInfoUpdate,"apMac"="c8:a6:08:aa:bb:cc","clientMac"="a4:77:33:aa:bbc:cc","ssid"="Chromecast-Device","bssid"="c8:a6:08:a:bb:cc","userId"="","wlanId"="7","iface"="wlan35","tenantUUID"="839f87c6-d116-497e-afce-aa8157abd30c","apName"="RUCKUS-AP","clientIP"="172.20.10.90","vlanId"="1000","radio"="a/n/ac","encryption"="WPA2-AES","band"="5g" Next thing we suggested to try using another DHCP Server to offer IP to the Chromecast devices. In this scenario we used FortiGate Firewall as the DHCP Server while keeping the VLAN identical to the problematic Chromecast WLAN. Once we made this network change, within few minutes the number of Chromecast with a valid IP increased to ~750 and every Chromecast started to show online. Considering the fact that offloading the DHCP to another Server helps Chromecast’s get an IP and also changing the VLAN on the existing SSID helps clients stuck in DHCP loop, get an IP address immediately, we have isolated the problem is not related to the AP, SSID, Configuration or underlying switching infrastructure. The only problematic device which could be suspected at this point was the Customized DHCP Server, We have suggested that we must consult the Developer/Engineering Team for the DHCP Server used by the Chromecast Devices and ask for the reasons for the delays in the response time for the DHCP packets.

This article details about a situation where Chromecast Devices get stuck the DHCP loop after a network outage that resulted into reboot of all APs. This issue would only impact Chromecasts and other wireless devices would operation normally

2026-01-27T08:19:21-0800 2026-01-27T22:00:07-0800 https://support.ruckuswireless.com/articles/000014647 2026-01-27T08:20:34-0800 monthly 0.8 admin,premium knowledge_article_6083 knowledge_article_6083 2025-01-08T20:10:26-0800 000014647 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Security;System network management Security, System Network Management, ZoneDirector Does Zonedirector uses Apache Tomcat or any of its application Zonedirector does not uses any of the below application\services. Apache Tomcat. Apache Traffic Control Apache MINA So the Zonedirector is not vulnerable to any of the Apache Tomcat vulnerabilities.

This article explains if the Apache Tomcat and any of its application is used in Zonedirector

2026-01-27T08:20:34-0800 2026-01-27T22:00:07-0800 https://support.ruckuswireless.com/articles/000014454 2026-01-26T16:39:49-0800 monthly 0.8 admin,premium knowledge_article_5917 knowledge_article_5917 2024-08-26T00:32:02-0700 000014454 Validated (External) Premium Sz300;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Configuration;Troubleshooting Configuration, Troubleshooting, SZ300 Which 5GHz channels are supported by different handheld scanners? Supported channels for different handheld scanners: <ol><li> Zebra, Chainway - 36,40,44,48,52,56,60,64,149,153,157,161,165 </li><li> Cipherlab, Urovo - 36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,144,149,153,157,161,165 </li></ol> Zebra and Chainway do not support upper DFS channels "100,104,108,112,116,120,124,128,132,136,140,144". When APs were on these channels, Zebra and Chainway scanners were getting disconnected. Due to the presence of a mixed model of scanners in the customer's environment, we decided to disable the upper DFS channel at the AP zone level under the channel range of 5GHz.

This article explains what are the supported 5GHz channels on different handheld scanners used in warehouse.

2026-01-26T16:39:49-0800 2026-01-27T10:00:18-0800 https://support.ruckuswireless.com/articles/000014402 2026-01-26T16:37:26-0800 monthly 0.8 admin,premium knowledge_article_5918 knowledge_article_5918 2024-07-26T11:18:42-0700 000014402 Validated (External) Premium Vsz dataplane Troubleshooting Troubleshooting, vSZ Dataplane How to determine which NIC card driver is used from a dataplane support log ? 1. From Smart Zone Web UI, select the Data Plane in question 2. Click More and download the support log 3. Extract the dataplane support log 4. Open /var/log/debug_repo/dataplane_debug.log 5. Search for XAUI0_DPDK_port_id 6. The output will determine the type of NIC drive used Example of a supported NIC card: XAUI0_DPDK_port_id=0 status=UP 'net_ixgbe' Example of an unsupported NIC card: XAUI0_DPDK_port_id=0 status=UP in_use=1 i40e_nic=0 'net_bnxt' 7.The most currently supported NIC cards are noted in the dataplane user manual. A copy of the supported NIC cards as of 7/26/2024 is noted below: Intel NIC igb, ixgbe, i40en I350 82599, 82599EB, 82599ES, X520, X710, XL710

This article assists in determining the NIC card driver used from a dataplane support log

2026-01-26T16:37:26-0800 2026-01-27T10:00:18-0800 https://support.ruckuswireless.com/articles/000014717 2026-01-26T16:43:28-0800 monthly 0.8 admin,premium knowledge_article_6082 knowledge_article_6082 2025-03-04T19:06:27-0800 000014717 Validated (External) Premium Swipe;SWIPE Known issues and workarounds Known Issues and Workarounds, SWIPE Why am I not able to access Smart Zone 7.1.0 with Ruckus Swipe APP 2.7.42? Upgrade to Ruckus SWIPE Application 2.4.43 to support Smart Zone 7.1.0 version

After upgrade from Smart Zone 7.0.0 to 7.1.0 Ruckus Swipe APP 2.7.42 is unable to access Smart Zone 7.1.0

2026-01-26T16:43:28-0800 2026-01-27T10:00:17-0800 https://support.ruckuswireless.com/articles/000015081 2026-01-26T16:45:43-0800 monthly 0.8 admin,premium knowledge_article_6081 knowledge_article_6081 2026-01-14T18:34:46-0800 000015081 Validated (External) Premium Ruckus cloud wifi;Icx 8100;RUCKUS ICX 8100 Campus Switches System network management System Network Management, Ruckus Cloud WiFi, ICX 8100 Which ICX version does R1 supports for the models ICX-8100-C16P and CI6P-X? <div> <div> Ruckus One adds support for the following ICX 8100 switch models starting with FastIron 10.0.10h: <h3>Supported Models</h3> <ul><li>ICX 8100?C16P</li><li>ICX 8100?C16P?X <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000025ur&feoid=00N50000002Cf3M&refid=0EMPH00000UqlSz" width="774" height="600"></img></li></ul> <h3>Supported Capabilities</h3> <ul><li>Switch Configuration Profile support</li><li>New model onboarding in Ruckus One</li></ul> <h3>Firmware Requirements</h3> <ul><li>FastIron version 10.0.10h or later</li><li>Router image only is supported</li></ul> <hr></hr> <h2>Limitations</h2> <ul><li>Only the Router image is supported for these models.</li><li>Older FastIron firmware versions prior to 10.0.10h are not supported.</li><li>Limited feature support may apply compared to other ICX 8100 variants.</li></ul> </div> </div>

This article describes Ruckus One support for the ICX 8100?C16P and ICX 8100?C16P?X switch models, which are introduced starting with FastIron (FI) software version 10.0.10h. It outlines supported models, firmware requirements, limitations, and deployment considerations.

2026-01-26T16:45:43-0800 2026-01-27T10:00:17-0800 https://support.ruckuswireless.com/articles/000015186 2026-01-26T16:42:30-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6076 knowledge_article_6076 2026-01-20T17:05:01-0800 000015186 Validated (External) Public Vsz dataplane;Virtual smartcell gateway Configuration;Installation Configuration, Installation, vSZ Dataplane, virtual SmartCell Gateway <div>An I/O error occurs during startup, preventing the vDP from booting properly after the upgrade to R6.1.2p5.</div> <div>This behavior is observed exclusively in KVM environments. As a workaround, changing the disk bus type from VirtIO to SCSI resolves the issue. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000025rd&feoid=00N50000002Cf3M&refid=0EMRk00000H15yL"></img></div>

The KVM-hosted vDP does not boot properly when the Disk Bus type is set to VirtIO

2026-01-26T16:42:30-0800 2026-01-27T10:00:17-0800 https://support.ruckuswireless.com/articles/000015187 2026-01-26T16:47:30-0800 monthly 0.8 admin,premium knowledge_article_6080 knowledge_article_6080 2026-01-20T17:36:02-0800 000015187 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to Configure the Storm Control for Switch Port in the SZ GUI? <h1>Steps on how to configure the Storm Control for switch port in the SZ GUI:</h1> <div style="margin-top: 13px;margin-left: 36px;text-indent: -.38in;text-align: left;">1. Locate any ICX switch and Go to the Ports </div> <div style="margin-top: 13px;margin-left: 36px;text-indent: -.38in;text-align: left;">2. Select and configure any switch port</div> <div style="margin-top: 13px;margin-left: 36px;text-indent: -.38in;text-align: left;">3. Navigate to Storm Control:</div> <div style="margin-top: 13px;margin-left: 36px;text-indent: -.38in;text-align: left;">4. Support the following traffic types, each with a configurable rate limit and Threshold:</div> <div class="O1" style="margin-top: 7px;margin-left: 96px;text-indent: -.38in;text-align: left;">•Broadcast - Rate Limit, Threshold</div> <div class="O1" style="margin-top: 7px;margin-left: 96px;text-indent: -.38in;text-align: left;">•Multicast - Rate Limit, Threshold</div> <div class="O1" style="margin-top: 7px;margin-left: 96px;text-indent: -.38in;text-align: left;">•Unknown Unicast - Rate Limit, Threshold</div> <div style="margin-top: 13px;margin-left: 36px;text-indent: -.38in;text-align: left;">5. Threshold Input Range:</div> <div class="O1" style="margin-top: 7px;margin-left: 96px;text-indent: -.38in;text-align: left;">•When unit is kbps, Range: 1 ~ 1048576 kbps</div> <div class="O1" style="margin-top: 7px;margin-left: 96px;text-indent: -.38in;text-align: left;">•When unit is PKts/sec, Range: 1~8388607 packets/sec </div> <img alt="User-added image" height="352" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000025wT&feoid=00N50000002Cf3M&refid=0EMRk00000H16ZR" width="500"></img> Additional Information: <div style="margin-top: 13px;margin-left: 36px;text-indent: -.38in;text-align: left;">•Storm Control supports configuring single or multiple traffic types per port.</div> <div style="margin-top: 13px;margin-left: 80px;text-indent: -0.38in;text-align: left;">•This example shows limits and thresholds configured for all three traffic types: <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000025wT&feoid=00N50000002Cf3M&refid=0EMRk00000H16mL"></img> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000025wT&feoid=00N50000002Cf3M&refid=0EMRk00000H16nx"></img> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000025wT&feoid=00N50000002Cf3M&refid=0EMRk00000H16pZ"></img></div> <div style="margin-top: 13px;margin-left: 40px;text-indent: -0.38in;text-align: left;"> <div style="margin-left: 36px;text-indent: -.38in;text-align: left;">• This example shows Storm Control settings can be applied to multiple switch ports simultaneously using the multi-select port configuration: <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000025wT&feoid=00N50000002Cf3M&refid=0EMRk00000H16uP"></img> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000025wT&feoid=00N50000002Cf3M&refid=0EMRk00000H16xd"></img> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000025wT&feoid=00N50000002Cf3M&refid=0EMRk00000H16zF"></img></div> </div> <div style="margin-left: 40px;"> </div>

Rate limiting and action support on SZ GUI

2026-01-26T16:47:30-0800 2026-01-27T10:00:16-0800 https://support.ruckuswireless.com/articles/000015188 2026-01-26T16:48:18-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6079 knowledge_article_6079 2026-01-20T21:36:01-0800 000015188 Validated (External) Public Ruckus analytics Performance;System network management Performance, System Network Management, Ruckus Analytics How RUCKUS AI Applies the 5W1H Framework? 5W1H stands for Who, What, Where, When, Why, and How — long recognized as the gold?standard framework used by journalists worldwide to provide a complete and objective understanding of any situation. This structured approach ensures that nothing important is overlooked. In network operations, the same need exists. When an issue occurs, administrators must quickly understand the full context before taking action. Ruckus “AI Incidents” applies a 5W1H?style framework to networking, giving operators a comprehensive view of every incident. Ruckus ‘AI Incidents’ can not only proactively detect 21 distinct wired and wireless issues, it also presents each one with a complete 5W1H breakdown—delivering clarity on what happened, where, when, why, who was impacted, and how to resolve it. This enables IT teams to move from guesswork to informed action—faster, confidently, and with evidence. Here is an Example of one such incident - “DHCP failures unusually high”. Note that AI did not pick up any random DHCP failures, but only unusually high scenarios. For the complete list of 21 incidents - refer here - <a href="https://docs.cloud.ruckuswireless.com/RUCKUS-AI/userguide/GUID-A3FEA611-BE9D-482B-9DA3-2B7E5CFE589B.html" style="color: #467886;text-decoration: underline;" target="_blank">Incidents</a> <img alt="User-added image" height="254" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000025y5&feoid=00N50000002Cf3M&refid=0EMRk00000H1Bvh" width="500"></img>

2026-01-26T16:48:18-0800 2026-01-27T10:00:16-0800 https://support.ruckuswireless.com/articles/000010528 2026-01-26T06:42:41-0800 monthly 0.8 admin,premium knowledge_article_4204 knowledge_article_4204 2020-05-21T21:48:50-0700 000010528 Validated (External) Premium Zonedirector;Smartcell gateway;Cloud services;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, ZoneDirector, SmartCell Gateway, Cloud Services Why we are getting blank login page of Microsoft during SAML authentication through Azure? Microsoft has some predefined URLs that is needed to be whitelisted. Below are those URLs: *.aadcdn.microsoftonline-p.com *.aka.ms *.applicationinsights.io *.azure.com *.azure.net *.azureafd.net *.azure-api.net *.azuredatalakestore.net *.azureedge.net *.loganalytics.io *.microsoft.com *.microsoftonline.com *.microsoftonline-p.com *.msauth.net *.msftauth.net *.trafficmanager.net *.visualstudio.com *.windows.net *.windows-int.net It could be found under: <a href="https://docs.microsoft.com/en-us/azure/azure-portal/azure-portal-safelist-urls?tabs=public-cloud" target="_blank">https://docs.microsoft.com/en-us/azure/azure-portal/azure-portal-safelist-urls?tabs=public-cloud</a> Once customer allowed those URLs in walled garden list issue got resolved

Customer was getting blank login page of Microsoft after initial accept of terms and conditions. This article explains the list of walled garden entries required for Azure based SAML to work

2026-01-26T06:42:41-0800 2026-01-26T18:00:14-0800 https://support.ruckuswireless.com/articles/000010292 2026-01-23T14:49:55-0800 monthly 0.8 admin,premium knowledge_article_4122 knowledge_article_4122 2020-04-08T02:16:20-0700 000010292 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Installation Configuration, Installation, Cloudpath How can we change the DNS IP address of Cloudpath? You can edit/update the DNS IP address on Cloudpath ES via CLI/SSH. Login into Cloudpath via SSH using port# 8022 with username: cpn_service and execute below mentioned command to change DNS IP address: Command: config network STATIC dns <dns IP addr> Example: config network STATIC dns 172.16.4.202 <img alt="Change DNS IP address of Cloudpath" height="358" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000024U9&feoid=00N50000002Cf3M&refid=0EM2J000001pIsW" width="500"></img> You can verify the DNS IP address by executing 'show config' command before and after making the change.

This article outlines how to edit the DNS server IP of Cloudpath

2026-01-23T14:49:55-0800 2026-01-26T10:00:07-0800 https://support.ruckuswireless.com/articles/000014995 2026-01-23T04:49:09-0800 monthly 0.8 admin,premium knowledge_article_5847 knowledge_article_5847 2025-09-01T06:24:40-0700 000014995 Validated (External) Premium Sz144;Sz300;Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) System network management;Troubleshooting System Network Management, Troubleshooting, SZ144, SZ300, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway, SZ100 What causes Wireshark to report the error “The capture file appears to have been cut short in the middle of the packet” when reviewing TCPDUMP captures of FTP traffic, why do packets appear truncated, and can this issue be resolved or worked around? The Wireshark warning “The capture file appears to have been cut short in the middle of a packet” is generated when the capture file ends with an incomplete packet record. This occurs most frequently when a live capture is terminated abruptly, leaving the final packet only partially written. This issue is file-level, not a protocol-level error. To correct it, identify the valid packet boundary using <code>capinfos</code>, then trim the capture file with <code>tshark</code>. Depending on requirements, trimming can be performed with or without filters to preserve specific traffic. The result is a clean, analysable capture file with the corrupted record removed, ensuring compatibility with Wireshark and other analysis tools.

Wireshark reports “capture file cut short in the middle of the packet” when analysing TCPDUMP output with truncated FTP packets.

2026-01-23T04:49:09-0800 2026-01-23T18:00:07-0800 https://support.ruckuswireless.com/articles/000014645 2026-01-22T11:38:23-0800 monthly 0.8 admin,premium knowledge_article_5652 knowledge_article_5652 2025-01-03T13:53:49-0800 000014645 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;Troubleshooting;Known issues and workarounds Performance, Configuration, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway Why clients are facing throughput issues upon upgrading the SmartZone to version 6.1.2 P3 ? This issue is fixed in the AP patch 6.1.2.0.2216 and 6.1.2 P4 and higher SZ versions Refer to the following link to download the AP patch:<a href="https://support.ruckuswireless.com/software_terms_and_conditions/4393-smartzone-ap-patch-lt-gd-ap-patch-3-wifi6-aps" target="_blank"> AP patch 6.1.2.0.2216</a>

This Article is created in reference to the TSB-2024-012: Wireless client performance degradation after vSZ is upgraded to R6.1.2 P3

2026-01-22T11:38:23-0800 2026-01-23T06:00:07-0800 https://support.ruckuswireless.com/articles/000014939 2026-01-21T09:56:14-0800 monthly 0.8 admin,premium knowledge_article_5840 knowledge_article_5840 2025-07-21T10:57:14-0700 000014939 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Installation;Security;Known issues and workarounds Firmware, Installation, Security, Known Issues and Workarounds, SmartCell Gateway How do I apply the 7.1.0 LT(GA) ( 7.1.0.0.586) KSP for the Security Vulnerabilities reported in- Security Bulletin-20250710? Please refer to the attached document on how to apply the KSP for the Security Bulletin-20250710

This article provides step-by-step instructions to apply the Kernel Software Patch (KSP) related to Security Bulletin-20250710 on SmartZone clusters running firmware version 7.1.0.0.586

2026-01-21T09:56:14-0800 2026-01-22T14:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA2PH000002Wl4H0AS?attachment_index=0 2026-01-22T14:00:09-0800 monthly admin,premium knowledge_article_5840 knowledge_article_5840_attachment_1 Steps to apply 7.1.x Security KSP.pdf 324793.0 application/pdf https://support.ruckuswireless.com/articles/000014660 2026-01-21T10:56:33-0800 monthly 0.8 admin,premium knowledge_article_5664 knowledge_article_5664 2025-01-20T09:38:55-0800 000014660 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway Why am I unable to upload the license file on the RUSKUC SmartZone controller? The customer was purchasing small quantities of AP licenses and activating them over the time. Each activation adds an entry to the bin file (license file), which eventually exceeded the file size limit due to multiple entries of separately activated AP licenses. Once the file size exceeded 200KB, SZ was unable to handle or process this file. This is a design limitation where SmartZone cannot process files larger than 200KB. Use the workaround provided. <h3>Future Recommendation</h3> <ol><li>Customers are recommended to activate larger quantities of AP licenses per activation, instead of smaller AP capacity to prevent exceeding the file size of the license file.</li><li>If SmartZone is the cluster of more than one node, load balance the AP license when activating and mapping in the LiMAN portal. </li></ol>

This article explains a known limitation where SZ cannot process license files larger than 200KB and provides a workaround.

2026-01-21T10:56:33-0800 2026-01-22T14:00:08-0800 https://support.ruckuswireless.com/articles/000014987 2026-01-21T11:44:19-0800 monthly 0.8 admin knowledge_article_5848 knowledge_article_5848 2025-09-01T06:22:51-0700 000014987 Validated (External) Internal Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Installation Configuration, Installation, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Why is the operating power mode of the Ruckus H350 not visible through either the CLI or WebUI interfaces? Not applicable. No fix is required as the absence of the Power Source field on the H350 is intentional. Always refer to the AP Datasheet, section "POWER" to get clarity on the same. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023Y5&feoid=00N50000002Cf3M&refid=0EMRk00000H2YlN"></img> Reference: <a href="https://webresources.ruckuswireless.com/datasheets/r350/ds-ruckus-r350.pdf" target="_blank">https://webresources.ruckuswireless.com/datasheets/r350/ds-ruckus-r350.pdf</a>

Ruckus H350 does not show operating power mode in CLI or WebUI

2026-01-21T11:44:19-0800 2026-01-22T14:00:08-0800 https://support.ruckuswireless.com/articles/000014355 2026-01-21T05:41:28-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6078 knowledge_article_6078 2024-07-09T12:56:34-0700 000014355 Validated (External) Public Ruckus cloud switch;Ruckus cloud wifi Configuration;Security Configuration, Security, Ruckus Cloud Switch, Ruckus Cloud WiFi <div>How can you obtain a JWT token using the OAuth2 standard in RUCKUS One for initiating API calls?</div> <div> <h3>Part I: Create an Application Token in RUCKUS One</h3> <ol><li> Navigate to Account Management <ul><li>Log in to RUCKUS One.</li><li>Go to Administration > Account Management > Settings.</li><li>Scroll down to the bottom of the page and click Add Application Token.</li></ul> </li><li> Create and Save the Application Token <ul><li>Enter the required details to create a new Application Token.</li><li>Save the displayed Application Token information.</li><li>Make sure to securely store the following values: <ul><li>Client ID</li><li>Client Secret (listed under the Shared Secret column)</li></ul> </li></ul> </li></ol> ?? Note: The Client Secret is required to authenticate when requesting a JWT token and should be handled securely. </div> <h2><img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023OP&feoid=00N50000002Cf3M&refid=0EMPH000007KRKz" width="1005" height="165"></img></h2> <div> <h3>Part II: Obtain the JSON Web Token (JWT) Using Postman</h3> <h4>1. Configure the API Request</h4> <ul><li> Method: <code>POST</code> </li><li> URL: https://<cloud-region>/oauth2/token/<tenantId> </li></ul> <div> <ul><li> Replace the placeholders as follows: <ul><li><code><cloud-region></code> with your RUCKUS One region: <ul><li>US: <code>ruckus.cloud</code></li><li>EU: <code>eu.ruckus.cloud</code></li><li>Asia: <code>asia.ruckus.cloud</code></li></ul> </li><li><code><tenantId></code> with your actual RUCKUS One tenant ID</li></ul> </li></ul> <hr></hr> <h4>2. Configure the Request Body</h4> <ul><li>In Postman, select the Body tab.</li><li>Choose x-www-form-urlencoded.</li><li>Add the following key-value pairs: <table border="1" style="width: 600px;"><thead><tr><th colspan="1" rowspan="1">Key</th><th colspan="1" rowspan="1">Value</th></tr></thead><tbody><tr><td colspan="1" rowspan="1">grant_type</td><td colspan="1" rowspan="1">Enter this string: client_credentials</td></tr><tr><td colspan="1" rowspan="1">client_id</td><td colspan="1" rowspan="1">Enter the Client ID of the Application Token generated in RUCKUS One.</td></tr><tr><td colspan="1" rowspan="1">client_secret</td><td colspan="1" rowspan="1">Enter the Client Secret of the Application Token generated in RUCKUS One.</td></tr></tbody></table> Example: <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023OP&feoid=00N50000002Cf3M&refid=0EMPH000007KWcP"></img></li></ul> <div> <h4>3. Send the Request and Retrieve the Token</h4> <ul><li>Click Send to submit the API request.</li><li>If the request is successful, the response will include an <code>access_token</code>.</li><li>This access_token is a JWT, which must be included in the <code>Authorization</code> header (<code>Bearer <token></code>) when making subsequent RUCKUS One API calls. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000023OP&feoid=00N50000002Cf3M&refid=0EMPH000007KSKI"></img></li></ul> </div> </div> </div>

This Knowledge Base Article explains how to authenticate with the RUCKUS One APIs using the OAuth2 client credentials flow. It describes how to create an Application Token and use it to obtain a JSON Web Token (JWT), which is required to securely access RUCKUS One API endpoints. This method replaces the legacy /token authentication API.

2026-01-21T05:41:28-0800 2026-01-21T14:00:08-0800 https://support.ruckuswireless.com/articles/000015184 2026-01-20T23:05:55-0800 monthly 0.8 admin,premium knowledge_article_6077 knowledge_article_6077 2026-01-20T23:05:55-0800 000015184 Validated (External) Premium Ruckus analytics;Sz144;Sz300;Virtual smartcell gateway;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Troubleshooting Troubleshooting, Ruckus Analytics, SZ144, SZ300, virtual SmartCell Gateway Why does data in RUCKUS AI sometimes appear 15–30 minutes behind the SmartZone controller? After onboarding, SmartZone (SZ) sends data to RUCKUS AI in three primary categories: Configuration Data, Telemetry Data, and Events Data. 1) Configuration Data <ul><li>Configuration data is sent once during the initial onboarding process.</li><li>After onboarding, configuration data is sent only once every 24 hours.</li></ul> 2) Telemetry Data <ul><li>Telemetry data is sent every 90 seconds for vSZ-E.</li><li>Telemetry data is sent every 180 seconds for vSZ-H.</li><li>Although telemetry data is collected more frequently than configuration data, it still undergoes buffering, batching, and cloud-side processing.</li><li>Due to these processing steps, telemetry data may not appear immediately in RUCKUS AI dashboards.</li></ul> 3) Events Data <ul><li>AP and client events are sent every 90 seconds (vSZ-E) or 180 seconds (vSZ-H).</li><li>HCCD events are sent as raw messages but still pass through the same ingestion and processing pipeline.</li></ul> Why a 15–30 Minute Delay Can Occur <ul><li>Data is sent every 90 seconds for vSZ-E and 180 seconds for vSZ-H.</li><li>After export, data is ingested, validated, normalized, correlated with account and licensing information, and processed for analytics in the RUCKUS AI backend.</li><li>These downstream cloud processing steps add additional latency beyond the initial export interval.</li><li>As a result, the end-to-end data flow from SmartZone to RUCKUS AI can reasonably take 15–30 minutes, which is expected behavior.</li></ul>

This article explains why data displayed in RUCKUS AI may appear 15–30 minutes delayed compared to the SmartZone controller.

2026-01-20T23:05:55-0800 2026-01-21T06:00:06-0800 https://support.ruckuswireless.com/articles/000014438 2026-01-20T12:42:51-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6075 knowledge_article_6075 2024-08-28T13:44:03-0700 000014438 Validated (External) Public Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Firmware;Troubleshooting Firmware, Troubleshooting, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Why SmartZone/ Virtual SmartZone Cluster upgrade is failing? 1.Confirm Resources for Virtual SmartZone setup are correct on each node. using the CLI command (NOTE: On Hardware platform SZ-100, SZ-144 there is no need to check resources.) #show cpuinfo #show diskinfo #show meminfo 2. Confirm Services are up and running in each node using CLI command #show service #show cluster-state 3. Confirm NTP server is reachable and sync in all nodes. (How to check NTP detail on vSZ/SZ GUI--> under Administration TAB --> Time <img alt="User-added image" height="245" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021Pp&feoid=00N50000002Cf3M&refid=0EMPH00000A7bd2" width="929"></img> 4. Confirm there is no latency on the ISP and upload a new image file. 5. Take a screenshot of all errors seen in the web UI during the upgrade. 6. Note the timestamp of the failure. 7. Log into the console or CLI and note any errors seen. 8.Enable debug on Configurer and Web from the vSZ/SZ GUI under Troubleshooting & Diagnostics TAB --> Application logs. 9. Collect the Snapshot logs, Configurer logs and Web logs of each node to further investigate with Ruckus TAC. (How to collect debug logs and Snapshot logs from vSZ/SZ GUI) Navigate to Monitoring TAB--> Troubleshooting & Diagonastic --> Application logs <img alt="User-added image" height="337" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021Pp&feoid=00N50000002Cf3M&refid=0EMPH00000A7npR" width="932"></img> Now, enable Debug on Configurer and web by selecting the Configurer -->click on Warning ICON and set to Debug. Follow the same setup from Web. <img alt="User-added image" height="370" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021Pp&feoid=00N50000002Cf3M&refid=0EMPH00000A7m2F" width="932"></img> <img alt="User-added image" height="360" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021Pp&feoid=00N50000002Cf3M&refid=0EMPH00000A7oaD" width="934"></img> Collect separately Configurer and web logs by selecting the Configurer and download logs, follow the same steps for Web. <img alt="User-added image" height="373" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021Pp&feoid=00N50000002Cf3M&refid=0EMPH00000A7mi6" width="933"></img> Now, collect the Snapshot logs of the vSZ/SZ. <img alt="User-added image" height="349" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021Pp&feoid=00N50000002Cf3M&refid=0EMPH00000A7lkQ" width="929"></img>

This document provides a comprehensive guide for Ruckus SmartZone controller Cluster Upgrade Issues. It includes necessary steps, troubleshooting tips, and resolution methods.

2026-01-20T12:42:51-0800 2026-01-21T02:00:07-0800 https://support.ruckuswireless.com/articles/000011253 2026-01-20T12:48:47-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6074 knowledge_article_6074 2021-01-18T00:25:00-0800 000011253 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How to configure/create a Guest WLAN with no authentication 1. Create a new WLAN from Wireless LANs 2. Fill in the profile details, and add the WLAN Groups as needed 3. From the Authentication Options, choose Guest Access <img alt="Picture1: WLAN with Authentication Option "Guest Access"" height="370" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021cj&feoid=00N50000002Cf3M&refid=0EM2J000002JMki" width="775"></img> 4. If you would like to use encryption with a pre-shared key, select wpa2 under Encryption Options and fill in the passphrase as required 5. Under the section "Guest Access Portal", create a new profile by clicking on '+' sign 6. Fill in the profile details, and make sure to turn on "Terms and Conditions", and fill in the box with the same >> Click OK <img alt="Picture2: Fill in Guess Portal Service Profile as needed" height="542" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021cj&feoid=00N50000002Cf3M&refid=0EM2J000002JMlB" width="779"></img> 7. From the drop down box against "Guest Authentication", choose "Always Accept" <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000021cj&feoid=00N50000002Cf3M&refid=0EMRk00000H0bPB" width="764" height="305"></img> 8. Click OK

This article explains the configuration steps for setting up a Guest WLAN with no authentication.

2026-01-20T12:48:47-0800 2026-01-21T02:00:07-0800 https://support.ruckuswireless.com/articles/000014663 2026-01-20T07:14:28-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5677 knowledge_article_5677 2025-01-27T04:00:45-0800 000014663 Validated (External) Public Ruckus icx switches;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches, SmartCell Gateway <div>How can Access Points or ICX switches be moved, migrated, or switched over from one vSZ / SZ cluster to another?</div> <div> <h3>Supported Use Cases</h3> <ul><li>Operational issues with the existing SmartZone cluster</li><li>Planned SmartZone maintenance activities</li><li>Migration from physical SmartZone to virtual SmartZone (or vice versa)</li><li>Reusing Access Points or ICX switches across different customers or locations managed by separate SmartZone clusters</li></ul> <div> <h3>Important Considerations Before Switchover</h3> <ul><li>Depending on the use case, pre-configure the target SmartZone cluster (Domains, Zones, WLANs, Device Groups) in advance to reduce downtime.</li><li>For zero-touch migration, use Device Registration Rules (for APs and Switches) on the target cluster to automatically place devices in the correct Domain, Zone, and Group.</li><li>For maintenance or one-to-one cluster replacement scenarios, restore the configuration backup or full cluster backup on the target SmartZone before initiating switchover.</li><li>Avoid partial AP migration for the same physical location. Broadcasting identical SSIDs from different SmartZone clusters can cause roaming and client connectivity issues.</li><li>Always migrate all APs for a specific site together whenever possible.</li></ul> <div> <h2>Preparation Checklist</h2> <ul><li>Ensure both source and target SmartZone clusters are running the same software version.</li><li>Verify IP connectivity between APs / ICX switches and the target SmartZone cluster.</li><li>If controller discovery uses DHCP Option 43, DNS, or RUCKUS DRS, update these to point to the new cluster IP or FQDN to prevent devices from falling back to the source cluster.</li><li>If RADIUS proxy authentication is used, add the new cluster node IPs to the RADIUS server’s client list. Refer to the RUCKUS SmartZone AAA Interface Reference Guide.</li><li>Verify DNS and DHCP parameters that may affect client or controller communication.</li><li>If RUCKUS SCI or RUCKUS AI is in use: <ul><li>Validate northbound data streaming configuration (SCI)</li><li>Validate cloud service integration (RUCKUS AI)</li><li>Reconfigure if the target cluster is not restored from the source configuration backup</li></ul> </li></ul> <div> <h2>License Requirements</h2> <ul><li>Ensure sufficient AP and ICX licenses are available on the target SmartZone cluster.</li><li>Each managed Access Point or ICX switch consumes a license.</li><li>Validate existing licenses under Administration > Licenses.</li><li>Purchase and assign additional licenses via the RUCKUS Licensing Portal if required.</li><li>Temporary licenses may be issued in exceptional cases with proper business justification and advance approval through RUCKUS Support.</li><li>Refer to the RUCKUS SmartZone Software Licensing Guide for licensing details.</li></ul> <div> <h2>Backup Configuration</h2> <ul><li>Always back up the source SmartZone cluster configuration before migration.</li><li>Customers can take: <ul><li>Configuration backup</li><li>Cluster backup</li><li>Both (recommended)</li></ul> </li></ul> <div> <h2>Cluster Switchover – Access Points</h2> AP switchover allows moving APs between SmartZone clusters and is supported even without cluster redundancy. Notes: <ul><li>Supported for APs running firmware version R5.0 or later.</li><li>Applicable for both staging and non-staging zones depending on platform type.</li><li>In cluster redundancy setups, APs in the Staging or Default Zone must use the switchover method.</li></ul> <h3>AP Switchover Procedure</h3> <ol><li>On the source SmartZone cluster, navigate to Network > Wireless > Access Points</li><li>Select the required Zone or multiple APs.</li><li>Click More and choose Switch Over Clusters. <img alt="User-added image" height="564" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk000000238H&feoid=00N50000002Cf3M&refid=0EMPH00000G6gjM" width="936"></img> </li><li>Enter the IP address or FQDN of the target SmartZone cluster.</li><li>(Optional) Enable Delete selected Access Point after switchover if required. <img alt="User-added image" height="232" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk000000238H&feoid=00N50000002Cf3M&refid=0EMPH00000G6xH7" width="532"></img> </li><li>Click OK to initiate the switchover.</li><li>Confirm the operation.</li><li>The APs will disconnect from the source cluster and register to the target cluster.</li><li>Verify that the APs appear and become operational on the target SmartZone.</li></ol> <div> <h2>Switchover – ICX Switches</h2> <h3>Pre-Validation Requirements</h3> <ul><li>Switch firmware must be 08.0.95b or later</li><li>Switch must not have: <ul><li>Pending configuration pushes</li><li>Ongoing firmware upgrades</li></ul> </li><li>Up to 250 switches can be selected per switchover operation</li><li>Control IP supports IPv4 only</li></ul> Important Notes: <ul><li>Ensure Switch Registration Rules exist on the target cluster before switchover.</li><li>Ensure the ICX firmware is set the same or not mapped in the target group to avoid unnecessary upgrades or downgrades</li><li>Without registration rules, the ICX switch may reconnect to the source SmartZone.</li><li>Depending on switch HA licensing, approval may be required on the target cluster.</li></ul> <h3>ICX Switchover Procedure</h3> <ol><li>Navigate to Network > Switches > Switches</li><li>Select Domain > Switch Group, then choose the desired switch(es).</li><li>Click More > Switch Over Cluster <img alt="User-added image" height="367" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk000000238H&feoid=00N50000002Cf3M&refid=0EMPH00000G6cML" width="908"></img> </li><li>Enter the target SmartZone cluster Control IP address.</li><li>Click OK.</li><li>Confirm by clicking YES.</li><li>The switch disconnects from the source cluster and registers with the target cluster.</li></ol> <div> <h2>Post-Migration Verification</h2> <ul><li>Verify device status and configuration on the target SmartZone cluster.</li><li>Ensure APs and ICX switches are online and operational.</li><li>Validate WLAN services, authentication, and client connectivity.</li><li>Monitor performance and logs for anomalies.</li></ul> <div> <h2>Additional Information / Tips</h2> <ul><li>Schedule the migration during a maintenance window.</li><li>Maintain detailed records of configuration backups and changes.</li><li>Perform functional testing after migration to ensure service continuity.</li></ul> </div> </div> </div> </div> </div> </div> </div> </div> </div>

This article describes the detailed procedure to migrate, move, or switchover RUCKUS Access Points and ICX Switches from one SmartZone (physical or virtual) cluster to another. The document covers prerequisites, licensing requirements, configuration preparation, and step-by-step instructions for performing cluster switchover for both APs and ICX switches.

2026-01-20T07:14:28-0800 2026-01-20T18:00:09-0800 https://support.ruckuswireless.com/articles/000014469 2026-01-20T07:32:11-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5946 knowledge_article_5946 2024-09-18T10:10:12-0700 000014469 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How can I enable Wireless Client Isolation? Why do user devices drop traffic on network after client isolation is enabled? Wireless Client Isolation can be enabled on a WLAN where we do not want users communicating with each other within the local network and the goal is to only allow them access to the internet. This feature is ideal for guest networks. Follow the below steps to configure Wireless Client Isolation on a WLAN: Login to vSZ --> Network --> Wireless --> Wireless LAN --> Choose the WLAN where you want to enable Wireless Client isolation. Click the WLAN --> Click 'Configure'--> Scroll down to find "Wireless Client Isolation" --> Enable the radio button. <img alt="User-added image" height="296" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk000000239t&feoid=00N50000002Cf3M&refid=0EMPH00000AKaPn" width="623"></img> Unicast packet isolation is enabled by default. Meaning any traffic destined to a specific mac address within the network is going to get isolated. Click the '+' icon of the Isolation Whitelist to add an exception device in the whitelist. The default gateway, or other services like printers can be added to this list. <img alt="User-added image" height="410" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk000000239t&feoid=00N50000002Cf3M&refid=0EMRk00000GA8eE" width="623"></img> The auto whitelist radio button can be enabled, where the gateway IP is automatically detected and whitelisted. Alternatively the gateway IP address and MAC address can be manually added to the list by clicking 'Create' under 'Client entries'. Any other exceptions like printers can be added into this list if required. If the gateway information is not correctly whitelisted, then clients connecting to the WLAN will face issues with accessing the network/ internet.

This article explains the steps to enable Wireless Client Isolation on a WLAN and configure an exception to allow communication only with the default gateway.

2026-01-20T07:32:11-0800 2026-01-20T18:00:09-0800 https://support.ruckuswireless.com/articles/000015185 2026-01-20T07:43:35-0800 monthly 0.8 admin,premium knowledge_article_6073 knowledge_article_6073 2026-01-20T07:43:35-0800 000015185 Validated (External) Premium Vriot Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, vRIoT What version Ruckus recommend for protection again CVE-2025-69425 & CVE-2025-69426 ? Both the vulnerabilities are fixed with Ruckus IOT code 3.0 and hence we recommend all are users to upgrade their existing system to 3.0 code and we have also release security advisory for the same. https://support.ruckuswireless.com/software/4716 https://support.ruckuswireless.com/security_bulletins/336

There were two reported vulnerability found on Ruckus IOT controller and this KB explains detail on it.

2026-01-20T07:43:35-0800 2026-01-20T18:00:08-0800 https://support.ruckuswireless.com/articles/000014892 2026-01-20T08:10:35-0800 monthly 0.8 admin,premium knowledge_article_5796 knowledge_article_5796 2025-07-02T07:48:10-0700 000014892 Validated (External) Premium Smartcell gateway;Cloud services;SmartCell Gateway 200 (SCG200) Performance;Security;Troubleshooting Performance, Security, Troubleshooting, SmartCell Gateway, Cloud Services Why is there a delay in automatic pop up of captive portal page? <ul><li>Enable WPA2/WPA3 encryption on the WLAN so that it passes network security check on the Sophos InterceptX app, or the other apps used by the users.</li><li>Disable Network security background check on the app or remove app from device.</li></ul>

Article talks about users experiencing a delay of approximately one minute for the captive portal page to appear when connecting to a network. This delay is often caused by network security applications running on the device, which may interfere with the portal detection process.

2026-01-20T08:10:35-0800 2026-01-20T18:00:08-0800 https://support.ruckuswireless.com/articles/000014932 2026-01-20T04:44:34-0800 monthly 0.8 admin,premium knowledge_article_5839 knowledge_article_5839 2025-07-16T17:03:56-0700 000014932 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;Security;Known issues and workarounds Installation, Security, Known Issues and Workarounds, SmartCell Gateway How do I apply the 6.1.2 P3 KSP for the Security Vulnerabilities reported in- Security Bulletin-20250710? Please refer to the attached document on how to apply the KSP for the Security Bulletin-20250710

This article provides step-by-step instructions to apply the Kernel Software Patch (KSP) related to Security Bulletin-20250710 on SmartZone clusters running firmware version 6.1.2.0.487.

2026-01-20T04:44:34-0800 2026-01-20T14:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA2PH000002W53R0AS?attachment_index=0 2026-01-20T14:00:09-0800 monthly admin,premium knowledge_article_5839 knowledge_article_5839_attachment_1 KSP for Security Bulletin-20250710.pdf 343076.0 application/pdf https://support.ruckuswireless.com/articles/000014213 2026-01-19T08:29:42-0800 monthly 0.8 admin,premium knowledge_article_5011 knowledge_article_5011 2023-05-31T13:59:41-0700 000014213 Validated (External) Premium Ruckus cloud wifi;Zonedirector 3000;Zonedirector 5000;Zonedirector 1200;ZoneDirector 3000;ZoneDirector 5000;ZoneDirector 1200 Configuration;System network management Configuration, System Network Management, Ruckus Cloud WiFi, ZoneDirector 3000, ZoneDirector 5000, ZoneDirector 1200 <div>What is the procedure to migrate Access Points from ZoneDirector to RUCKUS One (Formerly RUCKUS Cloud)?</div> <div> <h2>Prerequisites</h2> Before starting migration, ensure the following: <ul><li>Verify AP model support: <a href="https://www.ruckusnetworks.com/ruckus-one-supported-network-devices" target="_blank">https://www.ruckusnetworks.com/ruckus-one-supported-network-devices</a></li><li>ZoneDirector must be on a supported minimum version for migration (10.2.1.0.236+ or 10.5.1.0.265+)</li><li>Ensure firewall ports and URLs required for RUCKUS One communication are allowed</li><li>Confirm sufficient RUCKUS One AP licenses <ul><li>Trial account includes 10 AP + 10 Switch licenses</li></ul> </li><li>Ensure all APs are reachable and connected</li><li>DNS must be properly configured for AP internet access </li></ul> <div> <div> <h2>Key Limitations and Considerations</h2> <ul><li>Only network and RF parameters are migrated</li><li>WLAN services, authentication methods, and policies must be recreated</li><li>APs in migration state appear as Blocked on ZoneDirector</li><li>Channels not supported by regulatory rules or RUCKUS One are excluded</li></ul> </div> <h2> Bandwidth and Latency Requirements</h2> <h4>ICX Switch Operations</h4> <div> <table><thead><tr><th colspan="1" rowspan="1">Device</th><th colspan="1" rowspan="1">Recommended Bandwidth (per device)</th><th colspan="1" rowspan="1">Recommended Latency</th></tr></thead><tbody><tr><td colspan="1" rowspan="1">ICX Switch</td><td colspan="1" rowspan="1">? 1.5 Mbps</td><td colspan="1" rowspan="1">? 170 ms</td></tr></tbody></table> </div> <h4>Access Point Operations</h4> <div> <table><thead><tr><th colspan="1" rowspan="1">Device</th><th colspan="1" rowspan="1">Recommended Bandwidth (per device)</th><th colspan="1" rowspan="1">Recommended Latency</th></tr></thead><tbody><tr><td colspan="1" rowspan="1">Access Point</td><td colspan="1" rowspan="1">~300 kbps</td><td colspan="1" rowspan="1">? 170 ms</td></tr></tbody></table> </div> <blockquote> Actual requirements may vary based on environment. </blockquote> <div> <h2>Migration Methods</h2> <h3>?? Important Migration Notes</h3> <ul><li>Always test with a single AP first</li><li>Migrate all APs in a location together to avoid SSID overlap and roaming issues</li><li>Expect AP reboots during migration</li><li>Plan WLAN and authentication configuration before migrating APs</li></ul> <hr></hr> <h3>? Method 1: Manual Migration</h3> <ol><li>Log in to RUCKUS One</li><li>Create or select the desired Venue (Venue in RUCKUS One ? ZoneDirector)</li><li>Add APs manually or via bulk provisioning</li><li>Disable Auto AP Join Approval on ZoneDirector</li><li>Factory reset AP via CLI: <pre><code>set factory reboot </code></pre> </li><li>Delete AP from ZoneDirector</li><li>On next boot, AP discovers and joins RUCKUS One automatically</li></ol> <hr></hr> <h3>? Method 2: Migration Using Join Another Controller </h3> <div> <h4>ZoneDirector Configuration Migration (Backup Import)</h4> RUCKUS One supports importing a ZD backup (.bak) file to migrate supported configuration: <ul><li>Creates a new Venue</li><li>Imports RF and network settings</li><li>Requires sufficient AP licenses</li><li>Backup size must be < 10 MB</li></ul> Navigation Path <code>Administration > Account Management > ZD Migration</code> </div> <h3><img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022dd&feoid=00N50000002Cf3M&refid=0EMRk00000Gy9aH" width="1514" height="246"></img></h3> <ol><li>Log in to ZoneDirector</li><li>Go to Monitor > Access Points</li><li>Select AP(s)</li><li>Click More > Join Another Controller <img alt="Joining Another Controller" src="https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-CF1F6A34-0FDE-4999-8B7C-0D482C26CB6E-low.png" width="943" height="466"></img> </li><li>Enter controller address: <pre><code>device.ruckuswireless.com </code></pre> </li><li>Save and confirm</li></ol> Result: <ul><li>AP reboots</li><li>ZoneDirector blocks AP rejoin</li><li>AP upgrades firmware</li><li>AP joins RUCKUS One cloud automatically</li></ul> Only network connectivity parameters (VLAN, IP, DNS, mesh, country code, PoE) are retained. <div> <h2>Post?Migration Validation</h2> <h3>Venue?Level</h3> <code>Venues > Edit > Wi?Fi Configuration > Radio</code> <h3>AP?Level</h3> <code>Wi?Fi > AP List > Edit > Radio </code> <code></code> <div> <h2>Fallback Procedure</h2> <ol><li>In RUCKUS One, go to <code>Network Devices > Access Points</code></li><li>Select AP ? Delete</li><li>Choose: <ul><li>Factory reset to standalone firmware</li></ul> </li><li>Confirm deletion</li></ol> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022dd&feoid=00N50000002Cf3M&refid=0EMHt000005QzkZ" width="387" height="421"></img> AP can then rejoin ZoneDirector using: <ul><li>DHCP Option 43</li><li>DNS discovery</li><li>Manual controller IP</li></ul> </div> <code></code> </div> </div> </div> </div> <h2>FAQ</h2> <div>Q: Can I request a trial before migrating? Yes. Request a free trial at: <a href="https://www.ruckusnetworks.com/cloud-trial/" target="_blank">https://www.ruckusnetworks.com/cloud-trial/</a> Q: Will users be impacted during migration? Yes. Migrated APs reboot and temporarily lose service. Q: Are WLANs migrated automatically? No. WLANs, authentication servers, and policies must be created in advance. <div> <h2>Post?Migration Usage</h2> Refer to: <ul><li>RUCKUS One Admin Guide</li><li>RUCKUS One Mobile App (Android / iOS)</li></ul> <h2>Support Options</h2> <ul><li>In?product RUCKUS One chatbot (preferred)</li><li><a href="https://support.ruckuswireless.com" target="_blank">https://support.ruckuswireless.com</a> (Chat)</li><li><a href="https://support.ruckuswireless.com/cases/new" target="_blank">https://support.ruckuswireless.com/cases/new</a></li><li><a href="https://support.ruckuswireless.com/contact-us" target="_blank">https://support.ruckuswireless.com/contact-us</a></li></ul> </div> </div> <h1 id="ZoneDirectortoRUCKUSCloudmigration-FAQ"></h1>

This article explains the end?to?end migration process for transitioning ZoneDirector?managed Access Points to RUCKUS One. It covers prerequisites, supported device validation, network readiness, migration methods, risks, fallback procedures, and post?migration verification. Two supported AP migration workflows are documented: manual migration and migration using the “Join Another Controller” option.

2026-01-19T08:29:42-0800 2026-01-20T06:00:10-0800 https://support.ruckuswireless.com/articles/000014957 2026-01-19T08:35:26-0800 monthly 0.8 admin,premium knowledge_article_5831 knowledge_article_5831 2025-07-30T00:35:30-0700 000014957 Validated (External) Premium Ruckus cloud wifi Security;System network management;Website access;Website services;Registration Security, System Network Management, Website Access, Website Services, Registration, Ruckus Cloud WiFi How to delete cloud/RUCKUS One/R1 Deleting your account from RUCKUS One results in the permanent removal of your tenant account and will erase all personal information from the system. This includes: <ul><li class="MsoNoSpacing" style="margin-left: 8px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">All data, settings, and configurations linked to your tenant.</li><li class="MsoNoSpacing" style="margin-left: 8px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Complete removal of personal information from RUCKUS One records.</li></ul> This process ensures your privacy and data security by eliminating all traces of your account from the RUCKUS One cloud. Note: Once a deletion request is initiated, the system retains the tenant’s configuration for 30 days. After this period, all associated data is automatically purged. If you need to restore your tenant configuration, you must contact RUCKUS Customer Support within this 30-day window. Step-by-Step Guide to Delete Your RUCKUS Cloud / R1 Account 1. Log in to Ruckus cloud portal based on your hosted region: https://ruckus.cloud (for US) or https://eu.ruckus.cloud (for EU) or https://asia.ruckus.cloud (for Asia) 2. Navigate to Administration: <ul><li class="MsoNoSpacing" style="margin-left: 8px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Click on ‘Administration’</li><li class="MsoNoSpacing" style="margin-left: 8px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Under ‘Account Management’, select ‘Settings’</li></ul> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022fF&feoid=00N50000002Cf3M&refid=0EMPH00000NaaUM" width="507" height="413"></img> 3. Initiate Account Deletion: <ul><li class="MsoNoSpacing" style="margin-left: 8px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Scroll to the bottom of the ‘Settings’ tab</li><li class="MsoNoSpacing" style="margin-left: 8px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Under ‘Delete Account’, click ‘Delete Account’</li></ul> <div class="MsoNoSpacing" style="margin-left: 8px;"> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022fF&feoid=00N50000002Cf3M&refid=0EMPH00000NacRJ" width="477" height="417"></img> 4. Confirm Deletion: <ul><li class="MsoNoSpacing" style="margin-left: 8px;">A pop-up message will appear:</li></ul> “Are you sure you want to delete this account 'RUCKUS NETWORKS, INC'? This action is irreversible and cannot be undone.” <ul><li class="MsoNoSpacing" style="margin-left: 8px;">Type ‘Delete’ in the confirmation box next to:</li></ul> “Type the word ‘Delete’ to confirm:” <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022fF&feoid=00N50000002Cf3M&refid=0EMPH00000Nacj3"></img> 5. Finalize Deletion: <ul><li style="list-style-type: none;"> <ul style="list-style-type: disc;"><li class="MsoNoSpacing" style="margin-left: 16px;">Once ‘Delete’ is typed, the ‘Delete Customer’ button will be highlighted.</li><li class="MsoNoSpacing" style="margin-left: 16px;">Click ‘Delete Customer’ to complete the process.</li></ul> </li></ul> <div class="MsoNoSpacing" style="margin-left: 16px;"> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022fF&feoid=00N50000002Cf3M&refid=0EMPH00000NaZoQ"></img> After deletion: <ul><li class="MsoNoSpacing" style="margin-left: 8px;">Users will no longer be able to log in.</li><li class="MsoNoSpacing" style="margin-left: 8px;">Attempting to log in will result in an error: “Authentication failed.”</li></ul> If you mistakenly delete your account or need to recover configurations, contact RUCKUS Customer Support within 30 days of deletion. After this period, recovery is not possible. </div> </div>

This article provides a step-by-step guide for RUCKUS Cloud customers on how to permanently delete their RUCKUS One (R1) account, including important considerations and the implications of account deletion.

2026-01-19T08:35:26-0800 2026-01-20T06:00:09-0800 https://support.ruckuswireless.com/articles/000014644 2026-01-19T08:48:36-0800 monthly 0.8 admin,premium knowledge_article_5662 knowledge_article_5662 2025-01-17T04:02:22-0800 000014644 Validated (External) Premium Ruckus cloud switch;Ruckus cloud wifi Configuration;System network management Configuration, System Network Management, Ruckus Cloud Switch, Ruckus Cloud WiFi <div>How can notifications or alarms be enabled or disabled in Ruckus Cloud (R1)?</div> <div> Follow the steps below to enable or disable notifications/alarms in Ruckus Cloud (R1): <ol><li>Log in to the Ruckus Cloud Dashboard.</li><li>Navigate to: Administration > Notifications > Notification Preferences</li><li>The Notification Preferences page displays a list of all available system notifications and alarms.</li><li>Select or clear the checkboxes next to each notification type to enable or disable them as required.</li><li>Save the changes to apply the new notification settings.</li></ol> Once updated, only the selected notifications will be sent to the configured recipients. </div> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022iT&feoid=00N50000002Cf3M&refid=0EMRk00000GyEN3" width="1397" height="693"></img> <div> <h2>Important Notes</h2> <ul><li>? Notifications and alarms are configured at the account (global) level.</li><li>? It is not possible to disable notifications for individual venues.</li><li>? Only email notifications can be enabled or disabled from this menu.</li></ul> </div>

This article describes how to enable or disable notifications and alarms in Ruckus Cloud (R1) by configuring notification preferences from the administrative dashboard.

2026-01-19T08:48:36-0800 2026-01-20T06:00:09-0800 https://support.ruckuswireless.com/articles/000014721 2026-01-19T09:28:59-0800 monthly 0.8 admin,premium knowledge_article_5719 knowledge_article_5719 2025-03-05T23:00:00-0800 000014721 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway <div>Does vSZ?E/H and the vSZ?D support node affinity?</div> <div> Node affinity is supported only on the physical SmartZone 300 (SZ300) platform. <ul><li>vSZ?E, vSZ?H, and vSZ?D do not support node affinity</li><li>As of SmartZone / vSZ versions 6.1.2 and 7.1, there are no plans to introduce node affinity support on the vSZ platform</li></ul> This behavior is expected and working as designed. <div> <h2>Additional Notes</h2> <ul><li>vSZ environments prioritize automatic AP load balancing and resiliency</li><li>Manual controller pinning is intentionally excluded to maintain cloud?scale elasticity and HA behavior</li></ul> </div> </div>

Node affinity allows Access Points (APs) or AP groups to be explicitly bound to a specific controller or node within a clustered controller architecture. This article clarifies whether Virtual SmartZone (vSZ?E, vSZ?H) and vSZ?Data Plane (vSZ?D) platforms support node affinity.

2026-01-19T09:28:59-0800 2026-01-20T06:00:08-0800 https://support.ruckuswireless.com/articles/000014943 2026-01-19T09:13:18-0800 monthly 0.8 admin,premium knowledge_article_5829 knowledge_article_5829 2025-07-29T00:42:55-0700 000014943 Validated (External) Premium Ruckus cloud wifi Configuration;Installation;System network management Configuration, Installation, System Network Management, Ruckus Cloud WiFi How to Migrate an Access Point (AP) from One RUCKUS One (R1) Tenant to Another Tenant? Currently, RUCKUS One (R1) does not offer a direct option to migrate APs between tenants. However, AP migration can be achieved by first deleting the APs from the existing tenant and then adding them to the target tenant. <h2>Prerequisites:</h2> <ul><li>Venue and other configuration must be recreated manually in the target tenant, these settings are not auto migrated.</li><li>If APs have custom settings, capture screenshots or documentation before deletion.</li><li>Ensure the venue firmware version in the target tenant matches the source tenant to prevent automatic firmware upgrades during migration.</li><li>APs will factory reset upon deletion. To ensure smooth re-onboarding: <ul><li>Set AP management IP to DHCP</li><li>Set management VLAN to native VLAN1.</li><li>If static IP/VLAN is required and cannot be changed beforehand, ensure local access to the AP for reconfiguration of IP and VLAN settings.</li></ul> </li></ul> <h2>Migration Steps:</h2> <h3>1) Prepare Target Tenant Configuration</h3> Set up the Venues, AP Groups, WLANs in the target tenant to mirror the configuration of the source tenant. Ensure that all settings are aligned before proceeding with the AP migration. The screenshots below illustrate a comparison between the source tenant and the target tenant, highlighting the required configurations that must be in place prior to migration. <h4> Source Tenant:</h4> <img alt="User-added image" height="150" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000MuecP" width="700"></img> <img alt="User-added image" height="150" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000MuHzE" width="700"></img> <img alt="User-added image" height="150" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000Muefd" width="700"></img> <h4> Target Tenant:</h4> <img alt="User-added image" height="150" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000MuI5f" width="700"></img> <img alt="User-added image" height="150" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000MuekT" width="700"></img> <img alt="User-added image" height="150" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000MucFf" width="700"></img> <h3>2) Create AP Import Template</h3> <ul><li> <h4>Export AP List</h4> </li><li style="margin-left: 40px;">Navigate to Wi-Fi > Access Points > AP List.</li><li style="margin-left: 40px;">Click the “download icon” to export the current AP List as a CSV file.</li></ul> <img alt="User-added image" height="150" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000MuepJ" width="700"></img> <ul><li> <h4>Export Sample Import Template</h4> <ul><li>Click the “Add” button and select “Import APs”</li><li>In the import dialog, click the “Download template” hyperlink to export the sample AP import CSV file.</li></ul> </li></ul> This template will guide you in formatting the AP data correctly for bulk import. <img alt="User-added image" height="150" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000Mueqv" width="700"></img> <img alt="User-added image" height="150" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000Mueu9" width="700"></img> <ul><li> <h4>Create the AP Import File</h4> <ul><li>Using the exported AP list and the sample import template, compile the AP import file.</li><li>Ensure that: <ul><li>All required fields from the template are accurately filled using data from the AP list</li><li>The format strictly follows the structure of the sample template to avoid import errors.</li></ul> </li></ul> </li></ul> <img alt="User-added image" height="200" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000Muf2D" width="700"></img> <h3>3) Delete APs from source tenant</h3> To remove APs from the source tenant: <ul><li>Navigate to the AP List page.</li><li>Select the APs you want to delete.</li><li>Click the “Delete” button</li><li>In the confirmation dialog: <ul><li>Type “delete” in the input box</li><li>Select the option “Factory reset to Cloud ready”.</li></ul> </li></ul> This action will factory reset the APs without installing standalone firmware, making them ready to be added to the target tenant. <img alt="User-added image" height="200" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000Muf73" width="700"></img> <h3>4) Import APs to Target Tenant</h3> To import APs into the target tenant: <ul><li>Navigate to AP List page</li><li>Click the “Add” button and select “Import APs”.</li><li>Upload the AP import template file create in previous step.</li><li>From the dropdown menu, select the appropriate Venue.</li><li>Click the “Import” button to complete the process.</li></ul> <img alt="User-added image" height="250" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000MufBt" width="700"></img> <img alt="User-added image" height="150" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022lh&feoid=00N50000002Cf3M&refid=0EMPH00000MufqD" width="700"></img> Once imported, the APs will be added to the specified Venue and AP Group. <ul><li>The APs will take approximately 5–10 minutes to synchronize with the venue and WLAN configuration.</li><li>After synchronization, If APs require any custom configuration, you can proceed with these changes once the APs are fully operational in the target tenant.</li></ul> It's recommended to monitor the AP status during this period to ensure successful onboarding and configuration sync.

This article offers a comprehensive, step-by-step guide for migrating Access Points (APs) between RUCKUS One (R1) tenants. It details the prerequisites, outlines how to prepare an AP import template, and explains the process of deleting APs from the source tenant and onboarding them into the target tenant with minimal disruption.

2026-01-19T09:13:18-0800 2026-01-20T06:00:08-0800 https://support.ruckuswireless.com/articles/000014463 2026-01-19T09:09:43-0800 monthly 0.8 admin,premium knowledge_article_5526 knowledge_article_5526 2024-09-26T15:03:58-0700 000014463 Validated (External) Premium Ruckus cloud wifi;Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware;Installation;Troubleshooting;Registration Configuration, Firmware, Installation, Troubleshooting, Registration, Ruckus Cloud WiFi, Unleashed <div> <ul><li>How do I convert Ruckus Unleashed APs into Ruckus One–compatible APs?</li><li>How do I migrate APs from an Unleashed network to Ruckus One?</li></ul> </div> <div> <h2>Important Notes Before Migration</h2> <ul><li>There is no automated migration from Unleashed to Ruckus One.</li><li>All WLANs, Venues, and AP Groups must be manually recreated in Ruckus One.</li><li>Avoid partial migrations: <ul><li>Running the same SSID on Unleashed APs and R1 APs simultaneously can cause: <ul><li>Client connectivity issues</li><li>Failed roaming</li><li>Authentication failures</li></ul> </li><li>Always migrate all APs at a location together.</li></ul> </li></ul> </div> <div> <h2>Migration Procedure</h2> <h3>Step 1: Pre-stage Configuration in Ruckus One</h3> Before touching the APs: <ol><li>Create the Venue in Ruckus One.</li><li>Configure: <ul><li>WLANs (SSIDs, security, VLANs)</li><li>AP Groups</li><li>Any required policies</li></ul> </li></ol> This ensures APs become operational immediately after onboarding. <hr></hr> <h3>Step 2: Backup the Unleashed Configuration</h3> <ol><li>Log in to the Unleashed Web UI</li><li>Navigate to: Administration ? Backup & Restore</li><li>Click Backup</li><li>Save the backup file locally</li></ol> <h2><img alt="User-added image" height="418" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022k5&feoid=00N50000002Cf3M&refid=0EMPH00000BSRJt" width="566"></img></h2> <blockquote> ?? This backup cannot be restored to Ruckus One but is useful for reference or rollback. </blockquote> <hr></hr> <h3>Step 3: Download Solo Access Point Firmware</h3> <ol><li>Go to Ruckus Support Portal: <<a href="https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com/</a>></li><li>Search for your AP model (e.g., R650, R750)</li><li>Select Downloads</li><li>Download RUCKUS Solo Access Point firmware only</li></ol> <img alt="User-added image" height="438" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022k5&feoid=00N50000002Cf3M&refid=0EMPH00000BSROj" width="674"></img> ? Important <ul><li>Do NOT download: <ul><li>Unleashed firmware</li><li>SmartZone firmware</li><li>IoT firmware</li></ul> </li><li>The firmware must be labeled Solo Access Point</li></ul> <ol start="5"><li>Review the EULA and complete the download.</li></ol> <hr></hr> <h3>Step 4: Flash Solo Firmware on Unleashed APs</h3> <ol><li>Power off ALL Unleashed APs <ul><li>This prevents APs from forming a new Unleashed cluster</li></ul> </li><li>Factory reset the first AP to be migrated</li><li>Power on the AP and wait for it to boot</li><li>Open a browser to the AP’s IP address</li><li>On the Unleashed installation page, click Local Upgrade Note: Upgrading the master AP of an active cluster using this option to standalone firmware can upgrade all the slave APs as well (this is advisable after testing a few solo migration on APs and then a bulk migration) </li></ol> <img alt="User-added image" height="526" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022k5&feoid=00N50000002Cf3M&refid=0EMPH00000BSRa1" width="664"></img> <ol start="6"><li>Upload the Solo firmware bundle</li><li>Confirm the upgrade and wait for completion <img alt="User-added image" height="472" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022k5&feoid=00N50000002Cf3M&refid=0EMPH00000BSRoX" width="623"></img></li></ol> After the upgrade, the AP will reboot and display the Standalone (Solo) login page. <ol start="8"><li>Repeat the same process for all remaining APs.</li></ol> <hr></hr></div> <div> <h2>Step 5: Provision the AP in Ruckus One</h2> <ol><li>Open a new Incognito/InPrivate browser window <ul><li>This avoids cached authentication issues</li></ul> </li><li>Log in to the AP using: <ul><li>Username: <code>super</code></li><li>Password: <code>sp-admin</code></li></ul> </li><li>When prompted, set a temporary (disposable) password</li><li>Note down the AP Serial Number <img alt="User-added image" height="379" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022k5&feoid=00N50000002Cf3M&refid=0EMPH00000BSM0s" width="663"></img> </li></ol> <hr></hr> <h3>Step 6: Claim the AP in Ruckus One</h3> <ol><li>Log in to Ruckus One</li><li>Navigate to: Wi?Fi ? AP List</li><li>Click Add ? AP</li><li>Enter: <ul><li>Serial Number</li><li>AP Name</li><li>Venue</li><li>AP Group</li></ul> </li><li>Click Add <img alt="User-added image" height="514" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000022k5&feoid=00N50000002Cf3M&refid=0EMPH00000BSSpR" width="500"></img> </li></ol> </div> <div><hr></hr> <h3>Step 7: Final Onboarding</h3> <ol><li>Power cycle the AP</li><li>Wait 15–20 minutes <ul><li>AP will: <ul><li>Connect to Ruckus One</li><li>Download R1 firmware</li><li>Reboot automatically</li></ul> </li></ul> </li><li>Verify AP status shows Operational</li></ol> 🎉 Success! The former Unleashed AP is now fully managed by Ruckus One Cloud. </div>

This article explains how to convert existing Ruckus Unleashed Access Points (APs) into Ruckus One (R1) cloud-managed APs. Since there is no direct in-place migration from Unleashed to Ruckus One, the process involves re-flashing the APs with Solo firmware and then onboarding them into Ruckus One Cloud.

2026-01-19T09:09:43-0800 2026-01-20T06:00:08-0800 https://support.ruckuswireless.com/articles/000014963 2026-01-19T09:42:51-0800 monthly 0.8 admin,premium knowledge_article_5835 knowledge_article_5835 2025-08-01T05:44:23-0700 000014963 Validated (External) Premium Ruckus cloud wifi Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, Ruckus Cloud WiFi <div>How can Chromebooks be integrated with certificate-based authentication in Ruckus One?</div> <div> <h3>Step 0: Create Google Workspace and Domain</h3> <ul><li>Create a Google Workspace tenant.</li><li>Register and apply a custom domain to the Workspace.</li><li>Enroll Chromebooks under the managed domain.</li></ul> <hr></hr> <h3>Step 1: Configure Verified Access for Managed Chromebooks</h3> <ul><li>In the Google Admin Console, enable Verified Access.</li><li>Configure the Verified Access settings to allow device-level verification for ChromeOS devices.</li></ul> <hr></hr> <h3>Step 2: Create a Certificate Template and Enable Chromebook Enrollment</h3> <ul><li>Configure a certificate authority (CA) and create a certificate template.</li><li>Enable Chromebook enrollment for client certificate issuance.</li><li>Ensure certificates support EAP?TLS authentication.</li></ul> <hr></hr> <h3>Step 3: Create a Network in Ruckus One</h3> <ul><li>Log in to the Ruckus One portal.</li><li>Create a new WLAN profile.</li><li>Select 802.1X / EAP-TLS as the security method.</li><li>Associate the RADIUS server with the network.</li></ul> <hr></hr> <h3>Step 4: Upload RADIUS CA Certificate to Google Admin Console</h3> <ul><li>Export the Root or Intermediate CA certificate used by the RADIUS server.</li><li>Upload the CA certificate in the Google Admin Console under Device > Networks > Certificates.</li></ul> <hr></hr> <h3>Step 5: Create a Network Configuration in Google Admin Console</h3> <ul><li>Define a Wi?Fi network configuration.</li><li>Select EAP?TLS as the authentication type.</li><li>Assign the network to the appropriate Organizational Units (OUs).</li></ul> <hr></hr> <h3>Step 6: Add Extension Settings in Google Admin Console</h3> <ul><li>Configure the required Chrome extensions if applicable.</li><li>Ensure certificate selection and authentication policies are applied correctly.</li></ul> <hr></hr> <h3>Step 7: Add Service Account to Verified Access Settings</h3> <ul><li>Add the relevant service account to the Verified Access configuration.</li><li>Grant necessary permissions for certificate validation.</li></ul> <hr></hr> <h3>Step 8: Log in to Chromebook Using Workspace Account</h3> <ul><li>Sign in to the Chromebook with a managed Google Workspace account.</li><li>Confirm that the client certificate is automatically provisioned.</li></ul> <hr></hr> <h3>Step 9: Connect Client Device to the Network</h3> <ul><li>Select the configured Wi?Fi network.</li><li>Authenticate using the installed client certificate.</li><li>Verify successful network access in Ruckus One dashboards and RADIUS logs.</li></ul> <div>Note: By correctly configuring Google Workspace, Verified Access, client certificate enrollment, and Ruckus One WLAN with EAP?TLS, managed Chromebooks can successfully authenticate to Wi?Fi networks using certificate-based authentication.</div> </div>

This article provides step-by-step guidance to integrate managed Chromebooks with certificate-based authentication using Ruckus One. The integration enables secure 802.1X authentication by leveraging Google Workspace, Chromebook Verified Access, and a RADIUS-backed certificate infrastructure.

2026-01-19T09:42:51-0800 2026-01-20T06:00:07-0800 https://support.ruckuswireless.com/articles/000015181 2026-01-16T14:49:15-0800 monthly 0.8 admin,premium knowledge_article_6072 knowledge_article_6072 2026-01-16T14:49:15-0800 000015181 Validated (External) Premium Process on how customers can report Security Vulnerability related to RUCKUS Networks products. process to report Security Vulnerability related to RUCKUS Networks products. Path to reporting Security Vulnerability related to RUCKUS Netwo All individuals and organizations reporting vulnerabilities in RUCKUS Networks products. <a name="_Toc215730194" style="color: #d35400;">Responsibilities</a> Reporter: Submit accurate and complete vulnerability details via the official submission page. RUCKUS Security Team: Reviews, validates, and responds to reported vulnerabilities while maintaining confidentiality. Legal & Compliance Team: Ensure adherence to RUCKUS’s terms of use and applicable laws. <h2 style="line-height: 1;"><a name="_Toc215730196" style="color: #d35400;">Procedure</a></h2> <ul style="list-style-type: circle;"><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';line-height: 1;">Reporter Identifies Vulnerability: <ul style="list-style-type: circle;"><li style="line-height: 1;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Conduct security research in compliance with legal and ethical standards.</li></ul> </li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';line-height: 1;">Reporter prepares Report: <ul style="list-style-type: circle;"><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Include detailed description, steps to reproduce, and potential impact.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Ensure accuracy and avoid sharing confidential information publicly.</li></ul> </li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';line-height: 1;">Submit Report: <ul style="list-style-type: circle;"><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Use the official RUCKUS Networks vulnerability submission page:<a href="https://support.ruckuswireless.com/sirt-report-submission" target="_blank"> </a></li></ul> </li></ul> <a href="https://support.ruckuswireless.com/sirt-report-submission" target="_blank">https://support.ruckuswireless.com/sirt-report-submission</a> <a href="https://docs.hackerone.com/en/articles/8473994-submitting-reports" target="_blank">https://docs.hackerone.com/en/articles/8473994-submitting-reports</a> (Or) <ul style="list-style-type: circle;"><li style="list-style-type: none;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';line-height: 1;"> <ul style="list-style-type: circle;"><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Write to RUCKUS Security Team directly at <a href="mailto:SOC@vistancenetworks.com" target="_blank">SOC@vistancenetworks.com</a></li></ul> </li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';line-height: 1;">Maintain Confidentiality: <ul style="list-style-type: circle;"><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Do not disclose vulnerability details to third parties until RUCKUS responds.</li></ul> </li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';line-height: 1;">Follow-Up: <ul style="list-style-type: circle;"><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';line-height: 1;">Await acknowledgment and resolution updates from RUCKUS Security Team.</li></ul> </li></ul>

This article outlines the process on how customers can report Security Vulnerability related to RUCKUS Networks products.

2026-01-16T14:49:15-0800 2026-01-19T10:00:10-0800 https://support.ruckuswireless.com/articles/000014572 2026-01-13T11:43:30-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5590 knowledge_article_5590 2024-11-14T22:30:16-0800 000014572 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;Troubleshooting Installation, Troubleshooting, SmartCell Gateway <div>What causes the following messages in <code>event.log</code>?--- 2024-11-06T01:00:50+00:00 127.0.0.1 service.StorageService @@3001,cassandraError,Repair session failed:</ <div> <ul><li>This behavior occurs because SmartZone attempts Cassandra repair on all keyspaces, including <code>icx_m.file</code>, even if unused.</li><li>It does not impact system functionality.</li><li>Applies to all SmartZone releases including R5.2, R6.1 and R7.x</li></ul> </div>

This article explains why the following message appears in event.log around 01:00 UTC daily, even after a fresh installation of SmartZone: --- 2024-11-06T01:00:50+00:00 127.0.0.1 service.StorageService @@3001,cassandraError,Repair session failed:

2026-01-13T11:43:30-0800 2026-01-16T18:00:07-0800 https://support.ruckuswireless.com/articles/000011128 2026-01-13T12:13:45-0800 monthly 0.8 admin,premium knowledge_article_4460 knowledge_article_4460 2020-12-01T01:41:26-0800 000011128 Validated (External) Premium Sz144 d;Sz100d Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SZ144 D, SZ100D <div>How can I recover a dataplane appliance if it shows as disconnected and unmanaged in the SmartZone controller after a power loss?</div> <ul><li>Factory default the data plane and rejoin the controller.</li></ul> <pre class="ckeditor_codeblock">#set-factory</pre> <ul><li>Please contact CommScope Ruckus support and provide the dataplane snapshot log for post mortem checkup</li></ul>

This article explains why a dataplane appliance may appear as disconnected and unmanaged in the SmartZone controller after a power loss and provides steps to recover the device.

2026-01-13T12:13:45-0800 2026-01-16T18:00:07-0800 https://support.ruckuswireless.com/articles/000011279 2026-01-13T12:34:23-0800 monthly 0.8 admin,premium knowledge_article_4496 knowledge_article_4496 2021-02-01T00:23:54-0800 000011279 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How can I regularly change the login and password of SZ controlled APs and does this change affect Client Device or AP operation? The online guide API guide for 6.1.2 SZ can be found here: <a href="https://docs.ruckuswireless.com/smartzone/6.1.2/vsze-public-api-reference-guide-612.html" target="_blank">https://docs.ruckuswireless.com/smartzone/6.1.2/vsze-public-api-reference-guide-612.html</a> <a href="https://docs.ruckuswireless.com/smartzone/6.1.2/vszh-public-api-reference-guide-612.html" target="_blank">https://docs.ruckuswireless.com/smartzone/6.1.2/vszh-public-api-reference-guide-612.html</a> The change can be done per AP Zone: The SZ UI facilitates this config under Zone Configuration >> General Options: <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002101&feoid=00N50000002Cf3M&refid=0EM2J000002JYcm" style="width: 597px;height: 62px;"></img> This is supported using AP Zone Configuration in API - <h2>Ruckus Wireless AP Zone</h2> To make changes to a specific Zone you need to first get the ZoneID via Retrieve Zone command (per domain) <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002101&feoid=00N50000002Cf3M&refid=0EMRk00000Gq6mU" width="800" height="346"></img> You can then make the change per Zone using Patch feature <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000002101&feoid=00N50000002Cf3M&refid=0EMRk00000GqA28" width="724" height="422"></img> Config change is reflected in VSZ events, and the events captured login fail with old password, and login success with new password. Config change does not reset WLANs, and is not traffic affecting.

Change SZ AP login and password using API calls

2026-01-13T12:34:23-0800 2026-01-16T18:00:06-0800 https://support.ruckuswireless.com/articles/000010078 2026-01-13T12:16:20-0800 monthly 0.8 admin,premium knowledge_article_4052 knowledge_article_4052 2020-01-22T08:03:30-0800 000010078 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Insight Why I am getting error on SCI GUI "Unable to retrieve header information due to an unexpected error"? Allow port 443, 53000 and 59090 in firewall for incoming traffic to SCI.

Explanation of SCI GUI showing error "Unable to retrieve header information due to an unexpected error" and how to fix it

2026-01-13T12:16:20-0800 2026-01-16T18:00:06-0800 https://support.ruckuswireless.com/articles/000010340 2026-01-13T06:19:50-0800 monthly 0.8 admin,premium knowledge_article_4137 knowledge_article_4137 2020-04-14T01:09:47-0700 000010340 Validated (External) Premium Unleashed;Cloud services;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Installation Configuration, Installation, Unleashed, Cloud Services <div>What is WiFi4EU?</div> What is WiFi4EU <div style="margin-left: 40px;">The WiFi4EU initiative by European commission (EC) to provide free access to Wi-Fi hotspots for citizens in public spaces including parks, squares, public buildings, libraries, health centers and museums in municipalities throughout Europe.</div> How is it implemented <ol><li>Interested local authorities (for now) apply for participation through online EC portal in a first-come, first-serve basis</li><li>Approved beneficiaries will receive a voucher to cover the cost of hardware and installation (up to €15,000) for Wi-Fi hotspot</li><li>Beneficiaries then chose a Wireless equipment provider for wireless infrastructure and the voucher is transferred to them</li></ol> What is the role of Ruckus in WiFi4EU <div style="margin-left: 40px;">Ruckus come into the picture (step 3 of the above-given bulletins) as the providers of the wireless equipments to the participating entity. </div> What are the compliance for the captive portal hosted for WiFi4EU <ul><li>Wi-Fi equipment must be Hotspot 2.0 compatible</li><li>Inclusion and proper loading of the snippet and Logo (WiFi4EU)</li><li>Minimum speed and latency (Set by EC)</li></ul> What is the snippet used in the WiFi4EU captive portal page <ul><li>A snippet is a javascript added to the captive portal HTML script to collect the following and report to the EC for tracking the "quality" of the provided service: <ul><li>Network identifier</li><li>Page load time metrics</li><li>Validation of installation of the snippet</li><li>Portal validation results</li><li>Network metrics test (once every n page loads)</li></ul> </li><li>A self test modulus is also included to run the compliance test of the page</li></ul> Ruckus and WiFi4EU: <ul><li>WiFi4EU is offered in Ruckus One (R1) and Unleashed (200.8.x onwards) product line</li><li>You can find the config guide for unleashed using the following link: https://support.ruckuswireless.com/documents/3123-ruckus-unleashed-200-8-ga-user-guide [Note: This link was the latest 200.8.x guide available when this article was written]</li><li>Under Ruckus Onei: <ul><li>You can create a WiFi4EU SSID by creating a new WLAN while opting for Captive portal under Network Details and then selecting either Click-through, Self Sign in, Host Approval or Guest Pass [Note: For now, EU expects the SSID to be click-through without any auth]</li><li>Enable "Insert WiFi4EU Snippet" under Portal Web Page and then add the WiFi4EU UUID <ul><li>WiFi4EU UUID is the Universally Unique Identifier(UUID)that the EC attributed to this WiFi4EU network installation. It is generated when the network installation is created in the Installation Report and cannot be changed</li></ul> </li><li>Complete the WLAN creation wizard to deploy the WLAN</li></ul> </li><li>You can find the self test link under the Overview of the WLAN</li><li>You can further use the copy self test link to test the portal on different client device type/ screens</li></ul>

WiFi4EU is an initiative by the European Commission to provide free Wi-Fi access in public spaces across Europe. This article explains the concept, compliance requirements, and configuration steps for Ruckus CloudWiFi and Unleashed platforms.

2026-01-13T06:19:50-0800 2026-01-13T14:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000004zvASAQ?attachment_index=0 2026-01-13T14:00:09-0800 monthly admin,premium knowledge_article_4137 knowledge_article_4137_attachment_1 WiFi4EU Implementaiton Guide.pdf 730429.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA22J0000004zvASAQ?attachment_index=1 2026-01-13T14:00:09-0800 monthly admin,premium knowledge_article_4137 knowledge_article_4137_attachment_1 WiFi4EU Process.pdf 1715785.0 application/pdf https://support.ruckuswireless.com/articles/000010459 2026-01-12T09:19:48-0800 monthly 0.8 admin,premium knowledge_article_4169 knowledge_article_4169 2020-05-01T12:48:05-0700 000010459 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Installation;Troubleshooting;Known issues and workarounds Performance, Installation, Troubleshooting, Known Issues and Workarounds, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP <div>Why are my multi?gigabit Ethernet ports only linking at 1 Gb/s, or downshifting to 1 Gb/s over time?</div> <div> <ol><li> Correct cabling imperfections Ensure the cable plant complies with TIA/EIA specifications for Cat5e or Cat6 cabling. Use a certified test tool—such as the Fluke DSX CableAnalyzer—to validate performance and detect imbalance or other anomalies. </li><li> Extend the cable run (if replacement isn’t possible) If the existing cabling cannot be replaced, adding additional compliant cable to increase total run length may help—provided the total length remains under 100 meters. </li><li> Reduce AP radio power (last resort) Lowering RF transmit power on both 2.4 GHz and 5 GHz radios by 3 dB or more may improve tolerance to cable imbalance. Note: Reducing RF power affects wireless coverage and performance. A wireless network redesign may be required if this option is used. </li></ol> </div>

Multi?gigabit Ethernet (2.5GbE/5GbE) requires high?quality, standards?compliant cable runs. Any imbalance or deviation from TIA/EIA cabling specifications may cause links to establish at only 1 Gb/s or gradually downshift to 1 Gb/s over time.

2026-01-12T09:19:48-0800 2026-01-13T10:00:14-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000PiUvSAK?attachment_index=0 2026-01-13T10:00:14-0800 monthly admin,premium knowledge_article_4169 knowledge_article_4169_attachment_1 TSB2020-003_Multi-Gig_Cables.pdf 147681.0 application/pdf https://support.ruckuswireless.com/articles/000010457 2026-01-12T13:07:10-0800 monthly 0.8 admin,premium knowledge_article_4189 knowledge_article_4189 2020-05-11T04:56:29-0700 000010457 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Configuration;Security Configuration, Security, SmartCell Gateway, SmartCell AP <div>Which sites or IP subnets should be whitelisted when enabling the AP Restricted Access ACL in SZ 5.2?</div> <div> The Restricted AP Access feature prevents unauthorized Internet-based access to APs. To ensure proper functionality: <ul><li>Add IP subnets for administration networks that require diagnostic or management access.</li><li>APs automatically whitelist traffic for: <ul><li>SZ access</li><li>SCI</li><li>RND</li><li>RADIUS</li><li>Walled Garden</li><li>Wispr operations for connected wireless clients</li></ul> </li></ul> </div> <img alt="User-added image" height="474" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000020f3&feoid=00N50000002Cf3M&refid=0EM2J000001SXgg" width="701"></img> <div>Configurable via SZ UI: Security ? Access Control ? Restricted AP Access</div> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000020f3&feoid=00N50000002Cf3M&refid=0EMRk00000GoE9p" width="911" height="385"></img> Select the Zone >> Create a Profile <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000020f3&feoid=00N50000002Cf3M&refid=0EMRk00000GoEbF" width="903" height="248"></img> Fill in the profile name. Add the TCP/UDP/Both protocols as needed Select the knob to block all known ports Add the preferred IPs or IP network range as needed for the profile Click OK <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000020f3&feoid=00N50000002Cf3M&refid=0EMRk00000GoFQr" width="893" height="420"></img> Once the profile is configured, map the same to the zone/APs from Advanced Options <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk00000020f3&feoid=00N50000002Cf3M&refid=0EMRk00000GoFyj" width="858" height="446"></img>

Guidelines for configuring the new Restricted AP Access feature introduced in SmartZone (SZ) 5.2, designed to protect APs from unauthorized external network access.

2026-01-12T13:07:10-0800 2026-01-13T10:00:14-0800 https://support.ruckuswireless.com/articles/000010867 2026-01-12T13:43:17-0800 monthly 0.8 admin,premium knowledge_article_6071 knowledge_article_6071 2020-09-16T08:36:30-0700 000010867 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway How to map customized Ruckus GRE tunnel profile to a WLAN in SZ/vSZ The tunnel profile is fetched from the profile mapped against the AP GRE Tunnel options on the zone level Hence configure the profile against the same from the zone level for Ruckus GRE Options <img alt="User-added image" height="562" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zPd&feoid=00N50000002Cf3M&refid=0EM2J000001Cdzb" width="794"></img>

This article explains the steps to customize a Ruckus GRE tunnel profile for a WLAN in SZ/vSZ.

2026-01-12T13:43:17-0800 2026-01-13T10:00:13-0800 https://support.ruckuswireless.com/articles/000014732 2026-01-12T13:46:58-0800 monthly 0.8 admin,premium knowledge_article_6070 knowledge_article_6070 2025-03-13T01:51:48-0700 000014732 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Performance;Configuration Performance, Configuration, SZ144, SZ300, virtual SmartCell Gateway, SZ100 What is the API rate read and write limit on the SmartZone? The following are the API support rate: <img alt="User-added image" height="204" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zKn&feoid=00N50000002Cf3M&refid=0EMRk00000GlLar" width="928"></img> Reference Doc: SmartZone 6.1.2 (LT-GD) Management Guide <a href="https://support.ruckuswireless.com/documents/4637-smartzone-6-1-2-lt-gd-management-guide" target="_blank">https://support.ruckuswireless.com/documents/4637-smartzone-6-1-2-lt-gd-management-guide</a>

Providing details on the Read and Write API rate limit for version 6.1.2

2026-01-12T13:46:58-0800 2026-01-13T10:00:13-0800 https://support.ruckuswireless.com/articles/000014725 2026-01-12T13:47:47-0800 monthly 0.8 admin,premium knowledge_article_6069 knowledge_article_6069 2025-03-07T08:04:15-0800 000014725 Validated (External) Premium R770;RUCKUS R770 Performance;Known issues and workarounds Performance, Known Issues and Workarounds, R770 Is Band Balancing working with 6GHz? 1. BTM is only used to move <ul><li>from 2.4Ghz to 5Ghz</li><li>from 2.4Ghz to 6Ghz</li><li>from 5Ghz to 2.4Ghz</li><li>we don’t move the client from 6Ghz to 2.4Ghz or between 5G/6Ghz</li></ul> 2. Band Balancing is done per radio, not per WLAN (unlike AP Load Balancing which is based on WLAN load) 3. If you set the parameters “2.4GHz Client Load” at 25% (by default), the system will try to keep 25% of the device in 2.4GHz, and the rest will be in 5/6GHz. As of today no way to set a ratio on 5GHz or 6GHz.

Can we do band balancing between 6 Ghz and 5Ghz and 2.4 Ghz?

2026-01-12T13:47:47-0800 2026-01-13T10:00:12-0800 https://support.ruckuswireless.com/articles/000010877 2026-01-12T13:48:23-0800 monthly 0.8 admin,premium knowledge_article_6068 knowledge_article_6068 2020-09-16T08:34:18-0700 000010877 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How to configure FreeRADIUS server with Ruckus SZ/vSZ for External DPSK WLAN? Configuration: Below steps will walk through a FreeRADIUS installation on Centos7. Download FreeRADIUS: 1. Type in yum install freeradius 2. Agree to install FreeRADIUS. 3. Type in yum install freeradius-utils 4. Agree To install FreeRADIUS Utilities Install Ruckus Networks RADIUS Dictionary in the RADIUS Server Before you can utilize FreeRADIUS to provide External DPSK services, FreeRADIUS requires the Ruckus Networks dictionary file (dictionary.ruckus) to be installed on the server. There are enhancements to this version that adds the VSA to communicate back to SZ the DPSK. The VSA is a Vendor Specific Attriubute that will contain the DPSK for the user. 1. Download the dictionary file using below link for 5.1 and above SZ version: <a href="https://support.ruckuswireless.com/article_attachments/kA250000000L6gnCAC?attachment_index=0" target="_blank">https://support.ruckuswireless.com/article_attachments/kA250000000L6gnCAC?attachment_index=0</a> 2. Rename the file “dictionary.ruckus” 3. Save the “dictionary.ruckus” file in the /etc/raddb/ folder 4. Change the files group to “radiusd” 5. Add the following line into the file /etc/raddb/dictionary $INCLUDE dictionary.ruckus Allow the SmartZone to be able to communicate to the FreeRADIUS Server: 1. Edit the clients.conf file in /etc/raddb/ 2. Add in your SmartZone details to allow your SmartZone to communicate with the Free Radius Server: <img height="110" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zRF&feoid=00N50000002Cf3M&refid=0EM2J000001Ce6N" width="456"></img> 3. Add a user in /etc/raddb/users file NOTE: #Prepend “0x00” (1 byte reserve for security purpose) in the generated PSK. #Must Include the following lines, <ueMAC> Cleartext-Password:= <uemac> Ruckus-Dpsk = <generateddpsk> Example of a /etc/raddb/users file that is setup for External DPSK. The mac address of the device is dc2b2a917388. We use the username and the Cleartext-Password as the mac address. Under this condition, if the username and password is correct, we will return the VSA Ruckus-DPSK with the HEX (which is a 256-bit key for the WLAN “External-DPSK” <my WLAN> and the PSK “beamflex”): <img height="97" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zRF&feoid=00N50000002Cf3M&refid=0EM2J000001Ce6O" width="880"></img> You can use the FreeRADIUS CLI command “radiusd -X” to provide logging to the screen. This also starts Radius using the config that you have created. If you are having problems, check IPCHAINS/IPTABLES/SELINUX. How to Create an External DPSK WLAN in your SmartZone controller 1. Click on “Wireless LANs” on the left hand side of the controller 2. Click on “Create” to create a new WLAN LAN General Options Name: <Enter in a NAME for the WLAN> SSID: <The SSID name that the end users will connect to> ZONE: <Select your ZONE> WLAN Group: <Select the WLAN Group that you want to put this in> Authentication Options: Ruckus External DPSK only works on authentication type: Select “Standard Usage (For most regular wireless networks) Method: You can use either WPA2 or WPA-Mixed, depending on your environment. You cannot use WEP-64 (40 bits), WEP-128 (104 bits) or None. Default is WPA2. WPA2 --> Select this option when you have only WPA2 compatible devices on your network. This will disallow any WPA1 devices from connecting to the network. WPA-Mixed --> Allows mixed networks of WPA and WPA2 compliant devices. Use this setting if your network has a mixture of older clients that only support WPA and TKIP, and newer client devices that support WPA2 and AES. Algorithim: Select AES or Auto. Selecting AUTO will allow devices to utilize AES or TKIP. Default is AES, which is recommended. Authentication Server: This will be automatically checked. You cannot uncheck this box. The controller must be used as a Proxy for all authentication. You cannot select Non-Proxy Authentication Server Create an Authentication Server: Click on the “+ Create” button to create an authentication server. This server will be your External DPSK server. This MUST be a RADIUS server, you cannot select Active Directory or LDAP. They will not work. The communication between the SmartZone and the RADIUS server uses the PAP protocol. 1. Click on RADIUS 2. Enter in the name 3. Enter in the IP Address 4. Enter in the shared secret that you created in your RADIUS server 5. Click on OK to accept 6. Click on OK to close the WLAN Test your authentication server: 1. Start your radius server (use “radiusd -X” in CentOS). Your Radius server will also include the dictionary.ruckus file that you created. This is important since the dictionary.ruckus file also includes the new External DPSK VSA. Sample output from “radiusd -X”: <img height="257" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zRF&feoid=00N50000002Cf3M&refid=0EM2J000001Ce6S" width="727"></img> 2. In SmartZone, click on Services & Profiles, Authentication Servers, Proxy Authentication Server, and select your RADIUS server that you created. 3. Click on Test AAA in the top box. 4. In the Test AAA screen, enter in the username and password that you had created in /etc/raddb/users (this is the MAC address of your device), select PAP and click on Test. <img height="510" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zRF&feoid=00N50000002Cf3M&refid=0EM2J000001Ce6c" width="570"></img> 5. In radius we can see an output on our console, which shows us that there was a access-accept message for the device: dc2b2a917388 as well as a returned ruckus-VSA attribute: <img height="89" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zRF&feoid=00N50000002Cf3M&refid=0EM2J000001Ce6X" width="570"></img> <img height="74" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zRF&feoid=00N50000002Cf3M&refid=0EM2J000001Ce6Y" width="854"></img>

This Article will explain how to configure FreeRADIUS server with Ruckus SZ/vSZ for External DPSK WLAN

2026-01-12T13:48:23-0800 2026-01-13T10:00:12-0800 https://support.ruckuswireless.com/articles/000014969 2026-01-12T13:49:16-0800 monthly 0.8 admin,premium knowledge_article_6067 knowledge_article_6067 2025-08-05T06:44:22-0700 000014969 Validated (External) Premium R370;RUCKUS R370 Configuration;Installation Configuration, Installation, R370 Why do I get the message: Unable to move the APs to a different AP zone. Reason: The target zone's firmware does not support this AP model R370. Move the access point to a zone that is running version?7.1.1 or higher. For all WIFI 7 AP models ( R370, R670, R770, H670 ), minimum supported AP firmware is 7.1.1.x NOTE: Always refer to the SmartZone upgrade guide document for supported AP models before moving or adding APs to the controller to avoid such Issue. Reference Docs: 7.1.1 upgrade Guide: <a href="https://support.ruckuswireless.com/documents/5726" target="_blank">https://support.ruckuswireless.com/documents/5726</a> 6.1.2 Upgrade Guide: <a href="https://support.ruckuswireless.com/documents/4636" target="_blank">https://support.ruckuswireless.com/documents/4636</a>

Why do I get the message: Unable to move the APs to a different AP zone. Reason: The target zone's firmware does not support this AP model.

2026-01-12T13:49:16-0800 2026-01-13T10:00:11-0800 https://support.ruckuswireless.com/articles/000014502 2026-01-12T13:50:02-0800 monthly 0.8 admin,premium knowledge_article_6066 knowledge_article_6066 2024-10-17T16:09:34-0700 000014502 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, SZ144, SZ300, virtual SmartCell Gateway, SZ100 How to configure SMTP on the smart zone controller & perform troubleshooting? Step 1: Login to Google Account. <a href="https://myaccount.google.com/" target="_blank">https://myaccount.google.com/</a> Step 2: Enable 2-step verification. In the Google account, please navigate to security & select “2-step verification", you will get redirected to another page. On the new page, please select “turn on 2-step verification. <img alt="User-added image" height="380" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zEL&feoid=00N50000002Cf3M&refid=0EMRk00000GlAFd" width="873"></img> <img alt="User-added image" height="381" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zEL&feoid=00N50000002Cf3M&refid=0EMRk00000GlAp8" width="875"></img> Step 3: Visit the below website to create an app name & the app password. When you enter the app name & click on create, you will get the password. Please save the password. <a href="https://myaccount.google.com/apppasswords" target="_blank">https://myaccount.google.com/apppasswords</a> <img alt="User-added image" height="360" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zEL&feoid=00N50000002Cf3M&refid=0EMRk00000Gl3ak" width="879"></img> <img alt="User-added image" height="362" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zEL&feoid=00N50000002Cf3M&refid=0EMRk00000Gl3EA" width="884"></img> Step 4: Add the SMTP configuration to the controller. <table class="Table" height="291" width="790"><tbody><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 179px;padding: 0in 7px 0in 7px;height: .2in;background-color: #f4f5f7;border-top: 1px solid black;border-right: 1px solid black;border-left: 1px solid black;">Logon Name</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 215px;padding: 0in 7px 0in 7px;height: .2in;background-color: white;border-top: 1px solid black;border-right: 1px solid black;border-left: none;">your google account</td></tr><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 179px;padding: 0in 7px 0in 7px;height: .2in;background-color: #f4f5f7;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Password</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 215px;padding: 0in 7px 0in 7px;height: .2in;background-color: white;border-top: none;border-right: 1px solid black;border-left: none;">Password from step 3</td></tr><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 179px;padding: 0in 7px 0in 7px;height: .2in;background-color: #f4f5f7;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">SMTP Server Host</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 215px;padding: 0in 7px 0in 7px;height: .2in;background-color: white;border-top: none;border-right: 1px solid black;border-left: none;">smtp.gmail.com</td></tr><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 179px;padding: 0in 7px 0in 7px;height: .2in;background-color: #f4f5f7;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">SMTP Server Port</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 215px;padding: 0in 7px 0in 7px;height: .2in;background-color: white;border-top: none;border-right: 1px solid black;border-left: none;">465</td></tr><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 179px;padding: 0in 7px 0in 7px;height: .2in;background-color: #f4f5f7;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Mail From </td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 215px;padding: 0in 7px 0in 7px;height: .2in;background-color: white;border-top: none;border-right: 1px solid black;border-left: none;">same as logon name</td></tr><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 179px;padding: 0in 7px 0in 7px;height: .2in;background-color: #f4f5f7;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">From Display Name</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 215px;padding: 0in 7px 0in 7px;height: .2in;background-color: white;border-top: none;border-right: 1px solid black;border-left: none;">any value you want</td></tr><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 179px;padding: 0in 7px 0in 7px;height: .35in;background-color: #f4f5f7;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Mail To</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black;width: 215px;padding: 0in 7px 0in 7px;height: .35in;background-color: white;border-top: none;border-right: 1px solid black;border-left: none;">the mail you want to receive the notification mail</td></tr></tbody></table> <img alt="User-added image" height="477" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001zEL&feoid=00N50000002Cf3M&refid=0EMPH00000B7NrC" width="788"></img> If configuration does not work, please check the following then retest: <ol style="margin-bottom: 11px;"><li>Check whether the SMTP server is reachable from the controller.</li><li>Validate whether the SMTP port is allowed on the firewall.</li><li>Debug on the SZ for web process. Reproduce the issue & collect a snapshot log.</li><li>Enable TCP to dump for port 465 & check whether the SMTP communication happens properly.</li></ol>

This article shows how to configure SMTP on the smart zone controller & perform troubleshooting.

2026-01-12T13:50:02-0800 2026-01-13T10:00:11-0800 https://support.ruckuswireless.com/articles/000012251 2026-01-12T13:52:05-0800 monthly 0.8 admin knowledge_article_6065 knowledge_article_6065 2022-06-29T14:58:21-0700 000012251 Validated (External) Internal Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Troubleshooting Troubleshooting, Cloudpath CP - How do I disable OCSP cert-url override during troubleshooting in Cloudpath ES? To make OCSP override_cert_url to no automatically, without using the WO, create a dummy certificate template using external CA. Certificate Authority>>>>Manage Template Add Certificate Template>>>>>Use a custom external certificate authority. Click Next (Fill Template Name, CA URL as dummy config ) Click save.

This article explains how you can disable OCSP cert override while troubleshooting Cloudpath ES.

2026-01-12T13:52:05-0800 2026-01-13T10:00:11-0800 https://support.ruckuswireless.com/articles/000011032 2026-01-12T13:53:07-0800 monthly 0.8 admin,premium knowledge_article_6064 knowledge_article_6064 2020-11-02T02:16:08-0800 000011032 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath How-to-Free-User-Licenses 1. Login to the CloudPath UI and modify the Data Cleanup settings to 1 day as shown in the screenshot: <img alt="User-added image" height="404" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ylJ&feoid=00N50000002Cf3M&refid=0EMRk00000GjoPF" width="944"></img> <img alt="User-added image" height="404" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ylJ&feoid=00N50000002Cf3M&refid=0EMRk00000GjqHO" width="946"></img> 2. Go to Users & Devices: <img alt="User-added image" height="406" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ylJ&feoid=00N50000002Cf3M&refid=0EMRk00000GjoVh" width="947"></img> 3. Select the magnifier for the Users need to cleanup <img alt="User-added image" height="411" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ylJ&feoid=00N50000002Cf3M&refid=0EMRk00000GjjJ8" width="949"></img> 4. Select the magnifier under Devices/Certificate/Enrollments and select “Delete Enrollment and Related Data” as shown below: <img alt="User-added image" height="411" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ylJ&feoid=00N50000002Cf3M&refid=0EMRk00000Gjp6n" width="951"></img> NOTE: Please note the above process will remove the enrollment record and certificate from the system but will not free up a license until the server has synced with the licensing server (around midnight MST). Each day at exactly one minute after midnight, ES will run a schedule to update the account’s total license consumption for the last 24 hours. 5. If we are using any Cert based Authentication using certificate Template created on CP, Enable the OCSP Monitoring and set number of days: This option will revoke the certificate is unused for the X amount of days as set. <img alt="User-added image" height="405" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ylJ&feoid=00N50000002Cf3M&refid=0EMRk00000GjonR" width="926"></img> 6. Please enable “Perform Status Check” under Authentication Server as shown below: <img alt="User-added image" height="411" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ylJ&feoid=00N50000002Cf3M&refid=0EMRk00000GjqFl" width="927"></img> As of now this is a manual process and hence you need to go to each users and unmap all the cert/mac regs/DPSKs/enrollments with the user.

Post version 5.4 the license count visibility was introduced for tracking the user license. The article shows how to free some users license manually from the CloudPath server

2026-01-12T13:53:07-0800 2026-01-13T10:00:10-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000GvUOSA0?attachment_index=0 2026-01-13T10:00:10-0800 monthly admin,premium knowledge_article_6064 knowledge_article_6064_attachment_1 How to Free User licenses (1).docx 1438965.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000015044 2026-01-12T13:54:04-0800 monthly 0.8 admin,premium knowledge_article_6063 knowledge_article_6063 2025-10-02T07:38:17-0700 000015044 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting;Known issues and workarounds;Knowledge base Configuration, Troubleshooting, Known Issues and Workarounds, Knowledge Base, Cloudpath How to disable CAPTCHA under the Out-of-band verification plugin in the Cloudpath workflow 1. Go to Administration-->System services 2. Edit the Outbound Email service <img alt="User-added image" height="324" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yi5&feoid=00N50000002Cf3M&refid=0EMRk00000Gjeg2" width="913"></img> 3. Choose the SMTP server as the Email provider 4. Enter the SMTP Information and save <img alt="User-added image" height="344" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yi5&feoid=00N50000002Cf3M&refid=0EMRk00000GjYyp" width="916"></img> 5. We can perform a Test Email to confirm it's working <img alt="User-added image" height="309" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yi5&feoid=00N50000002Cf3M&refid=0EMPH00000SbGm8" width="918"></img> NOTE: Please follow similar steps to add your own SMS server as well. 6. Go back to the workflow page, edit the Out-of-band verification plugin <img alt="User-added image" height="234" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yi5&feoid=00N50000002Cf3M&refid=0EMPH00000SbWiL" width="924"></img> 7. We should see the Disable option under the CAPTCHA Type <img alt="User-added image" height="244" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yi5&feoid=00N50000002Cf3M&refid=0EMPH00000SbJrs" width="915"></img> 8. You can disable and publish the workflow to save the change.

This article explains how to disable CAPTCHA under the Out-of-band verification plugin in CloudPath workflow

2026-01-12T13:54:04-0800 2026-01-13T10:00:10-0800 https://support.ruckuswireless.com/articles/000015102 2026-01-12T13:54:41-0800 monthly 0.8 admin,premium knowledge_article_6062 knowledge_article_6062 2025-11-07T13:41:38-0800 000015102 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;System network management;Troubleshooting;Known issues and workarounds Configuration, System Network Management, Troubleshooting, Known Issues and Workarounds, Cloudpath What is causing the Connections tab in CloudPath to display no user data? To see information on the CloudPath Connections page, RADIUS accounting must be enabled on the wireless controller

This article explain on why we don't see the user information in the connections tab in cloudpath

2026-01-12T13:54:41-0800 2026-01-13T10:00:09-0800 https://support.ruckuswireless.com/articles/000014457 2026-01-12T13:55:47-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6061 knowledge_article_6061 2024-09-03T05:08:21-0700 000014457 Validated (External) Public Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath Why am I unable to delete an administrator from Cloudpath Cloudpath administrators can have three roles - 'Viewer', 'Administrator' and 'CA Administrator' Highest access level allowed only for CA administrator, followed by administrator and finally viewer. If you are trying to delete an account that has the CA administrator role, then you must be logged into Cloudpath from another account that also has CA administrator role. An account with administrator or viewer role cannot delete an account with CA administrator role. Similarly, an admin who has the 'administrator' role can create/ delete another account with administrator or viewer roles only. To check the role of admin, login to Cloudpath > Administration > Administrators > Click the 'down' arrow next to admin name to see their role. Also, an admin cannot delete themselves from Cloudpath. In the below screenshot I have logged in as a CA Administrator. Here I do not have the "X" (delete) option to delete my own account. However, I have the "X" (delete) option available for other admin. <img alt="User-added image" height="275" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yer&feoid=00N50000002Cf3M&refid=0EMPH00000AKwzl" width="882"></img> <img alt="User-added image" height="388" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yer&feoid=00N50000002Cf3M&refid=0EMPH00000AKx2z" width="883"></img>

This article explains why you may be unable to delete or remove an administrator account from the Cloudpath server.

2026-01-12T13:55:47-0800 2026-01-13T10:00:09-0800 https://support.ruckuswireless.com/articles/000015098 2026-01-12T13:56:19-0800 monthly 0.8 admin,premium knowledge_article_6060 knowledge_article_6060 2025-11-07T13:42:43-0800 000015098 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Cloudpath How to see the username information on CloudPath when the device is managed using JAMF pro? 1. Connect to Your Directory Service First, you have to connect JAMF Pro to your LDAP, Azure AD, or another directory service. <ol start="1" style="list-style-type: lower-alpha;"><li>In JAMF Pro, navigate to Settings > System Settings > LDAP Servers.</li><li>Click New and fill in the server details for your directory service (e.g., Active Directory, OpenLDAP, etc.).</li><li>Provide the necessary information like the server address, port, bind DN, and password. This allows JAMF to authenticate and query your directory.</li></ol> 2. Configure User and Group Mappings Once connected, you need to tell JAMF Pro which information to pull. <ol start="1" style="list-style-type: lower-alpha;"><li>After the connection is established, go to the User Mappings tab.</li><li>Configure how JAMF maps user attributes from your directory service to its own database. For example, you'll need to map the User ID attribute (like sAMAccountName for Active Directory) to JAMF's Username.</li><li>You'll also want to configure Group Mappings to pull in user groups, which can be useful for scoping policies.</li></ol> 3. Re-enroll Devices or Update SCEP Profile After you've successfully mapped your directory service, the $USERNAME variable in your SCEP profile will no longer be empty. JAMF will now be able to populate it with the correct user information. <ol start="1" style="list-style-type: lower-alpha;"><li>For new devices: They will now enroll correctly.</li><li>For existing devices: The SCEP profile will need to be updated or re-pushed. You can do this by simply saving the existing profile in JAMF Pro, which will trigger a re-push to all assigned devices.</li></ol> By mapping the directory service, you are providing JAMF with the source of truth for user data, which is essential for Cloudpath to receive the username information via the SCEP certificate.

This article explain how to see the username information on cloudpath when the device is managed using JAMF pro

2026-01-12T13:56:19-0800 2026-01-13T10:00:08-0800 https://support.ruckuswireless.com/articles/000011736 2026-01-12T13:59:14-0800 monthly 0.8 admin,premium knowledge_article_6059 knowledge_article_6059 2021-06-15T15:02:34-0700 000011736 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Cloudpath How to fix Wlanapi.dll not found or missing errors on Windows The "Wlanapi.dll" is the file that Windows uses to connect to a wireless network. This file contains a series of functions and files that Windows needs to use in order to connect to a network. This issue seems to be on Windows device, not on Cloudpath side. Please perform below steps and check if this helps to fix the issue on Windows device. 1) Restore wlanapi.dll from the Recycle Bin. The easiest possible cause of a "missing" wlanapi.dll file is that you've mistakenly deleted it. If you suspect that you've accidentally deleted wlanapi.dll but you've already emptied the Recycle Bin, you may be able to recover wlanapi.dll with a free file recovery program. 2) Install the Wireless LAN service if you're using a Windows Server operating system. The process is a bit different between Windows versions but the general idea is to open Server Manager and then add the feature/role called Wireless LAN Service. 3) Reinstall the program that uses the wlanapi.dll file. If the wlanapi.dll DLL error occurs when you use a particular program, reinstalling the program should replace the file. 4) Update the drivers for hardware devices that might be related to wlanapi.dll. If, for example, you're receiving a "The file wlanapi.dll is missing" error when attempting to use a wireless device, try updating the drivers for your network card. 5) Run a virus/malware scan of your entire system. Some wlanapi.dll errors could be related to a virus or other malware infection on your computer that has damaged the DLL file. It's even possible that the wlanapi.dll error you're seeing is related to a hostile program that's masquerading as the file. 6) Use System Restore to undo recent system changes. If you suspect that the wlanapi.dll error was caused by a change made to an important file or configuration, a System Restore could solve the problem. 7) Run the sfc/scannow System File Checker command to replace a missing or corrupt copy of the wlanapi.dll file. Since this DLL file is provided by Microsoft, the System File Checker tool should restore it. 8) Roll back a driver to a previously installed version if wlanapi.dll errors began after updating a particular hardware device's driver. 9) Install any available Windows updates. Many service packs and other patches replace or update some of the hundreds of Microsoft distributed DLL files on your computer. The wlanapi.dll file could be included in one of those updates. 10) Repair your installation of Windows. If the individual wlanapi.dll file troubleshooting advice above is unsuccessful, performing a startup repair or repair installation should restore all Windows DLL files to their working versions. 11) Use a free registry cleaner to repair wlanapi.dll related issues in the registry. A free registry cleaner program may be able to help by removing invalid wlanapi.dll registry entries that might be causing the DLL error 12) Perform a clean installation of Windows. A clean install of Windows will erase everything from the hard drive and install a fresh copy of Windows. If none of the steps above correct the wlanapi.dll error, this should be your next course of action. 13) Troubleshoot for a hardware problem if any wlanapi.dll errors persist. After a clean install of Windows, your DLL problem can only be hardware related.

This article provides information on how to fix Wlanapi.dll not found or missing errors on Windows

2026-01-12T13:59:14-0800 2026-01-13T10:00:08-0800 https://support.ruckuswireless.com/articles/000011734 2026-01-12T13:59:54-0800 monthly 0.8 admin,premium knowledge_article_6058 knowledge_article_6058 2021-06-15T15:01:47-0700 000011734 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting Configuration, Troubleshooting, Cloudpath Is there any way to pre-register the user's devices off-net before arriving to site? There is an option "Only configure network(Offsite)" available under "Migration Behavior" on Cloudpath. This is normally used for offsite configuration or for secondary SSIDs. The migration behavior setting controls whether or not the wizard attempts to associate to the network. Users can go through the workflow before arriving to onsite and download the device configuration. The wizard will only configure the device for the network. If the network is wireless, it will not attempt to associate to the SSID. If wired, it will not attempt to reconnect to the network. Please navigate to Configuration tab >> Device Configurations >> Network tab >> Migration behavior and select the option "Only configure network(Offsite)". <img alt="User-added image" height="404" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yGf&feoid=00N50000002Cf3M&refid=0EMRk00000GiuBo" width="945"></img>

This article provides information on configuring the offsite enrollment to pre-register the user's devices.

2026-01-12T13:59:54-0800 2026-01-13T10:00:07-0800 https://support.ruckuswireless.com/articles/000010353 2026-01-12T07:10:09-0800 monthly 0.8 admin,premium knowledge_article_4140 knowledge_article_4140 2020-04-15T02:07:03-0700 000010353 Validated (External) Premium Sz300;Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SZ300, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway, SZ100 <div>Why are data tunnels not being created, and why does the WebGUI display “no remote peer available” for affected APs?</div> <div> The fastest and simplest fix is: <ol><li>Go to the WLAN settings in the WebGUI.</li><li>Disable the tunnel option.</li><li>Re?enable the tunnel option.</li></ol> This forces an AP configuration refresh, after which the DataPlane IP list gets repopulated. Once updated, data tunnels are recreated and client connectivity is restored. </div>

Access Points (APs) fail to establish data tunnels, and the WebGUI shows the message “no remote peer available.”

2026-01-12T07:10:09-0800 2026-01-12T14:00:14-0800 https://support.ruckuswireless.com/articles/000012408 2026-01-12T06:02:24-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4865 knowledge_article_4865 2022-08-18T14:22:51-0700 000012408 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector My ZD is down and APs too, how can I temporarily restore my network while I wait for ZD replacement to arrive? There are two ways to temporarily restore the APs with limited functionality while you get the ZD replacement. <ol><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Convert your APs to Unleashed code (AP models must support Unleashed firmware).</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Convert your APs to stand alone firmware and configure individually (works irrespective of AP model).</li></ol> <h1>Option one: Convert APs to Unleashed and manage from single master AP.</h1> <ol><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Factory reset specific APs or all APs (in case of big network you may want to follow this to critical area APs only). Refer our community thread from <a href="https://community.ruckuswireless.com/t5/RUCKUS-Self-Help/How-to-factory-reset-or-factory-default-different-type-of-Ruckus/td-p/46029" target="_blank">here</a> to know more about how you can factory reset a Ruckus AP using AP CLI or physical button reset.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Download the compatible Unleashed firmware as per your AP model from <a href="https://support.ruckuswireless.com/products/82-unleashed-and-multi-site-manager?open=software#sort=relevancy&f:@commonproducts=[Unleashed]" target="_blank">Ruckus support web site</a> (Note: If you have mixed AP models where some are supported in Unleashed and some or not, you may not be able to restore all the APs).</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Login into each AP using web browser, go to Maintenance >> Upgrade >> Local >> Browse the Unleashed model specific firmware file and complete the upgrade.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Configure the very first AP (post upgrading to Unleashed) and this will become your master AP (Controller AP). For configuration help refer quick setup guide from <a href="https://support.ruckuswireless.com/documents/2601-ruckus-unleashed-200-7-ga-quick-setup-guide-r320/download" target="_blank">here</a> and user guide from <a href="https://support.ruckuswireless.com/documents/4105-ruckus-unleashed-200-12-user-guide/download" target="_blank">here</a>.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Now upgrade rest of the APs same way. If 1st AP upgraded and configured as Unleashed master (Step-3 and 4) and rest of the APs are on same subnet then rest of the APs will join Unleashed master by its own.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Till you get your ZD replacement, you can manage the network from Unleashed master AP. Once you get the replacement, downgrade APs to standalone firmware and APs should rejoin the ZD.</li></ol> <h2>Limitations:</h2> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Only supported APs can be upgraded to Unleashed.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">APs must be in same IP subnet.</li></ul> <h1>Option two: Convert APs to standalone mode and manage individually</h1> <ol><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Same as step-1 of option one.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Download the stand alone firmware from support site, as per your AP model.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Now login into each AP using web browser, go to Maintenance >> Upgrade >> Local >> Browse the model specific standalone firmware file and complete the upgrade.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Configure each AP individually.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Use the APs in stand alone mode while you get replacement for your ZD. Once you get replacement, configure it in isolated network and then place it back to the network. All the APs should reconnect (if AP/ZD both are in same IP subnet). <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">If AP/ZD are in different subnets, use DHCP option 43, or configure DNS or manually configure controller IP in each AP (set director ip xxx.xxx.xxx.xxx.xxx).</li></ul> </li></ol> <h2>Limitations:</h2> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">AP cannot be managed centrally. Means you must configure and manage each AP individually.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Since APs will be managed in stand alone mode, roaming will not work.</li></ul> For any further assistance, reach out to Ruckus Support.

Article explain what to do when Zone director suffer hardware failure and APs are down while you get ZD replacement.

2026-01-12T06:02:24-0800 2026-01-12T14:00:14-0800 https://support.ruckuswireless.com/articles/000014937 2026-01-09T07:59:34-0800 monthly 0.8 admin,premium knowledge_article_5822 knowledge_article_5822 2025-07-22T07:42:18-0700 000014937 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector An Access Point (AP) that is supported by the ZoneDirector (ZD) version and running compatible firmware fails to maintain a stable connection. The AP enters a loop cycling through the following statuses: Disconnected ? Provisioning ? Connected Manually set the tunnel MTU on the ZoneDirector to a value smaller than the path MTU between the AP and ZD. If the exact path MTU is unknown, gradually reduce the tunnel MTU until the AP joins and maintains a stable connection. <div style="margin-left: 40px;"><code>ruckusZD(config-sys)# tunnel-mtu 1400</code></div>

AP model and fw are supported in ZD version, but the AP is caught in a loop cycling through status Disconnected ? Provisioning ? Connected ? Disconnected.

2026-01-09T07:59:34-0800 2026-01-12T10:00:15-0800 https://support.ruckuswireless.com/articles/000014896 2026-01-09T07:58:18-0800 monthly 0.8 admin,premium knowledge_article_5804 knowledge_article_5804 2025-07-07T03:02:05-0700 000014896 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ144, SZ300, virtual SmartCell Gateway, SZ100 <div>How can we check basic information about DFS channels, related events, and parameters?</div>

This article explains how to check basic information about DFS channels, related events, and parameters in Ruckus environments.

2026-01-09T07:58:18-0800 2026-01-12T10:00:15-0800 https://support.ruckuswireless.com/articles/000014771 2026-01-09T08:01:03-0800 monthly 0.8 admin,premium knowledge_article_5774 knowledge_article_5774 2025-05-20T01:40:32-0700 000014771 Validated (External) Premium Sz300;Virtual smartcell gateway;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Security;Troubleshooting Security, Troubleshooting, SZ300, virtual SmartCell Gateway In an environment with SZ300 or vSZ-H configured with three interfaces, should the Control Plane interface be visible and/or accessible? <div> High-Scale SmartZone deployments use three dedicated interfaces for traffic segregation and performance optimization: <ol><li> Management Interface <ul><li>Handles administrative tasks such as GUI/CLI access, API calls, SNMP, and logging.</li><li>Isolated from AP control and cluster traffic for security and stability.</li></ul> </li><li> Control Plane Interface <ul><li>Used for communication with managed network devices (APs, switches, Data Plane nodes).</li><li>Devices establish secure SSH tunnels to this interface for configuration updates, reporting, and control tasks.</li><li>Must be accessible to managed devices but not for admin login. Access is restricted to certificate-based authentication.</li></ul> </li><li> Cluster Interface <ul><li>Handles intra-cluster communication between SmartZone nodes.</li><li>Ensures synchronization of configuration, session states, and redundancy for failover.</li></ul> </li></ol> </div>

This article explains whether the SmartZone Control Plane interface should be visible and accessible in environments using SZ300 or vSZ-H with a three-interface configuration.

2026-01-09T08:01:03-0800 2026-01-12T10:00:14-0800 https://support.ruckuswireless.com/articles/000014743 2026-01-09T09:10:43-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5749 knowledge_article_5749 2025-04-16T01:18:26-0700 000014743 Validated (External) Public Sz144;Sz300;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ144, SZ300, SZ100 <div>What is the use of Wireless & Wired Client Isolation?</div> <div> <h1>Wireless Client Isolation Overview</h1> Wireless Client Isolation prevents WLAN clients from communicating with each other directly while still allowing access to upstream services such as: <ul><li>Gateway</li><li>DHCP</li><li>DNS</li><li>Internet</li></ul> This is commonly used in: <ul><li>Guest networks</li><li>Public Wi?Fi deployments</li><li>Hospitality environments</li><li>Shared enterprise SSIDs</li></ul> Traffic isolation can be customized for unicast, multicast, and broadcast packets. <hr></hr> <h2>Configuration – Wireless Client Isolation</h2> <ol><li>Navigate to the WLAN configuration page.</li><li>Enable Wireless Client Isolation. <ul><li>Unicast isolation is enabled by default.</li><li>Multicast/Broadcast isolation can be configured as needed.</li></ul> </li><li>Enable VRRP/HSRP support if redundancy protocols are used. <img alt="User-added image" height="467" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001z9V&feoid=00N50000002Cf3M&refid=0EMPH00000IEOzO" width="813"></img></li></ol> <h3>Isolation Whitelist</h3> Devices added to this list bypass isolation (e.g., printers, shared resources). <img alt="User-added image" height="419" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001z9V&feoid=00N50000002Cf3M&refid=0EMPH00000IERaf" width="748"></img> <h3>Auto Gateway Whitelisting</h3> Automatically adds the gateway to the whitelist when the feature is first enabled. <hr></hr> <h2>? Current Limitation – Auto Gateway Whitelisting</h2> Auto Gateway Whitelisting only learns the gateway’s MAC address at the time of enablement. If the gateway device is replaced later: <ul><li>The new gateway MAC will not be learned automatically</li><li>Wireless clients may experience loss of connectivity to the gateway</li></ul> <h3>How to Recover</h3> To relearn the new gateway MAC: <ol><li>Toggle Client Isolation OFF ? ON in the WLAN profile, or</li><li>Manually whitelist the new gateway MAC address</li></ol> This limitation should be considered in networks where gateway hardware changes are expected. <hr></hr> <h1>Wired Client Isolation Overview</h1> Wired Client Isolation provides similar protection for APs with multiple Ethernet ports. Clients connected via Ethernet ports can reach upstream networks but cannot communicate with each other. Typical use cases include: <ul><li>Hotel rooms</li><li>Dormitories</li><li>Co?working spaces</li><li>Enterprise offices with shared wired access</li></ul> <hr></hr> <h2>Configuration – Wired Client Isolation</h2> <ol><li>Go to: Services ? Tunnels and Ports ? Ethernet Port</li><li>Create a new Ethernet Port Profile (e.g., Wired Isolation) <img alt="User-added image" height="312" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001z9V&feoid=00N50000002Cf3M&refid=0EMPH00000IEJd8" width="923"></img> </li><li>Enable Wired Client Isolation </li></ol> <img alt="User-added image" height="532" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001z9V&feoid=00N50000002Cf3M&refid=0EMPH00000IERfV" width="878"></img> <ol start="4"><li>Configure unicast/multicast/broadcast traffic and VRRP handling <img alt="User-added image" height="446" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001z9V&feoid=00N50000002Cf3M&refid=0EMPH00000IENQd" width="743"></img> </li><li>Apply the port profile to specific AP models under Zone ? AP Model Configuration <img alt="User-added image" height="429" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001z9V&feoid=00N50000002Cf3M&refid=0EMPH00000IERlx" width="825"></img></li><li>Reboot the AP when prompted</li></ol> This ensures that selected LAN ports (e.g., LAN2) operate with the same isolation behavior as wireless clients. </div>

Wireless and Wired Client Isolation prevent client?to?client communication on the same WLAN or AP Ethernet ports while still allowing access to upstream resources such as gateways and the internet. This enhances security in guest and shared environments. A known limitation is that Auto Gateway Whitelisting learns the gateway MAC only during enablement; gateway changes require manual or toggle?based relearning.

2026-01-09T09:10:43-0800 2026-01-12T10:00:14-0800 https://support.ruckuswireless.com/articles/000012269 2026-01-09T13:19:03-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6056 knowledge_article_6056 2022-09-07T02:06:39-0700 000012269 Validated (External) Public Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Cloudpath Cloudpath error in accessing DPSK pool? NOTE: The cause of the DPSK corruption was un-identified from the Cloudpath logs, so for now we are using this as a workaround.

This article explains the details of the error encountered while accessing the DPSK pool in Cloudpath, where the system displays the message "Error Occurred".

2026-01-09T13:19:03-0800 2026-01-12T10:00:13-0800 https://support.ruckuswireless.com/articles/000010915 2026-01-09T13:17:48-0800 monthly 0.8 admin,premium knowledge_article_6057 knowledge_article_6057 2020-09-30T00:59:41-0700 000010915 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting Configuration, Troubleshooting, Cloudpath How to restore the default certificate on the Cloudpath when the GUI is in-accessible? 1. To recover the Cloudpath GUI access, we need to restore the web server's certificate to default. Please do SSH to the IP address of the Cloudpath using the port number 8022 and execute the below command. Login: cpn_service Password: <Enter your Console Password> #support https restore-certificate The above command will resets the https to default self-signed certificate. 2. If above does not work try below steps #config https disable # system reboot CP will go for a reboot and will come back online, once CP is up it will be accessible via http, you can delete the certificate from the web and re-enable https to access via https. #config https enable # system reboot CP will go for a reboot and will come back online, once CP is up it will be accessible via https.

This article explains the issue where a user uploaded a trusted certificate to Cloudpath for the web server and subsequently lost access to the GUI.

2026-01-09T13:17:48-0800 2026-01-12T10:00:13-0800 https://support.ruckuswireless.com/articles/000010373 2026-01-09T09:18:58-0800 monthly 0.8 admin,premium knowledge_article_4149 knowledge_article_4149 2020-04-22T14:39:20-0700 000010373 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway <div>How to resolve the “Access Points Failed to Import” error during Import Batch Provisioning?</div> <div> <ul><li>Review the SmartZone Release Notes for the AP Zone firmware to validate which AP models are supported.</li><li>Ensure the AP model in the CSV file matches the exact supported model name before uploading the file again.</li></ul> </div>

The error “Access Points Failed to Import” appears during Import Batch Provisioning when the AP model listed in the CSV file is unsupported by the SmartZone firmware or entered incorrectly.

2026-01-09T09:18:58-0800 2026-01-12T10:00:13-0800 https://support.ruckuswireless.com/articles/000012513 2026-01-09T13:22:59-0800 monthly 0.8 admin,premium knowledge_article_6055 knowledge_article_6055 2022-11-08T04:20:53-0800 000012513 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Cloudpath Cloudpath app on Android devices popping the following error: "Use of the Cloudpath app requires that your organization has a proper server." during onboarding Re-upload the certificates with full chain under web server in the crt format

This article explains why the Cloudpath app on Android devices displays the error ‘Use of the Cloudpath app requires that your organization has a proper server’ during onboarding.

2026-01-09T13:22:59-0800 2026-01-12T10:00:12-0800 https://support.ruckuswireless.com/articles/000013968 2026-01-09T13:23:52-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6054 knowledge_article_6054 2023-01-05T00:01:18-0800 000013968 Validated (External) Public Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting Configuration, Troubleshooting, Cloudpath Why i am unable to upload certificate on Cloudpath? Why cloudpath is giving error after certificate upload? Assign new permissions to the folder <img alt="User-added image" height="21" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001x7h&feoid=00N50000002Cf3M&refid=0EM2J000004NhzY" width="500"></img> Check the new permissions assigned. <img alt="User-added image" height="154" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001x7h&feoid=00N50000002Cf3M&refid=0EM2J000004Nhzs" width="500"></img> Retry to upload the certificates <img alt="User-added image" height="370" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001x7h&feoid=00N50000002Cf3M&refid=0EM2J000004Ni0R" width="500"></img> Confirm the new certificate was uploaded correctly <img alt="User-added image" height="603" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001x7h&feoid=00N50000002Cf3M&refid=0EM2J000004Ni0b" width="500"></img>

This article explains the details of the CloudPath UploadCertificate error: ‘This site can't be reached.

2026-01-09T13:23:52-0800 2026-01-12T10:00:12-0800 https://support.ruckuswireless.com/articles/000014451 2026-01-09T13:26:21-0800 monthly 0.8 admin knowledge_article_6053 knowledge_article_6053 2024-09-18T09:43:48-0700 000014451 Validated (External) Internal Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, SZ144, SZ300, virtual SmartCell Gateway, SZ100 How to stop the Admin users from getting locked out? <ul><li>In order to avoid the user getting Locked (idle), the user can logout when not using the SZ/vSZ.</li><li>If the user is logged in and idle and the "Session idle timeout" expires, they will be locked out of the SZ/vSZ GUI.</li><li>We can disable the "session idle timeout" under, Administration>> Admin & Roles>> Account Security; edit the account security profile and disable the "Session idle timeout".</li></ul>

In this article we will learn how to stop the Admin users getting locked

2026-01-09T13:26:21-0800 2026-01-12T10:00:11-0800 https://support.ruckuswireless.com/articles/000014506 2026-01-09T13:34:29-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6052 knowledge_article_6052 2024-09-24T07:17:34-0700 000014506 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;Known issues and workarounds Installation, Known Issues and Workarounds, SmartCell Gateway Can we migrate or restore configuration backup from one platform of SmartZone to the other, for instance, migrating configuration from a vSZ-E to a vSZ-H, SZ-100, SZ-300 etc.? Following matrix explains which SmartZone platform support migration from one to the other - <table style="width: 625px;" width="623"><colgroup><col style="width: 104pt;" width="138"></col><col style="width: 103pt;" width="137"></col><col style="width: 102pt;" width="135"></col><col style="width: 160pt;" width="213"></col></colgroup><tbody><tr><td colspan="1" rowspan="1" class="xl64" style="border-bottom: 1px solid black;height: 19px;width: 138px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;background-color: #b4c6e7;border-top: 1px solid black;border-right: 1px solid black;border-left: 1px solid black;">Backup Type</td><td colspan="1" rowspan="1" class="xl64" style="border-bottom: 1px solid black;width: 137px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;background-color: #b4c6e7;border-top: 1px solid black;border-right: 1px solid black;border-left: none;">Source SZ type</td><td colspan="1" rowspan="1" class="xl64" style="border-bottom: 1px solid black;width: 135px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;background-color: #b4c6e7;border-top: 1px solid black;border-right: 1px solid black;border-left: none;">Destination SZ type</td><td colspan="1" rowspan="1" class="xl64" style="border-bottom: 1px solid black;width: 213px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;background-color: #b4c6e7;border-top: 1px solid black;border-right: 1px solid black;border-left: none;">Whether Possible or not (Yes/No)</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-E</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-H</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-E</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-100</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-E</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-144</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-E</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-300</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-H</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-E</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-H</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-100</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-H</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-144</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-H</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-300</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-100</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-144</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">Yes</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-100</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-E</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-100</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-H</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-100</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-300</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-144</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-100</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-144</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-E</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-144</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-H</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-144</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-300</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-300</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-E</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-300</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-H</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-300</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-100</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-300</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">SZ-144</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-H Single Interface</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-H 3 Interface</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;height: 19px;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: 1px solid black;">Configuration Backup</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-H 3 Interface</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">vSZ-H Single Interface</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black;padding-top: 1px;padding-right: 1px;padding-left: 1px;white-space: nowrap;border-top: none;border-right: 1px solid black;border-left: none;">No</td></tr></tbody></table> As we can in the matrix above, Restoration of Configuration backup is not possible between different platforms of SmartZone with the only exception of migration from SZ-100 to SZ-144 (but not vice-versa). Note : If we have configuration backup of a SZ104 or SZ124 which is from version 5.2.x.x/ 6.x.x.x/7.x.x.x then you can restore it in the SZ144 running 5.2.x.x/6.x.x.x/7.x.x.x. vSZ-E and vSZ-H configuration backups cannot be restored on SZ144 and vice-versa. This is only about the configuration backup, not about the AP firmware that can be used in a zone.

Restoration of Configuration backup is possible only between same platform of SmartZone. The only exception is that SZ100 configuration backup can be used to restore on an SZ144 (but not vice-versa)

2026-01-09T13:34:29-0800 2026-01-12T10:00:11-0800 https://support.ruckuswireless.com/articles/000014780 2026-01-09T13:36:23-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6051 knowledge_article_6051 2025-04-23T01:56:52-0700 000014780 Validated (External) Public Ruckus cloud wifi;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Cloud WiFi, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway How to prevent Wi-Fi user to share password to other users using QR Code? Access Points and Controllers do not have a direct option to prevent QR code-based password sharing, as this is a feature of the client OS. However, we can mitigate this by choosing the correct authentication type. Solution 1: Configure DPSK Dynamic Pre-Shared Key (DPSK): Assigns unique passwords to each user, enhancing security by ensuring that each device has a different key. It further secures the network by binding each DPSK to the user's device MAC address, preventing unauthorized devices from connecting even if they have the password. Refer to the DPSK document for more details: https://support.ruckuswireless.com/documents/3792-smartzone-internal-dpsk Solution 2: Enterprise AAA (802.1X) & MAC Authentication 802.1X Authentication: Uses a username and password or device MAC address for authentication, providing a higher level of security compared to WPA-PSK. MAC Authentication allows network administrators to control access based on the device's MAC address, ensuring that only authorized devices can connect. Refer to the article on 802.1X authentication using NPS server in vSZ/Smartzone for more details: https://support.ruckuswireless.com/articles/000014549 Notes: DPSK and 802.1X authentication are supported across all RUCKUS controller platforms, including SZ, ZD, R1, and Unleashed.

In today's digital age, sharing Wi-Fi passwords has become easier with QR Code. However, this convenience can lead to unauthorized access and potential security risks. This article explores strategies to prevent Wi-Fi users from sharing password using QR Code, ensuring a secure and controller network environment.

2026-01-09T13:36:23-0800 2026-01-12T10:00:10-0800 https://support.ruckuswireless.com/articles/000010371 2026-01-09T13:38:47-0800 monthly 0.8 admin,premium knowledge_article_6050 knowledge_article_6050 2020-09-30T00:17:20-0700 000010371 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Troubleshooting Troubleshooting, Cloudpath How to obtain a General(jboss) logs from the Cloudpath CLI? 1. SSH to the IP address of the On-Prem Cloudpath using the port number 8022 and enter the login credentials. Login: cpn_service Password: <Enter your Console Password> 2. Type "console" to enter into the Linux mode of the device from the config mode. #console 3. Go to the jboss directory using the below command. #cd /var/log/jboss #ls -l General(jboss) is located in the server.log file. Execute the below command to display the logs on the screen. #cat server.log <img alt="Image1" height="316" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xin&feoid=00N50000002Cf3M&refid=0EM2J000001CmgY" width="628"></img> 4. You can transfer the sever.log file to your FTP using the below curl command: curl -u admin:password ftp://<FTP Server IP/location path> --upload-file <File Name>

This article provides information on extracting General(jboss) logs from the Cloudpath CLI.

2026-01-09T13:38:47-0800 2026-01-12T10:00:10-0800 https://support.ruckuswireless.com/articles/000014397 2026-01-09T13:40:41-0800 monthly 0.8 admin,premium knowledge_article_6049 knowledge_article_6049 2024-09-18T01:39:55-0700 000014397 Validated (External) Premium Cloudpath;Smartcell gateway;Cloudpath Enrollment System (ES);BPG_Cloudpath;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, Cloudpath, SmartCell Gateway Wireless clients are unable to authenticate with the external DPSK. Mapped the client mac-address in the DPSK pool of the Cloudpath server. <img alt="User-added image" height="422" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xqr&feoid=00N50000002Cf3M&refid=0EMPH000009SZVW" width="724"></img> <img alt="User-added image" height="354" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xqr&feoid=00N50000002Cf3M&refid=0EMPH000009SmAz" width="726"></img>

This article explains why DPSK authentication may fail for wireless clients when their MAC address is not added in Cloudpath.

2026-01-09T13:40:41-0800 2026-01-12T10:00:09-0800 https://support.ruckuswireless.com/articles/000010916 2026-01-09T13:41:54-0800 monthly 0.8 admin,premium knowledge_article_6048 knowledge_article_6048 2020-09-30T00:16:34-0700 000010916 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting Configuration, Troubleshooting, Cloudpath How to integrate the Cloudpath to ELK stack server? The On-Prem Cloudpath provides the ability to send enrollment data of users to an existing Elasticsearch, Logstash, or Kibana (ELK) server. Here is the steps to configure the ELK server details on the On-Prem Cloudpath: 1. Navigate to Administration >> System Services >> External Reporting Server >>Click on Configure option. <img alt="User-added image" height="377" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001y0X&feoid=00N50000002Cf3M&refid=0EMRk00000GhUfx" width="869"></img> 2. Enter the Hostname and Port of the reporting server. By default, the port number is 9200. 3. Select the Frequency of data uploads from the Cloudpath to the ELK server. <img alt="User-added image" height="377" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001y0X&feoid=00N50000002Cf3M&refid=0EMRk00000GhUrF" width="870"></img> 4. Go to the Configuration --> Workflows page and create a new snapshot by publishing the workflow. To view the Cloudpath data on your ELK server, open a browser and access http://<ELK server hostname/IP>:5901. Note: This feature is not available on the Cloud hosted Cloudpath.

This article provides information on integrating the On-Prem Cloudpath to ELK stack server.

2026-01-09T13:41:54-0800 2026-01-12T10:00:09-0800 https://support.ruckuswireless.com/articles/000010814 2026-01-09T13:43:04-0800 monthly 0.8 admin,premium knowledge_article_6047 knowledge_article_6047 2020-08-18T07:33:07-0700 000010814 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath How to restrict clients per SSID using Certificate template/RADIUS Attributes in Cloudpath? 1. Create a Certificate template: Certificate Authority > Manage Templates <img alt="User-added image" height="494" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001y29&feoid=00N50000002Cf3M&refid=0EM2J000001CIV5" width="883"></img> 2. Mention the SSID name: Policy - RADIUS Attributes > Allowed SSID(s) <img alt="Allow SSID under Cert template" height="304" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001y29&feoid=00N50000002Cf3M&refid=0EM2J000001CHKL" width="878"></img> 3. Create a Device configuration: Configuration>Device Configurations <img alt="Device config" height="315" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001y29&feoid=00N50000002Cf3M&refid=0EM2J000001CHKQ" width="889"></img> 4. While creating the workflow map the Certificate template in which the only required SSID(s) was allowed <img alt="User-added image" height="481" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001y29&feoid=00N50000002Cf3M&refid=0EM2J000001CIVF" width="892"></img> 5. Verify the Policy - RADIUS Attributes: Configuration > RADIUS Server> policies <img alt="User-added image" height="344" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001y29&feoid=00N50000002Cf3M&refid=0EM2J000001CIVK" width="894"></img>

This article explains about the configuration to restrict clients per SSID using Certificate template/RADIUS Attributes in Cloudpath

2026-01-09T13:43:04-0800 2026-01-12T10:00:09-0800 https://support.ruckuswireless.com/articles/000010283 2026-01-09T05:11:39-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6046 knowledge_article_6046 2020-04-07T00:28:23-0700 000010283 Validated (External) Public Vsz dataplane Support license activation;Registration Support License Activation, Registration, vSZ Dataplane How to Activate vDP Licenses. How to Activate vSZ-D Licenses. How to Activate support on vSZ-D Customer should have received a Support Contract code and/or License Code in an email from support.ruckuswireless.com to initiate the activation process. <h1>Activation of Data Plane Instance License and Data Plane Bandwidth Upgrade License </h1> 1) Login to support.ruckuswireless.com. 2) Locate and click on "Activate Purchases". As shown in attachment 1. 3) Enter the License activation code - LIC code and click "Validate" . As shown in attachment 2. 4) Accept the Terms and Conditions and acknowledge. Click "Activate Purchase". As shown attachment 3. 5) License is activated and mapped to your LiMAN pool. As shown is attachment 4. 6) In order to add/map the activated Data Plane licenses to the vSZ controller, please follow the steps from article number: 000006071. Click here : <a href="https://support.ruckuswireless.com/articles/000006071" target="_blank">https://support.ruckuswireless.com/articles/000006071</a> Activation of Support on Data Plane Instance and Support on Bandwidth Upgrade Licenses. 1) Login to support.ruckuswireless.com. 2) Locate and click on "Activate Purchases". As shown in attachment 1. 3) Enter the Support activation code - SUP code and click "Validate" . As shown in attachment 5. 4) Select the Support product you want to activate. (This page will appear if you have purchased support for more than 1 product on same order). 4) Accept the Terms and Conditions and acknowledge. Click "Activate Purchase". As shown attachment 3. 5) Support is activated and mapped to your LiMAN account. Support on Data Plane Instance and Support on Bandwidth Upgrade Licenses are mapped to Account and mapping to serial number is not needed.

Activation vDP - Virtual Data Plane Licenses/Support

2026-01-09T05:11:39-0800 2026-01-09T14:00:14-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000004zrrSAA?attachment_index=0 2026-01-09T14:00:14-0800 monthly admin,premium,warranty,guest knowledge_article_6046 knowledge_article_6046_attachment_1 1.PNG 80931.0 image/png http://support.ruckuswireless.com/article_attachments/kA22J0000004zrrSAA?attachment_index=1 2026-01-09T14:00:14-0800 monthly admin,premium,warranty,guest knowledge_article_6046 knowledge_article_6046_attachment_1 2.jpg 358853.0 image/jpeg http://support.ruckuswireless.com/article_attachments/kA22J0000004zrrSAA?attachment_index=2 2026-01-09T14:00:14-0800 monthly admin,premium,warranty,guest knowledge_article_6046 knowledge_article_6046_attachment_1 3.PNG 73221.0 image/png http://support.ruckuswireless.com/article_attachments/kA22J0000004zrrSAA?attachment_index=3 2026-01-09T14:00:14-0800 monthly admin,premium,warranty,guest knowledge_article_6046 knowledge_article_6046_attachment_1 4.PNG 42478.0 image/png http://support.ruckuswireless.com/article_attachments/kA22J0000004zrrSAA?attachment_index=4 2026-01-09T14:00:14-0800 monthly admin,premium,warranty,guest knowledge_article_6046 knowledge_article_6046_attachment_1 5.PNG 31229.0 image/png https://support.ruckuswireless.com/articles/000010272 2026-01-09T06:43:36-0800 monthly 0.8 admin,premium knowledge_article_4108 knowledge_article_4108 2020-03-26T01:32:53-0700 000010272 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell ap Configuration;Installation Configuration, Installation, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP <div>What are the limitations of using only 2 UTP wire pairs to connect and power an R510 AP—specifically in terms of bandwidth, throughput, signal performance, and PoE requirements?</div> <div> R510 Access Points can function correctly on 2?pair cabling, but bandwidth and PoE capabilities are impacted as described below. <hr></hr> <h2>1. Bandwidth Limitations</h2> <h3>Supported with 2 pairs</h3> <ul><li>100 Mbps Ethernet (Fast Ethernet) Uses pairs 1–2 (pins 1, 2, 3, 6) ? compatible with 2?pair cable</li></ul> <h3>Not supported with 2 pairs</h3> <ul><li>1 Gbps (Gigabit Ethernet) requires all 4 pairs ? Not possible on 2?pair wiring</li></ul> Summary: An R510 connected over 2?pair UTP cabling will negotiate 100 Mbps, which may limit AP throughput depending on client load. <img alt="image001" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yq9&feoid=00N50000002Cf3M&refid=0EM2J000000weF4" style="height: 334px;width: 805px;"></img> <hr></hr> <h2>2. Power over Ethernet (PoE) Requirements</h2> PoE compatibility depends on the mode used: <h3>PoE Type B (Not supported with 2?pair cable)</h3> <ul><li>Sends power over the unused (spare) pairs</li><li>With only 2 pairs available, Type B cannot deliver power</li></ul> <h3>PoE Type A (Required)</h3> <ul><li>Sends power over the same pairs used for 100 Mbps data</li><li>Works with 2?pair cabling</li><li>Ruckus APs auto?sense and support Type A</li></ul> This means: ? The switch or injector MUST support 802.3af Mode A for powering R510 over 2?pair cabling. <hr></hr> <h2>3. PoE Power Class and Requirements</h2> From IEEE specifications: <div> <table><thead><tr><th colspan="1" rowspan="1">Property</th><th colspan="1" rowspan="1">802.3af (PoE)</th><th colspan="1" rowspan="1">802.3at Type 2 (PoE+)</th></tr></thead><tbody><tr><td colspan="1" rowspan="1">Power at PD</td><td colspan="1" rowspan="1">12.95 W</td><td colspan="1" rowspan="1">25.50 W</td></tr><tr><td colspan="1" rowspan="1">Max power from PSE</td><td colspan="1" rowspan="1">15.40 W</td><td colspan="1" rowspan="1">30.0 W</td></tr><tr><td colspan="1" rowspan="1">Voltage at PSE</td><td colspan="1" rowspan="1">44–57 V</td><td colspan="1" rowspan="1">50–57 V</td></tr><tr><td colspan="1" rowspan="1">Max cable resistance</td><td colspan="1" rowspan="1">20 ?</td><td colspan="1" rowspan="1">12.5 ?</td></tr><tr><td colspan="1" rowspan="1">Supported cabling</td><td colspan="1" rowspan="1">Category 3 & 5</td><td colspan="1" rowspan="1">Category 5</td></tr><tr><td colspan="1" rowspan="1">Supported modes</td><td colspan="1" rowspan="1">A, B</td><td colspan="1" rowspan="1">A, B</td></tr></tbody></table> </div> <h3>R510 PoE Requirements (from data sheet)</h3> <ul><li>802.3af PoE: 12.6 W</li><li>Fully operational on 802.3af only</li><li>Therefore, R510 can run fully on 2?pair cabling as long as PoE Mode A is supported. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yq9&feoid=00N50000002Cf3M&refid=0EM2J000000weF9"></img></li></ul> <hr></hr> <h2>4. Additional Notes</h2> <ul><li>Expected maximum wired throughput: ~95 Mbps usable after overhead.</li><li>Wireless speeds remain much higher, but backhaul is capped by 100 Mbps.</li><li>This setup is commonly used in retrofit environments where only 2 pairs are available.</li></ul> </div>

This article explains bandwidth and PoE limitations when using only 2 pairs of a standard 4?pair UTP cable to connect R510 Access Points.

2026-01-09T06:43:36-0800 2026-01-09T14:00:13-0800 https://support.ruckuswireless.com/articles/000010728 2026-01-08T08:21:34-0800 monthly 0.8 admin,premium knowledge_article_4301 knowledge_article_4301 2020-07-14T12:20:22-0700 000010728 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway Why is my new pre-provisioned AP not able to join the cluster ? <div>Delete the AP entries with incorrect serial numbers or malformed text in the SmartZone UI. Once the incorrect entries are removed, the AP will be able to successfully join and register with SmartZone. If you are using spreadsheet, make sure to use text as the cell content for serial numbers. By default, "numbers" will be the format chosen</div>

In some cases, the pre?provisioned AP list CSV file is edited using a spreadsheet application, which introduces hidden or erroneous characters. These formatting errors cause SmartZone validation failures and prevent the AP from joining the cluster. This article explains how to identify the issue and resolve it.

2026-01-08T08:21:34-0800 2026-01-09T06:00:11-0800 https://support.ruckuswireless.com/articles/000014733 2026-01-08T09:24:35-0800 monthly 0.8 admin,premium knowledge_article_5726 knowledge_article_5726 2025-03-13T11:47:29-0700 000014733 Validated (External) Premium Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi <div>Why doesn’t the Prime Administrator see the option to delete another administrator in the tenant?</div> <div> To restore the ability to delete administrators, ensure that at least one administrator is not using SSO for authentication. You can do this by: <ol><li>Adding a new administrator with non?SSO authentication, or</li><li>Converting an existing administrator to use non?SSO login credentials. - This would need to Delete the SSO user from the list and Add as Ruckus IDM user</li></ol> Once a non?SSO administrator exists, the Prime Admin will regain permission to delete other administrators as needed. </div>

Prime Administrators may be unable to delete other administrators from the tenant when all users listed under Administrator List are authenticated through third-party Single Sign-On (SSO). Under these conditions, the system restricts deletion actions to maintain SSO security integrity.

2026-01-08T09:24:35-0800 2026-01-09T06:00:11-0800 https://support.ruckuswireless.com/articles/000012027 2026-01-08T07:58:43-0800 monthly 0.8 admin,premium knowledge_article_5242 knowledge_article_5242 2021-12-21T01:53:54-0800 000012027 Validated (External) Premium Ruckus support services;Cloud services;Smart wireless services Configuration;Security Configuration, Security, Ruckus Support Services, Cloud Services, Smart Wireless Services <div>What are the URLs, IPs, and Ports that need to be allowed in the firewall for Ruckus One?</div> <div> To allow Ruckus One to function properly, please configure your firewall to allow outbound connectivity to the following URLs and ports: <hr></hr> <h3>Outbound HTTPS (TCP 443)</h3> From APs and Switches to: <pre><code><a href="https://ap-registrar.ruckuswireless.com" target="_blank">https://ap-registrar.ruckuswireless.com</a> <a href="https://sw-registrar.ruckuswireless.com" target="_blank">https://sw-registrar.ruckuswireless.com</a> <a href="https://ocsp.comodoca.com" target="_blank">https://ocsp.comodoca.com</a> <a href="https://ocsp.entrust.net" target="_blank">https://ocsp.entrust.net</a> <a href="https://ruckus.cloud" target="_blank">https://ruckus.cloud</a> <a href="https://eu.ruckus.cloud" target="_blank">https://eu.ruckus.cloud</a> <a href="https://asia.ruckus.cloud" target="_blank">https://asia.ruckus.cloud</a> <a href="https://device.ruckus.cloud" target="_blank">https://device.ruckus.cloud</a> <a href="https://device.eu.ruckus.cloud" target="_blank">https://device.eu.ruckus.cloud</a> <a href="https://device.asia.ruckus.cloud" target="_blank">https://device.asia.ruckus.cloud</a> <a href="https://storage.googleapis.com" target="_blank">https://storage.googleapis.com</a> </code></pre> <hr></hr> <h3>Outbound SSH (TCP 22)</h3> From APs and Switches to: <pre><code>device.ruckus.cloud device.eu.ruckus.cloud device.asia.ruckus.cloud Ports Required for RUCKUS One Communication </code></pre> <table class="table frame-all" id="GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08__TABLE_CZ2_FY2_YX" style="box-sizing: border-box;border-collapse: collapse;background-color: #ffffff;width: 722px;max-width: 100%;margin-bottom: 20px;color: #333333;font-family: 'Open Sans', sans-serif;font-size: 14px;white-space: normal;border: 1px solid #000000;" border="1"><thead class="thead" style="box-sizing: border-box;background-color: #fde3c9;color: #333333;"><tr class="row" style="box-sizing: border-box;margin-right: -15px;margin-left: -15px;"><th colspan="1" rowspan="1" class="entry" id="GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08__TABLE_CZ2_FY2_YX__entry__1" style="box-sizing: border-box;padding: 8px;vertical-align: bottom;line-height: 1.42857;border: 1px solid rgb(0, 0, 0);background-color: #f39c12;text-align: center;">From (Sender)</th><th colspan="1" rowspan="1" class="entry" id="GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08__TABLE_CZ2_FY2_YX__entry__2" style="box-sizing: border-box;padding: 8px;vertical-align: bottom;line-height: 1.42857;border: 1px solid rgb(0, 0, 0);background-color: #f39c12;text-align: center;">To (Listener)</th><th colspan="1" rowspan="1" class="entry" id="GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08__TABLE_CZ2_FY2_YX__entry__3" style="box-sizing: border-box;padding: 8px;vertical-align: bottom;line-height: 1.42857;border: 1px solid rgb(0, 0, 0);background-color: #f39c12;text-align: center;">Port</th><th colspan="1" rowspan="1" class="entry" id="GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08__TABLE_CZ2_FY2_YX__entry__4" style="box-sizing: border-box;padding: 8px;vertical-align: bottom;line-height: 1.42857;border: 1px solid rgb(0, 0, 0);background-color: #f39c12;text-align: center;">Purpose</th><th colspan="1" rowspan="1" class="entry" id="GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08__TABLE_CZ2_FY2_YX__entry__5" style="box-sizing: border-box;padding: 8px;vertical-align: bottom;line-height: 1.42857;border: 1px solid rgb(0, 0, 0);background-color: #f39c12;text-align: center;">Symptoms When Blocked</th></tr></thead><tbody class="tbody" style="box-sizing: border-box;"><tr class="row" style="box-sizing: border-box;margin-right: -15px;margin-left: -15px;"><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Admin</td><td colspan="1" rowspan="1" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Any</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">TCP:443</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Login and access tenant account for managing tenant APs or switches</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">RUCKUS One portal is inaccessible.</td></tr><tr class="row" style="box-sizing: border-box;margin-right: -15px;margin-left: -15px;"><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">AP/Switch</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);"><span class="ph" id="GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08__GUID-626DE97E-DA8D-4C1E-90E9-451CDA7048B4" style="box-sizing: border-box;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">RUCKUS One</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">TCP:22</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);"> SSH tunnel between the AP and RUCKUS One when the AP is running on standalone or SmartZone firmware. After the RUCKUS One AP image is upgraded, the AP uses HTTP/HTTPS for management and control traffic </td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">The AP or switch is unable to connect to RUCKUS One. On the AP, the DIR (newer models are labeled CTL) LED is off. Tenant account shows that AP or switch is disconnected. </td></tr><tr class="row" style="box-sizing: border-box;margin-right: -15px;margin-left: -15px;"><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">AP/Switch</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);"><span class="ph" id="GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08__GUID-626DE97E-DA8D-4C1E-90E9-451CDA7048B4" style="box-sizing: border-box;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">RUCKUS One</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">TCP:443</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);"> Handles all traffic between AP or switch and RUCKUS One </td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">The AP or switch will be unable to connect to RUCKUS One.</td></tr><tr class="row" style="box-sizing: border-box;margin-right: -15px;margin-left: -15px;"><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">AP/Switch</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">RUCKUS AP Registrar</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">TCP:443</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);"> Handles all traffic between AP or switch and RUCKUS One </td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">The AP or switch will be unable to connect to RUCKUS One.</td></tr><tr class="row" style="box-sizing: border-box;margin-right: -15px;margin-left: -15px;"><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">AP/Switch</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">RUCKUS NTP Server (ntp.ruckuswireless.com)</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">UDP:123</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Synchronization of the AP or switch clock with the NTP server</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">The network device clock will be inaccurate.</td></tr><tr class="row" style="box-sizing: border-box;margin-right: -15px;margin-left: -15px;"><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">AP/Switch</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">DNS server (provided by local DHCP)</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">TCP/UDP:53</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Query to resolve RUCKUS AP/switch Registrar's FQDN</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">This port is only used when an AP or switch is first added to a tenant account. If this port is blocked, any factory-reset AP switch will be unable to connect to RUCKUS One.</td></tr><tr class="row" style="box-sizing: border-box;margin-right: -15px;margin-left: -15px;"><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Guest</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">RUCKUS One (Guest Portal)</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">TCP:443</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Guest authentication</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Guest portal is unreachable.</td></tr><tr class="row" style="box-sizing: border-box;margin-right: -15px;margin-left: -15px;"><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Guest</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">RUCKUS One (Guest Portal)</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">TCP:8090</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Enabling guest access to a tenant network</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Guest authentication does not work and the guest is unable to connect to the network.</td></tr><tr class="row" style="box-sizing: border-box;margin-right: -15px;margin-left: -15px;"><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Guest</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">RUCKUS One (Guest Portal)</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">TCP:8099</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Enabling guest access to a tenant network</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Guest authentication does not work and the guest is unable to connect to the network.</td></tr><tr class="row" style="box-sizing: border-box;margin-right: -15px;margin-left: -15px;"><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">RUCKUS One/AP</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Location Server</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">TCP:8883 (default)</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">After authentication, the Location Server exchanges location messages with the Sender, which may be either RUCKUS One or the AP.</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">RUCKUS One or the AP will be unable to connect to the Location Server and obtain location information.</td></tr><tr class="row" style="box-sizing: border-box;margin-right: -15px;margin-left: -15px;"><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">AP</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">RUCKUS NATS Server with MQTT enabled</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">TCP:443</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">For secure messaging, the AP communicates with the NATS Server with MQTT enabled in RUCKUS One.</td><td colspan="1" rowspan="1" class="entry" style="box-sizing: border-box;padding: 8px;line-height: 1.42857;vertical-align: top;border: 1px solid rgb(0, 0, 0);">Securely handles communication between the AP and the RUCKUS One NATS Server with MQTT enabled.</td></tr></tbody></table> <pre><code></code></pre> <table id="GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08__TABLE_PBB_HHV_JWB" style="width: 722px;"><caption>Protocols and Ports Required for RADIUS Server Communication</caption><colgroup><col style="width: 240.328px;"></col><col style="width: 240.328px;"></col><col style="width: 240.344px;"></col></colgroup><thead><tr><td colspan="1" rowspan="1" id="GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08__TABLE_PBB_HHV_JWB__entry__1" style="background-color: #f39c12;border-color: #000000;border-style: solid;text-align: center;">Protocols and Ports</td><td colspan="1" rowspan="1" id="GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08__TABLE_PBB_HHV_JWB__entry__2" style="background-color: #f39c12;border-color: #000000;border-style: solid;text-align: center;">Firewall Flow</td><td colspan="1" rowspan="1" id="GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08__TABLE_PBB_HHV_JWB__entry__3" style="background-color: #f39c12;border-color: #000000;border-style: solid;text-align: center;">Purpose</td></tr></thead><tbody><tr><td colspan="1" rowspan="1" style="background-color: #ffffff;border-color: #000000;border-style: solid;">UDP 1812/1813 (RADIUS)</td><td colspan="1" rowspan="1" style="background-color: #ffffff;border-color: #000000;border-style: solid;">RUCKUS One IP ranges to the RADIUS server of the customer.</td><td colspan="1" rowspan="1" style="background-color: #ffffff;border-color: #000000;border-style: solid;">RUCKUS One proxies the RADIUS AAA traffic from the AP and forwards it to the RADIUS server of the customer.</td></tr><tr><td colspan="1" rowspan="1" style="background-color: #ffffff;border-color: #000000;border-style: solid;">UDP User-Defined (RADIUS)</td><td colspan="1" rowspan="1" style="background-color: #ffffff;border-color: #000000;border-style: solid;">RUCKUS One IP ranges to the RADIUS server of the customer on the user-defined port.</td><td colspan="1" rowspan="1" style="background-color: #ffffff;border-color: #000000;border-style: solid;">RUCKUS One proxies the RADIUS AAA traffic from the AP and forwards it to the RADIUS server of the customer on the user-defined port.</td></tr></tbody></table> <pre><code></code></pre> <hr></hr> <h2>Network Requirements</h2> The following firewall ports must be open to allow APs to complete Ruckus One discovery and maintain continuous connection. NOTE: Checking firewall ports is the first step when an AP is unable to connect or disconnects from Ruckus One. </div>

To allow proper communication between managed APs and Switches and Ruckus One, customers must allow specific URLs, Ports, and IPs in their firewall.

2026-01-08T07:58:43-0800 2026-01-09T06:00:11-0800 https://support.ruckuswireless.com/articles/000014347 2026-01-08T09:37:29-0800 monthly 0.8 admin,premium knowledge_article_5322 knowledge_article_5322 2024-07-08T07:03:10-0700 000014347 Validated (External) Premium Virtual smartcell gateway Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, virtual SmartCell Gateway <div>Why does the vSZ GUI display a “Control Plane Capacity Mismatch” error?</div> <div> The issue was resolved by adjusting both nodes to a supported vSZ-E resource level: <ul><li>vCPUs: 4</li><li>RAM: 16 GB</li><li>Disk: 150 GB</li></ul> Once both nodes were re-provisioned with the correct resource tier, the system recalculated capacity evenly and the Control Plane Capacity Mismatch error cleared automatically. </div>

The vSZ GUI reported a “Control Plane Capacity Mismatch” error, but no service impact was observed. Further investigation revealed that the two nodes in the vSZ-E cluster had inconsistent system capacity values due to improper resource allocation. The issue was resolved after both nodes were provisioned with the correct resource level aligned with the supported vSZ-E specifications.

2026-01-08T09:37:29-0800 2026-01-09T06:00:10-0800 https://support.ruckuswireless.com/articles/000014351 2026-01-08T10:47:29-0800 monthly 0.8 admin,premium knowledge_article_5349 knowledge_article_5349 2024-06-26T08:22:43-0700 000014351 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Installation Configuration, Installation, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Can a configuration backup from one SZ model be restored on a different SZ model? The matrix below indicates which SZ models are compatible with configuration backups from other models: <table border="1" style="width: 500px;"><tbody><tr><td colspan="1" rowspan="1" style="text-align: center;"> <h5>Model</h5> </td><td colspan="1" rowspan="1" style="text-align: center;"> <h5>SZ-104</h5> </td><td colspan="1" rowspan="1" style="text-align: center;"> <h5>SZ-124</h5> </td><td colspan="1" rowspan="1" style="text-align: center;"> <h5>SZ-144</h5> </td><td colspan="1" rowspan="1" style="text-align: center;"> <h5>SZ-300</h5> </td><td colspan="1" rowspan="1" style="text-align: center;"> <h5>vSZ-E</h5> </td><td colspan="1" rowspan="1" style="text-align: center;"> <h5>vSZ-H</h5> </td></tr><tr><td colspan="1" rowspan="1" style="text-align: center;">SZ-104</td><td colspan="1" rowspan="1" style="text-align: center;">Yes</td><td colspan="1" rowspan="1" style="text-align: center;">Yes</td><td colspan="1" rowspan="1" style="text-align: center;">Yes</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td></tr><tr><td colspan="1" rowspan="1" style="text-align: center;">SZ-124</td><td colspan="1" rowspan="1" style="text-align: center;">Yes</td><td colspan="1" rowspan="1" style="text-align: center;">Yes</td><td colspan="1" rowspan="1" style="text-align: center;">Yes</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td></tr><tr><td colspan="1" rowspan="1" style="text-align: center;">SZ-144</td><td colspan="1" rowspan="1" style="text-align: center;">Yes</td><td colspan="1" rowspan="1" style="text-align: center;">Yes</td><td colspan="1" rowspan="1" style="text-align: center;">Yes</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td></tr><tr><td colspan="1" rowspan="1" style="text-align: center;">SZ-300</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">Yes</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td></tr><tr><td colspan="1" rowspan="1" style="text-align: center;">vSZ-E</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">Yes</td><td colspan="1" rowspan="1" style="text-align: center;">No</td></tr><tr><td colspan="1" rowspan="1" style="text-align: center;">vSZ-H</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">No</td><td colspan="1" rowspan="1" style="text-align: center;">Yes</td></tr></tbody></table> Note: For a configuration backup to be supported, the port configuration must be identical across the models involved.

This article explores the compatibility of configuration backups across various SZ models. We provide a comprehensive matrix to illustrate which models support configuration backup from other models.

2026-01-08T10:47:29-0800 2026-01-09T06:00:10-0800 https://support.ruckuswireless.com/articles/000014307 2026-01-08T10:58:05-0800 monthly 0.8 admin,premium knowledge_article_5300 knowledge_article_5300 2024-05-01T14:18:47-0700 000014307 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;Troubleshooting Installation, Troubleshooting, SmartCell Gateway <div>How do I gracefully shut down the Virtual SmartZone Controller for maintenance?</div> <div> To gracefully shut down a SmartZone controller from the CLI, follow the steps below: <ol><li> Connect to the SmartZone via SSH Use an SSH client (e.g., PuTTY) to access the controller’s CLI. </li><li> Log in with administrator credentials Enter "admin" and it's respective password, then switch to privileged mode using: enable <enable password><code> </code> <pre></pre> </li><li> Initiate the shutdown Run the following command to start the graceful shutdown sequence: <pre><code>shutdown now </code></pre> </li><li> Confirm the shutdown When prompted for confirmation, type: <pre><code>yes </code></pre> </li><li> Verify shutdown completion <ul><li>The SSH session will eventually disconnect with a network timeout.</li><li>Alternatively, run a continuous ping to the controller’s IP—responses will stop once the shutdown is complete.</li></ul> </li></ol> </div> <img alt="SZ Shutdown" height="287" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yN7&feoid=00N50000002Cf3M&refid=0EMPH000004cPnt" width="922"></img> <div> <h2>Important Note</h2> Allow the system to fully power down before turning off the VM or making hypervisor?level changes. Interrupting the shutdown process may result in configuration or database corruption. </div>

This article explains the step?by?step process to gracefully shut down the Virtual SmartZone (vSZ) controller. This procedure is required during maintenance windows, hypervisor?level modifications, or when making resource adjustments on the virtual machine to prevent data corruption and ensure system integrity.

2026-01-08T10:58:05-0800 2026-01-09T06:00:09-0800 https://support.ruckuswireless.com/articles/000015097 2026-01-08T11:16:13-0800 monthly 0.8 admin,premium knowledge_article_5905 knowledge_article_5905 2025-11-04T02:45:16-0800 000015097 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) System network management System Network Management, SmartCell Gateway <div>How can I get the serial numbers of all APs and Switches managed by a SmartZone or Virtual SmartZone controller?</div> <div> <h2>Retrieve AP Serial Numbers from SmartZone Web UI</h2> <h3>1. Log in to the SmartZone Web Interface</h3> <ul><li>Open a browser and navigate to the SmartZone controller’s IP address or hostname.</li><li>Enter your administrator credentials.</li></ul> <h3>2. Navigate to the Access Points Section</h3> <ul><li>Click Network from the left?hand menu.</li><li>Select Access Points. <img alt="" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yQL&feoid=00N50000002Cf3M&refid=0EMRk00000F9NCr" width="948" height="311"></img></li></ul> <h3>3. View the AP List</h3> You will see a table containing key AP details such as: <ul><li>AP Name</li><li>MAC Address</li><li>Serial Number</li><li>Model</li><li>IP Address</li><li>Status</li></ul> <h3>4. Customize Columns (if needed)</h3> Ensure that Serial Number is visible: <ul><li>Click Column Settings (or the visibility/filter icon).</li><li>Enable Serial Number.</li><li>Optional: filter by zone, group, or status. <img alt="" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yQL&feoid=00N50000002Cf3M&refid=0EMRk00000F9NG5" width="951" height="491"></img></li></ul> <h3>5. Export the AP List</h3> <ul><li>Click the Export / Download icon (top?right of the table).</li><li>Select CSV format.</li><li>The downloaded file will include all AP serial numbers. <img alt="" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yQL&feoid=00N50000002Cf3M&refid=0EMRk00000F9NJJ" width="1622" height="818"></img></li></ul> <hr></hr> <h2>Retrieve Switch Serial Numbers from SmartZone Web UI</h2> <h3>1. Log in to the SmartZone Web Interface</h3> <ul><li>Open a browser and navigate to the controller’s IP/hostname.</li><li>Enter admin credentials.</li></ul> <h3>2. Navigate to the Switches Section</h3> <ul><li>Go to Network.</li><li>Click Wired ? Switches. </li><li><img alt="" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yQL&feoid=00N50000002Cf3M&refid=0EMRk00000F9NMX" width="1127" height="370"></img></li></ul> <h3>3. Export the Switch List</h3> <ul><li>Click the Export / Download icon at the top?right.</li><li>Choose CSV format.</li><li>The file will include switch serial numbers and associated details. </li></ul> <img alt="" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yQL&feoid=00N50000002Cf3M&refid=0EMRk00000F9NO9" width="1483" height="465"></img> </div>

This article provides clear, step?by?step instructions to retrieve the serial numbers of all Access Points (APs) and Switches managed by RUCKUS SmartZone (SZ) and Virtual SmartZone (vSZ) controllers. These details are essential for support cases, entitlement checks, compliance audits, and inventory management.

2026-01-08T11:16:13-0800 2026-01-09T06:00:09-0800 https://support.ruckuswireless.com/articles/000014736 2026-01-08T11:54:59-0800 monthly 0.8 admin,premium knowledge_article_5727 knowledge_article_5727 2025-03-18T01:04:07-0700 000014736 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Security;Known issues and workarounds Configuration, Security, Known Issues and Workarounds, Cloudpath Why is MAC address not getting recognized on CP or just shows blank value when using Captive portal based SSID on Fortigate network? <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">To successfully register a MAC address on the Cloudpath CP, the device must be redirected to the enrollment portal, which includes the MAC address in the HTTP request (this process does not rely on RADIUS). When a device is unauthenticated, the controller or switch typically redirects the device's browser to the enrollment portal with an HTTP attribute containing the MAC address. </li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">However, Fortigate uses a specific HTTP parameter, "usermac", to pass the MAC address during the HTTP redirect. This parameter was not supported in Cloudpath CP until version 6.0R1. As a result, the MAC address would not be registered correctly, causing MAC Auth to fail. </li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Support for the HTTP parameter "usermac" was added in Cloudpath CP version 6.0R2. This update allows Cloudpath to correctly capture the MAC address from the HTTP redirect initiated by Fortigate devices. To resolve this issue, ensure that the Cloudpath CP is upgraded to version 6.0R2 or later. </li></ul>

MAC Address Blank in CP When Integrated with FortiAP's/Fortigate Captive Portal

2026-01-08T11:54:59-0800 2026-01-09T06:00:08-0800 https://support.ruckuswireless.com/articles/000010861 2026-01-08T11:29:41-0800 monthly 0.8 admin,premium knowledge_article_4395 knowledge_article_4395 2020-09-08T05:48:09-0700 000010861 Validated (External) Premium Sz144;SmartZone 144-Dataplane (SZ144-D) Configuration;Installation Configuration, Installation, SZ144 Which ports are in port group 1 and 2 on the SZ144? In the below diagram you can see which ports are part of Port group 1 and Port group 2, and how Port group 2 is setup. <img alt="User-added image" height="379" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001yVB&feoid=00N50000002Cf3M&refid=0EM2J000001CWuU" width="670"></img>

This article shares detail on the ports mapped to Port Group 1 and Port Group 2 in SZ144

2026-01-08T11:29:41-0800 2026-01-09T06:00:08-0800 https://support.ruckuswireless.com/articles/000014439 2026-01-08T11:24:34-0800 monthly 0.8 admin,premium knowledge_article_5482 knowledge_article_5482 2024-08-26T09:41:15-0700 000014439 Validated (External) Premium Knowledge;Ruckus cloud wifi Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, Knowledge, Ruckus Cloud WiFi <div> <ul><li>How do I change the cipher type on a WPA3 WLAN?</li><li>What are the different cipher types available for WPA3?</li></ul> </div> <div>Take SSH access to the AP and run the below commands to change the encryption on SAE or EAP(.1x) or OWE as per the customer's request. NOTE: The AP CLI commands are not reboot persistent and any changes made in WLAN will revert to its default settings.</div> Method-1: By setting the RPM Key values <pre class="ckeditor_codeblock">rkscli: set rpmkey wlans/wlan35/wlan-cipher-type 6</pre> Below are the Cipher types: Wlan-cipher-type-0: Will go to (Bad , incorrect , unknown) Wlan-cipher-type-1:TKIP Wlan-cipher-type-2:AES-CCMP Wlan-cipher-type-3:Auto-select (TKIP or AES-CCMP) Wlan-cipher-type-4:AES-CCMP-256 Wlan-cipher-type-5:AES-CGMP Wlan-cipher-type-6:AES-CGMP-256 Wlan-cipher-type-7 : Will go to (Bad , incorrect , unknown) Method-2; WLAN configuration from scratch <pre class="ckeditor_codeblock">rkscli: set encryption wlan5 Wireless Encryption Type: [0] quit, [1] OPEN, [2] WPA Wireless Encryption Type: 2 WPA Protocol Version: [0] quit, [1] WPA, [2] WPA2, [3] AUTO (WPA+WPA2) [4] WPA3 [5] WPA2/WPA3-Mixed WPA Protocol Version: 4 WPA Authentication Type: [0] quit, [1] SAE, [2] EAP (.1X), or [3] OWE WPA Authentication Type: 2 WPA Cipher Type: [0] quit, [1] AES-CCMP, [2] AES-CCMP256, [3] AES-GCMP, or [4] AES-GCMP256 WPA Cipher Type: 4 NAS-ID (network access server ID): "a8:0b:fb:58:d8:15" Enter A New NAS-ID [1-63 letters], or Press "Enter" to Accept : ----------------------------- Primary Authentication Server ----------------------------- IP : 192.168.1.11 Port : 1812 Secret : Google@12345 ----------------------------- Select server to change (or 4 to skip): [0] quit, [1] Primary, [2] Backup1, or [3] Backup2 Select : 4 ----------------------------- Primary Accounting Server ----------------------------- IP : Port : Secret : ----------------------------- Select server to change (or 4 to skip): [0] quit, [1] Primary, [2] Backup1, or [3] Backup2 Select : 4 WPA no error OK </pre>

This article explains how to change the cipher type used by WPA3-enabled WLANs on RUCKUS Access Points. It covers the default behavior, reasons a change may be required, and methods to modify the encryption configuration using AP CLI.

2026-01-08T11:24:34-0800 2026-01-09T06:00:08-0800 https://support.ruckuswireless.com/articles/000014747 2026-01-08T12:02:56-0800 monthly 0.8 admin,premium knowledge_article_5736 knowledge_article_5736 2025-03-27T19:06:05-0700 000014747 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Troubleshooting;Known issues and workarounds Configuration, Firmware, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway How to solve clone zone error: " Country: HK with channelization: 20MHz in radio24g channel range: [1,2,3,4,5,6,7,8,9,10,11,12,13] contains illegal channel. Please set chann <div> To avoid channel conflicts and ensure successful zone cloning, remove channels 12 and 13 from the 2.4 GHz channel range when using the HK country code on SmartZone 7.0 and later. </div>

Beginning with SmartZone (SZ) version 7.0, 2.4 GHz channels 12 and 13 are no longer supported when using the Hong Kong (HK) country code. For systems upgraded from earlier releases, if these channels remain enabled in the AP Zone’s channel range, zone cloning operations will fail until channels 12 and 13 are removed.

2026-01-08T12:02:56-0800 2026-01-09T06:00:07-0800 https://support.ruckuswireless.com/articles/000014677 2026-01-07T10:44:02-0800 monthly 0.8 admin,premium knowledge_article_5675 knowledge_article_5675 2025-01-31T02:34:12-0800 000014677 Validated (External) Premium Ruckus icx switches;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Ruckus ICX Switches, SmartCell Gateway <div> Why does the Switch API call: <pre><code>https://<SZ_IP>:8443/wsg/api/public/v9_1/userGroups/<userGroupUUID>?serviceTicket=<serviceTicket> </code>< <div> To retrieve the list of users assigned to a user group, append the following parameter to your API request: <pre><code>&includeUsers=True </code></pre> <h3>Working Example</h3> <pre><code>https://<vSZIP>:8443/wsg/api/public/v9_1/userGroups/ceaa4f50-1428-11ef-83d3-1a921a8cf767?serviceTicket=ST-17-4yCaFHtP5Z5qhiNjI9nI-vSZ-H-247&includeUsers=True </code></pre> This modified request will return full user?group details, including the list of users associated with the group. </div>

This article explains why the SmartZone (SZ/vSZ) Switch API call for retrieving user?group information does not return the list of users by default, and how to modify the API request to include assigned users.

2026-01-07T10:44:02-0800 2026-01-08T10:00:12-0800 https://support.ruckuswireless.com/articles/000014545 2026-01-07T10:05:57-0800 monthly 0.8 admin,premium knowledge_article_6045 knowledge_article_6045 2024-11-20T00:56:06-0800 000014545 Validated (External) Premium Ruckus cloud switch;Ruckus icx switches Firmware;System network management Firmware, System Network Management, Ruckus Cloud Switch, Ruckus ICX Switches <ol><li>How do you disable the auto?upgrade firmware feature on Ruckus One?</li><li>How do you enable manual firmware upgrades for ICX switches on Ruckus One?</li></ol> <div> <h2></h2> Ruckus One provides a Schedule Manually option for switch firmware management. Selecting this option disables automatic firmware upgrades and allows administrators to initiate updates at their convenience. <h3>How to Disable Auto?Upgrade for ICX Switches (Enable Manual Scheduling)</h3> <ol><li>Log in to Ruckus One.</li><li>Navigate to: Administration ? Account Management ? Version Manager ? Switch Firmware ? Preferences</li><li>Under Firmware Scheduling, select: ? Schedule Manually</li><li>Save your settings. </li></ol> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xhB&feoid=00N50000002Cf3M&refid=0EMRk00000GggXu" width="439" height="275"></img> Once enabled, firmware updates will no longer occur automatically, and administrators must manually initiate upgrades as needed. We can also disable the firmware Management from R1 for a venue using "Disable Firmware Management" <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xhB&feoid=00N50000002Cf3M&refid=0EMRk00000GgnHe" width="956" height="274"></img> Note: This is a one time process and the change cannot be reverted, and you will get a warning as following when you click on "Disable Firmware Management" >> Click on Disable to proceed. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xhB&feoid=00N50000002Cf3M&refid=0EMRk00000GgtdB" width="368" height="201"></img> </div>

By default, Ruckus One automatically upgrades ICX switches to the recommended firmware version using the Schedule Automatically option in the Version Manager. Some customers may prefer to manage firmware lifecycles manually to maintain operational control or to comply with internal change?management policies. This article explains how to disable the auto?upgrade firmware feature and enable manual firmware management for ICX switches on Ruckus One.

2026-01-07T10:05:57-0800 2026-01-08T10:00:12-0800 http://support.ruckuswireless.com/article_attachments/kA2PH000001L0sT0AS?attachment_index=0 2026-01-08T10:00:12-0800 monthly admin,premium knowledge_article_6045 knowledge_article_6045_attachment_1 Ruckus one - disable auto upgrade.JPG 74400.0 image/jpeg https://support.ruckuswireless.com/articles/000015018 2026-01-07T10:16:34-0800 monthly 0.8 admin,premium knowledge_article_5873 knowledge_article_5873 2025-09-25T03:34:58-0700 000015018 Validated (External) Premium Sz144;Sz300;Icx 7150;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;RUCKUS ICX 7150 Campus Switches;SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, SZ144, SZ300, ICX 7150, SZ100 Will a RUCKUS ICX switch change its credentials after being onboarded to a RUCKUS SmartZone controller? To regain access or understand the new credentials, follow these steps: <h3>Step 1: Check SmartZone Credentials Policy</h3> Log into the SmartZone controller and navigate to: Configuration ? Switch ? Switch Group ? Management Settings <ul style="list-style-type: disc;"><li>Review the Admin Username and Password configured for switch management.</li><li>These credentials are pushed to all switches in the group.</li></ul> <h3>Step 2: Use SmartZone-Defined Credentials</h3> Attempt to log into the switch using the credentials defined in the SmartZone switch group settings. <code>ssh <admin_username>@<switch_ip> </code> <h3> Step 3: Modify Credentials via SmartZone (if needed)</h3> To change the credentials: <ol><li>Go to Switch Group ? Management Settings.</li><li>Update the Admin Username and Password.</li><li>Save and apply the configuration.</li><li>Wait for the switch to sync with the controller.</li></ol> <h3>Step 4: Use Console Access (if SmartZone is unreachable)</h3> If SmartZone is unavailable and you need emergency access: <ol><li>Connect via console cable.</li><li>Reboot the switch and interrupt boot to enter boot monitor.</li><li>Use recovery procedures to reset credentials or configuration.</li></ol> <blockquote> ?? Note: This may require physical access and should be done with caution to avoid service disruption. </blockquote> <h2> Additional Information</h2> <ul style="list-style-type: disc;"><li>Avoid manually changing credentials on the switch once it is managed by SmartZone, as changes may be overwritten.</li><li>Always document and securely store SmartZone management credentials.</li><li>For enhanced security, use role-based access and avoid using default credentials in production environments.</li></ul> <h2>References</h2> <ul style="list-style-type: disc;"><li>RUCKUS FastIron Management Configuration Guide, 08.0.95</li><li>SmartZone Administrator Guide</li></ul>

When an ICX switch is onboarded to a RUCKUS SmartZone controller, the controller automatically applies its centralized management policies to the switch. This includes pushing new credentials and AAA configurations, which overwrite local user accounts. As a result, the switch may no longer accept its default login credentials. This article explains why this happens, how to identify the credentials being applied by SmartZone, and how to restore access or modify the credential settings.

2026-01-07T10:16:34-0800 2026-01-08T10:00:12-0800 https://support.ruckuswireless.com/articles/000014654 2026-01-07T11:26:31-0800 monthly 0.8 admin,premium knowledge_article_6044 knowledge_article_6044 2025-01-17T03:58:04-0800 000014654 Validated (External) Premium Ruckus cloud switch Troubleshooting Troubleshooting, Ruckus Cloud Switch What is the procedure for replacing a stack member connected to R1? How do you verify stack serial numbers and status? What ensures compatibility of the rep Please refer to the troubleshooting Steps.

Step-by-step guide for replacing a faulty stack member in an ICX stack connected to R1. The procedure begins with verifying the current stack configuration and ensuring the replacement unit matches the required specifications, including model, family, and firmware version. The faulty unit is powered down, stacking cables are reconnected in the correct sequence, and the replacement unit is configured and integrated seamlessly into the stack. Detailed instructions are provided to verify the new unit's operational status, remove the faulty unit from R1 to optimize license usage, and manually add the replacement unit if automatic integration fails. This guide ensures efficient approach to maintaining stack continuity and minimizing network downtime.

2026-01-07T11:26:31-0800 2026-01-08T10:00:11-0800 https://support.ruckuswireless.com/articles/000014415 2026-01-07T10:51:50-0800 monthly 0.8 admin,premium knowledge_article_5373 knowledge_article_5373 2024-07-31T02:36:05-0700 000014415 Validated (External) Premium Ruckus cloud switch Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Cloud Switch When a switch was added to the Cloud, why weren't the VLANs updated through the switch configuration profile? For the switch to successfully apply the configuration profile, ports must be set to obtain settings from the venue. In some cases, if the ports are set to customized configurations, the VLANs and other settings will not be applied. <img alt="User-added image" height="306" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xu5&feoid=00N50000002Cf3M&refid=0EMPH000008nZ4r" width="500"></img>

This article summarizes on how switch configuration profile works in RUCKUS One.

2026-01-07T10:51:50-0800 2026-01-08T10:00:11-0800 https://support.ruckuswireless.com/articles/000011108 2026-01-07T11:30:26-0800 monthly 0.8 admin,premium knowledge_article_4465 knowledge_article_4465 2020-11-19T06:57:39-0800 000011108 Validated (External) Premium Ap sw registrar Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, AP SW Registrar Why do I get this "unable to load Private Key" error when trying to decrypt the AP / SW registrar certificate? Use the correct passphrase. CommScope AP/SW registrar support team can help to verify passphrase used

A 'Get' error message appears when trying to decrypt the AP / SW registrar certificate.

2026-01-07T11:30:26-0800 2026-01-08T10:00:10-0800 https://support.ruckuswireless.com/articles/000014986 2026-01-07T11:54:56-0800 monthly 0.8 admin knowledge_article_5849 knowledge_article_5849 2025-09-01T06:20:46-0700 000014986 Validated (External) Internal Sz144;Sz300;Ruckus icx switches;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Performance;Configuration;Installation;Troubleshooting Performance, Configuration, Installation, Troubleshooting, SZ144, SZ300, Ruckus ICX Switches, virtual SmartCell Gateway, SZ100 Why does the vSZ WebUI display the Ruckus ICX Switch registration state as "Overloading," and what conditions or metrics typically lead to this status being reported? The recommended approach is to increase the resource level, as most deployments continue to expand over time. For example, increasing the allocation from 8 vCPUs to 12 vCPUs raises the system to Resource Level 6.5 (RL 6.5). RL 6.5 supports 3,001 to 5,000 counts, which provides sufficient capacity for the current device total and allows headroom for growth. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xxJ&feoid=00N50000002Cf3M&refid=0EMPH00000Px4XR" style="height: 291px;width: 724px;"></img>

vSZ WebUI Indicates Ruckus ICX Switch Registration State as "Overloading"

2026-01-07T11:54:56-0800 2026-01-08T10:00:10-0800 https://support.ruckuswireless.com/articles/000014324 2026-01-06T18:08:06-0800 monthly 0.8 admin,premium knowledge_article_6043 knowledge_article_6043 2024-07-19T09:45:17-0700 000014324 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Installation Installation, Cloudpath Which all Hypervisors are supported for On-Prem Cloudpath Installation? On-Prem Cloudpath Installation is only supported on the VMWare and Hyper-V virtualization platform. <img alt="User-added image" height="352" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xaj&feoid=00N50000002Cf3M&refid=0EMRk00000GfYhF" width="953"></img> Reference Doc: <a href="https://support.ruckuswireless.com/documents/5836-cp_es-6-0-ga-release-notes-for-cloudpath-6-0r3" target="_blank">https://support.ruckuswireless.com/documents/5836-cp_es-6-0-ga-release-notes-for-cloudpath-6-0r3</a> NOTE: CloudPath hosting is not supported on the following platforms: Xen Hypervisor (AWS platform). Azure Nutanix Some cloud-hosted services run in Google Cloud (KVM Hypervisor). There is no official road-map yet defined for the support of the aforementioned platforms.

2026-01-06T18:08:06-0800 2026-01-07T14:00:11-0800 https://support.ruckuswireless.com/articles/000010642 2026-01-06T18:09:23-0800 monthly 0.8 admin,premium knowledge_article_6042 knowledge_article_6042 2020-06-18T06:50:34-0700 000010642 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath How to create and configure a single enrollment on Cloudpath to install wired and wireless certificate for secure client connection? In the certificate template we need to have "*"(wildcard) in SSID Regex field, then in device configuration we can add 2 networks, one wired, one wireless. This can be achieved by setting a device configuration to use one certificate for both, wired and wired network. Follow below steps: 1. Go to Configure >> Device Configuration >> Create a new device configuration (or you can edit the existing one, if already created in past. Refer image-3 to edit the device configuration). <img alt="User-added image" height="222" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xZ7&feoid=00N50000002Cf3M&refid=0EM2J000001T3vR" width="876"></img> 2. Choose Authentication style as Client certificate and complete the device configuration by clicking Next and so on. <img alt="User-added image" height="323" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xZ7&feoid=00N50000002Cf3M&refid=0EM2J000001T3vW" width="875"></img> 3. Once Device configuration is created, click on Networks(s). <img alt="User-added image" height="488" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xZ7&feoid=00N50000002Cf3M&refid=0EM2J000001T3vb" width="877"></img> 4. Now in the Network(s) tab, click on "Add" button to add additional network to install. <img alt="User-added image" height="321" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xZ7&feoid=00N50000002Cf3M&refid=0EM2J000001T3vg" width="874"></img> 5. Choose "Wired 802.1X Network" and click next. <img alt="User-added image" height="157" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xZ7&feoid=00N50000002Cf3M&refid=0EM2J000001T3vl" width="871"></img> 6. Now you can see that device configuration has two networks to install, 1st is "Secured SSID" and 2nd is Wired connection. <img alt="User-added image" height="376" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xZ7&feoid=00N50000002Cf3M&refid=0EM2J000001T3vq" width="870"></img> 7. Now create your workflow as usual and as per requirement. 8. In the Result section of your workflow, choose the device configuration created above and choose certificate template. <img alt="User-added image" height="57" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xZ7&feoid=00N50000002Cf3M&refid=0EM2J000001T3vv" width="872"></img> 9. Edit the certificate template and make sure you use "*" (wildcard) in "Allowed SSID". <img alt="User-added image" height="396" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xZ7&feoid=00N50000002Cf3M&refid=0EM2J000001T3wy" width="874"></img> 10. Publish the workflow and its done.

This article explains how to create and configure a single workflow for client device that will allow them to generate a wireless certificate and a wired certificate and install both without having to go through two enrollments

2026-01-06T18:09:23-0800 2026-01-07T14:00:11-0800 https://support.ruckuswireless.com/articles/000010730 2026-01-06T18:11:41-0800 monthly 0.8 admin,premium knowledge_article_6041 knowledge_article_6041 2020-07-14T23:09:09-0700 000010730 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath How to get notifications before the Radius certificate expires? Step 1: Navigate to Certificate Authority ---> Manage Templates. Check if we have any Onboard template configured using "Server Template". Click on Add under Notifications. <img alt="User-added image" height="344" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xPR&feoid=00N50000002Cf3M&refid=0EM2J000001TInP" width="703"></img> Step 2: Configure the notification based on your requirement. Once this is configured email notification will be sent before the Radius Certificate expires. <img alt="User-added image" height="416" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xPR&feoid=00N50000002Cf3M&refid=0EM2J000001TInn" width="710"></img> Step 3: Find the email address that the notification will be sent. Navigate to Dashboard --> Certificates -->Active Certificate --> Find the certificate which is using Server Template and click on it. We will find the email address. <img alt="User-added image" height="349" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xPR&feoid=00N50000002Cf3M&refid=0EM2J000001TIp5" width="719"></img> <img alt="User-added image" height="368" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001xPR&feoid=00N50000002Cf3M&refid=0EM2J000001TIpF" width="720"></img>

How to configure email notifications for Radius Server certificate validity getting expired.

2026-01-06T18:11:41-0800 2026-01-07T14:00:10-0800 https://support.ruckuswireless.com/articles/000011007 2026-01-06T18:19:24-0800 monthly 0.8 admin,premium knowledge_article_6040 knowledge_article_6040 2020-10-23T00:51:31-0700 000011007 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway Why do I see in the AP CONN_GET_ADDR_STATE or DISC_REQ_STATE ? There are not enough licenses on the controller. You will get a message like this in the alarm section of the AP as example: <img alt="User-added image" height="39" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001wbR&feoid=00N50000002Cf3M&refid=0EM2J000001D2Bc" width="921"></img> Add AP licenses to the controller.

This article explains why, when I run the get scg command on the AP, I see the state as either CONN_GET_ADDR_STATE or DISC_REQ_STATE.

2026-01-06T18:19:24-0800 2026-01-07T14:00:10-0800 https://support.ruckuswireless.com/articles/000014540 2026-01-06T18:22:34-0800 monthly 0.8 admin,premium knowledge_article_6039 knowledge_article_6039 2024-10-23T10:29:19-0700 000014540 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Can different RUCKUS SZ models use the same Cluster name in the same network? Ensure that different SZ models do not share the same cluster name when connected to the same network. For instance, if a new SZ-104 cluster is added to a network where an existing SZ-100 cluster is running with the same cluster name, the SZ-100 cluster will display the error message: “Unable to retrieve the cluster tree. Reason: Unable to get Blade information.” Therefore, it is crucial to avoid using the same cluster name for different SZ models within the same network.

Using the same cluster name for two different SZ models in the same network is not allowed. This will cause the existing cluster to display the error: “Unable to retrieve the cluster tree. Reason: Unable to get Blade information.”

2026-01-06T18:22:34-0800 2026-01-07T14:00:09-0800 https://support.ruckuswireless.com/articles/000014729 2026-01-06T08:42:05-0800 monthly 0.8 admin,premium knowledge_article_5783 knowledge_article_5783 2025-03-11T07:44:00-0700 000014729 Validated (External) Premium Sz144;Virtual smartcell gateway;SmartZone 144-Dataplane (SZ144-D) Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, SZ144, virtual SmartCell Gateway Why does the upgrade from 6.1.2.0.404 to 7.1.0.0.586 fail? <ul style="list-style-type: disc;"><li> The upgrade failed due to SSL certificate signing algorithm issues, specifically with MD5-signed certificates, which are now prohibited in newer OpenSSL versions. </li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> A fix was implemented in version 7.1.1 to allow MD5 signed certificates, enabling successful upgrades, and was committed to the relevant development branch. </li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> The root cause was identified as the default certificate mapped for the customer’s setup being signed with MD5, which caused the nginx SSL context error during upgrade. </li></ul>

This article provides a step-by-step guide to troubleshoot and resolve the issue where the nginx service fails to start during the upgrade process from version 6.1.2.0.404 to 7.1.0.0.586.

2026-01-06T08:42:05-0800 2026-01-06T22:00:10-0800 https://support.ruckuswireless.com/articles/000015026 2026-01-06T08:15:52-0800 monthly 0.8 admin,premium knowledge_article_5864 knowledge_article_5864 2025-09-19T07:02:04-0700 000015026 Validated (External) Premium Icx 7750;RUCKUS ICX 7750 Campus Switches Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ICX 7750 Why ICX-7750 Switch Fails to Join SZ/vSZ Post Upgrade to 6.1.2 from Version 5.2.1, while the ICX-8200 can be managed by same controller? <div> <h3>Option 1: Use the Default RSA?3072 Certificate (Recommended)</h3> <ol><li> Go to: Administrator ? Certificates ? Certificate Mapping </li><li> Under Ruckus Intra?Device Communication Certificates, select: Default Certificate – RSA 3072 </li><li> Validate the key attributes: <ul><li>Click the selected certificate</li><li>Confirm the key type shows RSA 3072?bit</li></ul> </li></ol> This ensures compatibility with ICX?7750 SSL requirements. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001x1F&feoid=00N50000002Cf3M&refid=0EMPH00000Ri7Tf"></img> <hr></hr> <h3>Option 2: Upload a CA?Signed Certificate</h3> If using your own PKI: <ul><li>Ensure the certificate uses RSA 2048?bit or RSA 3072?bit key</li><li>Upload it via the Certificates section</li><li>Map it under Ruckus Intra?Device Communication Certificates</li></ul> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001x1F&feoid=00N50000002Cf3M&refid=0EMPH00000RiY50"></img> <hr></hr> <h3>Important Note</h3> This issue occurs only when: <ul><li>The cluster is upgraded from 5.2.1 to 6.1.2, and</li><li>The previous EC?based certificate is retained</li></ul> Fresh deployments or clusters without legacy certificates are not affected. </div>

This article explains why ICX?7750 switches fail to join a SmartZone (SZ/vSZ) controller after upgrading from version 5.2.1 to 6.1.2, despite other switch models (e.g., ICX?8200) onboarding successfully.

2026-01-06T08:15:52-0800 2026-01-06T22:00:10-0800 https://support.ruckuswireless.com/articles/000010606 2026-01-06T09:07:45-0800 monthly 0.8 admin,premium knowledge_article_4229 knowledge_article_4229 2020-06-16T02:28:23-0700 000010606 Validated (External) Premium Ruckus icx switches;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Ruckus ICX Switches, SmartCell Gateway <div>How can I upgrade multiple switches quickly using vSZ/SZ?</div> <div> Beginning with SmartZone version 5.2.1, a new feature allows administrators to upgrade all switches in a switch group simultaneously, significantly reducing operational overhead. <h3>How to Upgrade Multiple Switches at Once</h3> <ol><li id="GUID-F693AF91-1ADB-4907-BF13-1158016FAB20__GUID-F407D6B7-8ED4-4295-B65F-C6C7B53936E9">On the menu, click Network <abbr title="and then">> </abbr>Wired<abbr title="and then"> > </abbr>Switches to display the Switches window.</li><li id="GUID-F693AF91-1ADB-4907-BF13-1158016FAB20__GUID-DDB8DD1C-6EF5-4228-B502-83AED7E4D267">In the Organization tab, select a Domain<abbr title="and then"> > </abbr>Switch Group or Switch Group.</li><li id="GUID-F693AF91-1ADB-4907-BF13-1158016FAB20__GUID-1D49F2C5-EC5D-45AA-84C6-EA62B7350825">Click More<abbr title="and then"> > </abbr>Firmware Upgrade to display the Upgrade Firmware (Group) dialog box <img src="https://docs-be.commscope.com/bundle/sz-612-switchmanagementguide-vszhsz300sz100vsze/page/GUID-DF5E48D7-6742-428F-AD32-D1313B300C8E-low.png?_LANG=enus" width="840" height="350"></img> </li><li>You can either Upgrade immediately or Schedule a time for upgrade based on the local browser time zone <img src="https://docs-be.commscope.com/bundle/sz-612-switchmanagementguide-vszhsz300sz100vsze/page/GUID-1194AD62-95CB-4BCE-A163-B2F28FF3481A-low.png?_LANG=enus" width="576" height="375"></img> </li></ol> Once initiated, all switches within that switch group will automatically download and apply the selected firmware. The upgrade process typically completes within a few minutes, depending on: <ul><li>Number of switches</li><li>Network conditions</li><li>Firmware file size</li></ul> After completion, the switches will reboot and come online with the updated firmware. </div>

This article explains how to upgrade multiple ICX switches simultaneously using SmartZone (vSZ/SZ), instead of upgrading each switch individually.

2026-01-06T09:07:45-0800 2026-01-06T22:00:10-0800 https://support.ruckuswireless.com/articles/000014138 2026-01-06T11:49:52-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4949 knowledge_article_4949 2023-04-13T06:52:48-0700 000014138 Validated (External) Public Ap sw registrar;Ruckus icx switches;Cloud services Firmware;Installation;Troubleshooting;Known issues and workarounds;Registration Firmware, Installation, Troubleshooting, Known Issues and Workarounds, Registration, AP SW Registrar, Ruckus ICX Switches, Cloud Services <div> <ul><li>What is the minimum code level required to onboard an ICX switch to RUCKUS One?</li><li>Why is my ICX switch failing to onboard to RUCKUS One?</li></ul> </div> <div> <h3>Minimum Firmware Requirements</h3> To onboard to RUCKUS One, ICX switches must meet the following minimum versions: <div> <table><thead><tr><th colspan="1" rowspan="1">Series</th><th colspan="1" rowspan="1">Minimum Code Level</th></tr></thead><tbody><tr><th colspan="1" rowspan="1">ICX7xxx</th><td colspan="1" rowspan="1">08.0.90d (UFI)</td></tr><tr><th colspan="1" rowspan="1">ICX8200 / ICX8100</th><td colspan="1" rowspan="1">10.0.10f_cd1R1</td></tr><tr><th colspan="1" rowspan="1">RUCKUS One Managed Firmware</th><td colspan="1" rowspan="1">09.0.10h (Do not upgrade beyond this manually)</td></tr></tbody></table> </div> Switches labeled “Cloud-Ready” also meet onboarding requirements. <hr></hr> <h3>Upgrade Requirements if Running Older Firmware</h3> <h4>If the switch is running below 08.0.90d (ICX7xxx):</h4> Perform manual upgrades using the following recommended paths: <ul><li> If running 08.0.80 flat ? 08.0.90c Upgrade directly to 08.0.95ca (UFI) </li><li> If running 08.0.70 patch or earlier: Multi?step upgrade required: <pre><code>08.0.70 (or older) ? 08.0.80f (non-UFI) ? 08.0.95ca (UFI) </code></pre> </li></ul> </div> <img alt="image-20250802-011829.png" src="https://media-cdn.atlassian.com/file/cea921d7-82c9-4021-9b1a-4a97f689d7f9/image/cdn?allowAnimated=true&client=2cbfb6d7-2626-4108-861c-437db6870f15&collection=contentId-153288705&height=125&max-age=2592000&mode=full-fit&source=mediaCard&token=eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiIyY2JmYjZkNy0yNjI2LTQxMDgtODYxYy00MzdkYjY4NzBmMTUiLCJhY2Nlc3MiOnsidXJuOmZpbGVzdG9yZTpjb2xsZWN0aW9uOmNvbnRlbnRJZC0xNTMyODg3MDUiOlsicmVhZCJdfSwiZXhwIjoxNzY3NzMwNjg3LCJuYmYiOjE3Njc3Mjc4MDcsImFhSWQiOiI2MmZiYWJjMTQzZTQzOTkyYjlhMjVlNGQiLCJodHRwczovL2lkLmF0bGFzc2lhbi5jb20vYXBwQWNjcmVkaXRlZCI6ZmFsc2V9.bGmpCWtOsHo-GakpVFdPfHX9zxv2MWEAuyjCFq6aTYw&width=882"></img>

This article explains the minimum firmware requirement for an ICX switch to be onboarded and managed by Ruckus One (R1) platform

2026-01-06T11:49:52-0800 2026-01-06T22:00:09-0800 https://support.ruckuswireless.com/articles/000010978 2026-01-05T11:13:40-0800 monthly 0.8 admin,premium knowledge_article_6038 knowledge_article_6038 2020-10-12T01:20:55-0700 000010978 Validated (External) Premium Vsz dataplane Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, vSZ Dataplane I have lost my enable password of the vSZ-D, can I reset it? The vSZ-D (virtual dataplane) enable password is set during initial setup. If the customer lost this enable password, the only way further is to install a new vSZ-D instance. There is no way to reset the enable password of the vSZ-D.

Is there a way to reset the enable password if customer has lost it?

2026-01-05T11:13:40-0800 2026-01-06T10:00:12-0800 https://support.ruckuswireless.com/articles/000011098 2026-01-05T11:18:14-0800 monthly 0.8 admin,premium knowledge_article_6037 knowledge_article_6037 2020-11-23T00:21:17-0800 000011098 Validated (External) Premium Sz144;Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) System network management System Network Management, SZ144, SZ300, SCG200, virtual SmartCell Gateway, SZ100 Why do my cluster backups shrink after 7 days? When a cluster backup is created on a SmartZone controller, a full system backup is created. As these backups can be extremely large and take up vast amounts of storage on the controller, event, alarm and statistical data will be deleted from the cluster backup file after 7 days. Data older than 7 days is not considered to be crucial and is removed from the cluster backup file to preserve storage space.

A cluster backup file is full system backup. Event, alarm and statistic data will be deleted from the cluster backup file after 7 days.

2026-01-05T11:18:14-0800 2026-01-06T10:00:11-0800 https://support.ruckuswireless.com/articles/000010567 2026-01-05T11:26:21-0800 monthly 0.8 admin,premium knowledge_article_6036 knowledge_article_6036 2020-06-07T23:59:56-0700 000010567 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Configuration;Installation Configuration, Installation, SZ100 Why is a new SZ node failing to join the cluster? Verify the Port-Group configuration on the live existing cluster, before configuring the new node to be added to it. If a mistake is made in configuring the Port-Group setting on the new SZ-100, the new node should be factory-reset and configuration started again before attempting to join the cluster.

How to determine whether an SZ-100 is configured as a one or two Port-Group cluster.

2026-01-05T11:26:21-0800 2026-01-06T10:00:11-0800 https://support.ruckuswireless.com/articles/000011112 2026-01-05T11:46:12-0800 monthly 0.8 admin,premium knowledge_article_6035 knowledge_article_6035 2020-11-23T00:24:28-0800 000011112 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How to create a copy of an existing zone? To create a zone copy: 1. Create a new zone under "System" Domain or preferred Domain (in case of vSZ-H) 2. Export the zone template currently in use by the preferred APs 3. Select the current zone 4. Click on "More" above the zone list 5. Choose "Extract Zone Template", and give a name for the template and Click "OK" <img alt="User-added image" height="218" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001vCL&feoid=00N50000002Cf3M&refid=0EMRk00000GaNXy" width="878"></img> 6. Now select the new zone where the APs have to be added 7. Click on "More" above the zone list 8. Choose "Apply Zone Template", and select the template name from the drop down option and Click "OK" <img alt="User-added image" height="229" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001vCL&feoid=00N50000002Cf3M&refid=0EMRk00000GaBBq" width="871"></img> We can then move the preferred APs from the Access Points list to the preferred zone and APgroup within the preferred zone before upgrade: 1. Select the AP or group of APs 2. Click "Move" above the AP list 3. Choose the preferred zone and use '+' symbol to expand the zone to choose the preferred AP-group 4. Click "OK"

Create a copy of an existing zone

2026-01-05T11:46:12-0800 2026-01-06T10:00:11-0800 https://support.ruckuswireless.com/articles/000011106 2026-01-05T11:58:56-0800 monthly 0.8 admin,premium knowledge_article_6034 knowledge_article_6034 2020-11-18T01:08:00-0800 000011106 Validated (External) Premium Zoneflex indoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, SmartCell Gateway Why aren't the LAN ports working/passing traffic on my H510? In the SZ web interface: 1. Highlight the Zone, Group or individual AP 2. Click 'Configure' 3. In the new window, go to Model Specific Options > Port Settings > click the '+' 4. In the new window add a meaningful name, then select 'User Side Port:' = ON and click OK: <div style="margin-left: 40px;"><img alt="User-added image" height="528" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001v5t&feoid=00N50000002Cf3M&refid=0EM2J000001DSf3" width="500"></img></div> <div> 5. When the window closes, ensure your new profile is selected, then click OK once more to apply the setting: </div> <div style="margin-left: 40px;"><img alt="User-added image" height="124" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001v5t&feoid=00N50000002Cf3M&refid=0EM2J000001DSf8" width="500"></img></div>

How-to guide on enabling the 4 LAN ports on an H510 migrated from 5.1 to 5.2 Zone/AP Group

2026-01-05T11:58:56-0800 2026-01-06T10:00:10-0800 https://support.ruckuswireless.com/articles/000014651 2026-01-05T11:59:48-0800 monthly 0.8 admin,premium knowledge_article_6033 knowledge_article_6033 2025-01-14T02:06:10-0800 000014651 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway Why can I not create tunneled SSID on legacy (3.6.2) zone on SmartZone 6.1.2.0.487? Issue is Resolved in 6.1.2patch5 (6.1.2.0.1071)

Cannot create tunneled SSID on a zone that has version 3.6.2 AP firmware, while controller is version 6.1.2.0.487

2026-01-05T11:59:48-0800 2026-01-06T10:00:10-0800 https://support.ruckuswireless.com/articles/000014544 2026-01-05T12:01:49-0800 monthly 0.8 admin,premium knowledge_article_6032 knowledge_article_6032 2024-11-19T11:54:03-0800 000014544 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration Configuration, SZ144, SZ300, virtual SmartCell Gateway, SZ100 How to configure separate WLANs for 2.4 GHz and 5 GHz band? 1. Navigate to Network > Wireless > Access Points 2. Select the zone where you want to create the new WLANs. 3. Click on + icon and create two new WLAN groups: One for 2.4 GHz and one for 5 GHz <img alt="User-added image" height="372" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ug5&feoid=00N50000002Cf3M&refid=0EMPH00000CaMXl" width="484"></img> A) Add the WLANs which need to broadcast 2.4 GHz band. <img alt="User-added image" height="257" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ug5&feoid=00N50000002Cf3M&refid=0EMPH00000Ca9CM" width="493"></img> B) Add the WLANs which need to broadcast 5 GHz band. <img alt="User-added image" height="251" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ug5&feoid=00N50000002Cf3M&refid=0EMPH00000CaF3I" width="495"></img> 4. Navigate to Network > Wireless > Access Points 5. Click on the zone where the WLANs were created. Then select the AP group. 6. Click on pencil icon. <img alt="User-added image" height="578" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ug5&feoid=00N50000002Cf3M&refid=0EMPH00000CaCQM" width="485"></img> 7. Navigate to Band/Spectrum Configuration 8. Under 2.4 GHz section, enable override on WLAN group option and select the 2.4 GHz WLAN group. <img alt="User-added image" height="425" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ug5&feoid=00N50000002Cf3M&refid=0EMPH00000CaHxu" width="503"></img> 9. Under 5 GHz section, enable override on WLAN group option and select the 5 GHz WLAN group. <img alt="User-added image" height="344" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ug5&feoid=00N50000002Cf3M&refid=0EMPH00000CaF6W" width="501"></img> 10.Click on “OK” to save the configuration. Testing with Client : AP starts broadcasting the SSIDs on the relative radios : <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ug5&feoid=00N50000002Cf3M&refid=0EMPH00000DWhIU"></img> Client connect with 2.4GHz SSID : <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ug5&feoid=00N50000002Cf3M&refid=0EMPH00000DWhIV"></img> Channel : 1 VLAN : 1 SNR (dB) : 80 Packets from Client : 165 Bytes from Client : 27KB Packets to Client : 1.1MB Bytes to Client : 92MB Dropped Packets to Client : AP Rx Signal (db) : 16 AP Tx Data Rate : 0 WLAN : 2.4GHz-Test Client connect with 5GHz SSID : <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ug5&feoid=00N50000002Cf3M&refid=0EMPH00000DWhIW"></img> Channel : 40 VLAN : 1 SNR (dB) : 65 Packets from Client : 546 Bytes from Client : 75KB Packets to Client : 6.3KB Bytes to Client : 3.7MB Dropped Packets to Client : AP Rx Signal (db) : 31 AP Tx Data Rate : 0 WLAN : 5GHz-Test

How to configure separate WLANs for 2.4 GHz and 5 GHz band in SZ/vSZ?

2026-01-05T12:01:49-0800 2026-01-06T10:00:09-0800 https://support.ruckuswireless.com/articles/000014510 2026-01-05T15:22:55-0800 monthly 0.8 admin,premium knowledge_article_5581 knowledge_article_5581 2024-11-05T08:13:22-0800 000014510 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Performance;Configuration;Troubleshooting;Known issues and workarounds Performance, Configuration, Troubleshooting, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 The client was able to successfully associate with the AP even though its RSSI value was below the 'RSSI-based Association Rejection threshold'. The AP will reject a client’s association based on the RSSI-based Association Rejection threshold only if the client supports OCE. For more information regarding OCE, please watch the video at the following link: <a href="https://youtu.be/zkVY0aFRtGE" target="_self">https://youtu.be/zkVY0aFRtGE</a>

The client was able to successfully associate with the AP even though its RSSI value was below the 'RSSI-based Association Rejection threshold'. We identified that this behavior was due to the lack of OCE support on the client.

2026-01-05T15:22:55-0800 2026-01-06T10:00:09-0800 https://support.ruckuswireless.com/articles/000014353 2026-01-05T15:39:58-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5357 knowledge_article_5357 2024-07-23T05:46:26-0700 000014353 Validated (External) Public Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi How to configure CLI Profile on R1 when multiple ICX switches are provisioned with static IP addresses? <h1>Provisioning Multiple ICX Switches using CLI Configuration Profile on R1:</h1> <ul><li>Create a CLI Profile from Wired>Configuration Profiles> page and click on Add CLI Profile Page on R1.</li></ul> <div style="margin-left: 40px;"><img alt="User-added image" height="201" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001wun&feoid=00N50000002Cf3M&refid=0EMPH000008KXzL" width="500"></img></div> <ul><li>Choose the correct ICX Switch Models under Models section.</li><li>Copy the running configuration from the Switch console and paste it under CLI Configuration Section. Backup configuration can also be imported using the Import from file option.</li><li>When static IP address is assigned on ICX Switch- Override existing Switch Configuration should be enabled.</li><li>For provisioning multiple Switches(with static IP addresses)- Variable should be defined to assign IP addresses to Switches. The start IP address can be any valid host IP in the defined subnet. However, the end IP address should be the last host IP address of the subnet. The first Switch that connects to R1 gets the start IP address, second Switch that connects to R1 gets the next IP address from the address pool and so on.</li></ul> <div style="margin-left: 40px;">Example of IP address pool defined in variable named IP: <img alt="User-added image" height="186" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001wun&feoid=00N50000002Cf3M&refid=0EMPH000008Km5V" width="500"></img> <img alt="User-added image" height="236" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001wun&feoid=00N50000002Cf3M&refid=0EMPH000007F82r" width="500"></img> The format of the command should be as mentioned below where ${ip} is the variable: ip address ${ip}</div> <div> </div> <ul><li>At last, select the Venue where the configuration Profile will be be applied for all Switches.</li><li>When a Switch is added to the Venue, it moves to operational state after applying the CLI configuration Profile.</li></ul> <div style="margin-left: 40px;"> <img alt="User-added image" height="110" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001wun&feoid=00N50000002Cf3M&refid=0EMPH000007GHiP" width="500"></img></div> <ul><li>CLI Provisioning Status can be checked from the Switch>Configuration>History Page.</li></ul> <div style="margin-left: 40px;"><img alt="User-added image" height="209" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001wun&feoid=00N50000002Cf3M&refid=0EMPH000007GJdl" width="500"></img></div> <div> Note: The CLI configuration profile is pushed only to those Switches that are connected first time to R1. Further modification to CLI Profile is pushed only to new Switches. Modified CLI Profile is not pushed to a Switch that is already online on R1. </div> <div style="margin-left: 40px;"> </div>

This article describes the steps for provisioning multiple Ruckus ICX switches with static IP address using a CLI configuration profile on Ruckus One (R1).

2026-01-05T15:39:58-0800 2026-01-06T10:00:08-0800 https://support.ruckuswireless.com/articles/000010453 2026-01-05T15:30:58-0800 monthly 0.8 admin,premium knowledge_article_4166 knowledge_article_4166 2020-04-30T06:10:46-0700 000010453 Validated (External) Premium Zonedirector 3000;Zonedirector 5000;Zonedirector 1200;ZoneDirector 3000;ZoneDirector 5000;ZoneDirector 1200 Configuration Configuration, ZoneDirector 3000, ZoneDirector 5000, ZoneDirector 1200 Why I am getting error "Register guest service [] to Facebook failed" when creating guest access profile with Facebook? Make sure you give a profile name for Guest access profile (for example, we have used guest profile name as "Guest_Facebook_Profile"). Once you do it and then click on "Click here to register" then you will not get the error anymore and you will see Facebook Page configuration option to register your Guest profile. <img alt="User-added image" height="533" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001wrZ&feoid=00N50000002Cf3M&refid=0EM2J000001SWpS" width="1112"></img>

This article explains why we get error "Register guest service to Facebook failed" when creating social media guest access page on Zone Director (ZD).

2026-01-05T15:30:58-0800 2026-01-06T10:00:08-0800 https://support.ruckuswireless.com/articles/000010683 2026-01-05T07:04:44-0800 monthly 0.8 admin,premium knowledge_article_4280 knowledge_article_4280 2020-06-30T07:04:26-0700 000010683 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway <div>Why does the <code>query/ap</code> call only display 10 AP records?</div> <div> By default, the <code>query/ap</code> URI returns 10 records. To increase this, include <code>page</code> and <code>limit</code> attributes in the request body. <h4>Example: Return 50 APs on a Single Page: { "attributes": [ "*" ], "page": 1, "limit": 50 } In a large SZ database with thousands of APs, using page (pagination) and (record) limit attributes ensures the returned payload size can be determined by the user. The size of the payload (MB) can impact the performance of the API call (the larger the payload, the longer it will take to return/the more impact on system performance). Below is a full example of the URL body, returning maximum 500 AP records in a single page: { "filters": [ { "type": "DOMAIN", "value": "8b2081d5-9662-40d9-a3db-2a3cf4dde3f7" } ], "fullTextSearch": { "type": "AND", "value": "" }, "attributes": [ "*" ], "page": 1, "limit": 500 }</h4> </div>

This article explains how to use API attributes page and limit to display more than 10 records per API call in SmartZone.

2026-01-05T07:04:44-0800 2026-01-05T18:00:14-0800 https://support.ruckuswireless.com/articles/000011595 2026-01-05T07:18:35-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5245 knowledge_article_5245 2021-04-23T13:27:49-0700 000011595 Validated (External) Public Ruckus cloud wifi Configuration;Installation Configuration, Installation, Ruckus Cloud WiFi Does RUCKUS One support COA? <div>As of now, Ruckus One does not support Change of Authorization (CoA).</div>

Customers often look for Change of Authorization (CoA) functionality in Ruckus One (R1) documentation. This article clarifies the current status of CoA support based on information provided by the Product Line Management (PLM) team.

2026-01-05T07:18:35-0800 2026-01-05T18:00:14-0800 https://support.ruckuswireless.com/articles/000010674 2026-01-05T07:32:10-0800 monthly 0.8 admin,premium knowledge_article_4275 knowledge_article_4275 2020-06-29T02:05:38-0700 000010674 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, SmartCell Gateway <div>How do I change the SZ/SCG controller description, and what impact does it have on service?</div> <div> Changing the controller description requires a restart of the SZ database. This should only be performed during a planned maintenance window. <hr></hr> <h4>Steps for SmartZone Version 3.6 and Later</h4> <ol><li>SSH into the controller.</li><li>Execute the following commands (use Courier New font for CLI commands):</li></ol> <pre><code>enable config controller-description [enter the desired text] </code></pre> <ol start="3"><li>The system will prompt:</li></ol> <pre><code>This command will restart some services. Do you want to continue (or input 'no' to cancel)? [yes/no] yes </code></pre> <ol start="4"><li>Confirm with <code>yes</code>. <img alt="User-added image" height="118" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001wWb&feoid=00N50000002Cf3M&refid=0EM2J000001T7zY" width="766"></img></li></ol> Impact: <ul><li>The controller will restart the database.</li><li>This process typically takes 2–5 minutes and will report Successful operation once complete.</li></ul> </div>

This article explains how to change the controller description in SmartZone (SZ) or SCG and the impact of this change on services.

2026-01-05T07:32:10-0800 2026-01-05T18:00:13-0800 https://support.ruckuswireless.com/articles/000010760 2026-01-02T04:58:42-0800 monthly 0.8 admin,premium knowledge_article_4319 knowledge_article_4319 2020-07-24T16:40:17-0700 000010760 Validated (External) Premium Vriot Installation;Known issues and workarounds Installation, Known Issues and Workarounds, vRIoT <div>Can I use any VMware backup tool to create backups (snapshots) of the VRIoT controller?</div> <div> Use only the native backup/restore functionality within VRIoT for creating and restoring backups. Important: <ul><li>Backups can only be restored on the same version of VRIoT software.</li><li>Do not use VMware snapshots or third-party backup tools.</li></ul> </div>

Is it possible to use VMware backup tools to create snapshots or backups of the VRIoT controller?

2026-01-02T04:58:42-0800 2026-01-05T10:00:10-0800 https://support.ruckuswireless.com/articles/000010166 2026-01-02T07:10:45-0800 monthly 0.8 admin,premium knowledge_article_5256 knowledge_article_5256 2020-03-31T09:29:02-0700 000010166 Validated (External) Premium Ruckus cloud wifi Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Cloud WiFi <div>What does the error "AP's not permitted by law to be used in this country" mean in Ruckus Cloud events?</div> <ul><li>If AP country code does not match venue country code: <ul><li>Delete and recreate the venue with the correct country code. Note: Once a venue is created, its country code cannot be changed. <div>If the venue country code is incorrect, you must delete and recreate the venue with the preferred country code.</div> </li></ul> </li><li>If AP country code matches venue but AP SKU is incorrect: <ul><li>Initiate RMA for the AP.</li></ul> </li></ul>

An error appears in the Events tab of the customer's Ruckus One account indicating APs are not permitted for use in the configured country.

2026-01-02T07:10:45-0800 2026-01-05T10:00:09-0800 https://support.ruckuswireless.com/articles/000014981 2026-01-02T05:09:47-0800 monthly 0.8 admin,premium knowledge_article_5842 knowledge_article_5842 2025-08-19T01:28:38-0700 000014981 Validated (External) Premium Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi <div>Why are only R760, R670, T670, and T670SN AP models mentioned under Wi-Fi 6/7 Band Management?</div> <div> This behavior is by design because of the Switchable RF feature on the specific models <ul><li>AP design (Single Mode vs Dual Mode) is determined by PLM and implemented by the hardware team.</li></ul> </div> <h3> What is Switchable RF?</h3> Switchable RF is an AP capability designed for Tri-radio architectures, allowing the third radio to operate in either the 5 GHz or 6 GHz band. <ul><li>This ensures efficient spectrum use when 6 GHz is not deployed, preventing the third radio from remaining idle.</li><li>Supported models: <ul><li>R670/T670/T670SN: Switch from 2-5-6 (Tri-Band) to 2-5 (Dual-Band)</li><li>R760: Switch from 2-5-6 (Tri-Band) to 2-5-5 (Dual-Band with two 5 GHz radios)</li></ul> </li></ul> Other Tri-Band AP models (e.g., R560, R770) do not support Switchable RF and remain in Single Mode (2-5-6) only.

Why aren't all Tri-Band supported AP models listed under Wi-Fi 6/7 Band Management?

2026-01-02T05:09:47-0800 2026-01-05T10:00:09-0800 https://support.ruckuswireless.com/articles/000015170 2026-01-01T22:33:44-0800 monthly 0.8 admin,premium knowledge_article_6031 knowledge_article_6031 2026-01-01T22:33:44-0800 000015170 Validated (External) Premium Vriot Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, vRIoT The Controller Data Stream of my vriot has stopped working after updating it from 2.3.0.0.102 to 2.4.0.0.41 ? The issue had been isolated as there was a misconifg on broker for internal server which was dropping all traffic. The fix is introduced on 3.0 code though with below limitation/Caveats : Note there are two caveats for CDS plugin in 3.0 and would be fixed in next 3.1 release. Before upgrading the controller from 2.4 to 3.0 kindly edit the filter for device status as any change in the CDS plugin in 3.0 requires a controller reboot. IOTC-9835 - After updating the CDS plugin controller, publishing to the device reporting topic stops. Workaround: After updating the CDS plugin, reboot the controller. IOTC-9800 - After activating the CDS plugin (MQTT internal), device reporting appears disabled in Read-Only mode. Workaround - None. No functional impact. Display issue

After upgrading from 2.x to 2.4.0 the CDS is not working to publish data for internal MQTT broker

2026-01-01T22:33:44-0800 2026-01-02T06:00:07-0800 https://support.ruckuswireless.com/articles/000015169 2026-01-01T20:07:50-0800 monthly 0.8 admin,premium knowledge_article_6030 knowledge_article_6030 2026-01-01T20:07:50-0800 000015169 Validated (External) Premium Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway Why does my ZD-SZ migration tools fails ? Due to security improvement in ZD, the functionality of ZD-SZ migration feature cannot work if ZD version is build 10.5.1 258+ or build 10.2.1.0.233+ hence for 10.5.x code for ZD-SZ migration tool to work ZD should be on code 10.5.1.0.255 or below. So due to the mentioned reason ZD-SZ migration tool will not work on below codes : ZoneDirector 10.5.1 (GA Refresh 6) ZoneDirector 10.5.1 (GA Refresh 7) ZoneDirector 10.5.1 (GA Refresh 8) ZoneDirector 10.5.1 (GA Refresh 9) ZD-SZ migration tool will work on below codes : ZoneDirector 10.5.1 (GA Refresh 5) and lower <img alt="User-added image" height="248" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001usz&feoid=00N50000002Cf3M&refid=0EMRk00000GZp1d" width="500"></img>

Customer has ZD on 10.5.1. build 265 and above where when he tries to use the ZD-SZ migration tool it doesn't work and fails.

2026-01-01T20:07:50-0800 2026-01-02T06:00:07-0800 https://support.ruckuswireless.com/articles/000010388 2026-01-01T08:59:32-0800 monthly 0.8 admin,premium knowledge_article_4162 knowledge_article_4162 2020-04-30T03:16:46-0700 000010388 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SZ100 Why is SZ GUI and SSH access are unavailable? <ul><li>By default, mgmt-acl is disabled with no ACL entries. It can be enabled from Administration >> Access Control List <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uTB&feoid=00N50000002Cf3M&refid=0EMRk00000GZjyj" width="991" height="339"></img></li><li>mgmt-acl cannot be enabled without atleast one entry in the ACL</li><li>mgmt-acl enabled with ACL containing ip address(es) is intended by customer to secure access to SZ GUI and CLI</li><li>Confirm with customer prior to disabling mgmt-acl as that would jeopardize their security measures</li></ul>

Not able to access GUI of SZ and when tried to SSH, got the error as "Disconnected: No supported authentication methods available (server sent: Public key)"

2026-01-01T08:59:32-0800 2026-01-01T22:00:10-0800 https://support.ruckuswireless.com/articles/000010065 2026-01-01T09:08:22-0800 monthly 0.8 admin,premium knowledge_article_4192 knowledge_article_4192 2020-01-13T10:28:41-0800 000010065 Validated (External) Premium Vsz dataplane Configuration;Installation;System network management Configuration, Installation, System Network Management, vSZ Dataplane What are the CLI credentials when connecting to vSZ-D via SSH? Once the vSZ-D is approved and managed by a controller, it inherits the credentials from the Control Plane (CP). So, in order to access the vSZ-D via SSH or console, it is required to use 'admin' username and the same password as used in the Control Plane. (When this password is updated in the CP side, it is automatically updated to the data plane as well)

Credentials used to connect to vSZ-D CLI when it is (un)managed

2026-01-01T09:08:22-0800 2026-01-01T22:00:09-0800 https://support.ruckuswireless.com/articles/000014560 2026-01-01T09:10:54-0800 monthly 0.8 admin,premium knowledge_article_5586 knowledge_article_5586 2024-11-13T07:27:24-0800 000014560 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, SZ144, SZ300, virtual SmartCell Gateway, SZ100 How to troubleshoot QOS issues on SmartZone managed APs? To resolve QOS issues, correct configuration should be applied on both Wireless as well as Wired network.

Quality of Service (QoS) is crucial for ensuring optimal performance and prioritization of network traffic. This needs correct configuration on both Wireless & Wired network such as QOS classification, trust and marking for smooth user experience. Application Policy, QOS mapping and QOS mirroring are some of the configuration available to administrator to configure QOS policy. If it does not work as expected, collecting AP CLI outputs such as "get qos" , "get qos <interface>" , get mqstats <wlan-id> <user-mac>" along with Support log can be used for troubleshooting.

2026-01-01T09:10:54-0800 2026-01-01T22:00:09-0800 https://support.ruckuswireless.com/articles/000010297 2026-01-01T12:54:32-0800 monthly 0.8 admin,premium knowledge_article_4123 knowledge_article_4123 2020-04-08T11:57:24-0700 000010297 Validated (External) Premium T811 cm Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, T811 CM Does the T811-CM Strand Mount AP have a console port for access during provisioning or install? Like all Ruckus Access Points the T811-CM does not have a user available console port. The AP does have an available copper Ethernet port that can be connected to to connect via SSH using the default IP 192.168.100.2, or DHCP IP if connected to a operating network or controller configured static IP if configured and online. The Cable modem has a http page where you can verify operation via the IP 192.168.100.1, The AP uses SNMP to access the integrated cable modem which can be seen from the AP GUI (if enabled by set https enable) Details can be found in Quick Start Guide:: <a href="https://support.ruckuswireless.com/documents/2571-ruckus-t811-cm-quick-start-guide-qsg" style="color: blue;text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/documents/2571-ruckus-t811-cm-quick-start-guide-qsg</a> Accessing the Diagnostic Ethernet Port Some more details can be found in installation Guide: <a href="https://support.ruckuswireless.com/documents/2573-ruckus-t811-cm-installation-guide" style="color: blue;text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/documents/2573-ruckus-t811-cm-installation-guide</a> Logging Into the AP or CM Web Interface pg 24,25 The AP has to be powered from the F connector using standard strand power (nominally 40-90VAC)

T811 console port and local access to AP during warehouse provisioning and install

2026-01-01T12:54:32-0800 2026-01-01T22:00:08-0800 https://support.ruckuswireless.com/articles/000010300 2026-01-01T09:46:32-0800 monthly 0.8 admin,premium knowledge_article_4125 knowledge_article_4125 2020-04-08T23:37:46-0700 000010300 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Firmware;Troubleshooting Firmware, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP How should I remove the private build used to test a fix and then install an AP Patch with the fix for all APs in the zone? <div>Load the official AP patch into the SZ controller - this can be done from any node in the cluster from Administration >> Upgrade tab >> AP Patch: <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ucr&feoid=00N50000002Cf3M&refid=0EM2J000001pJUz"></img> When the actual AP patch is loaded to the controller, we need to restore the firmware management on the APs running the test build before changing the AP firmware on the respective zone.</div> <div>The following AP SSH/CLI command can be used for the same: set rpmkey wsgclient/ignore-fw 0 To verify this setting you an run: get rpmkey wsgclient/ignore-fw</div> <div> Apply the Patch to the AP Zones requiring the fix by selecting the new build from Zone configuration: <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ucr&feoid=00N50000002Cf3M&refid=0EM2J000001pJV4"></img> </div> All connected APs in the Zone should now get upgraded to the new AP firmware.

Customer was testing a private AP build on a few APs in a Zone and subsequently needed to upload an AP Patch with fix from the controller

2026-01-01T09:46:32-0800 2026-01-01T22:00:08-0800 https://support.ruckuswireless.com/articles/000010298 2026-01-01T13:14:57-0800 monthly 0.8 admin,premium knowledge_article_4124 knowledge_article_4124 2020-04-08T11:56:27-0700 000010298 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Installation Installation, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP Can I upgrade Access Points that are in the SZ Staging Zone of a SCG300 or vSZ-H cluster <div> <div> <h3>Is the Staging Zone an Operational Zone?</h3> Quick Answer: No. The Staging Zone is not an operational zone; it is a temporary location where Access Points (APs) are placed until they are approved. Hence, the APs cannot be upgraded from here. <hr></hr> <h3>What Happens in the Staging Zone?</h3> <ul><li>APs in the Staging Zone are quarantined and remain in a disconnected state until: <ul><li>They are manually approved by an administrator, or</li><li>They are moved to a service zone, which automatically approves them.</li></ul> </li><li>APs in the Staging Zone do not consume AP capacity licenses unless they connect and are approved.</li><li>This mechanism is a security feature implemented based on customer requests.</li></ul> <hr></hr> <h3>Using a Default Zone</h3> Some customers use a Default Zone (admin defined custom zone) combined with registration rules to move new APs into this temporary zone. In this setup: <ul><li>APs receive firmware upgrades based on zone settings.</li><li>APs are provisioned with a basic configuration (e.g., WLAN/SSID).</li></ul> However, there’s a limitation: If you plan to use AP provisioning CSV scripts to configure AP names, descriptions, locations, and optionally static IPs, this only works for APs in the Staging Zone. To apply provisioning scripts, you would need to: <ul><li>Delete APs from the Default Zone, and</li><li>Move them back to the Staging Zone before applying the script.</li></ul> Also, registration rules in SmartZone only apply to APs in or arriving at the Staging Zone. <hr></hr> <h3>Best Practice: Pre-Provisioning</h3> The recommended approach is to pre-provision APs using a CSV script, but this requires knowing: <ul><li>Which AP (by MAC address) will be deployed to which site.</li></ul> If contractors are testing APs that are already designated for a site and you do not use static IPs, they can connect from any location (e.g., a warehouse). <ul><li>These APs will appear in the pre-provisioned zone and receive upgrades and configurations.</li><li>Once deployed to the actual site with DHCP, they should reconnect without issues.</li></ul> Complication: If static IPs are required, the provisioning site must replicate the IP configuration for proper operation. <hr></hr> <h3>Default Zone Considerations</h3> Using the Default Zone is possible, but: <ul><li>You must manually move APs to the final zone after deployment, or</li><li>Factory reset APs after the zone is provisioned with AP information.</li></ul> <hr></hr> <h3>Ruckus Network Director (RND) Advantage</h3> RND offers additional flexibility: <ul><li>It can move new APs to a specific zone and specific WLAN group (not possible with CSV pre-provisioning or SmartZone registration rules).</li><li>RND can identify APs by serial number or registration rules (e.g., public IP address of the property).</li><li>Requires DHCP Option 43 to redirect APs to the RND instance, where they are then moved to: <ul><li>The SmartZone cluster,</li><li>The designated zone, and</li><li>The AP group configured in RND.</li></ul> </li></ul> Note: This only works for APs that have not yet been provisioned into a service zone. </div> </div>

Requirement for accessing and testing Access Points prior to deployment while AP's are in staging Zone

2026-01-01T13:14:57-0800 2026-01-01T22:00:07-0800 https://support.ruckuswireless.com/articles/000010383 2026-01-01T12:59:45-0800 monthly 0.8 admin,premium knowledge_article_4155 knowledge_article_4155 2020-04-27T04:36:44-0700 000010383 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security Configuration, Security, SmartCell Gateway Why are there admin login from 127.0.0.1 printed in event logs ? <div> These event log messages are expected when connecting to SmartZone via the console. Console login refers to accessing SmartZone through the serial port for physical appliances or through the virtual machine console for Virtual SmartZone deployments. Please ensure that the admin and enable passwords are updated periodically in accordance with your organization's security policy. </div>

This article explains why user may notice event logs with user "admin" logged in from 127.0.0.1 printed in Smart Zone event logs.

2026-01-01T12:59:45-0800 2026-01-01T22:00:07-0800 https://support.ruckuswireless.com/articles/000010751 2026-01-01T13:46:16-0800 monthly 0.8 admin,premium knowledge_article_4313 knowledge_article_4313 2020-07-23T01:41:24-0700 000010751 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector How can I check the health of a ZoneDirector? From ZD CLI you can get an overview of operation using command: show sysinfo ruckus# show sysinfo System Overview: Name= ZD5K IP Address= xxx.xxx.xxx.xxx MAC Address= yy.yy.yy.yy.yy.yy Uptime= 2d 14h 38m Model= ZD5100-00 Licensed APs= 1000 Serial Number= 201726000009 Version= 10.0.1.0 build 72 Devices Overview: Number of APs= 864 Number of Client Devices= 2094 Number of Rogue Devices= 0 Usage Summary: Usage of 1 hr: Max. Concurrent Users= 2134 Bytes Transmitted= 197.97G Number of Rogue Devices= 0 Usage of 24 hr: Max. Concurrent Users= 2213 Bytes Transmitted= 5409.95G Number of Rogue Devices= 0 Additional data from GUI: Monitor >> System <img height="478" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001urN&feoid=00N50000002Cf3M&refid=0EM2J000001TOJy" width="1070"></img> Real Time ZD Health Monitor::Real Time Monitor <img height="475" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001urN&feoid=00N50000002Cf3M&refid=0EM2J000001TNRw" width="857"></img>

This article explains the steps to verify the operational health of a ZoneDirector

2026-01-01T13:46:16-0800 2026-01-01T22:00:06-0800 https://support.ruckuswireless.com/articles/000010301 2026-01-01T13:28:28-0800 monthly 0.8 admin,premium knowledge_article_6029 knowledge_article_6029 2020-04-09T06:13:29-0700 000010301 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway How can I check the health of an SZ node? Verify node is in service: vSCG-1# show service No. Application Name Health Status Log Level # of Logs ----- ------------------------ ---------------- ------------ ---------- 1 AP Diagnostic Informati 0 on 2 CNR Online WARN 3 3 CaptivePortal Online WARN 23 4 Cassandra Online 77 5 Configurer Online WARN 28 6 Core Online WARN 81 7 DBlade 0 8 Diagnostics 1 9 EAut Online WARN 17 10 ElasticSearch Online 26 11 LogMgr Online WARN 12 12 MdProxy Online WARN 1 13 MemProxy Online WARN 15 14 Memcached Online 1 15 Mosquitto Online 6 16 MsgDist Online WARN 15 17 NC Online WARN 15 18 NginX Online 7 19 Observer Online WARN 1 20 RadiusProxy Online WARN 17 21 SNMP Online WARN 15 22 ScgUniversalExporter Online WARN 24 23 SessMgr Online WARN 15 24 SubscriberManagement Online WARN 4 25 SubscriberPortal Online WARN 2 26 System 88 27 Web Online WARN 27 vSCG-1# show cluster-state Current Node Status : In service Cluster Status : In service Cluster Operation : None System Mode : None Cluster Node Information ---------------------------------------------------------------- No. Name Role ----- ------------------------ ----------- 1 vSCG-1-C LEADER vSCG-1# show control-plane-state No. Name CP MAC Address Model Serial Number Description Management IP Cluster IP Control IP Cluster Role Uptime ----- -------------- ------------------- --------- ----------------------------- ------------------- ----------------- ----------------- ----------------- -------------- -------------- 1 vSCG-1-C yy:yy:yy:yy:yy:yy vSZ-H xxxxxxxxxxxxxxxxxxxxxxxxxx vSCG-1 xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx Leader 506d 9h 48m The following SZ CLI commands and GUI information from Network >> Cluster tab by highlighting the node and selecting Traffic&Health in data area: <div> SCG-1# show mem MemTotal: 66108856 kB MemFree: 4784084 kB Buffers: 809352 kB Cached: 9511976 kB SwapCached: 0 kB total used free shared buffers cached Mem: 66108856 61324772 4784084 36904 809352 9511976 -/+ buffers/cache: 51003444 15105412 Swap: 0 0 0</div> <div> </div> <div>Mem: 66108856k total, 61088040k used, 5020816k free, 809916k buffers <img height="202" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uo9&feoid=00N50000002Cf3M&refid=0EM2J000001pJW9" width="1142"></img></div> <div>Note system needs at least 2G of free RAM but this can also include cached RAM that can be accessed by other processes <div>CPU usage:</div> <div> </div> <div>vSCG-1# show cpu processor: 0 model name: Virtual CPU a7769a6388d5 processor: 1 model name: Virtual CPU a7769a6388d5 processor: 2 model name: Virtual CPU a7769a6388d5 processor: 3 model name: Virtual CPU a7769a6388d5 processor: 4 model name: Virtual CPU a7769a6388d5 processor: 5 model name: Virtual CPU a7769a6388d5 processor: 6 model name: Virtual CPU a7769a6388d5 processor: 7 model name: Virtual CPU a7769a6388d5 processor: 8 model name: Virtual CPU a7769a6388d5 processor: 9 model name: Virtual CPU a7769a6388d5 processor: 10 model name: Virtual CPU a7769a6388d5 processor: 11 model name: Virtual CPU a7769a6388d5 processor: 12 model name: Virtual CPU a7769a6388d5 processor: 13 model name: Virtual CPU a7769a6388d5 processor: 14 model name: Virtual CPU a7769a6388d5 processor: 15 model name: Virtual CPU a7769a6388d5 Cpu(s): 18.4%us, 14.8%sy, 0.0%ni, 57.0%id, 0.1%wa, 0.0%hi, 1.1%si, 8.6%st</div> <div> </div> <div>System CPU load is <div> load average: 3.61, 2.78, 2.45</div> <div>Cpu(s): 16.2%us, 12.1%sy, 0.0%ni, 71.1%id, 0.1%wa, 0.0%hi, 0.4%si, 0.2%st <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uo9&feoid=00N50000002Cf3M&refid=0EM2J000001pJWq"></img><img height="251" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uo9&feoid=00N50000002Cf3M&refid=0EM2J000001pJWr" width="1035"></img> Note - CPU usage is shown with momentary MAX but average should be observed. Load levels should be < the number of CPU's - in this case 16 Disk Space: vSCG-1# show disk Filesystem Size Used Avail Use% Mounted on /dev/vda3 3.9G 2.3G 1.4G 62% / /dev/mapper/vg00-lv00 234G 31G 191G 14% /data tmpfs 1.0G 1.6M 1023M 1% /tmp /dev/vda1 2.0G 3.3M 1.9G 1% /boot_mbr <img height="182" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uo9&feoid=00N50000002Cf3M&refid=0EM2J000001pJXA" width="1047"></img></div> </div> </div>

Commands and GUI information to verify the health of an SZ node

2026-01-01T13:28:28-0800 2026-01-01T22:00:06-0800 https://support.ruckuswireless.com/articles/000011131 2026-01-01T04:33:00-0800 monthly 0.8 admin,premium knowledge_article_6028 knowledge_article_6028 2020-12-01T10:30:36-0800 000011131 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Support license activation Troubleshooting, Support License Activation, SmartCell Gateway Why are multiple clusters not syncing to Liman Licence Server Operation was restored by re-enabling Cloud License lookup from affected node SZ CLI vSZ1(config)# license cloud enable Are you sure you want to change the license server configuration? All current license data will be wipe out!! (or input 'no' to cancel)? [yes/no] yes Successful operation vSZ1(config)# license sync-now License Summary ------------------------------------------------------------------------------------------------------------------- No. License Type #of Units Total #of Units Consumed #of Units Available ----- ---------------------------------- ------------------------ ------------------------ ------------------------ 1 AP Capacity License 23004 22394 (97.348%) 610 (2.652%) 2 AP Direct Tunnel License 4 0 (0%) 4 (100%) 3 SCG 3GPP Tunneling License 0 0 (100%) 0 (0%) 4 vSZ-D Capacity License 0 0 (100%) 0 (0%) (list of licenses minus the expired support licenses) Cause of outage was not determined as no logging when original incident were saved.

Multiple clusters stopped syncing to Flexera License Server

2026-01-01T04:33:00-0800 2026-01-01T14:00:13-0800 https://support.ruckuswireless.com/articles/000014312 2026-01-01T05:29:30-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6027 knowledge_article_6027 2024-05-16T10:12:49-0700 000014312 Validated (External) Public Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Firmware;Security Firmware, Security, SZ144, SZ300, virtual SmartCell Gateway, SZ100 What is the impact of the Terrapin Attack Vulnerability (CVE-2023-48795) on RUCKUS SZ? The vulnerability is addressed in SmartZone version 7.0, upgrading your controller to 7.0 will fix it. Upgrade guide for 7.0 can be found <a href="https://support.ruckuswireless.com/documents/4686-ruckus-smartzone-st-ga-upgrade-guide-7-0-0/download" target="_blank">here</a>.

CVE-2023-48795 Terrapin Attack affects OpenSSH v9.5 and earlier versions. Vulnerability allows attacker with local network access to manipulate information during the SSH connection’s initial handshake, potentially downgrading security. The CVSS 3.x rating classifies it as a ‘Medium’ difficulty exploit. By upgrading SZ controller to 7.0 version can fix this vulnerability

2026-01-01T05:29:30-0800 2026-01-01T14:00:13-0800 https://support.ruckuswireless.com/articles/000014396 2026-01-01T05:30:05-0800 monthly 0.8 admin,premium knowledge_article_6026 knowledge_article_6026 2024-08-16T02:05:10-0700 000014396 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, SmartCell Gateway How to change NAT IP address on vSZ-D ? To change the public NAT IP address on a vSZ, please follow the below steps: <ol><li> Login to the vSZ-D over SSH </li><li> Run "enable" command </li><li> Enter "config" mode </li><li> (config)# ip data-nat x.x.x.x 23233 </li><li> #end </li></ol> x.x.x.x is the public IP address for vSZ-D

This article explains the steps to change the NAT IP address on a vSZ-D/SZ144-D (Virtual SmartZone Data Plane).

2026-01-01T05:30:05-0800 2026-01-01T14:00:13-0800 https://support.ruckuswireless.com/articles/000011562 2026-01-01T05:31:56-0800 monthly 0.8 admin,premium knowledge_article_6025 knowledge_article_6025 2021-04-14T01:05:42-0700 000011562 Validated (External) Premium Sz144;Sz144 d;Sz300;Vsz dataplane;Sz100d;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Installation;Known issues and workarounds;Registration Installation, Known Issues and Workarounds, Registration, SZ144, SZ144 D, SZ300, vSZ Dataplane, SZ100D, SZ100 Why does a new data plane not show up on the SmartZone GUI for approval?

This article explains that when a new Data Plane (DP) attempts to connect to a SmartZone (SZ), it does not appear in the SmartZone GUI for approval. The log files show that the SZ web server returns a Bad Request (HTTP 400) during the DP’s discovery stage. This issue is likely caused by an invalid certificate being used during the discovery process.

2026-01-01T05:31:56-0800 2026-01-01T14:00:12-0800 https://support.ruckuswireless.com/articles/000014399 2026-01-01T05:33:28-0800 monthly 0.8 admin,premium knowledge_article_6024 knowledge_article_6024 2024-07-31T02:40:13-0700 000014399 Validated (External) Premium Ruckus cloud wifi;Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Security;Troubleshooting;Known issues and workarounds Configuration, Security, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi, Cloudpath Why captive portal / WISPR does not work properly when using the RuckusOne + Ruckus Cloudpath combination? 1. When using RUCKUSOne works with an on-prem instance RUCKUS Cloudpath the customer must have a public IP with the following ports NATd so that ROne can communicate with the Cloudpath server and vice versa 2. The ports in question can be found by navigating to Administration > Firewall Requirements Reference: <a href="https://support.ruckuswireless.com/documents/4854-cp_es-6-0-ga-upgrade-guide" target="_blank">Firewall Settings</a> 3. Here is an example for the outputs expected from the sandbox demo Cloudpath Server: Traffic: Outbound from this System <table height="1749" width="810"><tbody><tr><td colspan="1" rowspan="1"> Purpose </td><td colspan="1" rowspan="1"> System Address </td><td colspan="1" rowspan="1"> External Address </td><td colspan="1" rowspan="1"> Protocol </td><td colspan="1" rowspan="1"> Reason </td></tr><tr><td colspan="1" rowspan="1"> System </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> xpc.cloudpath.net:443 </td><td colspan="1" rowspan="1"> TCP / HTTP(s) </td><td colspan="1" rowspan="1"> System interacting with cloud services (licensing, wizards, built-in email, etc). </td></tr><tr><td colspan="1" rowspan="1"> System </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> support.cloudpath.net:8022 </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> (Optional) Support tunnel for remote assistance. Only necessary when support tunnel is enabled. </td></tr><tr><td colspan="1" rowspan="1"> System </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> dist.cloudpath.net:443 </td><td colspan="1" rowspan="1"> TCP / HTTP(s) </td><td colspan="1" rowspan="1"> Retrieve system updates. </td></tr><tr><td colspan="1" rowspan="1"> External CA </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> TCP / HTTP(s) </td><td colspan="1" rowspan="1"> System quering certificates from external CA. </td></tr><tr><td colspan="1" rowspan="1"> OCSP Stapling </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> ocsp.godaddy.com:80 </td><td colspan="1" rowspan="1"> TCP / HTTP(s) </td><td colspan="1" rowspan="1"> Send OCSP request to web server certificate provider for OCSP stapling. </td></tr><tr><td colspan="1" rowspan="1"> OCSP Stapling </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> 10.177.222.39:80 </td><td colspan="1" rowspan="1"> TCP / HTTP(s) </td><td colspan="1" rowspan="1"> Send OCSP request to RADIUS server certificate provider for OCSP stapling. </td></tr><tr><td colspan="1" rowspan="1"> Authentication Server </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> 10.177.222.38:1812 </td><td colspan="1" rowspan="1"> UDP </td><td colspan="1" rowspan="1"> Authenticate to RADIUS server 'Ruckus Wireless Pvt Ltd RADIUS'. </td></tr><tr><td colspan="1" rowspan="1"> Authentication Server </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> WIN-RSPI0LAN0O3.ruckusdemos.net:636 </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> Authenticate to LDAP server ' RUCKUSDEMOS.NET LDAP' at 'ldaps://WIN-RSPI0LAN0O3.ruckusdemos.net'. </td></tr><tr><td colspan="1" rowspan="1"> Authentication Server </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> WIN-RSPI0LAN0O3.ruckusdemos.net:636 </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> Authenticate to Active Directory server 'RUCKUSDEMOS.NET AD' at 'ldaps://WIN-RSPI0LAN0O3.ruckusdemos.net'. </td></tr><tr><td colspan="1" rowspan="1"> Authentication Server </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> 10.177.89.12:389 </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> Authenticate to Active Directory server 'Ruckus Wireless Pvt Ltd AD' at 'ldap://10.177.89.12'. </td></tr><tr><td colspan="1" rowspan="1"> Authentication Server </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> 10.177.89.70:389 </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> Authenticate to Active Directory server 'Mohsin Ruckus Wireless Pvt Ltd AD' at 'ldap://10.177.89.70'. </td></tr><tr><td colspan="1" rowspan="1"> System </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> LinkedIn authentication enabled but firewall specifics not available. </td></tr><tr><td colspan="1" rowspan="1"> Authentication Server </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> WIN-RSPI0LAN0O3.ruckusdemos.net:636 </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> TACACS+ Authentication to LDAP Backend TACACS_Auth at 'ldaps://WIN-RSPI0LAN0O3.ruckusdemos.net'. </td></tr><tr><td colspan="1" rowspan="1"> Replication </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> 10.177.222.39:3306 </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> Replication Database. </td></tr><tr><td colspan="1" rowspan="1"> Replication </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> 10.177.222.39:5701 </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> Replication Application. </td></tr><tr><td colspan="1" rowspan="1"> Replication </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> 10.177.222.39:8022 </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> Replication SSH. </td></tr><tr><td colspan="1" rowspan="1"> RADIUS COA </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> *:3799 </td><td colspan="1" rowspan="1"> UDP / RADIUS COA </td><td colspan="1" rowspan="1"> Send COA to wired/wireless infrastructure (default RADIUS client). </td></tr><tr><td colspan="1" rowspan="1"> RADIUS COA </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> 10.10.10.10:3799 </td><td colspan="1" rowspan="1"> UDP / RADIUS COA </td><td colspan="1" rowspan="1"> Send COA to wired/wireless infrastructure. </td></tr><tr><td colspan="1" rowspan="1"> RADIUS COA </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> 10.177.89.154:3799 </td><td colspan="1" rowspan="1"> UDP / RADIUS COA </td><td colspan="1" rowspan="1"> Send COA to wired/wireless infrastructure. </td></tr><tr><td colspan="1" rowspan="1"> DPSK API </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> TCP / HTTP(s) </td><td colspan="1" rowspan="1"> Send API calls to Ruckus Onboard controller. </td></tr></tbody></table> Traffic: Inbound to this System <table height="675" width="812"><tbody><tr><td colspan="1" rowspan="1"> Purpose </td><td colspan="1" rowspan="1"> System Address </td><td colspan="1" rowspan="1"> External Address </td><td colspan="1" rowspan="1"> Protocol </td><td colspan="1" rowspan="1"> Reason </td></tr><tr><td colspan="1" rowspan="1"> Web Interface </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net:443 </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> TCP / HTTP(s) </td><td colspan="1" rowspan="1"> Administrator, API, and end-user access to the web interface. </td></tr><tr><td colspan="1" rowspan="1"> PEAP Realm </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net:445 </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> Microsoft-DS Active Directory, Windows shares. </td></tr><tr><td colspan="1" rowspan="1"> PEAP Realm </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net:445 </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> UDP </td><td colspan="1" rowspan="1"> Microsoft-DS SMB file sharing. </td></tr><tr><td colspan="1" rowspan="1"> Onboard CA </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net:80 </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> TCP / HTTP(s) </td><td colspan="1" rowspan="1"> OCSP requests coming from external systems. </td></tr><tr><td colspan="1" rowspan="1"> SSH </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net:8022 </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> SSH access to the system. </td></tr><tr><td colspan="1" rowspan="1"> Onboard RADIUS </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net:1812 </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> UDP </td><td colspan="1" rowspan="1"> Receive RADIUS authentication requests from external systems. </td></tr><tr><td colspan="1" rowspan="1"> Onboard RADIUS </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net:1813 </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> UDP </td><td colspan="1" rowspan="1"> Receive RADIUS accounting requests from external systems. </td></tr><tr><td colspan="1" rowspan="1"> TACACS </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net:49 </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> Receive TACACS AAA requests from external systems. </td></tr><tr><td colspan="1" rowspan="1"> Replication </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net:3306 </td><td colspan="1" rowspan="1"> 10.177.222.39 </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> Replication Database. </td></tr><tr><td colspan="1" rowspan="1"> Replication </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net:5701 </td><td colspan="1" rowspan="1"> 10.177.222.39 </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> Replication Application. </td></tr><tr><td colspan="1" rowspan="1"> Replication </td><td colspan="1" rowspan="1"> cp-40.ruckusdemos.net:8022 </td><td colspan="1" rowspan="1"> 10.177.222.39 </td><td colspan="1" rowspan="1"> TCP </td><td colspan="1" rowspan="1"> Replication SSH. </td></tr></tbody></table> 4. Upon NATing the the CP On Prem instance to a public IP address the issues resolved and clients could complete the authentication workflow

This article explains that when a customer uses RuckusOne together with the On-Premises flavor of Ruckus Cloudpath, the WISPr/Captive Portal authentication flow fails with the error message “An error has occurred” and redirects to the URL: ruckus.cloud/g/ui/error.html. This issue occurs even when the authentication method is non-proxy.

2026-01-01T05:33:28-0800 2026-01-01T14:00:12-0800 https://support.ruckuswireless.com/articles/000011561 2026-01-01T05:35:33-0800 monthly 0.8 admin,premium knowledge_article_6023 knowledge_article_6023 2021-04-13T03:20:04-0700 000011561 Validated (External) Premium H320;H510;H500;Ruckus H320;Ruckus H510;Ruckus H500 Performance;Configuration;Known issues and workarounds Performance, Configuration, Known Issues and Workarounds, H320, H510, H500 Why do Windows clients self assign an IP address (APIPA) before obtaining a DHCP address when connected to an access point by wire? Follow any of the workaround steps

A phenomenon in which a Windows UE that is connected to an access point by wire self assigns an IP address before obtaining a DHCP address. This can have unwanted implications. Therefore, we are presenting ways to work around this issue.

2026-01-01T05:35:33-0800 2026-01-01T14:00:11-0800 https://support.ruckuswireless.com/articles/000010407 2026-01-01T05:45:48-0800 monthly 0.8 admin,premium knowledge_article_4158 knowledge_article_4158 2020-04-29T01:56:03-0700 000010407 Validated (External) Premium Ruckus icx switches;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Ruckus ICX Switches, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway What is the IP address of <a href="https://ntp.ruckuswireless.com" target="_blank">ntp.ruckuswireless.com</a>? CommScope / Ruckus, is using load balancing behind ntp.ruckuswireless.com The following three IP address are used by ntp.ruckuswireless.com IP: 216.239.35.0, 216.239.35.4, 216.239.35.8 Make sure to whitelist them in the firewall.

This article shares the IP addresses used by ntp.ruckuswireless.com

2026-01-01T05:45:48-0800 2026-01-01T14:00:11-0800 https://support.ruckuswireless.com/articles/000010135 2026-01-01T06:34:06-0800 monthly 0.8 admin,premium knowledge_article_4085 knowledge_article_4085 2020-02-28T00:12:28-0800 000010135 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway How can I download all the event logs for SmartZone Controller? Event logs can be found under the Diagnostic::Application Logs > System folder <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uPx&feoid=00N50000002Cf3M&refid=0EM2J000000wPmX"></img> Click on number (link) to open contents <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uPx&feoid=00N50000002Cf3M&refid=0EM2J000000wPmc"></img> Any particular log can be downloaded directly by clicking on the link. You will see multiple event logs with time stamp which are archived logs created when main log has reached maximum size. These are compressed into .gz files The easiest way to download all event logs including archived .gz is to highlight the system log tab and then use the "Download Log" button on the top left (avoid Download all logs as this will download all logs in the controller including archived and generate a huge file) <img alt="User-added image" height="247" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uPx&feoid=00N50000002Cf3M&refid=0EM2J000000wPpq" width="500"></img> The logs are compressed into a single .tgz file that can be downloaded. Use a decompress tool like 7zip to open and extract the files: <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uPx&feoid=00N50000002Cf3M&refid=0EM2J000000wPnp"></img> Archived logs are already compressed and will need to be extracted, it is easiest to highlight and use extract from file manager view: <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uPx&feoid=00N50000002Cf3M&refid=0EM2J000000wPnu"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uPx&feoid=00N50000002Cf3M&refid=0EM2J000000wPo9"></img> NOTE: To clean up your files you can leave the .gz logs highlighted and then delete them leaving only the actual logs. They can be re-extracted if needed from original .tgz file <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uPx&feoid=00N50000002Cf3M&refid=0EM2J000000wPoT"></img> One of the most useful tools to parse multiple files for a given string of data is notepad++. Highlight the desired files and right click and select "open with notepad++" to see all files in one window. <img alt="User-added image" height="342" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uPx&feoid=00N50000002Cf3M&refid=0EM2J000000wPp2" width="1055"></img> Use <cntrl> <f> to open Find option, put in text (ie AP MAC, Client MAC, error @@xxxx) and use "Find in all open documents" to search all files. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uPx&feoid=00N50000002Cf3M&refid=0EM2J000000wPpW"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001uPx&feoid=00N50000002Cf3M&refid=0EM2J000000wPpb"></img> You can copy and paste the results of the "Find" into a new window in Notepad ++ or into another tool like Excel for further analysis.

Download event logs for external parsing and analysis

2026-01-01T06:34:06-0800 2026-01-01T14:00:10-0800 https://support.ruckuswireless.com/articles/000010330 2026-01-01T06:38:45-0800 monthly 0.8 admin,premium knowledge_article_4132 knowledge_article_4132 2020-04-13T04:55:43-0700 000010330 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Why do we see SSH termination logs on the AP? From the AP syslogs, we found that there is a scanning device "Spiceworks" in the network trying to SSH to the AP’s and disabled the same.

This article provides details on the logs generated by an AP when an external device tries to form an SSH connection with it.

2026-01-01T06:38:45-0800 2026-01-01T14:00:10-0800 https://support.ruckuswireless.com/articles/000010398 2026-01-01T06:29:28-0800 monthly 0.8 admin,premium knowledge_article_4164 knowledge_article_4164 2020-04-30T02:10:54-0700 000010398 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway <div>How do I resolve SmartZone Public API login error 211 – Insufficient administrative privileges?</div> <div> <ul><li> For Local Accounts: Ensure the SmartZone local user account is assigned to a user group with sufficient privileges for API access. </li><li> For External Accounts (e.g., RADIUS): Create a corresponding local account with the same username and assign it to a SmartZone user group that has sufficient privileges for API access. </li></ul> For details on user group privileges (Full Access, Read Access, Modify Access), refer to the SmartZone Administrator Guide. </div>

This article explains how to resolve SmartZone Public API login error 211, which occurs due to insufficient administrative privileges.

2026-01-01T06:29:28-0800 2026-01-01T14:00:10-0800 https://support.ruckuswireless.com/articles/000014211 2025-12-31T08:50:53-0800 monthly 0.8 admin,premium knowledge_article_5897 knowledge_article_5897 2023-05-31T13:59:25-0700 000014211 Validated (External) Premium Ruckus cloud switch;Sz144;Ruckus cloud wifi;Sz300;Ruckus icx switches;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, Ruckus Cloud Switch, SZ144, Ruckus Cloud WiFi, SZ300, Ruckus ICX Switches, SCG200, virtual SmartCell Gateway, SZ100 What is the procedure to migrate devices from v/SmartZone to RUCKUS One (Formerly RUCKUS Cloud)? <h1 id="vSmartZonetoRUCKUSCloudmigration-Prerequisite">Prerequisite</h1> Before you start your v/SmartZone managed APs/SWs to RUCKUS One (Formerly RUCKUS Cloud) migration journey, we want to make sure all the important and required bits and pieces are in place for a successful and smooth migration experience. <ol><li>Check if your existing AP/Switch models are supported on RUCKUS One (Formerly RUCKUS Cloud). Visit <a href="https://www.ruckusnetworks.com/ruckus-one-supported-network-devices" target="_blank">https://www.ruckusnetworks.com/ruckus-one-supported-network-devices</a> to know what all devices are supported on RUCKUS One (Formerly RUCKUS Cloud).</li><li>Make sure your vSmartZone is running on a compatible and minimum recommended version to support migration.</li><li>If you have firewall between AP/Switches to Internet, make sure all required ports/URLs are open for device to RUCKUS One (Formerly RUCKUS Cloud) communication. Click <a href="https://docs.commscope.com/en-US/bundle/ruckuscloud-userguide/page/GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08.html" target="_blank">here</a> to know more.</li><li>Make sure you have enough AP and Switch licenses before you start migration (Note: Trial account comes with 10 AP and 10 Switch licenses by default, and 20 device license for RUCKUS Analytics).</li></ol> <h1 id="vSmartZonetoRUCKUSCloudmigration-FAQ">FAQ</h1> How to confirm if my current Access Points and Switch models are support on RUCKUS One (Formerly RUCKUS Cloud)? Ans: Visit https://www.ruckusnetworks.com/ruckus-one-supported-network-devices <a href="https://www.ruckusnetworks.com/ruckus-one-supported-network-devices" target="_blank">https://www.ruckusnetworks.com/ruckus-one-supported-network-devices</a> to know what all devices are supported on RUCKUS One (Formerly RUCKUS Cloud). What features are supported by the RUCKUS One (Formerly RUCKUS Cloud)? Ans: Refer the RUCKUS One (Formerly RUCKUS Cloud) data sheet from <a href="https://www.commscope.com/globalassets/digizuite/329376-ds-ruckus-cloud.pdf" target="_blank">here</a>, or refer the product page from <a href="https://www.ruckusnetworks.com/products/network-control-and-management/cloud-managed" target="_blank">here</a>. Can I request a trial before migrating all my RUCKUS devices to RUCKUS One (Formerly RUCKUS Cloud), and before buying the subscription? Ans: Yes, you can request a FREE trial* account by visiting <a href="https://www.ruckusnetworks.com/cloud-trial/" target="_blank">https://www.ruckusnetworks.com/cloud-trial/</a> Does migration impacts the user connections of specific devices which are being migrated? Ans: Yes, once migration initiated for a specific AP or Switch, it will reboot couple of times to flash the new firmware, and update the configuration. It is also worth mentioning that Access points migrating to RUCKUS One (Formerly RUCKUS Cloud) will have no network configuration (accept IP configuration), so it is important to create Venues, Wi-Fi Network (WLANs), configure authentication servers, etc., in advance. What is the minimum internet bandwidth and latency required for successful operations of RUCKUC Access Points and RUCKUS ICX switches? Ans: Below are the minimum/maximum and recommended internet bandwidth/latency requirements, for the stable and smooth management of RUCKUS devices on RUCKUS One (Formerly RUCKUS Cloud). For RUCKUS ICX switches operations including switch onboarding, provisioning, config update and firmware upgrade. <table><thead><tr><td colspan="1" rowspan="1"> Device/Service </td><td colspan="1" rowspan="1"> Recommend Bandwidth (per device) </td><td colspan="1" rowspan="1"> Recommended Latency </td></tr></thead><tbody><tr><td colspan="1" rowspan="1"> ICX switch </td><td colspan="1" rowspan="1"> > 1.5 Mbps </td><td colspan="1" rowspan="1"> Latency <= 400ms </td></tr></tbody></table> Recommend bandwidth: 1 Mbps* 1.5 = 1.5 Mbps Recommend latency: 800ms * 0.5 = 400 ms For Access Point operations including application sign pack update, configuration updates and management traffic. <table><colgroup><col></col><col></col><col></col></colgroup><thead><tr><td colspan="1" rowspan="1"> Device/Service </td><td colspan="1" rowspan="1"> Recommend Bandwidth (per device) </td><td colspan="1" rowspan="1"> Recommended Latency </td></tr></thead><tbody><tr><td colspan="1" rowspan="1"> Access Point </td><td colspan="1" rowspan="1"> 300kbps </td><td colspan="1" rowspan="1"> < 170ms </td></tr></tbody></table> Recommend Bandwidth (per device): 200Kbps * 1.5 (tolerance) = 300kbps Recommended Latency: 335ms * 0.5 = ~170ms *Note: While these are standard latency and bandwidth recommendations which should work on most customer networks, some factors on some customer setups may require additional bandwidth or lower latency than the recommendation given above. Migration procedure As of writing this document, there are two ways to migrate RUCKUS devices from v/SmartZone to RUCKUS One (Formerly RUCKUS Cloud). Important notes: <ul><li>Before you start migration, we strongly suggest you to test the migration with single(or few) AP/Switch first, if it is successful, then proceed to rest of the APs/SWs. Repeat the same procedure for APs/SWs located in different locations.</li><li>We also suggest to migrate limited number of APs first (maybe an small location) and test the production performance of your WLANs, client load, roaming, and coverage, etc. While none of the experience should change between v/SmartZone to Cloud, still we recommend to test before you completely migrate the APs to Cloud.</li><li>For the ICX Switches, make sure that switch configuration is copied and stored locally, in case of any any failure.</li><li>There might be instances where the same SSID is broadcasted by both existing APs and those you are moving/moved to RUCKUS One. This can affect client connectivity because the APs managed by the source controller and those moved to the R1 are not part of the same Wi-Fi setup. Consequently, roaming and other features may not function properly. To prevent this issue, it is recommended to migrate all APs for a specific location together.</li></ul> <h2 id="vSmartZonetoRUCKUSCloudmigration-ManualMigration">1. Manual Migration</h2> <h3 id="vSmartZonetoRUCKUSCloudmigration-Accesspoints">Access points</h3> Follow the below steps: <ol><li>Login to your RUCKUS One (Formerly RUCKUS Cloud) account and add the Access Point to the desired Venue (Note, a Venue in Cloud is equal to an AP Zone in v/SZ). You can refer the online document referance from <a href="https://docs.commscope.com/en-US/bundle/ruckuscloud-userguide/page/GUID-BE28B88E-6BFF-4E27-97CB-1AD8B228B822.html" target="_blank">here</a>. <ul><li>Note: This task can be done in bulk by exporting the Access Point Device list from vSZ and uploading to RUCKUS One (Formerly RUCKUS Cloud) using Bulk provisioning option. Refer the online document from <a href="https://docs.commscope.com/en-US/bundle/ruckuscloud-userguide/page/GUID-3857B023-ED7C-4FFC-B878-DC390CDC4939.html" target="_blank">here</a>.</li></ul> </li><li>Disable the Auto AP Join Approval on v/SmartZone (for APs).</li><li>Factory reset the AP and delete it from the controller immediately.</li><li>Upon next boot-up, AP should look for RUCKUS One (Formerly RUCKUS Cloud) by it's own and connect to Cloud.</li></ol> We also have a self-help article in our support forum. You can access it from <a href="https://community.ruckuswireless.com/t5/RUCKUS-Self-Help/Converting-Access-Point-from-SmartZone-to-Ruckus-Cloud/td-p/45277" target="_blank">here</a>. <h3 id="vSmartZonetoRUCKUSCloudmigration-ICXSwitches">ICX Switches</h3> <ol><li>Login to your RUCKUS One (Formerly RUCKUS Cloud) account and add the Switch to the desired Venue (Note, a Venue in Cloud is equal to a Switch Zone in v/SZ). You can refer the online document referance from <a href="https://docs.commscope.com/bundle/ruckuscloud-userguide/page/GUID-2A0A6F8F-9381-4B42-A911-8976CF38FC44.html" target="_blank">here</a>. <ul><li>Note: This task can be done in bulk by exporting the Switch Device list from vSZ and uploading to RUCKUS One (Formerly RUCKUS Cloud) using Bulk provisioning option. Refer the online document from <a href="https://docs.commscope.com/bundle/ruckuscloud-userguide/page/GUID-B9463E3D-76A2-41B2-A85C-7D99D9C74372.html" target="_blank">here</a>.</li></ul> </li><li>Delete the Switch entry from v/SmartZone</li><li>Login to ICX CLI and enable switch registrar discovery. Refer the online document <a href="https://docs.commscope.com/bundle/sz-611-adminguide-sz300vsz/page/GUID-CBBE4514-62E5-4252-824D-47CF874DBAFE.html" target="_blank">Setting Up Switch Registrar Discovery</a> for step by step procedure.</li><li>Once this is done, ICX should automatically gets discovered on Cloud and connect to it. <ul><li>Important: Any ICX switch connecting to RUCKUS One (Formerly RUCKUS Cloud) will be upgraded to recommended ICX firmware by the RUCKUS One (Formerly RUCKUS Cloud).</li></ul> </li></ol> <h2 id="vSmartZonetoRUCKUSCloudmigration-MigrationusingClusterSwitchOveroptioninv/SmartZone">2. Migration using Cluster Switch Over option in v/SmartZone</h2> <h3 id="vSmartZonetoRUCKUSCloudmigration-AccessPoints">Access Points</h3> Refer Step-1 and Step-2 from the manual migration, and then proceed to below steps. <ol><li>Select the desired AP(s) under Monitor > Access Points > Click on "More" and select "Cluster Switch Over" option.</li><li>Type on of the below addresses (as per your account region) and save the settings (This option also allows you to delete the AP after configuring the different cluster IP). Refer the referance document for AP Cluster Switch Over from <a href="https://docs.commscope.com/bundle/sz-610-adminguide-sz100vsz/page/GUID-083279C0-ED57-4024-9C3C-C561B63466DC.html" target="_blank">here</a>. <ol><li>America & Canada customers <a href="http://device.ruckus.cloud" target="_blank">device.ruckus.cloud</a></li><li>EMEA customers <a href="http://device.eu.ruckus.cloud" target="_blank">device.eu.ruckus.cloud</a> </li><li>ASIA customers <a href="http://device.ruckuswireless.com/" target="_blank">device.asia.ruckus.cloud</a></li></ol> </li><li>AP(s) should join the RUCKUS Cloud automatically.</li></ol> We also have a self-help article in our support forum. You can access it from <a href="https://community.ruckuswireless.com/t5/RUCKUS-Self-Help/How-to-migrate-Smart-Zone-APs-to-Ruckus-Cloud-using-the-Switch/td-p/44941" target="_blank">here</a>. <h3 id="vSmartZonetoRUCKUSCloudmigration-ICXSwitches.1">ICX Switches</h3> Refer Step-1 and Step-2 from the manual migration, and then proceed to below steps. <ol><li>Select the desired ICX Switch(s) under Monitor > Switches > Click on "More" and select "Cluster Switch Over" option.</li><li>Type the IP address of your respective RUCKUS Cloud region (ping the below FQDNs to find the respective zone's IP address) and save the settings. Refer the document <a href="https://docs.commscope.com/bundle/sz-611-switchmanagementguide-sz300vszh/page/GUID-5162C78C-2766-4998-A054-FCF2DD3973D9.html" target="_blank">Cluster Switch Over</a>. <ol><li>America & Canada customers <a href="http://device.ruckus.cloud" target="_blank">device.ruckus.cloud</a></li><li>EMEA customers <a href="http://device.eu.ruckus.cloud " target="_blank">device.eu.ruckus.cloud </a> </li><li>ASIA customers <a href="http://device.ruckuswireless.com/" target="_blank">device.asia.ruckus.cloud</a></li></ol> </li><li>Switch(s) should join the RUCKUS Cloud automatically. <ul><li>Important: Any ICX switch connecting to RUCKUS Cloud will be upgraded to recommended ICX firmware by the RUCKUS Cloud.</li></ul> </li></ol> <h1 id="vSmartZonetoRUCKUSCloudmigration-Proceduretofallback">Procedure to fall back</h1> <h2 id="vSmartZonetoRUCKUSCloudmigration-AccessPoints.1">Access Points</h2> Fallback procedure is manual and this is why we strongly suggest to migrate just one device first and test it out, if everything works well, there will be no need to fallback, but due to any reasons if you wish to fall back to v/SmartZone, below is the procedure. <ol><li>Go to Network Devices > Access Points > Select the AP you wish to delete and click on "Delete" option.</li><li>While deleting, it will give you two options. <ol><li>Factory reset to Cloud ready (Choose this if you wish to connect this AP to another RUCKUS Cloud account).</li><li>Factory reset to standalone firmware. <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tvJ&feoid=00N50000002Cf3M&refid=0EMHt000005Qzcp"></img></li></ol> </li><li>Choose the option 2 "Factory reset to standalone firmware", type Delete in the confirmation box and hit the "Delete" button.</li><li>AP will be deleted from your Cloud account, will also update the firmware to standalone and now you can use this AP on your v/SmartZone or any other RUCKUS Controller.</li><li>Assuming that you may have your old v/SmartZone configuration, just onboarding the AP back to v/SmartZone will start showing it with same set of configuration and old information.</li></ol> <h2 id="vSmartZonetoRUCKUSCloudmigration-ICXSwitches.2">ICX Switches</h2> <ul><li>Login to ICX CLI >> Enter the “manager disconnect” and “no manager registrar” commands in Privileged EXEC mode to disconnect from RUCKUS Cloud.</li><li>To get back to vSZ management, you can run the following commands “sz active-list x.x.x.x (vSZ-IP) or manager active-list x.x.x.x (vSZ-IP)”.</li></ul> <h1 id="vSmartZonetoRUCKUSCloudmigration-HowtouseRUCKUSCloudpostmigration">How to use RUCKUS Cloud post migration</h1> Refer the RUCKUS Cloud admin guide from <a href="https://docs.commscope.com/en-US/bundle/ruckuscloud-userguide/page/GUID-50E887AC-50F1-424B-B4A0-BA67A4519FE7-homepage.html" target="_blank">here</a>. You can also use RUCKUS Cloud mobile app to manage your RUCKUS Cloud account. Download for <a href="https://play.google.com/store/apps/details?id=com.ruckuswireless.ruckuscloud.alto&hl=en&gl=US" target="_blank">Android</a> and <a href="https://apps.apple.com/in/app/ruckus-cloud-by-commscope/id1445349828" target="_blank">iOS</a>. <h1 id="vSmartZonetoRUCKUSCloudmigration-Supportoptions">Support options</h1> There are several ways to contact RUCKUS Support, you may use one of the below options to contact support. <ul><li>[Proffered] RUCKUS Cloud web UI has a Bot, it provides option to chat with support directly from your RUCKUS Cloud account. <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tvJ&feoid=00N50000002Cf3M&refid=0EMHt000005Qzd9"></img></li><li>Visit <a href="https://support.ruckuswireless.com/cases/new" target="_blank">https://support.ruckuswireless.com</a>, it has "Chat now" option. <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tvJ&feoid=00N50000002Cf3M&refid=0EMHt000005QzdE"></img></li><li>Visit <a href="https://support.ruckuswireless.com/cases/new" target="_blank">https://support.ruckuswireless.com/cases/new</a> and login with your RUCKUS support account and you can submit a support ticket.</li><li>If you still have issues contacting support, visit <a href="https://support.ruckuswireless.com/contact-us" target="_blank">https://support.ruckuswireless.com/contact-us</a></li><li>Firewall rules can be found in the following user guide: <a href="https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08.html" target="_blank">https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-7B79A19A-2419-4AE8-A4C7-329FF6C34A08.html </a></li></ul>

This article explains v/SmartZone controller managed Access points and Switches to RUCKUS One (Formerly RUCKUS Cloud) migration procedure.

2025-12-31T08:50:53-0800 2026-01-01T06:00:13-0800 https://support.ruckuswireless.com/articles/000014238 2025-12-31T08:54:55-0800 monthly 0.8 admin,premium knowledge_article_6022 knowledge_article_6022 2023-08-14T12:56:48-0700 000014238 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How to configure internal DHCP service or enable DHCP service for WLAN clients on SZ/vSZ There are situations where customers may not have a DHCP server available on the LAN network and would like to use the DHCP services available on the vSZ for WLAN clients. In such situations, vSZ-H/E provides us with options to configure or enable DHCP services on vSZ for WLAN clients. Follow the below steps to enable DHCP services on vSZ for WLAN clients: Login into GUI>>Services >>DHCP & NAT>> DHCP setting (AP) <img alt="User-added image" height="293" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tLp&feoid=00N50000002Cf3M&refid=0EMRk00000GXRrT" width="811"></img> 1. Select the respective zone for which we wish to enable DHCP services. Under DHCP setting >>Select the zone >> DHCP service for Wi-Fi client >>> Enable DHCP service <img alt="User-added image" height="242" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tLp&feoid=00N50000002Cf3M&refid=0EMRk00000GXPPr" width="829"></img> <div style="margin-left: 8px;">2. Configure DHCP setting as per requirement: DHCP setting >>Base Setting >> Select one of the options as per situation. Note: In most of the scenarios, customers would be required to roam across APs. Therefore, option 2 (Enable on Multiple APs) would be appropriate. (As shown in the example)</div> <img alt="User-added image" height="470" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tLp&feoid=00N50000002Cf3M&refid=0EMRk00000GXVF7" width="657"></img> 3. Select a DHCP pool from the available list of pools. If the DHCP pool is not configured, pools can be configured by using the add (+) option DHCP setting >>DHCP pools <img alt="User-added image" height="456" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tLp&feoid=00N50000002Cf3M&refid=0EMRk00000GXcWj" width="664"></img> DHCP pools can be configured by using add (+) option as shown in example below: <img alt="User-added image" height="449" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tLp&feoid=00N50000002Cf3M&refid=0EMRk00000GXdKj" width="663"></img> Note: The configured VLAN should be tagged or allowed on the AP uplink switch interface. 4. Next step is to select APs, which we would like to use as DHCP server and NAT gateways: DHCP Settings >>Select APs >> Auto Select AP/ Manually Select AP. <img alt="User-added image" height="459" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tLp&feoid=00N50000002Cf3M&refid=0EMRk00000GXgyX" width="660"></img> For Manually Selecting APs >> Choose from the available list of APs as shown in example below >>Select APs as Primary and Backup server and NAT Gateway. The selected APs will act as NAT gateway for the WLAN clients Ten APs can be selected for the NAT gateway. Now Configure Port Settings >> Note: Port settings is only required when base settings is selected as: <ol style="list-style-type: lower-roman;"><li style="margin-left: 32px;">Enable on each AP</li><li style="margin-left: 32px;">Enable on Hierarchical APs</li></ol> OR It is recommended to completely disable the DHCP AP Port Selection. We can simply disable the port selection by turning off the knob button. <img alt="User-added image" height="461" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tLp&feoid=00N50000002Cf3M&refid=0EMRk00000GXXDi" width="667"></img> The above notes refer to the AP models, which have more than two wired ports and are being used as DHCP servers and NAT gateways. If we enable DWPD for different models of gateway APs that are present in the zone and if APs have more than 2 LAN ports, we can configure the rest of the LAN ports by using one of the forms( they can be either used for connecting printers, scanners, or any wired devices): <ul><li>For specific models of APs, AP model-specific configuration</li><li>Individual AP >> Override zone configuration.</li></ul> 5. Finally Review the DCHP configuration: Review>>DHCP profile and Select AP>> OK <img alt="User-added image" height="467" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tLp&feoid=00N50000002Cf3M&refid=0EMRk00000GXbR0" width="673"></img>

This article explains the steps to configure DHCP services for WLAN clients on SZ/vSZ.

2025-12-31T08:54:55-0800 2026-01-01T06:00:12-0800 https://support.ruckuswireless.com/articles/000014237 2025-12-31T08:56:09-0800 monthly 0.8 admin,premium knowledge_article_6021 knowledge_article_6021 2023-08-09T15:11:45-0700 000014237 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How to configure automatic zone firmware upgrade on vSZ Follow below steps to schedule zone firmware upgrade on SZ/vSZ. Login into vSZ GUI>>Administration>>Upgrade >>Schedule Zone Firmware Upgrade <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tQf&feoid=00N50000002Cf3M&refid=0EMHt000005bN8u"></img> Schedule Task>> “+Create” <img alt="User-added image" height="229" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tQf&feoid=00N50000002Cf3M&refid=0EMRk00000GXmZJ" width="920"></img> Select Specific Zone for the upgrade <img alt="User-added image" height="389" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tQf&feoid=00N50000002Cf3M&refid=0EMRk00000GXmhN" width="655"></img> <img alt="User-added image" height="392" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tQf&feoid=00N50000002Cf3M&refid=0EMRk00000GXmsf" width="678"></img> Schedule >> Provide Name/Change Firmware to(Select the version from the available list)/Schedule time( Mandatory fields) Note : Time will execute at 0/30 min every hour (exp : 1:00, 1:30) <img alt="User-added image" height="418" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tQf&feoid=00N50000002Cf3M&refid=0EMHt000005bN9O" width="686"></img> Review all the information before upgrade >> Ok <img alt="User-added image" height="330" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tQf&feoid=00N50000002Cf3M&refid=0EMHt000005bN9T" width="695"></img>

This article explains how to schedule an AP Zone firmware upgrade on SZ/vSZ.

2025-12-31T08:56:09-0800 2026-01-01T06:00:12-0800 https://support.ruckuswireless.com/articles/000011648 2025-12-31T08:57:10-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6020 knowledge_article_6020 2021-05-03T03:42:09-0700 000011648 Validated (External) Public Cloudpath;Unleashed;Smartcell gateway;Cloudpath Enrollment System (ES);BPG_Cloudpath;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;SmartCell Gateway 200 (SCG200) Configuration;Security;Known issues and workarounds Configuration, Security, Known Issues and Workarounds, Cloudpath, Unleashed, SmartCell Gateway Why does my client software complain about a TLS server certificate not being valid even though I know the correct certificate was uploaded to the server? In order to possibly solve the problem a few key points need to be explained: In order for a client to verify a server certificate the following criteria need to be met: 1. The server certificate needs to have been signed by a Certificate Authority. 2. The client needs to have the relevant Root Certificate Authority it its certificate trust store. 3. The HTTPS interface needs to be addressed by a name that is stored in the Common Name field (but more often in the Subject Alternative Name field). 4. Wildcard certificates can use any subdomain name as long as it matches the domain name. 5. The client needs to be able to close the certificate chain if there are intermediate Certificate Authorities involved between the Root Certificate Authority and the signed server certificate. A client can close the chain either if the intermediate certificates are stored in the client's certificate trust store or if the intermediate certificates are stored on the server that is being accessed. 1st scenario: If your HTTPS interface uses a self-signed certificate the communication is going to be encrypted but a client is never going to be able to verify the certificate because there was no Certificate Authority involved in the signing process. That is because the client is unable to check the certificate against its certificate trust store. Typical self-signed certificate: <img alt="User-added image" height="613" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tYj&feoid=00N50000002Cf3M&refid=0EM2J0000024fKY" width="500"></img> Solution: In this case the problem can only be solved by replacing the self-signed certificate with a certificate signed by a Certificate Authority. 2nd scenario: The HTTPS resource is being addressed by a name that the certificate does not have in either its Common Name field or Subject Alternative Name field. The address that is being used is reachable and resolvable by DNS. Solution: The address being used needs to be included in the Subject Alternative Name field. The Subject Alternative Name field can include domain names as well as IP addresses. You can either have the certificate be signed again with an extended list of SANs or use a different address to access the HTTPS resource. 3rd scenario: The HTTPS interface uses a privately signed certificate that only clients within a certain domain know the Certificate Authority of. External clients that are trying to access the HTTPS interface are unable to verify the server certificate. Solution: Add all relevant CA certificates to the external client's certificate trust store. Please refer to your software's manual on how to add new certificates to the trust store (browser software, API clients, operating system trust stores, etc.). 4th scenario: The client is unable to close a certificate chain because certain intermediate certificates are missing (The aforementioned openssl check reveals if there is a certificate chain present and how many levels deep it is). This problem will often manifest in a verified certification path that only shows the server certificate but no other CAs. Solution: Missing intermediate certificates can either be added to the client's trust store or it can be appended to the server certificate. We are going to discuss appending the intermediate certificate to the server's certificate. That will leave the client with only having to know the root certificate in order to close the chain and verify the server certificate. If you have access to the server certificate's file and the file is in the PEM format, you can simply append the intermediate certificate (or multiple) underneath and save the file. The order in which the certificate blocks need to be arranged is: server certificate > intermediate certificate 1 > intermediate certificate 2 > root certificate (if applicable). Where can you get the needed certificates? Public Certificate Authorities mostly offer their certificates as a download on the Internet. Here is an example from Sectigo <a href="https://sectigo.com/knowledge-base/detail/Sectigo-Intermediate-Certificates/kA01N000000rfBO" target="_blank">https://sectigo.com/knowledge-base/detail/Sectigo-Intermediate-Certificates/kA01N000000rfBO</a> Example of how the 2 certificates connect in the file (excerpt): uByqyt+3MyrtzkKWyVz6lztRB+DibCFFMD1VvS7NdpYSCt1LL0V9ga9zqaDdhoOi McQmLWsVvMtbnmQqozLi1Zew1BwwSo1zONDs/i3JW6SPBLL3m3sJjKQ0nvj+Dt0G v9Btmy99PaLJuhBwyXR2jJjO/VBmg7K7Xz8D6Lor+Nzdll9Scrql3RHlC8X2mXbN VrmdGKfg/+36LhDqdoGsL/rij+zOVT9cxIpUCgu3ekBOSg/KSqGJzbypD3/7awGm FBZmzGXhByx+RtVlDA2Rt0RM48B+ItgisMZOHAXSfI1Pi//Xod+i2Dad8vgKI/mT KqOSfaVwdsWlZ5zM/nrIGcrlVdjLOg3w8hoQ2JvnjaE/48NrlaOQ8iL6wNM8cOY9 SB8CkrbusJSroO/HIEtqF2pH4HKFMcvEYt1eiCTSSlK09lBMDawFivuGz6akM5Pc -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIGEzCCA/ugAwIBAgIQfVtRJrR2uhHbdBYLvFMNpzANBgkqhkiG9w0BAQwFADCB iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNV BAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTgx MTAyMDAwMDAwWhcNMzAxMjMxMjM1OTU5WjCBjzELMAkGA1UEBhMCR0IxGzAZBgNV BAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UE Important: the 2 certificates need to connect exactly as shown above. No additional or fewer lines breaks can be used otherwise it does not work. Some server applications have a separate option to add intermediate certificates to the server. Ruckus's Cloudpath GUI is an example of that: <img alt="User-added image" height="285" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tYj&feoid=00N50000002Cf3M&refid=0EM2J0000024fKO" width="500"></img> As shown in the screenshot, you can upload a complete certificate chain, individual PEM certificates or additional intermediate certificates ("Additional Chain"). When navigating this menu please also make sure to always include the Private Key when uploading a new certificate.

An explanation and set of instructions on how to fix an invalid TLS server certificate.

2025-12-31T08:57:10-0800 2026-01-01T06:00:12-0800 https://support.ruckuswireless.com/articles/000011565 2025-12-31T08:59:25-0800 monthly 0.8 admin,premium knowledge_article_6019 knowledge_article_6019 2021-04-19T05:15:54-0700 000011565 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to resolve AP stuck in firmware upgrade loop Make sure the AP has Internet connectivity, and configure NTP server from AP GUI: Configuration >> Internet option From CLI: set ntp server <name/IP> set ntp update

Unable to upgrade AP due to the error "Image public key verification failed"

2025-12-31T08:59:25-0800 2026-01-01T06:00:11-0800 https://support.ruckuswireless.com/articles/000010206 2025-12-31T13:09:12-0800 monthly 0.8 admin,premium knowledge_article_4099 knowledge_article_4099 2020-03-17T08:48:14-0700 000010206 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Installation;Troubleshooting Installation, Troubleshooting, SmartCell Gateway, SmartCell AP Why are Access Points loosing contact to SZ and constantly changing Control Planes? Increasing MTU size on switches at each end of tunnel to 1536 solved the problem.

SZ controlled Access Points connected across a network that included Q in Q tunnel unable to maintain SSH control tunnel

2025-12-31T13:09:12-0800 2026-01-01T06:00:11-0800 https://support.ruckuswireless.com/articles/000010119 2025-12-31T13:19:24-0800 monthly 0.8 admin,premium knowledge_article_4087 knowledge_article_4087 2020-02-13T07:21:58-0800 000010119 Validated (External) Premium Sz300;Scg200;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Performance;System network management;Troubleshooting Performance, System Network Management, Troubleshooting, SZ300, SCG200, SZ100 How To Check SZ300 or SCG200 Physical State when alarm is present? Run the Following command to check the physical state of controller and his components per node of the cluster: ruckus# diagnostic ruckus(diagnostic)# show ipmi sensors The following output should show you what is the actual state or what could be wrong: FAN FAN_1 speed 9400.00 FAN FAN_1 status OK FAN FAN_2 speed 8400.00 FAN FAN_2 status OK FAN FAN_3 speed 9300.00 FAN FAN_3 status OK FAN FAN_4 speed 8600.00 FAN FAN_4 status OK FAN FAN_5 speed 9500.00 FAN FAN_5 status OK FAN FAN_6 speed 8400.00 FAN FAN_6 status OK THRM INLET_1-TMP temp 18.00 THRM INLET_1-TMP status OK THRM INLET_2-TMP temp 20.00 THRM INLET_2-TMP status OK THRM OUTLET-TMP temp 29.00 THRM OUTLET-TMP status OK THRM CPU_1-TMP temp 52.00 THRM CPU_1-TMP status OK THRM CPU_2-TMP temp 53.00 THRM CPU_2-TMP status OK THRM PCH-TMP temp 37.00 THRM PCH-TMP status OK THRM CPU_1-DIMMA-TMP temp 21.00 THRM CPU_1-DIMMA-TMP status OK THRM CPU_1-DIMMB-TMP temp 21.00 THRM CPU_1-DIMMB-TMP status OK THRM CPU_1-DIMMC-TMP temp 23.00 THRM CPU_1-DIMMC-TMP status OK THRM CPU_1-DIMMD-TMP temp 23.00 THRM CPU_1-DIMMD-TMP status OK THRM CPU_2-DIMME-TMP temp 20.00 THRM CPU_2-DIMME-TMP status OK THRM CPU_2-DIMMF-TMP temp 21.00 THRM CPU_2-DIMMF-TMP status OK THRM CPU_2-DIMMG-TMP temp 20.00 THRM CPU_2-DIMMG-TMP status OK THRM CPU_2-DIMMH-TMP temp 21.00 THRM CPU_2-DIMMH-TMP status OK THRM RISER1_1-TMP temp 23.00 THRM RISER1_1-TMP status OK THRM RISER1_2-TMP temp 22.00 THRM RISER1_2-TMP status OK THRM RISER2_1-TMP temp 21.00 THRM RISER2_1-TMP status OK THRM RISER2_2-TMP temp 20.00 THRM RISER2_2-TMP status OK THRM PSU_1-TMP temp 16.00 THRM PSU_1-TMP status OK THRM PSU_2-TMP temp 18.00 THRM PSU_2-TMP status OK LED Reset status Off LED Status status RED SOLID LED Critical status Off LED Major status Off LED Minor status Off LED Power status Off PWR PS2 status AC_Lost PWR PS1 status Present DISK Drv 0 stat Ready DISK Drv 1 stat Ready DISK Drv 2 stat Ready DISK Drv 3 stat Unused DISK Drv 0 pres Present DISK Drv 1 pres Present DISK Drv 2 pres Present DISK Drv 3 pres Absent ETH eth1 carrier 0 ETH eth1 speed 0 ETH eth1 duplex unknown ETH eth5 carrier 0 ETH eth5 speed 0 ETH eth5 duplex unknown ETH eth2 carrier 1 ETH eth2 speed 1000 ETH eth2 duplex full ETH eth3 carrier 1 ETH eth3 speed 1000 ETH eth3 duplex full ETH eth4 carrier 1 ETH eth4 speed 1000 ETH eth4 duplex full ETH eth0 carrier 0 ETH eth0 speed 0 ETH eth0 duplex unknown

How To Check SZ300 or SCG200 Physical State when alarm is present

2025-12-31T13:19:24-0800 2026-01-01T06:00:10-0800 https://support.ruckuswireless.com/articles/000010185 2025-12-31T13:24:50-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4092 knowledge_article_4092 2020-03-10T09:07:25-0700 000010185 Validated (External) Public Virtual smartcell gateway Troubleshooting Troubleshooting, virtual SmartCell Gateway <div>How can I migrate vSZ from ESXi 6.5 to ESXi 6.7 using vMotion?</div> <div>Migration of vSZ using vMotion is not supported. To upgrade ESXi or move vSZ to a new host, use supported backup and restore procedures or deploy a new vSZ instance and migrate configurations accordingly.</div>

Explains why migrating vSZ from ESXi 6.5 to ESXi 6.7 using VMware vMotion is not supported and the impact on connected APs.

2025-12-31T13:24:50-0800 2026-01-01T06:00:10-0800 https://support.ruckuswireless.com/articles/000010098 2025-12-31T13:14:02-0800 monthly 0.8 admin,premium knowledge_article_4058 knowledge_article_4058 2020-01-27T19:40:32-0800 000010098 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;System network management;Troubleshooting;Known issues and workarounds Performance, Configuration, System Network Management, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor Why are we unable to see the power mode on the H510\R700 AP from the CLI? R700\H510 basically just needs 802.11af power. For the APs which need 802.3af power, there are no various “power modes”. APs are either powered, or not powered, regardless of its power source. Only following APs support power management functions (e.g. get power-mode): R710, R610, T610, R720, R730, R750, T750, M510 since they need more power than 802.3af. For the above models there are 802.11af, 802.11at, and 802.11at+ power modes available if it is powered via PoE. AP needs to negotiate with the switch to get enough power. For the above AP models “get power-mode” can help users to confirm the mode it is operating on, and “set power-mode” can be used to force the AP to be in a certain mode if the switch does not support LLDP power negotiation protocol. NOTE: For ZD managed APs, changing the power mode per AP on AP CLI in fact does not always work. Meaning, whenever ZD pushes down configuration, it will reset the configuration. Therefore it is better to be configured via ZD CLI commands or via GUI if available.

Understand the power mode and how to resolve if the AP is not able to fetch its power mode details.

2025-12-31T13:14:02-0800 2026-01-01T06:00:10-0800 https://support.ruckuswireless.com/articles/000010138 2025-12-31T05:52:45-0800 monthly 0.8 admin,premium knowledge_article_4200 knowledge_article_4200 2020-05-17T14:38:49-0700 000010138 Validated (External) Premium Ruckus cloud wifi;Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, Ruckus Cloud WiFi, ZoneDirector, SmartCell Gateway <div>How are AP licenses utilized in Zone Director, SmartZone, and Ruckus Cloud or Ruckus One (R1)?</div> <div> <h4>ZoneDirector</h4> <ul><li>AP licenses are consumed only by online APs.</li><li>Offline APs do not utilize a license.</li><li>Even if the total number of APs (Online + Offline) equals the installed license count, you can still add a new AP as long as the number of online APs does not exceed the available licenses. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tor&feoid=00N50000002Cf3M&refid=0EMRk00000GYcT3" width="742" height="420"></img></li></ul> <div> <h4>SZ / R1</h4> <ul><li>AP licenses are consumed regardless of AP status (Online, Offline, or Never Contacted).</li><li>To add a new AP, you must remove or delete offline APs.</li></ul> SmartZone: <ul><li>License consumption details can be viewed under: Administration ? System Info ? AP License Consumed vs Total Available</li></ul> </div> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tor&feoid=00N50000002Cf3M&refid=0EMRk00000GYbyP" width="1051" height="500"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tor&feoid=00N50000002Cf3M&refid=0EMRk00000GYc4r" width="721" height="306"></img> <div> Ruckus One: <ul><li>License information is displayed under Administration >> Subscriptions.</li></ul> </div> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tor&feoid=00N50000002Cf3M&refid=0EMRk00000GYaKo" width="808" height="241"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tor&feoid=00N50000002Cf3M&refid=0EMRk00000GYcCv" width="636" height="263"></img> </div>

This article explains how AP licenses are consumed across different Ruckus platforms: Zone Director (ZD), SmartZone (SZ), and Ruckus One (R1).

2025-12-31T05:52:45-0800 2025-12-31T14:00:12-0800 https://support.ruckuswireless.com/articles/000014740 2025-12-31T04:56:04-0800 monthly 0.8 admin,premium knowledge_article_5728 knowledge_article_5728 2025-03-19T02:04:05-0700 000014740 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 <div>Why does the license page not get updated?</div> <div> <ul><li>Ensure a valid DNS server is configured on the controller.</li><li>If no local DNS is available, use public DNS such as: <ul><li>Google DNS: <code>8.8.8.8</code> or <code>8.8.4.4</code></li></ul> </li><li>Verify with the firewall team that: <ul><li>DNS queries from the controller are allowed to reach DNS servers.</li><li>TCP port 443 to <code>ruckuswireless.flexnetoperations.com</code> is open.</li></ul> </li></ul> </div>

Explains one of the reasons why the controller cannot download the latest licenses from the license server.

2025-12-31T04:56:04-0800 2025-12-31T14:00:12-0800 https://support.ruckuswireless.com/articles/000014570 2025-12-31T06:00:03-0800 monthly 0.8 admin,premium knowledge_article_5591 knowledge_article_5591 2024-11-15T11:28:44-0800 000014570 Validated (External) Premium Sz144;Ruckus cloud wifi;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration Configuration, SZ144, Ruckus Cloud WiFi, SZ300, virtual SmartCell Gateway, SZ100 <div> <ul><li>What is the impact of changing NAS Request Timeout value in RUCKUS Products?</li><li>Will AP or RUCKUS Controller reboot when changing NAS Request Timeout value?</li><li>Will wireless get impacted when performing the change?</li></ul> </div> <div> <div>Purpose of Modifying NAS Request Timeout or RADIUS Timeout: This setting determines how long the AP waits for a response from the RADIUS server before retrying or failing authentication. Increasing the timeout can help in environments where RADIUS servers have higher latency or are geographically distant, reducing authentication failures. Conversely, lowering the timeout may improve responsiveness in low-latency networks.</div> Changing NAS Request Timeout does not reboot Controllers or APs. However, AP radios reset briefly, impacting wireless clients for a few seconds. Apply changes during off-hours or maintenance periods to reduce disruption.</div>

The NAS Request Timeout is configured under the WLAN RADIUS Options. The default value is 3 seconds, and the maximum value can be 20 seconds. Modifying this value does not cause Access Points (APs) or Controllers to reboot. However, wireless clients may experience a brief disruption because the AP radios (2.4 GHz and 5 GHz) reset for a few seconds when the new configuration is applied.

2025-12-31T06:00:03-0800 2025-12-31T14:00:11-0800 https://support.ruckuswireless.com/articles/000014530 2025-12-31T06:23:02-0800 monthly 0.8 admin,premium knowledge_article_5916 knowledge_article_5916 2024-11-14T09:17:33-0800 000014530 Validated (External) Premium Ruckus cloud wifi;Unleashed;Zonedirector;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi, Unleashed, ZoneDirector, SmartCell Gateway How to troubleshoot High Airtime Utilization / High Channel Utilization RF issue on Ruckus WLAN solutions? <h1>Introduction</h1> In enterprise environments with dense WLAN deployments, maintaining optimal RF performance is crucial. Various RF issues can degrade network performance, leading to poor user experiences and reduced productivity. This article outlines the RF performance issue High Airtime Utilization (ATU) and provides potential solutions to mitigate it. An example of a customer network impacted by high ATU on 5Ghz. <img alt="User-added image" height="348" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CWlUj" width="500"></img> Figure 1: The SZ UI of customer network that is experiencing ATU High ATU can sometimes affect the entire network or certain areas of a deployment based on the type of the issue. In most cases, the issue can be seen as affecting only a certain area of the deployment or certain clients in a larger sample. This KB article main focuses detecting and mitigating High Airtime / Channel utilization. <h2 style="margin-bottom: 11px;">High Channel Utilization (HCU) | High Airtime Utilization (ATU)</h2> <h4 style="margin-bottom: 11px;"> Description of the issue:</h4> <div style="margin-bottom: 11px;">High channel utilization occurs when a channel is heavily used, leading to congestion, which reduced performance and throughput. The cause could be from the access points deployed on the same solution (Same controller / same venue), a neighbors enterprise WLAN solution (Ruckus or Non Ruckus), interference from non WIFI / wifi sources using the same channel / band.</div> <h5 style="margin-bottom: 11px;">Potential symptoms include:</h5> <ul><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Slow downloads / uploads</li><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">High number of authentication failures and EAP failures</li><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Choppy audio / video application performance</li></ul> <div style="margin-bottom: 11px;">Potential Solutions:</div> <div style="margin-bottom: 11px;">Reducing the packets in the air using </div> <ul><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">a per user / per AP / per ssid bandwidth contracts / speed limits: This will reduce the packets in the air at a time and hence reduces the utilization </li><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">enable proxy arp</li><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">enable multicast filtering and client isolation</li><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">disabling and reducing the number of SSID's</li></ul> <div style="margin-bottom: 11px;">Load Balancing: Distribute clients across multiple access points (APs) to balance the load</div> <ul><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Ruckus Access Point Management solutions have both band steering and radio load balancing features these can leveraged to move clients between radios of the same AP or between radios of multiple AP's with overlapping coverage. </li></ul> <div style="margin-bottom: 11px;">Channel Optimisation: Use non-overlapping channels and avoid using adjacent channels that can cause interference</div> <ul><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">In A Ruckus Access Point Management solutions we can help leverage Channel Fly, Auto Cell sizing or Cloud RRM to minimize channel / tx power related utilization issues </li></ul> <div style="margin-bottom: 11px;"> <div style="margin-bottom: 11px;"> <div style="margin-bottom: 11px;">Auto Cell Sizing: Adjusts the AP TX power based on the AP neighbor report function</div> <div style="margin-bottom: 11px;">When Wi-Fi is deployed in a high-density environment, despite the use of auto-channel selection, multiple APs operating on the same channel face a significant overlap of coverage regions. This could happen more so in a 2.4 GHz band where there is limited number of available channels and band path loss is lower than 5 GHz band. In such circumstances, the performance could be affected by AP to AP co-channel interference. To overcome this circumstance, the Auto Cell Sizing feature uses AP to AP communication to share information on the degree of interference seen by each other. Based on this information, the APs dynamically adjust their radio Tx power and Rx parameters (or cell size) to mitigate interference. Enabling the Auto Cell Sizing option, disables the TX Power Adjustment configuration.</div> <div style="margin-bottom: 11px;">ChannelFly: ChannelFly uses Background Scan to collect information on the presence of neighboring APs and to assess how busy the channel is. The algorithm focuses on placing neighboring APs on different channels and avoiding busy channels. A Background Scan interval of 20 seconds is recommended for most deployments. In deployments where a larger interval is necessary, ChannelFly will still work but will take longer to settle upon a channel plan and may be less responsive to interference.</div> ChannelFly uses 802.11h channel change announcements to minimize the impact of channel changes on the wireless client. Despite 802.11h, channel changes still run the risk of disrupting wireless clients, and ChannelFly takes into the account the impact on associated client <div style="margin-bottom: 11px;">Ruckus Cloud RRM via <a href="https://docs.commscope.com/bundle/ruckusai-userguide/page/GUID-0483BCF1-3219-481F-A89B-CCCB4567A9A9.html" target="_blank">AI RRM</a></div> </div> <ul></ul> <div style="margin-bottom: 11px;">AI-Driven Radio Resource Management (RRM) is a centralized algorithm that runs in the RUCKUS AI cloud and guarantees zero interfering links for the access points (APs) managed by SmartZone controllers, whenever theoretically achievable, thus minimizing co-channel interference to the lowest level possible. This is accomplished by continuously gathering RF data from all the access points, holistically analyzing the RF environment and usage patterns, and jointly making optimal choices for channel re-use, channel bandwidth, and AP transmit power selection to maximize the network throughput. This new technology relies on sophisticated techniques of machine learning, artificial intelligence, graph algorithms, and cloud scale computation to jointly optimize channel, channel width, and AP transmit power. This method goes beyond adjusting the channel width because it optimizes across all combinations of channel, channel width, and AP transmit power to search for the optimal values across the network.</div> <h4 style="margin-bottom: 11px;">Steps to control ATU on a Ruckus Smart Zone Controller:</h4> </div> <ul style="margin-left: 40px;"><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Packet control: <ul><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Implementing a per user speed limit / bandwidth contract on Smart Zone</li></ul> </li></ul> <div style="margin-bottom: 11px;">Network > Wireless LAN > select the affected Wireless LAN > Configure > Firewall Option > Rate Limiting <img alt="User-added image" height="307" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CU5sz" width="500"></img> Figure 2: The Firewall Profile and mapping a per user bandwidth contract <ul style="margin-left: 80px;"><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Enabling proxy ARP <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Enabling proxy ARP reduces the number of ARP requests hitting the wireless from the ethernet side and vice versa </li></ul> </li></ul> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CVnIT"></img> Figure 3: Enabling the Proxy ARP option to reduce the ARP request hitting the WIFI interface from the uplink <ul style="margin-left: 80px;"><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Enabling Client isolation and enabling the multicast filtering</li></ul> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CVnIU"></img> Figure 4: Enabling the Multicast Filter on the WLAN to reduce broadcast and Multicast packets from Wireless</div> Load Balancing: Distribute clients across multiple access points (APs) to balance the load. <div style="margin-bottom: 11px;"> Enabling load balancing can improve WLAN performance by helping to spread the wireless client load between nearby access points, so that one AP does not get overloaded while another sits idle. Load balancing can be controlled from within the controller web interface to balance the number of clients per radio on adjacent APs. Adjacent APs are determined by the controller at startup by measuring the RSSI during channel scans. After startup, the controller uses subsequent scans to update the list of adjacent APs periodically and when a new AP sends its first scan report. When an AP leaves, the controller immediately updates the list of adjacent APs and refreshes the client limits at each affected AP. <div class="p" id="GUID-2A966DDB-409A-4F83-95B1-E8401323858A__GUID-21C6C454-AD0C-405F-B1AF-92EC8D5EB93A">Once the controller is aware of which APs are adjacent to each other, it begins managing the client load by sending the configured client limits to the APs. These limits are soft values that can be exceeded in several scenarios, including: <ul class="ul" id="GUID-2A966DDB-409A-4F83-95B1-E8401323858A__UL_TRX_PWV_FZ"><li class="li" id="GUID-2A966DDB-409A-4F83-95B1-E8401323858A__GUID-A8DC56A2-5A79-4A24-8F4B-95593DACE596" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">When a client signal is so weak that it may not be able to support a link with another AP</li><li class="li" id="GUID-2A966DDB-409A-4F83-95B1-E8401323858A__GUID-204C80E5-DC06-4711-9ABD-125084DFDCCF" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">When a client signal is so strong that it really belongs on this AP.</li></ul> </div> <div class="p" id="GUID-2A966DDB-409A-4F83-95B1-E8401323858A__GUID-BFEB8755-4A0A-4D5A-B662-B46D7ECBD8C8">The APs maintain these configured client limits and enforce them once they reach the limits by withholding probe responses and authentication responses on any radio that has reached its limit.</div> </div> <ul><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"> To enable client load balancing on the respective WLAN navigate to Network > Wireless Lan > select the affected wireless lan > Configure > Advanced Options > Client Load Balancing </li></ul> <div style="margin-bottom: 11px;"><img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CU5GI"></img> Figure 5: Enabling Client Load Balancing on the WLAN configuration</div> <ul><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">To further customize the criteria and algorithm for client load balancing navigate to Network > Access Points > have the affected AP Zone selected and click configure using the pencil icon above the Zone > scroll down to Advance Options > Load Balancing options ></li></ul> <div style="margin-bottom: 11px;"><img alt="User-added image" height="418" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CU81F" width="500"></img> Figure 6: Enabling and customizing the client load balancing feature on the Zone Reference for configuration: <a href="https://docs.commscope.com/bundle/sz-612-wlanmanagementguide-sz300vszh/page/GUID-2A966DDB-409A-4F83-95B1-E8401323858A.html" target="_blank">Client Load Balancing</a></div> Channel Planning: Use non-overlapping channels and avoid using adjacent channels that can cause interference. <ul style="margin-left: 80px;"><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">This can be achieved by <ul><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Use of Auto Cell Sizing + Channel Fly Or Cloud RRM</li></ul> </li></ul> <div style="margin-bottom: 11px;">Reference: <a href="https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-1ADCEF12-8C7C-4DD7-AEC7-3E73608C4070.html?hl=rrm" target="_blank">AI-Driven RRM Overview</a></div> <h4 style="margin-bottom: 11px;">Steps to detect and control ATU on a RuckusOne Solution:</h4> <ul><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">RuckusOne has an inbuild report dedicated to Airtime Utilization labelled Airtime Utilization Report. <ul><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">This can be access by navigating to Wifi > Access Point > Airtime Utilization Report</li></ul> </li></ul> <div style="margin-bottom: 11px;"><img alt="Airtime Utilization Report RuckusOne" height="281" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CTi6q" width="500"></img> Figure 7: The UI indicator for ATU - the Airtime Utilization Report</div> <ol style="margin-left: 40px;"><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Packet control:</li></ol> <ul style="margin-left: 80px;"><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Implementing a per user speed limit / bandwidth contract on Ruckus One</li></ul> <div style="margin-bottom: 11px;">Wifi > Wireless Network List > select the affected WLAN > Edit > More Settings > Network Control > enable Access Control > Add > Create a policy with Client Rate Limit checked</div> <div style="margin-bottom: 11px;">Add Upload and Download limits - The Expectation is to set a bare minimum value that allows basic functionality on the WLAN and drive up as needed</div> <ul style="margin-left: 80px;"><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">It is recommended to enable rate limits on all affected WLAN's to control ATU on an affected set of AP's</li></ul> <div style="margin-bottom: 11px;"><img alt="User-added image" height="578" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CTlXo" width="500"></img> Figure 8: The access control policy that will contain the client / ssid rate limiting feature <img alt="User-added image" height="424" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CU6aX" width="500"></img> Figure 9: The client Rate Limit feature <ul style="margin-left: 80px;"><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Enabling proxy ARP</li></ul> Wifi > Wireless Network List > select the affected WLAN > Edit > More Settings > VLAN > enable Proxy ARP <img alt="User-added image" height="187" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CVmsf" width="500"></img> Figure 10: The Proxy ARP toggle located under the VLAN configuration of the WLAN <ul style="margin-left: 80px;"><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Enabling Client isolation and enabling the muticast filtering</li></ul> Wifi > Wireless Network List > select the affected WLAN > Edit > More Settings > Networking > enable Muticast Filter <img alt="User-added image" height="512" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CVhUo" width="500"></img> Figure 10: The Multicast Filter toggle located under Networking settings on the WLAN configuration <ol start="2"><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Load Balancing Clients: Distribute clients across multiple access points (APs) to balance the load.</li></ol> <div style="margin-bottom: 11px;">What is Load Balancing and how does it work: </div> <div style="margin-bottom: 11px;"> Enabling load balancing can improve WLAN performance by helping to spread the wireless client load between nearby access points, so that one AP does not get overloaded while another sits idle. Load balancing can be controlled from within the controller web interface to balance the number of clients per radio on adjacent APs. Adjacent APs are determined by the controller at startup by measuring the RSSI during channel scans. After startup, the controller uses subsequent scans to update the list of adjacent APs periodically and when a new AP sends its first scan report. When an AP leaves, the controller immediately updates the list of adjacent APs and refreshes the client limits at each affected AP. <div class="p" id="GUID-2A966DDB-409A-4F83-95B1-E8401323858A__GUID-21C6C454-AD0C-405F-B1AF-92EC8D5EB93A">Once the controller is aware of which APs are adjacent to each other, it begins managing the client load by sending the configured client limits to the APs. These limits are soft values that can be exceeded in several scenarios, including: <ul class="ul" id="GUID-2A966DDB-409A-4F83-95B1-E8401323858A__UL_TRX_PWV_FZ"><li class="li" id="GUID-2A966DDB-409A-4F83-95B1-E8401323858A__GUID-A8DC56A2-5A79-4A24-8F4B-95593DACE596" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">When a client signal is so weak that it may not be able to support a link with another AP</li><li class="li" id="GUID-2A966DDB-409A-4F83-95B1-E8401323858A__GUID-204C80E5-DC06-4711-9ABD-125084DFDCCF" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">When a client signal is so strong that it really belongs on this AP.</li></ul> </div> <div class="p" id="GUID-2A966DDB-409A-4F83-95B1-E8401323858A__GUID-BFEB8755-4A0A-4D5A-B662-B46D7ECBD8C8">The APs maintain these configured client limits and enforce them once they reach the limits by withholding probe responses and authentication responses on any radio that has reached its limit. </div> <div class="p">Complete the following steps to customize the load balancing settings:</div> <div class="note note note_note" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-B04207EF-B952-4D20-A3D2-BA5BF58B1D56">Note: Make sure background scan is selected for channel selection method on radios you would like to run load balancing. Also, enable load balancing on network configuration.</div> <ul class="ul choices" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__CHOICES_ETP_3MH_3XB"><li class="li step stepexpand" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-20A782BF-DA0B-4124-98FB-E9D379C86878" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"><span class="ph cmd" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-E56915F0-3E39-473B-B324-A51A473F3768" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Select the Load Balancing sub-tab.</li></ul> <div class="li step stepexpand"><img class="image" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__IMAGE_GKJ_CLH_3XB" src="https://docs-be.commscope.com/bundle/ruckusone-userguide/page/GUID-39AE4275-90F9-49BB-B1D5-D48E76C7E08C-low.png?_LANG=enus"></img> Figure 11. Load Balancing Tile</div> <ul class="ul choices" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__CHOICES_ETP_3MH_3XB"><li class="li step stepexpand" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"><span class="ph cmd" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-7597FA63-A509-4386-9995-449AC99B1327" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Configure the following parameters: <ul><li class="li choice" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-62738746-D893-42D7-B748-806D0A461873" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Load Balancing Method: Select Based on Client Count or Based on Capacity.</li><li class="li choice" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-5E156AD5-7D06-4215-A047-3A870D98A8FA" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Band Balancing: Toggle the switch to ON to enable the Band Balancing. Move the slider to configure the 2.4 GHz Client load percentage.</li></ul> </li><li class="li step stepexpand" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-3A1C738A-C2DE-4DC9-9CBC-390CCBF0FBB1" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"><span class="ph cmd" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-19A35FEA-222D-4587-853F-9528F2CA3CD5" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"> Select a steering mode from the following options: Basic, Proactive, or Strict. <div class="itemgroup info" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-C64F78A6-CACD-42C9-ABB3-417DB1335EF6">The purpose of the sticky client steering is to identify the Sticky clients and assist them to transition to a better AP. The sticky client algorithm does this by monitoring the received SNR from the client, once the SNR drops below a configured threshold value, it starts the client steering process by finding neighbor APs that can provide better service to the client. Once neighbor AP(s) have been identified the sticky client algorithm will send a BSS Transition Management (BTM) Request frame to the client(s) supporting BTM and depending on the client(s) response the algorithm will take additional steps in transitioning the client which may include a disconnect. The algorithm will disconnect the clients that don’t support BTM to force scanning and finding the neighboring AP with a better service potential. Based on IEEE 802.11k, AP will check beacon report response to see if it contains the servicing AP’s SNR seen by the client. If an AP is identified with a SNR above the % set into the feature setting (20% on the screen shot and by default), this AP will be classified as a Neighbor AP. <div class="p" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-28A6B56A-7CB0-412B-9379-0B4B6C5DAC34"> <ul class="ul" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__UL_MWW_WGJ_VYB"><li class="li" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-58FB1969-6D63-4525-80C9-208A91A3B9E0" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Sticky client detection/steering is an existing functionality within the Client Load Balance(CLB) feature on the AP side.</li><li class="li" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-160BFFE8-5D97-4E93-BC1E-09CE90FBE421" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Sticky client steering will make the previous SmartRoam feature disabled once the feature is enabled.</li><li class="li" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-3B431AAF-EA86-4043-8063-D90F139B6E22" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Sticky client steering needs clients with IEEE 802.11v support.</li><li class="li" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-71A719FE-888F-409B-835B-E94A23E6E14D" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">For non-11v clients, the algorithm will send an IEEE 802.11 Disassociation message to the client to force scanning and finding the neighboring APs with a better potential service in the Strict mode.</li></ul> </div> <div class="p" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__GUID-76AE9267-A67B-4964-87A6-D3E1E615737A">Client behavior on the different Steering modes: <table class="table frame-all" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__TABLE_BLR_HHJ_VYB"><colgroup><col style="width: 25%;"></col><col style="width: 25%;"></col><col style="width: 25%;"></col><col style="width: 25%;"></col></colgroup><thead class="thead"><tr class="row"><th colspan="1" rowspan="1" class="entry colsep-1 rowsep-1" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__TABLE_BLR_HHJ_VYB__entry__1">Client Type</th><th colspan="1" rowspan="1" class="entry colsep-1 rowsep-1" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__TABLE_BLR_HHJ_VYB__entry__2">Basic</th><th colspan="1" rowspan="1" class="entry colsep-1 rowsep-1" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__TABLE_BLR_HHJ_VYB__entry__3">Proactive</th><th colspan="1" rowspan="1" class="entry colsep-1 rowsep-1" id="GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14__TABLE_BLR_HHJ_VYB__entry__4">Strict</th></tr></thead><tbody class="tbody"><tr class="row"><td colspan="1" rowspan="1" class="entry colsep-1 rowsep-1">Non-11v</td><td colspan="1" rowspan="1" class="entry colsep-1 rowsep-1">No Steer</td><td colspan="1" rowspan="1" class="entry colsep-1 rowsep-1">No Steer</td><td colspan="1" rowspan="1" class="entry colsep-1 rowsep-1">Disassociate</td></tr><tr class="row"><td colspan="1" rowspan="1" class="entry colsep-1 rowsep-1">11v</td><td colspan="1" rowspan="1" class="entry colsep-1 rowsep-1">BTM (Client make decision)</td><td colspan="1" rowspan="1" class="entry colsep-1 rowsep-1">BTM (Client make decision)</td><td colspan="1" rowspan="1" class="entry colsep-1 rowsep-1">BTM-disassociate-imminent option + Disassociate</td></tr></tbody></table> </div> </div> </li></ul> </div> <div style="margin-bottom: 11px;">Reference: <a href="https://docs.commscope.com/bundle/ruckusone-userguide/page/GUID-C1324048-5F2A-436C-A8BE-9B94BCB5CF14.html" target="_blank">Client Load Balancing and Band steering</a></div> <ol start="3"><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Channel Planning: Use non-overlapping channels and avoid using adjacent channels that can cause interference.</li></ol> <ul style="margin-left: 80px;"><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">This can be achieved by <ul><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Use of Auto Cell Sizing + Channel Fly or Cloud RRM</li></ul> </li></ul> <div style="margin-bottom: 11px;">Reference: <a href="https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-1ADCEF12-8C7C-4DD7-AEC7-3E73608C4070.html?hl=rrm" target="_blank">AI-Driven RRM Overview</a></div> </div> <h4 style="margin-bottom: 11px;">Steps to detect and control ATU on a Ruckus Unleashed / Zone Director:</h4> <div style="margin-bottom: 11px;">To validate the airtime utilization values for a Ruckus Unleashed AP, navigate to Access points > select an AP > AP > and note down the Airtime data: <img alt="User-added image" height="271" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CU6U7" width="500"></img> Figure 12: The Access Points tile accessed to further view the AP Radio Stats <img alt="User-added image" height="218" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tth&feoid=00N50000002Cf3M&refid=0EMPH00000CUJPh" width="500"></img> Figure 13: A sample Airtime data output from the Access Point information tile An ideal network will have TX, RX and total values greater than channel busy. A higher percentage on channel busy is an indication of an ATU. The inference for the values mentioned above is as follows</div> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Busy: How long the radio has to wait - powered by CTS RTS <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">This could be do to is due to Non Wi-Fi RF interference / client bandwidth misuse / too many clients</li></ul> </li><li style="margin-bottom: 11px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"><span style="font-family: -apple-system, Bli

In enterprise environments with dense WLAN deployments, maintaining optimal RF performance is crucial. Various RF issues can degrade network performance, leading to poor user experiences and reduced productivity. This article outlines the RF performance issue High Airtime Utilization (ATU) and provides potential solutions to mitigate it.

2025-12-31T06:23:02-0800 2025-12-31T14:00:11-0800 https://support.ruckuswireless.com/articles/000010086 2025-12-30T11:24:29-0800 monthly 0.8 admin,premium knowledge_article_4055 knowledge_article_4055 2020-01-22T07:49:04-0800 000010086 Validated (External) Premium Ruckus icx switches;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches, SmartCell Gateway Why SZ is unable to manage ICX switches and throws and error "Failed to add new switch because of exceeding system capacity"? SZ124 cluster can manage only 1024 AP’s and In cluster have 1138 AP’s which is exceeding the number. The number -23 is from (Total Licenses used- Total capacity of the SZ) / 5 i.e (1138-1024)/5 = -22.8 which is ~ -23. Following the same equation, an SZ AP and Switch management is balanced to a ratio of 5:1, which means if you have 1019 ap on the SZ, you can only connect 1 switch to the SZ and if you have 1014 AP on the SZ, you can connect 2 switches to the SZ, etc. Following table explains the maximum capacity of SZ100 in different scenarios. As you can see, 1024 is the maximum AP capacity of SZ100 in AP mode and 204 is the maximum capacity for the switch mode. However, if you would like to manage both, the ratio is 5:1, i.e 1 switch for every 5 AP’s and more you add Switches, less you would get the AP support and vice versa. <img alt="User-added image" height="363" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tTt&feoid=00N50000002Cf3M&refid=0EM2J000000w4wl" width="655"></img>

This article explains why we are unable to manage ICX switches with SZ cluster, and an error is observed, "Error: Failed to add new switch because of exceeding system capacity!" or Error: 21001: switch max capacity has been reached.

2025-12-30T11:24:29-0800 2025-12-31T06:00:09-0800 https://support.ruckuswireless.com/articles/000010104 2025-12-30T14:43:16-0800 monthly 0.8 admin,premium knowledge_article_4062 knowledge_article_4062 2020-02-03T01:17:49-0800 000010104 Validated (External) Premium Ap sw registrar Installation;Known issues and workarounds Installation, Known Issues and Workarounds, AP SW Registrar Why do I get Failure 401 Unmatched IP when I try to use the AP Registrar or the SW Registrar Make sure you provide a public FQDN that has one fixed IP address assigned to it. The AP-SW Registrar support team will need to generate a new certificate, so that you can access the AP-SW registrar with it.

AP Registrar unable to add/modify/delete entries get 401 error

2025-12-30T14:43:16-0800 2025-12-31T06:00:08-0800 https://support.ruckuswireless.com/articles/000011649 2025-12-30T14:35:34-0800 monthly 0.8 admin,premium knowledge_article_4678 knowledge_article_4678 2021-05-04T12:04:01-0700 000011649 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds;Support license activation Known Issues and Workarounds, Support License Activation, SmartCell Gateway <div>What does the "Invalid" status mean on the vSZ/SZ GUI for AP Support License?</div> <div> <ul><li>From Firmware Version 5.2 GA onwards, users can view AP Support License information directly on the controller Web UI.</li><li>Starting R7.1, the SZ performs strict validation using AP-SUP and AP-SUP-EXP licenses. If validation fails, the system blocks the upgrade.</li><li>Ensure AP Support Licenses are at least 90% of the total AP licenses activated under the account.</li></ul> For more details, refer to article 000004935. Users can also contact RUCKUS Support for assistance. </div>

For SZ/vSZ running Firmware Version 5.2 and above – Status for Support on AP Licenses and upgrade behavior changes in R7.1.

2025-12-30T14:35:34-0800 2025-12-31T06:00:08-0800 https://support.ruckuswireless.com/articles/000010611 2025-12-30T05:40:18-0800 monthly 0.8 admin,premium knowledge_article_4228 knowledge_article_4228 2020-06-16T03:38:38-0700 000010611 Validated (External) Premium Sz144;Sz300;Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Security;Known issues and workarounds Configuration, Security, Known Issues and Workarounds, SZ144, SZ300, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway, SZ100 <div>Why can I not run Test Speed (SpeedFlex) via the WebGUI on vSZ/SZ?</div> <div>After enabling the feature in Advanced Options, the Test Speed icon becomes active and can be used for performance testing. <img alt="User-added image" height="148" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tFN&feoid=00N50000002Cf3M&refid=0EM2J000001T20l" width="667"></img> <img alt="User-added image" height="381" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tFN&feoid=00N50000002Cf3M&refid=0EM2J000001T20q" width="500"></img></div>

Since vSZ/SZ version 5.2.1, the SpeedFlex (Test Speed) feature is disabled by default for security reasons. This causes the test speed icon to appear grayed out in the WebGUI.

2025-12-30T05:40:18-0800 2025-12-30T18:00:09-0800 https://support.ruckuswireless.com/articles/000010658 2025-12-30T05:29:10-0800 monthly 0.8 admin,premium knowledge_article_4277 knowledge_article_4277 2020-06-30T01:25:25-0700 000010658 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway <div>What network settings should be checked when encountering the error: "Unable to reach ZD due to networking connection issue, Please check network settings"?</div> <div>Resolve TFTP packet drops and retry migration. Once TFTP communication is restored, the migration process will complete successfully.</div>

ZD migration from ZoneDirector to SmartZone fails with a network connectivity error due to TFTP communication issues.

2025-12-30T05:29:10-0800 2025-12-30T18:00:09-0800 https://support.ruckuswireless.com/articles/000010339 2025-12-30T07:35:03-0800 monthly 0.8 admin,premium knowledge_article_5257 knowledge_article_5257 2020-04-14T03:54:20-0700 000010339 Validated (External) Premium Ruckus cloud lte;Ruckus analytics;Ruckus cloud switch;Ruckus cloud wifi Troubleshooting Troubleshooting, Ruckus Cloud LTE, Ruckus Analytics, Ruckus Cloud Switch, Ruckus Cloud WiFi How to gather the Web developer network logs in HAR format from the web browser? <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"> For Windows, open up a new tab in your Chrome or Edge browser and press Ctrl+Shift+I to access the browser inspect. For MacOS, you can press Cmd+Opt+I to access the browser inspect.</li></ul> <img alt="User-added image" height="184" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tKD&feoid=00N50000002Cf3M&refid=0EM2J000001pLqx" width="500"></img> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">The view above shows the Cloud Service login , you can execute Ctrl-Shift-I to get into Inspect.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Then select the Network tab on the right side, top of the Inspect window for the next steps.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">When you sign in. This is what you will see when the error appears:</li></ul> <img alt="User-added image" height="248" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tKD&feoid=00N50000002Cf3M&refid=0EM2J000001pLqY" width="500"></img> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">In the right side of the screen shown above, under the Name column, there are six names there: tenant, client-data, alarm-list, ap-traffic (in red letters), total-active-AP-licenses and ap-traffic (again, in red letters).</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Let's click on the ones in red letters, ap-traffic:</li></ul> <div style="margin-left: 40px;"> { "timestamp" : "2016-03-06T23:24:37.976+0000", "status" : 500, "error" : "Internal Server Error", "exception" : "java.lang.NullPointerException", "message" : "null", "path" : "/tenants/tenant/0035000002dgddBAAQ/reports/analytics/ap-traffic" } </div> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Clearly, this indicates a problem.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">The Console tab will be useful in your day-to-day trouble shooting efforts.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">For this error message shown above, the 500 errors under the Console tab are also rather ominous:</li></ul> <img alt="User-added image" height="307" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tKD&feoid=00N50000002Cf3M&refid=0EM2J000001pLqd" width="500"></img> <div style="margin-left: 40px;"> </div> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Here is the text information:</li></ul> <div style="margin-left: 40px;">POST https://cloud.ruckuswireless.com/tenants/tenant/0035000002dgddBAAQ/reports/analytics/ap-traffic 500 (OK)(anonymous function) d7cc8ff159ac565f4d4e.bundle.js:16 Object {data: Object, status: 500, config: Object, statusText: "OK"}(anonymous function) d7cc8ff159ac565f4d4e.bundle.js:16 Object {data: Object, status: 500, config: Object, statusText: "OK"}(anonymous function) d7cc8ff159ac565f4d4e.bundle.js:15 POST https://cloud.ruckuswireless.com/tenants/tenant/0035000002dgddBAAQ/reports/analytics/ap-traffic 500 (OK)(anonymous function) d7cc8ff159ac565f4d4e.bundle.js:16 Object {data: Object, status: 500, config: Object, statusText: "OK"}(anonymous function) </div> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;"><span style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;background-color: #ffffff;">You can copy and paste this output to a file and attach it to the ticket.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">This information can now be used for further investigation.</li></ul>

This article explains the procedure to gather the Web developer network logs in HAR format from the web browser for Cloud Service indicating a technical error.

2025-12-30T07:35:03-0800 2025-12-30T18:00:08-0800 https://support.ruckuswireless.com/articles/000015119 2025-12-30T07:04:07-0800 monthly 0.8 admin,premium knowledge_article_5911 knowledge_article_5911 2025-11-12T02:56:48-0800 000015119 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How to Extend the User Session Timeout on DOT1x WLAN? In SZ/vSZ managed environments, the user session timeout for DOT1x WLANs has a maximum configurable limit of 10 days (864,000 seconds). This limit is enforced by the system and cannot be increased or overridden through the SZ interface, AP CLI, or any external configuration. Even if the RADIUS server sends a session timeout value greater than 10 days, the Access Point will automatically cap the session timeout at the maximum allowed duration of 10 days. To maintain user connectivity beyond this period, clients will need to re-authenticate once the session expires. This behavior is by design and ensures compliance with system and security standards. <img height="235" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tIb&feoid=00N50000002Cf3M&refid=0EMRk00000FKgVV" width="528"></img>

This article discusses about the User Session Timeout for DOT1x WLAN

2025-12-30T07:04:07-0800 2025-12-30T18:00:08-0800 https://support.ruckuswireless.com/articles/000014565 2025-12-30T06:01:34-0800 monthly 0.8 admin,premium knowledge_article_6018 knowledge_article_6018 2024-11-13T17:59:10-0800 000014565 Validated (External) Premium Sz144;Sz300;Smartcell ap;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Troubleshooting Troubleshooting, SZ144, SZ300, SmartCell AP, virtual SmartCell Gateway, SZ100 <div>What steps can be taken to troubleshoot and resolve issues when an Access Point (AP) shows a Configuration Failed status?</div> To resolve the "Update Failed" issue, update the Signature Package on the SZ/vSZ. This is essential because the absence of the required signature prevents the update process from completing successfully. Once the sigpack is applied, the AP will automatically attempt to reapply the configuration. To update the Signature Package on SmartZone: <ol><li>In the controller web UI, navigate to Security > Application Control > Application Signature Package.</li><li>To install the latest version, select Latest available from support site > Check Now > Install.</li></ol> <img alt="User-added image" height="269" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tGz&feoid=00N50000002Cf3M&refid=0EMPH00000DWl4L" width="500"></img> Alternatively, to upload a custom version, download the required Signature Package file from the RUCKUS support site. Navigate to Security > Application Control > Application Signature Package, click Upload Signature Package, browse for the downloaded file, and click Upload. <img alt="User-added image" height="250" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tGz&feoid=00N50000002Cf3M&refid=0EMPH00000DWgz8" width="500"></img>

This article provides comprehensive troubleshooting steps to diagnose and resolve issues when an Access Point (AP) shows a configuration failure status.

2025-12-30T06:01:34-0800 2025-12-30T18:00:08-0800 https://support.ruckuswireless.com/articles/000010608 2025-12-30T05:19:15-0800 monthly 0.8 admin,premium knowledge_article_4233 knowledge_article_4233 2020-06-17T00:08:17-0700 000010608 Validated (External) Premium Sz300;Scg200;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Security;Website access Security, Website Access, SZ300, SCG200, SZ100 <div>Even though LDAP/AD over TLS is configured for Web Authentication, authentication requests are rejected. Why does LDAPS fail?</div> <div> This is a design intent limitation: <blockquote> The Common Name entered here should be the IP address of the LDAP/AD server. Ideally, the CN should be the server’s hostname (FQDN), but this is currently not supported. </blockquote> </div>

LDAP or Active Directory (AD) over TLS (LDAPS) fails for Web Authentication on SmartZone (SZ) controllers due to certificate Common Name (CN) mismatch limitations.

2025-12-30T05:19:15-0800 2025-12-30T14:00:10-0800 https://support.ruckuswireless.com/articles/000014566 2025-12-29T11:45:41-0800 monthly 0.8 admin,premium knowledge_article_5751 knowledge_article_5751 2025-04-21T09:39:56-0700 000014566 Validated (External) Premium Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi What is the maximum number of MAC registration lists and the maximum number of MAC registrations per list for a tenant? Ruckus One allows administrators to configure MAC registration lists to authenticate client devices based on their MAC addresses, providing an additional access control mechanism in environments requiring MAC-based authentication. Each MAC entry can have an expiration policy, including: <ul><li> Never expire: Remains registered until manually removed. </li><li> Expire by date: Valid until a specific date/time. </li><li> Expire after duration: Valid for a configurable period (e.g., 5 hours, 7 days, or 2 weeks) from when added. </li></ul> To maintain list hygiene, Ruckus One supports automatic cleanup of expired entries, ensuring only active registrations are kept. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001spZ&feoid=00N50000002Cf3M&refid=0EMPH00000J8ea3"></img> SYSTEM LIMITS <ul><li> Up to 64 MAC registration lists per tenant. </li><li> Each list can hold a maximum of 5,000 MAC addresses. </li></ul> Refer to the attached screenshot for a system error triggered when limits are exceeded — either more than 64 lists or over 5,000 MAC addresses per list. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001spZ&feoid=00N50000002Cf3M&refid=0EMPH00000J8ea4"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001spZ&feoid=00N50000002Cf3M&refid=0EMPH00000J7XcF"></img>

This article outlines the limits for MAC registration lists in R1 under "Network Control > Policies & Profiles > MAC Registration Lists"

2025-12-29T11:45:41-0800 2025-12-30T06:00:14-0800 https://support.ruckuswireless.com/articles/000014279 2025-12-29T14:17:56-0800 monthly 0.8 admin,premium knowledge_article_6017 knowledge_article_6017 2024-02-27T18:50:46-0800 000014279 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Troubleshooting Troubleshooting, SZ144, SZ300, virtual SmartCell Gateway, SZ100 <div>Why don’t I see the RADIUS accounting gigawords in the accounting records?</div> <div>Gigawords attributes are enabled by default in SmartZone.</div> <div>They are only included when the client generates ? 4 GB of traffic in a single session.</div>

The RADIUS accounting attributes Acct-Input-Gigawords (52) and Acct-Output-Gigawords (53) are only included in accounting records when a client generates at least 4 GB of traffic in a single session.

2025-12-29T14:17:56-0800 2025-12-30T06:00:13-0800 https://support.ruckuswireless.com/articles/000011710 2025-12-29T14:45:59-0800 monthly 0.8 admin,premium knowledge_article_6016 knowledge_article_6016 2021-06-02T18:42:58-0700 000011710 Validated (External) Premium Sz144 d;Vsz dataplane;Sz100d Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SZ144 D, vSZ Dataplane, SZ100D How to configure data plane host table timeout value ? <ol><li>The default data plane arp table timeout is set for 15 minutes</li><li>Increasing the arp table in busy environment may provide stability as a work around until network side issue is resolved</li><li>The following DP CLI example reflect the increase in DP arp table timeout from 15 minutes to 24 hours</li></ol> <pre class="ckeditor_codeblock"> DP# debug Manage system debug options vSZ-D(debug)# diag dp_comm arp sum >> skip_sb_arp_proxy_ue='no', sb_inv_nor_vlan=0 >> AP & non-UE ARP tbl: lookup_failA/B/C=4/0/2; 2/2 in table // 2/2 in table is # of host entry in table arp_timer=900(sec) // 15 min default value ap_LL=32765 LL_full=0 hash_full_errA=0 errB=0 // ap_LL is # free host entry in table >> ipv4 client ARP table: failA/B/C=3809/0/0; 0/0 in table arp_timer=900(sec), timer in_use_cnt=0, refresh_cnt=0 ip4c_LL=196607 LL_full=0 hash_full_errA=0 errB=0 >> ipv6 non-UE ARP table: failA/B/C=0/0/0; 0/0 in table arp_timer=900(sec) ip6_LL=65535 LL_full=0 hash_full_errA=0 errB=0 >> ipv6 client ARP table: failA/B/C=58/0/0; (0 HashTbl) (0 normal) (0 vlan_4095) arp_timer=900(sec) ip6c_LL=262143 LL_full=0 hash_full_errA=0 errB=0 empty_bucket=131072(100%) LL_max_length=0 DP(debug)# diag dp_comm arp timer 86400 persistent // update to 24 hours arp timer 86400 >>arp timer set permanently at cli_opt.txt >> skip_sb_arp_proxy_ue='no', sb_inv_nor_vlan=19841 >> AP & non-UE ARP tbl: lookup_failA/B/C=19166/0/8794; 292/292 in table arp_timer=86400(sec) ap_LL=32475 LL_full=0 hash_full_errA=0 errB=0 >> ipv4 client ARP table: failA/B/C=159464486/0/0; 1657/1657 in table arp_timer=86400(sec), timer in_use_cnt=1657, refresh_cnt=36793744 ip4c_LL=194950 LL_full=0 hash_full_errA=0 errB=0 >> ipv6 non-UE ARP table: failA/B/C=0/0/0; 0/0 in table arp_timer=86400(sec) ip6_LL=65535 LL_full=0 hash_full_errA=0 errB=0 >> ipv6 client ARP table: failA/B/C=5936441/0/0; (2808 HashTbl) (1418 normal) (1390 vlan_4095) arp_timer=86400(sec) ip6c_LL=259335 LL_full=0 hash_full_errA=0 errB=0 empty_bucket=128299(97%) LL_max_length=2 ** Notation arp_timer=900(sec) [this is the default arp timer of 15 minutes] ap_LL=32475 [this is the availabe # of AP host entry available] ip4c_LL=194950 [this is the available # of ipv4 client host entry available] ip6_LL=65535 [this is the available # of ipv6 client host entry available] </pre> 4.Before proceeding, please determine the arp table size availability is sufficient for the size of the client network. 5. If unsure of the settings, please contact Ruckus technical support for assistance

This article describes how to adjust the data plane host table timeout setting from default value

2025-12-29T14:45:59-0800 2025-12-30T06:00:13-0800 https://support.ruckuswireless.com/articles/000010097 2025-12-29T14:21:24-0800 monthly 0.8 admin,premium knowledge_article_4059 knowledge_article_4059 2020-01-28T10:22:24-0800 000010097 Validated (External) Premium Unleashed;Zonedirector;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, Unleashed, ZoneDirector Is it possible to customize web authentication portal page on ZoneDirector or Unleashed? Customization of web portal used for web authentication is not supported as of ZD 10.3 and Unleashed 200.8 version. If it is important for the user to customize the portal page, WISPr authentication with CloudPath or 3rd Party external WISPr portal is suggested. Note: Limited customization of Web Authentication Portal is supported on v/SmartZone product as of 3.5.x and above versions.

Modify web authentication portal page to add AUP (Acceptable Use Policy) or customize the page.

2025-12-29T14:21:24-0800 2025-12-30T06:00:13-0800 https://support.ruckuswireless.com/articles/000011821 2025-12-29T14:51:08-0800 monthly 0.8 admin,premium knowledge_article_6015 knowledge_article_6015 2021-07-23T12:28:05-0700 000011821 Validated (External) Premium Zoneflex outdoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneFlex Outdoor, SmartCell Gateway Why 160Mhz Channelization cannot be configured for outdoor T750 AP with Argentina Country code? To resolve this, we need to Allow indoor channels for outdoor AP's to provide sufficient channels for 160Mhz channel bonding. With this we can form 160 MHz using channels 36/40/44/48/52/56/60/64 for Argentina country. <img alt="User-added image" height="97" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001rYX&feoid=00N50000002Cf3M&refid=0EM2J0000025l97" width="827"></img> rkscli: get channelavailability wifi1 Ch Seg2 CWmode DFS-CAC-status Availability ------------------------------------------------------------- 36 0 20M NON_DFS AVBLE 36 50 160M NON_DFS AVBLE 40 0 20M NON_DFS AVBLE 40 50 160M NON_DFS AVBLE 44 0 20M NON_DFS AVBLE 44 50 160M NON_DFS AVBLE 48 0 20M NON_DFS AVBLE 48 50 160M NON_DFS AVBLE 52 0 20M DFS:CAC pendg AVBLE 52 50 160M DFS:CAC pendg AVBLE 56 0 20M DFS:CAC pendg AVBLE 56 50 160M DFS:CAC pendg AVBLE 60 0 20M DFS:CAC pendg AVBLE 60 50 160M DFS:CAC pendg AVBLE 64 0 20M DFS:CAC pendg AVBLE 64 50 160M DFS:CAC pendg AVBLE 100 0 20M DFS:CAC pendg AVBLE 104 0 20M DFS:CAC pendg AVBLE 108 0 20M DFS:CAC pendg AVBLE 112 0 20M DFS:CAC pendg AVBLE 116 0 20M DFS:CAC pendg BLOCK 132 0 20M DFS:CAC pendg AVBLE 136 0 20M DFS:CAC pendg AVBLE 140 0 20M DFS:CAC pendg BLOCK 149 0 20M NON_DFS AVBLE 153 0 20M NON_DFS AVBLE 157 0 20M NON_DFS AVBLE 161 0 20M NON_DFS AVBLE 165 0 20M NON_DFS BLOCK OK Now we can enable 160Mhz channels both through the CLI and UI: <img alt="User-added image" height="285" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001rYX&feoid=00N50000002Cf3M&refid=0EM2J0000025l9l" width="836"></img> rkscli: get channel wlan32 wlan32 Channel: 52 (5260 Mhz) (Smart Auto Select) OK rkscli: rkscli: get cwmode wifi1 Channel Width Mode: 160 MHz (5) OK

This article explains why we get an error while configuring 160Mhz channelization for T750 AP with Argentina Country code

2025-12-29T14:51:08-0800 2025-12-30T06:00:12-0800 https://support.ruckuswireless.com/articles/000014630 2025-12-29T14:51:38-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6014 knowledge_article_6014 2024-12-11T14:49:17-0800 000014630 Validated (External) Public Sz100;SmartZone 100-D (SZ100-D) Known issues and workarounds Known Issues and Workarounds, SZ100 Can I restore a configuration backup of the SZ104 on a SZ124 model? Only use SZ104 with SZ104 configuration backup, there is one exception, you can use SZ104 running 5.2.1 and load this configuration backup on SZ144. Only use SZ124 with SZ124 configuration backup, there is one exception, you can use SZ124 running 5.2.1 and load this configuration backup on SZ144. You cannot load a SZ104/SZ124/SZ144 configuration backup in a vSZ-E/H or SZ300.

Can I restore a configuration backup of the SZ104 on a SZ124 model?

2025-12-29T14:51:38-0800 2025-12-30T06:00:12-0800 https://support.ruckuswireless.com/articles/000011738 2025-12-29T14:56:55-0800 monthly 0.8 admin,premium knowledge_article_6013 knowledge_article_6013 2021-06-18T02:04:47-0700 000011738 Validated (External) Premium T750se;RUCKUS T750SE Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, T750SE Why does my newly deployed T750SE AP not broadcast any SSIDs / does not seem to provide any coverage? SZ GUI: The external antennas need to be turned off on either the zone settings or the AP settings itself (overriding zone settings). Edit zone configuration: <ul><li>Navigate to menu: Access Points > Access Points </li><li>Select the zone that contains your T750SE APs</li><li>Click the pen icon to edit the settings</li><li>Go to "AP Model Specific Configuration" and select T750SE from the drop-down menu</li><li>Slide "External Antenna" (2.4Ghz/5Ghz) to off</li><li>Select OK to save your changes</li><li>All T750SE APs will subsequently reboot</li></ul> Edit AP Configuration: <ul><li>Navigate to menu: Access Point > Access Points</li><li>In the upper right hand corner search for 'T750SE' in the search bar</li><li>Select the AP you want to change the configuration on and click "Configure"</li><li>Under "Model Specific Options" turn on "Override zone configuration"</li><li>Slide "External Antenna" (2.4Ghz/5Ghz) to off</li><li>Select OK to save your changes</li><li>The T750SE AP will subsequently reboot</li></ul>

The T750SE AP has external antenna connections. When these are enabled in the configuration while no antennas are attached, the SSID is seemingly not broadcasting.

2025-12-29T14:56:55-0800 2025-12-30T06:00:11-0800 https://support.ruckuswireless.com/articles/000011775 2025-12-29T14:58:45-0800 monthly 0.8 admin,premium knowledge_article_6012 knowledge_article_6012 2021-07-02T06:33:45-0700 000011775 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway I am getting an error "Cannot delete this domain since this user has only this domain assigned." when trying to delete unused domain - how do I fix this Access the Administration:Admin and Roles page and verify group containing Domain to be deleted: <img alt="Admin group list" height="157" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001srB&feoid=00N50000002Cf3M&refid=0EM2J0000025R0q" width="500"></img> Highlight the group containing the Domain and check the configuration (click on "configure") to verify users and permissions assigned: <img alt="admin group users" height="407" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001srB&feoid=00N50000002Cf3M&refid=0EM2J0000025R1Z" width="500"></img> From the group list you should be able to delete this group by highlighting the group and hitting the "delete" button when logged in with admin or other super-admin account that has control over this domain: <img alt="admin group delete" height="170" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001srB&feoid=00N50000002Cf3M&refid=0EM2J0000025R1e" width="500"></img> This should then allow deleting the unused Domain from the Domain (AP) list (note - you should have already moved or removed AP's and Zones from this domain) <img alt="domain delete from tree" height="382" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001srB&feoid=00N50000002Cf3M&refid=0EM2J0000025R1t" width="500"></img>

Error when trying to delete an unused Domain from SZ

2025-12-29T14:58:45-0800 2025-12-30T06:00:11-0800 https://support.ruckuswireless.com/articles/000011689 2025-12-29T15:03:41-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4693 knowledge_article_4693 2021-05-19T20:13:48-0700 000011689 Validated (External) Public P300;Ruckus P300 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, P300 Why Speedflex stopped working post upgrading P300 APs to 100.1.0.9.108 version? Enable the Speedflex (zapd) using below AP CLI commands. set zapd enable To check the status, run below command get zapd Example output: rkscli: set zapd enable Stopping zapd... killall: zapd: no process killed /etc/init.d/init_zapd: line 47: pidof: not found /etc/init.d/init_zapd: line 47: pidof: not found Starting /usr/sbin/zapd & OK rkscli: /usr/sbin/zapd version 1.83.18, Copyright (C) 2004-2006 Ruckus Wireless, Inc. All Rights Reserved. Built Nov 2 2020 at 22:52:53 rkscli: get zapd ZAPD mode is Enabled OK rkscli: Once done, Speedflex test should work. Note: Make sure both the APs (root bridge and non-root bridge) are on same firmware version.

Article explains why Speedflex may not work after upgrading the P300 to 100.1.0.9.108 and higher versions

2025-12-29T15:03:41-0800 2025-12-30T06:00:11-0800 https://support.ruckuswireless.com/articles/000014744 2025-12-29T15:11:20-0800 monthly 0.8 admin,premium knowledge_article_5734 knowledge_article_5734 2025-03-25T22:25:49-0700 000014744 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway Is it possible to migrate a zone template between two different firmware versions? The existing vSZ zone must first be upgraded to the target vSZ version. After that, the zone template should be generated and exported. Once completed, the template can be imported into the target vSZ zone and applied.

Zone template migration between different firmware versions is not compatible.

2025-12-29T15:11:20-0800 2025-12-30T06:00:10-0800 https://support.ruckuswireless.com/articles/000014532 2025-12-29T15:14:38-0800 monthly 0.8 admin knowledge_article_5592 knowledge_article_5592 2024-11-19T04:22:03-0800 000014532 Validated (External) Internal Smartcell gateway;SmartCell Gateway 200 (SCG200) System network management;Troubleshooting System Network Management, Troubleshooting, SmartCell Gateway Below error is seen inspite have enough AP capacity licenses. <img alt="User-added image" height="276" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001t45&feoid=00N50000002Cf3R&refid=0EMPH00000CFWOr" width="50 We can calculate the number of AP's in each domain and then accordingly set the "Number limit" for each Partner Domain.

In this article we will learn how to troubleshoot the error: The AP number limit you are attempting to configure exceeds the rest quota. Please check the AP license capacity and the AP number limit of all the other domains.

2025-12-29T15:14:38-0800 2025-12-30T06:00:10-0800 https://support.ruckuswireless.com/articles/000014576 2025-12-29T15:26:25-0800 monthly 0.8 admin,premium knowledge_article_5597 knowledge_article_5597 2024-11-20T07:52:50-0800 000014576 Validated (External) Premium Sz144;Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Troubleshooting Troubleshooting, SZ144, SZ300, SCG200, virtual SmartCell Gateway, SZ100 How can we take remote packet captures on SZ interfaces for troubleshooting? Follow these steps to take packet captures on SZ interfaces: <ol><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"> Login to the SZ CLI: Use an SSH client to connect to the CLI of your SZ. </li><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"> Enable Remote Capture: Execute the following commands: <pre>vsz# diagnostic vsz(diagnostic)# remote-packet-capture enable Please input the source IP address that is going to capture packet: <PC/Laptop's IP Address> </pre> You should see a message confirming: 0 successfully start rpcapd </li><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"> Set Up Wireshark on Your Local Machine: <ul><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Open Wireshark.</li><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Go to Capture Options.</li><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Under Capture: Interface, select Remote.</li><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">A dialog box labeled Remote Interface will appear.</li><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Enter the IP address of the SZ you wish to capture traffic from in the Host field.</li><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Leave the Port field blank and click OK.</li></ul> </li><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"> Select Remote Interfaces: <ul><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Wireshark will fetch a list of available interfaces from the SZ.</li><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Choose the interface(s) you want to monitor.</li></ul> </li></ol> <img alt="vSZ interfaces on Wireshark" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001t5h&feoid=00N50000002Cf3M&refid=0EMPH00000DlXh2" width="500"></img> <ul><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"> Start Packet Capture: <ul><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Click Start in Wireshark.</li><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">The live packet stream from the SZ interface will display in a new Wireshark window.</li></ul> </li></ul> <img alt="User-added image" height="270" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001t5h&feoid=00N50000002Cf3M&refid=0EMPH00000DlgU9" width="500"></img> <ul><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"> Stop Captures When Done: <ul><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Click Stop in Wireshark once you’ve collected the necessary data.</li></ul> </li><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"> Disable Remote Capture: <ul><li style="font-size: 13px;font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Return to the SZ CLI and run the following command: <pre> </pre> vsz(diagnostic)# remote-packet-capture disable 0 0 successfully stop rpcap</li></ul> </li></ul>

Steps to take remote packet captures on SZ interfaces for troubleshooting

2025-12-29T15:26:25-0800 2025-12-30T06:00:09-0800 https://support.ruckuswireless.com/articles/000012322 2025-12-29T16:40:53-0800 monthly 0.8 admin,premium knowledge_article_4930 knowledge_article_4930 2023-01-16T23:45:33-0800 000012322 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneDirector <div>How do I validate the upgrade path for ZD firmware and check if my AP models are supported?</div> <div> To upgrade ZD firmware safely, you must: <ol><li>Validate the upgrade path in the release notes.</li><li>Confirm AP model compatibility with the target firmware.</li></ol> <div> <h4>Steps to Validate Upgrade Path</h4> Example: Upgrade from 10.2.1.0.183 to 10.5.1.0.176. <ol><li>Log in to Ruckus Support Portal.</li><li>Navigate to Documentation.</li></ol> <img alt="User-added image" height="529" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tAX&feoid=00N50000002Cf3M&refid=0EM2J0000049HRp" width="1027"></img> <ol start="3"><li>Click Choose a Product ? Select ZD1200. </li></ol> <img alt="User-added image" height="535" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tAX&feoid=00N50000002Cf3M&refid=0EM2J0000049HSA" width="1028"></img> <img alt="User-added image" height="539" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tAX&feoid=00N50000002Cf3M&refid=0EM2J0000049HSE" width="1028"></img> <ol start="4"><li>Go to the Documents tab ? Select All Versions.</li><li>Choose the target firmware version (e.g., 10.5.1.0.176).</li><li>Open the Release Notes for that version.</li><li>Locate the Supported Upgrade Paths section. <ul><li>If 10.2.1.0.183 is listed, you can upgrade directly.</li></ul> </li></ol> <img alt="User-added image" height="490" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001tAX&feoid=00N50000002Cf3M&refid=0EM2J0000049HTH" width="1026"></img> <ol start="7"><li style="list-style-type: none;"> <ul><li>If not listed, check intermediate versions (e.g., 10.3.x or 10.4.x) and repeat the process.</li></ul> </li><li>Validate Supported AP Models in the release notes to ensure compatibility.</li></ol> <hr></hr> <h4>Important Notes</h4> <ul><li>If direct upgrade is not supported, perform a multi-step upgrade: <ul><li>Upgrade to an intermediate version listed in the release notes.</li><li>Then upgrade to the target version.</li></ul> </li><li>Always check AP model support in each release note before upgrading.</li></ul> <hr></hr> <h3>Best Practices</h3> <ul><li>Schedule upgrades during a maintenance window.</li><li>Back up ZD configuration before upgrading.</li><li>Review release notes for known issues and feature changes.</li></ul> </div> </div>

This article explains how to validate the upgrade path for Zone Director (ZD1200) firmware using release notes and ensure AP model compatibility before upgrading.

2025-12-29T16:40:53-0800 2025-12-30T06:00:09-0800 https://support.ruckuswireless.com/articles/000010112 2025-12-29T16:14:02-0800 monthly 0.8 admin,premium knowledge_article_4063 knowledge_article_4063 2020-02-05T15:13:41-0800 000010112 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP How do I figure out which AP a client is connected to and then download the AP support info file for that AP Getting the AP support info log is essential in diagnosing client device or AP operational issues. This file should be retrieved when the end user reports the issue and is still connected or just disconnected from the AP. First - Determine which AP a particular Client device is connected through From Monitor > Clients> Wireless Clients search for the client device MAC, authentication name or PC name: First make sure that AP MAC address is configured in settings (gear control on right side of list) <img height="495" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001t8v&feoid=00N50000002Cf3M&refid=0EM2J000000wEeD" width="366"></img> <img height="157" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001t8v&feoid=00N50000002Cf3M&refid=0EM2J000000wEew" width="1000"></img> Note - It is best to use the Client Device MAC address to search. Partial searches and common name may bring up multiple results. You can select a particular AP zone (property) to narrow search. Click on the AP MAC address to open the AP details. Note you can go directly to a list of AP's or search for AP directly and then select <img alt="User-added image" height="322" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001t8v&feoid=00N50000002Cf3M&refid=0EM2J000000wEh7" width="500"></img> Highlight the AP then click on the arrow next to more and select Download Support log. Depending on browser settings you should be prompted to open or save - it is best to save. <div>Note: </div> <ul><li>You can only download AP support info logs if the AP is in "connected" state on the SZ.</li><li>If you need to get the AP support info file for an AP that is not showing as connected it can be saved by SSH to the AP and use the CLI.</li><li>Enable logging on the SSH tool you are using and issue the following commands:</li></ul> <div style="margin-left: 40px;">support (this generates the support file) support show (this scrolls the file to the SSH log for saving) </div> <div>You can also use a remote TFTP server to receive the AP support info log - see the following article for details:</div> <div><a class="locked" href="https://support.ruckuswireless.com/articles/000004136" target="_blank">Can I extract AP support info via CLI command? <abbr title="Login Required">?</abbr></a> <div class="summary">AP CLI commands can manually extract AP support info to a TFTP server or saved SSH session output.</div> <a href="https://support.ruckuswireless.com/articles/000004136" target="_blank" title="https://support.ruckuswireless.com/articles/000004136">https://support.ruckuswireless.com/articles/000004136</a> </div>

To assist customer NOC teams with determining which AP a client is connected to and how to download the AP support info if AP is connected or not connected.

2025-12-29T16:14:02-0800 2025-12-30T06:00:09-0800 https://support.ruckuswireless.com/articles/000014554 2025-12-29T08:02:05-0800 monthly 0.8 admin,premium knowledge_article_5617 knowledge_article_5617 2024-11-27T08:24:04-0800 000014554 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway <div>How do I configure Non-Proxy HS2.0?</div> The Non-Proxy HS2.0 feature is supported starting from SmartZone software version 6.1.2-P3. <h4>Configuration Steps</h4> Step 1: Create a Non-Proxy RADIUS profile: <ul><li>Navigate to RADIUS Profiles and select RADIUS (Hotspot 2.0). <img alt="User-added image" height="411" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001sft&feoid=00N50000002Cf3M&refid=0EMPH00000DKRHV" width="859"></img></li></ul> <div> Step 2: Map the Non-Proxy RADIUS profile to the WLAN configuration: <ul><li>Go to WLAN Settings and associate the created Non-Proxy RADIUS profile <img alt="User-added image" height="509" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001sft&feoid=00N50000002Cf3M&refid=0EMPH00000DKPxF" width="893"></img> </li></ul> <div>Once completed, the Non-Proxy HS2.0 configuration is done.</div> </div>

Learn how to configure the Non-Proxy Hotspot 2.0 (HS2.0) feature on the SmartZone platform.

2025-12-29T08:02:05-0800 2025-12-29T18:00:13-0800 https://support.ruckuswireless.com/articles/000012320 2025-12-29T09:43:23-0800 monthly 0.8 admin,premium knowledge_article_4858 knowledge_article_4858 2022-07-22T14:00:13-0700 000012320 Validated (External) Premium Sz144;Sz300;Unleashed;Zonedirector;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration Configuration, SZ144, SZ300, Unleashed, ZoneDirector, SCG200, virtual SmartCell Gateway, SZ100 <div>How can I control the number of clients connecting to Access Points?</div> <div> There are three features in SZ that help control client connectivity: <hr></hr> <h4>1. Maximum Clients per WLAN</h4> <ul><li>Purpose: Limits the number of clients per AP per WLAN.</li><li>Configuration: <ul><li>Navigate to SZ GUI ? WLAN Settings.</li><li>Configure Max Clients (default: 100 per AP radio).</li><li>Example: <pre><code>Node1(config-domain-zone-wlan)# max-clients 50</code></pre> </li></ul> </li></ul> <pre></pre> <img alt="User-added image" height="61" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001sj7&feoid=00N50000002Cf3M&refid=0EM2J0000049ExE" width="610"></img><code></code> <hr></hr> <h4>2. Client Load Balancing (CLB)</h4> <ul><li>Purpose: Distributes clients across APs by disconnecting clients when better APs are available.</li><li>Configuration: <ul><li>Set at AP Zone level or override at AP Group level. <img alt="User-added image" height="173" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001sj7&feoid=00N50000002Cf3M&refid=0EM2J0000049EyH" width="715"></img></li><li>Can be disabled per WLAN. <img alt="User-added image" height="103" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001sj7&feoid=00N50000002Cf3M&refid=0EM2J0000049Ey7" width="585"></img></li></ul> </li><li>Behavior: <ul><li>Actively deauthenticates clients if conditions are met.</li><li>May cause brief outages and may not work if clients insist on reconnecting.</li></ul> </li><li>Difference from Band Steering: <ul><li>Band Steering nudges clients to 5 GHz without disconnecting them.</li></ul> </li><li>References: <ul><li>Related KBAs: <ul><li>000003632 – How to influence client load balancing?</li><li>000001849 – What is Load Balancing?</li></ul> </li></ul> </li></ul> <hr></hr> <h4>3. Client Admission Control (CAC)</h4> <ul><li>Purpose: Controls client connectivity based on AP radio load and client throughput.</li><li>Configuration: <ul><li>Set at AP Zone level or override at AP Group level. <img alt="User-added image" height="222" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001sj7&feoid=00N50000002Cf3M&refid=0EM2J0000049EvO" width="991"></img></li></ul> </li><li>Behavior: <ul><li>Blocks new clients when AP load exceeds configured thresholds.</li><li>Ensures clients meet minimum throughput requirements (MCS rate).</li><li>Cannot be used with CLB.</li></ul> </li><li><img alt="User-added image" height="391" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001sj7&feoid=00N50000002Cf3M&refid=0EM2J0000049Ez5" width="698"></img> <img alt="User-added image" height="438" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001sj7&feoid=00N50000002Cf3M&refid=0EM2J0000049EzA" width="782"></img></li><li><img alt="User-added image" height="338" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001sj7&feoid=00N50000002Cf3M&refid=0EM2J0000049EzK" width="604"></img></li></ul> <hr></hr> <h3>Important Notes</h3> <ul><li>Most GUI configurations are also available via SZ CLI.</li><li>Controller configurations override direct AP CLI settings.</li><li>Use caution with CLB as it may cause temporary connectivity issues.</li></ul> </div>

This article explains three mechanisms available in SmartZone (SZ) to control the number of client devices connecting to Access Points (APs): Maximum Clients per WLAN Client Load Balancing (CLB) Client Admission Control (CAC)

2025-12-29T09:43:23-0800 2025-12-29T18:00:12-0800 https://support.ruckuswireless.com/articles/000011255 2025-12-29T08:26:22-0800 monthly 0.8 admin,premium knowledge_article_4494 knowledge_article_4494 2021-01-29T10:47:40-0800 000011255 Validated (External) Premium Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway <div>How can I limit the total number of wireless clients that can associate to an AP?</div> <h4>For APs Managed by ZoneDirector (ZD):</h4> <ol><li>Navigate to Access Points ? Select the preferred AP Group.</li><li>Edit the group configuration.</li><li>Under Model Specific Control, select the AP model.</li><li>Enter the desired value for Max Clients.</li><li>Click OK to save changes.Click OK<img alt="User-added image" height="232" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001shV&feoid=00N50000002Cf3M&refid=0EM2J000002JPgs" width="859"></img> <div> </div> </li></ol> <div> <h4>For APs Managed by SmartZone (SZ):</h4> <ul><li>Currently, SZ does not provide an option to configure max clients per AP via UI or CLI.</li><li>A Feature Request (FR-4928) has been raised to include this functionality in future releases.</li></ul> </div>

This article explains how to limit the maximum number of wireless clients that can associate with an Access Point (AP) on a per-AP basis.

2025-12-29T08:26:22-0800 2025-12-29T18:00:12-0800 https://support.ruckuswireless.com/articles/000010590 2025-12-29T05:05:33-0800 monthly 0.8 admin,premium knowledge_article_4320 knowledge_article_4320 2020-07-27T01:50:01-0700 000010590 Validated (External) Premium Sz144;Sz300;Ruckus icx switches;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ144, SZ300, Ruckus ICX Switches, virtual SmartCell Gateway, SZ100 <div>Can I get console access to an ICX switch via the vSZ/SZ WebGUI?</div> <div> Yes. Starting from vSZ/SZ version 5.2.1, a feature called Remote Console is available in the WebGUI, allowing CLI access to ICX switches. <h4>Steps to Access Remote Console</h4> <ol><li>Login to the vSZ/SZ WebGUI.</li><li>Navigate to the Switches tab.</li><li>Select the ICX switch you want to access.</li><li>Click on the More button.</li><li>Choose the last option in the list: CLI Session.</li><li>A remote console window will open, allowing you to run CLI commands on the switch </li></ol> </div> <img alt="User-added image" height="346" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001seH&feoid=00N50000002Cf3M&refid=0EM2J000001TPsG" width="715"></img>

Explains how to access the console of an ICX switch through the vSZ/SZ WebGUI to configure CLI commands.

2025-12-29T05:05:33-0800 2025-12-29T14:00:08-0800 https://support.ruckuswireless.com/articles/000010566 2025-12-26T06:19:14-0800 monthly 0.8 admin,premium knowledge_article_6007 knowledge_article_6007 2020-06-03T01:24:59-0700 000010566 Validated (External) Premium Icx 7850;Ruckus cloud switch;Icx 7550;Icx 7650;Icx 7150;Icx 7750;RUCKUS ICX 7850 Campus Switches;RUCKUS ICX 7550 Campus Switches ;RUCKUS ICX 7650 Campus Switches;RUCKUS ICX 7150 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration;Installation;Registration Configuration, Installation, Registration, ICX 7850, Ruckus Cloud Switch, ICX 7550, ICX 7650, ICX 7150, ICX 7750 <div>How to add an existing ICX Stack to the Ruckus Cloud account?</div> <div> Follow the steps below to add an ICX stack to the Ruckus Cloud account: <ol><li> Login to your Ruckus Cloud account at <a href="https://ruckus.cloud" target="_blank">https://ruckus.cloud</a>. </li><li> Navigate to Wired ? Switch List ? Add ? Switch Stack. </li><li> On the ICX stack, run the following command to get the serial numbers of the units: <pre><code>ICX# show version | in Serial Serial #: FEC3235N00A Serial #: FEC3221N04X Serial #: FJN3221P0MR </code></pre> </li><li> Enable Cloud connectivity by running: <pre><code>ICX# manager connect </code></pre> </li><li> Fill in the following fields: <ul><li>Venue: Select the venue for deployment.</li><li>Stack Name: Enter a name for the stack.</li><li>Description: (Optional) Add a brief description.</li><li>Serial Number: Enter the 11-digit valid serial numbers of the switches. Use Add another member to include more switches.</li></ul> </li><li> Click Add to complete the process. </li><li> Verify the addition: <ul><li>Check the Cloud portal, or</li><li>Run: <pre><code>ICX# show manager status </code></pre> Example output: <pre><code>============ MGMT Agent State Info =================== Config Status: None Operation Status: Enabled State: CLOUD SSH CONNECTED Prev State: CLOUD SSH CONNECTING Event: NONE </code></pre> </li></ul> </li><li> Optional: To replace a stack switch member, update the status and click Acknowledge on the Stack Detail page to apply changes. Attaching a document for the steps to replace a stack member </li></ol> <hr></hr> <h3>Current Stack and VLAN Limits (Based on ICX Firmware)</h3> <ul><li> 10.0.10c <ul><li>12 stack members / 1000 VLANs</li><li>Supported models: ICX 7550, 7650, 7850, 8200</li></ul> </li><li> 10.0.10g <ul><li>8 stack members / 800 VLANs</li><li>Supported model: ICX 7150, other models remain unchanged as above</li></ul> </li><li> 9.0.10j <ul><li>4 stack members / 400 VLANs for ICX 7150</li><li>8 stack members / 1000 VLANs for ICX 7550, 7650, 7850</li></ul> </li></ul> <hr></hr> <h3>Things to Remember</h3> <ul><li>Ensure DNS configuration and internet reachability on the stack.</li><li>IP address assignment on physical or VE interfaces is recommended.</li><li>FI 08.0.95 and newer releases recommended.</li><li>Switch will upgrade to the latest firmware as per venue settings.</li><li>Firmware can be managed under Administration ? Version Management ? Switch Firmware.</li><li>Adding a single switch follows a similar process.</li></ul> </div>

This document describes the process of adding an ICX stack to a Ruckus Cloud or Ruckus One (R1) account and includes current stack and VLAN limits based on ICX firmware versions.

2025-12-26T06:19:14-0800 2025-12-29T06:00:10-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000PiaKSAS?attachment_index=0 2025-12-29T06:00:10-0800 monthly admin,premium knowledge_article_6007 knowledge_article_6007_attachment_1 add stack tab.png 18876.0 image/png http://support.ruckuswireless.com/article_attachments/kA22J000000PiaKSAS?attachment_index=1 2025-12-29T06:00:10-0800 monthly admin,premium knowledge_article_6007 knowledge_article_6007_attachment_1 add serial numbers.png 25724.0 image/png http://support.ruckuswireless.com/article_attachments/kA22J000000PiaKSAS?attachment_index=2 2025-12-29T06:00:10-0800 monthly admin,premium knowledge_article_6007 knowledge_article_6007_attachment_1 verify the stack connection.png 61930.0 image/png https://support.ruckuswireless.com/articles/000014946 2025-12-26T06:59:36-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5871 knowledge_article_5871 2025-09-25T03:40:01-0700 000014946 Validated (External) Public Ruckus cloud switch;Ruckus icx switches Configuration;Installation Configuration, Installation, Ruckus Cloud Switch, Ruckus ICX Switches What is the current stack limit for ICX 7150 in Ruckus One? R1 has now been enhanced to support up to 8-member stacks for ICX 7150 switches. To take advantage of this: <ul><li>Ensure the venues for ICX 7150 switches are running firmware version 10.0.10g or later.</li><li>Reattempt stack expansion after verifying ICX firmware</li></ul>

Ruckus One (R1) now supports managing up to an 8-member stack for ICX 7150 switches. This enhancement addresses the previous limitation of 4-member stacks in earlier R1 versions, despite firmware support for higher stack sizes.

2025-12-26T06:59:36-0800 2025-12-29T06:00:09-0800 https://support.ruckuswireless.com/articles/000014536 2025-12-26T07:08:36-0800 monthly 0.8 admin,premium knowledge_article_5794 knowledge_article_5794 2025-07-01T20:24:11-0700 000014536 Validated (External) Premium Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi How to configure Syslog Service and enable Client Flow log in RUCKUS One? Syslog helps in network troubleshooting. We can send AP logs to an external syslog server to preserve logs for longer duration. Additionally, we can send Client Flow logs to the syslog server. Client flow logs are records of network traffic associated with client applications, providing insights into how applications communicate with each other and with externa services. They are valuable for troubleshooting, security analysis, and performance optimization. These logs capture details like source and destination IP addresses, port. protocols. <h2> Prerequisites:</h2> <ul><li>External syslog server in public or local network.</li><li>Reachability from AP to Syslog Server.</li><li>Port 514 allowed in firewall for TCP & UDP communication.</li><li>Venue and WLAN preconfigured.</li></ul> <h2>Configuration Steps:</h2> <h3>Step1: Configure Syslog Service and assign it to the Venue</h3> Navigate to Network Control > Policies & Profile > Syslog server and click on "Add Syslog Server" button. <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001rS5&feoid=00N50000002Cf3M&refid=0EMPH00000M49Hl" width="1000"></img> Complete the following fields and click on "Next" button. <ul><li>Policy Name: Enter a unique name for the Syslog Server Profile</li><li>Primary Server: IP address, port number and protocol TCP/UDP. Additionally, configure Secondary server if available.</li><li>Event Facility: Select the facility level for the outgoing syslog messages that specifies the process which created the syslog message. Options include: Keep Original, 0 (Kernel messages), 1 (user-level messages), 2 (mail system), 3 (system daemons), 4 (authorization messages), 5 (messages generated by syslog), 6 (line printer subsystem), 7 (network news subsystem).</li><li>Sent Logs: Choose to send the General Logs, Client Flow or All Logs.</li></ul> <img alt="User-added image" height="600" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001rS5&feoid=00N50000002Cf3M&refid=0EMPH00000M4CAn" width="800"></img> Select the Venue from the table, and click Activate option at the top of the table or in the Activate for Wi-Fi column use the toggle to Activate the selected venue. Then, click on "Next" button. <img alt="User-added image" height="600" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001rS5&feoid=00N50000002Cf3M&refid=0EMPH00000M4B1p" width="800"></img> Review configuration summary and click on "add" button. <img alt="User-added image" height="600" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001rS5&feoid=00N50000002Cf3M&refid=0EMPH00000M4C7Z" width="800"></img> Now, Syslog Service is assigned to the venue. <img alt="User-added image" height="200" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001rS5&feoid=00N50000002Cf3M&refid=0EMPH00000M4Ch3" width="800"></img> <h3> Step2: Enable Client Flow logs for the SSID</h3> Navigate to Wi-Fi > Wi-Fi Networks > Wi-Fi NEtwork List and select the WLAN from the table. Then, client on "Edit" button. <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001rS5&feoid=00N50000002Cf3M&refid=0EMPH00000M46AE" width="800"></img> Select More Settings > Network Control tab and enable "Logging client data to external syslog". Then, client on "Apply" button. <img alt="User-added image" height="500" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001rS5&feoid=00N50000002Cf3M&refid=0EMPH00000M44rb" width="800"></img> Client flow logs will be forwarded to the external syslog server only if the "Logging client data to external syslog" option is enabled in the WLAN Settings and the Syslog Profile assigned to the venue is configured with the Send Log option set to either "Client Flow" or "All Logs".

This article explains how to set up an external syslog server with RUCKUS One for advance network monitoring and diagnostics. Syslog centralizes log data from Access Points (APs), enabling long-term storage and streamlined analysis. A key feature covered is Client Flow logging, which captures data on network traffic from client applications—useful for troubleshooting, security, and performance tuning.

2025-12-26T07:08:36-0800 2025-12-29T06:00:09-0800 https://support.ruckuswireless.com/articles/000010976 2025-12-26T07:19:41-0800 monthly 0.8 admin,premium knowledge_article_4437 knowledge_article_4437 2020-10-12T01:10:25-0700 000010976 Validated (External) Premium Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, ZoneDirector, SmartCell Gateway What is the portal FQDN used by APs while using wildcard certificate for Web Authentication A different certificate can be uploaded and used for Web Authentication

Portal FQDN used by APs while using wildcard certificate with name*.xyz.com for Web Authentication

2025-12-26T07:19:41-0800 2025-12-29T06:00:09-0800 https://support.ruckuswireless.com/articles/000014629 2025-12-26T12:01:50-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6011 knowledge_article_6011 2024-12-11T14:52:14-0800 000014629 Validated (External) Public Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi How to Disable AP radios in Ruckus Cloud? The Ruckus Cloud managed APs will have all radios enabled by default. In circumstances where the site survey or infrastructure demands some radios to be turned off, we need to do the configuration change from each AP on Ruckus Cloud. 1. On the navigation bar, click Wi-Fi > Access Points > AP List. The AP List page is displayed. 2. Click the name of the AP for which you want to customize the AP radio settings, then on the Overview page, click Configure. Alternatively, click the checkbox for the specific AP name, then click Edit. 3. Select the Radio tab >> Select the Radio Band (2.4GHz/5GHz/6GHz) and then Click on Customize <img alt="Select the Radio band and Click on Customize" height="210" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001rFB&feoid=00N50000002Cf3M&refid=0EMPH00000EcRjt" width="500"></img> Note: By default, the Wi-Fi Radio Settings page is displayed. The default setting is to use the radio settings of the venue (the fields are all inactive and grayed out). To customize any of the radio settings, click the Customize option; the fields become active, allowing you to modify the settings. The AP configuration page is displayed. By default, the General tab is displayed. 4. Use the Toggle button to disable the radio >> Click on Apply <img alt="Toggle the enable button" height="200" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001rFB&feoid=00N50000002Cf3M&refid=0EMPH00000EcSXt" width="500"></img> Note: Unlike the other radio options, the radio enable/disable option is only available in AP Configuration page and not available in Venue or AP Group level. To revert the changes or use the same settings as Venue, click on Use Venue Settings.

This article explains the process to disable AP radios in Ruckus Cloud.

2025-12-26T12:01:50-0800 2025-12-29T06:00:08-0800 https://support.ruckuswireless.com/articles/000014680 2025-12-26T12:04:02-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6010 knowledge_article_6010 2025-02-05T09:48:17-0800 000014680 Validated (External) Public Sz300;Sz100d;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) System network management;Troubleshooting System Network Management, Troubleshooting, SZ300, SZ100D, virtual SmartCell Gateway, SZ100 Is it possible to login to CLI of SZ/vSZ via SSH client using local user credentials? By design, SSH to SZ/VSZ is only possible via admin credentials. Users cannot SSH VSZ/SZ via local user credentials.

This article explains why local user accounts on SZ/vSZ cannot access the SZ/vSZ CLI using local user credentials

2025-12-26T12:04:02-0800 2025-12-29T06:00:08-0800 https://support.ruckuswireless.com/articles/000014624 2025-12-26T12:05:08-0800 monthly 0.8 admin,premium knowledge_article_6009 knowledge_article_6009 2024-12-06T02:21:46-0800 000014624 Validated (External) Premium Ruckus cloud wifi Known issues and workarounds Known Issues and Workarounds, Ruckus Cloud WiFi Why do some 802.1x wireless clients get de-authenticated during a delayed authentication period? 1. The default authentication inactivity timeout for EAP was set to a default value of 12 seconds in R1 for Wifi6e APs. 2. This has now been increased to 60 with the release of 7.0.0.300.6497 in October 2024. 3. AP patches 7.0 P5 and 7.0 P6 carry the same enhancement in the SZ AP firmware.

A smaller inactivity timeout value doesn't help in cases where wireless clients undergo a prolonged authentication interval. An increase in this value is necessary for such wireless clients.

2025-12-26T12:05:08-0800 2025-12-29T06:00:07-0800 https://support.ruckuswireless.com/articles/000014833 2025-12-26T12:08:39-0800 monthly 0.8 admin,premium knowledge_article_6008 knowledge_article_6008 2025-05-26T18:14:33-0700 000014833 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Gateway The customer upgraded 8000 APs from R5.2.2 to R6.1.2, but 320 APs keeps status 'new configuration'. SZ/AP uses OpenSSH after R6.1.2, so it can not be avoided by SZ/AP configuration. The customer needs to configure DSCP value as CS0 on the broadband router.

This Article will explain why some of the APs stuck in 'new configuration' status after upgrade to R6.1.2 from R5.2.0.

2025-12-26T12:08:39-0800 2025-12-29T06:00:07-0800 https://support.ruckuswireless.com/articles/000015118 2025-12-26T05:14:09-0800 monthly 0.8 admin,premium knowledge_article_5912 knowledge_article_5912 2025-11-12T02:49:21-0800 000015118 Validated (External) Premium Ruckus cloud wifi Performance;Configuration Performance, Configuration, Ruckus Cloud WiFi Does Ruckus-One support L3 Roaming? Layer 3 roaming allows wireless clients to move between APs across different IP subnets while maintaining seamless session continuity. Most common deployments are large campus networks designed with multiple switches and VLANs and there is a need to support L3 Roaming. In customer deployments using Ruckus One, Layer 3 roaming is not supported. Clients can roam seamlessly within the same subnet (Layer 2 roaming), but cross-subnet mobility is not available on this platform. This limitation is by design.

This article outlines the roaming capabilities available in Ruckus One.

2025-12-26T05:14:09-0800 2025-12-26T14:00:10-0800 https://support.ruckuswireless.com/articles/000012095 2025-12-26T04:57:19-0800 monthly 0.8 admin,premium knowledge_article_4810 knowledge_article_4810 2022-02-14T21:02:18-0800 000012095 Validated (External) Premium M510 unl;Ruckus cloud wifi;M510;Ruckus M510;Ruckus M510-JP Installation;Known issues and workarounds Installation, Known Issues and Workarounds, M510 UNL, Ruckus Cloud WiFi, M510 Why my client on a M510 managed access point is not getting IP address For Ruckus One: Make sure that DHCP service is configured on per AP basis for M510 APs. To configure, go to Venue > Select the venue > Services > DHCP > WIFI > Enable DHCP service > Choose "Simple DHCP". For Unleashed: Only gateway mode is supported, hence configuring local DHCP is must. Refer the user guide for more details at https://docs.commscope.com/bundle/unleashed-200.10-onlinehelp/page/GUID-4DFC6122-3C54-4B65-9CAA-06FFB274CB45.html

This article explaines a design limitation of M510 where it doesn't pass IP to clients if local DHCP server is not configured.

2025-12-26T04:57:19-0800 2025-12-26T14:00:10-0800 https://support.ruckuswireless.com/articles/000010535 2025-12-25T08:02:57-0800 monthly 0.8 admin,premium knowledge_article_4205 knowledge_article_4205 2020-05-22T10:51:48-0700 000010535 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Firmware;Troubleshooting Firmware, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor How to find MD5CheckSum value of AP firmware Image MD5CheckSum value of an AP image is available in AP Support log file. Open the AP support info file and look at SW Images on Flash column. ### SW Images on Flash ### #Main image Control+Header Info# <Control Info> control file /writable/fw/main.cntl not in flash <Image1 FW header> Magic: RCKS next_image: 0x160000 invalid: 0 hdr_len: 160 compression: l7 load_address: 0x0 entry_point: 0x0 timestamp: Fri Feb 21 01:33:14 2020 binl7_len: 10350432 hdr_version: 4 hdr_cksum: 0xFFE7 version: 10.2.1.0.159 ( 10.2.1.0.159 ) MD5: 54853CF5B25C80895A496B6984873B19 => MD5 Checksum Value of AP Firmware Image product: zf7982 (0) architecture: 0 chipset: 2 board_type: 0 board_class: 4 customer: Image Sign Type: Fully Signed Image(FSI). #Back-UP image Control+Header Info# <Control Info> control file /writable/fw/bkup.cntl not in flash <Image2 FW header> Magic: RCKS next_image: 0x1b0000 invalid: 0 hdr_len: 160 compression: l7 load_address: 0x0 entry_point: 0x0 timestamp: Tue May 9 14:05:55 2017 binl7_len: 10979164 hdr_version: 4 hdr_cksum: 0x932F version: 10.0.0.0.1424 ( 10.0.0.0.1424 ) MD5: 6D7EE9E453347BA8112280246E157EA7 => MD5 Checksum Value of AP Firmware Image product: zf7982 (0) architecture: 0 chipset: 2 board_type: 0 board_class: 4 customer: Image Sign Type: Intermediate Signed Image(ISI). Tail start: 0xa77f60

This article explains on how to find MD5CheckSum Value of an AP Image

2025-12-25T08:02:57-0800 2025-12-26T06:00:09-0800 https://support.ruckuswireless.com/articles/000010520 2025-12-25T13:22:22-0800 monthly 0.8 admin,premium knowledge_article_4199 knowledge_article_4199 2020-05-17T14:39:43-0700 000010520 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway, SmartCell AP How to resolve AP CLI error mb pool has been initialized already! ? Wait 5 minutes after AP reboot or AP channel changes If chanbkgndscan is disabled, please enable before trying again <pre class="ckeditor_codeblock">rkscli> get rpmkey chanbkgndscan-enable rkscli> chanbkgndscan-enable='0' rkscli> set rpmkey chanbkgndscan-enable 1 rkscli> get rpmkey chanbkgndscan-enable rkscli> chanbkgndscan-enable='1'</pre>

This article describes the conditions that may trigger error message mb pool has been initialized already!

2025-12-25T13:22:22-0800 2025-12-26T06:00:08-0800 https://support.ruckuswireless.com/articles/000010519 2025-12-25T13:29:25-0800 monthly 0.8 admin,premium knowledge_article_4398 knowledge_article_4398 2020-09-11T10:19:32-0700 000010519 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway <div>Why does the system time zone on the target cluster update to match the source active cluster time zone?</div> <div>Geo-Redundancy ensures full configuration replication between geographically separated clusters for high availability and redundancy.</div> <div>As part of this process, the system time zone is considered a cluster-level configuration and is synchronized from the source active cluster to the target cluster.</div> <div>This behavior is expected and cannot be disabled.</div>

This article explains why the system time zone on the target cluster is overwritten during Geo-Redundancy configuration synchronization.

2025-12-25T13:29:25-0800 2025-12-26T06:00:08-0800 https://support.ruckuswireless.com/articles/000011479 2025-12-25T06:29:34-0800 monthly 0.8 admin,premium knowledge_article_6006 knowledge_article_6006 2021-03-16T08:08:45-0700 000011479 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security Configuration, Security, SmartCell Gateway How do I create a user on the SZ that can modify their own password and the password of any other user but can't change any other configurations. Create login: 1.Go to Administration >> Admins and Roles >> Administrators tab >> and click on “Create” 2. Fill in the form with the admin name (I used “Password”), and set a password for the account, then click OK. Note, the system will warn you that you have to add a resource group for this user, or login will fail, that is the next step… <div style="margin-left: 8px;"><img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qXd&feoid=00N50000002Cf3M&refid=0EM2J00000243tq"></img></div> Create Users Resource group: 1. Go to Administration >> Admins and Roles >> Groups tab >> and click on “Create” 2. Set Group Name desired (I called mine “Password”), Permissions to “Custom”, and Account Security to “Default”… Click Next to go to Resources. 3. Click on the Gray box “Admins” and click the right-pointing arrows to add it to “Selected Resources”. Click Next to go to Domain. 4. Click on “System” and then click on the right-pointing arrow to add it to “Selected Domains”. Click Next to go to Administrators. 5. Click on the User “Password” and then click the right-pointing arrow to add it to “Selected Users”. Click Next. 6. The final screen is a review; it should look like below. Click OK to save. <div style="margin-left: 8px;"> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qXd&feoid=00N50000002Cf3M&refid=0EM2J00000243u5"></img> <img alt="User-added image" height="237" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qXd&feoid=00N50000002Cf3M&refid=0EM2J00000243uP" width="500"></img> <img alt="User-added image" height="352" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qXd&feoid=00N50000002Cf3M&refid=0EM2J00000243ue" width="500"></img> <img alt="User-added image" height="349" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qXd&feoid=00N50000002Cf3M&refid=0EM2J00000243uj" width="500"></img> <img alt="User-added image" height="358" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qXd&feoid=00N50000002Cf3M&refid=0EM2J00000243vX" width="500"></img> <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qXd&feoid=00N50000002Cf3M&refid=0EM2J00000243ut" width="500"></img></div> Now you can log in using those credentials, and that user can change the passwords for each user as well as edit resource group settings, on all accounts EXCEPT the master admin account. Log in with a new user – limited options: <img alt="User-added image" height="129" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qXd&feoid=00N50000002Cf3M&refid=0EM2J00000243vw" width="500"></img> Modify the password for another account: <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qXd&feoid=00N50000002Cf3M&refid=0EM2J00000243w6"></img>

This article explains the configuration details for creating an SZ/vSZ user account that is restricted to changing passwords for its own account and other accounts.

2025-12-25T06:29:34-0800 2025-12-25T14:00:08-0800 https://support.ruckuswireless.com/articles/000014832 2025-12-25T06:30:16-0800 monthly 0.8 admin,premium knowledge_article_6005 knowledge_article_6005 2025-05-26T08:10:38-0700 000014832 Validated (External) Premium Cloudpath;Smartcell gateway;Cloudpath Enrollment System (ES);BPG_Cloudpath;SmartCell Gateway 200 (SCG200) Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, Cloudpath, SmartCell Gateway Why clients fail to authenticate when RadSec is enabled in Cloudpath? Trusted CA certificate needs to be imported to controller RadSec, or RADIUS over TLS, is a protocol that utilizes TLS (Transport Layer Security) to encrypt and secure RADIUS traffic. It's essentially a way to transport RADIUS packets securely over a network, especially when they need to travel across untrusted networks. Step 1: Download Radius server certificate from Cloudpath (Make sure 'CA Admin' role assigned to Admin user in order to download the certificate) Go to > Configuration > RADIUS Server > RADIUS Server Certificate > Downloads > click 'Chain' <img alt="User-added image" height="369" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qW1&feoid=00N50000002Cf3M&refid=0EMPH00000KeGaP" width="1030"></img> Step 2: Import a trusted CA to controller. When controller received a server's certificate, controller will match the server's CA against the controller's list of trusted CA. If there is not match, controller will send a error. Import the 'Chain' certificate which has been downloaded from 'Cloudpath Radius server' under Step 1 Go to > Administration > System > Certificates > SZ Trusted CA Certificates/Chain (external) List > Import <img alt="User-added image" height="436" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qW1&feoid=00N50000002Cf3M&refid=0EMPH00000KeGvN" width="689"></img> Click 'Validate' then 'OK' if validation passes <img alt="User-added image" height="780" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qW1&feoid=00N50000002Cf3M&refid=0EMPH00000KeQpt" width="691"></img>

How to configure RadSec in Cloudpath and vSZ/SZ

2025-12-25T06:30:16-0800 2025-12-25T14:00:08-0800 https://support.ruckuswireless.com/articles/000014311 2025-12-25T06:31:07-0800 monthly 0.8 admin,premium knowledge_article_6004 knowledge_article_6004 2024-05-16T07:43:10-0700 000014311 Validated (External) Premium R770;RUCKUS R770 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, R770 How to change the R770 to follow the Wifi 6E standard and disable Wifi 7 In the Webgui it is currently not possible to set the wifi standard from Wifi 7 to Wifi 6E. This change is only possible via AP CLI. The default setting on the R770 for Wifi 7 is. rkscli: get mode wifi1 wifi1 Mode: 11aeht To change it to Wifi 6E use the following AP CLI command. rkscli: set mode wifi1 11ahe ok. With the following command you can validate that the AP is set for Wifi 6E rkscli: get mode wifi1 wifi1 Mode: 11ahe

AP CLI command to change the R770 from Wifi 7 to Wifi 6E.

2025-12-25T06:31:07-0800 2025-12-25T14:00:07-0800 https://support.ruckuswireless.com/articles/000012512 2025-12-24T08:45:18-0800 monthly 0.8 admin,premium knowledge_article_4914 knowledge_article_4914 2022-10-21T16:19:06-0700 000012512 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway <div>Why am I unable to shut down the AP Ethernet port from the SZ GUI in version 5.2.X.X?</div> <div>When Dynamic WAN Port Detection is enabled in DHCP NAT configuration, AP Ethernet ports cannot be controlled from the SZ UI.</div> <div>This is expected behavior.In R5.2.X, the Port Settings screen does not indicate this limitation.</div> <img alt="User-added image" height="267" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001q7p&feoid=00N50000002Cf3M&refid=0EM2J000004MY5B" width="651"></img> Starting from R6.0 and higher, a relevant message is displayed on the Port Settings screen to avoid confusion. <img alt="User-added image" height="394" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001q7p&feoid=00N50000002Cf3M&refid=0EM2J000004MY5G" width="648"></img>

When DHCP NAT is enabled at the Zone level, the AP Ethernet port (eth0) cannot be shut down from the SZ GUI.

2025-12-24T08:45:18-0800 2025-12-25T10:00:10-0800 https://support.ruckuswireless.com/articles/000012277 2025-12-24T08:56:59-0800 monthly 0.8 admin,premium knowledge_article_4850 knowledge_article_4850 2022-06-30T11:30:53-0700 000012277 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SmartCell Gateway, SmartCell AP <div>How do I use the AP SWAP feature in the SZ GUI?</div> <div> The AP SWAP feature simplifies AP replacement by creating a new AP record with the same configuration as an existing AP without manual reconfiguration. Important Notes: <ul><li>The swap-in AP must not be configured or connected in SZ before the swap (including staging zone).</li><li>After the swap, the new AP must register with SZ to apply the configuration.</li><li>AP licenses are counted for all configured APs that have joined, regardless of online status.</li></ul> Methods to Perform Swap: <ol><li> Manual Swap for Individual APs From the AP configuration page in SZ GUI. <img alt="User-added image" height="118" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001q9R&feoid=00N50000002Cf3M&refid=0EM2J000003A4qc" width="546"></img> </li><li> Batch Swap Using CSV Upload a CSV file to swap multiple APs at once. <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001q9R&feoid=00N50000002Cf3M&refid=0EM2J000003A4qr"></img> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001q9R&feoid=00N50000002Cf3M&refid=0EM2J000003A4qw"></img> </li></ol> For detailed steps, refer to the vSZ Administrator Guide </div>

The AP SWAP feature in the SmartZone (SZ) GUI allows administrators to swap AP MAC and model details for an existing AP record in SZ, typically used during AP replacement.

2025-12-24T08:56:59-0800 2025-12-25T10:00:10-0800 https://support.ruckuswireless.com/articles/000012418 2025-12-24T11:30:31-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4864 knowledge_article_4864 2022-08-16T00:16:37-0700 000012418 Validated (External) Public Unleashed;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Installation Configuration, Installation, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor <div>How do I factory reset or factory default different types of Ruckus Access Points?</div> There are different type of Ruckus Access points and majorly categorized in below categories. <ol><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"> <h1>Indoor APs.</h1> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">RXX0 series (Standard Indoor)</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">HXX0 series (Wall-Mounted)</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">MXX0 series (Mobile Indoor)</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">CXX0 series (Cable modem - Indoor Wall Mounted)</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">ZoneFlex or ZFXXXX series (EOL)</li></ul> </li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';"> <h1>Outdoor APs</h1> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">TXX0 series (Standard Outdoor)</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">TXX0 series CM (Outdoor - Cable modem)</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">EXX0 Series (Embedded)</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">ZoneFlex or ZFXXXX series (EOL)</li></ul> </li></ol> Here XX0 stands for first two digits of different AP model numbers, like 310, 510, 610, 710, etc. <h1 style="text-align: center;">Reset/FD (factory default) physical button location for Indoor APs</h1> <h2>R series</h2> In R series Ruckus has many different AP models and though physical layout may look different for each AP, reset button is always located near the ethernet port or in some APs near the USB port. One thing to note, in R series APs there will be single Reset button. Pushing the button just once and releasing it will do a restart (power cycle). Pushing and holding the button for 8 seconds or more will factory default the AP settings. <img alt="User-added image" height="372" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qJ7&feoid=00N50000002Cf3M&refid=0EM2J0000042sDW" width="500"></img> <h2>H series</h2> In H series APs you will find two separate buttons. One for "Reset" (Reboot the AP) and other for Factory Default (FD). <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qJ7&feoid=00N50000002Cf3M&refid=0EM2J0000042sCY"></img> <h2>M series</h2> <img alt="User-added image" height="250" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qJ7&feoid=00N50000002Cf3M&refid=0EM2J0000042sDq" width="500"></img> <h2>C series (Indoor Wall Mounted)</h2> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qJ7&feoid=00N50000002Cf3M&refid=0EM2J0000042sEy"></img> <h2>ZoneFlex (ZF) series (EOL)</h2> All (most) older RUCKUS access points models starts with ZF has the similar physical layout as the newer access points. Just identify the type of your AP (Indoor, outdoor, Wall mounted, etc) and refer the same information given for new AP models. <h1 style="text-align: center;">Reset/FD (factory default) physical button location for Outdoor APs</h1> <h2>T series (Standard Outdoor)</h2> You can reset the AP factory default settings by pressing the reset button behind the access plug covering the Ethernet port (PoE IN port). <img alt="User-added image" height="387" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qJ7&feoid=00N50000002Cf3M&refid=0EM2J0000042sHO" width="500"></img><img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qJ7&feoid=00N50000002Cf3M&refid=0EM2J0000042sHA"></img> Note: Your AP layout may look different but reset button is always hidden inside the PoE IN plug covering the Ethernet port for all Ruckus outdoor APs. <h2> C series (Cable modem - Outdoor)</h2> <img alt="User-added image" height="461" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qJ7&feoid=00N50000002Cf3M&refid=0EM2J0000042sF3" width="500"></img> <h2>E Series (Embedded)</h2> <img alt="User-added image" height="283" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qJ7&feoid=00N50000002Cf3M&refid=0EM2J0000042sIH" width="500"></img> Note: Remember to replace the Torx screw covering the Reset button after use. Insert the screw and torque to 4 in-lbs. <h2>ZoneFlex (ZF) series (EOL)</h2> All (most) older RUCKUS access points models starts with ZF has the similar physical layout as the newer access point. Just identify the type of your AP (Indoor, outdoor, Wall mounted, etc) and refer the same information give for new AP models. <h1 style="text-align: center;">Procedure for physical factory reset or hard reset.</h1> <ol><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Identify the type of AP model from the above list.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Find a paper clip or the clip which came with your RUCKUS AP.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Make sure AP is power ON while you perform reset.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">To factory reset, locate the Reset (FD button for Wall Mount APs).</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Push the button with clip and hold it for 10 seconds (8 seconds are required but to make sure reset is done correctly, use 10 seconds).</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Release button and let the AP factory reset and boot.</li></ol> <h1 style="text-align: center;">Procedure to factory reset the AP using AP CLI</h1> <ol><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Locate the AP IP address</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Use a terminal application like Putty and SSH into the AP IP address</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Type the AP's CLI admin username and password (this depends upon how AP is being managed) <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">For ZoneDirector managed APs username password will be the same as Zone Director admin credentials.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">For Unleashed also it will be the same as your Unleashed master AP.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">For SmartZone managed APs it will be the user name password set in AP Zone's settings.</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">In default state AP's default user name and password is: super/sp-admin </li></ul> </li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';">Now run the commands "set factory" followed by "reboot".</li></ol>

This article explains both physical and CLI-based factory reset procedures for different types of Ruckus Access Points (APs).

2025-12-24T11:30:31-0800 2025-12-25T10:00:09-0800 https://support.ruckuswireless.com/articles/000014247 2025-12-24T11:19:01-0800 monthly 0.8 admin,premium knowledge_article_5062 knowledge_article_5062 2023-09-10T23:31:40-0700 000014247 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, SmartCell Gateway <div>What is the purpose of the commonAttribute in API calls related to zone-level AP models?</div> <div> The commonAttribute API is a read-only GET call introduced in SZ version 3.5.1. It returns a list of supported features for a specific AP model within a zone, based on the AP firmware version running in that zone. Scope: <ul><li>Zone-level only (attributes depend on zone firmware version).</li></ul> Category: <ul><li><code>RksZone ? AP Model Common Attribute</code></li></ul> Base URL: <pre><code>/rkszones/{id}/apmodel/{model}/commonAttribute </code></pre> Use Case: <ul><li>Fetch AP model common attribute details for a given zone.</li></ul> API Method: <pre><code>GET {BaseURL} </code></pre> <hr></hr> <h4>Sample Output (vSZ 5.2.2) </h4> <pre style="border: none;padding: 0in;"><code> "</code>hasScanRadio<code>": </code>null<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>hasCablemodem<code>": </code>true<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>hasGps<code>": </code>false<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>isDualRadio<code>": </code>true<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>isOutdoor<code>": </code>false<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>maxChannelization24G<code>": </code>40<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>maxChannelization5G<code>": </code>80<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>maxClientsUpper<code>": </code>256<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>maxWlanNum24G<code>": </code>15<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>maxWlanNum5G<code>": </code>16<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>noAvc<code>": </code>false<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>noMesh<code>": </code>false<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>meshRadioCaps<code>": </code>"1,2"<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>reserved5GWlanForMesh<code>": </code>3<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>support11AC<code>": </code>true<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>supportChannelization160<code>": </code>null<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>supportAPUsbSoftwarePackage<code>": </code>null<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>supportBandSwitch<code>": </code>false<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>supportBonjour<code>": </code>true<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>supportIpsec<code>": </code>false<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>supportLBS<code>": </code>true<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>supportResetCablemodem<code>": </code>true<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>allowDfsCountry<code>": </code>"US"<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>ram<code>": </code>512<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>numOfCores<code>": </code>4<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>cpuFrequency<code>": </code>600<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>scalingFactor<code>": </code>1<code>,</code></pre> <pre style="border: none;padding: 0in;"><code> "</code>capabilityScore<code>": </code>75</pre> <div> <div> <div dir="ltr"> <div> <div> </div> </div> </div> </div> </div> <h4>Key Points</h4> <ul><li>Attributes vary by zone firmware version because AP capabilities differ across firmware releases.</li><li>New SZ features (e.g., in 5.2.2) may not be supported on APs running older firmware (e.g., 3.6.2).</li><li>Original use case: Quickly retrieve supported WLAN/SSID count per AP model (useful for comparing low-end vs high-end APs).</li><li>API is read-only and cannot modify attributes.</li></ul> <h4>Reference</h4> <ul><li>SmartZone API Guide </li></ul> </div>

Explains the purpose of the commonAttribute API call under AP Zone ? AP ? AP Model in SmartZone (SZ).

2025-12-24T11:19:01-0800 2025-12-25T10:00:09-0800 https://support.ruckuswireless.com/articles/000012510 2025-12-24T11:54:58-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4913 knowledge_article_4913 2022-10-18T14:31:45-0700 000012510 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Website issues Configuration, Website Issues, ZoneDirector How to download or restored Zonedirector configuration backup using CLI? <h2>Configuration export to TFTP via CLI:</h2> <div style="margin-left: 40px;">ruckus> enable ruckus# debug ruckus(debug)# save-config <IP-ADDR-OF-TFTP-SERVER> <FILE-NAME></div> <h3>Example output:</h3> <div style="margin-left: 40px;">ruckus(debug)# save_debug_info 1.1.1.1 debug_info.bak Creating debug info file ... Done Sending debug info file to "debug_info.bak@1.1.1.1" ...</div> <h2>Configuration restore using TFTP</h2> <div style="margin-left: 40px;">ruckus> enable ruckus# debug ruckus(debug)# restore all <IP-ADDR> <FILE-NAME> Restore everything. failover <IP-ADDR> <FILE-NAME> Restore everything, except system name and IP address settings. policy <IP-ADDR> <FILE-NAME> Restore only WLAN settings, access control list, roles, and users.</div> In the above command list, IP-ADDR is the TFTP server IP FILE-NAME is the filename of the backup file (or filename with full directory path)

Article explains how to download or restore configuration backup on ZD using CLI.

2025-12-24T11:54:58-0800 2025-12-25T10:00:08-0800 https://support.ruckuswireless.com/articles/000012274 2025-12-24T11:43:43-0800 monthly 0.8 admin,premium knowledge_article_4853 knowledge_article_4853 2022-07-06T04:53:24-0700 000012274 Validated (External) Premium Sz144;Ruckus cloud wifi;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SZ144, Ruckus Cloud WiFi, SZ300, virtual SmartCell Gateway, SZ100 <div>How do I open a PCAP file that is compressed in tar.gz format?</div> <div> Packet capture files downloaded from SZ/vSZ are compressed in tar.gz format. To extract and open them: <hr></hr> <h4>Option 1: Using Command Line (Windows)</h4> <ol><li> Open Command Prompt as Administrator. </li><li> Run the following command: <pre><code>tar -xvzf C:\PATH\TO\FILE\FILE-NAME.tar.gz -C C:\PATH\TO\FOLDER\EXTRACTION </code></pre> <ul><li>Replace <code>C:\PATH\TO\FILE\FILE-NAME.tar.gz</code> with the actual file path.</li><li>Replace <code>C:\PATH\TO\FOLDER\EXTRACTION</code> with the destination folder.</li><li>Note the <code>-C</code> option, which specifies the extraction directory. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qML&feoid=00N50000002Cf3M&refid=0EM2J000003A0mM" style="width: 624px;height: 104px;"></img></li></ul> </li><li> After execution, the extracted .pcap file will be available in the specified folder for analysis in Wireshark. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001qML&feoid=00N50000002Cf3M&refid=0EM2J000003A0mN" style="width: 624px;height: 90px;"></img> More Details: <a href="https://pureinfotech.com/extract-tar-gz-files-windows-10/" target="_self">https://pureinfotech.com/extract-tar-gz-files-windows-10/</a> </li></ol> <h4>Option 2: Using GUI Tools</h4> <ul><li> WinRAR <ul><li>Easily extracts tar.gz files and retrieves PCAP without issues.</li><li>Note: WinRAR requires a license for full functionality.</li></ul> </li><li> 7-Zip <ul><li>Can extract tar.gz files, but some users report hangs during extraction.</li><li>If 7-Zip fails, use the command-line method or WinRAR.</li></ul> </li></ul> </div>

This article explains how to extract and open packet capture (PCAP) files from tar.gz compressed files downloaded from SmartZone (SZ/vSZ) or Ruckus One (R1)

2025-12-24T11:43:43-0800 2025-12-25T10:00:08-0800 https://support.ruckuswireless.com/articles/000012282 2025-12-24T12:06:55-0800 monthly 0.8 admin,premium knowledge_article_4852 knowledge_article_4852 2022-07-05T12:20:08-0700 000012282 Validated (External) Premium Ruckus cloud wifi;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, Ruckus Cloud WiFi, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP <div>What is the difference between Idle Timeout and Grace Period, and how can these be verified?</div> <div>Idle Timeout: Applies to all WLAN types. Ensures AP database is cleared of inactive clients.</div> <div>Grace Period: Applies only to WLANs using Hotspot, Web, or Guest authentication. Prevents unnecessary re-authentication within the grace period. </div> <div>Some useful KBA articles: <a href="https://support-preprod.ruckuswireless.com/articles/000005878" style="color: blue;text-decoration: underline;" target="_blank">000005878 - What is the difference between a HotSpot Session Timeout and Grace Period?</a> <a href="https://support.ruckuswireless.com/articles/000008837" style="color: blue;text-decoration: underline;" target="_blank">000008837 - Verifying Client and Client throughput via AP CLI commands</a> <a href="https://support.ruckuswireless.com/articles/000001482" style="color: blue;text-decoration: underline;" target="_blank">000001482 - Clients need to re-authenticate after returning to the WLAN service area</a> <a href="https://support.ruckuswireless.com/articles/000002311" style="color: blue;text-decoration: underline;" target="_blank">000002311 - Clients need to reauthenticate even after having Grace Period set to high</a> </div>

This article explains the difference between Idle Timeout and Grace Period configurations in SmartZone (SZ) environments or Ruckus One (R1) environment

2025-12-24T12:06:55-0800 2025-12-25T10:00:07-0800 https://support.ruckuswireless.com/articles/000014912 2025-12-24T04:13:40-0800 monthly 0.8 admin,premium knowledge_article_6003 knowledge_article_6003 2025-07-08T02:55:17-0700 000014912 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) System network management System Network Management, SZ144, SZ300, virtual SmartCell Gateway, SZ100 What is the recommended method to delete an old snapshot log from a vSZ or SZ controller node? How to delete an older snapshot log on the vSZ/SZ controller? To delete snapshot logs on a vSZ or SZ controller node, follow the steps below: 1. Access the controller via SSH. 2. Once connected, enter enable mode by typing: enable 3. Navigate to the diagnostic submenu: diagnostic 4. Execute the following command to delete all snapshot logs: delete snapshot 5. Confirm the action when prompted: Do you want to continue to delete (or input 'no' to cancel)? [yes/no] yes Example session: vsz-c0x# vsz-c0x# diagnostic vsz-c0x(diagnostic)# delete snapshot Do you want to continue to delete (or input 'no' to cancel)? [yes/no] yes vsz-c0x(diagnostic)# Note: This action will remove all snapshot logs from the controller.

What is the recommended method to delete an old snapshot logs from a vSZ or SZ controller node?

2025-12-24T04:13:40-0800 2025-12-24T14:00:12-0800 https://support.ruckuswireless.com/articles/000014522 2025-12-24T04:15:04-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_6002 knowledge_article_6002 2024-10-08T05:43:57-0700 000014522 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How do I create a WLAN with Whatsapp access only? To create a WLAN that allows access only to WhatsApp, follow the steps below: 1. Create a URL filtering profile: a. Navigate to URL filtering >> Profile. <img alt="User-added image" height="222" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001p6v&feoid=00N50000002Cf3M&refid=0EMPH00000Bx1rN" width="577"></img> b. Under block by category, select custom and select all the fields. <img alt="User-added image" height="317" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001p6v&feoid=00N50000002Cf3M&refid=0EMRk00000GRaxS" width="581"></img> <img alt="User-added image" height="453" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001p6v&feoid=00N50000002Cf3M&refid=0EMPH00000Bx213" width="592"></img> c. Under Blacklist & Whitelist, create a whitelist for Whatsapp’s URLs only. <img height="316" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001p6v&feoid=00N50000002Cf3M&refid=0EMPH00000Bx1rO" width="595"></img> 2. Assiging the URL filtering profile to the WLAN. a. Now, navigate to WLAN and assign the URL filtering profile to the WLAN: <img height="314" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001p6v&feoid=00N50000002Cf3M&refid=0EMPH00000Bx1rP" width="605"></img> b. Save the changes and now the users connecting to the SSID will only have WattsApp access. Note: URL filtering licenses must be purchased in order to use the URL filtering feature. You can contact the Ruckus SE team, and they will assist you in obtaining the licenses.

This article explains the configuration steps for creating a WLAN that allows access only to WhatsApp.

2025-12-24T04:15:04-0800 2025-12-24T14:00:12-0800 https://support.ruckuswireless.com/articles/000014465 2025-12-24T04:18:03-0800 monthly 0.8 admin,premium knowledge_article_6001 knowledge_article_6001 2024-10-08T12:10:02-0700 000014465 Validated (External) Premium Sz144;Sz300;Cloudpath;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;Cloudpath Enrollment System (ES);BPG_Cloudpath;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ144, SZ300, Cloudpath, SZ100 How to configure troubleshoot eDPSK using cloudpath ? Check all the steps suggested in the Troubleshooting Section and provide this information to further investigate with Ruckus Support, if you cannot solve/isolate the issue. To reach out to support <a href="https://support.ruckuswireless.com/contact-us" target="_blank">click here.</a>

This article explains How to configure & troubleshoot eDPSK using cloudpath

2025-12-24T04:18:03-0800 2025-12-24T14:00:11-0800 https://support.ruckuswireless.com/articles/000014228 2025-12-24T05:13:39-0800 monthly 0.8 admin,premium knowledge_article_6000 knowledge_article_6000 2023-09-22T10:41:01-0700 000014228 Validated (External) Premium Sz144;Ruckus cloud wifi;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Performance;Configuration;Installation;Troubleshooting Performance, Configuration, Installation, Troubleshooting, SZ144, Ruckus Cloud WiFi, SZ300, virtual SmartCell Gateway, SZ100 Customer approached that they were unable to see all the Channels ( Including Lower and Upper ) in wifi1 channel availability which is 5Ghz radio. 1. If we want to seperate 5G channels among 2 different radio's, "Default 5G mode" can be Continues and this is how the channel availability is split between wifi1 and wifi2 interface. rkscli: get channelavailability wifi1 ( Lower Channels of 5G ) Ch Seg2 CWmode DFS-CAC-status Availability ------------------------------------------------------------- 36 0 20M NON_DFS AVBLE 40 0 20M NON_DFS AVBLE 44 0 20M NON_DFS AVBLE 48 0 20M NON_DFS AVBLE 52 0 20M DFS:CAC pendg AVBLE 56 0 20M DFS:CAC pendg AVBLE 60 0 20M DFS:CAC pendg AVBLE 64 0 20M DFS:CAC pendg AVBLE OK <ul><li> The below output shows Wifi2 supporting only Upper channels of 5G </li></ul> rkscli: get channelavailability wifi2 ( Upper Channels of 5G ) Ch Seg2 CWmode DFS-CAC-status Availability ------------------------------------------------------------- 100 0 20M DFS:CAC pendg AVBLE 104 0 20M DFS:CAC pendg AVBLE 108 0 20M DFS:CAC pendg AVBLE 112 0 20M DFS:CAC pendg AVBLE 116 0 20M DFS:CAC pendg AVBLE 120 0 20M DFS:CAC pendg AVBLE 124 0 20M DFS:CAC pendg AVBLE 128 0 20M DFS:CAC pendg AVBLE 132 0 20M DFS:CAC pendg AVBLE 136 0 20M DFS:CAC pendg AVBLE 140 0 20M DFS:CAC pendg BLOCK 144 0 20M DFS:CAC pendg BLOCK 149 0 20M NON_DFS AVBLE 153 0 20M NON_DFS AVBLE 157 0 20M NON_DFS AVBLE 161 0 20M NON_DFS AVBLE 165 0 20M NON_DFS AVBLE OK 2. If we wants all the channels of 5G to be on one radio, then we may need to change the radio band on wifi2 to 6G and this is how the channel availability is split between wifi1 and wifi2 interface. rkscli: get channelavailability wifi1 Ch Seg2 CWmode DFS-CAC-status Availability ------------------------------------------------------------- 36 0 20M NON_DFS AVBLE 40 0 20M NON_DFS AVBLE 44 0 20M NON_DFS AVBLE 48 0 20M NON_DFS AVBLE 52 0 20M DFS:CAC pendg AVBLE 56 0 20M DFS:CAC pendg AVBLE 60 0 20M DFS:CAC pendg AVBLE 64 0 20M DFS:CAC pendg AVBLE 100 0 20M DFS:CAC pendg AVBLE 104 0 20M DFS:CAC pendg AVBLE 108 0 20M DFS:CAC pendg AVBLE 112 0 20M DFS:CAC pendg AVBLE 116 0 20M DFS:CAC pendg AVBLE 120 0 20M DFS:CAC pendg AVBLE 124 0 20M DFS:CAC pendg AVBLE 128 0 20M DFS:CAC pendg AVBLE 132 0 20M DFS:CAC pendg AVBLE 136 0 20M DFS:CAC pendg AVBLE 140 0 20M DFS:CAC pendg BLOCK 144 0 20M DFS:CAC pendg AVBLE 149 0 20M NON_DFS AVBLE 153 0 20M NON_DFS AVBLE 157 0 20M NON_DFS AVBLE 161 0 20M NON_DFS AVBLE 165 0 20M NON_DFS AVBLE OK rkscli: get channelavailability wifi2 Ch Seg2 CWmode DFS-CAC-status Availability ------------------------------------------------------------- 1 0 20M NON_DFS AVBLE 5 0 20M NON_DFS AVBLE 9 0 20M NON_DFS AVBLE 13 0 20M NON_DFS AVBLE 17 0 20M NON_DFS AVBLE 21 0 20M NON_DFS AVBLE 25 0 20M NON_DFS AVBLE 29 0 20M NON_DFS AVBLE 33 0 20M NON_DFS AVBLE 37 0 20M NON_DFS AVBLE 41 0 20M NON_DFS AVBLE 45 0 20M NON_DFS AVBLE 49 0 20M NON_DFS AVBLE 53 0 20M NON_DFS AVBLE 57 0 20M NON_DFS AVBLE 61 0 20M NON_DFS AVBLE 65 0 20M NON_DFS AVBLE 69 0 20M NON_DFS AVBLE 73 0 20M NON_DFS AVBLE 77 0 20M NON_DFS AVBLE 81 0 20M NON_DFS AVBLE 85 0 20M NON_DFS AVBLE 89 0 20M NON_DFS AVBLE 93 0 20M NON_DFS AVBLE 97 0 20M NON_DFS AVBLE 101 0 20M NON_DFS AVBLE 105 0 20M NON_DFS AVBLE 109 0 20M NON_DFS AVBLE 113 0 20M NON_DFS AVBLE 117 0 20M NON_DFS AVBLE 121 0 20M NON_DFS AVBLE 125 0 20M NON_DFS AVBLE 129 0 20M NON_DFS AVBLE 133 0 20M NON_DFS AVBLE 137 0 20M NON_DFS AVBLE 141 0 20M NON_DFS AVBLE 145 0 20M NON_DFS AVBLE 149 0 20M NON_DFS AVBLE 153 0 20M NON_DFS AVBLE 157 0 20M NON_DFS AVBLE 161 0 20M NON_DFS AVBLE 165 0 20M NON_DFS AVBLE 169 0 20M NON_DFS AVBLE 173 0 20M NON_DFS AVBLE 177 0 20M NON_DFS AVBLE 181 0 20M NON_DFS AVBLE 185 0 20M NON_DFS AVBLE 189 0 20M NON_DFS AVBLE 193 0 20M NON_DFS AVBLE 197 0 20M NON_DFS AVBLE 201 0 20M NON_DFS AVBLE 205 0 20M NON_DFS AVBLE 209 0 20M NON_DFS AVBLE 213 0 20M NON_DFS AVBLE 217 0 20M NON_DFS AVBLE 221 0 20M NON_DFS AVBLE 225 0 20M NON_DFS AVBLE 229 0 20M NON_DFS AVBLE 233 0 20M NON_DFS AVBLE OK 3. For R760's & R560's we may need to configure the SSID's for 3 Different Wi-Fi interfaces and >get wlanlist looks like this as mentioned below when 5G channels are seperated among two different radios. We will be able to see radio ID 0, 1 and 2 which represents Wifi0, Wifi1 and Wifi2 rkscli: get wlanlist name status type wlanID radioID bssid ssid -------------------------------------------------------------------------------------------------- wlan0 up AP wlan0 0 70:47:77:6e:6d:20 Wireless9 wlan1 down AP wlan1 0 00:00:00:00:00:00 Wireless2 wlan2 down AP wlan2 0 00:00:00:00:00:00 Wireless3 wlan3 down AP wlan3 0 00:00:00:00:00:00 Wireless4 wlan4 down AP wlan4 0 00:00:00:00:00:00 Wireless5 wlan5 down AP wlan5 0 00:00:00:00:00:00 Wireless6 wlan6 down AP wlan6 0 00:00:00:00:00:00 Wireless7 wlan7 down AP wlan7 0 00:00:00:00:00:00 Wireless8 wlan100 down MON wlan100 0 00:00:00:00:00:00 recovery-ssid down AP wlan102 0 00:00:00:00:00:00 Recover.Me-2E6D20 wlan8 up AP wlan8 1 70:47:77:ae:6d:20 Wireless9 wlan9 down AP wlan9 1 00:00:00:00:00:00 Wireless10 wlan10 down AP wlan10 1 00:00:00:00:00:00 Wireless11 wlan11 down AP wlan11 1 00:00:00:00:00:00 Wireless12 wlan12 down AP wlan12 1 00:00:00:00:00:00 Wireless13 wlan13 down AP wlan13 1 00:00:00:00:00:00 Wireless14 wlan14 down AP wlan14 1 00:00:00:00:00:00 Wireless15 wlan15 down AP wlan15 1 00:00:00:00:00:00 Wireless16 wlan110 down MON wlan110 1 00:00:00:00:00:00 wlan16 up AP wlan16 2 70:47:77:ee:6d:20 up wlan17 down AP wlan17 2 00:00:00:00:00:00 Wireless18 wlan18 down AP wlan18 2 00:00:00:00:00:00 Wireless19 wlan19 down AP wlan19 2 00:00:00:00:00:00 Wireless20 wlan20 down AP wlan20 2 00:00:00:00:00:00 Wireless21 wlan21 down AP wlan21 2 00:00:00:00:00:00 Wireless22 wlan22 down AP wlan22 2 00:00:00:00:00:00 Wireless23 wlan23 down AP wlan23 2 00:00:00:00:00:00 Wireless24 wlan120 down MON wlan120 2 00:00:00:00:00:00 OK 4. get wlanlist looks like this as mentioned below when 6G mode is enabled. We will be able to see radio ID 0, 1 and 2 which represents Wifi0, Wifi1 and Wifi2 rkscli: get wlanlist name status type wlanID radioID bssid ssid -------------------------------------------------------------------------------------------------- wlan0 up AP wlan0 0 70:47:77:6e:6d:20 Wireless9 wlan1 down AP wlan1 0 00:00:00:00:00:00 Wireless2 wlan2 down AP wlan2 0 00:00:00:00:00:00 Wireless3 wlan3 down AP wlan3 0 00:00:00:00:00:00 Wireless4 wlan4 down AP wlan4 0 00:00:00:00:00:00 Wireless5 wlan5 down AP wlan5 0 00:00:00:00:00:00 Wireless6 wlan6 down AP wlan6 0 00:00:00:00:00:00 Wireless7 wlan7 down AP wlan7 0 00:00:00:00:00:00 Wireless8 wlan100 down MON wlan100 0 00:00:00:00:00:00 recovery-ssid down AP wlan102 0 00:00:00:00:00:00 Recover.Me-2E6D20 wlan8 up AP wlan8 1 70:47:77:ae:6d:20 Wireless9 wlan9 down AP wlan9 1 00:00:00:00:00:00 Wireless10 wlan10 down AP wlan10 1 00:00:00:00:00:00 Wireless11 wlan11 down AP wlan11 1 00:00:00:00:00:00 Wireless12 wlan12 down AP wlan12 1 00:00:00:00:00:00 Wireless13 wlan13 down AP wlan13 1 00:00:00:00:00:00 Wireless14 wlan14 down AP wlan14 1 00:00:00:00:00:00 Wireless15 wlan15 down AP wlan15 1 00:00:00:00:00:00 Wireless16 wlan110 down MON wlan110 1 00:00:00:00:00:00 wlan16 up AP wlan16 2 70:47:77:ee:6d:20 up wlan17 down AP wlan17 2 00:00:00:00:00:00 Wireless18 wlan18 down AP wlan18 2 00:00:00:00:00:00 Wireless19 wlan19 down AP wlan19 2 00:00:00:00:00:00 Wireless20 wlan20 down AP wlan20 2 00:00:00:00:00:00 Wireless21 wlan120 down MON wlan120 2 00:00:00:00:00:00 wlan125 up AP wlan125 2 70:47:77:ee:6d:27 RKS_TX_VAP OK

How R760 & R560 channelization is divided and how many bands it supports

2025-12-24T05:13:39-0800 2025-12-24T14:00:11-0800 https://support.ruckuswireless.com/articles/000011853 2025-12-24T05:50:01-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5998 knowledge_article_5998 2021-08-09T06:30:28-0700 000011853 Validated (External) Public Sz144;Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, SZ144, SZ300, SCG200, virtual SmartCell Gateway, SZ100 Does my SmartZone supports L2 or same subnet AP discovery? Only below products support L2 or same subnet AP discovery (mDNS discovery). <ul><li>SZ100 (all 1xx models)</li><li>Virtual SmartZone - Essentials (vSZ-E)</li></ul> Unsupported products: <ul><li>Virtual SmartZone - High scale (vSZ-H)</li><li>SZ200</li><li>SZ300</li></ul>

Article explains L2 or same subnet AP discovery feature support for different SmartZone products.

2025-12-24T05:50:01-0800 2025-12-24T14:00:10-0800 https://support.ruckuswireless.com/articles/000014453 2025-12-24T05:22:20-0800 monthly 0.8 admin,premium knowledge_article_5999 knowledge_article_5999 2024-09-22T22:43:35-0700 000014453 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway How to resolve wlan config error message " Unable to update the WLAN configuration CoreNetworkType data in config and coreNetworkType fields don't match " ? Permanent workaround by toggling wlan config "data plane options > access network"

This article explains how to resolve the error message: Unable to update the WLAN configuration CoreNetworkType data in config and coreNetworkType fields don't match

2025-12-24T05:22:20-0800 2025-12-24T14:00:10-0800 https://support.ruckuswireless.com/articles/000014684 2025-12-24T05:51:24-0800 monthly 0.8 admin,premium knowledge_article_5997 knowledge_article_5997 2025-02-20T21:44:26-0800 000014684 Validated (External) Premium Virtual smartcell gateway Troubleshooting Troubleshooting, virtual SmartCell Gateway <div>Customers are not able to access the vSZ GUI using the FQDN.</div> 1. Confirm if the DNS is getting resolved. 2. If there is an issue with the certificate uploaded on the vSZ, try the following steps: <ol start="1" style="list-style-type: lower-alpha;"><li>Un-map the certificate temporarily for a few minutes and then re-map it. Check if this resolves the issue.</li><li>If the issue persists, remove the certificate from the vSZ entirely, re-add it, and verify if there is any change.</li></ol> 3. Confirm if the controller IP has been configured/mapped with the hostname on the DNS server. 4. If all the above details are fine, there is a high chance it’s an issue on the firewall.

This Article will explain why Customers are not able to access the vSZ GUI using the FQDN.

2025-12-24T05:51:24-0800 2025-12-24T14:00:10-0800 https://support.ruckuswireless.com/articles/000014661 2025-12-24T06:02:56-0800 monthly 0.8 admin,premium knowledge_article_5725 knowledge_article_5725 2025-03-13T01:46:56-0700 000014661 Validated (External) Premium R560;RUCKUS R560 Installation;Known issues and workarounds Installation, Known Issues and Workarounds, R560 Why is the 6G LED on my R560 blue? This LED is blue to show that a client is connected to the AP on the 6Ghz band.

This LED is blue to show that a client is connected to the AP on the 6Ghz band.

2025-12-24T06:02:56-0800 2025-12-24T14:00:09-0800 https://support.ruckuswireless.com/articles/000012030 2025-12-23T06:44:24-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5578 knowledge_article_5578 2021-12-30T12:24:09-0800 000012030 Validated (External) Public Zonedirector 1200;ZoneDirector 1200 Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, ZoneDirector 1200 <div>Why are APs stuck in a disconnected state and continuously upgrading firmware after the ZD 10.5.1 upgrade?</div> <ul><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Beginning with Zone Director 10.5.1, the AP image upgrade uses HTTPS. If there is an upgrade failure using HTTPS, you can enable the legacy AP image upgrade option to FTP under Administrator > Upgrade tab. Zone Director supports either HTTPS or FTP as the AP image upgrade option <img style="height: auto;" width="757" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001p3h&feoid=00N50000002Cf3M&refid=0EM2J000003XDoD" height="277" alt="User-added image"></img> Note: Ruckus always recommends its customers to Refer to the Release Notes and Upgrade Guides for the best practices and changed behavior before performing an upgrade. </li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Allow HTTPS protocol in firewall between AP and Zone Director</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">Please contact technical support if further assistance is needed</li></ul>

APs are stuck in an upgrade loop after ZoneDirector (ZD) is upgraded to version 10.5.1.0.124.

2025-12-23T06:44:24-0800 2025-12-24T06:00:19-0800 https://support.ruckuswireless.com/articles/000014662 2025-12-23T10:07:10-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5996 knowledge_article_5996 2025-01-26T22:18:18-0800 000014662 Validated (External) Public Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi <div>Can I change the network type or authentication method of an existing Wi-Fi Network in Ruckus One?</div> <div> <ul><li>Ruckus One uses a template-based progressive configuration approach.</li><li>The Network Type option is available only during the creation of a new Wi-Fi Network.</li><li>Modification of the network type for an existing WLAN is not supported.</li></ul> <h4>Available Network Types</h4> <ol><li> Passphrase (PSK/SAE) Users enter a predefined passphrase to connect. </li><li> Dynamic Pre-Shared Key (DPSK) Each device gets a unique passphrase for connection. </li><li> Enterprise AAA (802.1X) Uses 802.1X and WPA2 security protocols with an authentication server. </li><li> Hotspot 2.0 Access Provides seamless Wi-Fi with enhanced security and roaming capabilities. </li><li> Captive Portal Users authenticate through a captive portal using various methods. </li><li> Open Network No authentication required (not recommended for security reasons). </li></ol> <h3>Edit Network Scope</h3> The Wi-Fi Network Edit page allows changes to: <ul><li>Network name and description</li><li>Network type-related settings (within the same type)</li><li>Advanced network settings</li><li>Venue where the network is advertised</li></ul> </div>

The network type of a Wi-Fi Network in Ruckus One cannot be modified once the network is created.

2025-12-23T10:07:10-0800 2025-12-24T06:00:18-0800 https://support.ruckuswireless.com/articles/000015122 2025-12-23T11:28:45-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5995 knowledge_article_5995 2025-12-23T11:28:45-0800 000015122 Validated (External) Public <h4>How to access the Command Line Interface (CLI) of the RUCKUS ICX-7150-C12P Switch?</h4> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">For Windows machines:</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">To access the Command Line Interface (CLI), you will need the IP address of the RUCKUS ICX-7150-C12P Switch and the PuTTY application. We can <a target="_blank" href="https://www.putty.org/">download PuTTY</a> (Figure 1) and learn <a target="_blank" href="https://community.ruckuswireless.com/t5/RUCKUS-Lennar-Support-Knowledge/How-to-find-the-IP-Address-of-the-RUCKUS-Devices-Switch-and-APs/ta-p/77863">how to find the IP address of RUCKUS devices (Switch and Access Points) using free IP scanner tools.</a></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;"><img height="207" width="951" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001bK5&feoid=00N50000002Cf3M&refid=0EMRk00000FOfUQ" style="display: block;margin-left: auto;margin-right: auto;"></img></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: center;">FIGURE 1: Putty application download information</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"> </h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">We can attempt to log in to the CLI using either the SSH or Telnet option in PuTTY.</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">SSH- Port 22 </h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">To access the CLI via SSH (Figure 2), you will need valid login credentials (username and password). If the credentials are unknown, you may attempt to use the <a target="_blank" href="https://community.ruckuswireless.com/t5/RUCKUS-Lennar-Support-Knowledge/Default-Admin-Login-Username-Password-for-RUCKUS-ICX-7150-C12P/ta-p/105252">default login details</a>.</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;"><img height="993" width="1057" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001bK5&feoid=00N50000002Cf3M&refid=0EMRk00000FOiP3" style="display: block;margin-left: auto;margin-right: auto;"></img></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: center;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: center;">FIGURE 2: Accessing CLI using SSH option</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">OR</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">Telnet – Port 23 (If SSH doesn’t work)</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">To access the CLI via Telnet, no login credentials are required. If Telnet is enabled on the switch, it can be accessed directly using the switch’s IP address.</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;"><img height="1048" width="1069" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001bK5&feoid=00N50000002Cf3M&refid=0EMRk00000FOf4c" style="display: block;margin-left: auto;margin-right: auto;"></img></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: center;">FIGURE 3: Accessing CLI using the Telnet option</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: center;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">If we are able to access the Command Line Interface, the prompt should appear as one of the following:</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">ICX7150-C12 Router> OR</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">ICX7150-C12 Switch></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">Once we see this prompt, you can proceed to execute the necessary commands.</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">For MAC devices:</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">Example "open terminal":</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;"><img height="192" width="1098" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001bK5&feoid=00N50000002Cf3M&refid=0EMRk00000FOiLp" style="display: block;margin-left: auto;margin-right: auto;"></img></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: center;">FIGURE 4: MAC device terminal access information</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">SSH:</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">ssh username@IP Address of the device</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">Login command examples:</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">ssh <a href="mailto:admin@192.168.1.182" target="_blank">admin@192.168.1.182</a></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">ssh <a target="_blank" href="mailto:super@192.168.1.182">super@192.168.1.182</a></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;"><img height="197" width="1128" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001bK5&feoid=00N50000002Cf3M&refid=0EMRk00000FOiKD" style="display: block;margin-left: auto;margin-right: auto;"></img></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: center;">FIGURE 5: Accessing CLI on MAC terminal using SSH option</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">The password may be one of the commonly used defaults such as: Lennar, sp-admin, or Ruckus1. we may also try other known <a target="_blank" href="https://community.ruckuswireless.com/t5/RUCKUS-Lennar-Support-Knowledge/Default-Admin-Login-Username-Password-for-RUCKUS-ICX-7150-C12P/ta-p/105252">default login details</a>.</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">Note: if access to ssh does not work try the following ssh-keygen -R 'ip address of the device' this generates a public key pair for use when authenticating with a remote server.</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">Telnet – Port 23 (If SSH doesn’t work)</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">nc <IP Address of the device> 23</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">Login command example:</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">nc 192.168.1.182 23</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;"><img height="164" width="1108" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001bK5&feoid=00N50000002Cf3M&refid=0EMRk00000FOiNR" style="display: block;margin-left: auto;margin-right: auto;"></img></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: center;">FIGURE 6: Accessing CLI on MAC terminal using Telnet option</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;"></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">If we are able to access the Command Line Interface, the prompt should appear as following:</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">????telnet@ICX7150-12P Switch></h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">Once we see this prompt, you can proceed to execute the necessary commands.</h3> <h3 style="margin: 0cm 0cm 8pt;line-height: 115%;font-size: 12pt;font-family: Aptos, sans-serif;text-align: justify;">By following these steps, you should be able to successfully establish a Command Line to your RUCKUS ICX-7150-C12P Switch and begin configuring it via the CLI. </h3>

This Lennar Knowledge Base guide provides instructions for accessing the Command Line Interface (CLI) on both Windows and Mac devices. It is intended to assist with troubleshooting issues related to the RUCKUS ICX-7150-C12P Switch and associated Access Points.

2025-12-23T11:28:45-0800 2025-12-24T06:00:18-0800 https://support.ruckuswireless.com/articles/000015143 2025-12-23T11:35:08-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5994 knowledge_article_5994 2025-12-23T11:35:08-0800 000015143 Validated (External) Public Icx 7150;RUCKUS ICX 7150 Campus Switches Troubleshooting Troubleshooting, ICX 7150 How to fix RUCKUS Switch with an Amber/Orange light on "SYST" & Green light on "PWR" & NO power on Celling Access Points <ul><li> Perform a physical reset using a paper clip – This forces the switch to reboot properly and can restore normal operation if it is stuck in boot mode. </li><li> Repeat the reset procedure multiple times (35–40 attempts) – Multiple reset cycles may be needed because the switch may not exit boot mode on the first few attempts. </li><li> Perform a software recovery using a computer (USB-C + Ethernet) – This reinstalls the correct system image on the switch when the internal firmware becomes corrupted. </li><li> Use Windows laptop for recovery when possible – Windows provides more reliable driver compatibility for the RUCKUS recovery utilities. </li><li> Follow the official recovery guide step-by-step – Using the validated instructions ensures the correct image is loaded and prevents further boot issues. </li></ul>

If your RUCKUS ICX-7150-C12P Switch stopped working after a power outage or power spike, it may be stuck in what’s called boot mode. In this state, the switch fails to start up normally and will not supply power (PoE - Power over Ethernet) to connected devices like RUCKUS Access Points (APs) or any other devices.

2025-12-23T11:35:08-0800 2025-12-24T06:00:18-0800 https://support.ruckuswireless.com/articles/000015144 2025-12-23T11:38:04-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5993 knowledge_article_5993 2025-12-23T11:38:04-0800 000015144 Validated (External) Public R310;R510;Icx 7150;Ruckus R310;Ruckus R510;RUCKUS ICX 7150 Campus Switches Troubleshooting Troubleshooting, R310, R510, ICX 7150 How to find the IP Address of the RUCKUS Devices (Switch and APs) using IP Scanner free applications? <h3>Steps to Find IP Addresses (Windows Example)</h3> <h3>Step 1: Download and Open Advanced IP Scanner</h3> <ul><li>Download the tool from the official website (refer link above).</li><li>You can run it without installing (portable version) or install it on your computer. (See Figures 1–3 in the original article for visual guidance)</li></ul> <img height="462" width="910" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001hkT&feoid=00N50000002Cf3M&refid=0EMRk00000G3dTR" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 1: Advanced IP Scanner Application Download Information <img height="487" width="912" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001hkT&feoid=00N50000002Cf3M&refid=0EMRk00000G3Fao" style="display: block;margin-left: auto;margin-right: auto;"></img> FIGURE 2: Advance IP Scanner application file information <img height="678" width="912" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001hkT&feoid=00N50000002Cf3M&refid=0EMRk00000G3dRp" style="display: block;margin-left: auto;margin-right: auto;"></img> FIGURE 3: Advanced IP Scanner application run information <h3>Step 2: Run a Scan</h3> <ul><li>Open the application.</li><li>Click on the “Scan” button to let it discover devices on your network. (Refer to Figure 4)</li></ul> <img height="566" width="909" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001hkT&feoid=00N50000002Cf3M&refid=0EMRk00000G3Fap" style="display: block;margin-left: auto;margin-right: auto;"></img> FIGURE 4: Advanced IP Scanner application Scanning initiation information <h3>Step 3: Identify RUCKUS Devices</h3> <ul><li>Look for device names such as:</li><ul><li>Ruckus Wireless</li><li>Ruckus-Unleashed</li><li>Ruckus ICX-7150</li><li>Brocade Communications (older name for the switch manufacturer) (See Figure 5)</li></ul></ul> <img height="487" width="902" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001hkT&feoid=00N50000002Cf3M&refid=0EMRk00000G3dQD" style="display: block;margin-left: auto;margin-right: auto;"></img> FIGURE 5: Showing RUCKUS device names and IP Addresses <h3>Verify the Correct Device:</h3> <h3>For RUCKUS ICX-7150-C12P Switch:</h3> <ul><li>In the scanner results, find an entry named “Brocade Communications” or “Ruckus ICX-7150”.</li><li>Copy its IP address and paste it in your web browser.</li><li>If it opens a login screen like Figure 6, you've successfully found the switch’s IP address.</li><li>After login, you’ll see the main dashboard like Figure 7.</li></ul> <img height="441" width="903" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001hkT&feoid=00N50000002Cf3M&refid=0EMRk00000G3WDU" style="display: block;margin-left: auto;margin-right: auto;"></img> FIGURE 6: Showing RUCKUS ICX-7150-C12P Switch's login dashboard <img height="356" width="908" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001hkT&feoid=00N50000002Cf3M&refid=0EMRk00000G3ZT4" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 7: Dashboard view of the RUCKUS ICX-7150-C12P Switch after login <h3>For RUCKUS R510 Access Points:</h3> <ul><li>Look for entries named “Ruckus-Unleashed” or “Ruckus Wireless”.</li><li>Paste the IP address into your web browser.</li><li>If the page looks like Figure 8, you've located the Access Point.</li><li>After logging in, you’ll see the dashboard similar to Figure 9.</li></ul> <img height="422" width="904" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001hkT&feoid=00N50000002Cf3M&refid=0EMRk00000G3dV3" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 8: Login dashboard of the RUCKUS Unleashed Access Point <img height="422" width="904" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001hkT&feoid=00N50000002Cf3M&refid=0EMRk00000G3aNY" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 9: Dashboard view of the RUCKUS Unleashed Access Point after login

If you're using RUCKUS networking equipment in your Lennar Smart Home, such as the RUCKUS ICX-7150-C12P Switch and RUCKUS R510 Unleashed Access Points, you may sometimes need to access these devices for troubleshooting or configuration. To do this, you’ll first need to know their IP addresses, which are like digital home addresses for your devices on your local network. This guide explains step-by-step how to find the IP addresses using free IP scanner tools, even if you have no technical background.

2025-12-23T11:38:04-0800 2025-12-24T06:00:17-0800 https://support.ruckuswireless.com/articles/000015145 2025-12-23T11:41:39-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5992 knowledge_article_5992 2025-12-23T11:41:39-0800 000015145 Validated (External) Public R310;R510;Ruckus R310;Ruckus R510 Troubleshooting Troubleshooting, R310, R510 How to Factory Reset RUCKUS R510/R310 Access Point and Set Up a New Wi-Fi Network/SSID? <ul><li> Perform a physical factory reset on the AP – Press and hold the reset button until the LEDs indicate a full reset. </li><li> Connect only one AP during setup – Keep just one AP connected to the switch to ensure it becomes the Master. </li><li> Use a web browser to run the Unleashed setup – Access the Unleashed interface through your laptop/PC to configure Wi-Fi. </li><li> Use the RUCKUS Unleashed mobile app for setup – Follow the in-app wizard to complete the setup using your smartphone. </li><li> Create a new Wi-Fi network (SSID) during setup – Add a new SSID and password as guided by the setup wizard. </li><li> Configure new admin login credentials – Set a new username and password to secure your Unleashed system. </li><li> Reconnect the remaining APs after setup – Plug the other APs back in so they automatically sync with the Master AP. </li><li> Verify internet and Wi-Fi connectivity – Check that all devices can connect and browse after configuration. </li><li> Repeat factory reset if setup fails – Restart the reset process if the AP does not configure correctly the first time. </li></ul>

This article walks you through the factory reset process for RUCKUS R510/R310 Access Points and how to create a new Wi-Fi network (SSID) from scratch. It’s designed for homeowners who want to restore their devices and get their wireless network back up and running smoothly.

2025-12-23T11:41:39-0800 2025-12-24T06:00:17-0800 https://support.ruckuswireless.com/articles/000015148 2025-12-23T11:44:15-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5991 knowledge_article_5991 2025-12-23T11:44:15-0800 000015148 Validated (External) Public Icx 7150;RUCKUS ICX 7150 Campus Switches Firmware;Troubleshooting Firmware, Troubleshooting, ICX 7150 Fixing RUCKUS ICX-7150-C12P Switch Routing Code (SPR) issue using Command Line Interface (CLI). <h3>Switch from Routing Code (SPR) to Switching Code (SPS)</h3> To resolve the issue, follow these steps carefully in the CLI window: Note: Hit Enter to accept each command ICX7150-12P Router>enable ICX7150-12P Router#copy flash flash secondary ICX7150-12P Router#boot system flash secondary yes What these commands do: <ul><li>copy flash flash secondary – Copies the correct image to the backup slot</li><li>boot system flash secondary yes – Reboots the switch using the Switching Code</li></ul> Video Walkthrough: <a target="_blank" href="https://www.youtube.com/watch?v=Eem1IBgYaWc">Watch Here</a> <h3>After Reboot:</h3> Wait 3–5 minutes for the switch to come back online. Once it’s up: 1. Reconnect via CLI 2. Run the same commands again: enable show version 3. Confirm the software now shows SPS (not SPR)

If you’re experiencing slow or unreliable internet, or if your smart devices are having trouble staying connected, your RUCKUS ICX-7150-C12P Switch may have accidentally booted into the Routing Code (SPR) mode instead of the Switching Code (SPS) mode. This typically happens after a power outage or power spike, causing the Switch to boot from the wrong partition.

2025-12-23T11:44:15-0800 2025-12-24T06:00:17-0800 https://support.ruckuswireless.com/articles/000015149 2025-12-23T11:45:47-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5990 knowledge_article_5990 2025-12-23T11:45:47-0800 000015149 Validated (External) Public R310;R510;Icx 7150;Ruckus R310;Ruckus R510;RUCKUS ICX 7150 Campus Switches Configuration;Installation Configuration, Installation, R310, R510, ICX 7150 How to setup RUCKUS Lennar Home devices and Configure them in Lennar Home? <h3>To ensure optimal performance and uninterrupted connectivity in your Lennar Smart Home setup, here are a few key takeaways:</h3> <ul><li>Use Correct Ports: Always connect your modem/router (or combo) to one of the 12 ports on the RUCKUS ICX-7150-C12P Switch. Not the console or uplink ports.</li><li>PoE Devices Only: Connect your RUCKUS Access Points directly to the switch using Ethernet cables. The switch will automatically supply power (PoE) and data.</li><li>Label Your Cables: Labeling Ethernet cables connected to each port helps avoid confusion during future troubleshooting or upgrades.</li><li>Check Wi-Fi Labels: Look for the Wi-Fi SSID and password label inside the network cabinet before resetting the Access Points.</li><li>Avoid Unnecessary Resets: Only perform a factory reset if the Wi-Fi login fails and you’ve confirmed that the password label is missing or incorrect.</li><li>Power Cycle When in Doubt: If devices appear offline, perform a power cycle by unplugging the switch for 10 seconds and plugging it back in.</li><li>Ask for Help: Don't hesitate to share a photo of your setup on the RUCKUS Lennar Community Forum, visuals help diagnose issues faster.</li></ul>

This RUCKUS Lennar Knowledge Base self-help article is designed to assist Lennar Home users in effectively configuring, optimizing, and setting up the RUCKUS and other networking devices for uninterrupted Internet connectivity.

2025-12-23T11:45:47-0800 2025-12-24T06:00:16-0800 https://support.ruckuswireless.com/articles/000015150 2025-12-23T12:00:41-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5989 knowledge_article_5989 2025-12-23T12:00:41-0800 000015150 Validated (External) Public R310 unl;R510 unl Firmware Firmware, R310 UNL, R510 UNL <h3>When Should You Upgrade?</h3> <ul><li>If you are experiencing unstable connections or app login errors.</li><li>If RUCKUS or Lennar Support recommends an update.</li><li>Every few months, as part of regular maintenance (when a stable ver <ul><li>Stable Power & Network: Keep the AP powered on and connected to a stable internet (for Online upgrade) or local network (for Local upgrade) during the process. Interruptions may cause failures.</li><li>Browser Compatibility: Use an updated browser (Google Chrome, Mozilla Firefox, or Microsoft Edge) for best results when accessing the Unleashed login portal.</li><li>Upgrade During Maintenance Window: Perform the upgrade during off-peak hours to minimize downtime for connected users.</li><li>Verify Post-Upgrade: After completion, confirm the firmware version under : Admin & Services ? System ? Upgrade and test basic connectivity.</li><li>Clear Browser Cache: If you face login or display issues post-upgrade, clear your browser cache or try logging in from a different browser.</li><li>AP Cluster Consistency: Ensure all Access Points in the Unleashed network are upgraded to the same firmware version for stability.</li></ul>

Your RUCKUS Access Points connect your devices to the internet and are an essential part of your Lennar Home network. Just like smartphones and computers, these devices occasionally need firmware upgrades, small software updates that fix bugs, improve security, and add new features.

2025-12-23T12:00:41-0800 2025-12-24T06:00:16-0800 https://support.ruckuswireless.com/articles/000015151 2025-12-23T12:02:10-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5988 knowledge_article_5988 2025-12-23T12:02:10-0800 000015151 Validated (External) Public R310;R510;Ruckus R310;Ruckus R510 Troubleshooting Troubleshooting, R310, R510 How to troubleshoot a RUCKUS Switch that shows green SYST & PWR lights but the APs are completely off? <h3>Follow these steps carefully to check and fix the issue.</h3> <h3>Step 1: Find the Switch IP Address</h3> To manage your switch, you need its IP Address (assigned by your Internet Service Provider’s router). You can use a free IP Scanner tool on your computer or phone. See guide: <a target="_blank" href="https://community.ruckuswireless.com/t5/RUCKUS-Lennar-Support-Knowledge/How-to-find-the-IP-Address-of-the-RUCKUS-Devices-Switch-and-APs/ta-p/77863">How to find the IP Address of the RUCKUS Devices (Switch and APs) using IP Scanner free applications</a> <img height="440" width="903" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001i73&feoid=00N50000002Cf3M&refid=0EMRk00000G3bmd" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 4: Switch Dashboard screenshot in a web browser confirming the Switch IP Address <h3>Step 2: Access the Switch via CLI (Command Line Interface)</h3> Once you know the IP address: 1. Open a terminal/command prompt or use an SSH/Telnet client (like <a target="_blank" href="https://www.putty.org/">PuTTY</a>). 2. Check guide: <a target="_blank" href="https://community.ruckuswireless.com/t5/RUCKUS-Lennar-Support-Knowledge/How-to-access-the-Command-Line-Interface-CLI-of-the-RUCKUS-ICX/ta-p/74450">How to access the Command Line Interface (CLI) of the RUCKUS ICX-7150-C12P Switch</a> 3. Connect to the RUCKUS Switch using the IP address. It will look like: ICX7150-C12 Switch> (SSH access) telnet@ICX7150-C12 Switch> (Telnet access if SSH fails) <h3>Step 3: Check PoE Status</h3> Type the following commands (press Enter after each): ICX7150-24P Switch>enable No password has been assigned yet... ICX7150-24P Switch#show inline power If all ports show as disabled/off, then the switch is not supplying power to APs. (Figure 4) <img height="801" width="905" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001i73&feoid=00N50000002Cf3M&refid=0EMRk00000G3iT9" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 5: PoE displayed as disabled/off on all Switch ports <h3>Step 4: Re-Enable PoE on All Ports</h3> Run these commands: ICX7150-24P Switch>enable No password has been assigned yet... ICX7150-24P Switch#configure terminal Warning: 1 user(s) already in config mode. ICX7150-24P Switch(config)#interface ethernet 1/1/1 to 1/1/12 ICX7150-24P Switch(config-mif-1/1/1-1/1/12)#inline power <img height="199" width="901" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001i73&feoid=00N50000002Cf3M&refid=0EMRk00000G3rkw" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 6: Example screenshot of enabling PoE <h3>Step 5: Verify</h3> Run the command again to confirm: show inline power <ul><li>All ports should now show as On. (Figure 6)</li><li>APs will power back up (lights will appear).</li></ul> <img height="487" width="910" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001i73&feoid=00N50000002Cf3M&refid=0EMRk00000G3f0c" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 7: Example screenshot after enabling PoE showing ports as 'On'

This issue occurs when the RUCKUS ICX-7150-C12P Switch appears to be working (both SYST and PWR lights are green) but does not deliver power to the Access Points (APs). The reason is that the Power over Ethernet (PoE) function on the switch ports is disabled/off. As a result: • Access Points connected to the RUCKUS Switch will have no lights (completely powered off). • Any other device relying on PoE from the RUCKUS Switch will also not work. • Even though the RUCKUS Switch looks normal, the ports will not be active.

2025-12-23T12:02:10-0800 2025-12-24T06:00:15-0800 https://support.ruckuswireless.com/articles/000015153 2025-12-23T12:05:18-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5986 knowledge_article_5986 2025-12-23T12:05:18-0800 000015153 Validated (External) Public R310;R510;Icx 7150;Ruckus R310;Ruckus R510;RUCKUS ICX 7150 Campus Switches Troubleshooting Troubleshooting, R310, R510, ICX 7150 Username and Password is not working for RUCKUS Devices. How can we log in to my RUCKUS Unleashed Access Point if I don’t know the default credentials? <h3>Where to Find Default Login Details?</h3> In most Lennar homes, the default Wi-Fi name (SSID) and admin password are printed on a sticker located inside your media panel or structured wiring cabinet, usually in the closet or utility area. (Figure 1) <img height="931" width="903" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iDV&feoid=00N50000002Cf3M&refid=0EMRk00000G3iD2" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 1: RUCKUS Lennar login details <h3>What if the Cabinet Login details Don't Work?</h3> However, in some cases, the sticker may be missing, or the password might not work. Don’t worry, we’ve listed some of the most commonly used default login credentials below. Important: The usernames and passwords are case-sensitive, meaning you must use capital and lowercase letters exactly as shown. <h3>Common Default Usernames and Passwords for RUCKUS ICX-7150-C12P Switch Dashboard Login. (Figure 2)</h3> <img alt="A computer programing softwareAI-generated content may be incorrect." height="434" width="904" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iDV&feoid=00N50000002Cf3M&refid=0EMRk00000G3fbj"></img> Figure 2: RUCKUS ICX-7150-C12P Switch default dashboard login details <h3>Common Default Usernames and Passwords for RUCKUS Unleashed Access Points Dashboard Login. (Figure 3)</h3> <img alt="A computer mouse with a login screenAI-generated content may be incorrect." height="436" width="907" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iDV&feoid=00N50000002Cf3M&refid=0EMRk00000G3oFD" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 3: RUCKUS Unleashed Access Points default dashboard login details Tip: Try both username/password combinations if you're unsure which device you're accessing. Reminder: The credentials are case-sensitive. Type exactly as shown, including any capital letters. Important: If any of the provided usernames or passwords work, you may update or reset them as needed. Please refer to the following instructional videos for guidance on resetting username/password for the devices: <ul><li>RUCKUS ICX-7150-C12P Switch: <a target="_blank" href="https://www.youtube.com/watch?v=0ynKwSTpd_A">Watch here</a></li><li>RUCKUS Access Point: <a target="_blank" href="https://www.youtube.com/watch?v=b-x1yubIXkY">Watch here</a></li></ul> <h3>What If the Password Don’t Work or Is Forgotten?</h3> If the default credentials don’t work or the password has been changed and forgotten, you will need to reset your device to restore access. Reset Instructions <ul><li>You can follow this simple Knowledge Base Article to reset your RUCKUS ICX-7150-C12P Switch: <a target="_blank" href="https://community.ruckuswireless.com/t5/RUCKUS-Lennar-Support-Knowledge/Process-for-performing-a-physical-factory-reset-hard-reset-on/ta-p/80783">Reset Process for RUCKUS ICX-7150-C12P Switch</a></li><li>You can follow this simple video tutorial to reset your RUCKUS R510/R310 Access Points: <a target="_blank" href="https://community.ruckuswireless.com/t5/RUCKUS-Lennar-Support-Knowledge/Factory-reset-process-of-the-RUCKUS-R510-Access-Points-for/ta-p/73964">Reset Process for RUCKUS R510/R310 Access Points</a></li></ul> This process will allow you to regain access and set a new Wi-Fi network name and password.

If you live in a Lennar Smart Home, your internet is typically managed by an ICX 7150-C12P Network Switch and/or RUCKUS Wi-Fi Access Points (WAPs). These devices control your home’s wired and wireless Internet Connections. To make changes or troubleshoot, you may need to access the admin interface of these devices using a username and password.

2025-12-23T12:05:18-0800 2025-12-24T06:00:15-0800 https://support.ruckuswireless.com/articles/000015152 2025-12-23T12:03:54-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5987 knowledge_article_5987 2025-12-23T12:03:54-0800 000015152 Validated (External) Public Icx 7150;RUCKUS ICX 7150 Campus Switches Troubleshooting Troubleshooting, ICX 7150 How to fix 'ping failed; host 192.168.0.x is not alive' error during the Software Recover process? <ul><li> Disable the Firewall on your PC to allow communication during Software Recovery. </li><li> Restart PuTTY (or the terminal app) and retry the Software Recovery steps from the beginning. </li><li> Manually load the firmware image using the <code>setenv image_name</code> and <code>update_primary</code> commands if the error continues. </li><li> Manually load the secondary image using <code>update_secondary</code>. </li><li> Manually update the boot code using <code>setenv uboot</code> and <code>update_uboot</code>. </li><li> Reboot the switch using the <code>reset</code> command to complete recovery. </li></ul>

If the RUCKUS ICX-7150-C12P Switch experiences a power outage or sudden power spike, it may fail to start correctly and enter what is called boot mode. In this state: • The SYST (System) light stays Amber/Orange • The PWR (Power) light stays Green • The Switch does not boot into its normal operating system When a simple reset using a paperclip (see reset video link) does not fix the issue, the next step is to perform a process called Software Recovery. During Software Recovery, some users encounter the error: 'ping failed; host 192.168.0.x is not alive' This article explains why this error happens and provides step-by-step instructions to resolve it so that the Software Recovery can be completed successfully.

2025-12-23T12:03:54-0800 2025-12-24T06:00:15-0800 https://support.ruckuswireless.com/articles/000015154 2025-12-23T12:07:34-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5985 knowledge_article_5985 2025-12-23T12:07:34-0800 000015154 Validated (External) Public Icx 7150;RUCKUS ICX 7150 Campus Switches Troubleshooting Troubleshooting, ICX 7150 How to establish Console CLI Access on the RUCKUS ICX-7150-C12P Switch? <ul><li> Connect the appropriate console cable (USB-C or RJ-45) between the switch and the computer. </li><li> Install the required RUCKUS USB serial driver and USB-to-UART bridge driver. </li><li> Install and open a terminal application such as PuTTY. </li><li> Identify the correct COM port in Device Manager. </li><li> Configure PuTTY with the correct serial settings and selected COM port. </li><li> Open the session and press Enter to access the switch CLI. </li></ul>

When the RUCKUS ICX-7150-C12P Switch's IP address cannot be retrieved to access the Command Line Interface (CLI), the alternative method is to connect via a Console cable between the Switch and a laptop/Computer. The following RUCKUS Lennar Knowledge Base self-help article provides step-by-step instructions on how to access the CLI using a Console cable connection.

2025-12-23T12:07:34-0800 2025-12-24T06:00:14-0800 https://support.ruckuswireless.com/articles/000015155 2025-12-23T12:09:10-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5984 knowledge_article_5984 2025-12-23T12:09:10-0800 000015155 Validated (External) Public R310 unl;R510 unl Configuration;System network management Configuration, System Network Management, R310 UNL, R510 UNL <h3>When may we need to create a new Wi-Fi Network from the RUCKUS Unleashed system?</h3> By creating separate networks, you can better manage wireless resources, reduce interference, and improve overall network performance. <ul><li>New D <h3>1. Log in to the RUCKUS Unleashed Dashboard:</h3> <ul><li style="text-align: justify;">Open a web browser and enter the IP address of your RUCKUS Unleashed Master Access Point (AP) or access <a target="_blank" href="https://unleashed.ruckuswireless.com/">https://unleashed.ruckuswireless.com/</a> link. If the link is not working and the Master AP IP address is unknown please refer to the article on <a target="_blank" href="https://community.ruckuswireless.com/t5/RUCKUS-Lennar-Support-Knowledge/How-to-find-the-IP-Address-of-the-RUCKUS-Devices-Switch-and-APs/ta-p/77863">How to find the IP Address of the RUCKUS Devices (Switch and APs) using IP Scanner free applications</a></li><li style="text-align: justify;">Log in with your login admin credentials.</li></ul> <img alt="A screenshot of a login formAI-generated content may be incorrect." height="412" width="904" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iLZ&feoid=00N50000002Cf3M&refid=0EMRk00000G4mb9" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 1: RUCKUS Unleashed Web Dashboard <h3>2. Navigate to the Wi-Fi Networks Section:</h3> <ul><li>Once logged in, go to the “Wi-Fi Networks” tab located on the left-hand side of the dashboard.</li></ul> <img alt="A white rectangular object with black linesAI-generated content may be incorrect." height="242" width="903" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iLZ&feoid=00N50000002Cf3M&refid=0EMRk00000G4p9B" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 2: WIFI Networks Menu <h3>3. Add a New Wi-Fi Network:</h3> <ul><li>Click on the “Create” button to start the process of adding a new Wi-Fi Network/SSID.</li></ul> <img height="341" width="904" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iLZ&feoid=00N50000002Cf3M&refid=0EMRk00000G4gh0" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 3: New Wi-Fi Create button <h3>4. Configure Basic Settings:</h3> <ul><li>Network Name (SSID): Enter the desired name for your new Wi-Fi network.</li><li>Description: Optionally, add a description for the network.</li></ul> <h3></h3> <h3>5. Security Settings:</h3> <ul><li>Encryption Method: Choose the type of encryption (e.g., WPA2, WPA3). Recommended is WPA2.</li><li>Passphrase: Enter a strong password for your Wi-Fi network.</li></ul> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="371" width="904" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iLZ&feoid=00N50000002Cf3M&refid=0EMRk00000G4lFG" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 4: Basic Configurations <h3>6. Advanced Settings (Optional):</h3> <ul><li>SSID Broadcast: Enable or disable SSID broadcast.</li><li>Client Isolation: Enable this if you want to prevent clients from communicating with each other.</li><li>VLAN ID: If you are using VLANs, enter the appropriate VLAN ID.</li></ul> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="437" width="903" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iLZ&feoid=00N50000002Cf3M&refid=0EMRk00000G4pAn" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 5: Optional settings <h3>7. Access Control (Optional):</h3> <ul><li>MAC Filtering: Optionally, enable MAC filtering to allow or deny specific devices.</li></ul> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="393" width="903" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iLZ&feoid=00N50000002Cf3M&refid=0EMRk00000G4pCP" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 6: MAC Filtering (Optional) <h3>8. Quality of Service (QoS):</h3> <ul><li>Configure QoS settings if you need to prioritize certain types of traffic.</li></ul> <h3>9. Radio Control:</h3> Choose the appropriate radio type for the WLAN to operate on, based on the desired frequency band (2.4 GHz or 5 GHz). This allows you to optimize performance by selecting the radio that best suits the needs of your network and devices. <ul><li style="text-align: justify;">2.4 GHz Radio: Ideal for broader coverage but may experience more interference due to congestion from other devices.</li><li style="text-align: justify;">5 GHz Radio: Provides faster speeds and less interference, but with a shorter range compared to 2.4 GHz.</li></ul> Select the radio type that aligns with your network requirements to ensure optimal performance and reduce interference. <img alt="A screenshot of a computerAI-generated content may be incorrect." height="416" width="911" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iLZ&feoid=00N50000002Cf3M&refid=0EMRk00000G4nXC" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 7: WLAN Radio select option (2.4 & 5 GHz) <h3>10. Save and Apply:</h3> <ul><li>After configuring all the settings, click on the “Save” button to create the new SSID.</li><li>The new SSID will now be listed under the Wi-Fi Networks section.</li></ul> <h3>11. Verify the New SSID:</h3> <ul><li>Ensure that the new SSID is broadcasting by checking the list of Wi-Fi available networks on your device.</li></ul> <h3>12. Video Demonstration:</h3> <ul><li style="text-align: justify;">Additionally, please refer to the following <a target="_blank" href="https://www.youtube.com/watch?v=eSl_8rs1QnU">VIDEO LINK</a> for an explanation of creating a Wireless LAN (WLAN)/Service Set Identifier (SSID) with the RUCKUS Unleashed Web System.</li></ul>

This RUCKUS Lennar Knowledge Base self-help article is intended to guide Lennar Home RUCKUS device users through the process of setting up a new Wireless LAN (WLAN)/Service Set Identifier (SSID) that operates on 2.4GHz, 5GHz, or both radio channels through RUCKUS Unleashed Access Points.

2025-12-23T12:09:10-0800 2025-12-24T06:00:14-0800 https://support.ruckuswireless.com/articles/000015156 2025-12-23T12:10:50-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5983 knowledge_article_5983 2025-12-23T12:10:50-0800 000015156 Validated (External) Public Icx 7150;RUCKUS ICX 7150 Campus Switches Troubleshooting Troubleshooting, ICX 7150 How to fix RUCKUS ICX-7150-C12P Routing Code (SPR) issue using the Switch Web User Interface/GUI? <ul><li> Identify the current IP address assigned to the ICX-7150-C12P switch by the ISP router. </li><li> Access the switch via a web browser using the identified IP. </li><li> Check the Running Image Version on the switch dashboard. </li><li> Confirm if the switch is booted on SPR (Routing Code). </li><li> Follow the Web GUI steps to switch the active partition from SPR to SPS. </li><li> Reboot/reload the switch after the change. </li><li> Verify the switch comes online with SPS (Switching Code) active. </li><li> Confirm internet connectivity and normal device operation. </li></ul>

This issue may happen when your RUCKUS ICX-7150-C12P Switch starts running on the Routing code (SPR). The Switch should run on the Switching code (SPS) to avoid these issues for Lennar home users. Due to a power outage/power spike, the Switch boots up on the other partition which may be running on a ‘Routing Code (SPR)’ results in causing this issue.

2025-12-23T12:10:50-0800 2025-12-24T06:00:13-0800 https://support.ruckuswireless.com/articles/000015157 2025-12-23T12:12:05-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5982 knowledge_article_5982 2025-12-23T12:12:05-0800 000015157 Validated (External) Public R310 unl;R510 unl;Icx 7150;RUCKUS ICX 7150 Campus Switches Configuration Configuration, R310 UNL, R510 UNL, ICX 7150 RUCKUS Switch disconnected in Unleashed, how to Add a it to the RUCKUS Unleashed System via Web Browser? <h3>Steps to Add a Switch to RUCKUS Unleashed via Web Browser:</h3> <h3>Step 1: Access the Unleashed Web UI</h3> 1. Open a browser (Chrome/Firefox/Edge). 2. Enter the IP address of the Unleashed Master Access Point or navigate to <a target="_blank" href="https://unleashed.ruckuswireless.com/">https://unleashed.ruckuswireless.com</a>. (Refer to the article <a target="_blank" href="https://community.ruckuswireless.com/t5/RUCKUS-Lennar-Support-Knowledge/How-to-find-the-IP-Address-of-the-RUCKUS-Devices-Switch-and-APs/ta-p/77863">on how to locate the IP address</a> if Master AP IP Address is unknown) 3. Log in using your RUCKUS Unleashed System admin credentials. (Figure 1) <img alt="A screenshot of a computerAI-generated content may be incorrect." height="439" width="902" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iVF&feoid=00N50000002Cf3M&refid=0EMRk00000G4yMA" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 1: RUCKUS Unleashed Web UI Login <h3>Step 2: Turn on the Automatic Switch Approval</h3> 1. From the Unleashed Dashboard, click on Admin & Services. (Figure 2) 2. Navigate to: Admin & Services > System > System info 3. Ensure that the 'Switch Approval' option is selected and then click 'Apply' to save the changes. <img alt="A screenshot of a computerAI-generated content may be incorrect." height="371" width="903" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iVF&feoid=00N50000002Cf3M&refid=0EMRk00000G4o54" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 2: Automatic Switch Approval <h3>Step 3: Add a New Switch</h3> 1. Click the “+ Add” button on the Switch Management page. (Figure 3) 2. A pop-up will appear asking for switch details. <img alt="A screenshot of a computerAI-generated content may be incorrect." height="362" width="904" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iVF&feoid=00N50000002Cf3M&refid=0EMRk00000G4t6N" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 3: Adding a New Switch <h3>Step 4: Enter Switch Information</h3> Fill in the required fields: (Figure 4) <ul><li>Switch IP Address: IP address of the switch you want to add.</li><li>Username: Admin username for the switch (default: super).</li><li>Password: Admin password for the switch (default: sp-admin).</li><li>Model: Will be auto-detected after successful login.</li></ul> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="348" width="907" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iVF&feoid=00N50000002Cf3M&refid=0EMRk00000G50hJ" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 4: Adding the Switch IP Address and its login Credentials Make sure the Switch IP is reachable from the Unleashed AP. If unreachable, the connection will fail. <h3>Step 5: Apply and Wait</h3> <ul><li>Click “OK” or “Add” to begin the process with the ‘Connecting’ message. (Figure 5)</li><li>Unleashed will try to connect and register the switch.</li><li>It might take 1–5 minutes, depending on the network.</li></ul> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="415" width="905" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iVF&feoid=00N50000002Cf3M&refid=0EMRk00000G50fh" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 5: Switch displayed in the 'Connecting' state <h3>Step 6: Verify Switch Addition</h3> Once added, the switch should appear in the Switch Management list: (Figure 6) <ul><li>Status: Should show as Working or Connected.</li><li>You’ll see details like:</li><ul><li>IP Address</li><li>Model</li><li>Firmware</li><li>Number of Connected Devices</li><li>Port Info Etc.,</li></ul></ul> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="393" width="903" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iVF&feoid=00N50000002Cf3M&refid=0EMRk00000G4xYB" style="display: block;margin-left: auto;margin-right: auto;"></img> Figure 6: Switch displayed in the Connected/Working state

This article walks you on adding the RUCKUS ICX-7150-C12P Switch in the RUCKUS Access Points management Unleashed system. It’s designed for homeowners who has RUCKUS ICX-7150-C12P Switches and RUCKUS Access Points.

2025-12-23T12:12:05-0800 2025-12-24T06:00:13-0800 https://support.ruckuswireless.com/articles/000015159 2025-12-23T12:14:14-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5981 knowledge_article_5981 2025-12-23T12:14:14-0800 000015159 Validated (External) Public Icx 7150;RUCKUS ICX 7150 Campus Switches Firmware Firmware, ICX 7150 Switch upgrade using Putty and TFTP server application <h3>G) Upgrade Process to Intermediate version: </h3> 1. Start the upgrade by using the command copy tftp flash 10.176.199.48 mnz10114.bin bootrom (ip address of the computer) in PuTTY. <img style="height: auto;" alt="Imran_ruckus_21-1747414132139.png" title="Imran_ruckus_21-1747414132139.png" height="519" width="865" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15477iE8CDDE1A1D0BE115/image-dimensions/865x519?v=v2"></img>Figure 22: Upgrading the Boot image 2. Continue the upgrade with the boot image using the command copy tftp flash 10.176.199.48 SPS08080f.bin primary (upgrade the image) <img style="height: auto;" alt="Imran_ruckus_22-1747414132140.png" title="Imran_ruckus_22-1747414132140.png" height="537" width="922" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15478i6B0CE56398942F12/image-dimensions/922x537?v=v2"></img>Figure 23: Upgrading to Initial version 3. Use the command show flash to check if the primary flash has the new code. <img style="height: auto;" alt="Imran_ruckus_23-1747414132140.png" title="Imran_ruckus_23-1747414132140.png" height="524" width="900" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15476i7AF62D79806BD260/image-dimensions/900x524?v=v2"></img>Figure 24: Checking Primary has new code 4. Use the command ‘write memory’ to save the changes. 5. Use the command ‘boot system flash primary’ to boot the Switch with the new code. <img style="height: auto;" alt="Imran_ruckus_24-1747414132141.png" title="Imran_ruckus_24-1747414132141.png" height="516" width="882" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15480i840F594B543F2CEE/image-dimensions/882x516?v=v2"></img>Figure 25: Boot Primary with the new code Now, the Switch is upgraded to the Intermediate version. <h3>H) Upgrade to the Recommended version: </h3> 1. Use the command ‘copy tftp flash 10.176.199.48 SPS08095gufi.bin primary’ to upgrade the image to the recommended version. <img style="height: auto;" alt="Imran_ruckus_25-1747414132142.png" title="Imran_ruckus_25-1747414132142.png" height="512" width="869" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15479i5ABE63BE099D5C1D/image-dimensions/869x512?v=v2"></img>Figure 26: Copying Image to Recommended version 2. Use the command ‘show flash’ to check if the Primary has the new code. <img style="height: auto;" alt="Imran_ruckus_26-1747414132144.png" title="Imran_ruckus_26-1747414132144.png" height="520" width="878" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15481i75EBCCF5809FEB5D/image-dimensions/878x520?v=v2"></img>Figure 27: Checking Primary has New SPS Code 3. Use the command ‘write memory’ to save the changes. 4. Use the command ‘boot system flash primary’ to boot the Switch with the new code. <img style="height: auto;" alt="Imran_ruckus_27-1747414132145.png" title="Imran_ruckus_27-1747414132145.png" height="527" width="901" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15483iC6476EC1554F94A1/image-dimensions/901x527?v=v2"></img>Figure 28: Boot Primary with the New SPS Code Once the Switch boots up, the Switch will have the recommended version. <h3>I) Synchronize the Partitions: </h3> For best results, we recommend having both partitions with the same version. 1. Use the command ‘copy flash flash secondary’ to copy what is in the primary to the secondary partition. <img style="height: auto;" alt="Imran_ruckus_28-1747414132147.png" title="Imran_ruckus_28-1747414132147.png" height="541" width="933" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15482i215990B1566BFE53/image-dimensions/933x541?v=v2"></img>Figure 29: Synchronizing both partitions 2. Using the command ‘show flash’, we can verify the codes on both Primary and Secondary. <img style="height: auto;" alt="Imran_ruckus_29-1747414132148.png" title="Imran_ruckus_29-1747414132148.png" height="548" width="937" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15484i5B93A73791394E3A/image-dimensions/937x548?v=v2"></img>Figure 30: Verifying SPS Code consistency across both partitions Now, the Switch is upgraded to the Recommended UFI version 08.0.95g.

This article provides a step-by-step guide on upgrading a switch from a non-UFI version to the recommended 08.0.95g UFI version using a TFTP server and PuTTY Applications.

2025-12-23T12:14:14-0800 2025-12-24T06:00:13-0800 https://support.ruckuswireless.com/articles/000015160 2025-12-23T12:15:21-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5980 knowledge_article_5980 2025-12-23T12:15:21-0800 000015160 Validated (External) Public Icx 7150;RUCKUS ICX 7150 Campus Switches Firmware Firmware, ICX 7150 Switch Upgrade using USB Flash drive D. Accessing the Switch 1. Connect to the switch using <a target="_blank" href="https://community.ruckuswireless.com/t5/RUCKUS-Lennar-Support-Knowledge/How-to-access-the-Command-Line-Interface-CLI-of-the-RUCKUS-ICX/ta-p/74450">SSH, Telnet, or a console connection</a>. 2. Enter the 'enable’ command to switch to User EXEC mode: <img style="height: auto;" alt="Imran_ruckus_11-1748374845021.png" title="Imran_ruckus_11-1748374845021.png" height="186" width="853" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15590i35B401769515A6AA/image-dimensions/853x186?v=v2"></img>Figure 12: Accessing the Switch CLI E. Verify USB Recognition 1. Use the 'mount disk0' command to ensure the Switch recognizes the USB. <img style="height: auto;" alt="Imran_ruckus_12-1748374845023.png" title="Imran_ruckus_12-1748374845023.png" height="96" width="851" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15592i9C145AFF66ADA167/image-dimensions/851x96?v=v2"></img>Figure 13: Switch recognizing the USB 2. Use the 'show files disk0' command to view the contents of the USB drive. <img style="height: auto;" alt="Imran_ruckus_13-1748374845023.png" title="Imran_ruckus_13-1748374845023.png" height="335" width="859" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15591i2977E1DB8AF003E9/image-dimensions/859x335?v=v2"></img>Figure 14: Viewing the contents of USB F. Upgrade to Intermediate version Note: The switch has two flash storage partitions, Primary and Secondary. <ul style="list-style-type: initial;"><li>'show flash' command will show the codes installed on both partitions of the switch. </li></ul> <img style="height: auto;" alt="Imran_ruckus_14-1748374845024.png" title="Imran_ruckus_14-1748374845024.png" height="328" width="852" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15593i596A9A55CFA88A39/image-dimensions/852x328?v=v2"></img>Figure 15: Display codes on both partitions <ul style="list-style-type: initial;"><li>'show version' command will display the actual version on the switch.? </li></ul> <img style="height: auto;" alt="Imran_ruckus_15-1748374845026.png" title="Imran_ruckus_15-1748374845026.png" height="351" width="844" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15594iD1ED628258DB82F9/image-dimensions/844x351?v=v2"></img>Figure 16: Display Switch version 1. Upgrade the bootrom using the command “copy disk0 flash mnz10114.bin bootrom” <img style="height: auto;" alt="Imran_ruckus_16-1748374845027.png" title="Imran_ruckus_16-1748374845027.png" height="318" width="835" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15595iBA0C05F989372685/image-dimensions/835x318?v=v2"></img>Figure 17: Copying the Initial version boot file 2. Upgrade to intermediate version 8080f using the command “copy disk0 flash SPS08080f.bin secondary” (Can install in both primary and secondary partitions) <img style="height: auto;" alt="Imran_ruckus_17-1748374845028.png" title="Imran_ruckus_17-1748374845028.png" height="271" width="889" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15596i8947A1EBD53BABF4/image-dimensions/889x271?v=v2"></img>Figure 18: Copying initial version image 3.Use the command "show flash" to check if it was installed correctly in the right partition. <img style="height: auto;" alt="Imran_ruckus_18-1748374845029.png" title="Imran_ruckus_18-1748374845029.png" height="332" width="874" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15597i4B11912727C2CC53/image-dimensions/874x332?v=v2"></img>Figure 19: Check if version was installed 4. Use the command “boot system flash secondary yes” to boot the Switch from the secondary partition to make sure the image was installed correctly. <img style="height: auto;" alt="Imran_ruckus_19-1748374845030.png" title="Imran_ruckus_19-1748374845030.png" height="451" width="845" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15598iDFCB29CC647D57EF/image-dimensions/845x451?v=v2"></img>Figure 20: Boot Switch from Secondary partition 5. Use the 'show version' command to check the current version once the boot process is complete and the version should be 08.0.80f <img style="height: auto;" alt="Imran_ruckus_20-1748374845036.png" title="Imran_ruckus_20-1748374845036.png" height="382" width="861" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15599iB8577C667F77362B/image-dimensions/861x382?v=v2"></img>Figure 21: Checking the current Switch version G. Upgrade to recommended version 1. Use the command “copy disk0 flash SPS08095gufi.bin secondary” to copy from intermediate 08.0.80f to recommended version 08.0.95g. <img style="height: auto;" alt="Imran_ruckus_21-1748374845037.png" title="Imran_ruckus_21-1748374845037.png" height="320" width="887" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15600i82CE93697EA45628/image-dimensions/887x320?v=v2"></img>Figure 22: Copying recommended version image 2. Use the command “boot system flash secondary yes” to boot from the secondary partition once the copy is complete. <img style="height: auto;" alt="Imran_ruckus_22-1748374845038.png" title="Imran_ruckus_22-1748374845038.png" height="366" width="936" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15601iE0E15BBAD369B80E/image-dimensions/936x366?v=v2"></img>Figure 23: Boot System from secondary partition 3. Use the 'show version' command to check the current version once the boot process is complete and the version should be 08.0.95g <img style="height: auto;" alt="Imran_ruckus_23-1748374845041.png" title="Imran_ruckus_23-1748374845041.png" height="409" width="914" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15602iE56BDA04C27F58D5/image-dimensions/914x409?v=v2"></img>Figure 24: Checking the Switch version H. Synchronize the partitions: For best results, we recommend having both partitions on the same version.? 1. Use the command “copy flash flash primary” to re-flash from Secondary to Primary. <img style="height: auto;" alt="Imran_ruckus_24-1748374845042.png" title="Imran_ruckus_24-1748374845042.png" height="352" width="864" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15603i901DCC3023823357/image-dimensions/864x352?v=v2"></img>Figure 25: Copying same image on partitions 2. Use the command “show flash” to confirm the copy. <img style="height: auto;" alt="Imran_ruckus_25-1748374845043.png" title="Imran_ruckus_25-1748374845043.png" height="275" width="853" src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/15604i64DCCEC45C6B461B/image-dimensions/853x275?v=v2"></img>Figure 26: Checking the Switch version after upgrade The RUCKUS ICX-7150-C12P Switch is now upgraded to the recommended version 08.0.95g.

This article provides a step-by-step guide on upgrading a switch from a non-UFI version to the recommended 08.0.95g UFI version using a USB Flash Drive and PuTTY Applications.

2025-12-23T12:15:21-0800 2025-12-24T06:00:12-0800 https://support.ruckuswireless.com/articles/000015158 2025-12-23T12:16:12-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5979 knowledge_article_5979 2025-12-23T12:16:12-0800 000015158 Validated (External) Public Icx 7150;RUCKUS ICX 7150 Campus Switches Firmware Firmware, ICX 7150 Switch upgrade using Web Interface GU(ICX7150 Switch) <h3>F. Accessing the Interface for Upgrade</h3> 1. Open the Web browser (like Google Chrome) and enter the Switch IP address in the address bar of your Web browser. If your IP address is 10.176.199.49, enter that IP address in the address bar of your Web browser. 2. Hit “Login” when you observe the Switch dashboard. <img height="369" width="823" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G7xa2"></img>Figure 17: Login to Switch dashboard 3. If the credentials are unknown, please refer to the guide below for the default login credentials. <a target="_blank" href="https://community.ruckuswireless.com/t5/RUCKUS-Lennar-Support-Knowledge/Default-Admin-Login-Username-Password-for-RUCKUS-ICX-7150-C12P/ta-p/105252">https://community.ruckuswireless.com/t5/RUCKUS-Lennar-Support-Knowledge/Default-Admin-Login-Username...</a> <img height="379" width="833" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G7yfn"></img>Figure 18: Switch dashboard Now, you gained access to the Switch dashboard. <h3>G. Configuring for initial version upgrade</h3> 1. Navigate to the Command section in the left pane, then go to TFTP > Configuration > TFTP Configuration. <img height="371" width="811" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G87Cn"></img>Figure 19: Configuring TFTP for the initial version upgrade Enter the required information: <ul><li>TFTP Server IP: IP address of your computer, which you have configured in the TFTP application.</li><li>Image file name: mnz10114.bin</li><li>Select Copy from Server to Flash, then click Save and confirm by selecting Yes.</li></ul> <img height="374" width="824" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G7sos"></img>Figure 20: Copying Boot file of initial upgrade version. <img height="373" width="822" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G87BB"></img>Figure 21: Saving Boot file of the initial version 2. In the left pane, click on Command, then navigate to TFTP > Image > TFTP Image. <img height="378" width="828" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G87JF"></img>Figure 22: Copying Image file of Initial upgrade version Enter the required information <ul><li>TFTP Server IP: IP address of your computer, which you have configured in the TFTP application.</li><li>Image file name: SPS08080f.bin</li><li>Flash: Primary Select Copy from Server, then click Save and confirm by selecting Yes.</li></ul> <img height="378" width="826" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G87EP"></img>Figure 23: Entering the Server details for image file <img height="373" width="822" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G86dK"></img>Figure 24: Saving the initial version image <h3>H. Configuring for Recommended version Upgrade:</h3> 1. In the left pane, click on Command, then navigate to TFTP > Image > TFTP Image. <img height="378" width="828" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G87Hd"></img> Figure 25: TFTP configuration for recommended version Enter the required information <ul><li>TFTP Server IP: IP address of your computer, which you have configured in the TFTP application.</li><li>Image file name: SPS08095gufi.bin</li><li>Flash: Primary Select Copy from Server, then click Save and confirm by selecting Yes.</li></ul> <img height="390" width="872" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G87G1"></img>Figure 26: Copying Recommended version image file <img height="375" width="827" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G87Kr"></img>Figure 27: Copying the Recommended version image <h3>I. Synchronizing the Partitions</h3> For best results, we recommend having both partitions with the same version. 1. In the left pane, click on Command, then navigate to TFTP > Image > TFTP Image. <img height="375" width="822" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G87MT"></img>Figure 28: Configuring to copy image to the Secondary partition Enter the required information: <ul><li>TFTP Server IP: IP address of your computer, which you have configured in the TFTP application.</li><li>Image file name: SPS08095gufi.bin</li><li>Flash: Secondary Select Copy from Server, then click Save and confirm by selecting Yes.</li></ul> <img height="370" width="826" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G87O5"></img>Figure 29: Copying the file to Secondary partition <img height="378" width="832" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G7tD5"></img>Figure 30: Saving to Secondary partition <h3>J. Reloading the Switch to complete the Upgrade</h3> 1. In the left pane, click on Command, then navigate to Reload. Click Yes for “Do you really want to reload?” <img height="379" width="846" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G87Ph"></img>Figure 31: Reboot the Switch to save the changes <img height="381" width="844" border="0" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j9Z&feoid=00N50000002Cf3M&refid=0EMRk00000G87RJ"></img>Figure 32: Confirm the reboot of the Switch Now, the Switch is upgraded to the Recommended version 08095g.

This article provides a step-by-step guide on upgrading a switch from a non-UFI version to the recommended 08.0.95g UFI version using TFTP server and Web GUI Interface(browser)

2025-12-23T12:16:12-0800 2025-12-24T06:00:12-0800 https://support.ruckuswireless.com/articles/000015132 2025-12-23T12:19:59-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5977 knowledge_article_5977 2025-12-23T12:19:59-0800 000015132 Validated (External) Public R310;R510;Ruckus R310;Ruckus R510 Troubleshooting Troubleshooting, R310, R510 To Clear Forgotten or Incorrect Configurations To Reconfigure the AP for a New Network To Troubleshoot IP or Connectivity Conflicts If you have multiple Access Points (APs) in your home, please locate the RUCKUS ICX-12P SWITCH in the network panel and temporarily disconnect the Ethernet cables for all APs except the one you're working on. This will ensure a smooth and uninterrupted configuration process.

This article explains how to properly perform a physical factory reset on a Ruckus Access Point (AP) and reconfigure the wireless network afterward.

2025-12-23T12:19:59-0800 2025-12-24T06:00:11-0800 https://support.ruckuswireless.com/articles/000015133 2025-12-23T12:18:20-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5978 knowledge_article_5978 2025-12-23T12:18:20-0800 000015133 Validated (External) Public Icx 7150;RUCKUS ICX 7150 Campus Switches Firmware;Troubleshooting Firmware, Troubleshooting, ICX 7150 <ul style="list-style-type: initial;"><li>The Switch will not supply power to any PoE devices, including the doorbell, cameras, and Access Points.</li><li>Devices connected to the Switch will not have network connectivity.</li><li>Console access will be t Due to a power outage or power spike, the RUCKUS ICX-7150-C12P Switch has entered a state known as boot mode, where it is unable to start normally. This typically indicates a corrupted image flash. To resolve this, a software recovery is required to reinstall the firmware and restore normal operation. Software recovery is like giving a fresh start when the system doesn’t work. The recovery involves starting the switch in a recovery mode and reinstalling a valid software image to resolve the issue and returning the switch to boot up properly.

Software recovery is like giving a fresh start when the system doesn’t work. The recovery involves starting the switch in a recovery mode and reinstalling a valid software image to resolve the issue and returning the switch to boot up properly.

2025-12-23T12:18:20-0800 2025-12-24T06:00:11-0800 https://support.ruckuswireless.com/articles/000015127 2025-12-23T12:21:05-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5976 knowledge_article_5976 2025-12-23T12:21:05-0800 000015127 Validated (External) Public R310 unl;R510 unl Configuration;Troubleshooting Configuration, Troubleshooting, R310 UNL, R510 UNL When adding a new Access Point (AP) to a Ruckus Unleashed network, it is critical that the AP runs the same firmware version as the Master AP. A code mismatch between the new AP and the Master can lead to connectivity issues, including the AP showing a Identifying and resolving firmware mismatches by upgrading the AP to match the Master AP’s code version.

When adding a new Access Point (AP) to a Ruckus Unleashed network, it is critical that the AP runs the same firmware version as the Master AP.

2025-12-23T12:21:05-0800 2025-12-24T06:00:11-0800 https://support.ruckuswireless.com/articles/000015130 2025-12-23T12:24:18-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5975 knowledge_article_5975 2025-12-23T12:24:18-0800 000015130 Validated (External) Public R310 unl;R510 unl;Flexmaster umm Configuration;System network management Configuration, System Network Management, R310 UNL, R510 UNL, FlexMaster UMM How do I set up Ruckus Unleashed to manage all settings through the mobile app. Note: It is recommended to note down your configuration details for future reference.

Setting up Ruckus Unleashed on mobile to manage all settings through the app

2025-12-23T12:24:18-0800 2025-12-24T06:00:10-0800 https://support.ruckuswireless.com/articles/000014895 2025-12-23T12:38:51-0800 monthly 0.8 admin,premium knowledge_article_5797 knowledge_article_5797 2025-07-03T01:59:19-0700 000014895 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;System network management Performance, Configuration, System Network Management, SmartCell Gateway <div>What does the red exclamation mark symbol mean next to a SmartZone-controlled AP's MAC address?</div> <div> To remove the tag from the affected AP: <ol><li>Select the AP.</li><li>Click More ? Untag Critical A</li></ol> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001pmr&feoid=00N50000002Cf3M&refid=0EMPH00000M7yFn"></img> Then, consider one of the following actions: <ul><li>Adjust or disable the Critical AP threshold under Network ? Wireless ? AP Settings ? Critical AP Tagging.</li><li>Verify traffic processed by the AP under Network ? Access Points ? [Affected AP] ? Traffic ? Clients, and take necessary actions.</li></ul> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001pmr&feoid=00N50000002Cf3M&refid=0EMPH00000M7yFo"></img> </div> <ul style="margin-left: 40px;"><li>verify amount of traffic processed by affected AP under Network >> Access Points >> affected AP >> Traffic >> Clients and take required actions<img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001pmr&feoid=00N50000002Cf3M&refid=0EMPH00000M7yFp"></img></li></ul>

Learn why a red exclamation mark appears next to a SmartZone-controlled AP's MAC address and how to remove it.

2025-12-23T12:38:51-0800 2025-12-24T06:00:10-0800 https://support.ruckuswireless.com/articles/000012156 2025-12-23T04:52:30-0800 monthly 0.8 admin,premium knowledge_article_5973 knowledge_article_5973 2022-03-15T10:55:35-0700 000012156 Validated (External) Premium Cloudpath;Virtual smartcell gateway;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting Configuration, Troubleshooting, Cloudpath, virtual SmartCell Gateway Why are all clients connecting to site that uses Cloudpath created DPSK's failing to connect after new DPSK's have been created Issue was resolved by flushing Cloudpath DPSK cache using url: <a href="https://$CP_host/admin/dpsk/flushCache" style="color: #0563c1;text-decoration: underline;" target="_blank">https://$CP_host/admin/dpsk/flushCache</a> This can also be done using Cloudpath API: <a href="https://commscope.sharepoint.com/sites/ARR_CSS/TechPubs/ProductGuides/Cloudpath/5.6/cp-5.6-api-guide.pdf" style="color: #0563c1;text-decoration: underline;" target="_blank">https://commscope.sharepoint.com/sites/ARR_CSS/TechPubs/ProductGuides/Cloudpath/5.6/cp-5.6-api-guide.pdf</a> <a href="https://commscope.sharepoint.com/sites/ARR_CSS/TechPubs/ProductGuides/Cloudpath/5.9/cp-5.9-legacy-api-guide.pdf" style="color: #0563c1;text-decoration: underline;" target="_blank">https://commscope.sharepoint.com/sites/ARR_CSS/TechPubs/ProductGuides/Cloudpath/5.9/cp-5.9-legacy-api-guide.pdf</a> <img alt="User-added image" height="376" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001odt&feoid=00N50000002Cf3M&refid=0EM2J000003Xqeu" width="629"></img>

MDU site where client devices use unbound external DPSK verified by Cloudpath server and created by an external third party registration server via API were unable to connect previously connected devices after new DPSK's were created when client moved

2025-12-23T04:52:30-0800 2025-12-23T14:00:18-0800 https://support.ruckuswireless.com/articles/000012140 2025-12-23T04:35:14-0800 monthly 0.8 admin,premium knowledge_article_5974 knowledge_article_5974 2022-03-14T03:50:19-0700 000012140 Validated (External) Premium Sz144;Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Installation Configuration, Installation, SZ144, SZ300, SCG200, virtual SmartCell Gateway, SZ100 How much time a service will take when a new certificate is mapped with SZ services? Customer is renewing controller's wildcard CA cert as it is expiring soon (new cert has same domain name so just validity will change). They want to know below details to make sure there is no or minimum service impact: <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001oKX&feoid=00N50000002Cf3M&refid=0EM2J000003XkfR" width="575"></img> 1.What will be the impact on each SmartZone service and on end clients that are already connected or attempting to connect during a service certificate change. <div style="margin-left: 40px;"> Web: No client service impact but SZ UI may not be available while service restarts. AP Portal: New captive portal clients may get certificate error or portal redirection may not work while service is restarting. Hotspot (WISPr): Same impact as AP portal. Ruckus Intra-device communication: No user service impact. </div> <div style="margin-left: 40px;">Notes:</div> <ul><li style="margin-left: 40px;">No impact to existing clients but client connecting during the service restart may face issues on captive portal/guest SSIDs.</li><li style="margin-left: 40px;">Admins using the SZ GUI may get certificate error or may not at all able to access SZ UI during service restart (web is one of the services which will restart, post applying the new certificate).</li></ul> 2. How much time it will take for service to come to normal after changing all 4 certs to service mapping and hit OK? Answer: Certificate update/install will restart subscriber mgmt, NBI and Web services. Customer can upload all these certificate at once and you can assume roughly 15 minutes (max) of downtime for services to recover 3. Do we need downtime if there is possibility for client disconnection or service impact? Answer: Usually no downtime required for client connection but to avoid captive portal certificate errors, its better to update certificate during a maintenance window so that users will not wonder why they are getting certificate error. 4. How to check service status? Go to SZ CLI >> Enable mode >> run "show service"

This article explains the amount of downtime required for a specific application service when a new certificate is mapped and applied to SmartZone services.

2025-12-23T04:35:14-0800 2025-12-23T14:00:18-0800 https://support.ruckuswireless.com/articles/000014468 2025-12-23T04:54:42-0800 monthly 0.8 admin,premium knowledge_article_5972 knowledge_article_5972 2025-01-22T07:57:10-0800 000014468 Validated (External) Premium Ruckus icx switches;Unleashed;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor How to configure VLANS for an AP on an ICX switch. For more detailed information, you can refer to the following resources: [<a href="https://docs.commscope.com/bundle/unleashed-200.14-onlinehelp/page/GUID-9D7EA500-E907-46E6-941D-0DCEE1324318.html" target="_blank">VLAN Configuration for Unleashed APs</a>] (https://docs.commscope.com/bundle/unleashed-200.14-onlinehelp/page/GUID-9D7EA500-E907-46E6-941D-0DCEE1324318.html) [<a href="https://docs.commscope.com/bundle/unleashed-200.14-onlinehelp/page/GUID-165F3B92-F587-4BEC-A789-464973B26207.html" target="_blank">SSID VLAN Tagging</a>](https://docs.commscope.com/bundle/unleashed-200.14-onlinehelp/page/GUID-165F3B92-F587-4BEC-A789-464973B26207.html) [<a href="https://docs.commscope.com/bundle/unleashed-200.14-onlinehelp/page/GUID-813D6970-3789-498E-9939-D0D71275F271.html" target="_blank">Managing VLANs and AP Ports</a>](https://docs.commscope.com/bundle/unleashed-200.14-onlinehelp/page/GUID-813D6970-3789-498E-9939-D0D71275F271.html)

To ensure optimal performance and security on most networks, it's crucial to configure your switches and Access Points (APs) correctly. This article explains the configuration requirements for VLANs related to APs and SSIDs on ICX switches

2025-12-23T04:54:42-0800 2025-12-23T14:00:17-0800 https://support.ruckuswireless.com/articles/000012154 2025-12-23T04:56:46-0800 monthly 0.8 admin,premium knowledge_article_5971 knowledge_article_5971 2022-03-14T03:48:59-0700 000012154 Validated (External) Premium Sz144 d;Vsz dataplane;Sz100d Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SZ144 D, vSZ Dataplane, SZ100D Why does the data plane send out a DHCP request to the DHCP server every 3 seconds and what can I do about it?

Data plane tunnel core sends a DHCP heartbeat to the DHCP server if the DHCP relay service is enabled in the DP Core Tunnel. These are 'dummy' heartbeats and will not always elicit a response from the DHCP server. In that case this article is to describe ways to work around it.

2025-12-23T04:56:46-0800 2025-12-23T14:00:17-0800 https://support.ruckuswireless.com/articles/000012028 2025-12-23T06:21:06-0800 monthly 0.8 admin,premium knowledge_article_5240 knowledge_article_5240 2021-12-21T02:41:43-0800 000012028 Validated (External) Premium Ruckus analytics;Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Installation;Security Configuration, Installation, Security, Ruckus Analytics, SZ144, SZ300, virtual SmartCell Gateway, SZ100 <div>What URLs need to be allowed in the firewall for RUCKUS AI?</div> <div> For RUCKUS AI to function correctly, only outbound traffic on port 443 (HTTPS) needs to be opened from the SZ to the following endpoints: <hr></hr> <h4>US Region</h4> <ul><li>Administration Portal: <code><a href="https://ruckus.cloud" target="_blank">https://ruckus.cloud</a></code> (IP: 34.102.183.44)</li><li>Analytics Data Upload: <code><a href="https://messagehub.analytics.ruckus.cloud" target="_blank">https://messagehub.analytics.ruckus.cloud</a></code> (IP: 34.69.139.151)</li><li>Service Discovery: <code><a href="https://serviceloc.ruckuswireless.com" target="_blank">https://serviceloc.ruckuswireless.com</a></code> (IP: 23.236.63.97)</li></ul> <hr></hr> <h4>EU Region</h4> <ul><li>Administration Portal: <code><a href="https://eu.ruckus.cloud" target="_blank">https://eu.ruckus.cloud</a></code> (IP: 34.107.197.242)</li><li>Analytics Data Upload: <code><a href="https://messagehub.analytics.eu.ruckus.cloud" target="_blank">https://messagehub.analytics.eu.ruckus.cloud</a></code> (IP: 34.89.193.24)</li><li>Service Discovery: <code><a href="https://serviceloc.ruckuswireless.com" target="_blank">https://serviceloc.ruckuswireless.com</a></code> (IP: 23.236.63.97)</li></ul> <hr></hr> <h4>Asia Region</h4> <ul><li>Administration Portal: <code><a href="https://asia.ruckus.cloud" target="_blank">https://asia.ruckus.cloud</a></code> (IP: 35.190.34.117)</li><li>Analytics Data Upload: <code><a href="https://messagehub.analytics.asia.ruckus.cloud" target="_blank">https://messagehub.analytics.asia.ruckus.cloud</a></code> (IP: 34.96.208.196)</li><li>Service Discovery: <code><a href="https://serviceloc.ruckuswireless.com" target="_blank">https://serviceloc.ruckuswireless.com</a></code> (IP: 23.236.63.97)</li></ul> <hr></hr> <h3>Important Notes</h3> <ul><li>Use FQDN wherever possible because IP addresses may change.</li><li>If IP addresses change, this article will be updated accordingly.</li><li>These IPs were confirmed by engineering for firewall configurations where IP-based rules are required.</li><li>Make sure to turn off SSL inspection on this traffic flow</li></ul> </div>

To ensure proper communication between SmartZone (SZ/vSZ), APs, and switches with RUCKUS AI, customers must allow port 443 (HTTPS) and specific URLs in their firewall configuration.

2025-12-23T06:21:06-0800 2025-12-23T14:00:16-0800 https://support.ruckuswireless.com/articles/000010303 2025-12-23T06:27:59-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4195 knowledge_article_4195 2020-04-09T05:48:16-0700 000010303 Validated (External) Public Ruckus analytics Configuration Configuration, Ruckus Analytics How to link access points with RUCKUS-AI AP license pool? Visit your RUCKUS-AI account from https://ruckus.cloud/ai (previously <a href="https://ruckus.cloud/analytics" target="_blank">https://ruckus.cloud/analytics</a>) and follow below steps. 1. Login with your support.ruckuswireless.com credentials. 2. Go to Admin >> Licenses >> Choose the license pool available and click on pencil icon. <img alt="User-added image" height="282" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001p0T&feoid=00N50000002Cf3M&refid=0EM2J000001pJm0" width="914"></img> 3. Under Explore network, by choosing any main or or sub option will show you corresponding APs under it, in right side pan for AP selection. Below options are available <ul><li style="margin-left: 80px;"> Expand "Network" by clicking '+' sign and you will see list of onboarded v/SZ (in below screenshot there is only one v/SZ onboarded and vSZ system name is "ruckus"). Choosing any main or sub option will show </li><li style="margin-left: 80px;"> Click on '+' sign again to see zones under a specific controller ('Zone-1' is the zone name in given example) </li><li style="margin-left: 80px;"> By expanding a Zone you can see all the AP groups under it (if no additional groups are configured then you will only see 'default' group). </li></ul> 4. Depending upon your selection under 'Explore Network' you can choose APs from right side pan and hit on 'Save' to link selected APs with available license pool. <img alt="User-added image" height="464" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001p0T&feoid=00N50000002Cf3M&refid=0EM2J000001pJmA" width="918"></img> 5. AP mapping with RUCKUS AI AP license completed! Wait for 30 minutes to 2 hours to see Analytical information from newly linked APs. <div> Several points to note: Scenario: The user selected Zone 1 and hit Save. This action assigns a license to every AP currently in Zone 1. <ul><li> If an AP is moved from Zone 1 to Zone 2, the license will move with the AP, i.e. it will still an licensed AP under Zone 2. </li><li> If the user adds more APs to Zone 1, they don't automatically get assigned licenses. The user has to come into the RUCKUS AI licensing UI again and select the new APs so they are assigned licenses. </li><li> If an AP is removed from the SZ, the license for that AP is still attached. Since we no longer get configuration data for that AP, we will list that AP under "Others", and the user will have to unselect that AP from the licenses so free up that license. </li><li> If an SZ has licensed APs, and the SZ is offboarded, the licenses are still attached. When the SZ is re-onboarded, the APs are automatically added to the APFilterList sent to the SZ. Hence, when the user offboards an SZ, if the user wants to detach the licenses for the APs on that SZ, the user must do it in the RUCKUS AI UI prior to offboarding the SZ. <ul><li> If the user realizes this after offboarding the SZ, the user can still detach the licenses for the APs of the SZ. The APs will be listed in the "Other" category, since we no longer have configuration information for these APs. </li></ul> </li></ul> We have also a video which explains the onboarding and AP license mapping. You can access the same from <a href="https://www.youtube.com/watch?v=s6GGL6_AJ1c" target="_blank">here</a>. </div>

This article explains how to link APs with RUCKUS-AI AP license pool.

2025-12-23T06:27:59-0800 2025-12-23T14:00:16-0800 https://support.ruckuswireless.com/articles/000012264 2025-12-22T06:12:28-0800 monthly 0.8 admin,premium knowledge_article_4840 knowledge_article_4840 2022-06-10T12:46:19-0700 000012264 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security Configuration, Security, SmartCell Gateway <div>Why does the message "Unable to update certificate. Reason: Certificate cannot be applied unless system is in service" appear?</div> <div>Once all nodes and services are online and in service, certificate changes can be applied successfully.</div>

In SmartZone, applying a new SSL certificate for specific services may fail if the system is not fully in service. This article explains the reason and provides troubleshooting steps.

2025-12-22T06:12:28-0800 2025-12-23T06:00:10-0800 https://support.ruckuswireless.com/articles/000012268 2025-12-22T06:22:31-0800 monthly 0.8 admin,premium knowledge_article_4847 knowledge_article_4847 2022-06-29T17:33:03-0700 000012268 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;System network management Configuration, Installation, System Network Management, SmartCell Gateway <div>When a Partner Domain administrator logs into vSZ, the "Rogue Devices" option under Monitor ? Reports is not shown. Is this by design?</div> <div>This is part of the original design for Partner Domains and MSP administrators. Rogue Devices monitoring is available only to system-level administrators.</div>

Administrators created within a Partner Domain and assigned to a Partner Domain permissions group cannot see the Rogue Devices option in the SmartZone GUI. This behavior is by design.

2025-12-22T06:22:31-0800 2025-12-23T06:00:10-0800 https://support.ruckuswireless.com/articles/000012240 2025-12-22T06:39:06-0800 monthly 0.8 admin,premium knowledge_article_4831 knowledge_article_4831 2022-05-04T08:24:49-0700 000012240 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway <div>How do I set up and use the Client Troubleshooting Tool in SmartZone?</div> <div> To diagnose client connectivity issues: <ol><li> Locate the client <ul><li>Navigate to Monitor ? Client page.</li><li>Search for the client using MAC address or login credentials. </li></ul> </li></ol> <img alt="User-added image" height="259" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001oE5&feoid=00N50000002Cf3M&refid=0EM2J0000039H4I" width="1199"></img> <ol start="2"><li> Start troubleshooting <ul><li>Click Start and keep the page open.</li><li>After ~20 minutes, click Continue to keep the session active. </li></ul> </li></ol> <img alt="User-added image" height="311" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001oE5&feoid=00N50000002Cf3M&refid=0EM2J0000039H4N" width="744"></img> <ol start="3"><li> Monitor roaming clients <ul><li>If the client roams across multiple APs, select additional APs before hitting Start.</li><li>Note: Selecting APs requires manual search within Zones and AP Groups.</li></ul> </li></ol> <img alt="User-added image" height="211" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001oE5&feoid=00N50000002Cf3M&refid=0EM2J0000039H4X" width="330"></img> <img alt="User-added image" height="498" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001oE5&feoid=00N50000002Cf3M&refid=0EM2J0000039H4m" width="500"></img> <ol start="4"><li> Advanced debugging <ul><li>Enabling this tool turns on advanced debugging on selected APs.</li><li>After testing, save the AP support log and note the client MAC address for log analysis.</li></ul> </li></ol> </div>

The Client Troubleshooting Tool in SmartZone helps diagnose client connectivity issues in real time by enabling advanced debugging on selected APs.

2025-12-22T06:39:06-0800 2025-12-23T06:00:10-0800 https://support.ruckuswireless.com/articles/000012250 2025-12-22T06:50:18-0800 monthly 0.8 admin,premium knowledge_article_4835 knowledge_article_4835 2022-06-02T07:27:56-0700 000012250 Validated (External) Premium Virtual smartcell gateway System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, virtual SmartCell Gateway <div>Why is my vSZ in AWS Offline and showing Stopped in the AWS console?</div> <div> Before the scheduled retirement date, you must take action to avoid service disruption: <ol><li> Check AWS notifications <ul><li>Log in to the AWS Management Console.</li><li>Navigate to EC2 ? Instances ? Status Checks.</li><li>Look for Scheduled Events indicating instance retirement.</li></ul> </li><li> Recommended actions <ul><li>Create an AMI backup of your vSZ instance.</li><li>Launch a new EC2 instance using the AMI.</li><li>Update DNS or IP settings if required.</li></ul> </li><li> AWS Reference <ul><li>AWS EC2 Instance Retirement – What to Do <a href="https://aws.amazon.com/tw/premiumsupport/knowledge-center/ec2-instance-retirement/" target="_blank">https://aws.amazon.com/tw/premiumsupport/knowledge-center/ec2-instance-retirement/</a> </li></ul> </li></ol> </div>

If your vSZ instance in AWS appears Offline in SmartZone and shows Stopped in the AWS EC2 console, it is likely due to AWS instance retirement or infrastructure issues.

2025-12-22T06:50:18-0800 2025-12-23T06:00:09-0800 https://support.ruckuswireless.com/articles/000012204 2025-12-22T08:05:15-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5970 knowledge_article_5970 2022-04-07T12:18:18-0700 000012204 Validated (External) Public Ruckus analytics;Ruckus cloud switch;Ruckus cloud wifi;Cloudpath;Ruckus icx switches;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Flexmaster umm;Smartcell gateway;Smartcell insight;Smart wireless services;Cloudpath Enrollment System (ES);BPG_Cloudpath;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) Security Security, Ruckus Analytics, Ruckus Cloud Switch, Ruckus Cloud WiFi, Cloudpath, Ruckus ICX Switches, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, FlexMaster UMM, SmartCell Gateway, SmartCell Insight, Smart Wireless Services What Ruckus products are impacted with recent CVE-2022-22963 and CVE-2022-22965 (Spring4Shell zero-day RCE vulnerability)? <h2>About the vulnerability</h2> There are two vulnerabilities affecting the Spring MVC (CVE-2022-22965) and Spring Cloud (CVE-2022-22963) components of the Spring Framework. These vulnerabilities are rated Critical as a successful exploit leads to remote code execution on the vulnerable system. <h2>What RUCKUS Networks is doing for their products?</h2> RUCKUS Networks security team is aware about the issue and already verified all the products. Most of RUCKUS Networks products are not impacted with this vulnerability and only one impacted product (Ruckus Cloud) was already patched on 15th April 2022. At this point, no RUCKUS products are impacted and no attention required from customers. <h2>Is my RUCKUS product impacted?</h2> As of 18th April below is the status of RUCKUS products: <table style="width: 451px;" width="451"><colgroup><col style="width: 96pt;" width="128"></col><col style="width: 146pt;" width="195"></col></colgroup><tbody><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;width: 128px;text-align: center;white-space: nowrap;background-color: white;">Product</td><td colspan="1" rowspan="1" class="xl66" style="width: 128px;text-align: center;white-space: nowrap;background-color: white;">Vulnerable?</td><td colspan="1" rowspan="1" class="xl66" style="width: 195px;text-align: center;white-space: nowrap;background-color: white;">Action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">ZoneDirector</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">Unleashed</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">UMM/Flexmaster</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">SmartZone/virtualSmartZone</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">SPoT/vSPoT</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">RuckusAnalytics</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">MobileApps</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">IoT</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">ICX</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">CloudPath</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">Access points</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">IOT</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">Mobile APPs</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">CloudPath</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">SCI</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Not Vulnerable</td><td colspan="1" rowspan="1" class="xl65" style="white-space: nowrap;text-align: center;">No action required</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="height: 22px;text-align: center;white-space: nowrap;background-color: white;">RuckusCloud</td><td colspan="1" rowspan="1" class="xl66" style="text-align: center;white-space: nowrap;background-color: white;">Vulnerable</td><td colspan="1" rowspan="1" class="xl65" style="white-space: nowrap;text-align: center;">Already patched, no further action required</td></tr></tbody></table> <h2> When impacted products will be patched?</h2> Only one product (RUCKUS Cloud) was vulnerable and same was patched on 15th April 2022. For any queries, feel free to reach Ruckus Support at https://support.ruckuswireless.com/contact-us You can also refer our support center page at <a href="https://support.ruckuswireless.com/spring4shell-ruckus-technical-support-response-center" target="_blank">https://support.ruckuswireless.com/spring4shell-ruckus-technical-support-response-center</a>

Article explains about recent security vulnerability CVE-2022-22963 and CVE-2022-22965 (Spring4Shell zero-day RCE vulnerability)

2025-12-22T08:05:15-0800 2025-12-23T06:00:09-0800 https://support.ruckuswireless.com/articles/000011727 2025-12-19T07:17:10-0800 monthly 0.8 admin,premium knowledge_article_4701 knowledge_article_4701 2021-06-04T14:01:46-0700 000011727 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SmartCell Gateway How do I install and enable the latest ENA driver for vSZ to have Enhanced Network Support on an Amazon EC2 instance running Red Hat 6/7? <div> Follow these steps to enable ENA support for your vSZ instance: <hr></hr> <h4>Step 1: Configure AWS CLI</h4> Access AWS CLI and enter your credentials: <pre><code>AWS_CLI:~$ aws configure AWS Access Key ID [****************LNFX]: AWS Secret Access Key [****************i1NO]: Default region name [us-west-2]: Default output format [json]: </code></pre> <hr></hr> <h4>Step 2: Stop Your vSZ Instance</h4> Stop the EC2 instance before making changes. <hr></hr> <h4>Step 3: Enable ENA Support</h4> Run the following command using your Instance ID and region: <pre><code>AWS_CLI:~$ aws ec2 modify-instance-attribute --instance-id i-0a5f0eba772xxxxx --ena-support --region us-west-2 </code></pre> <hr></hr> <h4>Step 4: Change Instance Type (If Required)</h4> Modify your instance type to one that supports ENA (e.g., c5.9xlarge). Example: <img alt="User-added image" height="208" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001n0H&feoid=00N50000002Cf3M&refid=0EM2J00000256LG" width="776"></img> <hr></hr> <h4>Step 5: Restart the Instance</h4> Start your instance. It should now boot without errors and have Enhanced Networking enabled. <hr></hr> <h3>Additional Notes</h3> <ul><li>Ensure your AMI supports ENA drivers (Amazon Linux, Red Hat 6/7 with updated kernel).</li><li>For Red Hat, verify ENA module is loaded:</li></ul> <pre style="padding-left: 40px;"><code>modinfo ena </code></pre> <ul><li>If missing, install the latest ENA driver from AWS documentation.</li></ul> </div>

Enhanced Networking Adapter (ENA) support is required for certain EC2 instance types (e.g., c5.9xlarge) to run vSZ on AWS. Without ENA, these instance types will not be supported.

2025-12-19T07:17:10-0800 2025-12-22T10:00:11-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000LsL0SAK?attachment_index=0 2025-12-22T10:00:11-0800 monthly admin,premium knowledge_article_4701 knowledge_article_4701_attachment_1 ENA_Procedure.pdf 382328.0 application/pdf https://support.ruckuswireless.com/articles/000011557 2025-12-19T07:31:01-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5969 knowledge_article_5969 2021-04-08T23:46:32-0700 000011557 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway <div>What is this LLC broadcast frame and why is it generated by SmartZone?</div> This is by design for L2UF messaging to maintain UE session consistency across DPs.

After upgrading SmartZone from R3.6.2 to R5.2.1+, the customer observed high CPU utilization on the switch and loop detection messages. Packet captures revealed LLC broadcast frames originating from SmartZone, causing MAC address flapping.

2025-12-19T07:31:01-0800 2025-12-22T10:00:10-0800 https://support.ruckuswireless.com/articles/000014766 2025-12-19T10:42:53-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5756 knowledge_article_5756 2025-04-28T09:09:24-0700 000014766 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway <div>A data disk (e.g., 512 GB) was added to the Azure vSZ instance, but the <code>show diskinfo</code> command displays much less (e.g., 127 GB). What causes this and how can it be resolved?</div> Adding a "data disk" on Azure will not make itself available to the vSZ and therefore "show disk" will not show the disk size offered by the data disk. Instead, if the disk space needs to be resized, it should be done on the OS disk instead of the data disk. Following are the steps that you can follow to re-size the OS disk from Azure Portal - Important Note - You must take a VM backup before re-sizing the disk. Also, this's as per RUCKUS's best awareness of this procedure as of this writing. Please check Azure documentation for extra-assurance. <ol style="padding: 0px 0px 0px 40px;color: #16325c;font-family: SalesforceSans-Regular, Arial, sans-serif;font-size: 12px;font-style: normal;font-weight: 400;text-align: start;white-space: normal;background-color: #ffffff;margin-top: 11px;margin-bottom: 11px;"><li style="padding: 0px;">Gracefully shutdown the vSZ instance using CLI command "shutdown now"</li><li style="padding: 0px;">Navigate to Azure Portal (<a href="https://portal.azure.com)/" style="color: #006cb5;text-decoration: none;font-weight: normal;" target="_blank">https://portal.azure.com)</a></li><li style="padding: 0px;">In the VM's left-hand menu, click on "Disks" under "Settings"</li><li style="padding: 0px;">Identify the OS disk and click on it.</li><li style="padding: 0px;">Click "Size + performance" under "Settings"</li><li style="padding: 0px;">Scroll down the page to button, update the size to your requirement in the "Custom disk size" field</li><li style="padding: 0px;">Save the changes and restart the VM</li><li style="padding: 0px;">Verify the available disk from SZ CLI "show diskinfo" command</li></ol>

When increasing disk space for vSZ on Azure, resizing the OS disk is required. Adding or resizing a data disk will not affect vSZ because data disks are not utilized by vSZ by design.

2025-12-19T10:42:53-0800 2025-12-22T10:00:10-0800 https://support.ruckuswireless.com/articles/000012266 2025-12-19T12:52:59-0800 monthly 0.8 admin,premium knowledge_article_4842 knowledge_article_4842 2022-06-13T22:43:56-0700 000012266 Validated (External) Premium Unleashed;Zoneflex indoor;Zoneflex outdoor;Smartcell ap;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;Known issues and workarounds Performance, Known Issues and Workarounds, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP Why does the Ruckus AP stop responding to LLDP PoE TLVs from the PSE? <div>Issue resolved in 6.1.2</div>

Some Aruba/HP switches may log the message: “PD stopped responding to LLDP PoE TLVs from PSE. Previous LLDP negotiated power values will be retained.” This occurs when a Ruckus AP with dual Ethernet ports is powered via PoE.

2025-12-19T12:52:59-0800 2025-12-22T10:00:09-0800 https://support.ruckuswireless.com/articles/000012296 2025-12-19T06:32:49-0800 monthly 0.8 admin,premium knowledge_article_4863 knowledge_article_4863 2022-08-15T05:33:32-0700 000012296 Validated (External) Premium Ruckus cloud switch Configuration;System network management Configuration, System Network Management, Ruckus Cloud Switch How to perform Cloud ICX VLAN port assignment through Switch Configuration profile? Switch Configuration profiles allow you to define the VLANs for Switch models of your choice and Access Control Lists (ACLs). Once defined, these switch profiles can be applied to one or more venues. Any switch joining a venue will have the defined configuration applied automatically. You can create switch configuration profiles and attach these profiles to venues as required. <img alt="User-added image" height="218" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001myf&feoid=00N50000002Cf3M&refid=0EM2J0000049D4r" width="681"></img> When a switch is registered on RUCKUS Cloud under this venue comes online, it inherits all the configuration from the profile. You can always override the configuration by editing the switch directly from Ruckus Cloud >> Network Devices >> Switches >> Click on the switch you wish to edit >> Edit Switch <img alt="User-added image" height="218" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001myf&feoid=00N50000002Cf3M&refid=0EM2J0000049D56" width="660"></img> Adding to this, we have also got provision to configure the VLAN assignments on the port for the switches we add, provided the switches are brand new or factory defaulted. To factory reset the switch: Switch#erase system factory-default Once the switch comes online, it would fetch all the configuration from the profile You can review the configuration management on an online switch from: Ruckus Cloud >> Network Devices >> Switches >> Click on the switch you wish to review >> Configuration Management >> History <img alt="User-added image" height="167" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001myf&feoid=00N50000002Cf3M&refid=0EM2J0000049D5G" width="500"></img> <img alt="User-added image" height="417" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001myf&feoid=00N50000002Cf3M&refid=0EM2J0000049D5L" width="658"></img> Following is the configuration for VLAN 24 in switch configuration profile <img alt="User-added image" height="405" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001myf&feoid=00N50000002Cf3M&refid=0EM2J0000049D5a" width="651"></img> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001myf&feoid=00N50000002Cf3M&refid=0EM2J0000049D5f"></img> Once the switch is Operational, we could see all the port assignments on the switch. <img alt="User-added image" height="238" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001myf&feoid=00N50000002Cf3M&refid=0EM2J0000049D5k" width="500"></img> Further, any configuration change made will be pushed to respective switches: <img alt="User-added image" height="315" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001myf&feoid=00N50000002Cf3M&refid=0EM2J0000049D5u" width="500"></img> The reason behind the VLAN port assignments specific to switches in Factory default state is that: • Ruckus Cloud will mark all ports as customized port which will NOT affect by configuration profile settings • This design is to avoid the unexpected changes to the brownfield Switches which cause network impact in existing network.

Use Switch Configuration Profile for VLAN port assignments for ICX switch in Ruckus Cloud

2025-12-19T06:32:49-0800 2025-12-19T14:00:08-0800 https://support.ruckuswireless.com/articles/000014381 2025-12-18T06:27:23-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5358 knowledge_article_5358 2024-07-23T08:39:37-0700 000014381 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How do I disable a specific radio on an AP managed by SZ? You can disable a specific AP radio using SmartZone GUI or CLI as shown below: Method 1: Using SmartZone GUI <ol><li>Login to the SmartZone GUI.</li><li>Navigate to: Network ? Access Points</li><li>Select the AP where you want to disable the radio and click Configure.</li><li>Scroll down to Band/Spectrum Configuration.</li><li>Choose the required radio (e.g., 2.4 GHz or 5 GHz).</li><li>Toggle WLAN Service to OFF for that radio.</li><li>Click OK to save changes.</li></ol> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001moz&feoid=00N50000002Cf3M&refid=0EMPH0000080m85" width="562" height="486"></img> <div> <h3>Method 2: Using CLI Commands</h3> <ol><li>SSH into the SmartZone controller.</li><li>Enter enable mode: <pre><code>vSZ-H-232> enable Password: ******** </code></pre> </li><li>Enter configuration mode: <pre><code>vSZ-H-232# config </code></pre> </li><li>Select the AP by its MAC address: <pre><code>vSZ-H-232(config)# ap <AP MAC> </code></pre> </li><li>Disable the specific radio (example: disable 5 GHz WLAN service): <pre><code>vSZ-H-232(config-ap)# no radio 5g wlan-service Do you want to continue to delete (or input 'no' to cancel)? [yes/no] yes Successful operation </code></pre> </li></ol> To disable 2.4 GHz radio, use: <pre style="padding-left: 40px;"><code>vSZ-H-232(config-ap)# no radio 2g wlan-service </code></pre> ? Note: Disabling WLAN service on a radio will stop all SSIDs from broadcasting on that band. </div>

This article explains how to disable a specific radio (2.4 GHz or 5 GHz) on an AP managed by a SmartZone (SZ) controller using both GUI and CLI methods.

2025-12-18T06:27:23-0800 2025-12-19T10:00:10-0800 https://support.ruckuswireless.com/articles/000014778 2025-12-18T10:47:20-0800 monthly 0.8 admin,premium knowledge_article_5747 knowledge_article_5747 2025-04-11T14:35:49-0700 000014778 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway Why is the Radiusd service restarted on all nodes at the same time? A Feature enhancement is raised to add a warning about the "Radius Service Restart" when customer will upload certificate on the SZ cluster.

This article explain a potential reason for the Radius Proxy Service restarted on all nodes at the same time.

2025-12-18T10:47:20-0800 2025-12-19T10:00:09-0800 https://support.ruckuswireless.com/articles/000014603 2025-12-18T11:16:25-0800 monthly 0.8 admin,premium knowledge_article_5968 knowledge_article_5968 2024-11-26T18:27:56-0800 000014603 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Gateway Why does the custom report for “Continuously Disconnected APs” fail to generate a PDF in SmartZone? This issue is fixed in SmartZone 6.1.2 Patch 2 and later versions. Upgrade to 6.1.2 Patch 2 or higher to resolve the problem.

This article addresses a known issue where custom reports such as Continuously Disconnected APs fail to generate PDF output in SmartZone version 6.1.1.0.959. The fix is included in 6.1.2 Patch 2.

2025-12-18T11:16:25-0800 2025-12-19T10:00:09-0800 https://support.ruckuswireless.com/articles/000014221 2025-12-18T11:30:53-0800 monthly 0.8 admin,premium knowledge_article_5967 knowledge_article_5967 2023-06-22T20:09:22-0700 000014221 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway Why do I see two different authentication requests on my TACACS server when SmartZone administrators log in? <div>SmartZone sends two authentication requests by design: <ul><li>First: Username only</li><li>Second: Username@realm (if first fails)</li></ul> This approach supports environments where TACACS servers require different username formats.</div>

SmartZone (SZ) may send two sets of authentication requests to a TACACS AAA server during administrator login attempts. This behavior is by design for compatibility with different TACACS configurations.

2025-12-18T11:30:53-0800 2025-12-19T10:00:08-0800 https://support.ruckuswireless.com/articles/000015016 2025-12-18T11:20:44-0800 monthly 0.8 admin,premium knowledge_article_5867 knowledge_article_5867 2025-09-23T06:36:41-0700 000015016 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Security Configuration, Security, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Where and how can I find the Mesh Passphrase in 7.1.1 ? <h3>Solution / Resolution</h3> To retrieve the Mesh Passphrase in SmartZone 7.1.1 and later, use the SmartZone Public API. API Call Format: <pre><code>https://{SZ IP}:8443/wsg/api/public/v13_1/rkszones/{ZONE_ID}/mesh?serviceTicket={serviceTicket} </code></pre> Steps to Execute: <ol start="1"><li> Authenticate with the SmartZone controller to obtain a valid <code>serviceTicket</code>. </li><li> Replace <code>{SZ IP}</code> with the IP address of your SmartZone controller. </li><li> Replace <code>{ZONE_ID}</code> with the appropriate Zone ID. </li><li> Insert the <code>serviceTicket</code> into the API call. </li><li> Execute the API call using a REST client or automation script. </li><li> The response will include the Mesh Passphrase in plain text. </li></ol> <h3>Additional Information</h3> <ul><li> Ensure API access is enabled and your account has sufficient privileges to perform this operation. </li><li> For automation, consider integrating this API call into your provisioning workflow for new Mesh APs. </li><li> Always handle passphrases securely and avoid storing them in plaintext. </li><li> If you are using third-party tools to interact with the SmartZone API, verify that they support HTTPS and proper authentication headers. </li></ul> <h3>References</h3> <ul><li> RUCKUS SmartZone API Documentation </li><li> RUCKUS SmartZone 7.1.1 Release Notes </li></ul> If you need further assistance, please contact RUCKUS Support or visit our Support Portal.

In SmartZone version 7.1.1, the Mesh Passphrase is masked in the user interface. This differs from previous versions where the passphrase was visible. This change impacts administrators who need to manually configure new Mesh Access Points (APs) using the passphrase.

2025-12-18T11:20:44-0800 2025-12-19T10:00:08-0800 https://support.ruckuswireless.com/articles/000014831 2025-12-18T05:26:52-0800 monthly 0.8 admin,premium knowledge_article_5771 knowledge_article_5771 2025-05-23T00:10:21-0700 000014831 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Is there a way to configure a web proxy in the SmartZone controller software to assist in accessing Ruckus Cloud services (such as Ruckus AI)? There is no native workaround within SmartZone software. Customers requiring proxy functionality must implement it externally at the network level (e.g., using Squid or another proxy solution outside the controller).

This article explains the current limitations regarding web proxy configuration on vSZ/SZ platforms for accessing Ruckus Cloud services (including Ruckus Analytics or Ruckus AI).

2025-12-18T05:26:52-0800 2025-12-18T14:00:09-0800 https://support.ruckuswireless.com/articles/000014890 2025-12-17T07:30:35-0800 monthly 0.8 admin,premium knowledge_article_5792 knowledge_article_5792 2025-06-30T11:09:17-0700 000014890 Validated (External) Premium Ruckus cloud wifi Performance;Configuration;Troubleshooting;Known issues and workarounds Performance, Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi <div>Why can't I delete a DPSK passphrase when reusing the same username and MAC address?</div> When a user is deleted and then recreated with the same username and MAC address, the system retains the original DPSK passphrase. Attempts to delete or reassign the passphrase may fail due to an automatically created identity entry that persists in the system. To fully remove the DPSK passphrase and allow reuse of the same username: <ol><li>Delete the DPSK Passphrase from the admin interface.</li><li>Delete the Identity: Navigate to: Clients > Identities List > [Find the Username] > Delete</li><li>Confirm that both the DPSK and identity entries are removed.</li><li>You can now safely recreate the user with the same username and MAC address.</li></ol>

SmartZone (SZ) Administrators may encounter an issue where they cannot delete a DPSK (Device Pre-Shared Key) passphrase if a user is recreated using the same username and MAC address. This behavior is by design and relates to identity management in the system.

2025-12-17T07:30:35-0800 2025-12-18T06:00:13-0800 https://support.ruckuswireless.com/articles/000014382 2025-12-17T07:39:00-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5862 knowledge_article_5862 2024-07-23T13:20:51-0700 000014382 Validated (External) Public R720 unl;Sz144;Ruckus cloud wifi;Sz300;Virtual smartcell gateway;Sz100;Zonedirector 1200;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D);ZoneDirector 1200 Configuration;Firmware;Installation;Troubleshooting Configuration, Firmware, Installation, Troubleshooting, R720 UNL, SZ144, Ruckus Cloud WiFi, SZ300, virtual SmartCell Gateway, SZ100, ZoneDirector 1200 How to troubleshoot AP connectivity with ZD, SZ, R1 or Unleashed Network? <h1 style="text-align: center;">SmartZone</h1> <div style="margin-left: 40px;">1. First, confirm ICMP reachability between the AP and SZ by issuing the "ping" command from the AP CLI. If no response is received, check the Firewall/ACL rules protecting the SZ control IP and ensure that ICMP is permitted for the AP subnet. If a response is received, layer 3 reachability is confirmed and you may progress to layer 4 testing. </div> <div style="margin-left: 40px;">On the AP CLI, issue the command: </div> <div style="margin-left: 80px;"># get syslog log </div> <div style="margin-left: 40px;"> If a "Failed to send Discovery packet!" error is observed (as below), it indicates that the AP was unable to reach the SZ control IP on TCP 443. At this time it is important to check access to this port from the AP management subnet. </div> <div style="margin-left: 40px;"> Oct 14 08:15:29 AP02-LS-EG-Check-In daemon.err /usr/sbin/wsgclient[687]: httpRecv 277 http status is 0 Oct 14 08:15:29 AP02-LS-EG-Check-In daemon.err /usr/sbin/wsgclient[687]: crHttpRequestWithAuth 564 ret:9798 Oct 14 08:15:29 AP02-LS-EG-Check-In daemon.err /usr/sbin/wsgclient[687]: registration 390 Failed to send Discovery packet! ret:9798 </div> <div style="margin-left: 40px;"> Finally, check if the SSH tunnel is up, by issuing the command: </div> <div style="margin-left: 40px;"> </div> <div style="margin-left: 80px;"># get sshtunnel </div> <div style="margin-left: 40px;"> If the result indicates that the SSH service is enabled, yet no SSH tunnel exists, it may indicate a reachability issue from the AP to the SZ control IP on TCP 22. Please confirm reachability of port 22 toward the control IP of the SZ from the AP management network. </div> <div style="margin-left: 40px;"> 2. Check the AP certificate output and see if “RuckusPKI” string is available or not using the command “get rpki-cert issuer” Refer to the New and Old authority examples: </div> <div style="margin-left: 40px;">Updated/New certificate output: </div> <div style="margin-left: 80px;"> rkscli: get rpki-cert issuer Issuer: RuckusPKI-DeviceSubCA-2 </div> <div style="margin-left: 40px;"> Old certificate output: </div> <div style="margin-left: 80px;">rkscli: get rpki-cert issuer Issuer: Ruckus Wireless, Inc. </div> <div style="margin-left: 40px;">If Ruckus Wireless is seen as the output, then on the SZ CLI disable the AP certificate check using the below command in the enable mode: </div> <div style="margin-left: 80px;">#enable #config #no ap-cert-check </div> <div style="margin-left: 40px;">If AP certificate command shows any error, please reach out to support. </div> <div style="margin-left: 80px;">rkscli: get rpki-cert issuer Error opening Certificate /writable/data/webs-certs/cert.pem 3069781056:error:02001002:system library:fopen:No such file or directory:bss_file.c:406:fopen('/writable/data/webs-certs/cert.pem','r') 3069781056:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:408: unable to load certificate Error: unknown err code -1 </div> <h1 style="text-align: center;"> RUCKUS One (Cloud)</h1> <div style="margin-left: 40px;">1. Confirm ICMP reachability between the AP and Cloud by issuing the "ping" command from the AP CLI. Check if the AP can ping ap-registrar.ruckuswireless.com? Next, verify if the required Ports and URLs are allowed in the Firewall for the communication between the AP management network and the Cloud. In addition, confirm AP has a DNS configured. 2. Check the AP certificate output and see if “RuckusPKI” string is available or not using the command “get rpki-cert issuer” If "Ruckus Wireless" is seen as the output, please contact support with the .req file. If the AP certificate command shows any error, please reach out to support. </div> <h1 style="text-align: center;">Unleashed</h1> 1. Enabled 'discovery-agent' from AP CLI by executing the command 'set discovery-agent enable'. The member AP should start sending out discovery packets and join the Master AP. 2. Member APs should be on the same subnet or need to manually point the Master AP or use DHCP option 43. 3. Any new AP joining Unleashed Network should be on 200.x.x.x firmware. <h1 style="text-align: center;"> ZoneDirector</h1> <div style="margin-left: 40px;">1. Confirm ICMP reachability between the AP and ZD by issuing the "ping" command from the AP CLI. If no response is received, check the Firewall/ACL rules protecting the ZD control IP and ensure that ICMP is permitted for the AP subnet. If a response is received, layer 3 reachability is confirmed then make sure Ports12222 and 12223, 443, 22, 21 are permitted on all firewalls/ACLs between the AP management network and the ZD. </div> <h4> </h4> NOTE: Check all the steps suggested in the Troubleshooting Section and provide this information to further investigate with Ruckus Support, if you cannot solve/isolate the issue. To reach out to support click <a href="https://support.ruckuswireless.com/contact-us" target="_blank">here</a>.

This document provides a comprehensive guide to troubleshoot a connection between Access Points (AP) and Controller/Cloud. It includes necessary steps, troubleshooting tips, and resolution methods.

2025-12-17T07:39:00-0800 2025-12-18T06:00:12-0800 https://support.ruckuswireless.com/articles/000014900 2025-12-17T07:44:08-0800 monthly 0.8 admin,premium knowledge_article_5802 knowledge_article_5802 2025-07-04T08:02:58-0700 000014900 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Do RUCKUS Access Points support dual Power over Ethernet (PoE) input for redundancy or increased power delivery? RUCKUS Access Points do not support dual Power over Ethernet (PoE) input. They are designed to operate with a single PoE source in compliance with IEEE standards: <ul><li>802.3af (PoE)</li><li>802.3at (PoE+)</li><li>802.3bt (PoE++), depending on the AP model</li></ul> Dual PoE input for redundancy or increased power delivery is not supported on RUCKUS APs. <div> If redundancy or higher power is required: <ul><li>Use DC power input (if supported by the AP model) as an alternative to PoE.</li><li>Ensure proper PoE budget and switch configuration to meet AP power requirements.</li></ul> </div>

This article explains whether RUCKUS Access Points support dual PoE input for redundancy or enhanced power delivery.

2025-12-17T07:44:08-0800 2025-12-18T06:00:11-0800 https://support.ruckuswireless.com/articles/000015022 2025-12-17T08:19:44-0800 monthly 0.8 admin,premium knowledge_article_5861 knowledge_article_5861 2025-09-12T01:58:10-0700 000015022 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, SmartCell Gateway Why am I unable to upload the 7.1.1 Sigpack on my 6.1.2 controller? This limitation is removed in SmartZone 7.x and later versions. To resolve the issue: <ol><li>Upgrade the controller to 7.x or above.</li><li>Upload the Sigpack file successfully.</li><li>Proceed with the AP image upgrade.</li></ol>

When attempting to upload SmartZone 7.1.1 Application Signature Package (Sigpack 1.740.0) on a vSZ controller running version 6.1.2, the upload fails due to a file size limitation.

2025-12-17T08:19:44-0800 2025-12-18T06:00:10-0800 https://support.ruckuswireless.com/articles/000014830 2025-12-17T12:08:16-0800 monthly 0.8 admin,premium knowledge_article_5770 knowledge_article_5770 2025-05-23T01:36:45-0700 000014830 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector What are the port details and LED status indicators for the Zone Director 1200 ? The Ruckus Zone Director 1200 (ZD1200) features two 1 Gigabit Ethernet ports with auto-MDIX and auto-sensing capabilities, along with a single RJ-45 console port. The ZD1200 also has a single external power adapter included. <ul><li>Ethernet Ports: 2x 1 Gigabit Ethernet RJ-45 ports with auto-MDIX and auto-sensing. </li><li>Console Port: 1x RJ-45 console port. </li><li>Data Link Protocol: Utilizes RJ-45 for data communication</li></ul> <img alt="Hardware spec" height="252" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001mQn&feoid=00N50000002Cf3M&refid=0EMPH00000KZ001" width="500"></img> To check the port mode of a ZD1200 controller, we can use the command #<code>show ethinfo</code> The output will show information about each Ethernet port, including: <ul><li>Port ID: The specific port number (e.g., eth0, eth1). </li><li>Link Status: Indicates whether the port is connected and active. </li><li>Speed: The current link speed (e.g., 100M, 1G). </li></ul> <code>ruckus# show ethinfo System Ethernet Overview: Port 0: Interface= eth0 MAC Address= 58:b6:33:18:b1:20 Physical Link= up Speed= 1000Mbps Port 1: Interface= eth1 MAC Address= 58:b6:33:18:b1:21 Physical Link= down Speed= 100Mbps</code> Zone Director 1200 LED descriptions <img alt="User-added image" height="154" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001mQn&feoid=00N50000002Cf3M&refid=0EMPH00000KZ2uf" width="500"></img>

Understanding the Port details and LED indicators of the Ruckus Zone Director 1200

2025-12-17T12:08:16-0800 2025-12-18T06:00:09-0800 https://support.ruckuswireless.com/articles/000014300 2025-12-17T08:39:06-0800 monthly 0.8 admin,premium knowledge_article_5301 knowledge_article_5301 2024-04-22T10:56:53-0700 000014300 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway Why is the URL filtering feature unable to block websites? Ensure DNS servers are configured for APs in the customer deployment. Once DNS is added, URL filtering will function correctly and block all blacklisted URLs as expected. Additional Notes: In deployments where APs typically do not have DNS servers implemented, URL filtering will fail. Adding DNS configuration resolves the issue immediately.

URL filtering feature fails to block websites as expected due to missing DNS configuration on APs.

2025-12-17T08:39:06-0800 2025-12-18T06:00:09-0800 https://support.ruckuswireless.com/articles/000014413 2025-12-17T12:45:53-0800 monthly 0.8 admin,premium knowledge_article_5474 knowledge_article_5474 2024-08-21T10:41:07-0700 000014413 Validated (External) Premium Ruckus cloud switch;Ruckus cloud wifi Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Ruckus Cloud Switch, Ruckus Cloud WiFi Why am I unable to see or select the “Change Update Schedule” option in RUCKUS One (R1)? <ol><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">If we have Venues already updated to Latest Release Recommendation and if we select those Venue to try updating, they would show only " Downgrade" option since we cannot Upgrade then anymore so that in this case they would not give an option to "Schedule the Update".</li><li style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';font-size: 13px;">In the below example, you can see that the Venue is updated to Latest Release ( Recommended ) Version - 7.0.0.104.1432 so we do not get an option to " Change update Schedule " but shows only " Downgrade" option.</li></ol> <div style="margin-left: 40px;"><img id="Picture_x0020_4" src="https://ruckuswireless.my.salesforce.com/servlet/servlet.FileDownload?file=00PPH00000I9VND" style="border: 0px;padding-bottom: 0px;color: #16325c;font-style: normal;font-weight: 400;text-align: start;white-space: normal;background-color: #ffffff;display: inline;width: 1106px;height: 440px;"></img></div> <div style="margin-left: 40px;"> 3. In the below example, you can see that the Venue is not updated to Latest Release ( recommended ) version - 7.0.0.104.1432 but it is running with 7.0.0.104.1404 so we get an option " Change Update Schedule", " Update now", " Downgrade" & "Skip Update". </div> <div style="margin-left: 40px;"><img id="Picture_x0020_3" src="https://ruckuswireless.my.salesforce.com/servlet/servlet.FileDownload?file=00PPH00000I9VNC" style="border: 0px;padding-bottom: 0px;color: #16325c;font-style: normal;font-weight: 400;text-align: start;white-space: normal;background-color: #ffffff;display: inline;width: 1097px;height: 361px;"></img></div> <div style="margin-left: 40px;">4. Also, you can select all the Venues to Update and if you have Few Venues updated and few are not then still it will show " Change Update Schedule " & " Update Now " Options.</div> <div style="margin-left: 40px;"> </div> <div style="margin-left: 40px;"><img id="Picture_x0020_6" src="https://ruckuswireless.my.salesforce.com/servlet/servlet.FileDownload?file=00PPH00000I9VNE" style="border: 0px;padding-bottom: 0px;color: #16325c;font-style: normal;font-weight: 400;text-align: start;white-space: normal;background-color: #ffffff;display: inline;width: 1111px;height: 496px;"></img></div> <div style="margin-left: 40px;">5. Since, all the Venues in the customer account is updated we couldn't see " Change Update Schedule " Option when we click on all or Specific Venue.</div>

When attempting to set an upgrade schedule for a Venue in RUCKUS One (R1), the “Change Update Schedule” option may not appear. This article explains why this happens and how to verify the conditions. If all Venues are already updated to the latest recommended firmware version, the option will not be available. It will reappear when a new firmware release becomes available.

2025-12-17T12:45:53-0800 2025-12-18T06:00:08-0800 https://support.ruckuswireless.com/articles/000014489 2025-12-17T12:55:33-0800 monthly 0.8 admin,premium knowledge_article_5742 knowledge_article_5742 2024-11-22T17:08:16-0800 000014489 Validated (External) Premium Ruckus cloud wifi Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Ruckus Cloud WiFi What are the conditions for a switch configuration profile to be pushed from Ruckus One (R1) to an R1-managed switch? <div> For an R1-managed switch to receive its configuration profile from Ruckus One (R1), the following conditions must be met: <ol><li> Factory Reset State The switch must be in a factory reset state before being added to Ruckus One (R1). </li><li> Model Selection in Profile The switch model must be explicitly selected in the configuration profile within R1. </li><li> Login Credentials The switch can have temporary login credentials configured, but they must not be saved prior to onboarding. </li></ol> </div>

This article explains the conditions under which a switch configuration profile is successfully pushed from Ruckus One (R1) to an R1-managed switch.

2025-12-17T12:55:33-0800 2025-12-18T06:00:07-0800 https://support.ruckuswireless.com/articles/000014902 2025-12-17T06:10:01-0800 monthly 0.8 admin,premium knowledge_article_5890 knowledge_article_5890 2025-10-08T04:28:09-0700 000014902 Validated (External) Premium Sz144;Ruckus cloud wifi;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 100-D (SZ100-D) Known issues and workarounds;Knowledge base Known Issues and Workarounds, Knowledge Base, SZ144, Ruckus Cloud WiFi, virtual SmartCell Gateway, SZ100 What are the common issues and impacts associated with enabling Multi-Link Operation (MLO)? These limitations are under active investigation and may be addressed in future firmware or software updates. Network administrators are advised to consider these constraints during WLAN planning and deployment.

This Article provides about the Limitations and details about MLO in WLAN Deployments

2025-12-17T06:10:01-0800 2025-12-17T14:00:10-0800 https://support.ruckuswireless.com/articles/000014111 2025-12-17T06:20:11-0800 monthly 0.8 admin,premium knowledge_article_4948 knowledge_article_4948 2023-04-12T14:34:07-0700 000014111 Validated (External) Premium Sz144;Sz300;Ruckus icx switches;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, SZ144, SZ300, Ruckus ICX Switches, SCG200, virtual SmartCell Gateway, SZ100 Can SmartZone send ICX switch custom event logs to an external syslog server? As of SmartZone version 7.1.1 (latest at the time of writing), this feature is not supported. ICX switch custom event logs cannot be sent to an external syslog server through SmartZone. <h2>Alternate option: Use SNMP or email alerts instead, to monitor such events.</h2> <h2>Future possibilities: A feature request FR-6160 is raised to track and add this feature in future software release. Important Disclaimer: A feature request doesn't guarantee feature availability in future release, it depends upon many factors before a feature can be added to a software release. FR information on this KBA is only for indication purpose.</h2>

This article explains the current limitation regarding exporting ICX switch custom event logs to an external syslog server via SmartZone (SZ).

2025-12-17T06:20:11-0800 2025-12-17T14:00:10-0800 https://support.ruckuswireless.com/articles/000015011 2025-12-16T06:10:59-0800 monthly 0.8 admin,premium knowledge_article_5966 knowledge_article_5966 2025-10-08T00:57:43-0700 000015011 Validated (External) Premium Ruckus cloud wifi;R770;R560;R670;T670;T670sn;RUCKUS R770;RUCKUS R560;RUCKUS R670;RUCKUS T670sn;RUCKUS T670 Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Cloud WiFi, R770, R560, R670, T670, T670sn How do I troubleshoot Wi-Fi 6E/7 APs showing "Configuration Update Failed" in RUCKUS One? <ul><li> <h3>Verify Switch/PoE Injector Hardware Compatibility:</h3> <ul><li>Confirm that the switch or the PoE injector supports 802.3at or 802.3bt power mode.</li><li>If only 802.3af power mode is supported, upgrade to a switch/PoE injector that provide higher power output.</li></ul> </li></ul> <ul><li> <h3>Check Switch Port Configuration</h3> <ul><li>Ensure the switch port is configured for auto power negotiation.</li><li>Remove any power-limiting configuration such as static power caps or disabled LLDP settings.</li></ul> </li></ul> <ul><li> <h3>Manually Set PoE Mode on AP</h3> <ul><li>Change the AP's PoE mode from Auto to fixed mode:</li><li>Navigate to: Venue Configuration > Wi-Fi Configuration > Networking</li><li>Select the AP model and set PoE Operating Mode to 802.3at or 802.3bt.</li></ul> </li></ul> <ul><li style="list-style-type: none;"> <ul></ul> </li></ul> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lg1&feoid=00N50000002Cf3M&refid=0EMPH00000SbY0z"></img> <ul><li style="list-style-type: none;"> <ul><li>This force the AP to request higher power during negotiation with PoE switch.</li></ul> </li></ul> <ul><li> <h3>Validate PoE Mode via CLI</h3> <ul><li>Run the following command on the AP CLI and verify power consumption status :</li></ul> </li></ul> rkscli: get power-mode PoE Configured Mode : bt5 Power Consumption Status : 802.3bt5 Switch/Injector OK <ul><li> <h3>Force Switch Port to Higher Power Mode (if needed)</h3> <ul><li>If the AP still negotiates to 802.3af power mode, manually configure the switch port to deliver 802.3at/bt power and Reboot the AP to re-initiate power negotiation and configuration sync.</li></ul> </li></ul>

Wi-Fi 6E/7 Access Points (APs) may display a "Configuration Update Failed" status in RUCKUS One (R1) due to insufficient Power over Ethernet (PoE). These APs require 802.3at or 802.3bt power for full functionality. The issue can be diagnosed via AP logs showing "CONF_UPD_FAIL" and "insufficient PoE". Resolution involves verifying switch compatibility, adjusting switch port settings, and manually configuring the AP’s PoE mode to ensure adequate power delivery.

2025-12-16T06:10:59-0800 2025-12-17T10:00:13-0800 https://support.ruckuswireless.com/articles/000014158 2025-12-16T07:21:20-0800 monthly 0.8 admin,premium knowledge_article_5965 knowledge_article_5965 2023-04-18T14:40:22-0700 000014158 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How do I configure Social Media login for Guest Access in SZ? Test Environment: <ul><li>SmartZone/Virtual SmartZone [Essentials/High-Scale] (Controller), version 6.1.1.x.</li><li>R720 (Access Point)</li></ul> Setup Procedure: <ul><li>In the vSZ/SZ GUI, navigate to Network -> Wireless LANs and select Create.</li></ul> <img alt="User-added image" height="190" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLrj" width="500"></img> Create the Guest WLAN. Below example using WLAN name as microsoft_social_login and Authentication Type as Guest Access and Method as Open. <img alt="User-added image" height="222" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLro" width="500"></img> Encryption Options is selected as Open (but it can change based on requirement). Under Guest Access Portal, select Social Media Login. In Social Media Profile click '+' icon to create the profile <img alt="User-added image" height="219" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLrt" width="500"></img> Name the social media profile and in Social Auth Option turn ON Microsoft and click the here button <img alt="User-added image" height="234" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLry" width="500"></img> It will redirect to Microsoft Live development dashboard URL - <a href="https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade" target="_blank">https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade</a> To generate an OAuth 2.0 ID for Microsoft Live social media WLAN login, use the following procedure: Click New Registration. <img alt="User-added image" height="191" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLs3" width="500"></img> Enter a Name for the application. For Support Account Types, select the Accounts in any organizational directory and personal Microsoft accounts button. In, Redirect URI:, provide URL <a href="https://ap.ruckus.com:9998/microsoftHandler" target="_blank">https://ap.ruckus.com:9998/microsoftHandler</a> <img alt="User-added image" height="275" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLs8" width="500"></img> Click Register. Microsoft will provide you with the Application (client) ID. Take note of these values, as you will need to enter them into the SmartZone web interface later. <img alt="User-added image" height="170" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLsD" width="500"></img> Create a client secret by completing the following steps: <ol><li>Under Manage, select Certificates & secrets.</li><li>Select the New client secret button.</li><li>Enter a value in Description, select any option for Expires, then click Add.</li></ol> <img alt="User-added image" height="239" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLsI" width="500"></img> 4. Copy and save the client secret value before leaving the page, as you will need to enter this value when you log in to the SmartZone web interface. <img alt="User-added image" height="125" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLsN" width="500"></img> Now on SmartZone Social Media Profile , update the Microsoft Client ID and Microsoft Secret in Social Auth Option. <img alt="User-added image" height="265" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLsS" width="500"></img> Then add the below Whitelisted Domains: *.gstatic.com *.msauth.net auth.gfx.ms *.microsoftonline.com *.live.com *.geotrust.com <img alt="User-added image" height="296" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLsX" width="500"></img> The next step is to create a Guest Portal Service by clicking the '+' icon <img alt="User-added image" height="252" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLsc" width="500"></img> Type the Portal name and click on Apply (It can be modified based on requirement). <img alt="User-added image" height="325" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLsw" width="500"></img> For this example, all other settings including VLAN assignment for end-user devices are set to the default values. Next click OK to save the WLAN configuration. <img alt="User-added image" height="261" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLt6" width="500"></img> We have done all the necessary configuration to enable Social media login using Microsoft!!! Now you can connect the client to the Social media login SSID. After connecting to this SSID, your client device will open the default web browser and redirect to the Guest Access login page. <img alt="User-added image" height="234" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QLt1" width="500"></img> Click on Microsoft logo in this Guest access login page and this will redirect you to Microsoft Sign in page. <img alt="User-added image" height="229" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011YL&feoid=00N50000002Cf3M&refid=0EMHt000005QM53" width="500"></img>

This article provides step-by-step instructions to configure Guest Portal authentication via Social Media Login using Microsoft on SmartZone (SZ).

2025-12-16T07:21:20-0800 2025-12-17T10:00:12-0800 https://support.ruckuswireless.com/articles/000010062 2025-12-16T06:21:06-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4754 knowledge_article_4754 2020-01-03T02:06:40-0800 000010062 Validated (External) Public Zonedirector 1000;Zonedirector 1100;Zonedirector 3000;Zonedirector 5000;Zonedirector 1200;ZoneDirector 1000;ZoneDirector 1100;ZoneDirector 3000;ZoneDirector 5000;ZoneDirector 1200 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector 1000, ZoneDirector 1100, ZoneDirector 3000, ZoneDirector 5000, ZoneDirector 1200 How to factory default different ZoneDirector models using physical button? Ruckus has total 5 Zone Director products, out of which 4 are EOL (end of life) ZD1000, ZD1100, ZD3000 and ZD5000 and End of Support. Only ZD1200 is still supported. <a href="https://support.ruckuswireless.com/documents/3631-end-of-sale-and-end-of-life-product-datelines" target="_blank">https://support.ruckuswireless.com/documents/3631-end-of-sale-and-end-of-life-product-datelines</a> Procedure to factory reset (factory default/hard reset) is same for all the models, except physical design of each controller is different. So here we are providing the procedure for all ZD models. 1- Identify your ZD model. 2- Find the physical button - For ZD1200/ZD3000 find the physical 'FD' button hole in the front panel of the ZD. - For ZD 1000/1100 find the Reset button hole. - For ZD5000, it is just below the power button in front panel. 3- Make sure ZD is powered On while you perform factory reset. 4- Take a paper clip, push and hold the FD button (For ZD1000/ZD1100 push and hold reset button) for 10-12 seconds (10 seconds is the factory default trigger time but we recommend to hold it for at least 12 seconds) and then release the button. 5- After reset is complete, the Status LED blinks red, then blinks green, indicating that the system is in factory default state (if you see a solid red LED for too long, say more than 10 minutes, then this indicates hardware failure and you may need to replace the device). 6- Factory reset completed. Physical front panel of each ZD looks like below, and you can find the FD or reset button highlighted in below pictures. ZD1000 <img alt="User-added image" height="153" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lkr&feoid=00N50000002Cf3M&refid=0EM2J000000vxUw" width="982"></img> ZD1100 <img alt="User-added image" height="127" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lkr&feoid=00N50000002Cf3M&refid=0EM2J000000vxUN" width="984"></img> ZD1200 <img alt="User-added image" height="296" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lkr&feoid=00N50000002Cf3M&refid=0EM2J000000vxVV" width="982"></img> ZD3000 <img alt="User-added image" height="249" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lkr&feoid=00N50000002Cf3M&refid=0EM2J000000vxTA" width="983"></img> ZD5000 <img alt="User-added image" height="587" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lkr&feoid=00N50000002Cf3M&refid=0EM2J000000vxTK" width="671"></img>

This article explains factory reset procedure for all the ZD models.

2025-12-16T06:21:06-0800 2025-12-17T10:00:12-0800 https://support.ruckuswireless.com/articles/000011872 2025-12-16T09:10:33-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4759 knowledge_article_4759 2021-09-01T13:28:39-0700 000011872 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Support license activation;Registration Support License Activation, Registration, SmartCell Gateway How to verify the expiration date of Default License/Support on vSCG/SZ ? vSCG & SZ are provided with default support and various feature license on a new installation, which comes with an expiration period of 90 Days from the date of installation. The below table contains the list of Default License features by product type. <table style="width: 1115px;height: 884.362px;" width="1115"><colgroup><col style="width: 171pt;" width="228"></col><col style="width: 254pt;" width="339"></col><col style="width: 66pt;" width="88"></col><col style="width: 59pt;" width="78"></col><col style="width: 95pt;" width="127"></col><col style="width: 53pt;" width="71"></col><col style="width: 138pt;" width="184"></col></colgroup><tbody><tr style="height: 38.4505px;"><td colspan="1" rowspan="2" class="xl66" style="width: 228px;text-align: center;white-space: nowrap;background-color: #f4b084;">Name</td><td colspan="1" rowspan="2" class="xl66" style="width: 339px;text-align: center;white-space: nowrap;background-color: #f4b084;">Description</td><td colspan="4" rowspan="1" class="xl65" style="width: 364px;text-align: center;white-space: nowrap;background-color: #f4b084;">Default Capacity</td><td colspan="1" rowspan="2" class="xl66" style="width: 184px;text-align: center;white-space: nowrap;background-color: #f4b084;">Default Expiration Days</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl65" style="text-align: center;white-space: nowrap;background-color: #f4b084;">SZ144</td><td colspan="1" rowspan="1" class="xl65" style="text-align: center;white-space: nowrap;background-color: #f4b084;">SZ104</td><td colspan="1" rowspan="1" class="xl65" style="text-align: center;white-space: nowrap;background-color: #f4b084;">VSCG</td><td colspan="1" rowspan="1" class="xl65" style="text-align: center;white-space: nowrap;background-color: #f4b084;">SCG300</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">CAPACITY-AP-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default AP Capacity License</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">25</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">5</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">5</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">5</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">Permanent</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">CAPACITY-RXGW-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default AP Direct Tunnel License</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">5</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">Permanent</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">CAPACITY-VSZD-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default DP Capacity License</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">10</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">90days</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">CAPACITY-DP-SNAT-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default Data Plane NAT Session Capacity License</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">90days</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">CAPACITY-DP-SVDS-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default Data Plane DHCP IP Capacity License</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">90days</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">CAPACITY-SPTN-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default AP Split Tunnel Capacity License for vSZ</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">5</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">90days</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">CAPACITY-SWITCH-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default Switch Capacity License for vSZ</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">5</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">5</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">5</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">5</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">90days</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">INSTANCE-VSCG-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default Instance License for vSZ</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">90days</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">SUPPORT-EU-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default End User Support License</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">90days</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">SUP-SCG200-EU-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default End User Support License for SCG200</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">90days</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">SUP-S104-EU-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default End User Support License for SZ-100/S104</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">90days</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">SUP-S124-EU-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default End User Support License for SZ-100/S124</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">90days</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">SUP-S144-EU-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default End User Support License for SZ-100/S144</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">90days</td></tr><tr style="height: 38.4505px;"><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">SUP-SZ300-EU-DEFAULT</td><td colspan="1" rowspan="1" class="xl67" style="white-space: nowrap;">Default End User Support License for SZ300</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" class="xl68" style="text-align: center;white-space: nowrap;">90days</td></tr><tr><td colspan="1" rowspan="1" style="white-space: nowrap;">INSTANCE-VSCG</td><td colspan="1" rowspan="1" style="white-space: nowrap;">Default RTU License </td><td colspan="1" rowspan="1" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" style="text-align: center;white-space: nowrap;">1</td><td colspan="1" rowspan="1" style="text-align: center;white-space: nowrap;">-</td><td colspan="1" rowspan="1" style="text-align: center;white-space: nowrap;">90days</td></tr></tbody></table> The virtual controllers display a warning message when the appliance is nearing the support expiration date. <div style="text-align: center;"><img alt="User-added image" height="284" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lrJ&feoid=00N50000002Cf3M&refid=0EM2J0000020eA7" width="500"></img></div> <div>Refer Article Number : 000008351 for URL Filtering Licenses Expire in nn Days - SZ Banner Warning. </div> <div> </div> Expiration of the default license on the vSCG/SZ causes a network outage. The default warning messages disappear from the GUI upon activating the permanent license and syncing/uploading the license to the impacted virtual controller. The permanent license can be purchased through Ruckus Value Added Partners or Ruckus Distributors. (refer below table for the part numbers) Types of Capacity & Feature License <div style="text-align: center;"> </div> <div style="text-align: center;"><img alt="User-added image" height="472" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lrJ&feoid=00N50000002Cf3M&refid=0EM2J0000020eBo" width="500"></img><img alt="User-added image" height="478" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lrJ&feoid=00N50000002Cf3M&refid=0EM2J0000020eBt" width="500"></img> </div> <div>Once the license are purchased the license needs to be activated and synced with the License Server, please refer below articles for License Activation on vSCG/SZ. How to activate RTU and AP Licenses on vSCG/vSZ, vSPOT, SCI -<a href="https://support.ruckuswireless.com/articles/000003436" target="_self"> https://support.ruckuswireless.com/articles/000003436</a> Adding AP Licenses on the virtual controllers from LiMAN portal - <a href="https://support.ruckuswireless.com/articles/000006071" target="_self">https://support.ruckuswireless.com/articles/000006071</a></div>

This article provides information on the License warning messages on Virtual Controllers.

2025-12-16T09:10:33-0800 2025-12-17T10:00:11-0800 https://support.ruckuswireless.com/articles/000012461 2025-12-16T10:23:28-0800 monthly 0.8 admin,premium knowledge_article_5672 knowledge_article_5672 2022-09-16T17:12:11-0700 000012461 Validated (External) Premium Ruckus cloud wifi;Smartcell gateway;SmartCell Gateway 200 (SCG200) System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Ruckus Cloud WiFi, SmartCell Gateway Why my APs lost connection to SmartZone controller post upgrading the controller and AP zone firmware? Why my APs did not connect to Ruckus One after migration? RUCKUS engineering is aware and looking into the issue, in the mean time below are the possible ways to fix the issue. <h2>First verify below:</h2> <ul><li>Is the AP firmware 5.2.1 or older? Yes? Are able to ping the AP? Yes? Are you able to SSH into the AP CLI? <ul><li>No I cant ping > Verify and make sure its not a power or network issue.</li><li>Yes I can ping but can't SSH > <a href="https://support.ruckuswireless.com/contact-us" target="_blank">Contact RUCKUS Support</a> with all the details and they will help you with RMA the device, post doing the additional troubleshooting (if required).</li><li>Yes, I can ping and SSH (irrespective of the AP model/firmware version) > Is CLI command given in step-6 of the troubleshooting section matches with your AP output? If yes, proceed to the below steps:</li></ul> </li></ul> <ol style="margin-left: 120px;"><li>Login to AP CLI and run below commands</li><li>set lighttpd disable (if you get any error, ignore it and proceed to step 3)</li><li>set http enable</li><li>Login to AP web UI by visiting http://<AP_IP_ADDRESS> (use HTTP)</li><li>Go to Administration > Management > Under "Certificate Verification" status will show as "FAILED" > Click on "Request to reissue a new Ruckus PKI certificate" > it will generate a "cert-reissue-<AP_SERIAL>.req" file. <ul><li><img alt="User-added image" height="493" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lsv&feoid=00N50000002Cf3M&refid=0EM2J000004NyIL" width="541"></img></li></ul> </li><li><a href="https://support.ruckuswireless.com/contact-us" target="_blank">Contact RUCKUS Support</a> with .req file and they will assist you in generating the certificate file and installation procedure.</li></ol> Note: Support engineer may contact you to collect few additional logs. Support will also assist in installing the .res file and restoring the certificate. <ul></ul>

This article explains about a issue where post upgrading the controller and upgrading the AP zone firmware, AP may lose the connection to SmartZone (SZ) due to its device certificate lost. Applicable to APs migrating to R1 from SZ or Zone Director (ZD)

2025-12-16T10:23:28-0800 2025-12-17T10:00:11-0800 https://support.ruckuswireless.com/articles/000014901 2025-12-16T11:34:18-0800 monthly 0.8 admin,premium knowledge_article_5803 knowledge_article_5803 2025-07-04T14:29:56-0700 000014901 Validated (External) Premium R310;Ruckus R310 Known issues and workarounds Known Issues and Workarounds, R310 Why does my Ruckus R310 access point show unusually high memory usage? Ruckus has released an AP patch version 6.1.2.0.2233, which fixes the memory leak issue. This patch is available upon request through Ruckus TAC Support. Any later version after 6.1.2.0.2233 also includes the fix.

Enabling and actively using SNMP on the Ruckus R310 access point can lead to increased memory usage due to a known issue in specific firmware versions.

2025-12-16T11:34:18-0800 2025-12-17T10:00:10-0800 https://support.ruckuswireless.com/articles/000012078 2025-12-15T06:14:45-0800 monthly 0.8 admin,premium knowledge_article_4807 knowledge_article_4807 2022-02-02T13:09:05-0800 000012078 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why Ruckus AP's are stuck in firmware download loop after upgrade from ZD 10.4.1.0.238 to 10.5.1.0.124 ? If there is an upgrade failure using HTTPS, we can enable the legacy AP image upgrade option to FTP. Zone Director supports either HTTPS or FTP as the AP image upgrade option. This option is available under ZD UI under Administrator> Upgrade Tab: <img alt="User-added image" height="277" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lMf&feoid=00N50000002Cf3M&refid=0EM2J000003XDoD" width="757"></img> Note: Ruckus always recommends its customers to Refer to the Release Notes and Upgrade Guides for the best practices and changed behavior before performing an upgrade.

This article explains a scenario due to which AP's upgraded to the ZD firmware 10.5.1.0.124 may get stuck in the firmware upgrade loop.

2025-12-15T06:14:45-0800 2025-12-16T10:00:11-0800 https://support.ruckuswireless.com/articles/000012033 2025-12-15T07:49:29-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4798 knowledge_article_4798 2022-01-07T06:12:24-0800 000012033 Validated (External) Public Ruckus cloud wifi;Unleashed;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Troubleshooting Troubleshooting, Ruckus Cloud WiFi, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor How can I get the AP name from the AP Command Line? Use the following AP CLI command to display the AP name: rkscli: get device-name device name : 'RuckusAP' OK The "get device-" command family provides various AP-related details rkscli: get device- Commands starting with 'get device-' : get device-floor : get device-floor -- Display device Floor/Altitude get device-gps : get device-gps -- Display device GPS coordinates get device-location : get device-location -- Show device location get device-name : get device-name -- Show device name We can also change the AP name using this CLI example: rkscli: set device-name KnowMyName OK rkscli: get device-name device name : 'KnowMyName' OK

Learn how to check the Access Point (AP) name directly from its Command Line Interface (CLI). This is a simple yet useful command for troubleshooting and configuration tasks.

2025-12-15T07:49:29-0800 2025-12-16T10:00:11-0800 https://support.ruckuswireless.com/articles/000014284 2025-12-15T08:01:27-0800 monthly 0.8 admin,premium knowledge_article_5250 knowledge_article_5250 2024-03-06T08:45:58-0800 000014284 Validated (External) Premium Sz300;Virtual smartcell gateway;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Configuration;Troubleshooting Configuration, Troubleshooting, SZ300, virtual SmartCell Gateway Why am I unable to view the AP Auto Re-Home feature in SZ software version 7.0.0? To enable the AP Auto Re-Home feature: Verify that your cluster is configured for Active-Active redundancy. Once Active-Active mode is enabled, the AP Auto Re-Home option will be available at the Zone level. <img alt="User-added image" height="265" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lRV&feoid=00N50000002Cf3M&refid=0EMPH000002S5ur" width="500"></img> Note: This feature is not supported in Active-Standby configurations.

The AP Auto Re-Home feature is used in Active-Active redundancy environments. If you cannot see this feature after upgrading to SZ 7.x, check the cluster configuration.

2025-12-15T08:01:27-0800 2025-12-16T10:00:11-0800 https://support.ruckuswireless.com/articles/000012031 2025-12-15T08:09:09-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4792 knowledge_article_4792 2021-12-30T01:39:53-0800 000012031 Validated (External) Public Flexmaster umm Security;Known issues and workarounds Security, Known Issues and Workarounds, FlexMaster UMM What is the affect of [CVE-2021-44228] Apache Log4j2 RCE on the UMM and FM? For UMM Version 2.0 to 2.6 and FM version 9.13.1, apply the attached script log4jJndiFix.sh following the steps mentioned in the document "log4j script User Guide".

This article explains the impact and steps to mitigate the impact of [CVE-2021-44228] Apache Log4j2 RCE on Unleashed Multisite Manager (UMM) and Flex Master (FM)

2025-12-15T08:09:09-0800 2025-12-16T10:00:10-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000008ol0SAA?attachment_index=0 2025-12-16T10:00:10-0800 monthly admin,premium,warranty,guest knowledge_article_4792 knowledge_article_4792_attachment_1 User guide for Script.docx 135933.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document http://support.ruckuswireless.com/article_attachments/kA22J0000008ol0SAA?attachment_index=1 2025-12-16T10:00:10-0800 monthly admin,premium,warranty,guest knowledge_article_4792 knowledge_article_4792_attachment_1 Script file 1487.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000012034 2025-12-15T11:31:14-0800 monthly 0.8 admin,premium knowledge_article_4800 knowledge_article_4800 2022-01-12T01:08:19-0800 000012034 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor Is the AP CLI command dfs-high-density wifi1 persistent after a reboot or upgrade? Yes, the command is persistent after an AP reboot or upgrade. Command Syntax: set dfs-high-density wifi1 x x = filter level (range: 0–9, default = 0) Higher values apply a narrower filter to minimize false radar detection. Additional Notes: This setting is useful in environments with frequent DFS false positives. Ensure compliance with local regulatory requirements when modifying DFS settings.

Learn whether the AP CLI command set dfs-high-density wifi1 x remains active after an AP reboot or upgrade.

2025-12-15T11:31:14-0800 2025-12-16T10:00:10-0800 https://support.ruckuswireless.com/articles/000014283 2025-12-15T12:04:35-0800 monthly 0.8 admin,premium knowledge_article_5249 knowledge_article_5249 2024-03-05T09:00:11-0800 000014283 Validated (External) Premium Unleashed;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;SmartCell Gateway 200 (SCG200) Security Security, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass https://nvd.nist.gov/vuln/detail/CVE-2023-52161 https://nvd.nist.gov/vuln/detail/CVE-2023-52160 RUCKUS Network Security Team have internally validated these CVE's and confirmed that none of these vulnerabilities impact RUCKUS Products or Solutions. Here is the official statement: CVE-2023-52160: <ol><li>CVE-2023-52160 is a vulnerability on the Wi-Fi client side, and it’s not applicable to our AP, including the MESH use case.</li><li>To mitigate CVE-2023-52160, customers are recommended to ensure that the clients are configured properly (i.e. they should always validate the server certificate), or not to use PEAP.</li></ol> CVE-2023-52161: This IWD (iNet wireless daemon ) is a new daemon from Intel. We (RUCKUS) don not use this daemon on our AP products.

This article is created to answer customers queries on the impact of CVE-2023-52160 and CVE-2023-52161 on Ruckus Products

2025-12-15T12:04:35-0800 2025-12-16T10:00:09-0800 https://support.ruckuswireless.com/articles/000011884 2025-12-15T12:11:54-0800 monthly 0.8 admin,premium knowledge_article_4779 knowledge_article_4779 2021-09-14T08:38:44-0700 000011884 Validated (External) Premium Sz300;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Configuration;Firmware;Installation Configuration, Firmware, Installation, SZ300 Why SZ-300 can't upgrade from setup Webgui inspite of having the upgrade tab ? <ul><li>We found that when we try upgrading from setup wizard, tomcat service is going out-of-memory (OOM) during image upload phase.</li><li>As a workaround, we are required to complete the setup wizard by connecting SZ-300 to production network with valid NTP and DNS ip-addresses. </li><li>Below are the logs for reference purpose.</li></ul> "/opt/ruckuswireless/wsg/cli/bin/tomcat_oomstop.sh"... Don't force kill Tomcat directly but wait for 5 seconds Wait for tomcat down...(0/5) Wait for tomcat down...(2/5) Wait for tomcat down...(4/5) Wait for tomcat down...(6/5) Exceed max seconds (5) for waiting process stop! Stop service tomcat done!

Not able to upgrade SZ-300 from setup wizard.

2025-12-15T12:11:54-0800 2025-12-16T10:00:08-0800 https://support.ruckuswireless.com/articles/000011928 2025-12-15T05:34:48-0800 monthly 0.8 admin,premium knowledge_article_5964 knowledge_article_5964 2021-10-13T19:27:44-0700 000011928 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, SmartCell Gateway, SmartCell AP <div>Why does my STA achieve good throughput initially but then drop quickly and fail to recover?</div> There are two options to resolve excessive multicast (mDNS) and ARP scanning traffic on the same VLAN Option 1: SmartZone Controller (SZ) or Ruckus One (R1) <ul><li>Enable Isolation Multicast/Broadcast:</li><li>AP drops wireless client ARP packets before they reach the network, except packets targeted to the gateway. <img alt="User-added image" height="316" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lHp&feoid=00N50000002Cf3M&refid=0EM2J0000021ITM" width="536"></img></li></ul> Fig1: Modify Client Isolation from SZ <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001lHp&feoid=00N50000002Cf3M&refid=0EMRk00000GDmNO" width="568" height="325"></img> Fig2: Modify Modify Client Isolation from R1 Option 2: ICX Switch <ul><li>Limit IPv4 and IPv6 multicast traffic using ACLs and rate limiting:</li><li>This can be accomplished with the combination of ACL and multicast limit configuration. //To block all IPv6 traffics: ipv6 access-list NoIPv6 sequence 10 deny ipv6 any any ! interface ve 501 ipv6 enable ipv6 traffic-filter NoIPv6 in ! //To rate limit the IPv4 multicast interface ethernet 1/1/1 port-name RUCKUS AP multicast limit 2 ! </li></ul>

End-users may experience low or degraded throughput on their STA (client device). To restore performance, they often toggle Wi-Fi On/Off to recover temporarily.

2025-12-15T05:34:48-0800 2025-12-15T14:00:11-0800 https://support.ruckuswireless.com/articles/000011929 2025-12-15T05:58:48-0800 monthly 0.8 admin,premium knowledge_article_5963 knowledge_article_5963 2021-10-13T08:35:32-0700 000011929 Validated (External) Premium Sz144;Ruckus cloud wifi;Sz300;Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SZ144, Ruckus Cloud WiFi, SZ300, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway, SZ100 <div>Can I configure TKIP on a WLAN in SmartZone or Ruckus One?</div> Yes, TKIP can be configured, but only via the AP CLI. It is not available through the SmartZone or Ruckus One web interface. Important: TKIP is not recommended because it is considered insecure. Use at your own risk. The configuration is persistent once applied. Command: set encryption wlanxx Example: rkscli: set encryption wlan1 Wireless Encryption Type: [0] quit, [1] OPEN, [2] WPA Wireless Encryption Type: 2 WPA Protocol Version: [0] quit, [1] WPA, [2] WPA2, [3] AUTO (WPA+WPA2) [4] WPA3 [5] WPA2/WPA3-Mixed WPA Protocol Version: 3 WPA Authentication Type: [0] quit, [1] OPEN (PSK), [2] EAP (.1X), or [3] AUTO WPA Authentication Type: 1 WPA Cipher Type: [0] quit, [1] TKIP, [2] AES-CCMP, or [3] AUTO WPA Cipher Type: 1 WPA PassPhrase: "12345678" Enter A New WPA PassPhrase [8-63 letters], or Press "Enter" to Accept : WPA no error OK rkscli:

Is it possible to configure TKIP encryption on an Access Point (AP) managed by SmartZone (vSZ-H/E or SZ-100/144/300) or Ruckus One?

2025-12-15T05:58:48-0800 2025-12-15T14:00:10-0800 https://support.ruckuswireless.com/articles/000014313 2025-12-12T06:52:00-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5948 knowledge_article_5948 2024-05-16T10:21:43-0700 000014313 Validated (External) Public Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Does RUCKUS SZ supports the Sponsor Approval option? At present, the Sponsor Approval feature is not supported in SZ/vSZ. However, a feature request has been submitted for its inclusion.

Sponsor Approval is not available in 3.6.x and later firmware versions of SZ. Currently, Sponsor Approval feature can be used by integrating RUCKUS Cloudpath (CP) solution with SZ.

2025-12-12T06:52:00-0800 2025-12-15T06:00:16-0800 https://support.ruckuswireless.com/articles/000012406 2025-12-12T07:12:09-0800 monthly 0.8 admin,premium knowledge_article_5947 knowledge_article_5947 2022-10-03T06:02:28-0700 000012406 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Knowledge base Configuration, Knowledge Base, SZ144, SZ300, virtual SmartCell Gateway, SZ100 How do I set up guest pass self-registration in SZ/vSZ? <div>When a user connects to a Guest Pass Self-Registration WLAN, they will see the portal window.</div> <div> </div> <div><img alt="User-added image" height="358" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka22J000000bpDa&feoid=00N50000002Cf3M&refid=0EM2J0000043cWP" width="500"></img> <div>Click Register for Guest Pass.</div> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka22J000000bpDa&feoid=00N50000002Cf3M&refid=0EM2J0000042ndo"></img> <div>A pop-up will appear with three options: <ul><li>Generate a new guest pass.</li><li>Resend an existing guest pass.</li><li>Update contact details.</li></ul> </div> <img alt="User-added image" height="258" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka22J000000bpDa&feoid=00N50000002Cf3M&refid=0EM2J0000042ndt" width="500"></img> For new users, select Generate a new guest pass and click Next. Fill in the required details and submit. <img alt="User-added image" height="291" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka22J000000bpDa&feoid=00N50000002Cf3M&refid=0EM2J0000042ndy" width="500"></img> <img alt="User-added image" height="318" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka22J000000bpDa&feoid=00N50000002Cf3M&refid=0EM2J0000043cWU" width="500"></img> <div>The user will receive an email (or SMS) with the guest pass key.</div> <img alt="User-added image" height="764" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka22J000000bpDa&feoid=00N50000002Cf3M&refid=0EM2J0000043cWe" width="500"></img> <div>Click Go to Guest Access Portal, enter the key, and click Login.</div> <div>The system authenticates the key, and the user gains internet access.</div> <div>Note: If the user has no email or SMS access, they can click Check Guest Pass Availability to view the generated key.</div> <img alt="User-added image" height="563" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka22J000000bpDa&feoid=00N50000002Cf3M&refid=0EM2J0000043cWj" width="500"></img> <img alt="User-added image" height="351" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka22J000000bpDa&feoid=00N50000002Cf3M&refid=0EM2J0000042neD" width="500"></img> Enter the key and click on "Log In". <img alt="User-added image" height="347" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka22J000000bpDa&feoid=00N50000002Cf3M&refid=0EM2J0000042neN" width="500"></img> System will authenticate the provided key and authorize the client <img alt="User-added image" height="412" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka22J000000bpDa&feoid=00N50000002Cf3M&refid=0EM2J0000043cWt" width="500"></img> <img alt="User-added image" height="346" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka22J000000bpDa&feoid=00N50000002Cf3M&refid=0EM2J0000043cWy" width="500"></img> After that, user will be authenticated and have the internet access. Note: </div> <div>For email notifications, configure SMTP on the controller. For SMS notifications, configure the respective SMS service. </div>

Steps to configure guest pass self-registration in SmartZone (SZ) or Virtual SmartZone (vSZ).

2025-12-12T07:12:09-0800 2025-12-15T06:00:15-0800 https://support.ruckuswireless.com/articles/000014467 2025-12-12T08:20:47-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5943 knowledge_article_5943 2024-09-03T05:00:42-0700 000014467 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Installation Firmware, Installation, SmartCell Gateway How to resize a .qcpw2 virtual disk Virtual SmartZone installation Guide describes the steps involved in setting up a vSZ on Nutanix Hypervisor. However, in some cases we might need to expand the virtual disk's size. The following steps can be used to expand the qcow2 virtual disk size <ul><li>Set up a Linux machine (Ubuntu used here) and copy the qcow2 image into the /var/tmp folder.</li></ul> root@ubuntu-106:/var/tmp# ls -l -rw-r--r-- 1 fiuser fiuser 3394375680 Mar 27 01:34 vscg-6.1.2.0.441.qcow2 root@ubuntu-106:/var/tmp# <ul><li>Run "qemu-img resize vscg-6.1.2.0.441.qcow2 +150G" command to resize the disk. If you are seeing the following error, then the utilities have to be upgraded first:</li></ul> Command 'qemu-img' not found, but can be installed with: apt install qemu-utils root@ubuntu-106:/var/tmp# apt-get updateHit:1 http://archive.ubuntu.com/ubuntu jammy InRelease Get:2 http://security.ubuntu.com/ubuntu jammy-security InRelease [129 kB] Get:3 http://archive.ubuntu.com/ubuntu jammy-updates InRelease [128 kB] Get:4 http://archive.ubuntu.com/ubuntu jammy-backports InRelease [127 kB] Get:40 http://archive.ubuntu.com/ubuntu jammy-backports/multiverse amd64 c-n-f Metadata [116 B] Fetched 13.3 MB in 7s (2,000 kB/s) Reading package lists... Done <ul><li>Install the updates using the below command:</li></ul> root@ubuntu-106:/var/tmp# apt install qemu-utils <ul><li>Run "qemu-img resize vscg-6.1.2.0.441.qcow2 +150G" command again to resize the disk</li></ul> root@ubuntu-106:/var/tmp# qemu-img resize vscg-6.1.2.0.441.qcow2 +150G WARNING: Image format was not specified for 'vscg-6.1.2.0.441.qcow2' and probing guessed raw. Automatically detecting the format is dangerous for raw images, write operations on block 0 will be restricted. Specify the 'raw' format explicitly to remove the restrictions. Image resized. root@ubuntu-106:/var/tmp#

This Articles explains the steps to resize a .qcow2 disk

2025-12-12T08:20:47-0800 2025-12-15T06:00:14-0800 https://support.ruckuswireless.com/articles/000014414 2025-12-12T08:12:55-0800 monthly 0.8 admin,premium knowledge_article_5945 knowledge_article_5945 2024-07-31T04:39:07-0700 000014414 Validated (External) Premium Vsz dataplane Troubleshooting Troubleshooting, vSZ Dataplane Why does client can not join to tunneled WLAN? ER-11594 will cause host table depletion, so the customer needs to upgrade to R6.1.1 or later. The host table is pre-allocated fixed size table, so memory leak will not happen by this issue. It means that memory usage won't grow up by the host table.

This article explains the reasons why new clients are unable to join a tunneled WLAN and fail to obtain an IP address.

2025-12-12T08:12:55-0800 2025-12-15T06:00:14-0800 https://support.ruckuswireless.com/articles/000012105 2025-12-12T08:19:36-0800 monthly 0.8 admin,premium knowledge_article_5944 knowledge_article_5944 2022-02-21T16:35:22-0800 000012105 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Why v/SZ-H is failing to upgrade from 6.0 to 6.1 firmware? The recommended resolution for this issue is to assign IP to Control, Cluster and Management interface from separate VLAN/Subnets and then proceed with the upgrade. Ruckus engineering added a pre-upgrade hook in the next release to warn customers to avoid such upgrade failures.

This article provides details on the design change in starting 6.1 SmartZone Firmware that identifies network subnet conflict between control cluster and management interface and will cause failure in the upgrade.

2025-12-12T08:19:36-0800 2025-12-15T06:00:14-0800 https://support.ruckuswireless.com/articles/000011914 2025-12-12T10:49:13-0800 monthly 0.8 admin,premium knowledge_article_5962 knowledge_article_5962 2021-10-04T12:24:29-0700 000011914 Validated (External) Premium Cloudpath;Smartcell gateway;Cloudpath Enrollment System (ES);BPG_Cloudpath;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Cloudpath, SmartCell Gateway <div>Why are all clients connecting to a site using Cloudpath-generated DPSKs failing to connect?</div> Best Solution: Change the SSID name on new DPSK pool as well as SZ WLAN configuration and third party Registration server system. Alternate Solution Delete the new DPSK pool and then update third party server site profile. Until the third party Registration server is synced with Cloudpath server which sends API calls to the Cloudpath server the DPSK lookup will still fail. Once synced correct operation resumes: RADIUS messages now show access accept in Cloudpath RADIUS server logs: ts=20210930 190606.000, source=RADIUS, type=DPSK, authType=Access-Accept, server=port1812, macAddress=xx:xx:xx:xx:xx:xx, username=, dpskPool=, ssid=Resident, clusterName=Clusterxx, zoneName=Resident (Customer_name), vlan=xxx

Creating a new DPSK pool on the Cloudpath server with the same SSID as an existing pool causes clients using the original pool to fail authentication. This results in connection failures for devices connecting to SZ-controlled APs.

2025-12-12T10:49:13-0800 2025-12-15T06:00:13-0800 https://support.ruckuswireless.com/articles/000011127 2025-12-12T10:50:20-0800 monthly 0.8 admin,premium knowledge_article_5961 knowledge_article_5961 2020-11-30T05:22:54-0800 000011127 Validated (External) Premium Sz144;Sz300;Ruckus icx switches;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Known issues and workarounds Known Issues and Workarounds, SZ144, SZ300, Ruckus ICX Switches, virtual SmartCell Gateway, SZ100 <div>Can I remove an ICX stack member from the stack within vSZ/SZ?</div> <div>Currently, there is no direct method to remove a single ICX stack member from vSZ/SZ. Use the workaround steps above until feature support is added.</div>

Is it possible to remove an individual ICX stack member through the vSZ/SZ controller web interface?

2025-12-12T10:50:20-0800 2025-12-15T06:00:12-0800 https://support.ruckuswireless.com/articles/000014868 2025-12-12T11:20:53-0800 monthly 0.8 admin,premium knowledge_article_5960 knowledge_article_5960 2025-06-24T06:57:59-0700 000014868 Validated (External) Premium Sz300;Virtual smartcell gateway;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Configuration;Troubleshooting;Knowledge base Configuration, Troubleshooting, Knowledge Base, SZ300, virtual SmartCell Gateway Why are clients' access requests rejected when they are trying to connect with the 802.1x-based WLAN using the certificate with an external RADIUS server? Update the CN/SAN identity to include the FQDN or full URL of the server Certificate, not just the Common Name of the root certificate. <img alt="User-added image" height="77" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001eg9&feoid=00N50000002Cf3M&refid=0EMPH00000LjwN8" width="500"></img>

Clients fail to connect to an 802.1X-based WLAN when using an external RADIUS server because the CN/SAN identity in the AAA server profile does not include the Fully Qualified Domain Name (FQDN) of the RADIUS server.

2025-12-12T11:20:53-0800 2025-12-15T06:00:12-0800 https://support.ruckuswireless.com/articles/000015082 2025-12-12T11:21:54-0800 monthly 0.8 admin,premium knowledge_article_5958 knowledge_article_5958 2025-10-23T08:02:59-0700 000015082 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Security Configuration, Security, Unleashed <ol start="1"><li>How to configure RADSEC/TLS encrypted AAA server profile in Unleashed?</li><li>What is the hardcoded shared secret when setting up RADSEC/TLS encrypted AAA server profile?</li></ol> Steps to Configure RADSEC/TLS Encrypted AAA Profile <div align="center"><hr align="center" width="100%" size="2"></hr></div> Step 1: Add a Trusted CA Certificate RADSEC relies on TLS encryption, which requires a valid SSL handshake between the AP and the AAA server. <ol start="1"><li>Navigate to: Administration ? Certificate ? Advanced Option ? Add Trusted CA</li><li>Upload the CA certificate that matches the AAA server’s certificate chain.</li><li>Ensure the certificate is valid and trusted by the AAA server.</li></ol> Note: The trusted CA must match the AAA server’s certificate authority to establish a successful TLS handshake. <img alt="A screenshot of a computerAI-generated content may be incorrect." src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ejN&feoid=00N50000002Cf3M&refid=0EMPH00000UrfnP" height="503" width="864"></img> <div align="center"><hr align="center" width="100%" size="2"></hr></div> Step 2: Configure the AAA Profile <ol start="1"><li>Navigate to: Services ? Authentication Servers ? Add</li></ol> <img alt="A screenshot of a computerAI-generated content may be incorrect." src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ejN&feoid=00N50000002Cf3M&refid=0EMPH00000UrdvB" height="323" width="864"></img> <ol start="2"><li>Enter a Profile Name.</li><li>Select Radius as the server type.</li><li>Enable TLS Encryption.</li><ul><li>The Shared Secret field will be grayed out.</li><li>The system uses a pre-configured shared secret: radsec</li></ul><li>Fill in the remaining parameters:</li><ul><li>Server IP / Hostname</li><li>Port (typically 2083 for RADSEC)</li><li>Timeout and Retry settings</li></ul><li>Click Add to save the profile.</li></ol> <img alt="A screenshot of a computerAI-generated content may be incorrect." src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ejN&feoid=00N50000002Cf3M&refid=0EMPH00000UrQnF" height="625" width="372"></img> <div align="center"><hr align="center" width="100%" size="2"></hr></div> Step 3: Map AAA Profile to WLAN <ol start="1"><li>Navigate to: WiFi ? WiFi Networks ? Create/Edit</li><li>Choose 802.1x EAP as the Authentication Method.</li><li>Under Authentication Server, select the newly created RADSEC AAA profile.</li><li>Save and apply the configuration.</li></ol> <img alt="A screenshot of a computerAI-generated content may be incorrect." src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ejN&feoid=00N50000002Cf3M&refid=0EMPH00000UrMA3" height="615" width="864"></img> <div align="center"><hr align="center" width="100%" size="2"></hr></div>

This article provides step-by-step guidance to configure RADSEC (TLS-encrypted RADIUS) AAA profiles in RUCKUS Unleashed and outlines the limitations associated with RADSEC configuration, particularly the use of a hardcoded shared secret.

2025-12-12T11:21:54-0800 2025-12-15T06:00:11-0800 https://support.ruckuswireless.com/articles/000013993 2025-12-12T11:25:59-0800 monthly 0.8 admin,premium knowledge_article_5957 knowledge_article_5957 2023-02-03T11:41:38-0800 000013993 Validated (External) Premium T750;T750se;RUCKUS T750;RUCKUS T750SE Installation Installation, T750, T750SE Is there a list of Certified 10G SFP+ Modules for T750 Outdoor AP Models Following are the list of certified 10G SFP+ Modules for the T750 and T750SE Outdoor AP Models. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001et3&feoid=00N50000002Cf3M&refid=0EM2J000004OB5C"></img> Depending on the Deployment type, one can select SR- Short Range or LR- Long Range SFP Modules. The Range of the SR SFP is 300Meters and the Range of LR Module is 10KMs.

This Article provides list of certified 10G SFP+ Modules for the T750 Series Outdoor AP's

2025-12-12T11:25:59-0800 2025-12-15T06:00:11-0800 https://support.ruckuswireless.com/articles/000014867 2025-12-12T11:21:18-0800 monthly 0.8 admin,premium knowledge_article_5959 knowledge_article_5959 2025-08-25T01:22:00-0700 000014867 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Performance;Configuration;System network management Performance, Configuration, System Network Management, SZ144, SZ300, virtual SmartCell Gateway, SZ100 <div>What is the purpose of a Wi-Fi Calling Profile on a Ruckus SmartZone controller?</div> <div> <div style="font-family: 'Segoe UI';font-size: 14px;line-height: 20px;">What Does the Wi-Fi Calling Profile Do?</div> <ol><li>Prioritizes VoWiFi Traffic <ul><li>Recognizes Wi-Fi calling traffic using SIP headers, DSCP marking, or destination IP ranges</li><li>Ensures packets are treated with QoS (WMM – Voice AC) on the AP and controller</li></ul> </li><li>Enables Roaming Optimizations <ul><li>Reduces handoff time between APs</li><li>Ensures uninterrupted voice calls during roaming</li></ul> </li><li>Supports Operator Profiles <ul><li>Ruckus can identify Wi-Fi Calling servers of specific operators and apply policies accordingly</li></ul> </li><li>Improves Airtime Fairness <ul><li>Gives Wi-Fi calling traffic higher priority in congested environments</li></ul> </li></ol> </div> <h3>How to Configure (SmartZone Example):</h3> <ol><li>Go to:</li></ol> <pre><code>Edit WLANs > Select SSID > Advanced Options > Wi-Fi Calling </code><img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ehl&feoid=00N50000002Cf3M&refid=0EMPH00000Ljp3t"></img> </pre> <ul><li>Enable Wi-Fi Calling Optimization</li><li>Optionally add: <ul><li>Carrier domain (e.g., <code>ims.jio.com</code>, <code>epdg.epc.att.net</code>)</li><li>SIP server IPs or FQDNs</li><li>UDP/TCP port ranges (e.g., 500, 4500 for IPSec, or 5060 for SIP)</li></ul> </li></ul> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ehl&feoid=00N50000002Cf3M&refid=0EMPH00000Ljp3u"></img> <ul><li>Save and apply the changes</li></ul> <h3></h3> <h3>Major ePDGs used:</h3> <h3>There are a series of them listed in the manuals for Smartzone. vtc.epdg.att.ericsson.net 129.192.165.10 ATT East Coast cnc.epdg.att.erricson.net 129.192.166.10 ATT West Coast 233.sub-141-207-229.myvzw.com 141.207.229.233 Verizon ss.epdg.epc.geo.mnc260.mcc310.pub.3gppnetwork.org 208.54.37.80 TMobile primgw.vowifi2.spcsdns.net 68.31.26.2 Sprint epdg.epc.mnc006.mcc454.pub.3gppnetwork.org 180.219.134.17 SmarTone epdg.epc.mnc001.mcc505.pub.3gppnetwork.org 149.135.136.48 Telestra Mobile epdg.epc.mnc002.mcc505.pub.3gppnetwork.org 210.49.47.193 SingTel Optus epdg.epc.mnc720.mcc302.pub.3gppnetwork.org 209.148.157.48 Rogers epdg.ims.mnc005.mcc724.pub.3gppnetwork.org 200.169.116.51 Claro Brasil fn-epdg.epc.att-idns.net 107.225.251.51 FirstNet Note: If you don’t find the one you are looking for but have a phone and know your operator supports it, start a Wireshark capture on or behind the AP and then activate Wi-Fi calling on the device. You will capture the FQDN that the device is looking for and can use that for your profile. Real-World Use Cases</h3> <table><thead><tr><th colspan="1" rowspan="1">Scenario</th><th colspan="1" rowspan="1">Why Wi-Fi Calling Profile Helps</th></tr></thead><tbody><tr><td colspan="1" rowspan="1">Office with mobile-only users</td><td colspan="1" rowspan="1">Ensures clear calls over Wi-Fi instead of LTE</td></tr><tr><td colspan="1" rowspan="1">Hotels/Hospitals</td><td colspan="1" rowspan="1">Improves guest satisfaction via carrier VoWiFi</td></tr><tr><td colspan="1" rowspan="1">Large campuses</td><td colspan="1" rowspan="1">Helps during roaming between APs</td></tr></tbody></table> <hr></hr> <h3> Without Wi-Fi Calling Profile:</h3> <ul><li>Voice traffic may be treated like normal data (lower QoS)</li><li>Calls can be interrupted or have degraded quality</li><li>Network won't recognize or prioritize SIP traffic</li></ul>

Why a Wi-Fi Calling Profile is essential on Ruckus SmartZone controllers to ensure high-quality VoWiFi (Voice over Wi-Fi) communication.

2025-12-12T11:21:18-0800 2025-12-15T06:00:11-0800 https://support.ruckuswireless.com/articles/000013988 2025-12-12T11:30:22-0800 monthly 0.8 admin,premium knowledge_article_5955 knowledge_article_5955 2024-02-12T01:13:37-0800 000013988 Validated (External) Premium Virtual smartcell gateway Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, virtual SmartCell Gateway <div>Why are Chromebooks intermittently disconnecting from the Wi-Fi network?</div> As a workaround, we disabled Band Balancing on the WLAN. After this adjustment, the issue of client disconnection due to frequent switching between 2.4 and 5GHz radios has been resolved.

Chromebooks may experience intermittent Wi-Fi disconnections caused by frequent band roaming between 2.4GHz and 5GHz radios on the same AP.

2025-12-12T11:30:22-0800 2025-12-15T06:00:10-0800 https://support.ruckuswireless.com/articles/000014596 2025-12-12T11:28:17-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5956 knowledge_article_5956 2024-11-24T22:13:35-0800 000014596 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway Why is the customer seeing "AP/DP version mismatch" message? The message is informational and designed to alert users about version inconsistency. <ul><li>Ideally, keep vSZ/vDP and AP Zone on the same version to avoid potential incompatibility.</li><li>However, if the DP version is higher than the AP version, it is generally acceptable and should not impact functionality.</li></ul>

After upgrading Dataplane (DP), customers may observe multiple "AP/DP version mismatch" log messages. This typically occurs when the AP Zone is still running on an older version while the DP has been upgraded

2025-12-12T11:28:17-0800 2025-12-15T06:00:10-0800 https://support.ruckuswireless.com/articles/000013994 2025-12-12T11:30:52-0800 monthly 0.8 admin,premium knowledge_article_5954 knowledge_article_5954 2023-02-03T12:36:45-0800 000013994 Validated (External) Premium T750;T750se;RUCKUS T750;RUCKUS T750SE Performance;Installation Performance, Installation, T750, T750SE Where can I find the list of Temperature Grade 10G SFP modules Certified by Ruckus for Outdoor AP's? Following are the Ruckus Certified Temperature Grade 10G SFP+ Modules for Outdoor AP deployment. For the SR-Short Range Deployments (0-300 Meters) <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001fM5&feoid=00N50000002Cf3M&refid=0EM2J000004OBD7"></img> For LR- Long Range deployments(0-10Km): <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001fM5&feoid=00N50000002Cf3M&refid=0EM2J000004OBD8"></img> Operating Temperature Ranges: When no temperature range is mentioned in the description, the transceiver temperature range is 0°C to 85°C. “standard temperature” in the description means 0°C to 70°C. “industrial temperature” means -40°C to 85°C. For instance 10G-SFPP-SR supports operational temperature of 0°C to 85°C and 10G-SFPP-SR-SA supports operational temperature of -40°C to 85°C. Reference: https://www.commscope.com/globalassets/digizuite/61722-ds-ethernet-optics-family.pdf

This article provides Ruckus Certified Temperature Grade 10G SFP+ Modules for Outdoor AP deployment and their temperature range

2025-12-12T11:30:52-0800 2025-12-15T06:00:10-0800 https://support.ruckuswireless.com/articles/000014823 2025-12-12T11:33:58-0800 monthly 0.8 admin,premium knowledge_article_5952 knowledge_article_5952 2025-05-15T09:34:00-0700 000014823 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Registration Configuration, Registration, SmartCell Gateway <div>Does moving an AP from an active zone back to the Staging Zone free up an AP license?</div> <div style="font-family: 'Segoe UI';font-size: 14px;line-height: 20px;"> Moving an AP from an active zone to the Staging Zone does not free up an AP license because the AP remains in an Approved state. <ul><li>To release the license, the AP must be deleted from the system.</li><li>A new AP joining the Staging Zone does not consume a license until it is moved to an active zone and approved.</li></ul> </div>

Explains AP license consumption behavior on vSZ when an AP is moved from an active zone to the Staging Zone.

2025-12-12T11:33:58-0800 2025-12-15T06:00:09-0800 https://support.ruckuswireless.com/articles/000013932 2025-12-12T11:33:27-0800 monthly 0.8 admin,premium knowledge_article_5953 knowledge_article_5953 2022-12-05T12:37:41-0800 000013932 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ144, SZ300, virtual SmartCell Gateway, SZ100 <div>Why do WLANs created in a zone disappear after downgrading the Zone AP firmware to a previous version?</div> <div>This behavior is by design. The configuration backup from the previous firmware version does not include WLANs created on the newer version.</div>

WLANs created on a higher Zone AP firmware version do not appear after downgrading to a previous version.

2025-12-12T11:33:27-0800 2025-12-15T06:00:09-0800 https://support.ruckuswireless.com/articles/000014869 2025-12-12T11:38:33-0800 monthly 0.8 admin,premium knowledge_article_5950 knowledge_article_5950 2025-06-24T10:34:49-0700 000014869 Validated (External) Premium Ruckus cloud wifi Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, Ruckus Cloud WiFi <div>Why is my Venue highlighted in red with “Requires Attention”?</div> <div>What does the “Requires Attention” status mean in Ruckus One?</div> <ul><li>Identify APs within the Venue that are disconnected or showing errors.</li><li>If APs are no longer in use, remove them from the cloud.</li><li>Alternatively, reconnect affected APs and ensure they return to normal operating mode.</li></ul>

The “Requires Attention” status for a Venue in Ruckus One Cloud indicates that one or more Access Points (APs) within the Venue are experiencing issues such as firmware update failures, configuration errors, or disconnection from the cloud. This article explains the common causes, troubleshooting steps, and resolution.

2025-12-12T11:38:33-0800 2025-12-15T06:00:08-0800 https://support.ruckuswireless.com/articles/000013961 2025-12-12T11:35:05-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5951 knowledge_article_5951 2022-12-14T05:12:23-0800 000013961 Validated (External) Public Unleashed;Zonedirector;Smartcell gateway;Cloud services;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, Unleashed, ZoneDirector, SmartCell Gateway, Cloud Services <div style="font-family: 'Segoe UI';font-size: 14px;line-height: 20px;">Why does Cisco Informacast client software fail to register with the Informacast server when connected to a Ruckus WLAN, even though it works on wired networks?</div> <div style="font-family: 'Segoe UI';font-size: 14px;line-height: 20px;">Currently, Cisco TAC has not confirmed support for Directed Multicast. Recommendation: Disable multicast-to-unicast conversion on Ruckus WLANs to allow Informacast to work as intended.</div>

Cisco Informacast, an emergency mass notification system, relies on multicast-based service discovery. It works on wired networks but fails on Ruckus WLANs due to multicast handling features.

2025-12-12T11:35:05-0800 2025-12-15T06:00:08-0800 https://support.ruckuswireless.com/articles/000011867 2025-12-12T11:40:10-0800 monthly 0.8 admin,premium knowledge_article_5949 knowledge_article_5949 2021-08-25T11:38:43-0700 000011867 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway Does the SZ CLI provide filters to search for specific details when running show running-config? <div> The SZ CLI does not support filter commands like Cisco for the <code>show running-config</code> feature. You need to drill down via Zone using <code>show</code> commands to get the list. Refer to the latest SZ CLI guide for detailed commands </div> <div> <h3>Helpful Tips</h3> <ul><li>Use <code>show zone</code> first to get the exact matching name of the zone you wish to query.</li><li>Since Zones and WLAN names can contain spaces, use quotes when querying via CLI because space is treated as a delimiter.</li></ul> Example: <pre>ruckus# show zone ruckus# show running-config zone "Zone 1" ruckus# show running-config zone "Zone 1" wlan </pre> Sample output: <pre>No. Name SSID Auth Method Encryption ----- ------------- ------------- -------------- ------------ 1 Zone Wifi Zone Wifi OPEN WPA2 2 Zone Uptown ZoneUptown OPEN 3 ZondUptown ZoneUptown MAC WPA2 </pre> To get data on a specific WLAN for that zone: <pre><code></code>show running-config zone "Zone 1" wlan "Zone Wifi"</pre> </div>

The SZ CLI does not provide search filters to search for specific details when running show running-config.

2025-12-12T11:40:10-0800 2025-12-15T06:00:07-0800 https://support.ruckuswireless.com/articles/000014702 2025-12-12T05:33:27-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5942 knowledge_article_5942 2025-02-17T03:03:04-0800 000014702 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway Can we use the AP zone templates from a vSZ to SZ100 or vice versa? <ul><li> It is not possible to use the AP zone template from vSZ to the SZ100, as both the controllers are designed on different platforms. </li><li> If we try to use the zone template from vSZ on a SZ100 or vice versa, we get the following error: </li></ul> <img alt="User-added image" height="276" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ia5&feoid=00N50000002Cf3M&refid=0EMPH00000Gwx1h" width="500"></img>

This article will explain the process and feasibility of migrating AP Zone templates between vSZ and SZ100 controllers, and vice versa.

2025-12-12T05:33:27-0800 2025-12-12T14:00:16-0800 https://support.ruckuswireless.com/articles/000014950 2025-12-12T05:36:24-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5941 knowledge_article_5941 2025-10-08T02:55:56-0700 000014950 Validated (External) Public Unleashed;Zonedirector;Smartcell gateway;Cloud services;Ruckus wan gateway rwg;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Security;Troubleshooting Security, Troubleshooting, Unleashed, ZoneDirector, SmartCell Gateway, Cloud Services, RUCKUS WAN Gateway RWG Why is the default Mail app on iPhone unable to access corporate email when connected to Wi-Fi, even though internet connectivity is confirmed? The issue was resolved by configuring the firewall to allow traffic from the IP addresses associated with the domain mask.apple-dns.net. This change enabled successful communication between the iPhone Mail app and the corporate mail servers over Wi-Fi.

This article will explain the details of an issue where users may experience problems accessing their corporate email through the default Mail app on iPhones, despite having a stable internet connection. The issue is specific to Wi-Fi usage and does not occur when using mobile data.

2025-12-12T05:36:24-0800 2025-12-12T14:00:15-0800 https://support.ruckuswireless.com/articles/000014798 2025-12-11T14:48:55-0800 monthly 0.8 admin,premium knowledge_article_5940 knowledge_article_5940 2025-05-28T22:47:09-0700 000014798 Validated (External) Premium Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi How to map SSID to the AP Group in R1?

This article provides a step-by-step guide on how to assign SSIDs to specific AP Groups within a single Venue in R1. It outlines the configuration process for creating AP Groups, associating Access Points (APs) with those groups, and linking each SSID to its corresponding AP Group. This setup ensures that each site, building, or floor within the Venue broadcasts a unique SSID, enabling clear network segmentation and management. Visual aids are included to illustrate the mapping between SSIDs, AP Groups, and APs.

2025-12-11T14:48:55-0800 2025-12-12T06:00:09-0800 https://support.ruckuswireless.com/articles/000014455 2025-12-11T14:51:33-0800 monthly 0.8 admin,premium knowledge_article_5939 knowledge_article_5939 2024-08-26T22:46:50-0700 000014455 Validated (External) Premium Sz300;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Performance;Troubleshooting Performance, Troubleshooting, SZ300 Steps to Analyze Channel Utilization in a Wireless Packet Capture <ol><li> We discovered this method of checking channel utilization while troubleshooting wireless slowness issues at a customer site. </li><li> Collected over-the-air capture using a Macbook, the same could be done by taking packet capture from the controller UI for AP on the WLAN interface. </li><li> In the Wireshark capture, filter with "wlan.fc.type_subtype == 8" which is for wireless beacons, and then navigate to "IEEE 802.11 Wireless Management" and select the tag "QBSS Load Element 802.11e CCA Version". </li></ol> <img alt="User-added image" height="341" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001fdp&feoid=00N50000002Cf3M&refid=0EMPH000009z3tR" width="696"></img> 4. QBSS is a part of 802.11e, which is on a 0-255 scale and is CCA-based. So this gives a true representation of how busy the channel is. 5. To calculate channel utilization from the above screenshot, (152/256)*100 = 59%.

This article explains steps to Analyze Channel Utilization in a Wireless Packet Capture

2025-12-11T14:51:33-0800 2025-12-12T06:00:09-0800 https://support.ruckuswireless.com/articles/000014746 2025-12-11T14:35:07-0800 monthly 0.8 admin knowledge_article_5737 knowledge_article_5737 2025-03-31T02:31:18-0700 000014746 Validated (External) Internal R770;RUCKUS R770 Configuration Configuration, R770 <div>How many SSIDs does R770 support per radio?</div> <div> <h3>Technical Details</h3> <ul><li>MBSSID uses a 32-bit bitmask, where the lower 16 bits specify the physical devices (pdevs) for which the feature is enabled.</li><li>A bit corresponding to the 6 GHz radio is reserved for MBSSID and is mandatory for 6 GHz operation.</li></ul> </div> R770 supports <a href="https://docs.commscope.com/bundle/sz-612-wlanmanagementguide-sz300vszh/page/GUID-3D486C2D-5630-40B9-B67D-AA96B1B3A42F.html" target="_blank">MBSSID</a> on 6GHz radio hence only 5 wlanX slots are available under "get wlanlist"

The Ruckus R770 Access Point supports up to 36 SSIDs in total, but there is a limitation on the number of SSIDs per radio due to Multi-BSSID (MBSSID) implementation on the 6 GHz band.

2025-12-11T14:35:07-0800 2025-12-12T06:00:09-0800 https://support.ruckuswireless.com/articles/000015045 2025-12-11T14:55:11-0800 monthly 0.8 admin,premium knowledge_article_5937 knowledge_article_5937 2025-10-02T07:46:00-0700 000015045 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Security;Troubleshooting;Known issues and workarounds Configuration, Security, Troubleshooting, Known Issues and Workarounds, Cloudpath How to Revoke or Unrevoke client certificates in bulk using Cloudpath GUI? To Unrevoke client certificates in bulk: 1. Go to Dashboard-->Certificates 2. Click on Revoked Certificates 3. Download the Revoked certs in bulk by clicking on the "XLS Export " and save the file. <img alt="User-added image" height="364" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001fh3&feoid=00N50000002Cf3M&refid=0EMPH00000SbYLx" width="1257"></img> 4. Go to Dashboard-->Event response 5. Click on Unrevoke certificates 6. Choose the XLS file that was exported in STEP 3 and click continue. <img alt="User-added image" height="506" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001fh3&feoid=00N50000002Cf3M&refid=0EMPH00000SbWAU" width="1288"></img> 7. This process will run for a minute or two and show the success banner. <img alt="User-added image" height="532" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001fh3&feoid=00N50000002Cf3M&refid=0EMPH00000SbWbu" width="1236"></img>

This Article explains how to Revoke or Unrevoke client certificates in bulk on the Cloudpath Server GUI.

2025-12-11T14:55:11-0800 2025-12-12T06:00:08-0800 https://support.ruckuswireless.com/articles/000014632 2025-12-11T14:53:02-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5938 knowledge_article_5938 2025-01-17T03:52:28-0800 000014632 Validated (External) Public Sz144;Ruckus cloud wifi;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Troubleshooting Troubleshooting, SZ144, Ruckus Cloud WiFi, SZ300, virtual SmartCell Gateway, SZ100 Why would APs communicate with other APs over Port 1883 The AP neighbor discovery service "nbrd" uses TCP port # 1883 to communicate between APs for scanning, rogue detection, radio management, load balancing and fast roaming

Observing AP to AP communication over port # 1883

2025-12-11T14:53:02-0800 2025-12-12T06:00:08-0800 https://support.ruckuswireless.com/articles/000014835 2025-12-11T15:08:22-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5934 knowledge_article_5934 2025-06-05T04:28:40-0700 000014835 Validated (External) Public Ruckus icx switches;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches, SmartCell Gateway How to manage ICX switches on FIPS enabled SZ? Can we manage ICX switch with FIPS SKU in FIPS enabled SZ? 1. The FIPS enabled SZ can only support non-FIPS ICX switches (applicable to 8092 and higher ICX versions) 2. The FIPS ICX switches cannot be managed by SZ due to resource constraints 3. The non-FIPS ICX switches communicate to SZ over the port # 987, unlike APs and DPs, who communicate over 443 4. To facilitate ICX management on FIPS SZ, we need to manually open the port from SZ CLI vSZ-H-141(config)# open-icx-management Successful operation Validate the port status vSZ-H-141(config)# get open-icx-management-status Switch Port Opened The switch, then got connected to SZ ICX7550-24 Router#show sz status ============ MGMT Agent State Info =================== Config Status: None Operation Status: Enabled State: SSH CONNECTED Prev State: SSH CONNECTING Event: NONE SWR List : None Active List : 10.177.89.141 DHCP Option 43 : No DHCP Opt 43 List : None DNS Entry : No DNS IP : None Backup List : None Merged List : 10.177.89.141 Switch registrar host: sw-registrar.ruckuswireless.com Switch registrar discovery retry count: 994 SZ IP Used : 10.177.89.141 Port List : 987 Server Port Used : 987 Query Status : Response Received We could get the switch connected to SZ <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001g6r&feoid=00N50000002Cf3M&refid=0EMPH00000KuL7t"></img>

FIPS enabled SZ can only support non-FIPS ICX switches, and cannot support FIPS ICX switches due to resource constraints

2025-12-11T15:08:22-0800 2025-12-12T06:00:07-0800 https://support.ruckuswireless.com/articles/000014292 2025-12-11T14:59:10-0800 monthly 0.8 admin,premium knowledge_article_5936 knowledge_article_5936 2024-03-25T23:00:31-0700 000014292 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Website access Website Access, SmartCell Gateway Why is SZ-100 GUI access giving an Error and not opening The customer has accessed SZ by Firefox, but it failed suddenly. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001fif&feoid=00N50000002Cf3M&refid=0EMPH0000034pDV"></img> The Default Cert was updated before it expired. As per the design, SZ's default server certificate validity is 824 days, and a new certificate will be created 7 days before the expiry, this is when the old certificate will be updated with the new one. The customer needs to work with the Firefox team to delete old Certification information.

This Article explains why SZ-100 GUI access failed in Firefox

2025-12-11T14:59:10-0800 2025-12-12T06:00:07-0800 https://support.ruckuswireless.com/articles/000010458 2025-12-11T15:00:40-0800 monthly 0.8 admin,premium knowledge_article_5935 knowledge_article_5935 2020-05-05T04:53:22-0700 000010458 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware Firmware, SmartCell Gateway How to upgrade SZ/vSZ using FTP from CLI? SZ/vSZ allows upgrade via CLI using FTP and SFTP. This article provides steps on how to upgrade SZ/vSZ using a FTP server. Prerequisites: <ol><li> Downloaded SZ/vSZ firmware from the Ruckus Support Portal and copied over to the FTP Server </li><li> The version downloaded must match the controller / cluster topology </li><li> There should be a valid upgrade path from the current version to the new version </li><li> This can be checked and verified on the upgrade guide of the respective version.<a href="http://support.ruckuswireless.com/documents/4636" target="_blank"> click here</a> </li><li> Reachability from the SZ/vSZ and the FTP server over port TCP 21 </li></ol> CLI syntax for the upgrade: SZ100# backup-upgrade ftp://<username>:<password>@<FTP server IP address or FQDN> Command Reference: <a href="https://docs.commscope.com/bundle/sz-612-cliguide-sz300sz100vsz/page/GUID-CCF8EC94-BA37-4036-9886-D380521421CC.html" target="_blank">backup-upgrade</a> Example: SZ100-25# backup-upgrade ftp://root:ruckus1234@10.177.89.173 Initiate upgrade process: Once the file is uploaded, you will see 'Do you want to upgrade system?' then type 'Yes' to initiate the upgrade SZ100-25# backup-upgrade ftp://root:ruckus1234@10.177.89.173 Only one Upgrade file (scge-installer_6.1.2.0.441.ximg) is found. Do you want to copy (or input 'no' to cancel)? [yes/no] yes Starting to copy the chosen Upgrade file (scge-installer_6.1.2.0.441.ximg) from remote FTP server... Succeed to copy the chosen file from remote FTP server Upload upgrade file to system, please wait... Verify upgrade status, please wait... (5 seconds) Verify upgrade status, please wait... (10 seconds) Verify upgrade status, please wait... (15 seconds) Verify upgrade status, please wait... (20 seconds) Verify upgrade status, please wait... (25 seconds) Verify upgrade status, please wait... (30 seconds) Verify upgrade status, please wait... (35 seconds) Verify upgrade status, please wait... (40 seconds) Verify upgrade status, please wait... (45 seconds) Verify upgrade status, please wait... (50 seconds) Verify upgrade status, please wait... (55 seconds) Verify upgrade status, please wait... (60 seconds) Verify upgrade status, please wait... (65 seconds) Verify upgrade status, please wait... (70 seconds) Verify upgrade status, please wait... (75 seconds) Verify upgrade status, please wait... (80 seconds) Verify upgrade status, please wait... (85 seconds) Verify upgrade status, please wait... (90 seconds) Verify upgrade status, please wait... (95 seconds) Verify upgrade status, please wait... (100 seconds) Verify upgrade status, please wait... (105 seconds) Verify upgrade status, please wait... (110 seconds) Verify upgrade status, please wait... (115 seconds) Verify upgrade status, please wait... (120 seconds) Verify upgrade status, please wait... (125 seconds) Verify upgrade status, please wait... (130 seconds) Verify upgrade status, please wait... (135 seconds) Verify upgrade status, please wait... (140 seconds) Verify upgrade status, please wait... (145 seconds) Verify upgrade status, please wait... (150 seconds) Verify upgrade status, please wait... (155 seconds) Verify upgrade status, please wait... (160 seconds) Verify upgrade status, please wait... (165 seconds) Verify upgrade status, please wait... (170 seconds) Current version: 6.1.2.0.354 Upgrade version: 6.1.2.0.441 Do you want to backup and upgrade system (or input 'no' to cancel)? [yes/no] yes Preparing to cluster backup and upgrade, please wait... Starting to backup and upgrade system. System will be down later. PS: You can check upgrade state by calling command 'show backup-upgrade-state' Verify the upgrade state: SZ100-25# show backup-upgrade-state Operation : Backup and upgrade Progress Status : 38% completed Important note: <ol><li> If it is two/three node cluster then login into Leader node and initiate the upgrade. </li><li> It is not required to upload the image on all the nodes. </li><li> The leader node will push the firmware image file on all the follower nodes </li><li> The time taken by the controller for an upgrade depends on the size of the controller database </li><li> Larger the network, longer the upgrade time </li><li> Higher the resource specifications (CPU/RAM/HDD IO) faster the uprgade </li></ol>

This article provides information on how to upgrade the SZ/vSZ from CLI

2025-12-11T15:00:40-0800 2025-12-12T06:00:07-0800 https://support.ruckuswireless.com/articles/000011973 2025-12-11T06:02:08-0800 monthly 0.8 admin,premium knowledge_article_5931 knowledge_article_5931 2021-11-12T08:41:56-0800 000011973 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How can I use Zone Director CLI commands to change the Port Settings on AP groups, Zones and disable per AP override? Access ZD via SSH/CLI and go to enable mode: Please login: admin Password: Welcome to the Ruckus Wireless ZoneDirector 5000 Command Line Interface ruckus> en 1. Disable Port Settings override: It is handy to get a list of all AP's and configurations which can be imported to a tool like notepad++ (enable logging on SSH session) ruckus# show ap all AP: ID: 1: (sample) MAC Address= 8c:fe:74:05:ec:d0 Model= r510 Approved= Yes Device Name= R510 Description= Location= GPS= CERT = Normal Bonjour-policy= Bonjour-fencing= Disabled Group Name= CTT 2.4 Low Channel Range: A/N= 36,40,44,48,52,56,60,64,100,104,108,112,116,132,136,149,153,157,161 (Disallowed= 120,124,128) B/G/N= 1,6,11 (Disallowed= 2,3,4,5,7,8,9,10) Radio a/n: Channelization= 40 Channel= Auto WLAN Services enabled= Yes Tx. Power= Full WLAN Group Name= Collegetown Terrace Call Admission Control= OFF SpectraLink Compatibility= Disabled Radio b/g/n: Channelization= 20 Channel= Auto WLAN Services enabled= Yes Tx. Power= -8dB WLAN Group Name= Collegetown Terrace Call Admission Control= OFF SpectraLink Compatibility= Disabled Override global ap-model port configuration= Yes Network Setting: Protocol mode= Use Parent Setting Device IP Settings= Keep AP's Setting IP Type= Static IP Address= 10.9.111.103 Netmask= 255.255.255.0 Gateway= 10.9.111.1 Primary DNS Server= Secondary DNS Server= Device IPv6 Settings= Keep AP's Setting IPv6 Type= Manual IPv6 Address= IPv6 Prefix Length= 0 IPv6 Gateway= IPv6 Primary DNS Server= IPv6 Secondary DNS Server= Mesh: Status= Disabled LLDP: Status = Use Parent Setting Venue Name List: Enter config mode and load configuration of specific AP ruckus# config You have all rights in this mode. ruckus(config)# ap 8c:fe:74:05:ec:d0 The AP '8c:fe:74:05:ec:d0' has been loaded. To save the AP, type 'end' or 'exit'. ruckus(config-ap)# Verify configuration and specifically port setting/group override ruckus(config-ap)# show ... Override global ap-model port configuration= Yes ... To disable global ap-model settings use: no port-settings ruckus(config-ap)# no port-setting Verify ruckus(config-ap)# show ... Override global ap-model port configuration= No ... Note - to verify changes via GUI you must refresh the GUI page to reflect any changes as ZD reads the configuration into browser memory and does not show changes in real time. Exit config mode to save settings: ruckus(config-ap)# exit The device information has been updated. Your changes have been saved. ruckus(config)# exit Your changes have been saved. ruckus# A CLI script could be written using expect or other SSH/CLI tools to automate these steps with AP MAC as variable from a list to make this change on a group of AP's. CLI scripts are beyond scope of this note. 2. Configure AP Group for MAC authentication and specific VLAN It is handy to get full list of AP Groups and use names as displayed to access specific group settings: This list can be long so it is useful to turn on SSH/CLI logging to allow parsing info using a text tool like notepad++ ruckus# show ap-group all ... Note: - if group name has spaces then use double quotes around name "AP Group1" You may also need to get a list of Authentication servers to set up MAC authentication: ruckus# show aaa Enter config mode: ruckus# config You have all rights in this mode. Enter AP group to be changed: ruckus(config)# ap-group "test" Enter specific AP model to be changed (this may need to be done for each AP model supported by this AP group) ruckus(config-apgrp)# model r610 port-setting Set second port (eth1, lan2) to access mode ruckus(config-apgrp-port)# lan 2 uplink access Set default VLAN for this port ruckus(config-apgrp-port)# lan 2 untag 50 Enable MAC authentication (802.1x MAC authentication) ruckus(config-apgrp-port)# lan 2 dot1x auth-mac-based Configure Authenticaiton/RADIUS server to be used for this: ruckus(config-apgrp-port)# dot1x authsvr ElevenOS-Radius Verify settings: ruckus(config-apgrp-port)# show PORTS: LAN ID: 1: Enable LAN = Yes LAN Type= trunk Untag ID= 1 Members= 1-4094 Guest VLAN= Enable Dynamic VLAN= Disabled 802.1X= disabled DHCP opt82= Disabled Tunnel= Disabled MLD Snooping= Disabled IGMP Snooping= Enabled Directed Multicast= Enabled 2: Enable LAN = Yes LAN Type= access Untag ID= 50 Members= 50 Guest VLAN= Enable Dynamic VLAN= Disabled 802.1X= auth-mac DHCP opt82= Disabled Tunnel= Disabled MLD Snooping= Disabled IGMP Snooping= Enabled Directed Multicast= Enabled Authentication server name for Eth 802.1X= ElevenOS-Radius Accounting server name for Eth 802.1X= MAC Auth Bypass= Disabled Exit to save: ruckus(config-apgrp-port)# exit ruckus(config-apgrp)# exit The AP group 'test' has been updated. Your changes have been saved. A CLI/SSH scripting tool could be used to automate this operation for all AP models and AP groups with these as variables to the commands above. CLI scripting is beyond scope of this article.

Use ZD CLI commands to undo per AP configuration changes for port settings and configure global port settings

2025-12-11T06:02:08-0800 2025-12-11T18:00:14-0800 https://support.ruckuswireless.com/articles/000014377 2025-12-11T06:00:49-0800 monthly 0.8 admin,premium knowledge_article_5932 knowledge_article_5932 2024-07-31T03:00:40-0700 000014377 Validated (External) Premium Ruckus cloud wifi Firmware Firmware, Ruckus Cloud WiFi Minimum Firmware version for AP to connect to cloud AP version <h4>AP model Compatiblity:</h4> <ul><li>To connect an access point (AP) to the Ruckus cloud, it is essential to verify the compatibility of the AP models. Not all AP models are compatible with the cloud-based management system. Please refer to the image below, which outlines the specific AP models that can be successfully connected to the Ruckus cloud.</li></ul> <img alt="User-added image" height="258" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001jZN&feoid=00N50000002Cf3M&refid=0EMPH000007wrkf" width="500"></img> <h4>Solo Image:</h4> <ul><li>Check the support portal link for the latest solo software based on AP models Link: https://support.ruckuswireless.com/software</li><li>Below are few examples of support Solo version of AP models</li></ul> 110.0.0.0.2005 (R500/R600) 118.2.0.0.875 (R610/R310/R550) 118.1.0.0.1098 (R560) 118.1.0.0.1274 (R760) 122.0.0.0.722 (R770)

Minimum Firmware version for AP to connect to cloud

2025-12-11T06:00:49-0800 2025-12-11T18:00:14-0800 https://support.ruckuswireless.com/articles/000014769 2025-12-11T06:09:34-0800 monthly 0.8 admin,premium knowledge_article_5928 knowledge_article_5928 2025-05-03T17:36:52-0700 000014769 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Security;Troubleshooting Security, Troubleshooting, Unleashed Why can't I find WPA3 with just AES in Ruckus Unleashed? It only shows AES-GCMP-256? Is there any way to use AES with WPA3 in unleashed? For Unleashed: <ol><li> WPA3-Enterprise (802.1X + WPA3) uses AES-GCMP-256, which aligns with WPA3-Enterprise 192-bit security. This provides stronger encryption designed for enterprise environments. </li><li> WPA3-SAE (Open + WPA3) uses AES-CCMP, the same encryption method used by WPA2-Personal. </li></ol> Compatibility Note: If compatibility with WPA2-only clients is required, Unleashed supports a WPA2/WPA3 Mixed Mode, which allows: <ol><li> WPA2 clients to connect using AES-CCMP </li><li> WPA3-capable clients to connect using AES-GCMP-256 </li></ol> To Enable WPA2/WPA3 Mixed Mode: <ol start="1" style="list-style-type: lower-alpha;"><li> Go to Advanced WLAN Options </li><li> Enable WPA2/WPA3 Mixed Mode </li></ol> For more detailed steps, please refer to the Unleashed online help.

This Article provides information on WPA3 with AES algorithm support in Ruckus Unleashed Product.

2025-12-11T06:09:34-0800 2025-12-11T18:00:13-0800 https://support.ruckuswireless.com/articles/000011863 2025-12-11T06:04:47-0800 monthly 0.8 admin,premium knowledge_article_5930 knowledge_article_5930 2021-08-16T08:15:56-0700 000011863 Validated (External) Premium T811 cm Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, T811 CM How can I factory default a T-811-CM AP which cannot be accessed via SSH or HTTPS. Following instructions from T811-cm quick start guide AP is factory defaulted using the external hardware reset button: <a href="https://support.ruckuswireless.com/documents/2571-ruckus-t811-cm-quick-start-guide-qsg" style="color: blue;text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/documents/2571-ruckus-t811-cm-quick-start-guide-qsg</a> <img alt="User-added image" height="314" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001i5R&feoid=00N50000002Cf3M&refid=0EM2J0000020PX5" width="500"></img> You can reset the AP and CM to their factory default settings by pressing the reset button behind the access plug covering the Ethernet port. 1. Make sure that the AP is powered on. 2. Use a large flat blade screwdriver to remove the screw-in access plug covering the reset button and Ethernet port. 3. Locate the reset button under the access plug. 4. Using a pen or a similar pointed object, press the reset button for 1-4 seconds to reboot the AP and CM. Press and hold the reset button for 5-9 seconds to reset the AP and CM to factory defaults. 5. Replace the access plug, and tighten to a torque of 7 in-lbs (0.7909 Nm). Note: The hardware factory default requires the Ruckus AP operating system to be running and recognize that the button has been held down for longer then the simple reboot (>5 seconds). .This process can fail if AP has not booted up or is rebooting. It is recommended to verify that the power LED is solid green. You may need to try this operation several times if AP is continuouly rebooting. Once AP has been rebooted it will appear operational in the SZ (lab testing): <img alt="User-added image" height="224" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001i5R&feoid=00N50000002Cf3M&refid=0EM2J0000020PXP" width="500"></img> Sample of CMTS (show cm) for working CM (lab setup - different AP) (DS-US) DOC S/C/CH-S/CG/CH Mac Bonded State SIS Qos(DS-US) CPE MAC address IP Address ----------------------- ----- ------ ----------- --- --------------- --- --------------- ------------------------------------ 13/0/25-1/0/4 1 7x5 Operational 3.1 0K/0K 1 2479.2a0d.1ee9 10.157.65.49

To restore operation of T-811-CM Access Points with unknown or incorrect configuration.

2025-12-11T06:04:47-0800 2025-12-11T18:00:13-0800 https://support.ruckuswireless.com/articles/000011937 2025-12-11T06:08:03-0800 monthly 0.8 admin,premium knowledge_article_5929 knowledge_article_5929 2021-10-25T04:53:36-0700 000011937 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Registration Troubleshooting, Registration, SmartCell Gateway <div>Why are H550 or R550 APs unable to join a SmartZone 6.0 controller?</div> <ul><li>Use registration rule to approve and move AP to destination zone which supports 6.0 version or higher</li><li>Upgrade AP zone to 6.0 version or higher</li></ul>

This article cover "one" case cause and resolution of newer APs such as H550 or R550 not able to join Smart Zone (SZ) 6.0 successfully.

2025-12-11T06:08:03-0800 2025-12-11T18:00:13-0800 https://support.ruckuswireless.com/articles/000011932 2025-12-11T06:10:50-0800 monthly 0.8 admin,premium knowledge_article_5926 knowledge_article_5926 2021-10-14T07:43:05-0700 000011932 Validated (External) Premium Sz300;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, SZ300 <div>How do I resolve the IPMI voltage alarm message pointing to BMC unit 2b?</div> <div>Replace the coin-cell battery on the motherboard.</div> <div>Important: The battery type is BR2032 (not CR2032).</div> <div>Before opening the SZ300 cover, consult your Sales Engineer to avoid voiding the warranty.</div> <div>Contact Ruckus Support for guidance on battery replacement, referencing this KB article.</div>

An IPMI voltage alarm on the SZ300 GUI occurs due to a low coin-cell battery on the motherboard.

2025-12-11T06:10:50-0800 2025-12-11T18:00:12-0800 https://support.ruckuswireless.com/articles/000011974 2025-12-11T06:10:25-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5927 knowledge_article_5927 2021-11-10T17:10:05-0800 000011974 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, ZoneDirector Can Ruckus help recover/reset a lost ZD admin password? If Customer has details of the write SNMP community string available with them and SNMP server which can be used to set new admin password. Commands on SNMP server. snmpset -v 2c -c SNMPSTRING <DEVICEIP> <OBJECTNAME/OID> s " abcd" {For string} e.g. root@SNMPSERVER:~# snmpset -v 2c -c Write123 10.161.95.3 .1.3.6.1.4.1.25053.1.2.1.1.1.1.26.0 s "test" If String is a read only, you might get error: root@SNMPSERVER:~# snmpset -v 2c -c Read123 10.161.95.3 .1.3.6.1.4.1.25053.1.2.1.1.1.1.26.0 s "test" Error in packet. Reason: notWritable (That object does not support modification) type - one of i, u, t, a, o, s, x, d, n i: INTEGER, u: unsigned INTEGER, t: TIMETICKS, a: IPADDRESS o: OBJID, s: STRING, x: HEX STRING, d: DECIMAL STRING U: unsigned int64, I: signed int64, F: float, D: double

Customer asks for help to recover/reset the ZD admin password credentials since they do not remember it or previous admin has left. Procedure requires a Write SNMP string.

2025-12-11T06:10:25-0800 2025-12-11T18:00:12-0800 https://support.ruckuswireless.com/articles/000015054 2025-12-11T06:16:47-0800 monthly 0.8 admin,premium knowledge_article_5925 knowledge_article_5925 2025-10-06T08:50:51-0700 000015054 Validated (External) Premium Vsz dataplane;Virtual smartcell gateway Performance;Configuration;Installation;System network management Performance, Configuration, Installation, System Network Management, vSZ Dataplane, virtual SmartCell Gateway Why does Microsoft Hyper-V do not allow disk space increase? How to clear the checkpoints in Microsoft Hyper-V? Step 1: Delete Existing Checkpoints <ol start="1" style="list-style-type: lower-alpha;"><li> Open Hyper-V Manager. </li><li> From the VM list, select the vSZ VM. </li><li> In the Checkpoints section, right-click each checkpoint. </li></ol> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="307" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000SzLHk" width="474"></img> <ol start="4" style="list-style-type: lower-alpha;"><li>Choose Delete Checkpoint Subtree from the Actions pane.</li></ol> <img alt="A screenshot of a computer programAI-generated content may be incorrect." height="331" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000Sz8ZV" width="198"></img> ? Ensure all checkpoints are removed before proceeding. <img alt="A screenshot of a computerAI-generated content may be incorrect." height="313" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000SzYvw" width="729"></img> <div align="center"> <hr align="center" size="2" width="100%"></hr></div> Step 2: Increase Virtual Hard Disk Size <ol start="1" style="list-style-type: lower-alpha;"><li>Right-click the vSZ VM and select Settings.</li></ol> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="205" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000SzXrr" width="453"></img> <ol start="2" style="list-style-type: lower-alpha;"><li>In the Hardware section, expand IDE Controller 0 ? Hard Drive.</li><li>Click Edit.</li></ol> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="379" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000SzCb8" width="401"></img> <ol start="4" style="list-style-type: lower-alpha;"><li>In the wizard, ensure Locate Disk is selected and click Next.</li></ol> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="294" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000SzKOj" width="391"></img> <ol start="5" style="list-style-type: lower-alpha;"><li>Choose Expand and click Next.</li></ol> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="293" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000SzPJM" width="393"></img> <ol start="6" style="list-style-type: lower-alpha;"><li>Enter the desired disk size and click Next.</li></ol> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="293" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000Sz7uk" width="393"></img> <ol start="7" style="list-style-type: lower-alpha;"><li>Review the changes and click Finish.</li></ol> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="296" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000SzKOi" width="394"></img> ? The editing process may take time. Do not interrupt. <img alt="A screenshot of a computerAI-generated content may be incorrect." height="294" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000Syxg3" width="393"></img> <div align="center"> <hr align="center" size="2" width="100%"></hr></div> Step 3: Validate Disk Expansion <ol start="1" style="list-style-type: lower-alpha;"><li>After the wizard completes, click Inspect to verify: <ul><li>Current Disk Size</li><li>Maximum Disk Size</li></ul> </li></ol> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="377" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000SzPw8" width="398"></img> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="170" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000SzJkS" width="291"></img> <ol start="2" style="list-style-type: lower-alpha;"><li>Start the VM by right-clicking ? Start.</li></ol> <img alt="A screenshot of a computerAI-generated content may be incorrect." height="219" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000SzLZR" width="488"></img> <ol start="3" style="list-style-type: lower-alpha;"><li>Click Connect to access the vSZ console.</li></ol> <img alt="A computer screen shot of a computer programAI-generated content may be incorrect." height="242" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000SzDit" width="430"></img> <ol start="4" style="list-style-type: lower-alpha;"><li>Once booted, login to vSZ and run the following CLI command:</li></ol> #show diskinfo Note: The total disk space shown may be slightly less than the allocated size due to system partitioning. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001ii9&feoid=00N50000002Cf3M&refid=0EMPH00000SzHxG"></img>

This article provides guidance on resolving the issue where Microsoft Hyper-V does not allow increasing the virtual hard disk (VHD) size for vSZ-E/H due to existing checkpoints. It also outlines the steps to safely clear checkpoints and expand the disk.

2025-12-11T06:16:47-0800 2025-12-11T18:00:11-0800 https://support.ruckuswireless.com/articles/000014255 2025-12-11T06:23:02-0800 monthly 0.8 admin,premium knowledge_article_5923 knowledge_article_5923 2023-10-17T14:10:59-0700 000014255 Validated (External) Premium Ruckus cloud wifi Known issues and workarounds Known Issues and Workarounds, Ruckus Cloud WiFi How to obtain Ruckus One rest api token using postman ? <div>1. Use GET https://api.ruckus.cloud/token with Ruckus One username and password in body to obtain the Json Web Token <img alt="User-added image" height="231" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iev&feoid=00N50000002Cf3M&refid=0EMRk00000G683J" width="711"></img> </div> <div>2. Response body will contain the json web token that is used for subsequent secure API calls <img alt="User-added image" height="277" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iev&feoid=00N50000002Cf3M&refid=0EMRk00000G5qzH" width="500"></img> </div> <div>3. The json web token is copied and pasted into Authorization Section in Postman for subsequent API calls <img alt="User-added image" height="198" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001iev&feoid=00N50000002Cf3M&refid=0EMRk00000G68JR" width="954"></img> </div>

This article explains how Ruckus One REST API uses tokens for secure access and provides examples of using Postman to obtain a Ruckus One API token.

2025-12-11T06:23:02-0800 2025-12-11T18:00:11-0800 https://support.ruckuswireless.com/articles/000014403 2025-12-11T06:17:41-0800 monthly 0.8 admin,premium knowledge_article_5924 knowledge_article_5924 2024-09-17T04:23:17-0700 000014403 Validated (External) Premium Ruckus cloud wifi Configuration;System network management Configuration, System Network Management, Ruckus Cloud WiFi How do I configure different VLAN ID for the SSID at multiple Venues/Sites or AP Groups? <h4>Prerequisite:</h4> <ul><li>Access Points (APs) are added to the RUCKUS One and show status “Operational”.</li><li>APs are mapped to the desired Venue or Access Point Group (AP Group) as per the site.</li></ul> <h4>Configuration Steps:</h4> Navigate to Wi-Fi > Wi-Fi Networks > Wi-Fi Networks List. Click on Add Wi-Fi Network. <div><img alt="User-added image" height="243" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009JbJd" width="734"></img> Configure Network Name and Network Type as per the requirement and Click on Next. For demonstration, we have configured: Network Name: “Employee” & Network Type: “Passphrase (PSK/SAE)” </div> <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009JbLF" width="700"></img> Configure Passphrase and other required settings for the Wireless LAN (WLAN) and Click on Next. Keep VLAN ID as default “1” or set it to any other VLAN ID that will be used for the WLAN when VLAN is not overridden for a specific venue or AP Group. <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009JbgD" width="700"></img> Activate the WLAN for the Venue “Office-A”. Click on All APs. <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009Jc2n" width="700"></img> A new window will open to override a VLAN for the Venue. Select the option “Select specific AP Groups”. Then, Choose “AP not assigned to any group”. Alternatively, you can select a specific AP Group if you want to override VLAN for a set of APs mapped to the AP Group. Click on the pencil icon and Select the “Pool” or “VLAN” option. Here, we have select “VLAN” and Assigned VLAN ID “1000”. Click on “?” and apply. <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009piuh" width="700"></img> <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009phSM" width="700"></img> The configuration status for Venue "Office-A" has changed from “All APs” to “Unassigned APs”. <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009Jc7d" width="700"></img> Apply the same configuration for Venue "Office-B" and all other venues in the network, then click on Next. <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009Jc9F" width="700"></img> Review the WLAN configuration summary and click on Add. <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009JcAr" width="700"></img> <h4>Verify VLAN override settings:</h4> Navigate to Wi-Fi > Wi-Fi Networks > Wi-Fi Networks List. Verify the VLAN ID. It should display “VLAN-1” as it is the default VLAN configured on the WLAN. <img alt="User-added image" height="240" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009JcCT" width="730"></img> However, it shows VLAN “VLAN-1000 (Custom)” under Venue configuration. Navigate to Venues and click on "Office-A". Then, click on the Network Tab and verify the VLAN ID. <img alt="User-added image" height="287" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009JcE5" width="731"></img> Similarly, it shows VLAN “VLAN-2000 (Custom)” for Venue "Office-B". <img alt="User-added image" height="276" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009JcFh" width="726"></img> <h4>Connect a client device and verify VLAN:</h4> Client device is connected to the AP-A at Venue "Office-A", hence, it is assigned with VLAN "1000". <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009JcsP" width="700"></img> Upon moving to Office-B and connecting to AP-B, the same client device is assigned VLAN “2000. <img alt="User-added image" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001j4j&feoid=00N50000002Cf3M&refid=0EMPH000009Jcvd" width="700"></img>

This article explains how to configure different VLANs for each site for the same SSID, allowing users to connect at different sites without changing the authentication type.

2025-12-11T06:17:41-0800 2025-12-11T18:00:11-0800 https://support.ruckuswireless.com/articles/000015010 2025-12-11T06:23:50-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5922 knowledge_article_5922 2025-09-23T06:27:18-0700 000015010 Validated (External) Public Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SZ144, SZ300, virtual SmartCell Gateway, SZ100 <ul><li>Why is the 6 GHz option grayed out in the Zone?</li><li>How do I enable 6 GHz or tri-band mode?</li><li>Why is my AP not broadcasting WLAN on the 6 GHz band?</li></ul> How to Enable and Troubleshoot 6 GHz Wi-Fi Select the Zone-- Go to model-specific option--Drop down the AP list and select the AP model (R670 or T670) By default band combination is set to 2.4GHz - 5GHz <img alt="User-added image" height="444" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001hXZ&feoid=00N50000002Cf3M&refid=0EMPH00000QGHig" width="831"></img> Drop down band combination and select 2.4GHz - 5GHz - 6GHz <img alt="User-added image" height="519" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001hXZ&feoid=00N50000002Cf3M&refid=0EMPH00000QGJFq" width="849"></img> Once this is performed 6GHz option will be visible in the Zones.

Learn why the 6 GHz option may appear grayed out in your Zone configuration and how to enable 6 GHz or tri-band WLAN broadcasting on supported Access Points (APs). This article also covers common causes, troubleshooting steps, and configuration guidelines for WPA3 and OWE encryption on 6 GHz radios.

2025-12-11T06:23:50-0800 2025-12-11T18:00:10-0800 https://support.ruckuswireless.com/articles/000014964 2025-12-11T06:24:49-0800 monthly 0.8 admin,premium knowledge_article_5920 knowledge_article_5920 2025-08-04T01:57:48-0700 000014964 Validated (External) Premium Ruckus cloud wifi Known issues and workarounds Known Issues and Workarounds, Ruckus Cloud WiFi <ul><li> <div> Why do wireless clients using an SMS-based OTP/voucher for self sign-in run into a "The number of authorized devices for this user has been exceeded" error message when connecting to a guest WLAN? </div> </ <ul><li>The ""Max number of devices per credentials" is being increased from 10 to 1000. </li><li>This enhanced limit should help devices with randomized MAC addresses from lasting the maximum connection duration of 10 days without having to re-register for a new OTP. </li></ul>

Explains why wireless clients using SMS-based OTP or vouchers for self sign-in encounter errors when reconnecting to a guest WLAN due to MAC randomization.

2025-12-11T06:24:49-0800 2025-12-11T18:00:10-0800 https://support.ruckuswireless.com/articles/000014701 2025-12-11T06:24:20-0800 monthly 0.8 admin,premium knowledge_article_5921 knowledge_article_5921 2025-02-14T10:17:56-0800 000014701 Validated (External) Premium Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi Is Microsoft Azure AD Supported for Captive Portal Authentication in RUCKUS One? At present, Microsoft Azure Active Directory using SAML is not supported in RUCKUS One for Captive Portal Authentication. This functionality can be achieved by integrating with Cloudpath. A feature request has been submitted for its inclusion.

Microsoft Azure Active Directory (AD) using SAML is not supported for Captive Portal Authentication in RUCKUS One. However, this feature can be achievable by integrating the RUCKUS Cloudpath (CP) solution with RUCKUS One.

2025-12-11T06:24:20-0800 2025-12-11T18:00:10-0800 https://support.ruckuswireless.com/articles/000015141 2025-12-05T15:11:29-0800 monthly 0.8 admin,premium knowledge_article_5919 knowledge_article_5919 2025-12-05T15:07:48-0800 000015141 Validated (External) Premium Ruckus wan gateway rwg Configuration;Installation Configuration, Installation, RUCKUS WAN Gateway RWG What are the supported PMS by the RUCKUS Wireless Gateway (RWG) <div style="font-family: 'Segoe UI';font-size: 14px;font-style: normal;font-weight: 400;line-height: 20px;"> <h3>Following are the Supported PMS Servers</h3> RWG supports integration with the following PMS interfaces (as selectable in the RWG UI): <ul><li>Agilysys LMS</li><li>Clarity</li><li>Comtrol UHLL</li><li>Front2Go</li><li>Galaxy 2-Way HSIA</li><li>Hilton OnQ</li><li>Hotel Key</li><li>Infor</li><li>Infor REST</li><li>InnQuest</li><li>Innsist</li><li>MICROS FIAS</li><li>MICROS HTNG</li><li>Marriott</li><li>Mews</li><li>OPERA Cloud</li><li>RG Nets</li><li>Resco</li><li>SMS Host MSIP</li></ul> UI Navigation: </div> a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; } <div style="font-family: 'Segoe UI';font-size: 14px;font-style: normal;font-weight: 400;line-height: 20px;"> <ul><li>In RWG, navigate to Hospitality ? PMS settings.</li><li>Select the appropriate PMS interface from the drop-down.</li></ul> </div> <img alt="User-added image" height="259" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001gWf&feoid=00N50000002Cf3M&refid=0EMRk00000G1en1" width="500"></img>

This article lists Property Management System (PMS) servers and interfaces supported by the RUCKUS Wireless Gateway (RWG) for hospitality deployments.

2025-12-05T15:11:29-0800 2025-12-11T10:00:14-0800 https://support.ruckuswireless.com/articles/000006815 2025-11-12T06:35:00-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_3404 knowledge_article_3404 2017-12-12T14:34:13-0800 000006815 Validated (External) Public Icx 7650;Icx 6430;Icx 6450;Icx 6610;Icx 7150;Icx 7250;Icx 7450;Icx 7750;RUCKUS ICX 7650 Campus Switches;Ruckus ICX 6430 and 6450 Campus Switches;Ruckus ICX 6610 Campus Switches;RUCKUS ICX 7150 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Performance;Configuration;Installation;Security;System network management;Support license activation Performance, Configuration, Installation, Security, System Network Management, Support License Activation, ICX 7650, ICX 6430, ICX 6450, ICX 6610, ICX 7150, ICX 7250, ICX 7450, ICX 7750 What are the licensing features available on Ruckus Switches? ICX 6610 License Features The ICX 6610 device supports the use of licensed FastIron feature or feature sets. The following feature licenses are available for the ICX 6610 device: <ul><li>Premium Layer 3 license</li><li>Ports on Demand license</li><li>MACSec license</li></ul> <div style="margin-left: 40px;"><img alt="ICX 6610 License" height="136" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001bDd&feoid=00N50000002Cf3M&refid=0EM2J000000lshy" width="500"></img></div> <h4>Premium Layer 3 license</h4> This license enables you to use the following features or feature sets: <ul><li>BGP4</li><li>BGP4+</li><li>GRE</li><li>IPv6 static routing</li><li>IPv6 unicast routing</li><li>IPv6 over IPv4 tunnels</li><li>OSPF v2</li><li>OSPF v3</li><li>PIM-DM</li><li>PIM-SM</li><li>PIM-SSM</li><li>PIM passive</li><li>PBR</li><li>RIPng</li><li>VRRP</li><li>VRRP v3 for IPv6</li><li>VRRP-E</li><li>VRRP-E for IPv6</li><li>VRF-Lite</li></ul> ICX6430: Does not have any additional license features ICX 6450 and ICX 6450C License Features The ICX 6450 and ICX 6450C devices support the use of licensed FastIron feature or feature sets. <img alt="ICX 6450 License" height="97" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001bDd&feoid=00N50000002Cf3M&refid=0EM2J000000lsi3" width="500"></img> Premium Layer 3 license This license is available for the ICX 6450 and ICX 6450C devices. It enables you to use the following features or feature sets: <ul><li>IPv4 OSPF v2 (ICX 6450 only)</li><li>IPv4 OSPF v3 (ICX 6450 only)</li><li>RIP v1, v2 (ICX 6450 only)</li><li>RIPng (ICX 6450 only)</li><li>VRRP (ICX 6450 and ICX 6450C)</li><li>VRRP-E (ICX 6450 and ICX 6450C)</li><li>GRE (ICX 6450 and ICX 6450C)</li></ul> FCX License Features The FCX device supports the use of licensed FastIron feature or feature sets. Advance Layer 3 license This license enables you to use the following features or feature sets: <ul><li>BGP</li><li>BGP4+</li><li>GRE</li><li>IPv6 over IPv4 tunnels</li></ul> FSX 800 and FSX 1600 License Features The FSX 800 and FSX 1600 devices support the use of licensed FastIron feature or feature sets. IPv4 and IPv6 PREM Layer 3 license (XL management modules) This license enables you to use the following features or feature sets: <ul><li>BGP</li><li>BGP4+</li><li>IPv6 Layer 3 forwarding</li><li>IPv6 over IPv4 tunnels in hardware</li><li>IPv6 redistribution</li><li>IPv6 static routes</li><li>RIPng</li><li>IPv6 VRRPv3</li><li>IPv6 over GRE</li><li>PIM-DM (third generation only)</li><li>IPv6 PIM-SM (third generation only)</li><li>IPv6 PIM passive (third generation only)</li><li>Pv6 PIM SSM (third generation only)</li><li>IPv6 Policy-based routing (third generation only)</li><li>IPv6 over IPv4 tunnels</li><li>6,000 active host routes</li><li>OSPF v2</li><li>OSPF v3</li><li>Anycast RP</li><li>DVMRP V2</li><li>IGMP V1, V2, and V3</li><li>ICMP redirect messages</li><li>IGMP V3 fast leave (for routing)</li><li>MSDP</li><li>PIM-DM</li><li>PIM-SM</li><li>PIM passive</li><li>PIM SSM</li><li>Policy-based routing</li><li>VRRP-E</li><li>GRE</li><li>Multicast over GRE</li><li>IPv4 over GRE</li><li>Multi-VRF</li></ul> NOTE: The licenses for FCX, FSX 800 and FSX 1600 are not on sale anymore as they are End of Life models. ICX 7250 License Features The ICX 7250 device supports the use of licensed FastIron feature or feature sets. The following feature licenses are available for the ICX 7250 device: <ul><li>Premium Layer 3 (non-node locked license)</li><li>Ports on Demand (PoD) license</li></ul> <div style="margin-left: 40px;"><img alt="ICX 7250 License" height="239" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001bDd&feoid=00N50000002Cf3M&refid=0EM2J000000lsiS" width="500"></img></div> Premium Layer 3 (non-node locked license) This license enables you to use the following features or feature sets: <ul><li>OSPF v2</li><li>RIP v1/v2</li><li>VRRP</li><li>VRRP-E</li><li>VRF (IPv4 and IPv6)</li><li>IPv6 over IPv4 Tunnels</li></ul> ICX 7450 License Features The ICX 7450 device supports the use of licensed FastIron features or feature sets. The following feature licenses are available for the ICX 7450 device: <ul><li>Premium Layer 3 (non-node locked license)</li><li>MACSec license</li></ul> <div style="margin-left: 40px;"><img alt="ICX 7450 License" height="70" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001bDd&feoid=00N50000002Cf3M&refid=0EM2J000000lsiX" width="500"></img></div> This license enables you to use the following features or feature sets: <ul><li>OSPF v2</li><li>OSPF v3 (IPv6)</li><li>RIP v1/v2</li><li>RIPng (IPv6)</li><li>VRRP</li><li>VRRPv3 (IPv6)</li><li>VRRP-E</li><li>GRE</li><li>PBR</li><li>PIM-SM, PIM-SSM, PIM-DM</li><li>PIM Passive</li><li>BGP, BGP4+ (IPv6)</li><li>VRF (IPv4 and IPv6)</li><li>GRE</li><li>IPv6 over IPv4 Tunnels</li></ul> ICX 7650 License Features The ICX 7650 device supports the use of licensed FastIron feature or feature sets. The following feature licenses are available for the ICX 7650 device: <ul><li>Premium Layer 3 (non-node locked license)</li><li>MACSec license</li></ul> <div style="margin-left: 40px;"><img alt="ICX 7650 License upgrades" height="113" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001bDd&feoid=00N50000002Cf3M&refid=0EM2J000000lsic" width="500"></img></div> Premium Layer 3 IP routing (with software license) • IPv4 and IPv6 dynamic routes • OSPF v2, OSPF v3 (IPv6) • PIM-SM, PIM-SSM, PIM-DM, PIM passive (IPv4/IPv6 multicast routing functionality) • PBR • Virtual Route Redundancy Protocol VRRP v3 (IPv6) • VRRP-E (IPv4, IPv6) • BGP4, BGP4+ (IPv6) • GRE • IPv6 over IPv4 tunnels • VRF-lite (IPv4 and IPv6) • MSDP ICX 7750 License Features <img alt="ICX 7750 License" height="160" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001bDd&feoid=00N50000002Cf3M&refid=0EM2J000000lsnD" width="500"></img> Premium Layer 3 IP routing feature set (with Certificate of Entitlement) • IPv4 and IPv6 dynamic routes • OSPF v2, OSPF v3 (IPv6) • PIM-SM, PIM-SSM, PIM-DM, PIM passive (IPv4/IPv6 multicast routing functionality) • PBR • VRRP-E (IPv4, IPv6) • VRRPv3 (IPv6) • BGP4, BGP4+ (IPv6) • GRE • IPv6 over IPv4 tunnels • VRF (IPv4 and IPv6) ICX 7850 License Features The ICX 7850 device supports the use of licensed FastIron feature or feature sets. The following feature licenses are available for the ICX 7850 device: <ul><li>Premium Layer 3 (non-node locked license)</li><li>MACSec license</li></ul> <div style="margin-left: 40px;">License Part Number / SKU : ICX7850-PREM-LIC : ICX 7850 Layer 3 Premium software license ICX-MACSEC-LIC : ICX MACSec License</div> Premium Layer 3 IP routing (with software license) • IPv4 and IPv6 dynamic routes • OSPF v2, OSPF v3 (IPv6) • PIM-SM, PIM-SSM, PIM-DM, PIM passive (IPv4/IPv6 multicast routing functionality) • PBR • Virtual Route Redundancy Protocol VRRP v3 (IPv6) • VRRP-E (IPv4, IPv6) • BGP4, BGP4+ (IPv6) • GRE • IPv6 over IPv4 tunnels • VRF-lite (IPv4 and IPv6) • MSDP ICX 8200 License Features Premium Layer 3 IP routing feature set (with Certificate of Entitlement) • IPv4 and IPv6 dynamic routes • OSPF v2, OSPF v3 (IPv6) • PIM-SM, PIM-SSM, PIM-DM, PIM passive (IPv4/IPv6 multicast routing functionality) • PBR • VRRP-E (IPv4, IPv6) • VRRPv3 (IPv6) • BGP4, BGP4+ (IPv6) • GRE • IPv6 over IPv4 tunnels • VRF (IPv4 and IPv6)

Article has got information about the different types of licensing and their features available on Ruckus Switches

2025-11-12T06:35:00-0800 2025-11-17T06:00:09-0800 https://support.ruckuswireless.com/articles/000015112 2025-11-12T02:33:19-0800 monthly 0.8 admin,premium knowledge_article_5914 knowledge_article_5914 2025-11-12T02:33:19-0800 000015112 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;Configuration;Installation Performance, Configuration, Installation, Unleashed How to configure External Antenna Settings via CLI in Unleashed Use CLI commands under config-ap mode to enable external antennas and configure gain and antenna elements. Steps Access CLI of Unleashed AP enable config config-ap Enable External Antenna external-antenna [2.4G | 5G] enable 2.4G ? Configure external antenna for 2.4GHz radio. 5G ? Configure external antenna for 5GHz radio. Disable External Antenna external-antenna [2.4G | 5G] disable Set Antenna Gain external-antenna [2.4G | 5G] gain <value> <value> in dBi (refer to antenna datasheet for correct gain). Specify Number of Antennas external-antenna [2.4G | 5G] [2-antennas | 3-antennas] Example For T350SE with external antenna: ruckus(config-ap)# external-antenna 2.4G enable ruckus(config-ap)# external-antenna 2.4G gain 11 ruckus(config-ap)# external-antenna 5G enable ruckus(config-ap)# external-antenna 5G gain 10.5

This article explains how to enable and configure external antennas on Ruckus Unleashed Access Points (APs) using the Command Line Interface (CLI). The Unleashed GUI does not provide advanced antenna configuration options such as gain or antenna element selection.

2025-11-12T02:33:19-0800 2025-11-17T06:00:08-0800 https://support.ruckuswireless.com/articles/000015076 2025-11-12T02:31:18-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5915 knowledge_article_5915 2025-11-12T02:31:18-0800 000015076 Validated (External) Public Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration Configuration, SZ144, SZ300, virtual SmartCell Gateway, SZ100 force-fragmentation CLI was introduced in R7.1.1. How about R6.1.x? force-fragmentation CLI command is implemented in R6.1.2p5, too. You can enable force-fragmentation of AP by SZ CLI. <div class="bodydiv refbodydiv syntax" style="box-sizing: inherit;outline-width: 0px;margin-bottom: 8px;margin-left: 16px;color: #323e48;font-family: univia-pro, sans-serif;font-size: 16px;text-align: left;white-space: normal;background-color: #ffffff;">force-fragmentation {rks-gre | RGRE_profile name}</div> <div class="bodydiv refbodydiv syntax" style="box-sizing: inherit;outline-width: 0px;margin-bottom: 8px;margin-left: 16px;color: #323e48;font-family: univia-pro, sans-serif;font-size: 16px;text-align: left;white-space: normal;background-color: #ffffff;">no force-fragmentation</div> <p class="p" id="GUID-3437AD30-7916-4E04-B43A-BF1CF3D0689D__GUID-09747209-711D-425C-AD1C-D45FFD205B28" style="box-sizing: inherit;margin-block: 0px;margin-inline: 0px;padding-inline-start: 0px;padding: 0px 0px 1em;margin-bottom: 0px;margin-top: 3px;">The system is in the default state, GRE tunnel fragmentation is not forced. <table class="dl parml" style="box-sizing: inherit;border-collapse: collapse;width: 546px;margin-bottom: 6px;margin-top: 6px;"><tbody style="box-sizing: inherit;border-width: 0px;"><tr class="dlentry" style="box-sizing: inherit;display: flex;background-color: #ffffff;border-width: 0px;flex-direction: column;padding: 5px 0px;"><td colspan="1" rowspan="1" style="box-sizing: inherit;border-width: 0px;display: table-cell;line-height: 20px;padding: 3px;vertical-align: top;"> <div class="dt pt dlterm" id="GUID-3437AD30-7916-4E04-B43A-BF1CF3D0689D__GUID-F09946DB-200F-43AB-85C6-BFDB6462A044" style="box-sizing: inherit;outline-width: 0px;font-weight: 600;">rks-gre</div> </td><td colspan="1" rowspan="1" style="box-sizing: inherit;border-width: 0px;display: table-cell;line-height: 20px;padding: 3px;vertical-align: top;"> <div class="dd pd" id="GUID-3437AD30-7916-4E04-B43A-BF1CF3D0689D__GUID-33C58F8D-7295-4563-8004-F8A73A876884" style="box-sizing: inherit;outline-width: 0px;padding-left: 24px;">Allows configuration of RUCKUS Generic Routing Encapsulation (rks-gre) tunnel settings.</div> </td></tr><tr class="dlentry" style="box-sizing: inherit;display: flex;background-color: #ffffff;border-width: 0px;flex-direction: column;padding: 5px 0px;"><td colspan="1" rowspan="1" style="box-sizing: inherit;border-width: 0px;display: table-cell;line-height: 20px;padding: 3px;vertical-align: top;"> <div class="dt pt dlterm" id="GUID-3437AD30-7916-4E04-B43A-BF1CF3D0689D__GUID-2E41F3DE-A458-494B-AB60-2D881AC0D7DD" style="box-sizing: inherit;outline-width: 0px;font-weight: 600;">RGRE_profile name</div> </td><td colspan="1" rowspan="1" style="box-sizing: inherit;border-width: 0px;display: table-cell;line-height: 20px;padding: 3px;vertical-align: top;"> <div class="dd pd" id="GUID-3437AD30-7916-4E04-B43A-BF1CF3D0689D__GUID-64C19992-ABF6-4EC0-AF51-1397972F85FC" style="box-sizing: inherit;outline-width: 0px;padding-left: 24px;">Enables RGRE_xx (profile name) for force fragmentation.</div> </td></tr></tbody></table>

force-fragmentation CLI was new CLI on R7.1.1.

2025-11-12T02:31:18-0800 2025-11-17T06:00:08-0800 https://support.ruckuswireless.com/articles/000014642 2025-11-11T05:55:10-0800 monthly 0.8 admin,premium knowledge_article_5908 knowledge_article_5908 2024-12-27T09:53:58-0800 000014642 Validated (External) Premium Knowledge;Ruckus icx switches;Zoneflex indoor Website services;Knowledge base;Registration Website Services, Knowledge Base, Registration, Knowledge, Ruckus ICX Switches, ZoneFlex Indoor Lennar Home customers seeking technical assistance with Ruckus Products should visit the community forum Effective November’2022, ‘Ruckus Support for Lennar Home customers will no longer be handled by phone or email. We will be exclusively supporting customers via a community forum support model and hence no phone calls or emails will be accepted. <ol style="margin-bottom: 11px;"><li style="margin-bottom: 11px;margin-left: 8px;">Customers can access Ruckus Support for Lennar Homes by visiting <a href="https://community.ruckuswireless.com/" target="_new">https://community.ruckuswireless.com/</a> and selecting "Ruckus Lennar Support," or by searching for it using their preferred search engine. To receive support, they will need to create an account on the forum.</li></ol> <img alt="User-added image" height="227" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001Zbd&feoid=00N50000002Cf3M&refid=0EMPH00000F9Jh7" width="500"></img> <ol start="2" style="margin-bottom: 11px;"><li style="margin-bottom: 11px;margin-left: 8px;">Click on Ask the Pack.</li></ol> <img alt="User-added image" height="111" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001Zbd&feoid=00N50000002Cf3M&refid=0EMPH00000F9Jij" width="500"></img> <ol start="3" style="margin-bottom: 11px;"><li style="margin-bottom: 11px;margin-left: 8px;">Provide a Subject for your issue and click "Check Title."</li></ol> <img alt="User-added image" height="123" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001Zbd&feoid=00N50000002Cf3M&refid=0EMPH00000F9JcI" width="500"></img> <ol start="4" style="margin-bottom: 11px;"><li style="margin-bottom: 11px;margin-left: 8px;">Click on Continue and Post.</li></ol> <img alt="User-added image" height="101" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001Zbd&feoid=00N50000002Cf3M&refid=0EMPH00000F9GZa" width="500"></img> <ol start="5" style="margin-bottom: 11px;"><li style="margin-bottom: 11px;margin-left: 8px;">In the Body, provide a brief description of your issue and click "Post."</li></ol> <img alt="User-added image" height="169" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Rk0000001Zbd&feoid=00N50000002Cf3M&refid=0EMPH00000F9HaU" width="500"></img> <ol start="6" style="margin-bottom: 11px;"><li style="margin-bottom: 11px;margin-left: 8px;">If you are not logged in or do not have an account, please create one to proceed.</li></ol>

This article provides instructions on how to redirect Lennar Home customers to to the community forum for TAC assistance.

2025-11-11T05:55:10-0800 2025-11-12T06:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA2PH000001easD0AQ?attachment_index=0 2025-11-12T06:00:09-0800 monthly admin,premium knowledge_article_5908 knowledge_article_5908_attachment_1 Lennar RMA Creation.docx 1053698.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000015099 2025-11-06T00:51:27-0800 monthly 0.8 admin,premium knowledge_article_5904 knowledge_article_5904 2025-11-06T00:51:27-0800 000015099 Validated (External) Premium Ruckus network director rnd;Smartcell accessories;Smartcell gateway;Smart wireless services;SmartCell Gateway 200 (SCG200) Support license activation;Registration Support License Activation, Registration, Ruckus Network Director RND, SmartCell Accessories, SmartCell Gateway, Smart Wireless Services Which SKUs are auto-activated in RUCKUS systems, and what steps should a customer take post-auto-activation? The list of SKUs that are auto-activated and do not require any manual action after activation. These SKUs include software features and/or support services that are automatically activated and applied to the user's account upon order completion. Docuemnt Attached

This article outlines the list of SKUs eligible for auto-activation and the necessary actions (if any) required after the auto-activation process is completed in the RUCKUS Support Portal. It helps partners and internal teams understand which product licenses are auto-activated and what steps to take next.

2025-11-06T00:51:27-0800 2025-11-07T14:00:08-0800 http://support.ruckuswireless.com/article_attachments/kA2Rk0000001oqnKAA?attachment_index=0 2025-11-07T14:00:08-0800 monthly admin,premium knowledge_article_5904 knowledge_article_5904_attachment_1 Auto-Activation SKU's 1.xlsx 20902.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000011072 2025-10-22T20:17:28-0700 monthly 0.8 admin,premium knowledge_article_5899 knowledge_article_5899 2020-11-09T06:27:51-0800 000011072 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway "Join RSSI Threshold" and "OCE" they both do the same thing, but they can be set independently. What is the difference between these features? Optimized Connectivity Experience Protocol (802.11 ai) features to make Ruckus AP can support basic OCE functionalities for solving airtime consumed by management frames.. We have implemented OCE for Probe Response suppression and RSSI-based Association Rejection. Limitation: All OCE feature will only work if both client and AP support OCE. Broadcast Probe response Delay: Main function is to send out Broadcast Probe Response instead of using unicast Probe Response. And use delay value and Max Channel Time in client side to control broadcast probe response transmit interval. RSSI-based Association Rejection: This function allows OCE AP rejects a (Re-)Association request if the RSSI of the (Re-)Association request received from a STA is below minimum threshold value. Join RSSI Threshold and RSSI-based Association Rejection are similar function. Simple identify way: RSSI-based Association Rejection: for OCE clients Join RSSI Threshold: for non-OCE clients

The fundamental difference between "Join RSSI Threshold" and "Optimized Connectivity Experience (OCE)" on WLAN setting.

2025-10-22T20:17:28-0700 2025-10-23T10:00:08-0700 https://support.ruckuswireless.com/articles/000015080 2025-10-22T21:02:57-0700 monthly 0.8 admin,premium knowledge_article_5898 knowledge_article_5898 2025-10-22T21:02:57-0700 000015080 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway How can I enable continuous packet capture in Wireshark using the Web GUI so that new files are automatically created every 15 minutes? <ul><li>Launch Wireshark and select Capture > Options.</li><li>In the Input tab, choose the network interface you want to monitor.</li><li>Navigate to the Output tab.</li><li>Under Output file(s), specify a base file name and directory</li></ul> <img alt="User-added image" height="225" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002dID&feoid=00N50000002Cf3M&refid=0EMPH00000UpqLK" width="500"></img> <ul><li>Check the box for “Create a new file automatically after...” and set it to 15 minutes (900 seconds).</li><li>Check “Use a ring buffer with (x) files” and set the number of files to keep (for example, 20).</li></ul> <img alt="User-added image" height="245" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002dID&feoid=00N50000002Cf3M&refid=0EMPH00000UqM3C" width="500"></img> <ul><li>Review the configuration summary and click Start to begin capturing.</li></ul> Wireshark will now: <ul><li>Create a new .pcapng file every 15 minutes.</li><li>Retain only the most recent 20 files</li><li>Automatically overwrite the oldest file when the buffer limit is reached</li></ul> Alternative File Rotation Triggers Wireshark also supports other rotation conditions under “Create a new file automatically after…”: <ul><li>after <number> packets – starts a new capture file when the specified number of packets is reached.</li><li>after <size> kilobytes (or megabytes) – creates a new file once the capture file exceeds the defined size limit</li><li>when time is a multiple of <x> hours – begins a new capture file every fixed hour interval (for example, every hour on the clock)</li></ul> These options can be used instead of or in combination with the time-based rotation to tailor captures for specific troubleshooting needs. <img alt="User-added image" height="245" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002dID&feoid=00N50000002Cf3M&refid=0EMPH00000UqPvV" width="500"></img>

This article explains how to enable and configure continuous packet capture (pcap) in the Wireshark Web GUI using the ring buffer feature. This functionality allows users to perform long-term or continuous network captures by automatically saving new capture files at fixed intervals and limiting the number of stored files.

2025-10-22T21:02:57-0700 2025-10-23T10:00:07-0700 https://support.ruckuswireless.com/articles/000003373 2025-10-08T07:56:09-0700 monthly 0.8 admin,premium knowledge_article_5895 knowledge_article_5895 2014-09-08T13:22:21-0700 000003373 Validated (External) Premium Virtual smartcell gateway Performance;Configuration;Installation;Troubleshooting Performance, Configuration, Installation, Troubleshooting, virtual SmartCell Gateway Why do I get the memory threshold message? Recommended Actions: <ol><li>Resource Review: Check the resource allocation as shown in the screenshot above. If resources are insufficient, plan a maintenance window and allocate the required resources. </li><li>Access Point Compatibility: Identify the models of Access Points used in the network. Refer to the latest release notes to confirm if they are supported. If supported, proceed with upgrading to the latest version. </li><li>System Reboot (if issue persists): If both the version and resources are correctly configured and the issue continues, consider rebooting the system. Note: Rebooting the controller usually clears cache memory, which can help resolve issues caused by temporary data or memory corruption, improving overall network performance and stability</li></ol>

After creating another vSZ instance on the same host, the Memory threshold [90%] exceeded on control plane.

2025-10-08T07:56:09-0700 2025-10-14T10:00:14-0700 https://support.ruckuswireless.com/articles/000014525 2025-10-08T08:57:25-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5569 knowledge_article_5569 2024-10-09T13:06:36-0700 000014525 Validated (External) Public Unleashed;Zoneflex indoor;Smartcell gateway;Smart wireless services;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, Unleashed, ZoneFlex Indoor, SmartCell Gateway, Smart Wireless Services How to troubleshoot AP Crash and frequent reboots? Resolution will vary based on the reason of reboot. Please upgrade your Access Point to a recommended software version. If issue still persists, please collect the information in the Troubleshooting section and open a Support case with RUCKUS.

AP reboots due to different reasons like Kernel Panic, Watchdog timeout, Problem Detected, Power Cycle, Application reboot etc. Support log must be collected for the affected APs to analyze the reason of troubleshooting. If possible, APs should be upgraded to latest recommended release for better stability.

2025-10-08T08:57:25-0700 2025-10-14T10:00:13-0700 https://support.ruckuswireless.com/articles/000014385 2025-10-08T08:58:03-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5777 knowledge_article_5777 2024-07-23T14:05:44-0700 000014385 Validated (External) Public Sz144;Ruckus cloud wifi;Sz300;Zonedirector;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartZone 100-D (SZ100-D) Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, SZ144, Ruckus Cloud WiFi, SZ300, ZoneDirector, virtual SmartCell Gateway, SZ100 Wireless Client is not able to connect to WPA2/WPA3-Personal SSID/WLAN <h1 style="text-align: center;">SmartZone</h1> <ol><li>Confirm Configuration of the WLAN is correct (Password/Encryption Method/VLAN/DNS) </li><li>Confirm that APs are broadcasting the WLAN. </li><li>Try to connect a live user to the WLAN and check all the Troubleshooting steps suggested in the troubleshooting section and collect the below output from AP CLI to further investigate with Ruckus support, if you are not able to solve/isolate the issue. </li></ol> # set scg syslog 0xfff8 (version below 6.x.x.) # set scg syslog 7 (version above 6.x.x.x) # get syslog log # support # support show <h1 style="text-align: center;">RUCKUS Cloud</h1> <ol><li>Confirm Configuration of the WLAN is correct (password/Encryption Method/VLAN/DNS) </li><li>Confirm that APs are broadcasting the WLAN. </li><li>Try to connect a live user to the WLAN, check all the Troubleshooting steps suggested above, and collect AP debug logs from RUCKUS Cloud GUI to further investigate with Ruckus support.</li></ol> <img alt="User-added image" height="210" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Zkr&feoid=00N50000002Cf3M&refid=0EMPH00000JyGtN" width="500"></img> <h1 style="text-align: center;">Unleashed APs</h1> <ol><li>Confirm Configuration of the WLAN is correct (password/Encryption Method/VLAN/DNS) </li><li>Confirm that APs are broadcasting the WLAN. </li><li>Try to connect a live user to the WLAN and check all the Troubleshooting steps suggested above and collect AP debug info. <ul><li>On the Debug Info tab, check all Debug Components, then click Save Debug Info. Provide that file to Ruckus Support for further diagnostics.</li></ul> </li></ol> <img alt="User-added image" height="345" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Zkr&feoid=00N50000002Cf3M&refid=0EMPH000008MRzR" width="794"></img> <h1 style="text-align: center;"> Zone Director </h1> <ol><li>Confirm the configuration of the WLAN is correct (password/Encryption Method/VLAN/DNS) </li><li>Confirm that APs are broadcasting the WLAN. </li><li>Try to connect a live user to the WLAN and check all the Troubleshooting steps suggested in the troubleshooting section, collect AP debug logs from ZD GUI, and save the debug info to further investigate with Ruckus support. </li></ol> <img alt="User-added image" height="415" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Zkr&feoid=00N50000002Cf3M&refid=0EMPH0000085miX" width="985"></img> 4. Collect the below output from AP CLI: #support #support show

Document provides a comprehensive guide for the troubleshooting of Wi-Fi client connection with RUCKUS Access Points (AP) WLAN type WPA2 and WPA3 Personal, for different RUCKUS Wireless Solutions. It includes necessary steps, troubleshooting tips, and resolution methods.

2025-10-08T08:58:03-0700 2025-10-14T10:00:12-0700 https://support.ruckuswireless.com/articles/000014441 2025-10-08T09:07:38-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5478 knowledge_article_5478 2024-08-22T13:52:26-0700 000014441 Validated (External) Public Smartcell gateway;Ruckus support services;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SmartCell Gateway, Ruckus Support Services Why is new SmartZone node not able to join the Cluster? If all the above troubleshooting is tried, please collect the following logs, and open a support case with RUCKUS – <ol><li>From the current leader node, change the logging level of “Web” and “Configurer” in debug mode and then try to join the node again and then collect the Snapshot log. Once the logs are downloaded, please change the logging level back “Warning” state. Refer to the following article on how to download Snapshot logs - https://docs.commscope.com/bundle/sz-610-adminguide-sz300vsz/page/GUID-41CD8D53-221C-4215-9519-75A0AD8FFE86.html. Note – Make sure the logging level is changed back to “Warning”, else it will overwhelm the resources.</li><li>Collect “show service” and “show cluster-state” output from all the connected nodes.</li></ol>

Common causes of node join failures are Misconfiguration of Network Settings, Firmware Version Mismatch, Form-Factor Compatibility, Interface Configuration Matching, IP Version Compatibility, VM Resource Level Validation etc.

2025-10-08T09:07:38-0700 2025-10-14T10:00:12-0700 https://support.ruckuswireless.com/articles/000014380 2025-10-08T09:09:09-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5362 knowledge_article_5362 2024-07-23T14:30:19-0700 000014380 Validated (External) Public Sz144;Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Troubleshooting Troubleshooting, SZ144, SZ300, SCG200, virtual SmartCell Gateway, SZ100 How to troubleshoot SmartZone Cluster or Node out of service? Resolution will vary based on the troubleshooting explained above. However, there are some common resolutions to recover from the issue: <ul><li> “service restart” CLI command to restart all the services on the affected SmartZone node. Note - Please ensure you are running this command on the affected SmartZone node after verifying it's IP, mac-address or Serial Number. </li></ul> <ul><li> Increasing disk or memory in Virtual machines if found running at maximum capacity </li></ul> <ul><li> Open support case with RUCKUS after collecting all the required data as explained in the Troubleshooting section. </li></ul>

A SmartZone node goes out-of-service due to different reasons like one or many applications not online, network reachability, abnormally high CPU, memory or disk space. Configurer.log can be used to investigate more details about the service that caused the node to go out of service. When more than one node goes out of service, Cluster goes out of service as well. Remedial step will depend on the cause, however, restarting services is a general resolution if the node is out of service due to one or multiple applications in offline state. If caused by network reachability, check if all the interfaces are up and they can communicate with the other nodes interfaces.

2025-10-08T09:09:09-0700 2025-10-14T10:00:11-0700 https://support.ruckuswireless.com/articles/000014456 2025-10-08T11:50:29-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5489 knowledge_article_5489 2024-08-28T14:10:24-0700 000014456 Validated (External) Public Ruckus cloud wifi;Unleashed;Zonedirector;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Configuration;System network management;Case management Performance, Configuration, System Network Management, Case Management, Ruckus Cloud WiFi, Unleashed, ZoneDirector, SmartCell Gateway How to troubleshoot speed / throughput issues on RUCKUS WLAN solutions?

Throughput issues on 802.11 networks can significantly impact the performance and user experience. This article provides a detailed guide to identifying and resolving common throughput problems on the RUCKUS networks WLAN product line.

2025-10-08T11:50:29-0700 2025-10-14T10:00:10-0700 https://support.ruckuswireless.com/articles/000014542 2025-10-08T11:50:48-0700 monthly 0.8 admin,premium knowledge_article_5653 knowledge_article_5653 2025-01-07T10:31:52-0800 000014542 Validated (External) Premium Ruckus cloud wifi;Unleashed;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;SmartCell Gateway 200 (SCG200) Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, Ruckus Cloud WiFi, Unleashed, SmartCell Gateway How to troubleshoot specific application / software performance issues on various Ruckus WLAN Solutions? Introduction: An application / software may need certain network requirements to function efficiently. Sometimes either due to network issues the specific application may work with deteriorated performance or not work at all. This article provides guidelines for troubleshooting applications/software specific issues on Ruckus WLAN infrastructure using examples of Microsoft Teams, Zoom, and WebEx. It includes details on the required port numbers, typical bandwidth usage, and the implementation of DSCP and QoS to ensure optimal performance. Generic Troubleshooting Steps for application specific issues: <ol style="margin-bottom: 11px;"><li style="margin-bottom: 11px;"> Check Network Connectivity: Ensure that the device is connected to the network and has internet access. </li><li style="margin-bottom: 11px;"> Verify Port Availability: Confirm that the required ports are open and not blocked by firewalls. </li><li style="margin-bottom: 11px;"> Bandwidth Assessment: Ensure that the network can handle the required bandwidth for the application. </li><li style="margin-bottom: 11px;"> Update Application: Make sure the application is updated to the latest version. </li><li style="margin-bottom: 11px;"> Check for Network Congestion: Identify and mitigate any network congestion issues. </li><li style="margin-bottom: 11px;"> Use Wired Connection: If possible, use a wired connection instead of Wi-Fi to reduce latency and packet loss. </li><li style="margin-bottom: 11px;"> Implement QoS: Configure DSCP markings and QoS settings to prioritize real-time traffic. </li><li style="margin-bottom: 11px;"> Clear Application Cache: For Microsoft Teams, clear the cache by deleting files in the %appdata%\Microsoft\Teams folder. </li><li style="margin-bottom: 11px;"> Run Network Diagnostics: Use built-in tools or third-party software to diagnose and resolve network issues. </li><li style="margin-bottom: 11px;"> Check Device Performance: Ensure that the device meets the minimum system requirements and is not overloaded with other applications. </li><li style="margin-bottom: 11px;"> Adjust Video Settings: Lower the video resolution or disable video to reduce bandwidth usage during calls. </li><li style="margin-bottom: 11px;"> Restart Network Equipment: Restart routers, modems, and switches to resolve any temporary network issues. </li><li style="margin-bottom: 11px;"> Check for Service Outages: Verify if there are any known outages or maintenance activities affecting the application </li></ol> <h3 style="margin-bottom: 11px;">RUCKUS Smart Zone:</h3> We will be briefly diving into the following steps on the Ruckus Smart Zone platform to validate the performance of the application / app. Have the WLAN client connected and have the app/application in question running before proceeding further for example if its a Voip/Video application like teams please place a test call. Also note down client specific details like Client Mac address, Client IP address. Checking Network Connectivity: <ul><li style="margin-bottom: 11px;">Navigate to Monitor > Clients > Wireless Clients > Search and locate the client using its MAC address / IP address > General</li><li style="margin-bottom: 11px;">Make sure the client is in the authenticated and associated state</li><li style="margin-bottom: 11px;">Make sure the client has sufficient RSSI and SNR <ul><li style="margin-bottom: 11px;">For most real time applications an RSSI > -68dbm or above is recommended (an enterprise application will have its own documentation on basic WLAN requirements)</li><li style="margin-bottom: 11px;">Make sure that the SNR of the client is > 30db</li><li style="margin-bottom: 11px;">Confirm the type of radio of the client</li><li style="margin-bottom: 11px;">Make sure that the client is connected to the nearest AP / AP in line of sight</li></ul> </li></ul> <div style="margin-bottom: 11px;"><img alt="Figure 1: SZ Client Details" height="469" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002a0z&feoid=00N50000002Cf3M&refid=0EMPH00000FQrHn" width="708"></img> Figure 1: SZ Client Details</div> Verify Port Availability: <ul><li style="margin-bottom: 11px;">Connect a windows / linux / mac on the same WLAN and </li><li style="margin-bottom: 11px;">Using Telnet or a network Analyzer tool which confirm if the ports required are open and accessible</li><li style="margin-bottom: 11px;">Details on installing nMap can be found here # https://nmap.org/book/port-scanning-tutorial.html</li></ul> <div style="margin-bottom: 11px;"><img alt="User-added image" height="196" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002a0z&feoid=00N50000002Cf3M&refid=0EMPH00000FR15p" width="721"></img></div> <div style="margin-bottom: 11px;">Figure 2: Example Nmap output</div> Bandwidth Assessment: <ul><li style="margin-bottom: 11px;">Using an online speed check utility confirm if the client has sufficient b/w to communicate with its server </li><li style="margin-bottom: 11px;">In the data section a sample b/w requirements details for Teams/Zoom/WebEx applications is shared</li><li style="margin-bottom: 11px;">More details on troubleshooting bandwidth related issues can be found here on KB # https://support.ruckuswireless.com/articles/000014456</li></ul> Check for Network Congestion: <ul><li style="margin-bottom: 11px;">Verify airtime utilization and WLAN performance metrics - details can be found in KB # https://support.ruckuswireless.com/articles/000014530</li></ul> Implement QoS: <ul><li style="margin-bottom: 11px;">Implement QoS: Based on the TCP/UDP port requirements, if the application in question is a priority on the WLAN implemented, then please implement QOS using the destination IP and port details of the respective application.</li><li style="margin-bottom: 11px;">More details on QOS can be found on KB # https://support.ruckuswireless.com/articles/000014560</li></ul> <h3 style="margin-bottom: 11px;">RUCKUSOne:</h3> We will be briefly diving into the following steps on the RuckusOne platform to validate the performance of the application in question Have the WLAN client connected and have the app/application in question running before proceeding further for example if its a Voip/Video application like teams please place a test call. Also note down client specific details like Client Mac address, Client IP address. <div style="margin-bottom: 11px;"> Checking Network Connectivity: <ul><li style="margin-bottom: 11px;">Navigate to Clients > Locate the client using its MAC address</li><li style="margin-bottom: 11px;">Make sure the client is in the authenticated and associated state</li><li style="margin-bottom: 11px;">Make sure the client has sufficient RSSI and SNR <ul><li style="margin-bottom: 11px;">For most real time applications an RSSI > - 68 dbm or above is recommended (an enterprise application will have its own documentation on basic WLAN requirements)</li><li style="margin-bottom: 11px;">Make sure that the SNR of the client is > 30 db</li><li style="margin-bottom: 11px;">Confirm the type of radio of the client</li><li style="margin-bottom: 11px;">Make sure that the client is connected to the nearest AP / AP in line of sight</li></ul> </li></ul> <div style="margin-bottom: 11px;"><img alt="User-added image" height="874" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002a0z&feoid=00N50000002Cf3M&refid=0EMPH00000FR1PB" width="500"></img> Figure 3: Client details from R1 Clients Tab</div> Verify Port Availability: <ul><li style="margin-bottom: 11px;">Connect a windows / linux / mac on the same WLAN and </li><li style="margin-bottom: 11px;">Using Telnet or a network Analyzer tool which confirm if the ports required are open and accessible</li><li style="margin-bottom: 11px;">Details on installing nMap can be found here # https://nmap.org/book/port-scanning-tutorial.html</li></ul> Bandwidth Assessment: <ul><li style="margin-bottom: 11px;">Using an online speed check utility confirm if the client has sufficient b/w to communicate with its server </li><li style="margin-bottom: 11px;">In the data section a sample b/w requirements details for Teams/Zoom/WebEx applications is shared</li><li style="margin-bottom: 11px;">More details on troubleshooting bandwidth related issues can be found here on KB # https://support.ruckuswireless.com/articles/000014456</li></ul> Check for Network Congestion: <ul><li style="margin-bottom: 11px;">Verify airtime utilization and WLAN performance metrics - details can be found in KB # https://support.ruckuswireless.com/articles/000014530</li></ul> Implement QoS: <ul><li style="margin-bottom: 11px;">Implement QoS: Based on the TCP/UDP port requirements, if the application in question is a priority on the WLAN implemented, then please implement QOS using the destination IP and port details of the respective application.</li><li style="margin-bottom: 11px;">More details on QOS can be found on KB # https://support.ruckuswireless.com/articles/000014560</li></ul> </div> <h3 style="margin-bottom: 11px;">RUCKUS Unleashed:</h3> Checking Network Connectivity: <ul><li style="margin-bottom: 11px;">Navigate to Clients > Wireless Clients > Search and locate the client using its MAC address / IP address > Show Details</li></ul> <div style="margin-bottom: 11px;"><img alt="Figure 3: Locating the clients on the Unleashed Dashboard" height="424" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002a0z&feoid=00N50000002Cf3M&refid=0EMPH00000FR5vp" width="713"></img> Figure 4: Locating the client on the Unleashed Dashboard</div> <ul><li style="margin-bottom: 11px;">Make sure the client is in the authenticated and associated state</li><li style="margin-bottom: 11px;">Make sure the client has sufficient RSSI and SNR <ul><li style="margin-bottom: 11px;">For most real time applications an RSSI > -68dbm or above is recommended (an enterprise application will have its own documentation on basic WLAN requirements)</li><li style="margin-bottom: 11px;">Make sure that the SNR of the client is > 30db</li><li style="margin-bottom: 11px;">Confirm the type of radio of the client</li><li style="margin-bottom: 11px;">Make sure that the client is connected to the nearest AP / AP in line of sight</li></ul> </li></ul> <div style="margin-bottom: 11px;"><img alt="User-added image" height="753" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002a0z&feoid=00N50000002Cf3M&refid=0EMPH00000FQncP" width="669"></img></div> <div style="margin-bottom: 11px;">Figure 5: Unleashed Client Details</div> Verify Port Availability: <ul><li style="margin-bottom: 11px;">Connect a windows / linux / mac on the same WLAN and </li><li style="margin-bottom: 11px;">Using Telnet or a network Analyzer tool which confirm if the ports required are open and accessible</li><li style="margin-bottom: 11px;">Details on installing nMap can be found here # https://nmap.org/book/port-scanning-tutorial.html</li></ul> <div style="margin-bottom: 11px;"><img alt="User-added image" height="137" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002a0z&feoid=00N50000002Cf3M&refid=0EMPH00000FR8th" width="500"></img></div> <div style="margin-bottom: 11px;">Figure 2: Example Nmap output</div> Bandwidth Assessment: <ul><li style="margin-bottom: 11px;">Using an online speed check utility confirm if the client has sufficient b/w to communicate with its server </li><li style="margin-bottom: 11px;">In the data section a sample b/w requirements details for Teams/Zoom/WebEx applications is shared</li><li style="margin-bottom: 11px;">More details on troubleshooting bandwidth related issues can be found here on KB # https://support.ruckuswireless.com/articles/000014456</li></ul> Check for Network Congestion: <ul><li style="margin-bottom: 11px;">Verify airtime utilization and WLAN performance metrics - details can be found in KB # https://support.ruckuswireless.com/articles/000014530</li></ul> Implement QoS: <ul><li style="margin-bottom: 11px;">Implement QoS: Based on the TCP/UDP port requirements, if the application in question is a priority on the WLAN implemented, then please implement QOS using the destination IP and port details of the respective application.</li><li style="margin-bottom: 11px;">More details on QOS can be found on KB # https://support.ruckuswireless.com/articles/000014560</li></ul> <h2>Data on examples like Microsoft Teams, Zoom, WebEx URL's and TCP ports KB from Microsoft Teams: </h2> https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide&preserve-view=true#skype-for-business-online-and-microsoft-teams Port Numbers URL's that need to be witelisted: <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;"> TCP Ports: 80, 443 </li><li style="margin-bottom: 11px;"> UDP Ports: 3478-3481 </li></ul> Bandwidth Requirements <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;"> Peer-to-peer audio calls: 50 kbps </li><li style="margin-bottom: 11px;"> Peer-to-peer video calls (360p): 500 kbps </li><li style="margin-bottom: 11px;"> Peer-to-peer video calls (720p): 1.2 Mbps </li><li style="margin-bottom: 11px;"> Peer-to-peer video calls (1080p): 1.5 Mbps </li><li style="margin-bottom: 11px;"> Group video calls (360p): 500 kbps per participant </li><li style="margin-bottom: 11px;"> Group video calls (720p): 1.5 Mbps per participant </li><li style="margin-bottom: 11px;"> Group video calls (1080p): 2.5 Mbps per participant. </li></ul> DSCP and QoS <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;"> Audio: DSCP value of 46 (Expedited Forwarding, EF) </li><li style="margin-bottom: 11px;"> Video: DSCP value of 34 (Assured Forwarding, AF41) </li><li style="margin-bottom: 11px;"> Screen Sharing: DSCP value of 18 (Assured Forwarding, AF21) </li><li style="margin-bottom: 11px;"> Signaling: DSCP value of 40 (Class Selector 5, CS5) </li></ul> Implementing QoS in Microsoft Teams involves configuring DSCP markings to prioritize real-time traffic. This ensures that voice, video, and screen sharing receive preferential treatment over less time-sensitive data Diagnostic Features Build in: <img alt="Figure 4: Microsoft Teams Diagnostic Features" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002a0z&feoid=00N50000002Cf3M&refid=0EMPH00000FQziL"></img> Figure 4: Microsoft Teams data from Diagnostic Features which are build in during an active teams screen share meeting Zoom Port Numbers <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;"> TCP Ports: 80, 443, 8801-8802 </li><li style="margin-bottom: 11px;"> UDP Ports: 3478-3479, 8801-8810 </li></ul> Bandwidth Requirements <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;"> 1:1 video calling: <ul style="list-style-type: disc;"><li style="margin-bottom: 11px;"> 720p HD: 1.2 Mbps (up/down) </li><li style="margin-bottom: 11px;"> 1080p HD: 3.8 Mbps (up/down) </li></ul> </li><li style="margin-bottom: 11px;"> Group video calling: <ul style="list-style-type: disc;"><li style="margin-bottom: 11px;"> 720p HD: 1.5 Mbps (up/down) </li><li style="margin-bottom: 11px;"> 1080p HD: 3.0 Mbps (up/down) </li></ul> </li><li style="margin-bottom: 11px;"> Screen sharing with video thumbnail: 50-150 kbps </li><li style="margin-bottom: 11px;"> Screen sharing without video thumbnail: 50-75 kbps. </li></ul> DSCP and QoS <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;"> Audio: DSCP value of 46 (Expedited Forwarding, EF) </li><li style="margin-bottom: 11px;"> Video: DSCP value of 34 (Assured Forwarding, AF41) </li><li style="margin-bottom: 11px;"> Screen Sharing: DSCP value of 18 (Assured Forwarding, AF21) </li></ul> Zoom also supports QoS by using DSCP markings to prioritize audio, video, and screen sharing traffic, ensuring high-quality communication WebEx Port Numbers <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;"> TCP Ports: 80, 443, 5060-5080 </li><li style="margin-bottom: 11px;"> UDP Ports: 19560-65535 </li></ul> Bandwidth Requirements <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;"> Video calls: <ul style="list-style-type: disc;"><li style="margin-bottom: 11px;"> Standard definition (SD): 600 kbps </li><li style="margin-bottom: 11px;"> High definition (HD): 1.2 Mbps </li><li style="margin-bottom: 11px;"> Full high definition (Full HD): 2.5 Mbps </li></ul> </li><li style="margin-bottom: 11px;"> Audio calls: 50-100 kbps </li><li style="margin-bottom: 11px;"> Screen sharing: 150-300 kbps </li></ul> DSCP and QoS <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;"> Audio: DSCP value of 46 (Expedited Forwarding, EF) </li><li style="margin-bottom: 11px;"> Video: DSCP value of 34 (Assured Forwarding, AF41) </li><li style="margin-bottom: 11px;"> Screen Sharing: DSCP value of 18 (Assured Forwarding, AF21) </li></ul> WebEx uses DSCP markings to ensure that audio, video, and screen sharing traffic are prioritized, providing a better user experience during calls and meetings Conclusion By following these guidelines and implementing QoS, you can effectively troubleshoot and resolve network-related issues for Microsoft Teams, Zoom, and WebEx. Ensuring proper network configuration and sufficient bandwidth will help maintain optimal performance for these applications.

This article provides guidelines for troubleshooting applications/software specific issues on Ruckus WLAN infrastructure using examples of Microsoft Teams, Zoom, and WebEx. It includes details on the required port numbers, typical bandwidth usage, and the implementation of DSCP and QoS to ensure optimal performance.

2025-10-08T11:50:48-0700 2025-10-14T10:00:09-0700 https://support.ruckuswireless.com/articles/000015027 2025-10-08T04:27:19-0700 monthly 0.8 admin,premium knowledge_article_5891 knowledge_article_5891 2025-10-08T04:27:19-0700 000015027 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed How to troubleshoot when an Ruckus T670 AP Unleashed GUI does not load; it only shows “Building the Unleashed Network". After executing the command "set power-mode at," the Unleashed interface became available.

Troubleshooting a Ruckus T670 AP After Firmware Upgrade, After flashing a Ruckus T670 AP from Solo firmware to Unleashed version 200.18.7.1.323, the following issues arose: SSH access is functioning. The Unleashed GUI only shows: “Building the Unleashed Network. It may take a few minutes.”The “Configure.Me” SSID is not broadcasting.

2025-10-08T04:27:19-0700 2025-10-08T14:00:13-0700 https://support.ruckuswireless.com/articles/000012444 2025-10-08T04:29:20-0700 monthly 0.8 admin knowledge_article_5889 knowledge_article_5889 2025-10-08T04:29:20-0700 000012444 Validated (External) Internal Sz144;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 100-D (SZ100-D) Configuration;Installation Configuration, Installation, SZ144, virtual SmartCell Gateway, SZ100 How to delete the node or get aware of the node which is not getting deleted in case if re-index isn't helping to add a controller How to delete the node which is not getting deleted in case if we try deleting from CLI of controller isn't resol

This Article provides steps on how to delete Defective Node ( which doesn't get delete ) and add Replaced controller as a Follower.

2025-10-08T04:29:20-0700 2025-10-08T14:00:12-0700 https://support.ruckuswireless.com/articles/000015033 2025-10-08T02:46:14-0700 monthly 0.8 admin,premium knowledge_article_5894 knowledge_article_5894 2025-10-08T02:46:14-0700 000015033 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Troubleshooting Troubleshooting, Unleashed <ul><li> Why does URL filtering stop working after rebooting the AP ? </li></ul> Log in to the Unleashed AP Web UI. Navigate to: System ? Network Settings ? DNS Verify the DNS IPs are correct and match what is set on the client devices. ?? If the AP and client resolve domains through different DNS servers, filtering will be inconsistent.

URL Filtering feature is used to block client access to specified websites. However, some users have observed inconsistent behavior blocked sites become accessible after rebooting the Access Point (AP).

2025-10-08T02:46:14-0700 2025-10-08T10:00:12-0700 https://support.ruckuswireless.com/articles/000014977 2025-10-08T03:03:02-0700 monthly 0.8 admin,premium knowledge_article_5892 knowledge_article_5892 2025-10-08T03:03:02-0700 000014977 Validated (External) Premium Ruckus cloud wifi Security;Troubleshooting Security, Troubleshooting, Ruckus Cloud WiFi How to view a guest user's passphrase that has already been generated on Ruckus One. For security and privacy reasons, RUCKUS One does not store or display the actual passphrase after it has been generated. <ul><li>Once a guest pass is generated, the passphrase is delivered via the selected delivery method (e.g., email, SMS, or printed voucher).</li><li>The passphrase is not stored in a retrievable format within the RUCKUS One interface.</li><li>The UI only displays metadata related to the guest pass, such as name, email, expiration time, SSID, etc. </li></ul> Important: If the guest user loses the passphrase, the only option is to generate a new guest pass and share it again. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002NN7&feoid=00N50000002Cf3M&refid=0EMPH00000OorCz"></img>

Information on how to view a guest user's passphrase that has already been generated on Ruckus One.

2025-10-08T03:03:02-0700 2025-10-08T10:00:11-0700 https://support.ruckuswireless.com/articles/000014961 2025-10-06T20:09:31-0700 monthly 0.8 admin,premium knowledge_article_5885 knowledge_article_5885 2025-10-06T20:09:31-0700 000014961 Validated (External) Premium Sz144;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ144, virtual SmartCell Gateway, SZ100 How to configure Web Login Configuration on Aruba Clearpass for Hotspot based SSID with Ruckus vSZ On Ruckus End, configure Hotspot + Open SSID with Hotspot Profile. <img alt="User-added image" height="273" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kdl&feoid=00N50000002Cf3M&refid=0EMPH00000T371D" width="500"></img> <img alt="User-added image" height="279" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kdl&feoid=00N50000002Cf3M&refid=0EMPH00000T2OwA" width="500"></img> In ClearPass Policy Manager (CPPM), the settings shown in the below screenshot are part of the Web Login Configuration used for guest access authentication. <img alt="User-added image" height="326" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kdl&feoid=00N50000002Cf3M&refid=0EMPH00000OKirt" width="500"></img> Note: Replace "sip" with SZ IP address To Access This in CPPM: <ol><li>Login to the ClearPass Policy Manager Web UI.</li><li>Go to: Guest ? Configuration ? Web Logins</li><li>Click on the relevant Web Login Page you're using (e.g., "Guest Login" or a custom name).</li><li>Inside that page configuration: <ul style="list-style-type: circle;"><li>Scroll down to the Login section.</li><li>You'll find the fields like: <ul style="list-style-type: square;"><li>Enable guest login to a Network Access Server</li><li>Vendor Settings</li><li>Submit URL</li><li>Submit Method (POST/GET)</li><li>Username Field</li><li>Password Field</li><li>Password Encryption</li></ul> </li></ul> </li></ol>

Web Login Configuration on Aruba Clearpass for Hotspot based SSID with Ruckus vSZ

2025-10-06T20:09:31-0700 2025-10-08T02:00:08-0700 https://support.ruckuswireless.com/articles/000015006 2025-10-06T22:50:14-0700 monthly 0.8 admin,premium knowledge_article_5886 knowledge_article_5886 2025-10-06T22:50:14-0700 000015006 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How can I configure SmartZone (vSZ) to send email alerts when an Access Point disconnects or goes offline? Once SMTP, recipients, and event notification settings are properly configured, SmartZone will successfully send an email alert whenever an AP goes offline (Event 303). This ensures proactive monitoring and faster troubleshooting.

This article provides step-by-step instructions for configuring email alerts in Ruckus SmartZone (vSZ) when an Access Point (AP) goes offline. This enables network administrators to proactively monitor AP availability and respond quickly to outages.

2025-10-06T22:50:14-0700 2025-10-08T02:00:07-0700 https://support.ruckuswireless.com/articles/000015049 2025-10-06T09:09:00-0700 monthly 0.8 admin,premium knowledge_article_5881 knowledge_article_5881 2025-10-06T09:09:00-0700 000015049 Validated (External) Premium Ruckus cloud wifi Configuration;Installation;System network management Configuration, Installation, System Network Management, Ruckus Cloud WiFi How to configure LACP (Link Aggregation Control Protocol) or LAG (Link Aggregation Group) on Access Points (APs) managed by Ruckus-One <h3> </h3> <ul></ul> Currently, LACP (Link Aggregation Control Protocol) / LAG (Link Aggregation Group) cannot be configured directly through the RUCKUS-One web user interface. If link aggregation is required, the configuration must be performed manually using the AP Command Line Interface (CLI) by connecting to the access point. <h3>Pre-requisites:</h3> <ul><li>AP powered via one of the following: <ul><li>802.3at PoE+</li><li>Passive PoE injector (minimum 20W)</li><li>12V DC power supply</li></ul> </li><li>All member ports must have the same speed and duplex settings</li><li>LACP/LAG supported only on APs with two Ethernet ports (11ac/11ax models)</li><li>Switch must support and have LACP enabled on the ports connected to the AP</li><li>Minimum two active Ethernet links between AP and switch</li><li>On 11ax APs, POE link can support bandwidth up to 2.5 Gbps, but to enable LACP, both ethernet links should operate at the same speed. Hence link speed must be downgraded and should set to 1 Gbps</li><li>Switch hash policy should be in line with the AP hash policy configuration. By default, L2 + L3 will be configured at AP</li></ul> <h3> Configuration Steps:</h3> <ol><li> Access AP CLI via RUCKUS-One : <ul><li>Log in to Ruckus-One.</li><li>Navigate to Wi-Fi ? Access Points ? AP List.</li><li>Select the AP you want to configure for LACP.</li><li>Click CLI Session to open the AP’s command-line interface. <img alt="" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002YAT&feoid=00N50000002Cf3M&refid=0EMPH00000ShntO"></img> </li></ul> </li><li>Verify Current Bonding Status: get bond</li><li> Enable LACP on the AP: set bond bond0 enable </li><li> Add Ethernet Interfaces to the Bond: set bond bond0 add eth0 set bond bond0 add eth1 </li><li>Verify Configuration: get bond</li></ol> Example Configuration: set bond bond0 enable set bond bond0 add eth0 set bond bond0 add eth1 get bond <h3>Optional Settings (Advanced LACP Parameters)</h3> These settings allow you to fine-tune LACP behavior for performance and compatibility with your network design. <ul><li>Performance Optimization: Choose the right hashing algorithm to maximize link utilization.</li><li>Failover Speed: Fast LACP rate ensures minimal downtime during link failure.</li><li>Compatibility: Some switches require specific hashing modes for proper load balancing.</li></ul> <ol><li>LACP Rate set bond bond0 lacp-rate [0|1] </li></ol> <ul><li> Options: <ul><li>0 = Slow (Default): LACP PDUs (Protocol Data Units) are sent every 30 seconds.</li><li>1 = Fast: LACP PDUs are sent every 1 second.</li></ul> </li></ul> 2. XMIT Hash Policy set bond bond0 xmit-hash [0|1|2] <ul><li> Options: <ul><li>0 = Layer 2 (MAC-based): Traffic distribution based on source/destination MAC addresses.</li><li>1 = Layer 3+4 (IP + TCP/UDP): Traffic distribution based on IP and transport layer ports.</li><li>2 = Layer 2+3 (MAC + IP): Combination of MAC and IP addresses.</li></ul> </li></ul>

Configure LACP on Aps managed by Ruckus-One

2025-10-06T09:09:00-0700 2025-10-06T22:00:07-0700 https://support.ruckuswireless.com/articles/000015047 2025-10-01T18:28:11-0700 monthly 0.8 admin,premium knowledge_article_5878 knowledge_article_5878 2025-10-01T18:28:11-0700 000015047 Validated (External) Premium Ruckus analytics;Ruckus icx switches Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus Analytics, Ruckus ICX Switches Why RUCKUS AI (RAI) Data Studio does not display temperature metrics for switches? <h4>Resolution Steps</h4> To enable temperature visibility and GPB-based stats in RAI: <ol><li>Upgrade ICX switch firmware to 10.0.0.10f or later.</li><li>Ensure SmartZone firmware is at version 7.0 or later.</li></ol>

This Article provides a possible reason of RUCKUS AI (RAI) Data Studio does missing the temperature metrics for certain switches

2025-10-01T18:28:11-0700 2025-10-02T10:00:07-0700 https://support.ruckuswireless.com/articles/000005309 2025-09-30T07:00:14-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5877 knowledge_article_5877 2015-11-20T14:49:15-0800 000005309 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;Flexmaster umm;Smartcell ap;Ruckus support services;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartZone 100-D (SZ100-D) Firmware;Security;Known issues and workarounds Firmware, Security, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, FlexMaster UMM, SmartCell AP, Ruckus Support Services, SZ100 RUCKUS Controller is showing AP Certificate is expired, what is the impact and how do I fix it? Prerequisite: If you are handling certificate(s) for the AP(s) which is/are managed by a RUCKUS controller, make sure AP(s) is/are online on controller when you create the AP certificate request file or restoring the AP certificate resolution file. Its a 3 step procedure: Step1: Generate/download the certificate request (.req) file from your Controller/AP. Step2: Contact RUCKUS support with the certificate request file (.req) Step3: Support will provide you the certificate resolution file, which you need to upload to the controller/AP. Below are the steps to for all RUCKUS management platforms to generate the certificate replacement file, and upload the resolution file. <h1>For SmartZone managed APs:</h1> <h2>6.x and above</h2> <ol><li>Starting from 6.0 SZ web UI was changed so look and feel is different, AP Certificate Replacement page now located under Administration >> Certificates >> AP Certificate Replacement. Rest of the process is same as 3.4.x and 3.5.x. </li></ol> <img alt="User-added image" height="309" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002XxZ&feoid=00N50000002Cf3M&refid=0EMPH00000AL0tj" width="500"></img> <h2>3.4.x</h2> 1-2. Login to SZ Web UI >> Administration >> AP Certificate Replacement 3-5. Check if there are any APs with Update Pending Update failed status >> Select the AP(s) from the list of pending cert update APs >> Export the request file (.req) 6. <a href="https://support.ruckuswireless.com/cases/new" target="_blank">Open a case </a>with Support and provide the .req file, they will process it and provide you the .res file. 7-9. Click on "Import AP certificate response (.rs) file" >> Brows the .res file and hit apply. 10. You can review the cert upload status under "Certificate Status". <h2><img alt="User-added image" height="474" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002XxZ&feoid=00N50000002Cf3M&refid=0EMHt000005QKiI" width="721"></img></h2> Note: Ignore the Strikethrough text in the above screenshot, it is no longer applicable. <h2> 3.5.x, 3.6.x, 5.x and above</h2> <ol><li>Only AP Certificate replacement page location is changed, rest of the steps are same as 3.4.x.</li><li>Page is now located under System >> Certificates >> AP Certificate Replacement</li></ol> <img alt="User-added image" height="246" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002XxZ&feoid=00N50000002Cf3M&refid=0EMHt000005QKLB" width="500"></img> Note: Ignore the Strikethrough text in the above screenshot, it is no longer applicable. <h2> </h2> <h1>For ZoneDirector managed APs</h1> <h2>9.13.x</h2> <ol><li>Login to ZD Web UI and go to Configure >> Certificate >> Advanced Options >> Import RUCKUS PKI Certificate Package</li><li>To generate RUCKUS PKI certificate request, please input the valid number of APs whose certificate should be updated and click on "<a href="https://10.177.81.82/admin/conf_cert.jsp#" target="_blank">click here</a>" link. (Range: 0~100, 0 means ALL)</li><li>Step two will generate and download a '.req' file "<ZD_DEVICE_NAME>_rpki_cert_request.req".</li><li><a href="https://support.ruckuswireless.com/cases/new" target="_blank">Open a case</a> with Support with the .req file and they will provide you the .res file.</li><li>Once you get the .res file, upload it to ZD by clocking on "Choose File" button and ZD will process the file and apply the certificate to the AP(s).</li></ol> <img alt="User-added image" height="571" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002XxZ&feoid=00N50000002Cf3M&refid=0EMHt000005QKGE" width="449"></img> <h2>10.x</h2> <ol><li>Process is same as 9.13.x, only web UI look and feel is different.</li></ol> <img alt="User-added image" height="282" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002XxZ&feoid=00N50000002Cf3M&refid=0EMHt000005QKcU" width="857"></img> Note: Ignore the Strikethrough text in the above screenshot, it is no longer applicable. <h1>For standalone APs</h1> <ol><li>Login to AP web UI and go to Administration >> Management >> Certificate Verification >> Click on "Request to reissue a new certificate". This will download a request file (.req).</li><li>Contact RUCKUS support with the request file and Support will provide you the resolution(.res) file.</li><li>Now go to Maintenance >> Upgrade >> Select "Local" >> Device Certificate >> Choose the file (.res file which you have received from Support) >> Upload the certificate. </li></ol> <img alt="User-added image" height="405" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002XxZ&feoid=00N50000002Cf3M&refid=0EMHt000005QKPG" width="819"></img>

This is the master article for all RUCKUS AP device certificate replacement related procedure and resolution

2025-09-30T07:00:14-0700 2025-10-01T22:00:06-0700 https://support.ruckuswireless.com/articles/000014951 2025-09-25T03:31:21-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5874 knowledge_article_5874 2025-09-25T03:31:21-0700 000014951 Validated (External) Public Icx 7850;Icx 7550;Icx 7650;Icx 7150;Icx 7250;Icx 7450;RUCKUS ICX 7850 Campus Switches;RUCKUS ICX 7550 Campus Switches ;RUCKUS ICX 7650 Campus Switches;RUCKUS ICX 7150 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches Configuration;Firmware;Troubleshooting;Known issues and workarounds Configuration, Firmware, Troubleshooting, Known Issues and Workarounds, ICX 7850, ICX 7550, ICX 7650, ICX 7150, ICX 7250, ICX 7450 Details to observe when moving from 8095xx/9010xx switching image to 9010xx/10010xx router image. Code/Firmware Migration Process: From 8095/9010 Switch Image to 9010/10010 Router Image 1. Pre-Migration Checks (While on Switch Image) A. Identify IP Configuration on the switch: Run: “show run | include ip” (-) If output includes: ip address 10.177.95.183 255.255.255.0 ip dns server-address 8.8.8.8 ip default-gateway 10.177.95.1 ? (1 ) This would be observed in the following scenarios: <ul><li>If no management VLAN is specified and the management network connectivity is established via the management port.</li><li>If the management port is not connected but the management network connectivity is provided via a data port and no management VLAN is defined. Then the management IP address configuration would be part of the global config.</li></ul> (-) If configuration made with a management VLAN and below is part of the config: "show run | include ip” would give, ip address 10.177.95.183 255.255.255.0 “show run vlan” would include, vlan 200 name MGMT_NET by port tagged lag 1 management-vlan default-gateway 10.177.95.1 1 ? (2) This would be observed if a Management VLAN is configured and the management network connectivity is established via a data port that is a member of the Management VLAN. B. Details to note: In the case of (2) – VLAN-based Management, note the following: <ul><li>Management VLAN ID: e.g., 200</li><li>Management IP Address: e.g., 10.177.95.183/24</li><li>Default Gateway: e.g., 10.177.95.1</li></ul> In the case of (1) – IP Details Configured Globally, note the following: <ul><li>Management IP Address: e.g., 10.177.95.183/24</li><li>Default Gateway: e.g., 10.177.95.1</li></ul> These details will be required post-upgrade to configure the appropriate VLAN interface (VE) or management interface, and to set the default route, if needed. 2. Image Upload Choose either: - USB method - TFTP method After upload, verify using: show flash Sample Output: Stack unit 1: Compressed Pri Code size = 59357968, Version:08.0.95mT241 (GZS08095m.bin) Compressed Sec Code size = 64799944, Version:10.0.10gT243 (GZR10010g_cd2.bin) ... 3. Save Configuration Before upgrading, commit the config: write memory This helps preserve configuration during version translation. 4. Initiate Firmware Upgrade Run: boot system flash secondary/primary Based on the partition that the code was uploaded to. 5. Post-Upgrade Configuration A. If Global IP Configuration Was Used This applies when no Management VLAN is configured, and management network connectivity is established via the management port. In such cases, the globally configured IP address will be automatically assigned to the management port after upgrading to the router image. Under “ show run” below would be observed. ip route 0.0.0.0/0 10.177.95.1 ip dns server-address 8.8.8.8 interface management 1 ip address 10.177.95.183 255.255.255.0 B. If VLAN-Based Management Was Used This applies when a Management VLAN is configured and management network connectivity is provided via a data port that is part of the Management VLAN. In this case, the IP address details configured under the Management VLAN will be assigned to the VLAN interface (VE) of the Management VLAN after upgrading to the router image. Under “ show run” below would be observed ip route 0.0.0.0/0 10.177.95.1 ip dns server-address 8.8.8.8 interface ve 200 ip address 10.177.95.183 255.255.255.0 In the event that this behavior is not observed after the upgrade—i.e., the configuration does not reflect the expected assignment—then manual configuration of the VLAN interface (VE) may be required to restore IP connectivity. Example: (3) If there is management vlan and management network connectivity is via data port: Management vlan id : 200 Management ip address : 10.177.95.183 255.255.255.0 Management default gateway address : 10.177.95.1 Then the commands to use would be : conf t interface ve 200 ip address 10.177.95.183 255.255.255.0 exit ip route 0.0.0.0 0.0.0.0 10.177.95.1 If the management port is used as a part of management network connectivity: Management ip address : 10.177.95.183 255.255.255.0 Management default gateway address : 10.177.95.1 Then the commands to use would be : conf t interface management 1 ip address 10.177.95.183 255.255.255.0 exit ip route 0.0.0.0 0.0.0.0 10.177.95.1 If no management vlan or management port is used for management network connectivity but management network connectivity is via data port : Management ip address : 10.177.95.183 255.255.255.0 Management default gateway address : 10.177.95.1 Then the commands to use would be : conf t interface ve 1 ip address 10.177.95.183 255.255.255.0 exit ip route 0.0.0.0 0.0.0.0 10.177.95.1 Note : If no dedicated Management VLAN was used and the management interface was also not in use, then the appropriate VLAN interface to configure would be VE 1. The rest of the configuration commands would remain the same as outlined in Example (3). Notes to Follow: <ul><li>Due to the write memory step performed prior to the upgrade, all Layer 2 configurations—including VLANs, LAGs, and port tagging/untagging—should be retained and migrated automatically during the upgrade process, this should involve the configured management addresses as well. </li><li>Verify management connectivity post-upgrade and after any reconfiguration (if applicable).</li><li>If assistance is required at any stage of the process, please reach out to TAC for support.</li></ul>

The Article describes the details and key observation to take a note of when moving from 8095xx/9010xx switching image to 9010xx/10010xx router image on the ICX switches.

2025-09-25T03:31:21-0700 2025-09-25T14:00:09-0700 https://support.ruckuswireless.com/articles/000014999 2025-09-23T06:29:16-0700 monthly 0.8 admin,premium knowledge_article_5868 knowledge_article_5868 2025-09-23T06:29:16-0700 000014999 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Security;Troubleshooting Security, Troubleshooting, SmartCell Insight Which algorithm does SCI use for hashing? Is a random seed generated per SCI instance? What is used as the salt in the hashing process? Are hashes deterministic (same output across different SCI instances)? Which attributes in SCI can be hashe 1. Hashing Algorithm SCI uses the SHA-512 hashing algorithm for PII data. 2. Salt Usage The client MAC address is used as the salt in the hashing function. Formula: hash(attribute, clientMac) Examples: MAC address hashing: mac_hash = sha512(mac, mac) Hostname hashing: hostname_hash = sha512(hostname, mac) 3. Seed Clarification No random seed is generated per SCI instance. The MAC address itself serves as the salt. This ensures deterministic hashing (same inputs always produce the same outputs). 4. Consistency Across Instances Since no unique installation seed is involved, identical inputs (attribute + MAC) will yield identical hashes across different SCI instances. 5. Supported Fields for PII Hashing PII hashing can be applied to the following fields: binnedSessions: clientMac, hostname, username, clientIp binnedAvc: clientMac sessionsSummary: clientMac, hostname, username, clientIp Additional Information The hashing mechanism is predefined and cannot be customized by administrators. Deterministic hashing ensures consistency but may not provide per-installation uniqueness since no SCI-specific seed is used.

This article explains how Personally Identifiable Information (PII) hashing is implemented in SmartCell Insight (SCI). It addresses questions related to hashing algorithms, salts, seeds, and hash consistency across SCI instances.

2025-09-23T06:29:16-0700 2025-09-25T06:00:09-0700 https://support.ruckuswireless.com/articles/000006122 2025-09-22T16:06:01-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5866 knowledge_article_5866 2016-10-31T14:07:26-0700 000006122 Validated (External) Public Smartcell gateway;Ruckus support services;Smartcell insight;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) System network management;Known issues and workarounds;Support license activation System Network Management, Known Issues and Workarounds, Support License Activation, SmartCell Gateway, Ruckus Support Services, SmartCell Insight How to transfer LiMAN Licenses between the Virtual Controllers? Below are the step-wise procedure to Transfer LiMAN Licenses: 1. Login to Ruckus Support Portal, using link: <a href="https://support.ruckuswireless.com" target="_blank">https://support.ruckuswireless.com</a> 2. Click on LiMAN > Smart Devices, you will be able to see the Serial Number of Controllers in your Account. <img alt="User-added image" height="139" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WGj&feoid=00N50000002Cf3M&refid=0EMPH00000RviU1" width="500"></img> <img alt="User-added image" height="389" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WGj&feoid=00N50000002Cf3M&refid=0EMPH00000RvhBR" width="500"></img> 3. Click on the device serial number from which you wish to remove the Licenses. Click on the Remove License tab (shown as – License). <img alt="" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WGj&feoid=00N50000002Cf3M&refid=0EMPH00000QvSX7" width="500"></img> 4. Enter the quantity of Licenses that need to be removed, in the Quantity to Remove box as shown below and then click on Remove License. <img alt="" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WGj&feoid=00N50000002Cf3M&refid=0EMPH00000Qvi5Q" width="500"></img> 5. Once license are removed the status changes to "Copies Decreasing. <img alt="User-added image" height="196" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WGj&feoid=00N50000002Cf3M&refid=0EMPH00000RaRLb" width="500"></img> 6. Click on the Update device & Download license file tab, this action will download a license file. 7. Next Refresh the page, this action will move the removed licenses back in the License Pool under LiMAN. <img alt="" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WGj&feoid=00N50000002Cf3M&refid=0EMPH00000QvjEL" width="500"></img> 8. Go back to LiMAN page. 9. Click on the Controller serial number on which you need to add the Licenses. Click on Add License tab (shown as + License). <img alt="" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WGj&feoid=00N50000002Cf3M&refid=0EMPH00000Qv0L0" width="500"></img> 10. Enter the quantity of License which needs to be added, in the Quantity to Add box as shown below and then click on Add License. <img alt="" height="300" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WGj&feoid=00N50000002Cf3M&refid=0EMPH00000QvUDy" width="500"></img> 11. Click on Update device & Download license file tab and Refresh the page. Once you click on Update Device, the Licenses will be added successfully. This action also download a manual license file. <img alt="User-added image" height="338" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WGj&feoid=00N50000002Cf3M&refid=0EMPH00000RaJMa" width="500"></img> 12. Once the Licenses are added to the Controller, login to Controller UI. Click on Administration > Licenses > SYNC NOW. It is necessary to SYNC the Controller with the License server to be able to see the licenses added recently. <img alt="User-added image" height="233" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WGj&feoid=00N50000002Cf3M&refid=0EMPH000007lkuc" width="500"></img> 13. If the Controller is not connected to internet, upload the downloaded license file manually 14. To upload the file to Controller, log in to GUI > Administration > Licenses > Upload File .<img alt="User-added image" height="204" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WGj&feoid=00N50000002Cf3M&refid=0EMPH000007lZ9d" width="500"></img> Notes: The Remove/Assign LiMAN License feature is only available within the same product. Ex: SCI Licenses cannot be used on vSZ/SZ and vice-versa. When the Serial Number on a VM changes a grace period of 90 days should become active allowing time to execute the license RMA and transfer.

Article explains about transfer of LiMAN Licenses between the Virtual Controllers

2025-09-22T16:06:01-0700 2025-09-23T10:00:10-0700 https://support.ruckuswireless.com/articles/000005961 2025-09-22T16:06:56-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5376 knowledge_article_5376 2018-02-28T13:42:19-0800 000005961 Validated (External) Public Ruckus support services;Smartcell insight;Virtual smartcell gateway;Sz100;SmartCell Insight (SCI);SmartZone 100-D (SZ100-D) Website access;Website services;Support license activation;Registration Website Access, Website Services, Support License Activation, Registration, Ruckus Support Services, SmartCell Insight, virtual SmartCell Gateway, SZ100 How can a Ruckus Partner/VAR Add Licenses in LiMan on behalf of their End user Ruckus Partner/VAR/Reseller contacts can view/access their End User Accounts, i.e., Registered Assets, Licenses, Support Contracts(active and yet to be activated), Cloud Subscription, Cases etc by masquerading as the end user. All this can be accomplished at Ruckus Wireless <a href="https://support.ruckuswireless.com/" target="_blank">Support portal</a> Note: You (Partners) can masquerade as the end user, only when the PO/SO processed with Ruckus had your(Partners) account name on it. To Add Licenses in LiMan on behalf of their End user, VAR should first masquerade as the End User. Follow the below steps to masquerade as the End User: Log into Support Portal, <ul><li>Click on View Your Customers</li><li>The VAR contact should be able to view the List of End Users</li><li>Click on the End User Account Name</li><li>Click on Switch To This Account</li><li>Now the VAR/Reseller contact can Masquerade as the end user contact. (You can stop "masquerading" as the End User contact, by clicking on "Return to being yourself")</li></ul> You can also refer to below article on, "How can a VAR view their End User's account?" <a href="https://support.ruckuswireless.com/articles/000003780" target="_blank">https://support.ruckuswireless.com/articles/000003780</a> Once the VAR has Masqueraded/Switched to the End User Account, VAR can activate the Licenses, if not already active. Follow the below steps to activate the Licenses: <ul><li>Click on Activate Purchase.</li><li>Enter the Activation Code >> Validate</li><li>Accept Terms and Conditions and click on "Activate Purchase"</li><li>You will get a confirmation about license activation and these will now be available in End Users LiMan "License Pool",</li></ul> You can also refer to below article for, "Steps to activate RTU and AP Licenses on vSCG/vSZ, vSPOT, SCI" <a href="https://support.ruckuswireless.com/articles/000003780" target="_blank">https://support.ruckuswireless.com/articles/000003</a><a href="https://support.ruckuswireless.com/articles/000003436" target="_blank">436</a> Once the Licenses are activated, VAR can add the Licenses to the Controller. Follow the below steps to add the Licenses to the Controller: <ul><li>Click on LiMAN </li><li>Click on the Device Serial Number to which you wish to add the Licenses. </li><li>Click on the Add License (shown as + License) </li><li>It will take you to a page, where you see all the Licenses available in your Pool. </li><li>Under Qty to Add field, update the count >> Add Licenses </li><li>Click on Update device & Download license file and Refresh the page</li></ul> You can also refer to below article for, "Steps to Add Licenses to Virtual Controllers from Support Portal (LiMAN)" <a href="https://support.ruckuswireless.com/articles/000006071" target="_blank">https://support.ruckuswireless.com/articles/000006071</a> Once the Licenses are added to the controller in LiMAN, Licenses needs to be synced/updated on the Controller GUI. Follow the below steps to sync the Licenses on Controller GUI: <ul><li>If the Controller has access to Internet > Login to Controller GUI> Click on Administration > Licenses > SYNC NOW.</li></ul> If the Controller does not have Internet Access, Manual License File will have to be Uploaded on the Controller. Follow the below steps to Download Licenses from End User's LiMAN: <ul><li>Click on LiMAN </li><li>Click on the Device Serial Number to which you wish to download the Licenses. </li><li>Click on the Download License (shown as ? License) the License File will be download with a (.bin) extension.</li></ul> You can also refer to below article for, "Steps to Download License File for Virtual Controllers from Support Portal (LiMAN)" <a href="https://support.ruckuswireless.com/articles/000006071" target="_blank">https://support.ruckuswireless.com/articles/000012203</a> Once the License File is downloaded, Manually Uploading Licenses on the Virtual Controllers. Follow the below steps to Upload Licenses on the Controller GUI: <ul><li>Login to Controller GUI navigate to Administration > License.</li><li>Click on Upload license (browse the file from Download folder)</li><li>Click on Upload</li><li>Once the License File is successfully uploaded, you will see the updated License Count on the License page</li></ul> You can also refer to below article for, "Uploading Licenses on the Virtual Controllers" <a href="https://support.ruckuswireless.com/articles/000006071" target="_blank">https://support.ruckuswireless.com/articles/0000</a><a href="https://support.ruckuswireless.com/articles/000008262" target="_blank">08262</a>

Article has got information about VAR accessing and managing end customers LiMAN licenses

2025-09-22T16:06:56-0700 2025-09-23T10:00:09-0700 https://support.ruckuswireless.com/articles/000012202 2025-09-22T16:06:39-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5387 knowledge_article_5387 2022-04-05T13:26:29-0700 000012202 Validated (External) Public Vriot Support license activation;Registration Support License Activation, Registration, vRIoT How to Activate IoT Subscription IoT Licensing Concept : From the 2.0.0.0 release onwards, RUCKUS provides support for the Device-based licensing model instead of AP-based licensing. Types of Licenses : • Core - The Core license is a perpetual license bound to the serial number of the controller. The duration of this license is perpetual. • Instance - The Instance license is based on a subscription and maintains a tenure of 1, 3, or 5 years. Instance licenses are offered in three types: Insight, Premium, and Base. • Device Capacity - To access the connected devices, after installing a Core license, you can purchase a Device Capacity license. The Device Capacity license is based on a subscription and maintains a tenure of 1, 3, or 5 years. Each device capacity license consists of either 50 or 250 devices, so if you purchase three 250 device capacity licenses, then you will be able to add 3*250=750 devices to the RUCKUS IoT Controller. With the release of RUCKUS IoT Controller 2.2.0.0, there is a significant change in the licensing model. The updated model now follows a per-AP container-based licensing system. Types of Licenses : • Core - The Core license is a perpetual license bound to the serial number of the controller. The duration of this license is perpetual. • RCAP - RCAP license is required for each Access Point or IoT Gateway connected to the RUCKUS IoT Controller. The RCAP license is offered on a subscription basis for a tenure of 1, 3, or 5 years, which includes Watch Dog support. • Solution (Optional for Insights) - This as an option feature for users wishing to visualize and interact with IoT Sensors directly rather than through external Services/Clouds or platforms. Subscription Activation Process : Make sure you have Virtual controller serial number handy. Open the Support Purchase Acknowledgement (SPA) email you have received from Ruckus Partner/VAR/Distributor <img alt="User-added image" height="559" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WOn&feoid=00N50000002Cf3M&refid=0EM2J0000038svp" width="500"></img> Login to Ruckus Support Portal <a href="https://support.ruckuswireless.com" target="_blank">https://support.ruckuswireless.com</a> Click the Activation Code in the SPA Email Review the account details and proceed to Accept Terms and Conditions and click on "Activate Purchase <img alt="User-added image" height="331" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WOn&feoid=00N50000002Cf3M&refid=0EM2J0000038svz" width="500"></img> Takes you to the Activation Detail page (you can see the Quantity Activated and To Be Activated). Click on the Hyperlink under the Product Code <img alt="User-added image" height="199" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WOn&feoid=00N50000002Cf3M&refid=0EM2J0000038swE" width="500"></img> Subscription will be activated and available in the LiMAN Portal (License Pool) <img alt="User-added image" height="220" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WOn&feoid=00N50000002Cf3M&refid=0EM2J0000038sy5" width="500"></img> <img alt="User-added image" height="203" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WOn&feoid=00N50000002Cf3M&refid=0EM2J0000038syA" width="500"></img> Note : If there are multiple line items within one Activation Code. Each line item must be activated. Add Subscription to Serial Number: Go to LiMAN Click on the IoT SN, to which you would like to add the Subscription Click on Add (+) License <img alt="User-added image" height="292" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WOn&feoid=00N50000002Cf3M&refid=0EM2J0000038syP" width="500"></img> It takes you to the page, where you need to add the Subscription to the IoT SN. <img alt="User-added image" height="177" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WOn&feoid=00N50000002Cf3M&refid=0EM2J0000038sye" width="500"></img> Select the Subscription code from which the Subscription needs to be added Enter the number of Licenses you want to add to the controller in Qty to Add field Click on Add Licenses Click on Update device & Download license file >> Refresh the page (This action download the manual file) <img alt="User-added image" height="213" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WOn&feoid=00N50000002Cf3M&refid=0EM2J0000038syt" width="500"></img> Subscription is added. To Download License File : Go to LiMAN Click on the SN for which the file needs to be downloaded <img alt="User-added image" height="318" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WOn&feoid=00N50000002Cf3M&refid=0EM2J0000038sz3" width="500"></img> Click on the "Download License File" <img alt="User-added image" height="319" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002WOn&feoid=00N50000002Cf3M&refid=0EM2J0000038szN" width="500"></img> License File with Serial Number followed by (.bin) extension will be downloaded. Related Articles : <a href="https://support.ruckuswireless.com/articles/000003436" target="_blank">Steps to activate RTU and AP Licenses on vSCG/vSZ, vSPOT, SCI</a> <a href="https://support.ruckuswireless.com/articles/000006071" target="_blank">Steps to Add Licenses to Virtual Controllers from Support Portal (LiMAN)</a> <a href="https://support.ruckuswireless.com/articles/000012203" target="_blank">Steps to Download License File for Virtual Controllers from Support Portal (LiMAN)</a> RUCKUS IoT Controller Software Licensing Guide : <a href="https://support.ruckuswireless.com/documents/4771-ruckus-iot-2-2-1-0-mr-controller-software-licensing-guide" target="_blank" title="RUCKUS IoT 2.2.1.0 (MR) Controller Software Licensing Guide">RUCKUS IoT 2.2.1.0 (MR) Controller Software Licensing Guide</a> <a href="https://support.ruckuswireless.com/documents/4662-ruckus-iot-2-2-ga-controller-software-licensing-guide" target="_blank" title="RUCKUS IoT 2.2 (GA) Controller Software Licensing Guide">RUCKUS IoT 2.2 (GA) Controller Software Licensing Guide</a> <a href="https://support.ruckuswireless.com/documents/4632-ruckus-iot-2-1-1-0-mr-controller-software-licensing-guide" target="_blank" title="RUCKUS IoT 2.1.1.0 (MR) Controller Software Licensing Guide">RUCKUS IoT 2.1.1.0 (MR) Controller Software Licensing Guide</a> <a href="https://support.ruckuswireless.com/documents/4595-ruckus-iot-2-1-0-0-ga-controller-software-licensing-guide" target="_blank" title="RUCKUS IoT 2.1.0.0 (GA) Controller Software Licensing Guide">RUCKUS IoT 2.1.0.0 (GA) Controller Software Licensing Guide</a> <a href="https://support.ruckuswireless.com/documents/4350-ruckus-iot-2-0-1-0-mr-controller-software-licensing-guide" target="_blank" title="RUCKUS IoT 2.0.1.0 (MR) Controller Software Licensing Guide">RUCKUS IoT 2.0.1.0 (MR) Controller Software Licensing Guide</a> <a href="https://support.ruckuswireless.com/documents/4151-ruckus-iot-2-0-0-0-ga-controller-software-licensing-guide" target="_blank" title="RUCKUS IoT 2.0.0.0 (GA) Controller Software Licensing Guide">RUCKUS IoT 2.0.0.0 (GA) Controller Software Licensing Guide</a>

Subscription Activation Process for IoT version 2.x

2025-09-22T16:06:39-0700 2025-09-23T10:00:09-0700 https://support.ruckuswireless.com/articles/000011859 2025-09-22T16:06:22-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5333 knowledge_article_5333 2021-08-13T09:21:14-0700 000011859 Validated (External) Public Sz144;Sz144 d;Sz300;Sz100d;Scg200;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Support license activation;Registration Support License Activation, Registration, SZ144, SZ144 D, SZ300, SZ100D, SCG200, SZ100 How to transfer license transfer from defective SZ to replacement SZ Step#1 Register replacement SZ series in Ruckus support portal-->LiMan please refer article 000005318 ??????Resolution 1: Licenses are manually transferred from defective(leader node) to follower node using LiMan (in Ruckus Support portal) prior to processing. Once the replacement unit is received by customer, configure replacement as follower and license pooling comes into effect. <div> Article to refer for steps on how to transfer license between controller: <a href="/articles/FAQ/LiMAN-License-Transfer-on-a-vSZ-SZ-SCI-vSPoT" target="_blank">LiMAN License Transfer on a vSZ/SZ/SCI/vSPoT</a> Resolution 2: Licenses are mapped to failed (leader node) and follower node is function in SR (Smart redundancy mode), here the AP will stay connected to follower for 45 days. Customer has to contact Ruckus support to manually move licenses from faulty to replacement SZ Resolution 3: Failed (leader node) does not have AP capacity license only has active support contract, in this scenario no action is required as the support contract will automatically transfer to replacement SZ</div>

This article explains the process of license transfer from defective SZ to replacement SZ

2025-09-22T16:06:22-0700 2025-09-23T10:00:09-0700 https://support.ruckuswireless.com/articles/000006071 2025-09-22T16:07:55-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5865 knowledge_article_5865 2016-10-05T17:14:54-0700 000006071 Validated (External) Public Smartcell gateway;Ruckus support services;Smartcell insight;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) Website services;Support license activation Website Services, Support License Activation, SmartCell Gateway, Ruckus Support Services, SmartCell Insight Steps to Add Licenses to Virtual Controllers from Support Portal (LiMAN) Below are the steps to add Licenses to vSCG, vSPoT, SCI, SZ, SCG and IoT Controllers from Support Portal (LiMAN) 1. Login to the RUCKUS support portal: <a href="https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com</a> 2. Click on LiMan > Smart Devices, you will be able to see the Serial Numbers of Controllers in your Account. <img alt="User-added image" height="139" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002V69&feoid=00N50000002Cf3M&refid=0EMPH00000RveZX" width="500"></img> 3. You will be redirected to LiMAN Dashboard >> Smart Devices <img alt="User-added image" height="389" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002V69&feoid=00N50000002Cf3M&refid=0EMPH00000Rvx5d" width="500"></img> 4. Click on the Device Serial Number to which you wish to add the Licenses. Click on Add Licenses (shown as + License) <img alt="User-added image" height="289" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002V69&feoid=00N50000002Cf3M&refid=0EMPH00000Rvf7r" width="500"></img> 5. Once you click on + Licenses, you will be redirected to LiMAN Advance, here you see all the Licenses available in your Pool. 6. Select the License Code from which the licenses need to be added 7. Enter the number of Licenses you want to add to the controller in Qty to Add field 8. Click on Add License. <img alt="User-added image" height="388" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002V69&feoid=00N50000002Cf3M&refid=0EMPH00000Rvdnp" width="500"></img> 9. Click on the Update device & Download license file tab and Refresh the page. Once you click on Update Device, the Licenses will be added successfully. This action also download a manual license file <img alt="User-added image" height="338" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002V69&feoid=00N50000002Cf3M&refid=0EMPH00000Rve8V" width="500"></img> Steps to Upload Licenses on Controller GUI: Platform: vSCG/vSZ,SCG=>3.2 1. Login to Controller GUI. Click on Administration > Licenses > SYNC NOW. It is necessary to SYNC the Controller with the License server to be able to see the licenses added recently <img alt="User-added image" height="235" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002V69&feoid=00N50000002Cf3M&refid=0EMPH00000Rw5ZL" width="500"></img> 2.Once the Licenses are synced, newly added Licenses should be available on the Controller to add devices. 3. If the Controller is not connected to internet, upload the downloaded license file manually <img alt="User-added image" height="297" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002V69&feoid=00N50000002Cf3M&refid=0EMPH00000RvoxU" width="500"></img> 4. To upload the file to Controller, log in to GUI > Administration > Licenses > Upload File <img alt="User-added image" height="204" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002V69&feoid=00N50000002Cf3M&refid=0EMPH000007lZ9d" width="500"></img>

Activated AP Licenses and would like to add them on the virtual controllers from LiMAN portal

2025-09-22T16:07:55-0700 2025-09-23T10:00:08-0700 https://support.ruckuswireless.com/articles/000014935 2025-09-17T15:16:49-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5859 knowledge_article_5859 2025-07-21T13:49:36-0700 000014935 Validated (External) Public All;Brocade Mobility 6511 Wallplate Access Point Website access;Knowledge base;Support license activation;Registration Website Access, Knowledge Base, Support License Activation, Registration, All Why am I seeing the "Link Up" page on the Ruckus Support Portal, and how do I get full access to the Ruckus Support Portal? Once you successfully complete one of the "Link Up" methods described above, your Ruckus Support Portal account will be upgraded from "Guest Access" to "Premium Access" (If your account has an active Support Entitlement) or "Warranty Access" if only a product warranty was registered or active. With Premium Access, you will be able to: <ul><li> View your company's registered Ruckus products and their details. </li><li> Access and manage your company's active support contracts. </li><li> Download the latest software, firmware, and release notes for your entitled products. </li><li> Access the complete Ruckus Knowledge Base with all technical articles. </li></ul> With Warranty Access, you will be able to: <ul><li> View your registered guest account and submit a Administrative / Technical Case. </li><li> Access to limited Ruckus Knowledge Base and Software downloads </li></ul> Allow a few minutes for the system to update your account status. If you experience persistent issues after following these steps, please contact <a href="https://support.ruckuswireless.com/contact-us" target="_blank">Ruckus Support</a> (you can use your Guest Access to submit an administrative inquiry for account issues if needed).

This article guides new Ruckus Support Portal users, who are currently on Guest Access, through the process of linking their account to their company's existing assets and support contracts using the page /activation/link_up page. URL : https://support.ruckuswireless.com/activation. It explains the purpose of this page and the various methods available for achieving Premium Access.

2025-09-17T15:16:49-0700 2025-09-19T10:00:07-0700 https://support.ruckuswireless.com/articles/000014996 2025-08-22T13:18:30-0700 monthly 0.8 admin,premium knowledge_article_5845 knowledge_article_5845 2025-08-22T10:32:06-0700 000014996 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SmartCell Gateway This Article Explains the Procedure to Enable Port Profile for Wired Clients connected to Root AP and Mesh AP and enable Client Visibility so that connected wired clients may be visible on the SZ GUI. This Article Explains the Procedure to Enable Port Profile for Wired Clients connected to Root AP and Mesh AP Step 1 : <ul><li>Create a Ethernet port profile for the AP </li><li>Services > Tunnels & Ports > Ethernet Port</li></ul> <img alt="User-added image" height="271" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002PC1&feoid=00N50000002Cf3M&refid=0EMPH00000PVCC0" width="500"></img> Step 2 : Create Ethernet Port : <ol><li>Access Network : Default WAN </li><li>User Side Prot : (Should be ON )</li><li>Client Visibility Should be ON : <img alt="User-added image" height="533" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002PC1&feoid=00N50000002Cf3M&refid=0EMPH00000PVHvQ" width="500"></img></li><li>Apply this config to the Port <ol><li>Select Zone > AP Model Specific Configuration > T670 > Apply to the LAN1 Port from the drop down .</li><li><img alt="User-added image" height="459" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002PC1&feoid=00N50000002Cf3M&refid=0EMPH00000PVPdz" width="500"></img></li></ol> </li></ol> 4 . You should be able to see the connected clients under the connected wired clients and alos see the User Traffic . <img alt="User-added image" height="160" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002PC1&feoid=00N50000002Cf3M&refid=0EMPH00000PVtcy" width="500"></img>

This Article Explains the Procedure to Enable Port Profile for Wired Clients connected to Root AP and Mesh AP.

2025-08-22T13:18:30-0700 2025-08-25T02:00:06-0700 https://support.ruckuswireless.com/articles/000014409 2025-08-21T02:03:13-0700 monthly 0.8 admin,premium knowledge_article_5844 knowledge_article_5844 2024-07-30T08:13:07-0700 000014409 Validated (External) Premium Ruckus wan gateway rwg Configuration;Troubleshooting Configuration, Troubleshooting, RUCKUS WAN Gateway RWG Why don't I see room and guest information in RWG from PMS? After analyzing the RWG PMS logs, we identified an issue with the communication protocol. The customer then engaged PMS support to change it.

RWG was not showing rooms and guest information from PMS. Although RWG was correctly configured, PMS was using an invalid option. Fixing the PMS side resolved the issue.

2025-08-21T02:03:13-0700 2025-08-22T14:00:07-0700 https://support.ruckuswireless.com/articles/000014985 2025-08-21T00:27:34-0700 monthly 0.8 admin,premium knowledge_article_5843 knowledge_article_5843 2025-08-20T01:58:29-0700 000014985 Validated (External) Premium Vriot;Cloudpath;Smartcell gateway;Cloudpath Enrollment System (ES);BPG_Cloudpath;SmartCell Gateway 200 (SCG200) Security Security, vRIoT, Cloudpath, SmartCell Gateway Are Ruckus vSZ, vRIOT and CP affected by CVE-2025-54472 ? Security and Dev team confirmed CP and vSZ is NOT affected by this CVE as they doesn't use Apache bRPC. Apache bRPC might be present on both products but it is not used anyway or with redis and hence both products are safe and not vulnerable to this CVE. For vRIOT, it does not used Redis or Apache bRPC and hence no vulnerability/exploitation to CVE-2025-54472.

Unlimited memory allocation in redis protocol parser in Apache bRPC (all versions < 1.14.1) on all platforms allows attackers to crash the service via network (CVE-2025-54472) customer wanted to know if our vSZ and CP products are vulnerable

2025-08-21T00:27:34-0700 2025-08-22T14:00:06-0700 https://support.ruckuswireless.com/articles/000014979 2025-08-14T14:36:01-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5841 knowledge_article_5841 2025-08-14T14:36:01-0700 000014979 Validated (External) Public Knowledge;Ruckus icx switches;Brocade eos products;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Knowledge, Ruckus ICX Switches, Brocade EOS Products, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor n/a Indonesia SDPPI Certification - COO Requirement for Replacement Units Indonesia’s SDPPI certification rules confirms that a replacement unit does not need to be manufactured in the same Country of Origin (COO) listed on the original SDPPI certificate. The SDPPI certificate is tied to the model/type of the equipment, not to a single COO. Therefore, as long as the replacement unit: <ul style="margin-top: 0in;margin-bottom: 0in;"><li style="margin-top: 0in;margin-right: 0in;margin-bottom: 8pt;line-height: 115%;font-size: 12pt;font-family: 'trebuchet ms', geneva, sans-serif;">Is the identical model already covered by a valid SDPPI certificate, and</li><li style="margin-top: 0in;margin-right: 0in;margin-bottom: 8pt;line-height: 115%;font-size: 12pt;font-family: 'trebuchet ms', geneva, sans-serif;">Is clearly labeled with its own (possibly different) COO,</li></ul> it can be imported and used for warranty or repair purposes without re-applying for SDPPI certification or matching the original COO. For more details, you can refer to the <a target="_new" href="https://www.csagroup.org/global-certification-regulatory-update/indonesia-sdppi-new-certification-and-label-change-update/?srsltid=AfmBOopRUt4OxAH0gKlExTpW9_XUm_82Ek0h-aPhzHlcbU8iXnifsRKu">CSA Group’s update on SDPPI certification</a> (<a href="https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.csagroup.org%2Fglobal-certification-regulatory-update%2Findonesia-sdppi-new-certification-and-label-change-update%2F%3Fsrsltid%3DAfmBOopRUt4OxAH0gKlExTpW9_XUm_82Ek0h-aPhzHlcbU8iXnifsRKu&data=05%7C02%7Cpradeep.kumar3%40commscope.com%7C6abf8c24566e47dd6d3a08ddd4e8ea3b%7C31472f818fe449ec8bc3fa1c295640d7%7C0%7C0%7C638900819020456827%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=xFCV1GsCnQROgU1N7Rdtq3MHT0k%2FPhsaksOZYiE4HbU%3D&reserved=0" target="_blank">https://www.csagroup.org/global-certification-regulatory-update/indonesia-sdppi-new-certification-and-label-change-update/?srsltid=AfmBOopRUt4OxAH0gKlExTpW9_XUm_82Ek0h-aPhzHlcbU8iXnifsRKu</a>)

Indonesia-SDPPI-Certification---COO-Requirement-for-Replacement-Units

2025-08-14T14:36:01-0700 2025-08-19T02:00:06-0700 https://support.ruckuswireless.com/articles/000014962 2025-08-06T02:49:03-0700 monthly 0.8 admin,premium knowledge_article_5838 knowledge_article_5838 2025-08-06T02:49:03-0700 000014962 Validated (External) Premium Cloud services Support license activation;Registration Support License Activation, Registration, Cloud Services How can I assign and manage administrator roles and privileges in RUCKUS One, and what are the options for customizing user access?< 1. Creating a Privilege Group A Privilege Group determines the venues a role can access and can therefore enable an administrator to manage devices. By default, system-defined privilege groups are available. You can also create custom privilege groups. Steps to Create a Privilege Group: Navigation: Go to Administration > Account Management > Users & Privileges > Privilege Groups <div style="margin-bottom: 11px;margin-left: 8px;"> 1. Click Add Privilege Group <img alt="User-added image" height="109" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kgz&feoid=00N50000002Cf3M&refid=0EMPH00000Nr35l" width="500"></img> 2. A new window appears with the following fields: <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kgz&feoid=00N50000002Cf3M&refid=0EMPH00000Nr4JZ"></img> </div> <ul><li>Name: Must be unique; use underscores (_) instead of spaces. System-defined names cannot be reused.</li><li>Description: Provide a brief explanation of the group.</li><li>Role: Select from existing system-defined or custom roles.</li></ul> Note: Prime Admin role is available only for MSP customers <ul><li> Scope: <ul><li>For your own tenant: choose All Venues or Specific Venues</li><li>For MSPs: choose All Customers or Specific Customers</li></ul> </li></ul> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kgz&feoid=00N50000002Cf3M&refid=0EMPH00000Nr4LB"></img> 3. Click Add to save the new privilege group. 4. Once created, the group will appear in the Privilege Groups list. 5. A notification confirming the creation will appear in the Activities section. After group creation, you can assign users to this group. 2. Adding a New Administrator User Once the Privilege Group is created, you can assign users to it. Steps: 1. Go to Administration > Users & Privileges > Users 2. Click Add User <img alt="User-added image" height="107" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kgz&feoid=00N50000002Cf3M&refid=0EMPH00000Nr3KH" width="500"></img> 3. Enter the registered email address <img alt="User-added image" height="205" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kgz&feoid=00N50000002Cf3M&refid=0EMPH00000NlYtq" width="500"></img> 4. Select the Authentication Type (RUCKUS or SSO) 5. Choose the appropriate Privilege Group 6. Click Add User. After saving, the new user will be listed under the Users tab along with: · Name · Email Address · Assigned Privilege Group 3. Inviting a RUCKUS Partner (VAR) to Manage Your Account You can allow trusted RUCKUS Partners (VARs) to manage your account as delegated administrators. Use Case: For End Users who want their RUCKUS One environment managed by a third-party partner (VAR). Steps: 1. Login to Ruckus Cloud Portal 2. Navigate to Administration > Users & Privileges > Delegated Admins 3. Click Add Delegated Admin <img alt="User-added image" height="106" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kgz&feoid=00N50000002Cf3M&refid=0EMPH00000Nr3P7" width="500"></img> 4. Enter the email address of the authorized partner <img alt="User-added image" height="726" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kgz&feoid=00N50000002Cf3M&refid=0EMPH00000Nr0RG" width="500"></img> The partner must have a registered RUCKUS One account using the provided email. Once the invitation is accepted: · The partner will gain admin access to your RUCKUS Cloud account · You will receive a confirmation notification You can invite up to 10 partners to your account. A VAR cannot invite another VAR. MSP end customers or installers cannot send VAR invites. 4. Creating and Managing a Custom Role Custom roles give you granular control over permissions using Role-Based Access Control (RBAC) or Attribute-Based Access Control (ABAC). Navigation: Go to Administration > Account Management > Users & Privileges > Roles Steps to Create a Custom Role: 1. Click Add Role <img alt="User-added image" height="106" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kgz&feoid=00N50000002Cf3M&refid=0EMPH00000Nr3vN" width="500"></img> 2. Under the General tab: <ul><li>Enter Role Name and Description</li><li>Role name must be unique and must not match any system-defined role</li></ul> <img alt="User-added image" height="270" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kgz&feoid=00N50000002Cf3M&refid=0EMPH00000Nr41p" width="500"></img> <ul><li>Click Next</li></ul> 3. Under the Permissions tab: <ul><li>Two permission levels are available: <ul><li>Global Permissions: High-level access categories (e.g., Wi-Fi, Wired, AI, Admin)</li><li>Advanced Permissions: Fine-tune access to sub-features (e.g., manage specific venues)</li></ul> </li></ul> <ul><li>Choose access type: Read Only (default), Create, Edit, Delete</li><li>Advanced settings override global ones</li></ul> <img alt="User-added image" height="251" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kgz&feoid=00N50000002Cf3M&refid=0EMPH00000Nr4OP" width="500"></img> A hyphen (-) instead of a checkmark (?) means not all permissions are inherited; review advanced settings to resolve. 4. Click Next to view the Summary 5. Click Add to finalize role creation Managing Roles: · Edit/Delete options are available for custom roles only · System-defined roles cannot be edited or deleted · All changes are logged in the Activities section

RUCKUS One supports multiple administrator roles to help organizations delegate responsibilities securely and efficiently. Roles define access levels and permissions related to configuration, monitoring, and management tasks. You can assign roles through privilege groups and create custom roles for specific access needs. Additionally, RUCKUS partners (VARs) can be invited to manage your account within defined limitations.

2025-08-06T02:49:03-0700 2025-08-13T14:00:07-0700 https://support.ruckuswireless.com/articles/000014960 2025-07-31T02:59:25-0700 monthly 0.8 admin,premium knowledge_article_5834 knowledge_article_5834 2025-07-31T02:59:25-0700 000014960 Validated (External) Premium Cloud services Support license activation;Registration Support License Activation, Registration, Cloud Services How can RUCKUS One MSPs view, assign, and manage their own MSP subscription licenses? Overview of MSP Assigned Subscriptions RUCKUS MSPs no longer needs to purchase REC SKUs for internal use. Instead, they can: <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Purchase MSP SKUs only</li><li style="margin-bottom: 11px;">Use these for both MSP End Customers (MSP ECs) and their own MSP account</li><li style="margin-bottom: 11px;">Easily view, assign, and edit their subscription allocations in the RUCKUS One interface</li></ul> How to View and Assign MSP Subscriptions Access the Subscriptions Page <ol style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Log into RUCKUS One.</li><li style="margin-bottom: 11px;">Navigate to Subscriptions from the main menu.</li><li style="margin-bottom: 11px;">Click on the MSP Assigned Subscriptions tab.</li></ol> <div> <img alt="User-added image" height="90" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kc9&feoid=00N50000002Cf3M&refid=0EMPH00000NgZov" width="500"></img></div> Assign MSP Subscriptions <ol style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Click Assign MSP Subscriptions.</li><li style="margin-bottom: 11px;">On the Assign Subscriptions page, input the following:</li></ol> <div><img alt="User-added image" height="377" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kc9&feoid=00N50000002Cf3M&refid=0EMPH00000NgYEY" width="500"></img></div> For Paid Subscriptions: <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Assigned Device Networking: Enter the number of paid licenses to assign (up to your available limit).</li><li style="margin-bottom: 11px;">Subscription Start Date: Defaults to today’s date and is non-editable.</li><li style="margin-bottom: 11px;">Expiration Date: Choose from predefined ranges (30 days to 5 years) or set a custom date.</li></ul> For Trial Subscriptions: <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Assigned Device Networking: Enter the number of trial licenses to assign.</li><li style="margin-bottom: 11px;">Subscription Start Date: Defaults to today’s date and is non-editable.</li><li style="margin-bottom: 11px;">Expiration Date: Same options as above.</li></ul> <ol start="3" style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Click Save to apply changes.</li></ol> Subscription Utilization Details Once saved, the MSP Subscriptions page updates with the latest utilization metrics. This includes: <div><img alt="User-added image" height="139" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kc9&feoid=00N50000002Cf3M&refid=0EMPH00000NgZvN" width="500"></img></div> Paid Licenses Section <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Device Networking: Total paid licenses used</li><li style="margin-bottom: 11px;">MSP EC: Licenses assigned to end customers</li><li style="margin-bottom: 11px;">MSP Assigned: Licenses assigned to MSP’s own account</li><li style="margin-bottom: 11px;">Available: Remaining licenses</li></ul> Trial Licenses Section <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Follows the same structure as Paid Licenses, showing usage across MSP ECs and MSPs.</li></ul> Subscription Details View To view full details: <ol style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Click Manage My Account.</li><li style="margin-bottom: 11px;">Navigate to Administration > Account Management > Subscriptions.</li></ol> <div style="margin-bottom: 11px;"> </div> <div><img alt="User-added image" height="66" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kc9&feoid=00N50000002Cf3M&refid=0EMPH00000NgZwz" width="500"></img></div> <div><img alt="User-added image" height="166" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Kc9&feoid=00N50000002Cf3M&refid=0EMPH00000NgTI8" width="500"></img></div> Here, you'll find a breakdown of each subscription with the following fields: <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Subscription Utilization: Overview of used vs. available licenses</li><li style="margin-bottom: 11px;">Part Number: SKU identifier of the subscription</li><li style="margin-bottom: 11px;">License Count: Number of licenses included</li><li style="margin-bottom: 11px;">Source: Indicates whether the subscription is: <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Paid – Purchased and used directly</li><li style="margin-bottom: 11px;">Assigned – Purchased and assigned to self</li></ul> </li><li style="margin-bottom: 11px;">Starting Date and Expiration Date: Key dates of license lifecycle</li><li style="margin-bottom: 11px;">Time Left: Remaining time until expiry</li><li style="margin-bottom: 11px;">Status: Whether Active or Expired</li></ul>

RUCKUS One now allows Managed Service Providers (MSPs) to assign purchased MSP subscription licenses (SKUs) to their own MSP accounts, eliminating the need to buy separate REC SKUs for internal use. This new feature enables MSPs to flexibly allocate and manage their subscriptions across their own account and their MSP End Customers (MSP ECs).

2025-07-31T02:59:25-0700 2025-08-01T06:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA2PH000002b2Xy0AI?attachment_index=0 2025-08-01T06:00:07-0700 monthly admin,premium knowledge_article_5834 knowledge_article_5834_attachment_1 MSP Assigned Video.mp4 3237231.0 video/mp4 https://support.ruckuswireless.com/articles/000010694 2025-07-30T20:07:48-0700 monthly 0.8 admin,premium knowledge_article_5825 knowledge_article_5825 2020-07-03T10:45:20-0700 000010694 Validated (External) Premium Cloud services Knowledge base;Support license activation;Registration Knowledge Base, Support License Activation, Registration, Cloud Services How can an MSP set up and customize branding for a customer portal in the RUCKUS MSP Portal? Ensure your MSP account has active MSP licenses. Without them, portal setup will fail with the following error:"message": "No active license available. Please check the licenses." <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KVh&feoid=00N50000002Cf3M&refid=0EMPH00000Nfx3h"></img> Follow the steps below to set up the customer portal branding: 1. Log into the RUCKUS MSP account and go to Portal Settings from the navigation bar.The Portal Settings page will open. Note: For MSPs operating in multiple regions (e.g., North America, Europe), you must set up portal branding for each region separately. <img alt="User-added image" height="373" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KVh&feoid=00N50000002Cf3M&refid=0EMPH00000Nfk3G" width="500"></img> 2. On the Branding page: <ul><li> Enter a Custom Domain Name (will be in the format: <code>yourdomain.msp.ruckus.cloud</code>). </li><li> Upload a Logo (recommended size: 125x41 pixels, transparent). </li><li> You may upload up to 5 different logos for use across: <ul><li> Portal Header </li><li> Customer Login Page </li><li> Support Emails </li><li> Alarm Notification Emails </li></ul> </li></ul> Click Next to proceed. 3. On the Third-Party Portal Providers page: <ul><li>Select a portal provider from the dropdown.</li><li>Click Next.</li></ul> <img alt="User-added image" height="400" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KVh&feoid=00N50000002Cf3M&refid=0EMPH00000Nfx8X" width="500"></img> 4. On the Support Links page: <ul><li> Configure URLs for: <ul><li> Contact Support </li><li> Open a Case </li><li> My Open Cases </li></ul> </li><li> Choose to either redirect to a custom URL or remove the option from the help menu. </li></ul> Click Next. <img alt="User-added image" height="329" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KVh&feoid=00N50000002Cf3M&refid=0EMPH00000NfxEz" width="500"></img> 5. On the Contact Info page: <ul><li> Enter your Phone number, Email address, and Website URL. </li><li> These details appear in the portal footer. </li><li> Click Create to finalize the setup. <img alt="User-added image" height="457" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KVh&feoid=00N50000002Cf3M&refid=0EMPH00000Nflk8" width="500"></img> </li></ul> <h2>6. Editing an Existing Customer Portal</h2> To edit an already configured customer portal: <ol><li> Go to Portal Settings. </li><li> Update details across these sections: <ul><li> Branding: Change domain or logos. </li><li> 3rd Party Portal Providers: Select a new provider if needed. </li><li> Support Links: Modify URLs or behaviors. </li><li> Contact Info: Edit phone, email, or website. </li></ul> </li><li> Click Apply to apply your changes. <img alt="User-added image" height="533" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KVh&feoid=00N50000002Cf3M&refid=0EMPH00000NfwPP" width="500"></img> </li></ol>

This article provides step-by-step instructions for MSPs (Managed Service Providers) on how to set up and customize portal branding for their customers using the RUCKUS MSP Portal. This includes configuring a custom domain, uploading logos, selecting support links, and adding contact information. A valid MSP license is required to perform these actions.

2025-07-30T20:07:48-0700 2025-07-31T06:00:07-0700 https://support.ruckuswireless.com/articles/000001652 2025-07-30T08:40:50-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5832 knowledge_article_5832 2013-02-24T19:44:18-0800 000001652 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Ruckus support services;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Support license activation;Registration Support License Activation, Registration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, Ruckus Support Services What are the warranty terms for Ruckus products? For the definitive documentation on Ruckus Warranty Terms and Conditions for Wired and Wireless products, please see the documents at: <a href="https://support.ruckuswireless.com/programs-warranty_registration" target="_blank">https://support.ruckuswireless.com/programs-warranty_registration</a>: <ul><li>Warranty and Software License Agreement terms</li><li>Warranty FAQs</li></ul> Important notes and "general principles": 1) SmartZone physical controllers have a 1 Year Limited Hardware Warranty. 2) ZD controllers have a limited lifetime warranty. 3) Indoor Access Points have a limited lifetime warranty 4) Outdoor Access Points have a 1 Year Limited Hardware Warranty 5) Associated equipment that ships with main device (e.g., power supplies, power injectors, antennas, and other accessories), have a 1-year warranties. 6) ICX switches have a limited lifetime warranty. The ICX warranty also entitles customers to software downloads. However, the ICX7150 C08PT (Extended Temp) models only have a 13 month warranty. 7) Removable Optics shipped from RUCKUS prior to June 1, 2021 and LEDs have a 13-month warranty, measured from the date when the products are shipped from RUCKUS. Removable optics shipped on or after June 1, 2021 will have a 60-month warranty measured from the date when the products are shipped from RUCKUS. Third-party optics are not covered at all under either warranty or support contracts. 8) Warranty only applies to the original owner of the product, and doesn't cover environmental damage, misuse, and a variety of other exclusions that are explicitly mentioned in the document referenced above. 6) Equipment in NFR Kits purchased from Ruckus are only eligible for a 1 year warranty. As of July 1st, 2013, NFR Kits must be purchased with mandatory 1, 3 or 5 year WatchDog support on the ZoneDirector in the bundle. 7) CBRS/LTE products have a one-year hardware warranty and a 90-day software warranty. <div id="cke_pastebin" style="width: 1px;height: 1px;"> </div>

This article outlines warranty terms for Ruckus Products.

2025-07-30T08:40:50-0700 2025-07-30T22:00:07-0700 https://support.ruckuswireless.com/articles/000014958 2025-07-30T01:57:08-0700 monthly 0.8 admin,premium knowledge_article_5830 knowledge_article_5830 2025-07-30T01:57:08-0700 000014958 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Troubleshooting Troubleshooting, SmartCell Insight Are SmartCell Insight v5.5.6 installations affected by the RC4 or SWEET32 vulnerabilities? SCI v5.5.6 is not affected by either CVE?2015?2808 or CVE?2016?2183. <ul><li> RC4 (CVE?2015?2808): - SCI?v5.5.6 does not advertise or allow any RC4-based cipher suites (e.g. TLS_RSA_WITH_RC4_128_SHA). - Only modern cipher suites (AES, Camellia, ARIA, CCM/GCM) are supported. </li><li> SWEET32 (CVE?2016?2183): - SCI’s TLS configuration is free of any 64-bit block cipher suites such as 3DES (Triple DES) or DES-CBC3, which are the core vectors exploited by the SWEET32 vulnerability. - All supported cipher suites are based on AES, ARIA, or Camellia, which utilize 128- or 256-bit block encryption and are not susceptible to SWEET32 attacks. - There is no evidence of 64-bit cipher use such as TLS_RSA_WITH_3DES_EDE_CBC_SHA or any cipher suites with Enc=3DES in the scan results. nmap Scan Output for SCI TLS Ciphers: <img alt="nmap scan output from SCI" height="380" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KPF&feoid=00N50000002Cf3M&refid=0EMPH00000NarOj" width="500"></img> </li></ul>

Two widely known cryptographic vulnerabilities - RC4 (CVE-2015-2808) and SWEET32 (CVE-2016-2183) - have raised significant concern for legacy systems. This article assesses the impact of these vulnerabilities on Ruckus SmartCell Insight (SCI) on the latest 5.5.6 version

2025-07-30T01:57:08-0700 2025-07-30T10:00:07-0700 https://support.ruckuswireless.com/articles/000014952 2025-07-27T23:55:48-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5828 knowledge_article_5828 2025-07-27T23:55:48-0700 000014952 Validated (External) Public Icx 7550;Sz144;Sz300;Icx 7650;Icx 7150;Icx 7250;Icx 7450;Sz100d;Virtual smartcell gateway;Sz100;Icx 8200;RUCKUS ICX 7550 Campus Switches ;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;RUCKUS ICX 7650 Campus Switches;RUCKUS ICX 7150 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;SmartZone 100-D (SZ100-D);RUCKUS ICX 8200 Campus Switches Configuration;Installation Configuration, Installation, ICX 7550, SZ144, SZ300, ICX 7650, ICX 7150, ICX 7250, ICX 7450, SZ100D, virtual SmartCell Gateway, SZ100, ICX 8200 How to enable Flex-Auth on the ICX switches via the SZ On the SZ, once the switch and / or switch stack is on-boarded and placed in a appropriate group. Step 1: For Flex-Auth, the AAA servers and authentication services must be defined in the configuration. This configuration needs to be applied at the Group Level. To configure this: <ol style="unicode-bidi: embed;font-family: Calibri;font-size: 11.0pt;font-weight: normal;font-style: normal;"><li style="vertical-align: middle;">Navigate to: Network ? Wired</li><li style="vertical-align: middle;">Select the Group where the switches are placed</li><li style="vertical-align: middle;">Go to Configuration ? Common Config</li><li style="vertical-align: middle;">Click on Configure</li></ol> From here, you can define the required AAA servers and services under the Flex-Auth settings. <img alt="User-added image" height="208" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMjqs" width="500"></img> Step 2: Define the RADIUS Servers and AAA Services (Optional) These settings are Group Specific and will be applied uniformly to all switches within the selected group. <img alt="User-added image" height="244" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMki5" width="500"></img> <img alt="User-added image" height="475" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMkjh" width="500"></img> <img alt="User-added image" height="504" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMkbe" width="500"></img> Followed by [OK] and then [Close], this will have the config applied to the switch(s) that are part of the group. Note (2): The RADIUS server settings are applied under the default profile, which means that all AAA functions, including Flex-Auth (802.1X and MAC authentication), will utilize this configured service. <img alt="User-added image" height="188" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMklJ" width="500"></img> Note (3): If the switch has already been onboarded with RADIUS server definitions and Authentication service definitions—i.e., features such as dot1x, mac-auth, auth-default, guest, restricted, and critical VLANs are enabled—then skip Step 1 and Step 2. Begin directly from Step 3, and use the Feature Configuration section [ Step 3 (1) and (2) ] to verify synchronization between the switch and the SmartZone (SZ) configuration. While following this workflow, the following may be observed when enabling services via the SZ UI: <img alt="User-added image" height="253" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMkmv" width="500"></img> This refers to an informational pop-up that appears, indicating: If RADIUS server definitions and Authentication service settings (dot1x, mac-auth, auth-default, guest, restricted, and critical VLANs) have not been configured, ensure these are properly set up for the applied settings to function as expected. Step 3: To enable Flex Auth on the switch(es), configuration can be applied per port as needed or by selecting a set of ports. The settings described here are switch-specific and apply only to the switch where the configuration is done. 1. Select the Switch: Network >> Wired >> Select the Group >> Select the switch <img alt="User-added image" height="213" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMkoX" width="500"></img> 2. Navigate to Flex Auth Configuration: Configure >> AAA Feature >> Feature Configuration >> Flex_auth config Here, define the following: <ul style="unicode-bidi: embed;"><li style="vertical-align: middle;">Auth_Default_VLAN</li><li style="vertical-align: middle;">Guest_VLAN</li></ul> <img alt="User-added image" height="236" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMkq9" width="500"></img> <img alt="User-added image" height="199" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMkrl" width="500"></img> Port-Specific Configuration Per-Port Settings: Define the following per port, based on the end-user device type connected: <ul style="unicode-bidi: embed;"><li style="vertical-align: middle;">Restricted_VLAN</li><li style="vertical-align: middle;">Critical_VLAN</li></ul> <img alt="User-added image" height="250" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMjJ0" width="500"></img> <img alt="User-added image" height="497" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMktN" width="500"></img> <img alt="User-added image" height="507" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMkuz" width="500"></img> Multiple Port Configuration When configuring multiple ports, ensure to select the 'Override' option. This is essential: <ul style="unicode-bidi: embed;"><li style="vertical-align: middle;">If any of the selected ports have existing configurations.</li><li style="vertical-align: middle;">Even if ports are in default/factory state, override is needed when enabling the service across multiple ports.</li></ul> <img alt="User-added image" height="354" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMkwb" width="500"></img> <img alt="User-added image" height="500" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMkyD" width="500"></img> <img alt="User-added image" height="500" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002KAj&feoid=00N50000002Cf3M&refid=0EMPH00000NMkzp" width="500"></img> Note (4): During the setup process, the option to define the auth_default_vlan appears in multiple locations. Ensure that the same VLAN ID is consistently configured across all instances to avoid misconfiguration or unexpected behavior.

The article describes the procedure to configure and enable Flex-auth [ 802.1x and mac-auth ] on the ICX switches that are on-boarded on the SZ for monitoring and management.

2025-07-27T23:55:48-0700 2025-07-29T02:00:07-0700 https://support.ruckuswireless.com/articles/000014866 2025-07-25T13:36:19-0700 monthly 0.8 admin,premium knowledge_article_5827 knowledge_article_5827 2025-07-25T13:35:05-0700 000014866 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches How do I upgrade the software on an ICX8200 switch? What are the available firmware upgrade methods for ICX8200? How long does PoE take to rest - Always confirm what's on the partition using show flash - Verify the version with show version - Use "copy flash flash" after validating the upgrade, to match both partitions - Check release notes for compatibility details - Expect PoE delay after firmware upgrades; it's automatic, no action needed.

This article explains how to upgrade the firmware of RUCKUS ICX8200 switches using various supported methods: Web GUI (HTTPS), TFTP, SCP, or Disk0. While the steps may apply to older ICX platforms (e.g., ICX7150, ICX7650), the focus here is specifically on ICX8200. If a PoE firmware upgrade is included, please note that PoE may take additional time to return after reboot. This is automatic, but important to consider in planning maintenance windows.

2025-07-25T13:36:19-0700 2025-07-28T02:00:07-0700 https://support.ruckuswireless.com/articles/000014949 2025-07-25T05:22:08-0700 monthly 0.8 admin,premium knowledge_article_5826 knowledge_article_5826 2025-07-25T05:22:08-0700 000014949 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Firmware;Known issues and workarounds Performance, Firmware, Known Issues and Workarounds, SmartCell Gateway Why is UNII3 band marked as DFS though it is not for Ukraine country code ? Engineering team has provided fix as an AP patch for 11ax AP models UNII-3 band to non-dfs for Ukraine country over AP image 6.1.2.0.2241. Please reach out to Ruckus support for accessing this image. rkscli: get version Ruckus R350 Multimedia Hotzone Wireless AP Version: 6.1.2.0.2241 rkscli: get countrycode Country is UA rkscli: get channelavailability wifi1 Ch Seg2 CWmode DFS-CAC-status Availability ------------------------------------------------------------- 149 0 20M NON_DFS AVBLE 153 0 20M NON_DFS AVBLE 157 0 20M NON_DFS AVBLE 161 0 20M NON_DFS AVBLE 165 0 20M NON_DFS BLOCK

Customer was seeing DFS events for UNII3 band on Ukraine country code though the UNII3 is non dfs for the country

2025-07-25T05:22:08-0700 2025-07-25T14:00:07-0700 https://support.ruckuswireless.com/articles/000006144 2025-07-23T07:51:06-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5824 knowledge_article_5824 2016-11-09T09:06:04-0800 000006144 Validated (External) Public Ruckus cloud wifi;Ruckus support services Configuration;Installation;Support license activation;Registration Configuration, Installation, Support License Activation, Registration, Ruckus Cloud WiFi, Ruckus Support Services What happens when my Ruckus Cloud Wi-Fi AP license expires? When a trial subscription is expired there will be no grace period. An alarm will be raised 30 days prior to trial license expiration, also the admin will get a notification on a weekly basis until the occurrence of the expiration. Once expired, all the APs of the tenant will be soft deleted and and factory reset, so it will not advertise any WLANs and will not be able to be provisioned from the portal using the expired trial account. If the account is running on a paid subscription, the grace period of 60 days is provided after the license expiry (global parameter is set to 60 days as default). Like the trial account, an alarm is raised here as well, 30 days prior to the expiration. The admin will get a notification on a weekly basis until the occurrence of the license expiration. After 30-days of expiry (grace period has ended), it does NOT allow dashboard access and all APs will continue to advertise WLANs. However, guest WLAN, DPSK functions will NOT be available, and will not be able to be provisioned from the portal using this expired account.

Description of events when a Ruckus Cloud Wi-Fi license expires

2025-07-23T07:51:06-0700 2025-07-25T06:00:07-0700 https://support.ruckuswireless.com/articles/000014934 2025-07-22T23:35:20-0700 monthly 0.8 admin,premium knowledge_article_5823 knowledge_article_5823 2025-07-22T23:35:20-0700 000014934 Validated (External) Premium Sz144;Sz300;Ruckus icx switches;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SZ144, SZ300, Ruckus ICX Switches, virtual SmartCell Gateway, SZ100 How to set up custom event monitoring for ICX Switches Due to the limitation that specific links cannot be highlighted and marked for monitoring on the SZ currently. The Current solution shared is a workaround where, when critical links such as uplink lags and/or critical events that are categorized otherwise can be monitored and alters generated based on the event. Feature request has been raised based on the requirement of the said feature.

The article describes the procedure for defining switch custom alerts for when the switches are monitored and managed by SZ/vSZ for specific events.

2025-07-22T23:35:20-0700 2025-07-23T10:00:07-0700 https://support.ruckuswireless.com/articles/000004058 2025-07-21T20:05:35-0700 monthly 0.8 admin,premium knowledge_article_5075 knowledge_article_5075 2015-02-17T13:50:09-0800 000004058 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;Troubleshooting Installation, Troubleshooting, SmartCell Gateway vSCG: How to load an engineering patch/upgrade ( .ksp) script to SCG / vSCG / SZ Patch Scripts: to change something internal to the SCG / vSCG / SZ firmware (.jar files,etc), can be executed from WebUI Scripts: Executed to change settings on AP or SCG / vSCG / SZ and are run from CLI. -- The KSP file that has been released to you is to address the issue as mentioned in your case. Please contact Ruckus Wireless Customer Support if you have any questions at <a href="https://support.ruckuswireless.com/cases/new" style="color: rgb(1, 91, 167);" target="_blank">https://support.ruckuswireless.com/cases/new</a> Notes: <ul style="font-size: 12.22px;background-color: rgb(248, 248, 248);"><li>The attached KSP file is applicable to your specific SCG release </li><li>You will need to upload the file and follow the procedure outlined below for each node in the cluster.</li><li>After executing the script, if you upgrade the SCG to a different release which has the fix not included then contact your Ruckus Support Engineer for more information.</li><li>To avoid confusion in the future, remove the script after executing it from the CLI. Once the script is executed, it does not need to remain on the node.</li></ul> For each node of the SCG cluster, perform the following steps: Step 1: Upload the script to the SCG node from GUI: <ol style="font-size: 12.22px;background-color: rgb(248, 248, 248);"><li>Administration -> Diagnostics</li><li>Click on the diagnostic scripts tab from the left-hand menu</li><li>Click the Browse button under Upload Diagnostic Script to SCG, select the KSP file attached, and upload it.</li></ol> Upon successful upload, the script ("script name ") will be visible in the section below the "upload" section. Step 2: Execute the script on the SCG node's CLI: Connect to the SCG CLI and enter the "Enable" mode SCG-1> en Password: *************** SCG-1# Enter the "Debug" and "Diagnostic" modes SCG-1# debug SCG-1(debug)# diagnostic SCG-1(debug-diagnostic)# Execute the script <pre style="background-color: rgb(248, 248, 248);"> SCG-2-C(debug-diagnostic)# show diagnostic-script No. Name Description ----- ------------------- ----------------------------- 1 "script_name" "description of patch" SCG-2-C(debug-diagnostic)# execute script_name patch description of patch KSP: "script_name" applied</pre> Exit from each level of CLI mode by executing the "exit" command. You can delete the uploaded script after the execution on the node, and you will need to follow the same procedure on each node of the cluster. -- On 3.4.2 or earlier firmware version, refer below steps/screenshots. Step-1: Go to vSCG/SZ/vSZ WEB UI go to Administration->Diagnostics->Diagnostics/Patch Scripts to choose and upload the .ksp script file <img alt="User-added image" height="247" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ild&feoid=00N50000002Cf3M&refid=0EM50000000LejI" width="500"></img> Step-2: After uploading the script, click the "CHECK" mark icon to run the script <img alt="User-added image" height="247" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ild&feoid=00N50000002Cf3M&refid=0EM50000000LejN" width="500"></img> Step-3: A message "ran successfully" shows that the script has been successfully incorporated. <img alt="User-added image" height="259" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ild&feoid=00N50000002Cf3M&refid=0EM50000000LejS" width="500"></img> On 3.5.1 or above firmware, refer below steps/screenshots. Step-1: Go to vSCG/SZ/vSZ WEB UI >> Diagnostics (1) >> Scripts (2) >> Patch/Diagnostics Scripts (3) >> Brows and select KSP file (4) >> Upload (5) <img alt="Upload KSP" height="303" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ild&feoid=00N50000002Cf3M&refid=0EM2J000000m1ty" width="500"></img> Step-2: Now on same page as step-1, Select System Uploaded patch script from list (6) >> Click on Apply patch (7) >> When you get prompt "Are you sure to apply this patch?", select Yes. <img alt="Apply KSP" height="336" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ild&feoid=00N50000002Cf3M&refid=0EM2J000000m1u3" width="500"></img> From vSZ firmware version 6.0.x and above: <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ild&feoid=00N50000002Cf3M&refid=0EMHt000006dle0"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ild&feoid=00N50000002Cf3M&refid=0EMHt000006dle5"></img> Please keep in mind that certain scripts requires you to restart services manually for the script to get applied Verification: <img alt="User-added image" height="136" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ild&feoid=00N50000002Cf3M&refid=0EMPH00000Mu6UI" width="500"></img> - Patch will show "Applies on" date and time Apply the KSP from the vSZ CLI access (SSH):- Command: "apply <KSP_File_Name>" <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ild&feoid=00N50000002Cf3M&refid=0EMHt000006dleA"></img> If installation finishes asking you to restart services, please use command "service restart" when possible Verification: <pre class="ckeditor_codeblock"> enable patches show applied-patches</pre> <img alt="User-added image" height="200" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ild&feoid=00N50000002Cf3M&refid=0EMPH00000Mtl3Q" width="500"></img>

These are steps to install a provided .KSP patch/upgrade script to SCG / vSCG / SZ

2025-07-21T20:05:35-0700 2025-07-22T10:00:07-0700 https://support.ruckuswireless.com/articles/000002797 2025-07-21T20:09:43-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5821 knowledge_article_5821 2014-03-19T08:38:09-0700 000002797 Validated (External) Public Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway Why MAP won't connect to a RAP? If the above steps have already been followed and if the MAP is still not connecting to the RAP, here is one thing to check. Some countries allow more channels in indoor environment compared to an outdoor environment. If the indoor AP is using an exclusive channel for indoor usage, the outdoor AP won't be able to mesh. So, avoid meshing of outdoor APs with indoor APs. Just to give an example, US allows channels 36, 40, 44, 48, 149, 153, 157, and 161 for indoor usage. Whereas for the outdoor usage, it only allows channels 149, 153, 157, and 161.

This article talks about possible reasons for mesh AP's connection failure to a root AP.

2025-07-21T20:09:43-0700 2025-07-22T10:00:06-0700 https://support.ruckuswireless.com/articles/000014940 2025-07-21T02:43:21-0700 monthly 0.8 admin,premium knowledge_article_5818 knowledge_article_5818 2025-07-21T02:43:21-0700 000014940 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;Installation;Known issues and workarounds Performance, Configuration, Installation, Known Issues and Workarounds, SmartCell Gateway Why is my v/SZ unable to take cluster or config backup ? We did a vSZ system benchmark test (000009388) and confirmed that both CPU and IO were failing to pass on customer VM. For optimal performance, vSZ VMs are required to adhere to sufficient CPU and I/O standards. Failure in meeting CPU and I/O requirements may lead to suboptimal vSZ performance, including network latency, packet loss, vSZ standard process or service downtime during peak usage periods etc (unexpected problems for running vSZ nodes). vSZ-H(debug)# debug-tools [Change to system] Welcome to Debug CLI Framework! (debug tool-set) system $ system-performance Setup running... 1.) System Performance Qualification(CPU/IO) 2.) CPU benchmark 3.) IO benchmark Select Option (1-3): 1 Checking system capability, please wait this might take a while... CPU Qualification: Not passed - Events per second: 40.20s (Need > 180s) IO Qualification(Multiple Files): Not Passed - File Creation: 14.48 MiB/s (Need > 25 MiB/s) [Execution Done!] Customer had issue on there VM infrastructure and once they fixed it both the CPU/IO qualification was passed and we could successfully take the cluster and config backup. vSZ-H(debug)# debug-tools [Change to system] Welcome to Debug CLI Framework! (debug tool-set) system $ system-performance Setup running... 1.) System Performance Qualification(CPU/IO) 2.) CPU benchmark 3.) IO benchmark Select Option (1-3): 1 Checking system capability, please wait this might take a while... CPU Qualification: Passed - Events per second: 240.20s (Need > 180s) IO Qualification(Multiple Files): Passed - File Creation: 84.48 MiB/s (Need > 25 MiB/s) [Execution Done!]

Customer has been trying to initiate new cluster and config backup but both fails.

2025-07-21T02:43:21-0700 2025-07-21T10:00:05-0700 https://support.ruckuswireless.com/articles/000014938 2025-07-18T11:31:18-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5817 knowledge_article_5817 2025-07-18T11:29:26-0700 000014938 Validated (External) Public Ruckus icx switches;Brocade eos products;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How RUCKUS Handles Replacements and Country of Origin (COO) Requests? At RUCKUS, our goal is to ensure minimal disruption to your operations by providing timely, like-for-like replacements as part of our standard RMA process. <ul><li style="margin-bottom: 11px;">RUCKUS ships like-for-like replacement units whenever possible.</li><li style="margin-bottom: 11px;">If the exact product is unavailable - <ul><li style="margin-bottom: 11px;">Wireless – We will provide the closest equivalent part, as recommended by our Product Line Management (PLM) team.</li><li style="margin-bottom: 11px;">Wired – The support team will coordinate with the Planning team to determine the best course of action. This may involve initiating a stock transfer or fulfilling the replacement from production inventory, depending on availability.</li></ul> </li><li style="margin-left: 8px;">Replacements are shipped based on inventory availability and may be fulfilled from any of our global distribution centers.</li></ul> How RUCKUS Handles Country of Origin (COO) Preferences? We understand that certain countries or organizations may have regulatory or internal requirements related to the Country of Origin (COO) of imported goods. However, please note: <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">RUCKUS does not guarantee replacement shipments from a specific COO.</li><li style="margin-bottom: 11px;">RUCKUS do not maintain inventory based on COO, and shipments are fulfilled based on product availability at the time of processing.</li><li style="margin-bottom: 11px;">Customers are responsible for ensuring they hold the necessary certifications to clear the replacement through customs, regardless of COO.</li></ul> <h2 style="margin-top: 11px;margin-bottom: 5px;">What If Your Country Requires a Specific COO?</h2> If your local customs authority requires the product to be from a specific COO, we recommend reviewing the relevant country’s import regulations using the official U.S. Department of Commerce trade portal: <a href="https://www.trade.gov/country-commercial-guides" style="color: #467886;text-decoration: underline;" target="_blank">https://www.trade.gov/country-commercial-guides</a> This site provides: <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Country-specific import regulations</li><li style="margin-bottom: 11px;">Certification or documentation requirements</li><li style="margin-bottom: 11px;">Guidelines on handling COO-specific shipments</li></ul>

How RUCKUS Handles Replacements and Country of Origin (COO) Requests?

2025-07-18T11:31:18-0700 2025-07-21T06:00:06-0700 https://support.ruckuswireless.com/articles/000014931 2025-07-17T05:37:12-0700 monthly 0.8 admin,premium knowledge_article_5814 knowledge_article_5814 2025-07-17T05:35:40-0700 000014931 Validated (External) Premium Vriot Firmware;Installation;Troubleshooting;Known issues and workarounds Firmware, Installation, Troubleshooting, Known Issues and Workarounds, vRIoT Dormakaba MT series locks supportability and its version compatibility for Ruckus IoT integration. As per 2.3.1 release notes, below are the supported locks and its version. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002H3B&feoid=00N50000002Cf3M&refid=0EMPH00000MeglS"></img> We have observed that the customer is using MT series Dormakaba locks with the following versions: <ul><li> Lock Firmware Version: 610-3-24.4 </li><li> Bootloader Version: 09-06-24.4 </li><li> Support Version: 06:09-06-24.4 </li></ul> Although the lock firmware version appears to be valid, compatibility with Ruckus IoT integration depends on the type of ZigBee board installed (Gen1 or Gen2). The ZigBee board must match the lock model to ensure proper functionality. <ul><li> MT locks with ZigBee Gen1 boards are not compatible with the Ruckus IoT controller. </li><li> Compatible configurations include: <ul><li> Quantum locks with ZigBee Gen2 boards </li><li> RT+, MT4, and MT6 locks when equipped with ZigBee Gen2 boards </li></ul> </li></ul> Dormakaba recommends the following firmware versions for optimal compatibility: <ul><li> MT4: 06.28.24.4 </li><li> MT6: 06.06.25.4 </li><li> RT+: 02-23-22.4 (with Ember Rev 5.6 build E7) </li></ul>

Article talks about MT Series IoT locks and its support on RUCKUS-Dormakaba integration with RUCKUS IoT/vRoIT solution.

2025-07-17T05:37:12-0700 2025-07-18T14:00:07-0700 https://support.ruckuswireless.com/articles/000014918 2025-07-15T01:40:29-0700 monthly 0.8 admin,premium knowledge_article_5809 knowledge_article_5809 2025-07-15T01:40:29-0700 000014918 Validated (External) Premium Sz144;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ144, virtual SmartCell Gateway, SZ100 How to configure vSZ Admin/management users to use AD server authentication? <h3>Step 1: Create Role/Group</h3> <ul><li>Log in to the vSZ-H.</li><li>Navigate to: Administration ? Admins and Roles ? Groups ? Create.</li></ul> <img alt="User-added image" height="161" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MMYT0" width="500"></img> <h3>Step 2: Define Group/Role and Assign Permissions</h3> <ul><li>Create a group or role and assign the necessary permissions.</li></ul> <img alt="User-added image" height="263" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MMpSD" width="500"></img> <h3>Step 3: Add Resources</h3> <ul><li>Add the required resources to the group.</li></ul> <img alt="User-added image" height="353" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MMkHG" width="500"></img> <h3>Step 4: Add the Domain</h3> <ul><li>Configure the domain settings.</li></ul> <img alt="User-added image" height="353" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MMhhd" width="500"></img> <h3>Step 5: Add/Create Users</h3> <ul><li>Create or add users to the group.</li></ul> <img alt="User-added image" height="370" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MMpvF" width="500"></img> <img alt="User-added image" height="258" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MMpyT" width="500"></img> <img alt="User-added image" height="366" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MMiiV" width="500"></img> <img alt="User-added image" height="357" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MPxrR" width="500"></img> <h3>Step 6: Create AAA Server</h3> <ul><li>Log in to the vSZ GUI.</li><li>Navigate to: Administration ? Admins and Roles ? AAA ? Create.</li><li>Enter the server details including IP address and Windows domain name, then click OK.</li><li>Select the previously created user group (e.g., Ruckus-WSG-User) and set the administrator role to user1.</li><li>Ensure the Realm matches the user account domain in AD.</li></ul> <img alt="User-added image" height="495" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MPsa2" width="500"></img> <h3>Step 7: Configure AD Server</h3> <img alt="User-added image" height="111" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MQ1AI" width="500"></img> <h3>Step 8: Create User Group and User in AD</h3> <h4>a. Create a Group</h4> <ul><li>Right-click Users ? New ? Group.</li><li>Name the group appropriately (e.g., Ruckus-WSG-User).</li></ul> <img alt="User-added image" height="417" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MPvck" width="500"></img> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MQ2sj"></img> <h4>b. Create a User</h4> <ul><li>Right-click Users ? New ? User.</li></ul> <img alt="User-added image" height="410" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MQ3s1" width="500"></img> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MPvWJ"></img> <h4>c. Add User to Group</h4> <ul><li>Double-click the group (Ruckus-WSG-User), go to the Members tab, and click Add.</li><li>Enter the user name, click Check Names, and then click OK.</li></ul> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MQ4hd"></img> <ul><li>Now type initials of your user under "Enter the object names to select" and click on "check names"</li><li>Once, the user is populated click "ok" to proceed:</li></ul> <img alt="User-added image" height="303" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MPpU6" width="500"></img> <h3>Step 9: Test AAA Connection on vSZ</h3> <img alt="User-added image" height="424" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002Ey9&feoid=00N50000002Cf3M&refid=0EMPH00000MQ5dh" width="500"></img>

The article describes SZ management user configuration for authentication using a AD server

2025-07-15T01:40:29-0700 2025-07-15T22:00:06-0700 https://support.ruckuswireless.com/articles/000014924 2025-07-12T22:07:12-0700 monthly 0.8 admin,premium knowledge_article_5808 knowledge_article_5808 2025-07-12T22:07:12-0700 000014924 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;System network management Configuration, System Network Management, Cloudpath How to create DPSK on Cloudpath via API 1. Generate Authorization Token: The Cloudpath REST APIs use Json Web Tokens (JWT) to secure all endpoints. The user calls "..../admin/publicApi/token", with a user name and password, and, if authenticated a JWT token is returned to the user in the authentication response body. NOTE: You must include an active JWT token in the "Auhtorization" HTTP request header of all subsequent requests. The token has a five-minute timeout and can be refreshed by requesting a new token while the current token is still valid. In addition, the "..../ admin/publicApi/token" endpoint provides basic information about the token's expiration. Request Header should contain Content-type: application/json Example from Postman: <img alt="User-added image" height="292" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002FCf&feoid=00N50000002Cf3M&refid=0EMPH00000MRQUo" width="500"></img> 2. Obtain information about a DPSK pool that has already been created in the Cloudpath UI Request Header should have Active token in Authorization along with the Content-type as below. Request Body - Not required <img alt="User-added image" height="307" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002FCf&feoid=00N50000002Cf3M&refid=0EMPH00000MRRsH" width="500"></img> 3. Create DPSK in the existing DPSK Pool "DPSK-Visitors" <img alt="Create-DPSK" height="340" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002FCf&feoid=00N50000002Cf3M&refid=0EMPH00000MRStB" width="500"></img> Verify if DPSK is created on Cloudpath: <img alt="User-added image" height="203" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002FCf&feoid=00N50000002Cf3M&refid=0EMPH00000MRT4T" width="500"></img>

How to create DPSK on Cloudpath via API using Postman tool as an example

2025-07-12T22:07:12-0700 2025-07-15T02:00:07-0700 https://support.ruckuswireless.com/articles/000014776 2025-07-10T06:37:03-0700 monthly 0.8 admin,premium knowledge_article_5806 knowledge_article_5806 2025-07-10T06:30:46-0700 000014776 Validated (External) Premium Ruckus icx switches Performance;Configuration;Troubleshooting;Known issues and workarounds Performance, Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches What specific behavior or issue are you observing within the stack? <h1 style="margin-top: 24px;margin-bottom: 5px;">How to troubleshoot Stacking issues on Ruckus ICX Switches</h1> Overview: Stacking enables multiple Ruckus ICX switches to function as a single logical unit, simplifying management and enhancing scalability and redundancy. The active controller manages the entire stack through a single IP address, and additional units can be added seamlessly. This guide outlines essential commands and steps for diagnosing and resolving common stacking issues. <div align="center" style="text-align: center;margin-bottom: 11px;"> </div> Basic Troubleshooting Commands Use the following commands to assess stack health and identify potential issues: <table class="Table"><thead><tr><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">Command</td><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">Purpose</td></tr></thead><tbody><tr><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">#show stack</td><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">View overall stack topology and member status</td></tr><tr><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">#show stack connection</td><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">Check physical stack connections</td></tr><tr><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">#show statistics ethernet X/X/X </td><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">Look for CRC, input/output errors on stack ports</td></tr><tr><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">#clear statistics ethernet X/X/X</td><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">Reset port stats and monitor for recurring errors</td></tr><tr><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">#show chassis</td><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">Verify power and environmental status</td></tr><tr><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">#show module</td><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">Display module information</td></tr><tr><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">#show cpu</td><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">Monitor CPU usage</td></tr><tr><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">#show memory</td><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">Monitor memory usage</td></tr><tr><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">#show logging</td><td colspan="1" rowspan="1" style="padding: .100px .100px .100px .100px;">Review system logs for error messages</td></tr></tbody></table> <div align="center" style="text-align: center;margin-bottom: 11px;"> </div> #show stack Ring topology <img alt="User-added image" height="234" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002F1N&feoid=00N50000002Cf3M&refid=0EMPH00000MGpjT" width="500"></img> Linear topology <img alt="User-added image" height="212" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002F1N&feoid=00N50000002Cf3M&refid=0EMPH00000MH1z7" width="500"></img> #show stack connection <img alt="User-added image" height="237" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002F1N&feoid=00N50000002Cf3M&refid=0EMPH00000MGyuo" width="500"></img> 🚨 Common Stack-Related Issues and how to troubleshoot: <ol><li style="margin-left: 8px;">Stack Member Failure</li></ol> <div style="margin-left: 8px;"><img alt="User-added image" height="206" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002F1N&feoid=00N50000002Cf3M&refid=0EMPH00000MH2Gr" width="500"></img> </div> <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Possible Causes: <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Hardware faults</li><li style="margin-bottom: 11px;">Faulty or loosely connected stack cables</li></ul> </li><li style="margin-bottom: 11px;">Steps to Troubleshoot: <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Inspect and reseat stack cables</li><li style="margin-bottom: 11px;">Check for LED status or signs of hardware failure</li><li style="margin-bottom: 11px;">Console into the affected member to verify boot status</li></ul> </li></ul> If console is available: #show version ? Confirm firmware version #show stack ? Verify if stacking is enabled #show media validation ? Detect stacking cables #show interface X/X/X ? Identify physical port errors If the unit is stuck on boot: <ul style="margin-bottom: 11px;"><li style="list-style-type: none;"> <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Confirm it’s not booting from either primary or secondary flash</li><li style="margin-bottom: 11px;">Perform a <a href="https://docs.commscope.com/bundle/fastiron-09010-upgradeguide/page/GUID-9B5D5A56-039D-44FB-8FD2-B9B55E71ADE8.html" style="color: #467886;text-decoration: underline;" target="_new">software recovery</a></li></ul> </li></ul> <div align="center" style="text-align: center;margin-bottom: 11px;"> </div> 2. Stack Port Flapping or Errors <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Possible Causes: <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Damaged cables</li><li style="margin-bottom: 11px;">Faulty stack ports or power fluctuations</li><li style="margin-bottom: 11px;">Faulty module</li><li style="margin-bottom: 11px;">Faulty optic</li><li style="margin-bottom: 11px;">Ports not working</li></ul> </li><li style="margin-bottom: 11px;">Steps to Troubleshoot:</li></ul> #show interface X/X/X ? Look for CRC, input, or output errors #clear statistics ethernet X/X/X ? Reset and monitor for recurring issues #show media #show media validation <ul style="margin-bottom: 11px;"><li style="list-style-type: none;"> <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Replace cables if errors persist</li></ul> </li></ul> <div align="center" style="text-align: center;margin-bottom: 11px;"> </div> <img alt="User-added image" height="95" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002F1N&feoid=00N50000002Cf3M&refid=0EMPH00000MH0LW" width="500"></img> 3. New Stack Member Not Joining <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Possible Causes: <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Firmware mismatch</li><li style="margin-bottom: 11px;">Configuration issues</li><li style="margin-bottom: 11px;">Improper cabling</li></ul> </li><li style="margin-bottom: 11px;">Steps to Troubleshoot:</li></ul> #show version ? Check firmware consistency #show flash ? Confirm image availability #show stack ? View current stack members <ul style="margin-bottom: 11px;"><li style="list-style-type: none;"> <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Ensure the new switch is in stackable mode</li><li style="margin-bottom: 11px;">Use certified stack cables and correct topology (ring or daisy-chain)</li></ul> </li></ul> <div align="center" style="text-align: center;margin-bottom: 11px;"> </div> 4. High CPU Utilization or Stack Overload <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Possible Causes: <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Excessive traffic or broadcast storms</li><li style="margin-bottom: 11px;">Resource-intensive tasks or misconfiguration</li></ul> </li><li style="margin-bottom: 11px;">Steps to Troubleshoot:</li></ul> #show cpu ? Review current CPU usage #show cpu task ? Identify high-usage processes #show memory ? Monitor for memory leaks or saturation #show interface | include line | utilization ? Detect high port utilization or potential network loops <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002F1N&feoid=00N50000002Cf3M&refid=0EMPH00000LgdfC" style="width: 624px;height: 159px;"></img> General Troubleshooting Tips <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Check System Logs: Run show logging on each stack member to identify warnings or critical events.</li><li style="margin-bottom: 11px;">Monitor Stack Health Regularly: Use show stack and show stack connection to ensure all members are healthy and connections are stable.</li></ul> <div align="center" style="text-align: center;margin-bottom: 11px;"> </div> Resolution Based on the outcomes from the commands and steps above: <ol style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Identify the root cause (hardware, firmware, cabling, or config-related).</li><li style="margin-bottom: 11px;">Take corrective actions (firmware alignment, cable replacement, port cleaning, etc.).</li><li style="margin-bottom: 11px;">Continue monitoring for errors or performance degradation.</li><li style="margin-bottom: 11px;">If the issue persists or is unclear, contact Ruckus Support for advanced troubleshooting.</li></ol>

This article outlines how to troubleshoot stacking issues on Ruckus ICX switches. Specifically, it covers: Basic stack functionality, essential CLI commands , common stack-related problems and step-by-step troubleshooting guidance.

2025-07-10T06:37:03-0700 2025-07-11T14:00:06-0700 https://support.ruckuswireless.com/articles/000008211 2025-07-04T05:27:14-0700 monthly 0.8 admin,premium knowledge_article_5800 knowledge_article_5800 2018-09-04T15:06:20-0700 000008211 Validated (External) Premium Icx 7150;RUCKUS ICX 7150 Campus Switches Configuration;Installation Configuration, Installation, ICX 7150 How do I activate the licenses on my ICX7150? To gain more detailed information about this process, please refer to the document fastiron-08080-licenseguide.pdf, or its equivalent for each release. The method employed here is the Self-Authenticated Upgrade (SAU) licensing, which allows you to upgrade or downgrade to a licensed feature set with a single command. The <code>license install</code> command replaces other licensing commands for installing or deleting a license. There is no longer a need to install a license file using TFTP or SCP. Scenario: Activating Licenses on an Out-of-the-Box ICX7150 You've just unboxed an ICX7150 and want to assign the licenses you have already activated (you received an email and activated them). Product ordered: <table border="0" cellpadding="0" cellspacing="0" style="width: 992px;" width="991"><tbody><tr><td colspan="1" rowspan="1" style="width: 29px;">1</td><td colspan="1" rowspan="1" style="width: 218px;">ICX7150-C12P-2X10GR</td><td colspan="1" rowspan="1" style="width: 746px;">12-PRT POE+ COMP 2X10G SFP+ L3 PREM</td></tr></tbody></table> Licenses ordered: <table border="0" cellpadding="0" cellspacing="0" style="width: 992px;" width="991"><tbody><tr><td colspan="1" rowspan="1" style="width: 29px;">1</td><td colspan="1" rowspan="1" style="width: 218px;">BR-ICX-7150C-21U210R-P-01</td><td colspan="1" rowspan="1" style="width: 746px;">S/W,ICX7150 C12P 2X1G TO 2X10G L3 PREM</td></tr></tbody></table> 1. Check if the licenses are already installed: SSH@ICX7150-C12-DaveLab# show license installed Unit License Name L3 Premium Port Speed Upgrade Speed Ports 1 2X10GR Yes Yes 10G 2 Upon checking, it appears the following licenses are already installed: <ul><li>L3 Premium</li><li>10G ports</li></ul> 2. If the license was not installed, launch the command: SSH@ICX7150-C12-DaveLab# license install perpetual <Id> 2x10gr Id = 1 for standalone units 2x10gr To 2X10GR License 2x1g To 2X1G License <img alt="User-added image" height="200" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001OBZ&feoid=00N50000002Cf3M&refid=0EM50000000ldf4" width="500"></img> Now you need to bind the license with the serial number. We are going to use a method explained in the FI 08.0.80 software, so we need to be on this release; otherwise, an upgrade is necessary. For example, this method does not work on FI 08.0.61. 3. Obtaining the License Serial Number: We need to get the License Serial Number from the Ruckus Certificate of Entitlement (CoE) PDF file. This file can be obtained from the support portal by searching with the serial number of the unit (after license activation) and then downloading the file. <img alt="User-added image" height="177" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001OBZ&feoid=00N50000002Cf3M&refid=0EM50000000ldf9" width="500"></img> 4. Binding the License with the Serial Number: As an example, if the License Serial Number is <code>XXXX2415897</code>, the command on CLI would be: SSH@ICX7150-C12-DaveLab# license set serial 1 icx7150 XXXX2415897 5. Verification: Finally, verify that the binding has been done correctly by checking the license status on the device. SSH@ICX7150-C12-DaveLab# show license installed Unit License Name L3 Prem PoD Speed Ports MACsec SerialNo(L3/ICX7150) SerialNo(PoD/MACsec) 1 2X10GR Yes Yes 10G 2 NA XXXX2415897 NA SSH@ICX7150-C12-DaveLab#show pod Unit-Id: 1 PoD license capacity: 0 PoD license capacity used: 0 PoD-ports Lic-Available Lic-Used 1/3/1 Yes No 1/3/2 Yes No 1/3/3 Yes No 1/3/4 Yes No Note: The license is available on this port but is not in use, as there is currently no 10G SFP connection on the switch. Please note that the switch is hardware-based, so it will automatically detect the type of SFP connected and negotiate the connection accordingly based on the inserted SFP. By following these steps, you can efficiently manage and activate licenses on your ICX7150 using the SAU licensing method. For further details and command options, always refer to the specific release documentation provided in the fastiron-08080-licenseguide.pdf.

Upgrading and Managing Licenses on the ICX7150, using Self-Authenticated Upgrade (SAU) Licensing

2025-07-04T05:27:14-0700 2025-07-04T18:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA2500000008nerCAA?attachment_index=0 2025-07-04T18:00:06-0700 monthly admin,premium knowledge_article_5800 knowledge_article_5800_attachment_1 fastiron-08080-licenseguide.pdf 1343143.0 application/pdf https://support.ruckuswireless.com/articles/000014899 2025-07-03T19:44:09-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5799 knowledge_article_5799 2025-07-03T19:44:09-0700 000014899 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway The customer move to Zone, but AP list was not shown with the error. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000002DFh&feoid=00N50000002Cf3R&refid=0EMPH00000MAFif"></img> R6.1.2 does not have this issue, so you should upgrade to R6.1.2 or later releases. If you can not upgrade, reboot the problematic APs.

The customer tried to see AP list, but the error was popup.

2025-07-03T19:44:09-0700 2025-07-04T06:00:07-0700 https://support.ruckuswireless.com/articles/000007038 2025-07-02T04:13:37-0700 monthly 0.8 admin,premium knowledge_article_5795 knowledge_article_5795 2017-12-12T13:15:47-0800 000007038 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches, Brocade EOS Products How different is layer 2 loop detection using STP, RSTP '802.1w' and loop detection? Below is the explanation from Engineering: <table border="1" cellpadding="0" cellspacing="0" style="text-align: left;color: rgb(0, 0, 0);font-family: Arial, Helvetica, sans-serif;font-size: 12px;font-style: normal;font-weight: normal;white-space: normal;background-color: rgb(255, 255, 255);"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;">Feature</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;">Function</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;">Pro</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;">Con</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;">Application</td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li> RSTP</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>Each layer 2 device must participate using the RSTP protocol.</li><li>BPDUs are generated from the Root bridge every 2 seconds</li><li>Every downstream switch will send a BPDU on the Designated port every 2 second</li><li>The Switches redundant link will be in a discarding state when the loop is detected</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>Each switch participates in the RSTP Topology .</li><li>RSTP will dynamically break physical loop</li><li>Provides layer 2 link redundancy.</li><li>It blocks the edge port when a user connects two ports together in the same vlan.</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>Need to configure other parameters to provide edge loop detection for end devices</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It is commonly used for switch to switch connection to prevent loop detection and provide dynamic redundant data path.</li></ul> </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>STP (802.1d)</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>Similar to RSTP, but older version</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>Compare to RSTP, it block edge port when user create an external loop</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>Slow converge.</li><li>Trigger TC when edge port flapping</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It is used for legacy layer 2 devices</li></ul> </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>Loop-detection (loose mode)</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It is configured on the VLAN.</li><li>Each port on the vlan sends out probe packet once every second (default).</li><li>The destination MAC in probe packet is a layer2 multicast with a switch ID.</li><li>When the switch receives its own probe packet originated from any port on the device, the port will go into a err-disable for the receiving port</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It detects a loop and will disable the port when a user mistakenly connects two ports on a switch together.</li><li>It also protects against when two ports connect each other in different vlans</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It is enabled on entire vlan. It is also very sensitive. Sometimes it will disable the uplink port when a network had the RSTP flapping.</li><li>It will not protect against two ports in different devices and a user connects one port to another. </li><li>It will not protect if the receiving port doesn’t have loop-detection enabled.</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It is used for an edge switch to prevent user errors</li></ul> </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>Loop-detection (strict mode)</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It is configured on each individual port.</li><li>Each port with enabled loop-detection, send out probe packet once every second (default).</li><li>The destination MAC in the probe packet is a layer2 multicast with unique port ID.</li><li>When the port received its own probe packet, it err-disable the port.</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It detect loop when received its own probe packet.</li><li>It can be configured on individual port, exclude uplink port.</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It won’t detect loop when two port connect each other</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It is used for an edge switch to prevent user errors.</li></ul> </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>STP BPDU guard</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It is configured on each individual port.</li><li>Once a BPDU receive packet is detected on the port, it will go into a err-disable state.</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>Combined with a RSTP/STP configuration,</li><li>It will detect a loop when any BPDU packet is received on the port with STP BPDU guard enabled.</li><li>It is enable on individual port, can exclude uplink port.</li><li>It will protect against an external loop.</li><li>It protects against two ports being connected to each other and creating a loop.</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It is not as sensitive as loop detection (2sec vs 1sec).</li><li>To protect against a loop, it require RSTP/STP configured together with BPDU guard to detect the BPDU packet.</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It is used to protect the STP domain and topology.</li><li>Combined with RSTP/STP configuration, it is used for edge switch protection to prevent user errors and creating loop conditions on the switch.</li></ul> </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>STP protection</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It is configured on individual port.</li><li>It will drop any BPDU packet received.</li><li>It won’t err-disable the port.</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It will protect the STP domain and topology.</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It will not prevent a loop.</li></ul> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34);font-family: Arial, Helvetica, sans-serif;"> <ul><li>It is used on an edge switch to protect the STP domain, and only allow a data packet through the port.</li></ul> </td></tr></tbody></table>

There are several features/protocols to prevent layer2 loop.

2025-07-02T04:13:37-0700 2025-07-03T02:00:06-0700 https://support.ruckuswireless.com/articles/000014693 2025-06-25T12:16:20-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5791 knowledge_article_5791 2025-06-25T12:16:20-0700 000014693 Validated (External) Public Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath How to configure redirect URL on cloudpath for Cisco Meraki? As per the official guide from the Meraki Team, below is the format to be used to move the client from an unauthenticated to an authenticated state and let them access the redirect URL: <pre> GET[‘base_grant_url’] + “?continue_url=” + GET[‘user_continue_url’] </pre> <ul><li><code>base_grant_url = https://n##.meraki.com/splash/grant</code></li><li><code>user_continue_url = http://google.com</code></li></ul> Where <code>base_grant_url</code> is the Meraki cloud URL and <code>user_continue_url</code> is the URL to which the user will be redirected. In the case of the example above, the assembled URL would be: <pre> <code>https://n##.meraki.com/splash/grant?continue_url=https://google.com</code></pre> <img alt="User-added image" height="256" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001fp7&feoid=00N50000002Cf3M&refid=0EMPH00000GgtBl" width="500"></img>

Clients using the Cloudpath workflow with Meraki APs are stuck in an infinite loop of redirection accessing the redirect URL.

2025-06-25T12:16:20-0700 2025-06-27T14:00:06-0700 https://support.ruckuswireless.com/articles/000014861 2025-06-20T08:25:01-0700 monthly 0.8 admin,premium knowledge_article_5787 knowledge_article_5787 2025-06-20T08:25:01-0700 000014861 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Troubleshooting Troubleshooting, Unleashed unable to access our RUCKUS Unleashed APs through remote management ? facing an issue accessing our RUCKUS Unleashed APs remotely via the Remote Management Service? <ol style="margin-bottom: 11px;"><li style="margin-bottom: 11px;"> Check Firewall Settings: Ensure that outbound traffic from the AP to the Internet over ports 8022 and 8023 is allowed. </li><li style="margin-bottom: 11px;"> Test Port Access: Use tools like Telnet or online port checking tools from a device in the same network to confirm if ports 8022 and 8023 are reachable. </li></ol>

Users are unable to remotely access RUCKUS Unleashed Access Points (APs) through Remote Management Services. The following error message is encountered: "URS could not connect to the network"

2025-06-20T08:25:01-0700 2025-06-23T02:00:06-0700 https://support.ruckuswireless.com/articles/000014845 2025-06-12T12:15:07-0700 monthly 0.8 admin,premium knowledge_article_5785 knowledge_article_5785 2025-06-12T12:15:07-0700 000014845 Validated (External) Premium Sz144;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 100-D (SZ100-D) Configuration;Firmware;Troubleshooting;Knowledge base Configuration, Firmware, Troubleshooting, Knowledge Base, SZ144, virtual SmartCell Gateway, SZ100 How do I integrate Ruckus SmartZone with Aruba Clear Pass using external TACACS+ authentication? <h2>Integrating Ruckus SmartZone with Aruba ClearPass Using TACACS+</h2> <h3> Step 1: Prepare Aruba ClearPass for TACACS+ Integration</h3> <h4>1.1 Import the TACACS+ Attribute Dictionary</h4> <ul><li>Download the required dictionary file (e.g., <code>ExtraHop_tacacsCPPMdictionary.txt</code>).</li><li>Log in to ClearPass Policy Manager.</li><li>Navigate to Administration > Dictionaries > TACACS+ Services.</li><li>Import the dictionary file to enable custom attributes.</li></ul> <h4>1.2 Add Ruckus SmartZone as a Network Device</h4> <ul><li>Go to Configuration > Network > Devices.</li><li>Click Add Device and enter: <ul><li>Device Name (e.g., Ruckus SZ)</li><li>IP Address of the SmartZone</li><li>Shared Secret (must match on both sides)</li></ul> </li><li>Select TACACS+ as the protocol and save.</li></ul> <h4>1.3 Create a TACACS+ Enforcement Profile</h4> <ul><li>Navigate to Configuration > Enforcement > Profiles.</li><li>Click Add and choose TACACS+ Based Enforcement from the template.</li><li>Define: <ul><li>Name and Description</li><li>Action (Accept or Reject)</li><li>Any required TACACS+ attributes (e.g., <code>priv-lvl</code>, <code>service-type</code>)</li></ul> </li></ul> <h4>1.4 Create a TACACS+ Service</h4> <ul><li>Go to Configuration > Services.</li><li>Click Add Service > TACACS+.</li><li>Configure: <ul><li>RADIUS Secret</li><li>Authentication Source (e.g., Active Directory)</li><li>Enable Authentication, Authorization, and Accounting as needed.</li></ul> </li></ul> <h4>1.5 Define Authorization Policies</h4> <ul><li>Navigate to Policy > Authorization.</li><li>Create role-based policies (e.g., Admin, Operator).</li><li>Map roles to user groups or authentication sources.</li></ul> <hr></hr> <h3>Step 2: Configure Ruckus SmartZone for TACACS+</h3> <h4>2.1 Add Aruba CPPM as a TACACS+ Server</h4> <ul><li>Log in to the SmartZone web interface.</li><li>Go to Configuration > AAA Servers.</li><li>Add a new TACACS+ server: <ul><li>Enter the ClearPass IP Address</li><li>Use the same Shared Secret</li><li>Set the TACACS+ Port (default is 49)</li></ul> </li></ul> <h4>2.2 Enable TACACS+ Authentication</h4> <ul><li>Navigate to System > Security > TACACS+.</li><li>Enable TACACS+ and confirm server details.</li></ul> <h4>2.3 Define User Roles</h4> <ul><li>Go to Users > User Roles.</li><li>Create roles based on attributes like <code>priv-lvl</code> received from ClearPass.</li><li>Assign permissions accordingly (e.g., admin, operator).</li></ul> <h4>2.4 Apply Enforcement Profiles</h4> <ul><li>Apply the enforcement profiles and policies created in ClearPass to the SmartZone device to control access and privileges.</li></ul> <hr></hr> <h3>Step 3: Validate the Configuration</h3> <h4>3.1 Test Authentication</h4> <ul><li>Attempt to log in to SmartZone using a TACACS+-authenticated user.</li><li>Confirm access is granted with the correct role and privileges.</li></ul> <h4>3.2 Monitor Logs</h4> <ul><li>Review logs in both ClearPass and SmartZone for authentication and authorization events.</li></ul> <hr></hr> <h3>Common TACACS+ Attributes for Ruckus Integration</h3> <table><thead><tr><th colspan="1" rowspan="1">Attribute</th><th colspan="1" rowspan="1">Description</th></tr></thead><tbody><tr><td colspan="1" rowspan="1"><code>priv-lvl</code></td><td colspan="1" rowspan="1">Sets user privilege level (e.g., <code>15</code> for admin access)</td></tr><tr><td colspan="1" rowspan="1"><code>service-type</code></td><td colspan="1" rowspan="1">Defines allowed services (e.g., <code>login</code>, <code>exec</code>)</td></tr><tr><td colspan="1" rowspan="1"><code>cisco-av-pair</code></td><td colspan="1" rowspan="1">Advanced access control (e.g., <code>shell:priv-lvl=15</code>)</td></tr><tr><td colspan="1" rowspan="1"><code>shell-override</code></td><td colspan="1" rowspan="1">Overrides default shell settings</td></tr><tr><td colspan="1" rowspan="1"><code>tacacs+:user-role</code></td><td colspan="1" rowspan="1">Assigns user roles based on TACACS+ authentication</td></tr></tbody></table> Here is a visual representation of the TACACS+ authentication flow between Aruba ClearPass Policy Manager (CPPM) and Ruckus SmartZone (SZ): <img alt="User-added image" height="412" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000026Nt&feoid=00N50000002Cf3M&refid=0EMPH00000L3Dz7" width="500"></img> <h3>Diagram Highlights:</h3> <ul><li>ClearPass Configuration: <ul><li>Attribute Dictionary Import</li><li>Enforcement Profiles</li><li>TACACS+ Server Setup</li></ul> </li><li>Mandatory Attributes: <ul><li><code>service</code></li><li><code>user-name</code></li></ul> </li><li>SmartZone Configuration: <ul><li>Receives TACACS+ requests</li><li>Falls back to Local Users if attribute issues occur</li></ul> </li><li>Flow: <ul><li>Authentication and authorization requests flow from SZ to CPPM.</li><li>If attribute validation fails, SZ uses local user credentials.</li></ul> </li></ul>

This article describes the configuration required on the vSCG/SCG-144 for successful integration with a TACACS+ server on Aruba Clear Pass

2025-06-12T12:15:07-0700 2025-06-17T10:00:06-0700 https://support.ruckuswireless.com/articles/000011693 2025-06-09T13:53:55-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4694 knowledge_article_4694 2021-05-21T12:22:51-0700 000011693 Validated (External) Public Ruckus icx switches Knowledge base Knowledge Base, Ruckus ICX Switches IoR/EoR terms For shipments sent to destinations outside RUCKUS’s direct presence whether from a forward-sourcing location or warehouse the IoR/EoR terms apply to all products, including both Wired and Wireless, as well as those covered under Advance Replacement and Return to Factory entitlements. Under these terms, it is the customer’s responsibility to clear the goods through customs. This process may require the submission of specific licenses or documentation and includes customer liability for duties and taxes. In instances where customers do not possess the necessary documentation or licenses for clearance, they may engage a local customs broker to act on their behalf. This is a common industry practice I've attached the list of countries which falls under IOR/EOR terms.

Explanation on IOR/EOR & the list of countries which falls under IOR/EOR terms.

2025-06-09T13:53:55-0700 2025-06-10T02:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000LsJYSA0?attachment_index=0 2025-06-10T02:00:06-0700 monthly admin,premium,warranty,guest knowledge_article_4694 knowledge_article_4694_attachment_1 IOR countries.xlsx 14393.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000008837 2025-06-04T19:15:24-0700 monthly 0.8 admin,premium knowledge_article_5514 knowledge_article_5514 2019-02-08T15:07:43-0800 000008837 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP Speed test shows a low speed, how can I check if there is a problem with the WiFi network? How to view WLAN info? How to Check WLAN config? How to Check AP Config? <div class="NIGHTEYE_BlueFilter NIGHTEYE_Filter"> </div> < Access to AP via CLI/SSH is the best way to monitor operation. These commands can also be run from the SZ/vSZ/SCG. <pre class="ckeditor_codeblock"> vSZ#remote ap-cli <ap_mac> "ap_cli_command"</pre> Verify AP Health: Low CPU usage with loads of free memory. <pre class="ckeditor_codeblock"> rkscli: sysinfo CPU : 2.00% Memory : 247520 KB (free), 470800 KB (total) OK</pre> <h4>AP Uptime: </h4> <pre class="ckeditor_codeblock"> rkscli: get uptime Uptime: 4 hrs 23 mins 6 secs OK</pre> <h4> Verify AP Uplink/Ethernet Connectivity: </h4> In this example, the AP is connected to the network on Lan port 1 - eth0 - at 1000Mbps Full duplex <pre class="ckeditor_codeblock"> rkscli: get eth Port Interface 802.1X Logical Link Physical Link Label ----------------------------------------------------------------- 0 eth0 None Up Up 1000Mbps full 10/100/1000 PoE 1 eth1 Auth Down Down 10/100/1000 eth0 Link encap:Ethernet HWaddr 60:D0:2C:3A:89:93 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:6692490 errors:0 dropped:0 overruns:0 frame:0 TX packets:2086645 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:2190109606 (2.0 GiB) TX bytes:2342439720 (2.1 GiB) Interrupt:252</pre> Here there are no drops on the Tx and Rx stats: <pre class="ckeditor_codeblock"> rkscli: get netstats eth0 <--- Receive Statistics ---> Interface bytes packets errors drop FIFO Frame Mcast ZIP eth0 2171621313 6429239 0 0 0 0 0 0 <--- Transmit Statistics ---> Interface bytes packets errors drop FIFO Collide Carrier ZIP eth0 2341534615 2080535 0 0 0 0 0 0</pre> Verify WLAN/SSIDs being broadcasted: <pre class="ckeditor_codeblock"> rkscli: get wlanlist name status type wlanID radioID bssid ssid -------------------------------------------------------------------------------------------------- wlan0 up AP wlan0 0 60:d0:2c:3a:89:98 5757Madison wlan1 up AP wlan1 0 60:d0:2c:7a:89:98 5757Madison_guest recovery-ssid down AP wlan102 0 00:00:00:00:00:00 Recover.Me-3A8990 wlan32 up AP wlan32 1 60:d0:2c:3a:89:9c 5757Madison wlan33 up AP wlan33 1 60:d0:2c:7a:89:9c 5757Madison_guest</pre> <h4>Verify Client statistics per radio: </h4> From the below output, the client got associated to 2.4GHz once, the Tx rate is 144Mbps and the RSSI value is 59dB which is very good. <pre class="ckeditor_codeblock"> rkscli: get station wlan0 stats all (null): c4:d9:87:36:e8:ef rx_data_frm 125861 rx_mgt_frm 1 rx_ucast_frm 1 25395 rx_mcast_frm 466 rx_bytes 106216565 tx_data_frm 107829 tx_mgmt_frm 3 tx_bytes 134539670 tx_assoc 1 tx_auth 1 good_tx_frms 107832 good_rx_frms 125862 tx_retries 3672 tx_rate 144444 tx_kbps 49864 rx_rssi 59</pre> Verifying on 5GHz radio: The client got associated with 5GHz, the Tx rate is 400Mbps and the RSSI value is 52dB which is very good. <pre class="ckeditor_codeblock"> get station wlan32 stats all (null): 48:45:20:5b:f7:93 rx_data_frm 160916 rx_mgt_frm 3 rx_ucast_frm 160427 rx_mcast_frm 489 rx_bytes 205018925 tx_data_frm 111268 tx_mgmt_frm 4 tx_bytes 119713868 tx_assoc 1 tx_auth 1 good_tx_frms 111272 good_rx_frms 160919 tx_retries 1 tx_rate 400000 tx_kbps 63077 tx_per 3 rx_rssi 52</pre> Verify Client data: such as client VLAN and IP address: <pre class="ckeditor_codeblock"> get client-info wlan32 48:45:20:5b:f7:93 { Allow : Y Group : 1(Windows) OS/Type : Windows (Mobile) 8/8.1/10 Hostname : ROG Fwd_policy : 4(LBOAP) Vlan : 162 Dhcp_ip : 172.20.1.5 Lease_time : 86400 Xid : 0x05273b16 Drop : 0 Ack : 3 Life_time : 300 ARC ID : 1 URL_filter ID: 1 c_tx : 0 c_rx : 0 c_txbytes : 0 c_rxbytes : 0 CUI : DHCP_pool_name: NAT_pool_name:</pre> To display Media Queue Statistics(MQS): Below we notice no packets being dropped. The "0" under drop indicates no packets are being dropped on Tx <pre class="ckeditor_codeblock"> get mqstats wlan32 all STA: 48:45:20:5b:f7:93 AID:1 ---------------------------------------------------------------------------------------------------- Qued ovrflw enq deq Airtime reenq deact XRetries XTlimits Flags mgmt ( 0) X: 0 0 0 0 0 0 0 0 data VO( 3)PA 0 0 4 4 0 0 0 0 0 1080E data VI( 0) A 0 0 0 0 0 0 0 0 0 0 data BE( 1)PA 0 0 67 77 0 10 0 0 0 1088E data BK( 0) A 0 0 0 0 0 0 0 0 0 0 ========================================TID FLAGS=================================================== SCHQ PAUS AMPDU AMSDU DEL RAW MCST REQ HWQ SWQ_HWQ NOT_Q NOT_RX TF_TE TID_AIR 0 1 1 1 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 0 0 0 1 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0</pre> To view all the stations connected to a specific WLAN: <pre class="ckeditor_codeblock"> get station wlan33 list all AID VLAN CHAN RSSI IDLE CAPS STATE HTCAPS/VHTCAPS ADMITTEDBW 24:5b:a7:59:11:d6 1Y 57 44 63 0 ESS PRIV QOS HT VHT LDPC 40MHz SGI20 SGI40 /80MHz SGI80 0 RSN AES AES PSK WME 28:c6:3f:21:d2:52 3Y 57 44 55 0 ESS PRIV QOS HT VHT LDPC 40MHz SGI20 SGI40 TXSTBC RXSTBC MAXMSDU /80MHz SGI80 TXSTBC RXSTBC 0 RSN AES AES PSK WME a0:c9:a0:f6:dd:d7 2Y 57 44 57 0 ESS PRIV QOS HT VHT LDPC 40MHz SGI20 SGI40 TXSTBC RXSTBC /80MHz SGI80 TXSTBC RXSTBC 0 RSN AES AES PSK WME </pre> To view all stats of the stations connected to a WLAN with combined RSSI/SNR and protocols supported: <pre class="ckeditor_codeblock"> get station wlan33 stats all STA: 24:5b:a7:59:11:d6 rx_data_frm 844358 rx_mgt_frm 2 rx_ucast_frm 844140 rx_mcast_frm 218 rx_bytes 766089415 tx_data_frm 2545988 tx_mgmt_frm 4 tx_bytes 3122080797 tx_assoc 1 tx_auth 1 good_tx_frms 2545992 good_rx_frms 844360 tx_retries 4 tx_rate 400000 tx_kbps 262040 rx_rssi 48</pre> To View the WLAN info: <pre class="ckeditor_codeblock"> get wlaninfo wlan0 SSID / BSSID: Home_AP / 2c:ab:46:63:46:f0 Channel: 6 Net Security: Open Auth: Open FIREWALL ID: 1 wlan32 SSID / BSSID: Home_AP / 2c:ab:46:a3:46:f0 Channel: 60 Net Security: Open Auth: Open FIREWALL ID: 1 OK</pre> Radio statistics for each radio, wifi0(Radio 0) is 2.4 GHz, wifi1(Radio 1) is for 5GHz radio: Using the get radiostats wifi0/wifi1 we can get all the below details: a) Interrupt Stats b) TX/RX Stats c) PHY Error Stats d) Airtime Stats e) wlan stats <pre class="ckeditor_codeblock"> get radiostats wifi0 ### Athstats Radio 0 ### ATHSTATS bufp 0x7fac9c70 : ast_tx_packets 7366008 ast_tx_mgmt 0 ast_tx_invalid 0 ast_tx_xretries 193729 get radiostats wifi1 ### Athstats Radio 1 ### ATHSTATS bufp 0x7ffeda50 : ast_tx_packets 10584597 ast_tx_mgmt 252520197 ast_tx_invalid 88020 ast_tx_xretries 0</pre> PHY errors are damaged packets detected on radios, histogram shows % of packets in each "bucket" - for 2.4 it is common to see numbers under 1K and 2K (phy errors per second) - when numbers under 5K become large- expect latency - values over 10K and above will indicate packet loss probability. <pre class="ckeditor_codeblock"> ------------ PHY Error Stats ------------ 34630877 PHY errors since clearing all stats (rx_phyerr) 1096 PHY errors since clearing delta stats (1 sec) Histogram of PHY errors per second (pcttime in each range) 0 1-500 ..1K ..2K ..5K ..10K ..20K ..50K .100K more 0 2 13 29 55 0 1 0 0 0 </pre> Airtime stats show % of the time the radios were Receiving (rx) Transmitting (tx) or hearing non wifi noise (busy). each bucket is a % - numbers in 80% and above may indicate radio congestion. High rx numbers may be due to overlapping radios/AP's in same channel <pre class="ckeditor_codeblock"> ------------ Airtime Stats ------------ Airtime utilized (percent) since clearing delta stats (1 sec) Busy: 1 RX: 35 TX: 0 Total: 36 Histograms of airtime (pcttime in each range) since clearing all stats 0 0-10 ..20 ..30 ..40 ..50 ..60 ..70 ..80 ..90 ..100 busy: 0 97 3 0 0 0 0 0 0 0 0 rx: 0 0 0 17 60 20 2 0 0 0 0 tx: 30 69 0 0 0 0 0 0 0 0 0 tot: 0 0 0 1 42 43 12 1 0 0 0</pre> Noise floor setting per radio chain, number out of brackets is actual NF setting, in brackets is an ideal value, ext is for second channel with 40MHz channel width. Noise floor will be increased when AP cannot send beacons, to overcome noise blocking radio. <pre class="ckeditor_codeblock"> NF Ch0 -91[-101], ext -91[-101] NF Ch1 -87[-99], ext -87[-99] NF Ch2 -90[-101], ext -90[-101] NF Ch3 -97[-55], ext -97[-55]</pre> The MCS table in Athstats shows historical MCS rates, number of chains and channel width for all communications since AP was restarted. This can show if AP can transmit at higher data rates and what (historical) channel widths and radio chains are being used. To get data for a particular client the AP could be rebooted to clear statistics. The below log shows the number of packets per MCS rate per channel width and number of chains. % in brackets shows the Packet Error rate for that entry. <pre class="ckeditor_codeblock"> ----------------------------------------- MCS and PER Histogram ------------------------------------------------- BW NSS MCS-0 MCS-1 MCS-2 MCS-3 MCS-4 MCS-5 MCS-6 MCS-7 MCS-8 MCS-9 20MHz 1x1 554(24%) 81(82%) 137(57%) 49(76%) 1003(6%) 2073(1%) 2(0%) . . . 20MHz 2x2 33(94%) 208(2%) 121(65%) 539(1%) 621(7%) 1235(2%) 484(2%) . . . 20MHz 3x3 13(92%) 1(100%) 4(10%) 17(11%) . 393(1%) . . . . 20MHz 4x4 . . . . . . . . . 40MHz 1x1 47(94%) 4(100%) 1212(1%) 344(4%) 3784(1%) 848(3%) 2667(2%) 105(0%) 3562(3%) 186(3%) 40MHz 2x2 891(6%) 5(100%) 427(2%) 16(100%) 2708(1%) 697(1%) 801(0%) 640(0%) 525(3%) 29(3%) 40MHz 3x3 36(98%) 4(90%) 118(2%) 2(100%) 411(2%) 233(0%) 208(1%) . . 28(31%) 40MHz 4x4 . . . . . . . . . 80MHz 1x1 126(52%) 233(6%) 548(3%) 1338(2%) 5312(2%) 8739(2%) 29689(3%) 11750(8%) 18734(12%) 32043(9%) 80MHz 2x2 236(40%) 1036(5%) 2435(3%) 454(18%) 17944(2%) 37048(1%) 36414(2%) 73817(2%) 259806(2%) 1082736(3%) 80MHz 3x3 761(7%) 132(8%) 4046(3%) 803(5%) 23038(2%) 86283(2%) . 2108682(4%) 180077(26%) 54524(97%) 80MHz 4x4 . . . . . . . . . 160MHz 1x1 . . . . . . . . . . 160MHz 2x2 . . . . . . . . . . 160MHz 3x3 . . . . . . . . . . 160MHz 4x4 . . . . . . . . . . ------------------------------------------------------------------------------------------- Avg Queueing Delay = 0 micro secs</pre> Command "get scanresults <WLAN_ID>" to view the Neighboring AP signal and the Rouge APs. <pre class="ckeditor_codeblock"> rkscli: get scanresults wlan32 SSID BSSID Type Radio Encr Chan RSSI DL/UL Ant RogueType BYODWNET 00:e6:3a:90:71:a1 AP A/N/AC(20) WPA2-PSK 36 12/0 0 BYOD 00:e6:3a:90:71:a0 AP A/N/AC(20) WPA2 36 12/0 0 HHSOPS 00:e6:3a:90:71:a2 AP A/N/AC(20) WPA2 36 12/0 0 HHSWiFiStaff 00:e6:3a:90:71:a3 AP A/N/AC(20) WPA2 36 12/0 0 HHSWNET 00:e6:3a:90:71:a4 AP A/N/AC(20) WPA2-PSK 36 12/0 0 HHSOPS_Guest 00:e6:3a:90:71:a5 AP A/N/AC(20) WPA2-PSK 36 12/0 0 BYOD c8:08:73:2f:a8:cc AP A/N/AC(20) WPA2 40 34/38 0 BYODWNET c8:08:73:6f:a8:cc AP A/N/AC(20) WPA2-PSK 40 33/38 0 HHSOPS c8:08:73:af:a8:cc AP A/N/AC(20) WPA2 40 33/38 0 HHSWiFiStaff c8:08:73:ef:a8:cc AP A/N/AC(20) WPA2 40 32/38 0 HHSWNET c8:08:73:2f:a8:cd AP A/N/AC(20) WPA2-PSK 40 32/38 0 HHSOPS_Guest c8:08:73:6f:a8:cd AP A/N/AC(20) WPA2-PSK 40 33/38 0 BYOD 2c:c5:d3:1c:c9:2c AP A/N/AC(20) WPA2 44 34/43 0 BYODWNET 2c:c5:d3:5c:c9:2c AP A/N/AC(20) WPA2-PSK 44 33/43 0 HHSOPS 2c:c5:d3:9c:c9:2c AP A/N/AC(20) WPA2 44 33/43 0 HHSWiFiStaff 2c:c5:d3:dc:c9:2c AP A/N/AC(20) WPA2 44 33/43 0 HHSWNET 2c:c5:d3:1c:c9:2d AP A/N/AC(20) WPA2-PSK 44 33/43 0 HHSOPS_Guest 2c:c5:d3:5c:c9:2d AP A/N/AC(20) WPA2-PSK 44 33/43 0</pre> Command ""get mcsrate <WLAN_ID> <client_MAC>" to view the MCS rate the client is currently negotiating at: <pre class="ckeditor_codeblock"> rkscli: get mcsrate wlan32 e0:0a:f6:78:cb:0d AP Rx Signal (dB) 48 AP Tx Data Rate 144400 AP Tx MCS MCS 7/20S/2 </pre> The below log is snippet from the saved AP Support log (hint search for the heading of each section): <pre class="ckeditor_codeblock"> ### Device Info ### Model : R610 CPU : 2.97% Load : 0.02 0.06 0.06 1/113 24418 Memory : 238744 KB (free), 5860 KB (cache) 244604 KB (available) 470800 KB (total) ### Device Up Time ### 4 hrs 31 mins 48 secs Current Date/Time : 2019-02-08 19:11:05 GMT Ethernet statistics ### /proc/net/dev ### <--- Receive Statistics ---> Interface bytes packets errors drop FIFO Frame Mcast ZIP br0 277518285 5091468 0 0 0 0 0 0 eth0 2190109606 6692490 0 0 0 0 0 0 <--- Transmit Statistics ---> Interface bytes packets errors drop FIFO Collide Carrier ZIP br0 27211490 168721 0 0 0 0 0 0 eth0 2342439720 2086645 0 0 0 0 0 0 eth0 Link encap:Ethernet HWaddr 60:D0:2C:3A:89:93 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:6692490 errors:0 dropped:0 overruns:0 frame:0 TX packets:2086645 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:2190109606 (2.0 GiB) TX bytes:2342439720 (2.1 GiB) Interrupt:252</pre> We can scroll down or search for the topology to verify the bridge configuration with VLANs configured/assigned per interface. <pre class="ckeditor_codeblock"> ### Topology ### bridge HostOnly Bridge id STP PIF Serv Mode Port Untagged vlan Enabled vlans br_ccd 0 8000.000000000000 no no br0 0 8000.60d02c3a8990 no yes n u eth0 1 all n u eth1 50 none n d u wlan0 50 none n d r wlan1 20 20 n d u wlan2 50 none n d u wlan32 50 none n d r wlan33 20 20 n d u wlan34 50 none Port Interface 802.1X Logical Link Physical Link Label ----------------------------------------------------------------- 0 eth0 None Up Up 1000Mbps full 10/100/1000 PoE 1 eth1 Auth Down Down 10/100/1000 </pre> Radio Configuration: <pre class="ckeditor_codeblock"> ### Radio 0 (wifi0) Config ### Channel: 6 (2437 Mhz) (Smart Auto Select) Transmit Power set to -2 dB from max power ### Radio 1 (wifi1) Config ### Channel: 40 (5200 Mhz) (Smart Auto Select) Transmit Power set to -1 dB from max power</pre> Signal strength per client/STA across Radio Chains. RSSx are for unicast packets, ASSx is for Ack packets sent at the basic rate and higher power. Nodestats: No Mac address or index specified Listing all nodes. <pre class="ckeditor_codeblock"> ### Node Stats Radio 1 ### Dev:wifi1 has 19 nodes Target has 0 active peers IDX AID MACADDRESS RSSC RSS0 RSS1 RSS2 RSS3 ASSC ASS0 ASS1 ASS2 ASS3 16 1 24:5b:a7:59:11:d6 48 42 46 39 128 51 45 50 41 128 17 3 28:c6:3f:21:d2:52 40 39 33 31 128 41 41 29 25 128 18 2 a0:c9:a0:f6:dd:d7 42 41 34 29 128 47 46 41 35 128</pre> At the End of the AP support log is the recent system log - useful to check for the client MAC address to determine communication Sample selected: Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.info hostapd: wlan32: STA 5c:e4:2a:ff:b9:0f WPA: wlan32: WPA: pairwise key handshake completed (RSN) Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 user.warning kernel: wmi_unified_vdev_install_key_send Setting Key for Macaddress:0xfb9ff2ae45c Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 user.warning kernel: Keyix=0 Keylen=16 Keyflags=0 Cipher=4 Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 user.warning kernel: Keydata=0x95 0x14 0x28 0x94 0xa5 0x65 0x66 0x4e 0x71 0x92 0x3b 0x4a 0x74 0x37 0x51 0x10 Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.warning hostapd: STA 5c:e4:2a:ff:b9:0f IEEE 802.11: IEEE 802.11: add station:5c:e4:2a:ff:b9:0f to rudb Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.info hostapd: wlan32: STA 5c:e4:2a:ff:b9:0f IEEE 802.11: wlan32: IEEE 802.11: Using EAPOL case, username = giles.highfield, original = giles.highfield Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.info hostapd: @@202,clientJoin,"apMac"="2c:c5:d3:1c:b9:90","clientMac"="5c:e4:2a:ff:b9:0f","ssid"="BYOD","bssid"="2c:c5:d3:1c:b9:9c","userId"="","wlanId"="37","iface"="wlan32","tenantUUID"="839f87c6-d116-497e-afce-aa8157abd30c","apName"="AP02","apGps"="53.487075,-1.014259","wlanIdealEventRequired"=""networkId"="082f724011094957a50e743510805843","networkName"="BYOD"","userName"="giles.highfield","vlanId"="30","radio"="a/n/ac","encryption"="WPA2-AES","Instantaneous rssi"="0","Xput"="0" Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.warning hostapd: wlan32: STA 5c:e4:2a:ff:b9:0f IEEE 802.11: wlan32: IEEE 802.11: Enable Deny flag Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.warning hostapd: STA 5c:e4:2a:ff:b9:0f IEEE 802.11: IEEE 802.11: rks_rudb_set_deny_flag: Set deny flag for station:5c:e4:2a:ff:b9:0f Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.warning hostapd: STA 5c:e4:2a:ff:b9:0f IEEE 802.11: IEEE 802.11: rsms_rudb_setSTAFpAttachedPolicys Firewall index 0 applied for station Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.warning hostapd: STA 5c:e4:2a:ff:b9:0f IEEE 802.11: IEEE 802.11: rks_rudb_set_deny_flag: Clear deny flag for station:5c:e4:2a:ff:b9:0f Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.notice hostapd: wlan32: AP-STA-CONNECTED 5c:e4:2a:ff:b9:0f Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.info hostapd: wlan32: STA 5c:e4:2a:ff:b9:0f IEEE 802.1X: wlan32: IEEE 802.1X: authenticated - EAP type: 25 (PEAP) (PMKSA cache) Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.info hostapd: wlan32: STA 5c:e4:2a:ff:b9:0f IEEE 802.11: wlan32: IEEE 802.11: Using EAPOL case, username = giles.highfield, original = giles.highfield Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.info hostapd: @@206,clientAuthorization,"apMac"="2c:c5:d3:1c:b9:90","clientMac"="5c:e4:2a:ff:b9:0f","ssid"="BYOD","bssid"="2c:c5:d3:1c:b9:9c","userId"="","wlanId"="37","iface"="wlan32","tenantUUID"="839f87c6-d116-497e-afce-aa8157abd30c","apName"="AP02","apGps"="53.487075,-1.014259","wlanIdealEventRequired"=""networkId"="082f724011094957a50e743510805843","networkName"="BYOD"","userName"="giles.highfield","vlanId"="30","radio"="a/n/ac","encryption"="WPA2-AES" Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 kern.warning kernel:ol_rc_update_handler: WARNING: handler called without transmit attempts Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.info hostapd: wlan32: STA 5c:e4:2a:ff:b9:0f DRIVER: wlan32: DRIVER: STA-ADDR-INFO sta:0x97e5f8, ssid:BYOD, flags:23, ip_addr:172.30.2.130, ipv6_addr: , common_state:1, is_wispr:0, ip_update:1, ip_timestamp:1725442059, acct_start:1 Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.info hostapd: @@236,clientInfoUpdate,"apMac"="2c:c5:d3:1c:b9:90","clientMac"="5c:e4:2a:ff:b9:0f","ssid"="BYOD","bssid"="2c:c5:d3:1c:b9:9c","userId"="","wlanId"="37","iface"="wlan32","tenantUUID"="839f87c6-d116-497e-afce-aa8157abd30c","apName"="AP02","apGps"="53.487075,-1.014259","wlanIdealEventRequired"=""networkId"="082f724011094957a50e743510805843","networkName"="BYOD"","clientIP"="172.30.2.130","userName"="giles.highfield","vlanId"="30","radio"="a/n/ac","encryption"="WPA2-AES" Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 local1.info sessionMgr[478]: handle_ue_state_change:527 UE[5c:e4:2a:ff:b9:0f][wlan32]UE state changed from [uninitialized] to [session_active] Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 local1.info sessionMgr[478]: build_and_send_scg_ue_ctx_update:971 UE[5c:e4:2a:ff:b9:0f][wlan32]apModCtxtReq.ueCtxtState=1 dot11State=1 wlanid=37 sessStartTime=1725442059 vlan=30, sessionTimeout=172800 Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.warning hostapd: STA 5c:e4:2a:ff:b9:0f IEEE 802.11: IEEE 802.11: rks_rudb_set_deny_flag: Clear deny flag for station:5c:e4:2a:ff:b9:0f Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 local1.info sessionMgr[478]: handle_ue_state_change:527 UE[5c:e4:2a:ff:b9:0f][wlan32]UE state changed from [session_active] to [session_active] Sep 4 09:27:39 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 local1.info sessionMgr[478]: build_and_send_scg_ue_ctx_update:971 UE[5c:e4:2a:ff:b9:0f][wlan32]apModCtxtReq.ueCtxtState=1 dot11State=1 wlanid=37 sessStartTime=1725442059 vlan=30, sessionTimeout=172800 Line 27875: Sep 4 09:31:31AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.info hostapd: wlan32: STA 9c:58:84:1c:62:08 IEEE 802.11: wlan32: IEEE 802.11: reason code = 8 Line 28324: Sep 4 09:34:15 AP-tool_edef73fbb30347b08a4d4ad04c9345_221503301201_AP02 daemon.info hostapd: wlan32: STA 9c:58:84:1c:62:08 IEEE 802.11: wlan32: IEEE 802.11: reason code = 8 Client/STA initiated log off - reason code 8(Disassociated because sending station is leaving (or has left) BSS) indicates client is leaving AP <div class="NIGHTEYE_BlueFilter NIGHTEYE_Filter"> </div> <div class="NIGHTEYE_YellowFilter NIGHTEYE_Filter"> </div> <div class="NIGHTEYE_DimFilter NIGHTEYE_Filter"> </div>

How to use AP CLI commands and data from AP support info file to verify client operation and throughput

2025-06-04T19:15:24-0700 2025-06-05T06:00:06-0700 https://support.ruckuswireless.com/articles/000006789 2025-06-04T13:27:58-0700 monthly 0.8 admin,premium knowledge_article_5780 knowledge_article_5780 2017-12-12T14:34:13-0800 000006789 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches How to troubleshoot SSH access issues on a RUCKUS ICX switch? Please refer to the 'Troubleshooting Steps' section; all the steps outlined there will help you identify the issue.

SSH Troubleshooting Guide for ICX Device This guide provides a structured approach to diagnosing SSH connectivity issues on ICX devices, covering code streams 800x to 8095x and 9010x and later.

2025-06-04T13:27:58-0700 2025-06-05T06:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA250000000TvuDCAS?attachment_index=0 2025-06-05T06:00:06-0700 monthly admin,premium knowledge_article_5780 knowledge_article_5780_attachment_1 SSH commands Reference.rtf 77860.0 application/rtf https://support.ruckuswireless.com/articles/000014713 2025-06-04T13:20:42-0700 monthly 0.8 admin,premium knowledge_article_5781 knowledge_article_5781 2025-06-04T13:16:08-0700 000014713 Validated (External) Premium Ruckus icx switches Performance;Troubleshooting Performance, Troubleshooting, Ruckus ICX Switches What could be the reasons for high CPU utilization on an ICX switch? <h1 style="margin-top: 24px;margin-bottom: 5px;">How to Troubleshoot High CPU on Ruckus ICX Switches</h1> High CPU refers to a condition where a device's central processing unit (CPU) operates at or near its maximum capacity. This can degrade the device's performance as it struggles to manage all tasks. On network devices like Ruckus ICX switches, high CPU usage can impair the switch's ability to process network traffic, handle control plane operations, and respond to requests efficiently. Define the Problem Addressing the following questions will help formulate a precise and effective problem statement: <ul style="margin-bottom: 11px;"><li style="margin-left: 28px;margin-bottom: 11px;">When did it start?</li><li style="margin-left: 28px;margin-bottom: 11px;">How long has the problem been ongoing?</li><li style="margin-left: 28px;margin-bottom: 11px;">Is it constant or intermittent? <ul style="list-style-type: disc;"><li style="margin-left: 28px;margin-bottom: 11px;">If intermittent, when does it happen?</li><li style="margin-left: 28px;margin-bottom: 11px;">How long does it last?</li><li style="margin-left: 28px;margin-bottom: 11px;">Is there a defining/preceding event?</li></ul> </li><li style="margin-left: 28px;margin-bottom: 11px;">Are multiple devices experiencing high CPU, or just one?</li><li style="margin-left: 28px;margin-bottom: 11px;">Have there been any recent network changes? <ul style="list-style-type: disc;"><li style="margin-left: 28px;margin-bottom: 11px;">Configuration changes</li><li style="margin-left: 28px;margin-bottom: 11px;">Maintenance</li><li style="margin-left: 28px;margin-bottom: 11px;">Adding phones/workstations/devices/users</li></ul> </li></ul> <h1 style="margin-top: 24px;margin-bottom: 5px;">Troubleshooting</h1> Symptoms of High CPU: <ul style="margin-bottom: 11px;"><li style="margin-left: 28px;margin-bottom: 11px;">Poor Performance</li><li style="margin-left: 28px;margin-bottom: 11px;">Packet Loss</li><li style="margin-left: 28px;margin-bottom: 11px;">Disconnects/Connectivity Issues</li><li style="margin-left: 28px;margin-bottom: 11px;">Difficulty Managing the CLI</li><li style="margin-left: 28px;margin-bottom: 11px;">Alarms</li></ul> Verifying the Problem: High CPU can be intermittent. Run #show cpu three to five times to confirm current CPU utilization. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000026Fp&feoid=00N50000002Cf3M&refid=0EMPH00000Ku4Gj"></img> Check the #show cpu tasks command to see which processes are consuming the most CPU <img alt="User-added image" height="350" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000026Fp&feoid=00N50000002Cf3M&refid=0EMPH00000HNUoP" width="500"></img> -The show cpu task can be misleading sometimes if you see high CPU on core services. <h1 style="margin-top: 24px;margin-bottom: 5px;">Isolating the Problem</h1> Isolating the cause of high CPU is usually a process of elimination, starting with the most common causes. Refine the problem statement and track your progress and results throughout each step. Identifying Probable Causes: Ruckus ICX switches are designed to optimize forwarding decisions in hardware, ensuring speed and reliability. However, hardware resources are limited and vary by platform. When these resources are exhausted, the system's CPU must take over forwarding decisions, albeit with reduced efficiency. Collect the following information to determine if this situation is occurring and identify the specific resource being impacted: <ul style="margin-bottom: 11px;"><li style="margin-left: 28px;margin-bottom: 11px;">#show log (Look for interfaces flapping, STP root changes)</li><li style="margin-left: 28px;margin-bottom: 11px;">#show default values (check resource allocation)</li><li style="margin-left: 28px;margin-bottom: 11px;">#show mac (Check if the MAC address learning rate is increasing significantly)</li><li style="margin-left: 28px;margin-bottom: 11px;">#show arp resource (Confirm if the ARP table is becoming full or learning a large number of entries)</li><li style="margin-left: 28px;margin-bottom: 11px;">#show ip route (Use the show ip route command to check for missing or depleted routes, which may indicate excessive resource consumption, particularly CPU utilization) </li><li style="margin-left: 28px;margin-bottom: 11px;">#de (Run three times, examine “NA_Learn” counter in the de output. If it increments quickly, this indicates significant MAC movement and a potential layer two loop)</li></ul> <div style="margin-left: 28px;margin-bottom: 11px;"> If running multicast you can also check:</div> <ul style="margin-bottom: 11px;"><li style="margin-left: 28px;margin-bottom: 11px;">#show ip pim resource (look for any "get-failed" values)</li><li style="margin-left: 28px;margin-bottom: 11px;">#show ip multicast resource (look for any "get-failed" values) </li></ul> <div style="margin-left: 28px;margin-bottom: 11px;"> </div> <h1 style="margin-top: 24px;margin-bottom: 5px;"> Depletion of Hardware Resources:</h1> Check if hardware resources are exhausted, causing the CPU to take over forwarding tasks. Use <code style="">#show default values</code> to check resource allocation: <img alt="User-added image" height="482" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000026Fp&feoid=00N50000002Cf3M&refid=0EMPH00000HNUrd" width="500"></img> <ul><li>Default: The amount of resources allocated with no custom configuration.</li><li>Maximum: The largest value allowed by the CLI via system-max commands.</li><li>Current: The current system allocation.</li></ul> <h1 style="margin-top: 24px;margin-bottom: 5px;">Layer 2 Loop or STP Instability:</h1> Use the following commands to check for port utilization and potential loops: <ul style="margin-bottom: 11px;"><li style="margin-left: 28px;margin-bottom: 11px;">#show statistics</li><li style="margin-left: 28px;margin-bottom: 11px;">#clear statistics</li><li style="margin-left: 28px;margin-bottom: 11px;">#sh stat (Run three times)</li><li style="margin-left: 28px;margin-bottom: 11px;">#show mac statistics</li><li style="margin-left: 28px;margin-bottom: 11px;">#show int | inc line | util</li><li style="margin-left: 28px;margin-bottom: 11px;">#show log</li><li style="margin-left: 28px;margin-bottom: 11px;">#dm statistics</li></ul> Look for ports with abnormally high packet counts or utilization compared to others. Examine the NA_Learn counter in the de output for significant MAC movement, indicating a potential layer two loop. <h1 style="margin-top: 24px;margin-bottom: 5px;">Mac movement</h1> Examine “NA_Learn” counter in the de output. If it increments quickly, this indicates significant MAC movement and a potential layer two loop. de (3 times with a ‘show clock’ before each entry to gauge timing) <img alt="User-added image" height="250" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000026Fp&feoid=00N50000002Cf3M&refid=0EMPH00000HNUwT" width="500"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000026Fp&feoid=00N50000002Cf3M&refid=0EMPH00000KtwXl"></img> <h1 style="margin-top: 24px;margin-bottom: 5px;">Common Services: SFLOW and SNMP</h1> The two services most likely to cause CPU problems are sFlow and SNMP. If these services are configured, follow these procedures: SFLOW: Disable sFlow globally to quickly confirm or deny the problem: #no sflow enable If disabling sFlow is not desirable, increase the sampling rate or set it to default to reduce CPU utilization: (config)#sflow sample 32768 (config)#int eth 1/1/11 (config-if-e1000-1/1/11)#no sflow sample 512 SNMP: Bulk gets and bulk walks can consume significant resources. Understand SNMP's role on the network: <ul style="margin-bottom: 11px;"><li style="margin-left: 28px;margin-bottom: 11px;">How many SNMP servers are there?</li><li style="margin-left: 28px;margin-bottom: 11px;">What are they requesting/polling?</li><li style="margin-left: 28px;margin-bottom: 11px;">Which MIBs/OIDs are being used?</li><li style="margin-left: 28px;margin-bottom: 11px;">How often does polling occur?</li></ul> Note: As a part of troubleshooting , you can disable SNMP if possible and see if system stabilizes in 2-3 minutes. Disabling SNMP can cause issues with the network monitoring tools, you can perform on a Maintenance window. Then you can enable again. Packets It is useful to gauge how many packets the CPU is processing, and in which direction (transmit vs. receive). This can be done with the de command, where “CPU_R” is the number of receive packets and “SNOOP_TX” is the number of transmit packets. #show ip traffic (It will show arp, icmp, udp, and tcp sent/recv/drop traffic) #de (3 times with a show clock before each entry to gauge timing) <img alt="User-added image" height="250" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000026Fp&feoid=00N50000002Cf3M&refid=0EMPH00000HNUzh" width="500"></img> The "de" command shows the number of packets reaching the CPU. Users need to run it multiple times and calculate the difference to determine the current rate. CPU_R: the number of packets that reach the CPU SNOOP_TX: the number of packet sent or forwarded by the CPU New Addr: New L2 MAC events of this unit NA Learn: L2 MAC learning of the entire units. <h1 style="margin-top: 24px;margin-bottom: 5px;">Resolution</h1> Based on the results of the steps outlined above, review the recommended actions and assess whether any additional steps are needed before proceeding with the resolution. If the previous steps do not lead to identifying the root cause, please reach out to Ruckus Support for further assistance with troubleshooting.

This article provides a step-by-step guide to identify and resolve high CPU utilization issues on RUCKUS ICX switches

2025-06-04T13:20:42-0700 2025-06-05T06:00:06-0700 https://support.ruckuswireless.com/articles/000014699 2025-05-29T12:20:30-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5764 knowledge_article_5764 2025-05-29T12:18:42-0700 000014699 Validated (External) Public Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches How to troubleshoot SNMP communication issues on RUCKUS ICX switches on 10.0.10 family software? <ul></ul> <ul><li> Check and Correct SNMP Configuration Ensure the correct community strings, SNMP versions, and trap destinations are configured. </li><li> Network Verification: Ensure there are no connectivity issues, and UDP ports 161 and 162 are open. </li><li> Review Documentation: Refer to the <a href="https://support.ruckuswireless.com" target="_new">RUCKUS Support Portal</a> for known issues and additional guidance. </li><li> Contact RUCKUS Support: If the issue persists, contact RUCKUS Support with the information gathered. </li></ul>

Simple Network Management Protocol (SNMP) is a key tool for managing and monitoring network devices like routers and switches. It helps administrators collect performance data and monitor device health using Management Information Bases (MIBs) on 10.0.10 family software. SNMP Versions: SNMP v1: Basic features, limited security. SNMP v2: Improved performance with bulk data transfers but weak security. SNMP v3: Adds encryption, authentication, and role-based access control for enhanced security. Uses of SNMP: Device Monitoring: Track device health and performance. Configuration Management: Remotely update settings and firmware. Alerts (Traps): Receive real-time notifications for critical events like failures or warnings. SNMP is essential for efficient network management, with SNMPv3 offering a secure, modern solution.

2025-05-29T12:20:30-0700 2025-06-02T18:00:07-0700 https://support.ruckuswireless.com/articles/000014817 2025-05-12T10:07:59-0700 monthly 0.8 admin,premium knowledge_article_5776 knowledge_article_5776 2025-05-12T10:07:59-0700 000014817 Validated (External) Premium Ruckus cloud switch;Ruckus cloud wifi Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Cloud Switch, Ruckus Cloud WiFi Is the Single Sign-On (SSO) admin login option supported for MSP-EC tenants with a Trial license or professional subscription? Admin SSO is not supported for MSP-EC, as this is by design. For a potential feature enhancement, Feature Request FR-8188 has been opened. We recommend discussing this with your RUCKUS System Engineer or Authorized Partner, who can engage with the Product Line Management team for further consideration.

This article discusses the availability and support for Single Sign-On (SSO) admin login functionality within MSP-EC environments. It outlines the specific scenarios in which the SSO admin login option is applicable and the requirements for enabling this feature.

2025-05-12T10:07:59-0700 2025-05-30T10:00:12-0700 https://support.ruckuswireless.com/articles/000014827 2025-05-21T02:09:05-0700 monthly 0.8 admin knowledge_article_5772 knowledge_article_5772 2025-05-20T05:13:47-0700 000014827 Validated (External) Internal Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed How to create a new admin user? <ul><li>To Create a new Admin user, Navigate to Admin & Services>> System>> Roles. Create a new role as shown below:</li></ul> <img alt="User-added image" height="275" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000022nJ&feoid=00N50000002Cf3M&refid=0EMPH00000KQze8" width="500"></img> <ul><li>Once the Role is created we can navigate to Admin & Services>> System>> User. Create a New User. Make sure to select the Role which was created.</li></ul> <img alt="User-added image" height="167" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000022nJ&feoid=00N50000002Cf3M&refid=0EMPH00000KR3fq" width="500"></img>

In this article we will learn about creating a Admin User.

2025-05-21T02:09:05-0700 2025-05-30T10:00:10-0700 https://support.ruckuswireless.com/articles/000008833 2025-05-21T13:59:45-0700 monthly 0.8 admin,premium knowledge_article_3578 knowledge_article_3578 2019-02-05T16:08:19-0800 000008833 Validated (External) Premium Ruckus cloud wifi;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, Ruckus Cloud WiFi, SmartCell Gateway How can I convert SmartZone APs to Ruckus Cloud Wi-Fi?

The following KB will walk thru the steps necessary to convert SmartZone controller managed APs to Ruckus Cloud Wi-Fi.

2025-05-21T13:59:45-0700 2025-05-30T10:00:10-0700 https://support.ruckuswireless.com/articles/000014821 2025-05-23T01:39:37-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5769 knowledge_article_5769 2025-05-23T01:39:37-0700 000014821 Validated (External) Public Sz144;Sz300;Virtual smartcell gateway;Sz100;Ruckus wan gateway rwg;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Installation Configuration, Installation, SZ144, SZ300, virtual SmartCell Gateway, SZ100, RUCKUS WAN Gateway RWG How can I configure SoftGRE tunnels between RGNets rXg and RUCKUS SmartZone? Step 1: Prerequisites <ol><li>Ensure that the IP addresses for the SmartZone, AP, and rXg are all in the same subnet </li><li>Verify that the subnet is tied to an IP group and policy called Management </li><li>Confirm that the AP has been discovered by the SmartZone </li></ol> Step 2: Configure SmartZone <ol><li>Log in to the SmartZone GUI.</li><li>Navigate to Services > Tunnels and Ports.</li><li>Select Soft GRE and click Create Enter the required details for the SoftGRE profile.</li></ol> <img alt="User-added image" height="276" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000021OD&feoid=00N50000002Cf3M&refid=0EMPH00000KFavi" width="500"></img> Step 3: Configure ZONE: <ol><li>Navigate to Access Points > Choose the AP zone where you have the VoIP WLANs</li><li> Click edit (pencil icon) > In the ensuing screen scroll down to "AP GRE Tunnel options" </li><li>Click the "Select" button highlighted below > Choose the Soft GRE profile you had created from the "Available profiles" and move it to the "Selected profiles" section and click OK</li><li>Click on on the AP zone page as well.</li></ol> <div><img alt="User-added image" src="https://support.ruckuswireless.com/article_images/kA2PH00000100Dx0AI?eid=ka2PH000000158v&feoid=00N50000002Cf3M&refid=0EMPH000009ia94"></img><img alt="User-added image" src="https://support.ruckuswireless.com/article_images/kA2PH00000100Dx0AI?eid=ka2PH000000158v&feoid=00N50000002Cf3M&refid=0EMPH000009icpB"></img></div> Step 4: Configure rXg WLAN: <ol><li>Go to Network > Wireless > WLANs </li><li>Now Navigate to Wireless LAN > select the Wireless LAN from the Zone where you have done the Soft GRE mapping in the AP zone</li><li>Choose the VoIP WLAN > Click "Configure" button</li><li> Scroll down to "Data Plane options" and enable tunnel WLAN option</li><li>Click on the dropdown for GRE tunnel profile , here you can choose the Soft GRE profile you have already created > save settings</li></ol> <div><img alt="User-added image" src="https://support.ruckuswireless.com/article_images/kA2PH00000100Dx0AI?eid=ka2PH000000158v&feoid=00N50000002Cf3M&refid=0EMPH000009icUE"></img></div> Step 5: rXg WLAN Configuration Network >> Wireless >> WLANs The modifications in the WLAN profile are quite simple. On an existing WLAN, you can check the box for tunnel, set the tunnel type to SoftGRE, and then add the IP address for the interface on the rXg that will be the endpoint for the tunnel. <img alt="User-added image" height="342" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000021OD&feoid=00N50000002Cf3M&refid=0EMPH00000KFeWH" width="500"></img> <ol><li>The Tunnel checkbox instructs access points to build a tunnel to the controller instead of locally bridging the client traffic. In the case of Ruckus, this checkbox will create a SoftGRE tunnel between the APs and the rXg. This capability does require that the Ruckus controller has an appropriate SoftGRE license.</li><li>The GRE Tunnel Type field allows you to select between RuckusGRE and SoftGRE. RuckusGRE is for use with the Ruckus virtual data plane. SoftGRE allows for tunnel creation to the rXg as the endpoint.</li><li>The GRE Tunnel GW IP should be the IP address of the interface on the rXg that the tunnel will connect to.</li></ol> <h4 id="rxg-pseudo-interfaces">Step 5: rXg Pseudo Interfaces</h4> Network >> LAN >> Pseudo Interfaces <img alt="User-added image" height="296" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000021OD&feoid=00N50000002Cf3M&refid=0EMPH00000KFefy" width="500"></img> <ol><li>Name for the SoftGRE tunnel interface.</li><li>Select an interface type of SoftGRE.</li><li>Select the interface to be used for untagged traffic.</li><li>Select the VLANs that will be allowed over the SoftGRE tunnel.</li><li>Select the policy that contains the APs that will establish a tunnel.</li></ol> .

This article provides a detailed guide on configuring SoftGRE tunnels between RG Nets rXg and RUCKUS SmartZone. SoftGRE tunnels facilitate efficient traffic management by encapsulating data packets within GRE tunnels.

2025-05-23T01:39:37-0700 2025-05-30T10:00:09-0700 https://support.ruckuswireless.com/articles/000014616 2025-05-26T08:48:30-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5646 knowledge_article_5646 2024-12-12T13:09:22-0800 000014616 Validated (External) Public Ruckus icx switches;Brocade eos products;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor <h1>What is a DOA (Dead on Arrival)?</h1> <ul><li style="margin-left: 8px;">DOA (Dead on Arrival) is a situation where a customer purchases new product that arrives defective or non-functional out of the box and contacts us within 30 days of shipment.</li><li style="margin-left: 8px;">The replacement for DOA is always shipped out of Ruckus Production warehouse or new warehouse locations.</li></ul> How does Ruckus determine eligibility for a DOA (Dead on Arrival) replacement? <ul><li style="margin-left: 56px;">Verify the ship date of the asset in SFDC (Salesforce)</li><li style="margin-left: 56px;">Request the Purchase Order (PO) if the asset is not found in SFDC.</li></ul> Conditions under which Ruckus provides a New Replacement for Faulty Equipment <ul><li style="margin-left: 8px;">All replacement units processed through SAP are brand new and are shipped directly from the Ruckus production unit</li></ul> <ul><li style="margin-left: 8px;">Wired FSLs with New Stock: For Wired Forward Stocking Locations (FSLs), the stock is always maintained as new. This applies to specific countries, including Brazil, Indonesia, India, Philippines, and Vietnam.</li></ul> <ul><li style="margin-bottom: 11px;margin-left: 8px;">If a customer receives a replacement unit that is faulty or arrives in poor condition twice. Involve RMA Leadership for approval to process a new unit.</li></ul>

What is a DOA (Dead on Arrival) replacement process

2025-05-26T08:48:30-0700 2025-05-30T10:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA2PH000001WXEn0AO?attachment_index=0 2025-05-30T10:00:08-0700 monthly admin,premium,warranty,guest knowledge_article_5646 knowledge_article_5646_attachment_1 DOA.docx 15482.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000001749 2025-05-28T00:07:34-0700 monthly 0.8 admin,premium knowledge_article_2390 knowledge_article_2390 2013-03-05T22:08:03-0800 000001749 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Redirecting to Ruckus Guest access login while Launching Web browser however no Guess access login? captive portal clients not loading the page Why clients are not able to redirect to captive portal? Hot to troubleshoot when cli <div>Possible issues: </div> <div>1. The client is in an Isolated VLAN with no Internet connection: The AP does not see any HTTP GET from the client. If the VLAN is in an isolated network this may be a DNS/routing issue where the client is not able to resolve the name of the site you have entered in the browser. If the client is not able to resolve the web site name it will not establish a TCP session and issue a HTTP:GET for the site, so the client will not get re-directed.</div> <div> </div> <div>Test: </div> <div>In an isolated network try to open a web site within the VLAN. This can be any system running web services. If there are no other system to check again try connecting to the ZD itself. Try to have the client go to: http://[ZD_IP]/activate This will trigger the redirect to the Guest login page.</div> <div> </div> <div> </div> <div>2. The VLAN does have internet connection but uses static IP: The client needs to have the proper IP information to be able to connect to the internet. It must have a valid IP, Gateway and DNS setting. The statically configured DNS server setting on the client has to be able to resolve the website the client is trying to open. If it does the client should establish a TCP connection and issue a HTTP:GET which will trigger the login re-direct.</div> <div> </div> <div>Test: Check to make sure the client has the proper IP/subnet/Gateway/DNS setting for the subnet the client connected to. Ping the client itself, ping the Gateway, ping the DNS server IP, ping "www.google.com," if all those gets a response, it should work.</div> <div> 3. The client are not able to get IP because the DHCP server ran out of IP to hand out: If a client is not able to get a valid IP, it will not be able to do a DNS lookup for any website and without any name resolution the client will not initiate an HTTP:GET to any web site. Since the system depends on the HTTP:GET to re-direct the client will not be redirected. Check your DHCP server and see if most if not all the IP addresses are already assigned. For example if you use a class C subnet like most home router where the DHCP server will hand out IP like 192.168.1.x, and you see the some of your clients are getting IP in the 192.168.250 or higher, then you may have ran out our IP. Consider doing one of the following: 1. Increasing the IP pool if possible. 2. decreasing the lease time to re-use the IPs. 3. Put in a PSK key to prevent casual device from unnecessarily taking up an IP. 4. No DNS or incorrect DNS server: If there is an internal DNS server it may be resolving a public website, so the client is not able to initiate an HTTP:GET. If you can ping 8.8.8.8 for example but not www.google.com then it's a DNS issue. Try using an external DNS server like Google's 8.8.8.8, as the third if not the second DNS server option in the DHCP server. 5. The client is trying to connect to a secure site prior to the re-direct: Initial re-direction of secure website is configurable in ZD CLI and it may be disabled. Users who have a secure website as their home page, (https://www.bankofamerica.com/ ) for example, will not get re-directed when they first connect their client if that option is disabled. A good test/workaround is to have them connect to a new unsecured website like http://neverssl.com If redirection from secure website was disabled, it can be enabled using WLAN command 'https-redirection' </div> <div>The final solution is to put the Guest network on a VLAN that has full internet access so client can get an IP, look up an unsecured website, get the website name resolved properly.</div> <div> </div>

*Wlan and VLAN are configured correctly *Open Isolated Wlan *Switch port is configured correctly with the appropriate vlan for the guest wlan *Client has a valid (statically assigned) IP for the subnet *Client can see the wlan and associated and is in Unauthorzed state *Opening a browser does not get the client to be re-directed to the guest login page

2025-05-28T00:07:34-0700 2025-05-30T10:00:07-0700 https://support.ruckuswireless.com/articles/000009699 2025-05-29T03:25:33-0700 monthly 0.8 admin,premium knowledge_article_3951 knowledge_article_3951 2019-10-14T03:40:10-0700 000009699 Validated (External) Premium Virtual smartcell gateway Configuration;Firmware;System network management Configuration, Firmware, System Network Management, virtual SmartCell Gateway Will vSZ work in Proxmox from Hyper-V vSZ-E and vSZ-H have started supporting the Proxmox hypervisor since the 7.1.0.0.586 firmware release. However, till 6.1.2.0.487, Proxmonx is not supported by the vSZ-Highscale/Essential. <img alt="User-added image" height="120" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000024XN&feoid=00N50000002Cf3M&refid=0EMPH00000KmHSs" width="500"></img> Although we don't have any updates and ETA for the vSZ-D and its compatibility with Proxmox.

Customer wanted to know if vSZ will work in Proxmox from Hyper-V

2025-05-29T03:25:33-0700 2025-05-30T10:00:06-0700 https://support.ruckuswireless.com/articles/000014800 2025-05-06T01:28:31-0700 monthly 0.8 admin,premium knowledge_article_5762 knowledge_article_5762 2025-05-06T01:28:31-0700 000014800 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Security Security, Unleashed <ul><li>How to disable TLS 1 in an unleashed setup</li><li>How to disable TLS 1.1 in an unleashed setup</li><li>How to enable TLS 1.2 in an unleashed setup </li></ul> The command to disable TLS 1.1 was added from 200.11. For version prior 200.11 option is available only to disable TLS 1.0 Note: Below commands are being run on version 200.17 This step would apply only to Master AP . Go to debug mode and disable TLS 1 and TLS 1.1 using command “no support-tls 1.0-1.1” as shown in below picture. Executing this command will reboot all APs in the network when TLS is changed from the master AP. In the Master AP: ruckus# debug ruckus (debug) # no support-tls 1.0-1.1 <img height="406" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001xXV&feoid=00N50000002Cf3M&refid=0EMPH00000JtbGv" width="898"></img> From the above output, we can see that the TLS config has been pushed to all the APs in the Cluster. Then verify the TLS support using command “show tls”. Once TLS 1 and 1.1 is disabled the output would show TLS 1 and 1.1 as not supported as shown in below picture. <img alt="User-added image" height="63" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001xXV&feoid=00N50000002Cf3M&refid=0EMPH00000JjThI" width="500"></img> On the a Member AP : Verify TLS version using "get tls-version" as shown in below picture. <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001xXV&feoid=00N50000002Cf3M&refid=0EMPH00000Jq6so"></img> Once the TLS is disabled from Master, the same settings will reflect in Members as well. But if you want to configure manually on Member APs, use the below command: <img alt="User-added image" height="121" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001xXV&feoid=00N50000002Cf3M&refid=0EMPH00000JmVZd" width="500"></img>

Customers wanted to disable TLS 1.0 and 1.1 in favor of enabling TLS 1.2 due to below key reasons: Better Security: TLS 1.2 is more secure and protects against known vulnerabilities. Compliance: Many regulations require TLS 1.2 for secure communications. Improved Performance: TLS 1.2 is faster and more efficient. Future-Proofing: Ensures compatibility with future systems and applications.

2025-05-06T01:28:31-0700 2025-05-07T10:00:06-0700 https://support.ruckuswireless.com/articles/000014804 2025-04-30T23:25:57-0700 monthly 0.8 admin,premium knowledge_article_5760 knowledge_article_5760 2025-04-30T23:25:57-0700 000014804 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 There is no public API call to check directly what firmware version is running on a single AccessPoint. The only API we have is to check which firmware version is set for the zone the AccessPoint is in.

Is there a public API call to check on which firmware version individual APs are on? (not zone based)

2025-04-30T23:25:57-0700 2025-05-03T18:00:07-0700 https://support.ruckuswireless.com/articles/000014805 2025-05-01T00:16:07-0700 monthly 0.8 admin,premium knowledge_article_5759 knowledge_article_5759 2025-05-01T00:16:07-0700 000014805 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 At this time, it is not possible to modify or extend the audit log retention period in versions 6.1.2 and 7.x. However, this limitation may be addressed in a future release.

Check if there is a way to extend / modify the retention period.

2025-05-01T00:16:07-0700 2025-05-03T18:00:06-0700 https://support.ruckuswireless.com/articles/000014799 2025-04-28T23:18:55-0700 monthly 0.8 admin,premium knowledge_article_5757 knowledge_article_5757 2025-04-28T23:18:55-0700 000014799 Validated (External) Premium Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi How can an MSP add a DPSK Manager who can manage the DPSK services of MSP-EC (Enterprise Customer) accounts, given that assigning the role at the MSP level only provides access to the MSP’s own DPSK services and not to those of customer accounts? The current behavior of the DPSK Manager role is based on design intent, aligned with specific platform constraints outlined below: DPSK Manager can only be configured for self-administration within the MSP’s own account. It is not possible to assign the DPSK Manager role during the creation of an MSP-EC (Enterprise Customer) tenant. When managing delegation assignments, the following behaviors apply to users with the DPSK Manager role: The administrator assigned the DPSK Manager role will appear under the Delegation section, but with a disabled checkbox, meaning they cannot be selected for delegation to an MSP-EC tenant. The role dropdown menu will not be available for DPSK Manager users; instead, their role will be displayed as static text labeled "DPSK Manager". Any modifications to this design would require engagement with Product Line Management through a formal Feature Request process, initiated via the local Systems Engineer (SE) team.

While it is possible to add a DPSK Manager role at the MSP account level, the assigned user can only view and manage the DPSK services of the MSP's own account — not those of the underlying MSP-EC (Enterprise Customer) tenants. To enable DPSK management for customer accounts, alternative approaches are needed, such as assigning roles individually within each MSP-EC or using delegated administration features if supported. This article explores the limitations and available options for extending DPSK management access to MSP customer environments.

2025-04-28T23:18:55-0700 2025-04-30T02:00:07-0700 https://support.ruckuswireless.com/articles/000014791 2025-04-23T19:31:57-0700 monthly 0.8 admin,premium knowledge_article_5755 knowledge_article_5755 2025-04-23T19:29:42-0700 000014791 Validated (External) Premium Ruckus icx switches;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, Ruckus ICX Switches, SmartCell Gateway How to use import batch provisioning for ICX? <div class="O1" style="text-align: left;">STEPS to import batch provisioning (ICX):</div> 1. Create a CSV file and input four fields: Serial number, Mac address, Switch Group ID and Switch Group name (attached sample) <img alt="User-added image" height="50" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001wA1&feoid=00N50000002Cf3M&refid=0EMPH00000JPkXl" width="500"></img> <div class="O1" style="text-align: left;"> 2. Select More and click Import Batch Provisioning Switches</div> <div class="O1" style="text-align: left;"><img alt="User-added image" height="395" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001wA1&feoid=00N50000002Cf3M&refid=0EMPH00000JPjwg" width="500"></img></div> <div class="O1" style="text-align: left;"> 3. Upload the CSV file and click OK</div> <div class="O1" style="text-align: left;"> 4. The Import Result displays the success switch(es) <img alt="User-added image" height="218" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001wA1&feoid=00N50000002Cf3M&refid=0EMPH00000JPRGf" width="500"></img></div> <div class="O1" style="text-align: left;">5. The provisioning switch is allocated to switch group and that the registration state is Regisration_pending </div> Note: <img alt="User-added image" height="159" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001wA1&feoid=00N50000002Cf3M&refid=0EMPH00000JJdig" width="500"></img> Limitation: The number of switch for pre-provisioning in the CSV file is restricted to 301 rows and a size not exceeding 40 KB.

2025-04-23T19:31:57-0700 2025-04-24T10:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA2PH000002Azlp0AC?attachment_index=0 2025-04-24T10:00:06-0700 monthly admin,premium knowledge_article_5755 knowledge_article_5755_attachment_1 pre-provision.csv 61.0 text/csv https://support.ruckuswireless.com/articles/000014774 2025-04-23T02:18:57-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5752 knowledge_article_5752 2025-04-23T01:58:21-0700 000014774 Validated (External) Public Ruckus cloud wifi Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Cloud WiFi How to address if there are any difficulties in deleting an Adaptive policy profile in RuckusOne? Under Network Control->Policies & Profiles-> Adaptive Policy, the customer has created a profile in RADIUS Attributes Groups and mapped it under a newly created Adaptive policy and Adaptive policy Sets. Identified that the customer had mapped the policy under a DPSK profile, which did not allow deletion of the Adaptive policy. <img alt="User-added image" height="184" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001w1x&feoid=00N50000002Cf3M&refid=0EMPH00000J1e5K" width="500"></img> Edit->deselect the Created/mapped Adaptive policy set <img alt="User-added image" height="502" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001w1x&feoid=00N50000002Cf3M&refid=0EMPH00000J1WZD" width="500"></img> After deselecting the Adaptive policy profile from the DPSK profile, the Adaptive policy profile set can be deleted.

This article provides details on deleting an Adaptive Policy Profile created on RuckusOne.

2025-04-23T02:18:57-0700 2025-04-23T14:00:06-0700 https://support.ruckuswireless.com/articles/000014475 2025-04-15T18:04:29-0700 monthly 0.8 admin,premium knowledge_article_5748 knowledge_article_5748 2024-09-06T12:55:30-0700 000014475 Validated (External) Premium Ruckus icx switches Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches How do I recover PoE on a switch that is displaying "PoE Severe Error: Lost communication link with the PoE controller on unit 1 in slot 1."? The best resolution for this issue is to ensure the power source for the switch has sufficient overvoltage/surge protection. The loss of power to the PoE controller as a result of overvoltage events is intentional and designed to prevent damage to components.

ICX8200 loses PoE functionality and multiple errors displayed in logs.

2025-04-15T18:04:29-0700 2025-04-16T02:00:06-0700 https://support.ruckuswireless.com/articles/000014516 2025-04-11T07:30:06-0700 monthly 0.8 admin,premium knowledge_article_5744 knowledge_article_5744 2024-12-02T16:26:48-0800 000014516 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches <ul><li>How do I configure an extended Access Control List (ACL) on a RUCKUS ICX switch to block specific IP traffic while allowing all other traffic?</li><li>How does modifying the ACL to permit DHCP traffic ensure network functionality while maintaining ACLs are sets of rules applied to network devices to filter traffic based on criteria such as IP addresses, protocols, and ports. They can be used to permit or deny traffic, enhancing network security and performance. Types of ACLs: <ol><li> Standard ACLs: <ul><li>Filter traffic based on source IP addresses.</li></ul> </li><li> Extended ACLs: <ul><li>Provide more granular control by filtering based on source and destination IP addresses, protocols, and ports.</li></ul> </li></ol> Example for Standard ACLs: Device(config)#ip access-list standard 11 Device(config-ext-ipacl-BLOCK_VLAN_20)#sequence 10 deny 192.168.0.1 log Device(config-ext-ipacl-BLOCK_VLAN_20)#sequence 20 permit any log Device(config-ext-ipacl-BLOCK_VLAN_20)#exit Device(config)#interface vlan 20 Device(config-vlan-20)#ip access-group 11 in Device(config-vlan-20)#exit Example for Extended ACLs: Understanding DHCP Traffic: DHCP (Dynamic Host Configuration Protocol) uses the following ports: <ul><li>UDP Port 67: Used by the DHCP server to receive client requests.</li><li>UDP Port 68: Used by the DHCP client to receive server responses.</li></ul> Solution: Allowing DHCP Traffic in the ACL: To resolve the issue, the ACL must be modified to allow DHCP traffic. This involves permitting UDP traffic on ports 67 and 68. <h3>Command Line Instructions:</h3> <ol><li> Access the Switch Configuration: <ul><li>Enter global configuration mode.</li></ul> </li><li> Modify the ACL: <ul><li>Identify the ACL applied to the VLAN.</li><li>Add rules to permit UDP traffic on ports 67 and 68.</li></ul> </li><li> Apply the Modified ACL: <ul><li>Ensure the updated ACL is applied to the VLAN interface.</li></ul> </li></ol> <h3>Example Configuration:</h3> Assuming the ACL is named BLOCK_VLAN_20, the following commands will allow DHCP traffic: Device(config)#ip access-list extended BLOCK_VLAN_20 Device(config-ext-ipacl-BLOCK_VLAN_20)#sequence 251 permit udp any any eq 67 Device(config-ext-ipacl-BLOCK_VLAN_20)#sequence 252 permit udp any any eq 68 Device(config-ext-ipacl-BLOCK_VLAN_20)#exit Device(config)#interface vlan 20 Device(config-vlan-20)#ip access-group BLOCK_VLAN_20 in Device(config-vlan-20)#exit Conclusion: Access Control Lists are powerful tools for network security and traffic management. By understanding and effectively implementing ACLs with the right commands, network administrators can enhance their network's security posture and ensure efficient traffic flow.

The article discusses about Access Control Lists (ACLs) are essential network security tools that filter traffic based on predefined rules, such as IP addresses, protocols, and ports. They enhance security by permitting or denying traffic, optimize network performance, and enforce organizational policies. Proper configuration and management of ACLs are crucial to prevent unauthorized access and ensure efficient network operations.

2025-04-11T07:30:06-0700 2025-04-11T18:00:07-0700 https://support.ruckuswireless.com/articles/000014768 2025-04-09T11:29:21-0700 monthly 0.8 admin,premium knowledge_article_5741 knowledge_article_5741 2025-04-09T11:29:21-0700 000014768 Validated (External) Premium Ruckus cloud switch;Icx 7550;Icx 7650;Icx 7150;Icx 7750;Icx 8200;RUCKUS ICX 7550 Campus Switches ;RUCKUS ICX 7650 Campus Switches;RUCKUS ICX 7150 Campus Switches;RUCKUS ICX 7750 Campus Switches;RUCKUS ICX 8200 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Ruckus Cloud Switch, ICX 7550, ICX 7650, ICX 7150, ICX 7750, ICX 8200 Why is port-level configuration not applied to ports through the "Configuration Profiles" option? This is by design: if an ICX device joins R1 for the first time with a saved configuration (using the "write memory" command) from the command line interface (CLI), any port-related configuration created from "Configuration Profiles" will not be applied to the respective ports. The ICX must join R1 without a saved configuration for the port-level configuration from the "Configuration Profiles" option to be applied.

When creating Configuration Profiles from Wired Network Profiles, the required ports do not receive the configuration even though it is set in the profile. This is by design: if an ICX device joins R1 with a saved configuration (using the "write memory" command) from the command line interface (CLI), any port-related configuration created from "Configuration Profiles" will not be applied to the respective ports. The ICX must join R1 without a saved configuration for the ports to receive the configuration from the "Configuration Profiles" option.

2025-04-09T11:29:21-0700 2025-04-11T10:00:07-0700 https://support.ruckuswireless.com/articles/000014756 2025-04-01T11:20:00-0700 monthly 0.8 admin,premium knowledge_article_5739 knowledge_article_5739 2025-04-01T11:20:00-0700 000014756 Validated (External) Premium Ruckus analytics;Ruckus icx switches;Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus Analytics, Ruckus ICX Switches, SmartCell Gateway Why RAI shows no data for a switch only RUCKUS VSZ network? Is an Access Point mandatory to bring up a VSZ on RAI? An Access Point and a license mapping on RAI is mandatory for the RUCKUS Virtual Smart Zone controller to create and sync data using streaming profiles. If the customer is ICX only, he/she can use the work around mentioned above to accomplish this. Supporting Documentation: In a switch-only deployment, you must configure an AP MAC address in the SZ staging zone. It does not need to be a physical AP; configuration in the staging zone is sufficient. Ref: <a href="https://docs.cloud.ruckuswireless.com/RUCKUS-AI/userguide/GUID-2D03B1FB-BDFA-4F15-8923-4EDFDCD5B5ED.html?hl=switch%2Clicense" target="_blank">RUCKUS AI User Guide</a> - Page - Managing Licenses and Assigning APs

Some customers use the Smart Zone to manager ICX switches. They may not have any RUCKUS Access Points. This KB explains on how to integrate the RUCKUS Virtual Smart Zone with RUCKUS AI (https://ruckus.cloud/ai) for this special use case.

2025-04-01T11:20:00-0700 2025-04-08T00:00:06-0700 https://support.ruckuswireless.com/articles/000014751 2025-03-31T02:28:49-0700 monthly 0.8 admin,premium knowledge_article_5738 knowledge_article_5738 2025-03-31T02:28:49-0700 000014751 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration Performance, Configuration, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway Why are my Access Points sending arping every second for the gateway ? Found that customer was using Mesh on few of the APs but had enabled it on all APs and when the mesh is enabled, there is a timer which will trigger the gateway detection every second. As per the logic in the meshd it is defined as "WIREDM_GW_PING_PERIOD is 1." We could also check this from any mesh APs using below command. rkscli: get meshcfg Gateway Detection Timeout: 30 Gateway Ping Period: 1 Gateway Ping Type: Unicast Once we disabled the mesh from few of the APs it started sending arping 30 seconds. Hence we created an AP CLI script with below parameter and pushed to all AP models that were not part of Mesh and disabled it. Post which the arping was normal to 30 seconds. fw_version=6.1.2.0.2216 model=T350C,T310D,T310C,R710,R610,R510,H510,H550,H320,H350 set mesh dormant 249 RuckusWi_04:43:30 02:e0:52:e4:d6:c8 ARP Who has 10.177.82.1? Tell 10.177.82.79 Mar 28, 2025 21:30:22.626029000 India Standard Time 42 10.448028 250 02:e0:52:e4:d6:c8 RuckusWi_04:43:30 ARP 10.177.82.1 is at 02:e0:52:e4:d6:c8 Mar 28, 2025 21:30:22.634485000 India Standard Time 60 10.456484 999 RuckusWi_04:43:30 02:e0:52:e4:d6:c8 ARP Who has 10.177.82.1? Tell 10.177.82.79 Mar 28, 2025 21:30:52.671666000 India Standard Time 42 40.493665 1001 02:e0:52:e4:d6:c8 RuckusWi_04:43:30 ARP 10.177.82.1 is at 02:e0:52:e4:d6:c8 Mar 28, 2025 21:30:52.677549000 India Standard Time 60 40.499548 <img alt="User-added image" height="94" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001qW1&feoid=00N50000002Cf3M&refid=0EMPH00000IYPuT" width="695"></img>

Customer in his setup could see multiple ARP packet from all the APs every second doing arping (gw-ping) and causing ARP flood.

2025-03-31T02:28:49-0700 2025-04-01T12:00:07-0700 https://support.ruckuswireless.com/articles/000014748 2025-03-27T13:48:52-0700 monthly 0.8 admin,premium knowledge_article_5735 knowledge_article_5735 2025-03-27T13:48:52-0700 000014748 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting Configuration, Troubleshooting, Cloudpath <ul><li>Why client devices are receiving an error "The maximum certificate count has been exceeded" while enrolling ?</li></ul> <ul><li>In the Workflow, check if the customer has a step of “Prompt the user to remove existing certificates.”</li><li>Edit that step by clicking on the pencil icon.</li></ul> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001pOf&feoid=00N50000002Cf3M&refid=0EMPH00000IThvF" style="width: 943px; height: 133px;"></img> <ul><li>Currently, the maximum number of certificates allowed is set to 3. This's the reason for the error.</li><li>To increase this, maximize the “Maximum Allowed Certificates” to the required count (by default, it is set to 3)</li></ul> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001pOf&feoid=00N50000002Cf3M&refid=0EMPH00000IThvG" style="width: 597px; height: 324px;"></img> Note: Republish the workflow.

Clients are unable to enroll in Cloudpath due to the error “The maximum certificate count has been exceeded."

2025-03-27T13:48:52-0700 2025-03-31T04:00:07-0700 https://support.ruckuswireless.com/articles/000012195 2025-03-26T15:05:08-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5495 knowledge_article_5495 2022-04-05T14:07:40-0700 000012195 Validated (External) Public Vriot Support license activation;Registration Support License Activation, Registration, vRIoT IoT-Migration-from-1-8-2-to-2-0-0 Licensing Model Prior to the 2.0.0.0 release Prior to RUCKUS IoT Controller 2.0.0.0, an AP-based licensing model was supported, in which licenses were used by approved APs. Types of licenses in AP-based licensing model: 1. RTU license, temporary trail licenses 2. AP capacity licenses 3. Support Contract/ licenses The licenses were either perpetual licenses or limited to customized expiration dates. Licensing Model from 2.0.0.0 release Beginning with RUCKUS IoT Controller 2.0.0.0, support for Device-based licensing model instead of AP-based licensing. The Device-based licensing model features the following benefits: • The Device-based licenses are used by the connected devices instead of APs. • You can add an unlimited number of APs, but you must purchase a license for each device. • During the initial 90-day trial period, you can add an unlimited number of devices, APs, and plugins. • The Device-based model is based on subscription and you can purchase a license for 1, 3, or 5 years. Types of license in Device based licensing model are of three types Core, Instance & Device Capacity details below: <ol><li>Core - Core license is the basic (or primary) license that must be purchased to obtain the authority to access the features of the RUCKUS IoT Controller. The Core license is a perpetual license bound to the serial number of the controller.</li><li>Instance - Depending on your requirements, after installing a Core license, you can purchase an Instance license. The Instance license is based on a subscription and maintains a tenure of 1, 3, or 5 years. Instance licenses are offered in three types.</li></ol> <ul><li>Insights: An Insights license allows you to enable plugins, add connected devices, and use IoT Insight features.</li><li>Premium: A Premium license allows you to enable plugins and add connected devices.</li><li>Base: A Base license allows you to enable plugins, but connected devices will be in the decommissioned mode.</li></ul> <div>?????? 3. Device Capacity - To access the connected devices, after installing a Core license, you can purchase a Device Capacity license. The Device Capacity license is based on a subscription and maintains a tenure of 1, 3, or 5 years.</div> Note: 1. Each Device Capacity license consists of 250 devices. Therefore, if you purchase three Device Capacity licenses, you will be able to add 750 devices (3 x 250) to the RUCKUS IoT Controller. 2. If you have two device capacity license 250+250, and only one gets expired then only 250 devices will be de-commissioned. 3. If a new license is uploaded after the devices are de-commissioned then you can commission the devices by selecting the devices, and clicking on batch action-->commission Licensing Model from 2.2.0.0 release With the launch of RUCKUS IoT Controller 2.2.0.0, the RUCKUS Container per Access Point (RCAP) licensing model takes precedence over the previous device-based licensing structure. Types of licensing: 1. Core A Core (RTU) license is a primary license, this is perpetual license, activated against the vRIoT SN) 2. RCAP The RCAP licensing model operates on a subscription basis providing the flexibility to procure licenses for duration spanning 1, 3, or 5 years, which includes Watch Dog support. One RCAP license is required for each Access Point or IoT Gateway connected to the RUCKUS IoT Controller. 3. Solution (Optional for Insights) IoT Solutions are deployed on the “IoT Insights” platform this as an optional feature for users wishing to visualize and interact with IoT Sensors directly rather than through external Services/Clouds or Platforms. Criteria for Migrating from Version 1.8.X IoT Licenses to Version 2.0 To be eligible for the migration of pre-2.0 IoT licenses to the version (2.0), customers must meet the following criteria. • License Snapshot: Customers are required to take a snapshot of the LICENSE page on their pre-2.0 IoT Controller. This snapshot should clearly display all the licenses (RTU) that are installed on the controller. If any of the above criteria are not met, the customer may not be eligible for a free upgrade to the latest version (2.0). License Migration Process: <ul><li>An existing user of RUCKUS IoT Controller is already using a perpetual license, L09-INT1-WW00(RTU) and L09-INT1-AP00(AP capacity licenses).</li><li>RUCKUS offers one year of subscription based licenses for customers who have purchased perpetual AP licenses and RTU and want to install RUCKUS IoT Controller 2.0.0.0.</li><li>After one year, customers must purchase renewal licenses based upon their requirements.</li><li>If your RUCKUS IoT Controller has an active support period that extends beyond one year, RUCKUS will align the validity of the subscription-based licenses with the duration of the active support period.</li><li>This offer ends effective March 2024 and only the customers with an active perpetual license and support will be migrated after that due date</li><li>An RTU/core license L09-INT1-WW00 supports the new (2.0.0.0) RUCKUS IoT Controller serial number</li><li>To migrate RTU licenses we/customers should create IOTC-RMA for the 1.8.X version serial number.</li><li>IoT-RMA article - <a href="https://support.ruckuswireless.com/articles/000004883" style="color: #0563c1; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/articles/000004883</a> </li><li>The eligible Licenses and SKUs for migration or transfer are as below:</li><li>1 x IOT-SOPM-PREM-MSP1- IOT Sub Premium Spp 1yr MSP</li><li>1x IOT-SOPM-0250-MSP1 -- IOT Sub 250 Devices Spp 1yr MSP (Or) IOT-SOPM-050-MSP1</li><li>Customers/Partners must Contact Ruckus Support for this process. An estimated duration of migration for the subscription based license is 48 hours.</li></ul> Criteria for Migrating from Version 1.8.X IoT Licenses to Version 2.2 For each Access Point (AP) licensed and supported on the 1.x IoT controller with a valid support contract , the following provisions will be made: 1. Two IOT-SOPM-RCAP-MSP1 Licenses will be provided. 2. A Right to Use (RTU) for the new IoT controller will be granted on a one-to-one basis for the existing IoT Controllers. 3. Additionally, the duration of RCAP License will be extended based on the support contract's status on the 1.x IoT platform to ensure continuity of availability. <div class="x1"> Criteria for Migrating from Version 2.x IoT Licenses to Version 2.2</div> For each AP onboarded onto the IoT controller, the following provisions will be made: 1. Two IOT-SOPM-RCAP-MSP1 Licenses will be provided. 2. A screenshot demonstrating the licensed controller and its associated APs onboarded and provisioned, along with the License page displaying a minimum of one device per AP onboarded, must be provided. 3. The new RCAP licenses will cover the duration of the existing term of the device licenses installed, and license coverage will extend beyond the current Controller Device License Termination Date. <div style="margin-left: 8px;">Frequently Asked Questions (Q&A) To address common questions and scenarios that customers may encounter, we've included a Q&A section • Q1: I have an existing support contract that expires on a specific date. How much of the license or subscription am I eligible for? • A1: If the existing support contract extends beyond one year of validity, the migrated license and s†bscrbr?on will match the end date of the older (1.8) controller. • Q2: I have a 1.8 controller with expired support licenses. Can I still upgrade? • A2: As part of the migration to 2.0, RUCKUS will provide customers with a one-year license subscription to support 2.0. At the end of the one-year period, customers must renew licenses or subscription based on their requirements. <div style="margin-left: 40px;"> </div> </div>

This document outlines the procedure for migrating an existing RUCKUS IoT Controller license to RUCKUS IoT Controller 2.0.0.0 RUCKUS IoT Controller 2.0.0.0 is a fresh install. There is no direct upgrade path from 1.8.2.. MT for new subscription/license

2025-03-26T15:05:08-0700 2025-03-27T16:00:06-0700 https://support.ruckuswireless.com/articles/000014735 2025-03-25T22:41:40-0700 monthly 0.8 admin,premium knowledge_article_5731 knowledge_article_5731 2025-03-25T22:39:49-0700 000014735 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Unleashed How to troubleshoot when non-master APs stop responding to HTTPS Upgrade to 200.17

2025-03-25T22:41:40-0700 2025-03-26T16:00:06-0700 https://support.ruckuswireless.com/articles/000014281 2025-03-24T01:23:50-0700 monthly 0.8 admin,premium knowledge_article_5730 knowledge_article_5730 2025-03-24T01:23:50-0700 000014281 Validated (External) Premium Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi How to move an AP to another venue configured with a different country code on Ruckus One? <h3>To successfully move an AP from one venue to another configured with a different country code in RUCKUS One:</h3> <ol><li>Delete AP from current Venue and Choose the option "Factory reset to Cloud ready" when deleting AP.</li><li>Add the AP to the desired Venue.</li><li>AP will perform a factory reset, and after rebooting, it will connect to the cloud and download the new configuration.</li></ol>

This article explains how to move an AP from one venue to another venue configured with a different country code within RUCKUS One.

2025-03-24T01:23:50-0700 2025-03-26T00:00:07-0700 https://support.ruckuswireless.com/articles/000014739 2025-03-24T01:24:39-0700 monthly 0.8 admin,premium knowledge_article_5729 knowledge_article_5729 2025-03-24T01:24:39-0700 000014739 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Known issues and workarounds Known Issues and Workarounds, Unleashed Does the control 4 Halo remote work with unleashed WPA3? Due to a wifi chipset defect in the Halo remote, here is an Unleashed compatibility matrix between the remote and Unleashed AP version. <table class="Table" style=""><tbody><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Unleashed Version</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">WPA2</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">WPA2/WPA3 Mixed</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">WPA3</td></tr><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">200.15.6.212.20</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;"> Pass</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;"> Pass</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;"> Pass</td></tr><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">200.16.7.0.402</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;"> Pass</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;"> Pass</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;"> Pass</td></tr><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">200.17.7.0.139</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;"> Pass</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;"> Fail</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;"> Fail</td></tr><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">200.17.7.0.152</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;"> Pass </td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;"> Pass </td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 156px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;"> Fail</td></tr></tbody></table>

Does the control 4 halo remote work with unleashed WPA3

2025-03-24T01:24:39-0700 2025-03-26T00:00:07-0700 https://support.ruckuswireless.com/articles/000014726 2025-03-07T17:07:23-0800 monthly 0.8 admin,premium knowledge_article_5722 knowledge_article_5722 2025-03-07T17:07:23-0800 000014726 Validated (External) Premium Ruckus icx switches;Zoneflex indoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches, ZoneFlex Indoor, SmartCell Gateway What can cause a complete network outage occurred at a property, with ICX switches and APs showing offline on the SmartZone (SZ) and switches have lost access to the internet? Fortinet was involved and discovered that NAT was disabled on the Fortigate firewall. When NAT is disabled, packets with private source addresses arrive at the gateway router, which sends them out. However, the router does not know where to forward the replies upon their arrival. NAT was re-enabled on the Fortigate firewall, resolving the issue.

The customer reported a complete outage at one of their MDU sites. The ICX switches were offline on the SZ and count not ping the outside networks.

2025-03-07T17:07:23-0800 2025-03-12T08:00:06-0700 https://support.ruckuswireless.com/articles/000014724 2025-03-07T01:04:04-0800 monthly 0.8 admin,premium knowledge_article_5720 knowledge_article_5720 2025-03-07T01:04:04-0800 000014724 Validated (External) Premium Virtual smartcell gateway Performance;System network management Performance, System Network Management, virtual SmartCell Gateway Is there any difference in the update interval of the WebGUI of the vSZ Essentials vs High Scale? There is no difference in refresh interval regarding the Essentials and the High-Scale version.

Does the vSZ webgui act different between the Essentials and High Scale version?

2025-03-07T01:04:04-0800 2025-03-07T12:00:06-0800 https://support.ruckuswireless.com/articles/000014598 2025-03-05T16:37:27-0800 monthly 0.8 admin,premium knowledge_article_5718 knowledge_article_5718 2025-03-05T16:37:27-0800 000014598 Validated (External) Premium Sz144;Sz300;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Firmware Firmware, SZ144, SZ300, SZ100 How to downgrade SmartZone (SZ) when a cluster backup is not available? To downgrade the SZ100, follow these steps: <ol start="1"><li> Factory Reset the SZ100: <ul><li> Access the SZ100 via Console. </li><li> Run the following command to reset the SZ100 to factory defaults: <pre> set-factory</pre> </li><li> Confirm the reset when prompted. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001PcH&feoid=00N50000002Cf3M&refid=0EMPH00000HcFp3"></img> </li></ul> </li><li> Reconfigure the Basic Setup: <ul><li> After the SZ100 reboots, enter the initial setup mode. </li><li> Type Setup and configure the required IP addresses and basic settings. </li></ul> </li><li> Access the Web GUI: <ul><li> Open a web browser and navigate to the SZ100’s management IP. </li><li> You will be directed to the initial setup page. </li></ul> </li><li> Initiate the Downgrade Process: <ul><li> Click on the Upgrade button located in the upper-right corner of the GUI. </li><li> Upload the firmware image of the required lower version. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001PcH&feoid=00N50000002Cf3M&refid=0EMPH00000Hc4qP"></img> </li></ul> </li><li> Upload and Apply the Downgrade: <ul><li> Click Upload, then Upgrade to initiate the downgrade process. </li><li> The SZ100 will reboot and apply the downgraded firmware version. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001PcH&feoid=00N50000002Cf3M&refid=0EMPH00000Hc4C5"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001PcH&feoid=00N50000002Cf3M&refid=0EMPH00000Hc4C6"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001PcH&feoid=00N50000002Cf3M&refid=0EMPH00000Hc4C7"></img> </li></ul> </li><li> Reconfigure the Basic Setup Again: <ul><li> After the downgrade, enter the initial setup mode once more. </li><li> Type Setup and configure the required IP addresses again. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001PcH&feoid=00N50000002Cf3M&refid=0EMPH00000HcFp4"></img> </li></ul> </li><li> Restore Configuration Backup : <ul><li> Open the web GUI at the initial setup page. </li><li> Upload the required configuration backup file and restore it. </li></ul> </li></ol>

This article provides a step-by-step guide to downgrading the SZ100 when a cluster backup is unavailable, including resetting the device, upgrading to the desired firmware, and restoring the configuration backup.

2025-03-05T16:37:27-0800 2025-03-06T00:00:06-0800 https://support.ruckuswireless.com/articles/000006140 2025-02-26T20:59:45-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5713 knowledge_article_5713 2016-10-28T14:51:23-0700 000006140 Validated (External) Public Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Configuration;Troubleshooting;Known issues and workarounds Performance, Configuration, Troubleshooting, Known Issues and Workarounds, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway Why aren't Sonos speakers staying connected or connecting at all? It is recommended by the installer and Ruckus to connect one of the speakers through the wire and connect the remaining ones wireless if desired. The following steps and workaround applies to SONOS Standard Setup, which delivery music through standard Wi-Fi networks. Before you begin, make sure below protocols and ports are allowed. These are the protocols and ports that SONOS needs to communicate in your network. Protocols: -UPnP needs to be on -Multicast Packets need to be allowed -BPDU packets need to be allowed -STP (Spanning Tree Protocol) needs to be allowed -SONOS units need to be on the same subnet as the controlling device(iPod, computer , etc) -Wireless client isolation must be turned off if any wireless devices will be controlling SONOS Below are the ports that Sonos uses: TCP/IP: 80 (Internet Radio, updates and registration) 443 (Rhapsody, Napster, and SiriusXM) 445 (CIFS) 3400 (incoming UPnP events - Sonos Controller App for Mac or PC) 3401 (Sonos Controller App for iOS) 3500 (Sonos Controller App for Android) 4070 (Spotify incoming events) 4444 (Sonos update process) UDP: 136-139 (NetBIOS) 1900 (UPnP events and device detection) 1901 (UPnP responses) 2869, 10243, 10280-10284 (Windows Media Player NSS) 6969 (Initial configuration) Please find more details on: https://www.sonos.com When you experience troubles in Standard Setup, please go over the recommended steps list for workaround. Customer using RUCKUS One, RUCKUS SmartZone, RUCKUS Unleashed 200.14 or older, please follow the below workaround: When Standard Setup is selected, the WiFi APs will be used to connect speakers to each other. In this case, it recommended to disabled Directed Multicast/Broadcast: ruckus(config-wlan)# no qos directed-multicast ruckus(config-wlan)# qos directed-threshold 0 Customers using RUCKUS Unleashed 200.15 and 200.16 follow the below steps: In version 200.15 and 200.16, we have implemented the fix by disabling the Directed DHCP. This can be done using the below command. ruckus(config-wlan) qos directedDHCP disable Below should be the output on the APs after executing the command: ruckus(ap-mode)# get qos Tx Failure Threshold: 50 Dead Station Count: 0 Forward to Querier: Disabled Directed DHCP: Disabled Starting from 200.17 version, We have implemented UI component "SONOS Compatibility" available in the GUI under Wifi Settings >> Summary >> Edit >> Others, which is enabled by default. <img alt="User-added image" height="188" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001jEP&feoid=00N50000002Cf3M&refid=0EMPH00000HMnI2" width="500"></img> With this option, directedDHCP is disabled. If you disable "SONOS Compatibility" from the GUI, then the "directedDHCP" will be enabled, however, AP will drop the DHCP proxy messages.

Sonos speakers connect wired but are not connecting/staying connected wirelessly. We have seen issues with setup and not following setup instructions.

2025-02-26T20:59:45-0800 2025-03-03T16:00:06-0800 https://support.ruckuswireless.com/articles/000014289 2025-02-19T02:49:44-0800 monthly 0.8 admin,premium knowledge_article_5692 knowledge_article_5692 2024-05-16T07:42:00-0700 000014289 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Known issues and workarounds Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Are the RUCKUS Networks Access Points (AP) Vulnerable for CVE-2023-51767-CVE-2023-51385, CVE-2023-38408? <ul><li>If running 6.1.2 code: Upgrade to version 6.1.2.0.1240 or higher.</li><li>If running FIPS code: The issue has been fixed from version 5.1.2.3.</li><li>If running 7.0 code: Upgrade to version 7.0.0.0.6004.</li></ul>

Information if RUCKUS Access Points are affected on openssh vulnerabilities marked CVE-2023-51767, CVE-2023-51385

2025-02-19T02:49:44-0800 2025-02-20T00:00:06-0800 https://support.ruckuswireless.com/articles/000014703 2025-02-18T09:08:12-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5691 knowledge_article_5691 2025-02-17T06:47:25-0800 000014703 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, Unleashed How to resolve the "Not enough electricity power is provided to this AP, its capabilities are degraded" warning for the AP's? NA.

In this article we will troubleshoot warning on the AP saying "Not enough electricity power is provided to this AP, its capabilities are degraded"

2025-02-18T09:08:12-0800 2025-02-19T04:00:06-0800 https://support.ruckuswireless.com/articles/000014696 2025-02-13T10:37:11-0800 monthly 0.8 admin,premium knowledge_article_5681 knowledge_article_5681 2025-02-13T10:37:11-0800 000014696 Validated (External) Premium Ruckus analytics System network management System Network Management, Ruckus Analytics Why do the client counts in the Clients and Client Health reports differ in RUCKUS AI? The discrepancy arises due to differences in data inclusion criteria: <ul><li> Clients Report: Displays all unique client devices that connected within the selected timeframe, regardless of connection quality, duration, or data exchange. <img height="132" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001fxB&feoid=00N50000002Cf3M&refid=0EMPH00000GrQRR" width="500"></img> </li><li> Client Health Report: Only includes clients that meet specific performance assessment criteria, filtering out transient or short-lived connections that lack sufficient data for analysis. <img height="58" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001fxB&feoid=00N50000002Cf3M&refid=0EMPH00000GrM65" width="500"></img> </li><li> The update frequency of these reports may differ, leading to temporary mismatches. </li></ul>

Understanding the Difference Between Clients and Client Health in RUCKUS AI Reports

2025-02-13T10:37:11-0800 2025-02-14T12:00:06-0800 https://support.ruckuswireless.com/articles/000014692 2025-02-11T07:03:49-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5680 knowledge_article_5680 2025-02-11T07:02:51-0800 000014692 Validated (External) Public Knowledge Knowledge base Knowledge Base, Knowledge Part# 9C1 in our install base was initially provided solely for cloud evaluation purposes and was designated as a Cloud Evaluation-only XXX SKU, not intended for sale. As the trial period for this product has now concluded, it is no longer eligible for Replacement or RMA. This part is specifically used for testing and demonstration within designated environments. These devices don’t follow the standard warranty clause and thus making it ineligible for RMA.

Why should we NOT provide replacements to the part starting with 9C1?

2025-02-11T07:03:49-0800 2025-02-13T12:00:06-0800 http://support.ruckuswireless.com/article_attachments/kA2PH000001pu7d0AA?attachment_index=0 2025-02-13T12:00:06-0800 monthly admin,premium,warranty,guest knowledge_article_5680 knowledge_article_5680_attachment_1 Part starting with 9C1.docx 14328.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000014682 2025-02-07T13:59:22-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5678 knowledge_article_5678 2025-02-07T13:59:22-0800 000014682 Validated (External) Public Ruckus support services Configuration Configuration, Ruckus Support Services How to view DPSKs generated inside a DPSK Pool on Cloudpath ? By design, only "CA Administrator" can view the individual DPSKs generated in Cloudpath under Configuration > DPSK > DPSK Pools > View DPSK > Click on Magnifying glass icon next to "Pre-Shared key" as shown in the screenshot - <img alt="View DPSK" height="383" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001eBV&feoid=00N50000002Cf3M&refid=0EMPH00000GVwcn" width="500"></img> In case you are not seeing this option, please verify the role assigned to you under the menu Administration > Administrators.

DPSKs can be viewed only by CA Admin

2025-02-07T13:59:22-0800 2025-02-10T08:00:07-0800 https://support.ruckuswireless.com/articles/000012314 2025-01-30T00:01:51-0800 monthly 0.8 admin,premium knowledge_article_5674 knowledge_article_5674 2022-07-15T00:35:45-0700 000012314 Validated (External) Premium Why we cannot use Self-signed wildcard SSL certificate on the Cloudpath? We need to use Public signed SSL certificate on the Cloudpath.

The article explain why we cannot use the Self-signed wildcard cert on the Cloudpath

2025-01-30T00:01:51-0800 2025-01-31T04:00:06-0800 https://support.ruckuswireless.com/articles/000014667 2025-01-27T21:27:17-0800 monthly 0.8 admin,premium knowledge_article_5670 knowledge_article_5670 2025-01-27T21:27:17-0800 000014667 Validated (External) Premium Ruckus wan gateway rwg Troubleshooting Troubleshooting, RUCKUS WAN Gateway RWG How to enable system level debug on the Ruckus WAN Gateway? To enable debug logs on the RWG, navigate to System>Options > Device Options Scaffold. Under the Logging > Log Level option, set the Log Level to Debug <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001cMb&feoid=00N50000002Cf3M&refid=0EMPH00000GCT9t"></img> The log rotate hour field configures the hour during which the RWG rotates its system log files, restarts critical services, and performs nightly database maintenance. This should be set to the time of least end-user activity, likely in the middle of the night. A time of 4AM is not supported because it conflicts with the Daylight Savings Time (DST) shift. Change the log level to Info once debugging is completed.

This article provides instructions to enable debug on the RWG

2025-01-27T21:27:17-0800 2025-01-28T10:00:06-0800 https://support.ruckuswireless.com/articles/000014620 2025-01-24T08:35:25-0800 monthly 0.8 admin,premium knowledge_article_5666 knowledge_article_5666 2025-01-24T08:35:25-0800 000014620 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, SmartCell Gateway Can we move Floorplan maps between Zones in Smart Zone? Can Floorplan maps be cloned or replicated? Floorplan maps have to be imported on each zone using the following procedure: https://docs.commscope.com/bundle/sz-610-adminguide-sz300vsz/page/GUID-46CDECA2-6462-492C-8F73-D370071EF0D5.html

When cloning zones the floor plan maps do not replicate.

2025-01-24T08:35:25-0800 2025-01-27T00:00:07-0800 https://support.ruckuswireless.com/articles/000014637 2025-01-20T00:48:09-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5663 knowledge_article_5663 2025-01-20T00:43:36-0800 000014637 Validated (External) Public Ruckus cloud switch Configuration Configuration, Ruckus Cloud Switch How to change PoE class for switch port from Panel page on R1 <h3>How to change PoE class for Switch port from Panel:</h3> By default PoE class is set to 0 and PoE class dropdown menu appears disabled from Panel page. <div style="margin-left: 40px;"><img alt="User-added image" height="196" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001akb&feoid=00N50000002Cf3M&refid=0EMPH00000ErxDC" width="500"></img></div> <ul><li>To change the PoE class from Switch>Overview>Panel> click on port.</li><li>Remove or set the PoE budget for the desired PoE class.</li></ul> <div style="margin-left: 40px;"><img alt="User-added image" height="390" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001akb&feoid=00N50000002Cf3M&refid=0EMPH00000Es1YX" width="500"></img></div> <ul><li>Now we can select the appropriate PoE class.</li></ul> <div style="margin-left: 40px;"><img alt="User-added image" height="430" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001akb&feoid=00N50000002Cf3M&refid=0EMPH00000Es1Da" width="500"></img></div>

The article describes the navigation to configure PoE class for ICX Switch from Panel page on Ruckus One

2025-01-20T00:48:09-0800 2025-01-20T10:00:07-0800 https://support.ruckuswireless.com/articles/000007854 2025-01-17T03:59:50-0800 monthly 0.8 admin,premium knowledge_article_5658 knowledge_article_5658 2018-05-15T13:54:35-0700 000007854 Validated (External) Premium Icx 7650;Icx 7150;RUCKUS ICX 7650 Campus Switches;RUCKUS ICX 7150 Campus Switches Known issues and workarounds Known Issues and Workarounds, ICX 7650, ICX 7150 Why ICX 7150 and ICX 7650 switches do not retain clock date and time upon power cycle? Reconfigure the clock in the switch after every power outage. Example of configuring clock in the switch: <div> 1. In Privileged EXEC mode, set the clock date and time. </div> device# clock set 09:57:35 07-28-16 <div>2. Enter Privileged and set the time zone for the device. </div> device(config)# clock timezone us mountain <a href="https://docs.commscope.com/bundle/fastiron-10020-managementguide/page/GUID-E670EE11-FBD6-4D1E-9099-6E231887D245.html" target="_blank">https://docs.commscope.com/bundle/fastiron-10020-managementguide/page/GUID-E670EE11-FBD6-4D1E-9099-6E231887D245.html</a>

ICX 7150 and ICX 7650 switches do not retain clock date and time after power outage

2025-01-17T03:59:50-0800 2025-01-20T02:00:07-0800 https://support.ruckuswireless.com/articles/000002783 2025-01-16T00:38:34-0800 monthly 0.8 admin,premium knowledge_article_5657 knowledge_article_5657 2014-03-12T18:51:01-0700 000002783 Validated (External) Premium Sz144;Sz300;Zonedirector;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartZone 100-D (SZ100-D) Configuration Configuration, SZ144, SZ300, ZoneDirector, virtual SmartCell Gateway, SZ100 Can we use hostname/FQDN instead of IP address when configuring external AAA server on ZoneDirector or SmartZone If the AAA server is being configured on a ZoneDirector then the only option is to use the IP address of the RADIUS server. Similarly, if the configuration is done on SmartZone versions lower than 6.1.1, again the only option is to use an IP address. However, for SmartZone versions 6.1.1 and above we have the option to use either the IP or the FQDN of the AAA server. Note: The FQDN option can be configured only for the RADIUS server.

I am getting an error message when typing the Hostname of the Radius server instead of the IP address on ZoneDirector or SmartZone WebUI,

2025-01-16T00:38:34-0800 2025-01-17T04:00:07-0800 https://support.ruckuswireless.com/articles/000014636 2024-12-23T15:13:31-0800 monthly 0.8 admin,premium knowledge_article_5650 knowledge_article_5650 2024-12-23T15:07:17-0800 000014636 Validated (External) Premium Ruckus icx switches;Ruckus wan gateway rwg Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches, RUCKUS WAN Gateway RWG Why RWG throws an error "Unable to establish a connection to this device" while performing config Sync? We consulted RGNets engineering and verifying with the developers and it turned out that it is known limitation with RWG which does not allow RWG -ICX login with default local privileges as it requires username/password: From the ICX Switch running config ========================================== SSH@SW48-ruckus#sho run | inc aaa aaa authentication snmp-server default local aaa authentication web-server default local aaa authentication login default local aaa authentication enable default local enable aaa console =========================================== To resolved this issue, we removed this configuration by executing following command and reattempted the config Diff which was successful: no aaa authentication enable default local Following the command we performed config diff for this switch and it worked normally <img alt="Post fix" height="192" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001VZd&feoid=00N50000002Cf3M&refid=0EMPH00000F4wrB" width="500"></img>

Customer have multiple switches added to RWG and would like to enable sync on them so that they could control ICX config using the RWG. When attempting to generate the Config diff for the switch, we got an error "Unable to establish a connection to this device."

2024-12-23T15:13:31-0800 2024-12-27T10:00:06-0800 https://support.ruckuswireless.com/articles/000007413 2024-12-12T13:20:44-0800 monthly 0.8 admin,premium knowledge_article_5643 knowledge_article_5643 2017-12-12T16:13:31-0800 000007413 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches What is required for PoE troubleshooting on ICX switches? POE Root Cause Investigation Outputs to gather for POE Debugging. Outputs <ol><li>SH TECH</li><li>SH CHASSIS</li><li>SH INLINE POWER</li><li>SH INLINE POWER DETAIL</li><li>SH INT BRIEF</li><li>show lldp neighbors</li><li>show fdp neighbors</li><li>SHOW INLINE POWER DETAIL DEBUG-INFO [08.0.61 and above]</li><li>SHOW INLINE POWER EMESG <UNIT-ID> [8.0.70 and above]</li><li>SHOW INLINE POWER DEBUG-INFO X/X/X [8.0.61 and above]</li><li>SHOW LOG DEBUG PLATFORM ALL [10.0.00 and above]</li><li>SHOW LOG DEBUG PLATFORM CHASSIS ALL [10.0.10 and above]</li></ol> <div> </div> Pls refer to FI command ref guide for additional info on the above commands https://docs.commscope.com/bundle/fastiron-08090-commandref/page/GUID-C5255AA7-D5E8-4C62-9A56-C25E035C8BD3.html https://docs.commscope.com/bundle/fastiron-10010-debugcommandref/page/GUID-0D8393A4-473B-4A48-9322-2BFB9E7AF8D0.html

Required data for PoE troubleshooting on ICX Switches.

2024-12-12T13:20:44-0800 2024-12-16T20:00:07-0800 https://support.ruckuswireless.com/articles/000014304 2024-12-12T13:23:29-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5641 knowledge_article_5641 2024-04-22T13:32:22-0700 000014304 Validated (External) Public Ruckus icx switches;Brocade eos products;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor <h1 style="margin-top: 16px;">Global defective shipment process for Advance Replacement RMAs.</h1> The enclosed spreadsheet outlines the process for retrieving defective items from customers located globally. For Advance Replacements, upon delivery of the replacements to the customers, our RUCKUS Support team will facilitate the retrieval of the defectives. This assistance may include providing a shipping label or arranging for a pick-up through our logistics partner. Regarding Return to Factory, it is the customer's responsibility to arrange for the return of the defectives and bear the associated shipment charges. Note – Spreadsheet contains list of countries & products which requires Import and Export licenses.

Global defective shipment process for Advance Replacement RMAs.

2024-12-12T13:23:29-0800 2024-12-16T20:00:06-0800 http://support.ruckuswireless.com/article_attachments/kA2PH000000Otsz0AC?attachment_index=0 2024-12-16T20:00:06-0800 monthly admin,premium,warranty,guest knowledge_article_5641 knowledge_article_5641_attachment_1 Global Defective Shipment Process.xlsx 25367.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000014628 2024-12-11T02:39:58-0800 monthly 0.8 admin,premium knowledge_article_5637 knowledge_article_5637 2024-12-11T02:39:58-0800 000014628 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed How to create a Guestpass operator? 1. We will create a new Guestpass operator. <ul><li>Navigate to Admin & Services>> User>> Create.</li></ul> <img alt="User-added image" height="218" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001T1Z&feoid=00N50000002Cf3M&refid=0EMPH00000EbNgj" width="500"></img> <ul><li>Enter the details. Under "Role", click on "+" and create a new role.</li></ul> <img alt="User-added image" height="484" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001T1Z&feoid=00N50000002Cf3M&refid=0EMPH00000EbNvF" width="500"></img> <ul><li>You can specify which WLAN's the Guest pass operator can access.</li><li>Enable the check box for Guest password.</li></ul> 2. To create a new Guest pass the Guest pass operator can use the following URL: https://[host_ip_address]/guestpass ex:https://10.176.252.35/Guestpass <img alt="User-added image" height="399" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001T1Z&feoid=00N50000002Cf3M&refid=0EMPH00000EbOCz" width="500"></img> <ul><li>Enter the username and password for the Guest pass operator.</li></ul> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001T1Z&feoid=00N50000002Cf3M&refid=0EMPH00000EbHmd"></img> <ul><li>Guestpass operator can now create new guestpasses.</li></ul>

We will learn the steps to create a Guestpass operator.

2024-12-11T02:39:58-0800 2024-12-11T16:00:10-0800 https://support.ruckuswireless.com/articles/000014580 2024-12-04T12:54:37-0800 monthly 0.8 admin,premium knowledge_article_5635 knowledge_article_5635 2024-12-04T12:54:37-0800 000014580 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ144, SZ300, virtual SmartCell Gateway, SZ100 The security camera connected to the LAN port of the Mesh AP can't communicate through the Mesh link. The following steps were taken to successfully establish network connectivity for the security camera through the Mesh link: 1. Connected the security camera to the eth0 port of the Mesh AP. rkscli: get eth Port Interface 802.1X Logical Link Physical Link Label ----------------------------------------------------------------- 0 eth0 None Up Up 100Mbps full 10/100/1000 1 eth2 None Down Down 1000/10000 SFP 2 eth1 None Up Up 1000Mbps full 10/100/1000/2500 PoE 2. Configured a port profile for the Mesh AP, as shown in the following screenshot. <img alt="User-added image" height="217" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Ndh&feoid=00N50000002Cf3M&refid=0EMPH00000DmLp4" width="500"></img> <img alt="User-added image" height="176" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Ndh&feoid=00N50000002Cf3M&refid=0EMPH00000DmZon" width="500"></img> <img alt="User-added image" height="179" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Ndh&feoid=00N50000002Cf3M&refid=0EMPH00000DmZqP" width="500"></img> 3. Applied this port profile to the eth0 port of the AP. The VLAN 130 is for camera traffic, and VLAN1 is for AP management. rkscli: get interface eth0 Name Forwarding Port-Type Untag Vlans Firewall-ID ------------------------------------------------------------------- eth0 WAN GENERAL 130 1,130 0 4. The camera's MAC address was verified to have been learned on the eth0 port. rkscli: get macdb eth0 Station Last Update -------------------------------------- 1 : 00:04:7d:d5:55:3b 0 After applying this configuration change, the camera successfully pulled the IP address on VLAN 130 and started functioning.

The customer experienced issues with network connectivity for a security camera connected to the LAN port of an AP. This was caused by an incorrect port profile configuration on the Mesh AP. This article outlines the configuration changes needed to resolve the connectivity issue.

2024-12-04T12:54:37-0800 2024-12-06T04:00:08-0800 https://support.ruckuswireless.com/articles/000014584 2024-12-04T12:59:06-0800 monthly 0.8 admin,premium knowledge_article_5634 knowledge_article_5634 2024-12-04T12:59:06-0800 000014584 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Installation;Support license activation Installation, Support License Activation, Cloudpath What is the procedure for migrating a Cloudpath server from Hyper-V to VMware, and how will the licenses be transferred to the new Cloudpath instance after migration? To migrate the Cloudpath server from Hyper-V to VMware, follow the instructions in the "How to Import the Database From An Existing System" section of the Cloudpath upgrade guide. These steps can be found on pages 8 to 11 at the following link: https://support.ruckuswireless.com/documents/4532-cp_es-5-12-ga-upgrade-guide/download The licenses will automatically transfer to the new Cloudpath server after completing the cannibalization process described in the guide.

What is the procedure for migrating a Cloudpath server from Hyper-V to VMware, and how will the licenses be transferred to the new Cloudpath instance after migration?

2024-12-04T12:59:06-0800 2024-12-06T04:00:06-0800 https://support.ruckuswireless.com/articles/000003814 2024-12-02T07:58:19-0800 monthly 0.8 admin,premium knowledge_article_5633 knowledge_article_5633 2014-12-26T07:28:21-0800 000003814 Validated (External) Premium Virtual smartcell gateway Installation Installation, virtual SmartCell Gateway Which hypervisors are supported by Virtual SmartZone vSZ on 7.0 release ? SUPPORTED PLATFORMS: As of SmartZone 7.0 release (latest at the time of writing this article), RUCKUS only supports following virtualization platforms - <table style="width: 771px;" width="771"><colgroup><col style="width: 53pt;" width="71"></col><col style="width: 120pt;" width="160"></col><col style="width: 405pt;" width="540"></col></colgroup><tbody><tr><td colspan="1" rowspan="1" class="xl64" style="border-bottom: 1px solid black; height: 19px; width: 71px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #d6dce4; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Vendor</td><td colspan="1" rowspan="1" class="xl64" style="border-bottom: 1px solid black; width: 160px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #d6dce4; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">Hypervisor</td><td colspan="1" rowspan="1" class="xl64" style="border-bottom: 1px solid black; width: 540px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #d6dce4; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">Version</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">VMWare</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">ESXi</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">6.7 or later (7.0 or later recommended)</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">Microsoft</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">Windows Server Hyper-V</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">Windows Server Hyper-V (2019 and 2022)</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">KVM</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">CentOS</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">7.5 (1804), 7.7 (1908), 8 (1905), 8.2 (2004), 8.3 (2011), 8.4 (2105), and 8.5 (2111)</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">OpenStack</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">Ubantu</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">Xena & Yoga</td></tr><tr><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">Nutanix</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">Nutanix</td><td colspan="1" rowspan="1" class="xl63" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">Nutanix Community Edition</td></tr></tbody></table> For Public Cloud, the following platforms are supported - <ul><li>AWS</li><li>Google Cloud</li><li>Microsoft Azure</li></ul> UNSUPPORTED PLATFORMS: Please note that the following hypervisor platforms are not currently supported by RUCKUS vSZ. If vSZ is run on a platform not officially supported/QA'd by RUCKUS, any errors encountered in vSZ will not be investigated by Ruckus Support. The below list is not exhaustive, and serves only to clarify some unsupported hypervisors: <div style="margin-left: 40px;"> Sangfor HCI VMware Workstation / Workstation Player Oracle VM VirtualBox</div> <div> Important Note: Running the virtual SmartZone on unsupported platforms may work, however, RUCKUS does not support or guarantee its performance and may result in unexpected behavior or issues.</div>

vSZ on 7.0 supports installation on ESXi, Windows Server Hyper-V, KVM CentOS, OpenStack Ubantu and Nutanix hypervisors. For public cloud, it supports installation on AWS, Google Cloud and Microsoft Azure platforms.

2024-12-02T07:58:19-0800 2024-12-04T14:00:07-0800 https://support.ruckuswireless.com/articles/000014614 2024-11-29T07:28:32-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5632 knowledge_article_5632 2024-11-29T07:28:32-0800 000014614 Validated (External) Public Ruckus icx switches;Brocade eos products;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor <h1>How to process replacement and retrieve defective parts for South Africa? Advance Replacement Wired – Strategic Units & Non-Strategic Units</h1> <ul><li class="MsoNoSpacing" style="margin-left: 8px;"> <h1>Ship replacement from the local warehouse in South Africa (WJNB1) if parts are available.</h1> </li><li class="MsoNoSpacing" style="margin-left: 8px;"> <h1>If no parts are in the local warehouse, the RUCKUS Planning team will initiate a stock/inventory transfer or create an order to process from the production warehouse.</h1> </li><li class="MsoNoSpacing" style="margin-left: 8px;"> <h1>Defectives must be returned to the local warehouse in South Africa (WJNB1)</h1> </li></ul> <h1> Advance Replacement Wireless – Strategic and Non-Strategic Units</h1> <ul><li class="MsoNoSpacing" style="margin-left: 8px;"> <h1>Ship replacement from the local warehouse in South Africa (WJNB1) if parts are available.</h1> </li></ul> <ul><li class="MsoNoSpacing" style="margin-left: 8px;"> <h1>If no parts are in the local warehouse, check for the PLM (PRODUCT LIFECYCLE MANAGEMENT) Suggested alternate part in the Ruckus Support Portal.</h1> </li></ul> <ul><li class="MsoNoSpacing" style="margin-left: 8px;"> <h1>If no alternatives are available, the RUCKUS Planning team will initiate a stock/inventory transfer.</h1> </li><li class="MsoNoSpacing" style="margin-left: 8px;"> <h1>Defective must be returned to the local warehouse in South Africa (WJNB1)</h1> </li></ul> <h1> Return to Factory Wireless – Strategic and Non-Strategic Units</h1> <ul><li class="MsoNoSpacing" style="margin-left: 8px;"> <h1>Defective items should be sent to the local warehouse in South Africa (WJNB1)</h1> </li><li class="MsoNoSpacing" style="margin-left: 8px;"> <h1>Ship replacement from the local warehouse in South Africa (WJNB1) if parts are available.</h1> </li></ul> <ul><li class="MsoNoSpacing" style="margin-left: 8px;"> <h1>If no parts are in the local warehouse, check for the PLM (PRODUCT LIFECYCLE MANAGEMENT) Suggested alternate part in the Ruckus Support Portal.</h1> </li><li class="MsoNoSpacing" style="margin-left: 8px;"> <h1>If no alternatives are available, the RUCKUS Planning team will initiate a stock/inventory transfer or create an order to process from the production warehouse.</h1> </li></ul> <h1> Note: SAP cannot be shipped directly to customers in South Africa because UPS requires an Importer of Record (IOR) for any shipments imported from outside the country.</h1>

RMA process for South Africa

2024-11-29T07:28:32-0800 2024-12-02T08:00:08-0800 http://support.ruckuswireless.com/article_attachments/kA2PH000001WWtp0AG?attachment_index=0 2024-12-02T08:00:08-0800 monthly admin,premium,warranty,guest knowledge_article_5632 knowledge_article_5632_attachment_1 South Africa.docx 15834.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000014615 2024-11-29T07:28:35-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5631 knowledge_article_5631 2024-11-29T07:28:35-0800 000014615 Validated (External) Public Ruckus icx switches;Brocade eos products;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor <h1 style="margin-top: 16px;">What is a Delivery Challan (DC)?</h1> A Delivery Challan (DC) is a document used to record the details of defective goods being picked up from customers location to Bangalore warehouse. It includes information such as the Part Number, Quantity, RMA number, date, description of the product, number of boxes, and price details, as well as recipient details and delivery location. This is also used as a gate pass for logistics partner (UPS) to complete the defective pick-up. Customers do not have to bear the return charges and it is completely borne by RUCKUS. Attached a sample delivery challan we share it to the customers with the fields fill in & in return they will have to share it with their sign & companies seal on it. Note: <ol><li style="margin-left: 8px;">Delivery Challan is required ONLY to retrieve the defectives from customers location from INDIA. </li><li style="margin-left: 8px;">Without Delivery Challan, the defectives cannot be retrieved from the customers location. </li></ol>

What is a Delivery Challan -INDIA

2024-11-29T07:28:35-0800 2024-12-02T08:00:07-0800 http://support.ruckuswireless.com/article_attachments/kA2PH000001WWvR0AW?attachment_index=0 2024-12-02T08:00:07-0800 monthly admin,premium,warranty,guest knowledge_article_5631 knowledge_article_5631_attachment_1 INIDA - Delivery Challan.docx 45067.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document http://support.ruckuswireless.com/article_attachments/kA2PH000001WWvR0AW?attachment_index=1 2024-12-02T08:00:07-0800 monthly admin,premium,warranty,guest knowledge_article_5631 knowledge_article_5631_attachment_1 Sample Delivery Challan.xlsx 26539.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000014611 2024-11-29T07:28:37-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5620 knowledge_article_5620 2024-11-28T11:31:04-0800 000014611 Validated (External) Public Unleashed;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Known issues and workarounds Known Issues and Workarounds, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor <h1 style="margin-top: 16px;"><a name="_Toc180794478"></a></h1> <h1 style="margin-top: 16px;"><a name="_Toc180794478">Replacement models for the End-of-Life (EOL) Access Points.</a></h1> How do we process replacements for the End-of-Life Access Points when we do not have stock in local warehouse? <ol style="margin-bottom: 11px;"><li style="margin-left: 8px;">If we do not have stock of the requested EOL Access Points, need to check if there’s stock/Inventory transfers already in place by the Planning team. <ol style="list-style-type: lower-alpha;"><li style="margin-left: 8px;">If there’s one, keep the customer informed on the ETA & process the replacement after receiving it in the warehouse. </li><li style="margin-left: 8px;">If there’s NO, stock transfer check with Planning team if they can initiate a stock transfer IF we’d it in any of the warehouse globally.</li><li style="margin-left: 8px; margin-bottom: 11px;">If Planning team confirms that we do not have stock anywhere, we will have to offer the customer the next available part suggested by PLM along with the EOL notification document from support portal.</li></ol> </li></ol> Dear Customer, - Template – 1 We value your business and relationship. We regret to inform you that the requested part 901-XXXX-WW00 is an End-of-Life (EOL) product & we’ve ran out of stock. We understand the criticality of getting your network up & running ASAP, so we want to look out for an alternate Access Point. To move forward the next available model we can offer you is 901-XXXX-WW00/901-XXXX-WW00/901-XXXX-WW00/901-XXXX-WW00 (provide the list as per the part availability in our local warehouse) as suggested by RUCKUS Product Life Cycle Management (PLMs) team. We’ve also attached you the EOL notification for your reference. <ol start="2" style="margin-bottom: 11px;"><li style="margin-left: 8px;">If customer responds back accepting the PLM suggested part, process the replacement. </li><li style="margin-bottom: 11px; margin-left: 8px;">If customer responds back stating that the PLM suggested part isn’t suitable/compatible with his environment, we need to respond back with the standard verbiage that RUCKUS is liable to provide like to like or an equivalent replacement. Use the below template.</li></ol> Dear Customer, - Template – 2 As per RUCKUS warranty terms, we are liable to provide to like to like replacement or a product equivalent to the defective. (Attach the RUCKUS Warranties FAQ from support portal) In those terms, the provided list of access points is equivalent model to the model what you had & therefore RUCKUS will not be fulfilling replacements as per customers environment. <ol start="4" style="margin-bottom: 11px;"><li style="margin-bottom: 11px; margin-left: 8px;">If customer still resists, address the situation to the respective region SSL, Account Manager RMA Manager for further assistance. </li></ol> Note: <ol style="margin-bottom: 11px;"><li style="margin-left: 8px;">Attached a word document which contains the email templates.</li><li style="margin-bottom: 11px; margin-left: 8px;">Attached a excel spreadsheet which contains the PLM suggested model from the support portal.</li></ol>

How do we process replacements for the End-of-Life Access Points when we do not have stock in local warehouse?

2024-11-29T07:28:37-0800 2024-12-02T08:00:07-0800 http://support.ruckuswireless.com/article_attachments/kA2PH000001WGvV0AW?attachment_index=0 2024-12-02T08:00:07-0800 monthly admin,premium,warranty,guest knowledge_article_5620 knowledge_article_5620_attachment_1 Email Templates for EOL APs.docx 13123.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document http://support.ruckuswireless.com/article_attachments/kA2PH000001WGvV0AW?attachment_index=1 2024-12-02T08:00:07-0800 monthly admin,premium,warranty,guest knowledge_article_5620 knowledge_article_5620_attachment_1 Replacements for EOL Access Points.xlsx 13367.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000014613 2024-11-29T00:45:58-0800 monthly 0.8 admin,premium knowledge_article_5630 knowledge_article_5630 2024-11-29T00:45:58-0800 000014613 Validated (External) Premium How to use M1/2/3/4 macbook pro to do OTA capture Go to Wireless Diagnostics by clicking and holding option and pointing the cursor to the "wifi" logo to open Wireless Diagnostics <img alt="User-added image" height="1256" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001QBl&feoid=00N50000002Cf3M&refid=0EMPH00000EA8cB" width="500"></img> From the top menu in "window" tab choose "sniffer" <img alt="User-added image" height="402" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001QBl&feoid=00N50000002Cf3M&refid=0EMPH00000EABF3" width="500"></img> where you can select the channel you want to capture: <img alt="User-added image" height="260" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001QBl&feoid=00N50000002Cf3M&refid=0EMPH00000EABGf" width="500"></img> Press start and it will run in monitor mode. Now go to wireshark and select the wifi interface to do capture: <img alt="User-added image" height="412" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001QBl&feoid=00N50000002Cf3M&refid=0EMPH00000EA87Y" width="500"></img> Once you click start You will see below 802.11 radio header: <img alt="User-added image" height="266" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001QBl&feoid=00N50000002Cf3M&refid=0EMPH00000EABYP" width="500"></img> ??????????????

This article will tell you how to use the Macbook pro with M1/2/3/4 CPU to do OTA

2024-11-29T00:45:58-0800 2024-11-29T08:00:08-0800 https://support.ruckuswireless.com/articles/000014495 2024-11-29T01:21:10-0800 monthly 0.8 admin,premium knowledge_article_5629 knowledge_article_5629 2024-09-17T04:06:00-0700 000014495 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration Performance, Configuration, SmartCell Gateway Why does my controller shows Wi-Fi Calling profile error though we have not created max profile ? 1) Concern on the Wi-Fi calling profile limit. As per design one can create max 5 Wi-Fi calling profile per partner domain or system domain. The limitation is that if we have 4 Partner domain and there is already 2 profile created on system level then on all four partner domain only 3 profile can be created which would be a total of 5. 2) User unable to see all Wi-Fi profile though having access to Partner domain and system. As per design only the user that have access to partner domain can see all system level as well as partner level Wi-Fi calling profile and access to add it. The admin level can't have this access and he would only see the system level profile. Additionally limitation for user is that the admin group domain access should not be "admin domain" (domain chosen including system/all). The user group should have access to individual domain (can be multiple).

Customer has multiple Partner domain and once they try to create new Wi-Fi Calling profile they see max error though there are only 2 profile on the Partner domain.

2024-11-29T01:21:10-0800 2024-11-29T08:00:07-0800 https://support.ruckuswireless.com/articles/000014538 2024-11-28T06:14:57-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5576 knowledge_article_5576 2024-10-18T13:58:22-0700 000014538 Validated (External) Public Ruckus icx switches;Brocade eos products;Unleashed;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Known issues and workarounds;Knowledge base Known Issues and Workarounds, Knowledge Base, Ruckus ICX Switches, Brocade EOS Products, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor How to process replacements for Philippines RMAs? Wired Advance Replacement Strategic & non-strategic <ol style="margin-bottom: 11px;"><li style="margin-left: 8px;">Replacements are stocked in local warehouse Philippines. i.eWCRK1.</li><li style="margin-left: 8px;">If there’s NO part stocked in the local warehouse, the same will be fulfilled from production warehouse or by initiating an internal stock transfer.</li><li style="margin-bottom: 11px; margin-left: 8px;">Defective should be retrieved & inbounded in the local warehouse.</li></ol> Wireless Advance Replacement Non-strategic <ol><li style="margin-left: 8px;">Customers should hold NTC permit as the replacements are processed from Hong Kong warehouse. It is always the receiver should HOLD the NTC permit for the clearance. </li><li style="margin-left: 8px;">If the customer DO NOT have the permit, they can provide Distributors details for us to process the replacements. </li><li style="margin-left: 8px;">After the confirmation the replacements will be processed from Hong Kong warehouse. </li><li style="margin-left: 8px;">RUCKUS will retrieve the defectives & inbound it in Hong Kong. </li></ol> Strategic <ol style="margin-bottom: 11px;"><li style="margin-left: 8px;">Replacements are stocked in local warehouse Philippines. i.eWCRK1.</li><li style="margin-left: 8px;">If there’s NO part stocked in the local warehouse, the same will be fulfilled from production warehouse or by initiating an internal stock transfer.</li><li style="margin-bottom: 11px; margin-left: 8px;">RUCKUS will retrieve the defectives & inbound in the local warehouse.</li></ol> Return to Factory Non-strategic <ol style="margin-bottom: 11px;"><li style="margin-left: 8px;">Customers should return the defectives to Hong Kong warehouse. i.e WHKG1. <ul style="list-style-type: circle;"><li style="margin-left: 8px;">Shipping charges should be borne by customers.</li></ul> </li><li style="margin-left: 8px;">Customers should hold NTC permit as the replacements are processed from Hong Kong warehouse. It is always the receiver should HOLD the NTC permit for the clearance. </li><li style="margin-left: 8px;">If the customer DO NOT have the permit, they can provide Distributors details for us to process the replacements. </li><li style="margin-left: 8px;">After the confirmation the replacements will be processed from Hong Kong warehouse. </li><li style="margin-bottom: 11px; margin-left: 8px;">RUCKUS will retrieve the defectives & inbound it in Hong Kong. </li></ol> Strategic <ol style="margin-bottom: 11px;"><li style="margin-left: 8px;">Customers should return the defectives to local warehouse in Philippines. i.e WCRK1. <ol style="list-style-type: lower-alpha;"><li style="margin-left: 8px;">Shipping charges should be borne by customers.</li></ol> </li><li style="margin-left: 8px;">Replacements should be processed only AFTER End users/customers confirm if they have NTC permit to receive the replacement.</li><li style="margin-left: 8px;">Customers should hold NTC permit as the replacements are processed from Hong Kong warehouse. It is always the receiver should HOLD the NTC permit for the clearance. </li><li style="margin-left: 8px;">If the customer DO NOT have the permit, they can provide Distributors details for us to process the replacements. </li><li style="margin-bottom: 11px; margin-left: 8px;">After the confirmation the replacements will be processed from local warehouse in Philippines. i.e WCRK1.</li></ol> <div style="margin-bottom: 11px; margin-left: 8px;">NOTE à <ul style="margin-bottom: 11px;"><li style="margin-left: 8px;">Customer requires Commercial Invoice (CI) to apply for NTC permit. Process the order and provide the CI to the customer & request UPS to HOLD till we confirm. </li><li style="margin-bottom: 11px; margin-left: 8px;">NTC permit is only for Access Points & NOT for controllers. </li></ul> </div>

2024-11-28T06:14:57-0800 2024-11-29T02:00:09-0800 https://support.ruckuswireless.com/articles/000014604 2024-11-28T10:22:50-0800 monthly 0.8 admin,premium knowledge_article_5625 knowledge_article_5625 2024-11-28T10:22:50-0800 000014604 Validated (External) Premium Ruckus icx switches Performance;Configuration;Installation Performance, Configuration, Installation, Ruckus ICX Switches The customer wanted to know how to configure a LAG. <h3>Static LAG Configuration</h3> <ol><li>Enter global configuration mode: <pre> <code>enable configure terminal </code></pre> </li><li>Create a static LAG with an ID and assign ports: <pre> <code>lag blue static id 11 ports ethernet 1/3/1 ethernet 1/3/2 </code></pre> </li></ol> <h3>Dynamic LAG Configuration</h3> <ol><li>Enter global configuration mode: <pre> <code>enable configure terminal </code></pre> </li><li>Create a dynamic LAG with an ID and assign ports: <pre> <code>lag blue dynamic id 11 ports ethernet 1/3/1 ethernet 1/3/2 </code></pre> </li></ol> <h3>Displaying LAG Information</h3> <ul><li>To display brief LAG information: <pre> <code>show lag brief </code></pre> </li><li>To display detailed LAG information: <pre> <code>show lag </code></pre> </li><li>To display interface-specific LAG information: <pre> <code>show interfaces lag 1 </code></pre> </li></ul> For more detailed instructions, please refer to the guide starting from page 142. <h3>Additional Resources</h3> This video may also help you with the configuration: LAG Configuration Video

Configuring a Link Aggregation Group (LAG).

2024-11-28T10:22:50-0800 2024-11-29T02:00:08-0800 http://support.ruckuswireless.com/article_attachments/kA2PH000001VXK50AO?attachment_index=0 2024-11-29T02:00:08-0800 monthly admin,premium knowledge_article_5625 knowledge_article_5625_attachment_1 fastiron-08030-l2guide.pdf 5144473.0 application/pdf https://support.ruckuswireless.com/articles/000014605 2024-11-28T10:26:53-0800 monthly 0.8 admin,premium knowledge_article_5624 knowledge_article_5624 2024-11-28T10:26:53-0800 000014605 Validated (External) Premium Ruckus icx switches Performance;Troubleshooting Performance, Troubleshooting, Ruckus ICX Switches Should I be concerned that the ICX8200 with an uptime of 9 days has one (1) Zombie task? The task is (mrvl_threads_pr): <pre> <code>show cpu-utilization tasks ... 2595 root 20 0 2019.7m 519 Running the commands <code>sh cpu task | inc Z</code> and <code>sh cpu task | inc - mrvl</code> on an ICX8200 may show similar outputs: <pre> <code>2652 root 20 0 0.0m 0.0m 0.0 0.0 0:00.02 Z `- mrvl_threads_pr 3532 root -18 1 66.3m 30.1m 0.0 1.0 0:00.00 S `- ZMQbg/1 2652 root 20 0 0.0m 0.0m 0.0 0.0 0:00.02 Z `- mrvl_threads_pr 3591 root 21 1 2021.9m 524.8m 0.0 16.6 0:00.00 S `- ZmqCleanupTask 3592 root -18 1 2021.9m 524.8m 0.0 16.6 0:00.00 S `- ZMQbg/0 3593 root 21 1 2021.9m 524.8m 0.0 16.6 0:00.00 S `- ZMQbg/0 3594 root -18 1 2021.9m 524.8m 0.0 16.6 133:08.10 S `- ZMQbg/2 3595 root 21 1 2021.9m 524.8m 0.0 16.6 0:00.03 S `- ZMQbg/2 4027 root -18 1 2021.9m 524.8m 0.0 16.6 0:00.00 S `- ZMQbg/3 4028 root -18 1 2021.9m 524.8m 0.0 16.6 0:00.00 S `- ZMQbg/4 3561 root 21 1 94.2m 35.9m 0.0 1.1 0:00.00 S `- ZmqCleanupTask 3562 root -18 0 94.2m 35.9m 0.0 1.1 0:00.00 S `- ZMQbg/0 3563 root -18 0 94.2m 35.9m 0.0 1.1 0:00.00 S `- ZMQbg/1 </code></pre> Checking with the team, they say that we shouldn't be worried about it. It just means the parent task does not know the status of it. This does not inherently mean there is an issue.

1 Zombie task observed on ICX8200.

2024-11-28T10:26:53-0800 2024-11-29T02:00:07-0800 https://support.ruckuswireless.com/articles/000007289 2024-11-27T10:09:28-0800 monthly 0.8 admin,premium knowledge_article_5619 knowledge_article_5619 2017-12-12T15:45:10-0800 000007289 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration;Troubleshooting Configuration, Troubleshooting, ICX 7250, ICX 7450, ICX 7750 How do I verify if an external USB flash drive is installed on a FastIron switch? There are multiple ways to verify if an external USB flash drive is installed: <ol><li>On bootup through the console log:</li></ol> Example of the console logs of a reload after the USB drive has already been mounted: Starting kernel ... sd 1:0:0:0: [sda] No Caching mode page present sd 1:0:0:0: [sda] Assuming drive cache: write through sd 1:0:0:0: [sda] No Caching mode page present sd 1:0:0:0: [sda] Assuming drive cache: write through sd 1:0:0:0: [sda] No Caching mode page present sd 1:0:0:0: [sda] Assuming drive cache: write through SP's eUSB-Infra Called Number of eUSB partitions 3 ... PLATFORM SP Config partition mounted. eUSB flash drive is ready 1 external USB Drive(s)/Partition(s) Mounted.. Example of a reload with no external USB drive inserted in to the chassis: Starting kernel ... SP's eUSB-Infra Called Number of eUSB partitions 3 ... PLATFORM SP Config partition mounted. eUSB flash drive is ready No External USB Drive(s) Mounted . <ol start="2"><li>From the "ss_script.log" supportsave file</li></ol> Example of the supportsave file after the USB drive has already been mounted: 1 eUSB and 1 external USB drives are connected finished calling eusb-infra umount: can't umount /proc/bus/usb: No such file or directory Creating the Linux user bde Thu Jan 1 00:00:21 UTC 1970:Inserting the module with watchdog enabled. mkdir: can't create directory '/dev/net': File exists mknod: /dev/net/tun: File exists Creating the first Tap interface Set 'tap0' persistent and owned by uid 0 Starting the FastIron. Thu Jan 1 00:00:28 UTC 1970:Starting the FastIron. Example of the supportsave file with no USB drive inserted in to the chassis: default eusb_infra enabled SPATHA eUSB Enabled eUSB logger infrastructure Unpacking .... bin/eUSB-Infra/ bin/eUSB-Infra/usb-ls.sh bin/eUSB-Infra/usb-func-exports.sh bin/eUSB-Infra/usb-automount.sh bin/eUSB-Infra/format-exusb-fat.sh eUSB logger infrastructure unpacked! eUSB logger Infrastructure called kernel.hotplug = /sbin/mdev vendorid 14af productID af01 matched eUSB slot found in sda no external Block device found 1 eUSB and 0 external USB drives are connected finished calling eusb-infra umount: can't umount /proc/bus/usb: No such file or directory Creating the Linux user bde Thu Jan 1 00:00:17 UTC 1970:Inserting the module with watchdog enabled. mkdir: can't create directory '/dev/net': File exists mknod: /dev/net/tun: File exists Creating the first Tap interface Set 'tap0' persistent and owned by uid 0 route: SIOCADDRT: Network is unreachable ERROR: Failure in gw add Starting the FastIron. <ol start="3"><li>With the "show files disk0" command</li></ol> Example of the output prior to the USB drive being mounted: ICX7450-48 Router#mount disk0 ICX7450-48 Router#show files disk0 External USB disk is not mounted or plugged in. You can try to mount it by doing ICX7450-48 Router#mount disk0 To unmount it you can do ICX7450-48 Router#unmount disk0 Example of the output after the USB drive is mounted: ICX#show files disk0 960.7M bytes Free in disk0 <ol start="4"><li>With the "dm usb-info" command</li></ol> Example of the output prior to the USB drive being mounted (see below for the full output): ICX# dm usb-info *** USB devices information *** Total USB devices present = 1 Example of the output after the USB drive is mounted: ICX#dm usb-info *** USB devices information *** Total USB devices present = 2 NOTE: This output will only show 2 devices present (as opposed to 1 under normal conditions (to represent the internal switch USB drive)) after the external USB drive is mounted AND the switch is reloaded. Example of the "dm usb-info" output under normal conditions, without an external USB drive inserted: ICX# dm usb-info *** USB devices information *** Total USB devices present = 1 ------------------------------------------------------------- Internal USB details: Device id = 0 Size = 1919 MB Block size = 512 bytes Total blocks = 3930112 Speed = 480 Mbps Serial no = 9900314061200078 Vendor name = ATP Electronics Vendor id = 0x14af Product name = ATP IG eUSB Product id = 0xaf01 Bus no = 1 Bus dev no = 3 Revision no = 2.10 Driver = usb-storage Partitions = 3 Partition#0 details: Is formatted = No Device path = /dev/sda1 Size = 32 MB Partition#1 details: Is formatted = No Device path = /dev/sda2 Size = 32 MB Partition#2 details: Is formatted = Yes Device path = /dev/sda3 Size = 1852 MB Mount point = / File system = ext4

How do I verify if an external USB flash drive is installed on a FastIron switch?

2024-11-27T10:09:28-0800 2024-11-28T08:00:06-0800 https://support.ruckuswireless.com/articles/000008283 2024-11-25T03:57:38-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5605 knowledge_article_5605 2018-10-24T02:45:47-0700 000008283 Validated (External) Public Virtual smartcell gateway Configuration;Troubleshooting Configuration, Troubleshooting, virtual SmartCell Gateway How to configure vSZ Admin/management users to use Radius admin authentication? Step 1: Create Role/Group: - Login to the vSZ-H -->Administration -->Admins and Roles -->Groups -->Create <img alt="User-added image" height="179" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNPJB" width="500"></img> Step 2: Create a Group/Role and give the required permission: <img alt="User-added image" height="265" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNPMP" width="500"></img> Step 3:- Add the resources:- <img alt="User-added image" height="349" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EM50000000lqos" width="500"></img> <img alt="User-added image" height="346" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EM50000000lqox" width="500"></img> <img alt="User-added image" height="349" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EM50000000lqp2" width="500"></img> Step 4:- Add the Domain: <img alt="User-added image" height="265" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNNR5" width="500"></img> Step 5: Add/Create the Users: <img alt="User-added image" height="347" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EM50000000lqpH" width="500"></img> <img alt="User-added image" height="338" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EM50000000lqpM" width="500"></img> <img alt="User-added image" height="346" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EM50000000lqpR" width="500"></img> <img alt="User-added image" height="347" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EM50000000lqpW" width="500"></img> <img alt="User-added image" height="265" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNPPd" width="500"></img> <img alt="User-added image" height="265" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNPRF" width="500"></img> Step 6: Create AAA server: - Login to vSZ GUI --> Administration --> Admins and Roles --> AAA --> Create --> Add the Server details with shared secret --> Click Ok -Select the User Group that was created earlier(Group1) and Administrator as "RuckusAdmin". -Realm should be same as the user account domain on AD. <img alt="User-added image" height="265" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNPcX" width="500"></img> Step 7:- AD server configuration. a. Open Server Manager-->Tools--> click on Active Directory Users and computer <img alt="User-added image" height="186" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNP9W" width="500"></img> <img alt="User-added image" height="233" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNPsf" width="500"></img> Step 7:- Create a User Group/User on AD to grant access. a. Right click Users and create a new group, give it an appropriate name: Example: Ruckus-WSG-User-User1 <img alt="User-added image" height="368" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNPxV" width="500"></img> <img alt="User-added image" height="560" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNPz7" width="500"></img> b. Create or add a user to this new group: <img alt="User-added image" height="659" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNQ5Z" width="500"></img> <img alt="User-added image" height="652" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNQ7B" width="500"></img> Step 8:- Configure NPS to allow the new Group Access: a. Open “Network Policy Server”, expand “Policies” and create a new Policy to allow the newly created domain Group: <img alt="User-added image" height="333" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNQ8n" width="500"></img> b. Edit the New Policy and go to Conditions>UserGroups and click on the “Add” button to add group "Ruckus-WSG-User-User1" that was created earlier. <img alt="User-added image" height="331" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNQC1" width="500"></img> c. Edit the New Policy and go to Settings>Vendor Specific and click on the “Add” button and then in the VSA attribute select Vendor-Specific: Radius Standard <img alt="User-added image" height="297" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNQGr" width="500"></img> d. In the Attribute information dialog, click on “Add”: <img alt="User-added image" height="447" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNQIT" width="500"></img> e. In the Vendor-Specific Attribute Information dialog, enter Ruckus vendor code of 25053 and select “Yes. It conforms” and click on “Configure Attribute”: <img alt="User-added image" height="449" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNQK5" width="500"></img> f. In the “Configure VSA (RFC Compliant)” dialog set the attribute number to 10, use a String format and provide the String value. It should match the string configured in Step 5: <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNQLh"></img> Note: Screenshot from step 5: The name of the User created should match the above String: <img alt="User-added image" height="346" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EM50000000lqqo" width="500"></img> g. Click OK and verify the new NPS policy show the correct: <img alt="User-added image" height="281" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNQS9" width="500"></img> h. Create a RADIUS client--> Right click RADIUS client--> New--> add vSZ IP address and shared secret that was configured in step 6. <img alt="User-added image" height="380" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNQgf" width="500"></img> Note: You can run the ‘Test AAA’ to verify the connectivity. <img alt="User-added image" height="495" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNQjt" width="500"></img> Step 9:- Login with the Username:- ‘username@domain_name/realm_name’ and the correct password. Example:- <img alt="User-added image" height="281" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001Lbt&feoid=00N50000002Cf3M&refid=0EMPH00000DNQlV" width="500"></img>

The article describes SZ management user configuration for authentication using a Radius server

2024-11-25T03:57:38-0800 2024-11-25T14:00:06-0800 https://support.ruckuswireless.com/articles/000014474 2024-11-22T12:22:05-0800 monthly 0.8 admin,premium knowledge_article_5601 knowledge_article_5601 2024-11-22T12:22:05-0800 000014474 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Known issues and workarounds Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 How to fix the spelling and grammatical errors in the Guest Access Self-Registration page? This issue is resolved in the following versions: <ul><li>SmartZone 6.1.2 (LT-GD Patch 2): Version 6.1.2.0.441.</li><li>SmartZone 7.0.0 (GA): Version 7.0.0.0.726.</li></ul> The <a href="https://support.ruckuswireless.com/software/4042" target="_blank">release note</a> of 6.1.2 (LT-GD Patch 2) i.e. 6.1.2.0.441 version has it resolved under ER-13108. Additional Notes: Ensure your SmartZone system is updated to one of the above versions to avoid these errors in the Guest Access Self-Registration page.

There is an existing spelling and grammatical error in the Guest Access Self Registration page. This issue is fixed in the SmartZone 6.1.2 Patch 2 version and the 7.0.0 version.

2024-11-22T12:22:05-0800 2024-11-25T04:00:10-0800 https://support.ruckuswireless.com/articles/000014521 2024-11-22T17:20:07-0800 monthly 0.8 admin,premium knowledge_article_5602 knowledge_article_5602 2024-11-22T17:20:07-0800 000014521 Validated (External) Premium Zoneflex indoor Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor Why AP's with Model R610 keeps rebooting after updating them to 6.1.2 Controller Firmware ? How can we resolve AP reboot after firmware update to 6.1.2 Controller <ol><li>Validating the Latest release notes with codes with similar issue being reported:</li></ol> <ul style="margin-left: 40px;"><li>6.1.2.0.404 ( LT-GD Patch-2 ) , 6.1.2.0.441 ( LT-GD Patch-2 ), AP patch - 6.1.2.0.1003 ( LT-GD-AP-Patch-1003 ), AP patch - 6.1.2.0.1392 (LT-GD-AP Patch-Wave-2 )</li><li>Found fix on AP patch - 6.1.2.0.1392 (LT-GD-AP Patch-Wave-2 )</li><li><img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CdR&feoid=00N50000002Cf3M&refid=0EMPH00000BoysH"></img></li><li>After updating the Controller to 6.1.2.0.441 ( LT-GD Patch-2 ) and updating the AP patch 6.1.2.0.1392 (LT-GD-AP Patch-Wave-2 ) the issue was fixed and the Controller is on Latest Code on 6.1.2 along with AP firmware with latest Patch of R6.1.2.</li></ul>

R610 AP model or 802.11ac Wave 2 AP models reported Continuous Reboot issues after updating them to 6.1.2 Version on RUCKUS Smart Zone. This article explains the steps to identify the reported issue on the next available release notes and apply the fix through AP Patch and Firmware upgrade on Controller.

2024-11-22T17:20:07-0800 2024-11-25T04:00:09-0800 https://support.ruckuswireless.com/articles/000014594 2024-11-21T16:13:33-0800 monthly 0.8 admin,premium knowledge_article_5600 knowledge_article_5600 2024-11-21T16:03:42-0800 000014594 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, SmartCell Gateway Can I upgrade SmartZone from 6.1.2 Patch-3 to SZ 7.0.0 Version? Refer to the attached TSB

This Article explains the upgrade limitation from SZ 6.1.2 Patch-3 to SZ 7.0.0 Release

2024-11-21T16:13:33-0800 2024-11-22T14:00:07-0800 http://support.ruckuswireless.com/article_attachments/kA2PH000001UDLp0AO?attachment_index=0 2024-11-22T14:00:07-0800 monthly admin,premium knowledge_article_5600 knowledge_article_5600_attachment_1 TSB-2024-007-SZ Upgrade 6_1_2 to 7_0.pdf 252173.0 application/pdf https://support.ruckuswireless.com/articles/000008661 2024-11-20T09:20:07-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_3467 knowledge_article_3467 2018-12-03T12:41:55-0800 000008661 Validated (External) Public Ruckus cloud lte;Ruckus cloud wifi Website access;Website services;Registration Website Access, Website Services, Registration, Ruckus Cloud LTE, Ruckus Cloud WiFi How to add an Administrator on the RUCKUS One Portal? <h2>Adding an Administrator to Your RUCKUS One Account</h2> If you want to delegate the management of APs and switches in your venues to another user, you can create an administrator account for that user. Note: Trial accounts are limited to one administrator account. If you have a trial account with a TEMP license, you cannot create an additional administrator account. Follow these steps to add an administrator to your RUCKUS One account: <h3>Steps to Add an Administrator</h3> <ol><li> Navigate to Administration: <ul><li>From the navigation bar, click Administration > Account Management > Administrators.</li></ul> </li><li> Add Administrator: <ul><li>Click Add Administrator.</li><li><img alt="User-added image" height="128" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001O0H&feoid=00N50000002Cf3M&refid=0EMPH000008l1H0" width="500"></img></li></ul> </li><li> Enter User Information: <ul><li>On the Add New Administrator page, add the email of the user you want to make an administrator.</li><li>Select Invite new user. <ul><li>Enter the email address. RUCKUS One will create an account and send an email invitation.</li></ul> </li></ul> </li><li> Assign Role: <ul><li>In the Role list, select the appropriate role for the user: <ul><li>Prime Admin</li><li>Administrator</li><li>Guest Manager</li><li>Read Only</li><li>DPSK Manager</li></ul> </li><li><img alt="User-added image" height="381" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001O0H&feoid=00N50000002Cf3M&refid=0EMPH000008l8Wz" width="500"></img></li></ul> </li><li> Send Invitation: <ul><li>Click Send Invitation.</li><li>If you invite a new user, they will receive an email with the subject RUCKUS Support Account Invitation. Ask the user to check their inbox (including junk mail) and click the link to complete the registration process.</li></ul> </li></ol>

The article has got step by step instructions to add an administrator on the RUCKUS One portal

2024-11-20T09:20:07-0800 2024-11-21T12:00:07-0800 https://support.ruckuswireless.com/articles/000014549 2024-11-20T12:20:45-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5598 knowledge_article_5598 2024-11-20T12:20:45-0800 000014549 Validated (External) Public Sz144;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 100-D (SZ100-D) Configuration;Security Configuration, Security, SZ144, virtual SmartCell Gateway, SZ100 <ul><li>How to configure the 802.1x authentication using NPS server in vSZ/Smartzone</li></ul>

Configuration steps of 802.1x authentication using NPS policies- vSZ/Smartzone

2024-11-20T12:20:45-0800 2024-11-21T12:00:06-0800 https://support.ruckuswireless.com/articles/000014581 2024-11-20T05:28:14-0800 monthly 0.8 admin,premium knowledge_article_5596 knowledge_article_5596 2024-11-20T05:28:14-0800 000014581 Validated (External) Premium Knowledge;Cloud services Knowledge base;Support license activation Knowledge Base, Support License Activation, Knowledge, Cloud Services RUCKUS One Managed Service Providers (MSP) <img alt="User-added image" height="184" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001NfJ&feoid=00N50000002Cf3M&refid=0EMPH00000DmW7m" width="500"></img> To view license compliance for networking devices in a RUCKUS One Managed Service Provider account: <ol style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Navigate to the Compliance Page: <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Login to Ruckus One portal.</li><li style="margin-bottom: 11px;">Select Subscriptions.</li><li style="margin-bottom: 11px;">Click the Compliance tab.</li></ul> </li><li style="margin-bottom: 11px;">Compliance Page Details: The Device Networking Subscriptions tiles for MSPs will display:</li></ol> a. For the MSP’s Own Account: <ul style="margin-bottom: 11px;"><li style="list-style-type: none;"> <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Devices Supported: Devices like Access Points, Switches, SmartEdge vAppliances, and RWGs.</li><li style="margin-bottom: 11px;">Configured Devices: Number of devices configured in RUCKUS One by device type.</li><li style="margin-bottom: 11px;">Licenses Used: Number of licenses used per device type.</li><li style="margin-bottom: 11px;">Active Paid Licenses: Number of purchased licenses currently active and the expiration details.</li><li style="margin-bottom: 11px;">Active Trial Licenses: Number of trial licenses currently active with expiration details.</li><li style="margin-bottom: 11px;">Assigned Paid Licenses: Number of paid licenses assigned to the MSP’s account.</li><li style="margin-bottom: 11px;">Assigned Trial Licenses: Number of trial licenses assigned to the MSP’s account.</li><li style="margin-bottom: 11px;">Total Licenses Used: Total number of licenses used, including paid, trial, and assigned.</li><li style="margin-bottom: 11px;">Licenses Available/Gap: Difference between licenses purchased and licenses used (green for available, red for shortage).</li></ul> </li></ul> b. For MSP Customers: <ul style="margin-bottom: 11px;"><li style="list-style-type: none;"> <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Devices Supported: Devices like Access Points, Switches, SmartEdge vAppliances, and RWGs.</li><li style="margin-bottom: 11px;">Configured Devices: Number of devices configured for each MSP customer.</li><li style="margin-bottom: 11px;">Licenses Used: Number of licenses used by the customer’s devices (paid and trial).</li><li style="margin-bottom: 11px;">Active Paid Licenses: Number of paid licenses assigned to the customer, along with expiration details.</li><li style="margin-bottom: 11px;">Total Licenses Used: Total licenses used by the customer, including both paid and trial licenses.</li><li style="margin-bottom: 11px;">Licenses Available/Gap: Difference between licenses purchased and used, with green indicating available licenses and red indicating a shortage.</li></ul> </li></ul> License Compliance Indicators: <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Green Check: Indicates licenses are available for both the MSP and its customers.</li><li style="margin-bottom: 11px;">Red Exclamation Mark: Indicates a shortage of licenses, which requires attention.</li></ul> <div align="center" style="text-align: center;"> <hr align="center" size="2" width="100%"></hr></div> Summary of Key Points <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Visual Indicators: Green check (licenses available) or red exclamation mark (license shortage).</li><li style="margin-bottom: 11px;">Active Licenses: <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Paid Licenses: Licenses that have been purchased.</li><li style="margin-bottom: 11px;">Trial Licenses: Licenses that are temporarily granted and have an expiration date.</li></ul> </li><li style="margin-bottom: 11px;">Licenses Available/Gap: Displays the difference between licenses purchased and licenses used (positive for availability, negative for shortage).</li></ul> By regularly monitoring the Compliance page, you can ensure that your RUCKUS One account remains in good standing, avoiding any license shortages that could impact device management or service delivery.

RUCKUS One is a cloud-based management platform that offers various licenses for managing networking devices. The Compliance page provides key insights into license allocation, utilization, and availability for Managed Service Providers (MSP). This overview will guide you through how to monitor and manage RUCKUS One licensing compliance for Managed Service Provider (MSP) account.

2024-11-20T05:28:14-0800 2024-11-20T14:00:07-0800 https://support.ruckuswireless.com/articles/000014556 2024-11-08T13:31:06-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5583 knowledge_article_5583 2024-11-08T13:31:06-0800 000014556 Validated (External) Public Ruckus icx switches;Brocade eos products;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What is SDPPI? The SDPPI certificate is required for telecommunications and wireless products imported into Indonesia. Importers must possess a valid SDPPI certificate to import replacement products into the country. Situations in which the customer must have an SDPPI certificate include: <ul style="margin-bottom: 11px;"><li style="margin-left: 8px;">When processing Wireless Access Points from the Hong Kong warehouse to Indonesia.</li><li style="margin-bottom: 11px; margin-left: 8px;">When fulfilling SAP orders directly to customers in Indonesia from locations outside the country.</li></ul>

2024-11-08T13:31:06-0800 2024-11-11T10:00:07-0800 https://support.ruckuswireless.com/articles/000014555 2024-11-08T13:31:11-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5582 knowledge_article_5582 2024-11-08T13:31:11-0800 000014555 Validated (External) Public Ruckus icx switches;Brocade eos products;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Processing replacements for Israel. Wired Advance Replacement Strategic & non-strategic <ol style="margin-bottom: 11px;"><li style="margin-left: 8px;">IOR/EOR auto notification will be sent to the customer. </li><li style="margin-left: 8px;">Replacement will be processed from our warehouse (WSDF4) in USA only after customer accepts the IOR/EOR terms.</li><li style="margin-left: 8px;">Customers must return the defective to USA warehouse (WSDF4). <ol style="list-style-type: lower-alpha;"><li style="margin-left: 8px; margin-bottom: 11px;">Cost of defective return to be borne by the customer.</li></ol> </li></ol> Wireless Advance Replacement Strategic <ol style="margin-bottom: 11px;"><li style="margin-left: 8px;">Replacements will be stocked in USA warehouse. i.e WSDF4.</li><li style="margin-left: 8px;">Send an email to the customer if they have. <ol style="list-style-type: lower-alpha;"><li style="margin-left: 8px;">Import License & </li><li style="margin-left: 8px;">Broker who can clear the part on their behalf.</li></ol> </li><li style="margin-left: 8px;">Only after the confirmation replacements should be processed from our end. </li><li style="margin-bottom: 11px; margin-left: 8px;">RUCKUS will retrieve the defectives & inbound in the warehouse in USA. i.e WSDF4. </li></ol> Non-strategic <ol style="margin-bottom: 11px;"><li style="margin-left: 8px;">Replacements will be stocked in Venlo warehouse. i.e WMST2.</li><li style="margin-left: 8px;">Send an email to the customer if they have Import license for the replacement part which we will be processing. </li><li style="margin-left: 8px;">Only after the confirmation replacements should be processed from our end. </li><li style="margin-bottom: 11px; margin-left: 8px;">RUCKUS will retrieve the defectives & inbound in the warehouse in Venlo. i.e WMST2. </li></ol> Return to Factory Strategic <ol style="margin-bottom: 11px;"><li style="margin-left: 8px;">Customers should return the defectives to USA warehouse. i.e WSDF4. <ol style="list-style-type: lower-alpha;"><li style="margin-left: 8px;">Shipping charges should be borne by customers.</li></ol> </li><li style="margin-left: 8px;">Send an email to the customer if they have. <ol style="list-style-type: lower-alpha;"><li style="margin-left: 8px;">Import License & </li><li style="margin-left: 8px;">Broker who can clear the part on their behalf.</li></ol> </li><li style="margin-bottom: 11px; margin-left: 8px;">Only after the confirmation replacements should be processed from our end. </li></ol> Non-strategic <ol style="margin-bottom: 11px;"><li style="margin-left: 8px;">Customers should return the defectives to Venlo warehouse. i.e WMST2. <ol style="list-style-type: lower-alpha;"><li style="margin-left: 8px;">Shipping charges should be borne by customers.</li></ol> </li><li style="margin-left: 8px;">Send an email to the customer if they have Import license for the replacement part which we will be processing. </li><li style="margin-bottom: 11px; margin-left: 8px;">Only after the confirmation replacements should be processed from our end. </li></ol>

2024-11-08T13:31:11-0800 2024-11-11T10:00:06-0800 https://support.ruckuswireless.com/articles/000007409 2024-11-01T06:40:23-0700 monthly 0.8 admin,premium knowledge_article_5580 knowledge_article_5580 2017-12-12T16:13:31-0800 000007409 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to Assign an IP address to a virtual interface on a Layer 3 ICX RUCKUS switch <h3>Assigning an IP Address to a Virtual Interface</h3> <h4>Overview</h4> A virtual interface is a logical port associated with a Layer 3 Virtual LAN (VLAN) configured on a Layer 3 switch. By configuring routing parameters on this virtual interface, you enable the Layer 3 switch to route protocol traffic between different Layer 3 VLANs without the need for an external router. This functionality allows for efficient traffic management within your network. This section outlines the steps to configure an IP address on a virtual interface. Note: The Layer 3 switch utilizes the lowest MAC address on the device (typically that of port 1 or 1/1/1) as the MAC address for all ports within all virtual interfaces configured on the device. <h4>Steps to Configure a Virtual Interface and Assign an IP Address</h4> To add a virtual interface to a VLAN and assign an IP address to it, use the following commands: <h4>Example for Code Stream Between 8030 to 8095</h4> <code> device(config)# vlan 2 name IP-Subnet_10.1.2.0/24 device(config-vlan-2)# untag ethernet 1 to 4 device(config-vlan-2)# router-interface ve 2 device(config-vlan-2)# interface ve 2 device(config-vif-2)# ip address 10.1.2.1/24 </code> <h4>Example for Code Stream 9010 and Later</h4> <code> device(config)# vlan 2 name IP-Subnet_10.1.2.0/24 device(config-vlan-2)# untag ethernet 1 to 4 device(config-vlan-2)# interface ve 2 device(config-vif-2)# ip address 10.1.2.1/24 </code> <h3>Command Explanation</h3> <ol><li> VLAN Creation: The first command in both examples creates a Layer 3 protocol-based VLAN named IP-Subnet_10.1.2.0/24 and adds a range of untagged ports (1 to 4) to this VLAN. </li><li> Router Interface Command: The <code>router-interface ve 2</code> command creates virtual interface 2 as the routing interface for the VLAN. The syntax for this command is as follows: <code>router-interface ve num </code> <ul><li>num: Specifies the virtual interface number, which can range from 1 to 4095.</li></ul> </li><li> Interface Configuration: The last two commands switch to the interface configuration level for the virtual interface and assign an IP address to it. The syntax for this command is: interface ve num </li></ol> <h3>Important Considerations</h3> Beginning with the 09.0.00 release, when a VLAN is configured, a virtual routing interface is statically mapped to the VLAN ID. However, the virtual interface is created only when you issue the <code>interface ve num</code> command. It is crucial to ensure that the ve-num corresponds to the vlan-id of the VLAN under which it is configured. Additionally, when configuring virtual routing interfaces on a device, you may specify a number from 1 to 4095. However, the total number of virtual routing interfaces configured must not exceed the system maximum limit of 512. For more information, refer to the official documentation based on your current version: <a href="https://docs.commscope.com/bundle/fastiron-09010-l2guide/page/GUID-C656873A-73F9-405B-B379-096F6C9BF5B1.html" target="_blank">https://docs.commscope.com/bundle/fastiron-09010-l2guide/page/GUID-C656873A-73F9-405B-B379-096F6C9BF5B1.html</a> <h5>Additional content (Video Explanation):</h5> (Brocade Campus VLAN ROUTING WITH ROUTER-INTERFACE) https://www.youtube.com/watch?v=Q2cGVHsBqd0

How to Assign an IP address to a virtual interface on a Layer 3 ICX RUCKUS switch

2024-11-01T06:40:23-0700 2024-11-05T10:00:07-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4XCAS?attachment_index=0 2024-11-05T10:00:07-0800 monthly admin,premium knowledge_article_5580 knowledge_article_5580_attachment_1 ka25B000000CcMQQA0_Attachment__c.pdf 585005.0 application/pdf https://support.ruckuswireless.com/articles/000014539 2024-10-18T13:58:19-0700 monthly 0.8 admin,premium knowledge_article_5577 knowledge_article_5577 2024-10-18T13:58:19-0700 000014539 Validated (External) Premium Ruckus icx switches;Brocade eos products;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds;Knowledge base Known Issues and Workarounds, Knowledge Base, Ruckus ICX Switches, Brocade EOS Products, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to Process replacements for Singapore? Wired & Wireless Advance Replacement Strategic & non-strategic <ol style="margin-bottom: 11px;"><li style="margin-left: 8px;">Replacements will be stocked in local warehouse in Singapore. i.e WSIN5</li><li style="margin-left: 8px;">If there’s NO part stocked in the local warehouse, the same will be fulfilled from production warehouse or by initiating an internal stock transfer.</li><li style="margin-bottom: 11px; margin-left: 8px;">Defectives will be retrieved to SINGAPORE by RUCKUS.</li></ol> Wireless Return to Factory Strategic & non-strategic <ol style="margin-bottom: 11px;"><li style="margin-right: 16px; margin-left: 8px;">Customers should return their defectives to SINGAPORE warehouse. i.e WSIN5. <ol style="list-style-type: lower-alpha;"><li style="margin-right: 32px; margin-left: 8px;">Shipping charges should be borne by customers.</li></ol> </li><li style="margin-left: 8px;">Replacements will be stocked in local warehouse in Singapore. i.e WSIN5</li><li style="margin-bottom: 11px; margin-left: 8px;">If there’s NO part stocked in the local warehouse, the same will be fulfilled from production warehouse or by initiating an internal stock transfer.</li></ol>

2024-10-18T13:58:19-0700 2024-10-21T18:00:07-0700 https://support.ruckuswireless.com/articles/000014320 2024-10-17T23:39:44-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5575 knowledge_article_5575 2024-05-20T06:21:02-0700 000014320 Validated (External) Public Sz144;Ruckus cloud wifi;Sz300;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ144, Ruckus Cloud WiFi, SZ300, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SCG200, virtual SmartCell Gateway, SZ100 How to stop Wi-Fi client device to share internet using Personal Hotspot? What is Personal Hotspot (Mobile Hotspot)? It is a feature supported by Wi-Fi client devices to extend internet access to other client devices using Wi-Fi, Bluetooth or USB. It uses Wi-Fi Routing capabilities similar to a home wireless router using NAT & DHCP to share internet access with other client devices. RUCKUS Access Points (AP) with any management platform cannot turn Off or restrict use of Personal Hotspot from client device as it is a function in the Mobile Operating System (OS) and RUCKUS AP/Controller do not have visibility to remote client device connected to Personal Hotspot as they are behind NAT.

Mobile personal hotspot is a feature of the device itself, this cannot be controlled by the Wi-Fi Access point infrastructure.

2024-10-17T23:39:44-0700 2024-10-18T14:00:07-0700 https://support.ruckuswireless.com/articles/000008572 2024-10-17T06:47:11-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3445 knowledge_article_3445 2018-11-01T13:35:22-0700 000008572 Validated (External) Public Ruckus icx switches;Ruckus support services Known issues and workarounds;Support license activation;Registration Known Issues and Workarounds, Support License Activation, Registration, Ruckus ICX Switches, Ruckus Support Services <h1 style="margin-top: 16px;"><a name="_Toc165923027">Entitlements eligible for SFP/Optic replacements</a></ <h1 style="margin-top: 16px;"><a name="_Toc165923027">Entitlements eligible for SFP/Optic replacements</a></h1> <ol style="margin-bottom: 11px;"><li style="list-style-type: none;"> <ol style="list-style-type: lower-alpha;"><li>If the SFPs are shipped from seller to the customer prior to June 1st, 2021, we can provide replacements for first 13 months.</li><li>If the SFPs are shipped from seller prior to June 1st, 2021, & has ACTIVE ADD on support like the GREEN highlighted entitlements we can provide replacements regardless of dates. </li><li>SFPs shipped from seller post June 1st, 2021, it is eligible for 60 months.</li><li style="margin-bottom: 11px;">Secure Uplift is an additional service entitlement that allow customer to KEEP Defective – Used at government and high security locations. We can provide replacement. </li></ol> </li></ol> Entitlements & Description <table class="Table" style="width: 356px;" width="356"><tbody><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Entitlement</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">Description</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RPSDPA</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">2 Business Day Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-PSDPA</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">2 Business Day Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-R4P</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">4-hour Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RCSDP4P</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">4-hour Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RP4P</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">4-hour Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-4P</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">4-hour Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RPC4P</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">4-hour Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-P4P</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">4-hour Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-CSDP4P</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">4-hour Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-P4OS</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">4-hour ONSITE</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-R4OS</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">4-hour ONSITE</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-4OS</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">4-hour ONSITE</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RP4OS</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">4-hour ONSITE</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RNDP</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Next Business Day Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-NDP</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Next Business Day Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-PNDP</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Next Business Day Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RCSDPNDP</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Next Business Day Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RPNDP</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Next Business Day Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RPCNDP</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Next Business Day Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-CSDPNDP</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Next Business Day Delivery</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RNDO</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Next Business Day ONSITE</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #c6e0b4; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-NDO</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Next Business Day ONSITE</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #ffc000; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-SECUPLIFT</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; background-color: #ffc000; border-top: none; border-right: 1px solid black; border-left: none;">No Return Part</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; background-color: #bdd7ee; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">War-Lifetime</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; background-color: #bdd7ee; border-top: none; border-right: 1px solid black; border-left: none;">Next Business Day Delivery or Shipment</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RPCRTF</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">RTF</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RRTF</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">RTF</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-PSW</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Software Only</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RPCSW</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Software Only</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RPSW</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Software Only</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RSW</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Software Only</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-SW</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">Software Only</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-PRMT</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">TAC only</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-PSDPM</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">TAC only</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RMT</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">TAC only</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RPRMT</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">TAC only</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RPSDPM</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">TAC only</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-RRMT</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">TAC only</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 97px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SVL-PCRMT</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; width: 259px; padding: 0in 7px 0in 7px; height: 19px; border-top: none; border-right: 1px solid black; border-left: none;">TAC </td></tr></tbody></table>

Eligibility to replace SFP-Optic parts

2024-10-17T06:47:11-0700 2024-10-17T14:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000008nw7SAA?attachment_index=0 2024-10-17T14:00:06-0700 monthly admin,premium,warranty,guest knowledge_article_3445 knowledge_article_3445_attachment_1 Entitlements eligible for SFP.docx 20127.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000014529 2024-10-14T11:23:38-0700 monthly 0.8 admin,premium knowledge_article_5571 knowledge_article_5571 2024-10-14T11:23:38-0700 000014529 Validated (External) Premium Virtual smartcell gateway Configuration;Troubleshooting Configuration, Troubleshooting, virtual SmartCell Gateway Why are clients receiving an IP address on single VLAN when there are multiple VLANS in Tunnel-Pvt-Group-ID? Setup: vSZ: A standard WLAN/ Method (802.1x EAP) with Dynamic VLAN enabled. Radius (802.1x) running on Windows 2016 server Testing Behavior: Clients were failing to get an IP address, though the Tunnel-Pvt-Group-ID has multiple VLAN's mapped. - Tried VLANS 172-174 under Tunnel-Pvt-Group-ID, Client requests IP on VLAN 172. - Tried VLANS 173-174 under Tunnel-Pvt-Group-ID, Client requests IP on VLAN 173. - Tried VLANS 172, 173 under Tunnel-Pvt-Group-ID, Client requests IP on VLAN 172. - Tried VLANS 174, 173 under Tunnel-Pvt-Group-ID, Client requests IP on VLAN 174. When checked RADIUS proxy logs, it is evident that AAA sends (both) or (ALL) the VLANs to the controller. Radius log: ?Line 351985: Tunnel-Private-Group-Id recvd from AAA: (172-174) ??Line 352658: Tunnel-Private-Group-Id recvd from AAA: (172-174) ??Line 360782: Tunnel-Private-Group-Id recvd from AAA: (172-174) ??Line 361339: Tunnel-Private-Group-Id recvd from AAA: (172-174) ??Line 375153: Tunnel-Private-Group-Id recvd from AAA: (173,174) ??Line 375710: Tunnel-Private-Group-Id recvd from AAA: (173,174) ??Line 397756: Tunnel-Private-Group-Id recvd from AAA: (173,174) ??Line 398313: Tunnel-Private-Group-Id recvd from AAA: (173,174) ??Line 408744: Tunnel-Private-Group-Id recvd from AAA: (172-173) ??Line 409301: Tunnel-Private-Group-Id recvd from AAA: (172-173) ??Line 421983: Tunnel-Private-Group-Id recvd from AAA: (174,173) ??Line 422540: Tunnel-Private-Group-Id recvd from AAA: (174,173) ??Line 470570: Tunnel-Private-Group-Id recvd from AAA: (1000,173) ??Line 471127: Tunnel-Private-Group-Id recvd from AAA: (1000,173) From AP support logs, it is understood that the client always requests IP from the first VLAN ID mentioned under Tunnel-Pvt-Group-ID within NPS attribute. Line 54057: Oct 10 20:33:40 RuckusAP daemon.info hostapd: @@202,clientJoin,"apMac"="34:20:e3:23:c6:80","clientMac"="9c:ef:d5:fb:e6:12","ssid"="!!PRBN-DOT1x","bssid"="34:20:e3:63:c6:84","userId"="","wlanId"="6","iface"="wlan4","tenantUUID"="839f87c6-d116-497e-afce-aa8157abd30c","apName"="RuckusAP","userName"="pruthvi","vlanId"="1000","radio"="b/g/n","encryption"="WPA2-AES","Instantaneous rssi"="0","Xput"="0","band"="2g" Line 54080: Oct 10 20:34:18 RuckusAP daemon.info hostapd: @@204,clientDisconnect,"apMac"="34:20:e3:23:c6:80","clientMac"="9c:ef:d5:fb:e6:12","ssid"="!!PRBN-DOT1x","bssid"="34:20:e3:63:c6:84","userId"="","wlanId"="6","iface"="wlan4","tenantUUID"="839f87c6-d116-497e-afce-aa8157abd30c","apName"="RuckusAP","userName"="pruthvi","vlanId"="1000","radio"="b/g/n","encryption"="WPA2-AES","osType"="Generic Smartphone/Android 9.0.0","hostname"="9c:ef:d5:fb:e6:12","firstAuth"="1728592420","associationTime"="1728592420","ipAssignTime"="0","disconnectTime"="1728592458","sessionDuration"="38","disconnectReason"="8","rxFrames"="0","rxBytes"="0","txFrames"="0","txBytes"="0","peakRx"="0","peakTx"="0","rssi"="58","receivedSignalStrength"="0","Instantaneous rssi"="0","Xput"="0","band"="2g" Line 54116: Oct 10 20:34:18 RuckusAP daemon.info hostapd: @@202,clientJoin,"apMac"="34:20:e3:23:c6:80","clientMac"="9c:ef:d5:fb:e6:12","ssid"="!!PRBN-DOT1x","bssid"="34:20:e3:63:c6:84","userId"="","wlanId"="6","iface"="wlan4","tenantUUID"="839f87c6-d116-497e-afce-aa8157abd30c","apName"="RuckusAP","userName"="pruthvi","vlanId"="1000","radio"="b/g/n","encryption"="WPA2-AES","Instantaneous rssi"="0","Xput"="0","band"="2g" Line 54124: Oct 10 20:34:18 RuckusAP daemon.info hostapd: @@206,clientAuthorization,"apMac"="34:20:e3:23:c6:80","clientMac"="9c:ef:d5:fb:e6:12","ssid"="!!PRBN-DOT1x","bssid"="34:20:e3:63:c6:84","userId"="","wlanId"="6","iface"="wlan4","tenantUUID"="839f87c6-d116-497e-afce-aa8157abd30c","apName"="RuckusAP","userName"="pruthvi","vlanId"="1000","radio"="b/g/n","encryption"="WPA2-AES","band"="2g" Line 54148: Oct 10 20:34:54 RuckusAP daemon.info hostapd: @@204,clientDisconnect,"apMac"="34:20:e3:23:c6:80","clientMac"="9c:ef:d5:fb:e6:12","ssid"="!!PRBN-DOT1x","bssid"="34:20:e3:63:c6:84","userId"="","wlanId"="6","iface"="wlan4","tenantUUID"="839f87c6-d116-497e-afce-aa8157abd30c","apName"="RuckusAP","userName"="pruthvi","vlanId"="1000","radio"="b/g/n","encryption"="WPA2-AES","osType"="Generic Smartphone/Android 9.0.0","hostname"="9c:ef:d5:fb:e6:12","firstAuth"="1728592458","associationTime"="1728592458","ipAssignTime"="0","disconnectTime"="1728592494","sessionDuration"="36","disconnectReason"="3","rxFrames"="37","rxBytes"="7919","txFrames"="2","txBytes"="352","peakRx"="7919","peakTx"="352","rssi"="57","receivedSignalStrength"="0","Instantaneous rssi"="0","Xput"="0","band"="2g" And it keep requesting IP from same VLAN without trying next VLAN ID. <img alt="User-added image" height="285" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001EnJ&feoid=00N50000002Cf3M&refid=0EMPH00000C5UBR" width="500"></img> <img alt="User-added image" height="404" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001EnJ&feoid=00N50000002Cf3M&refid=0EMPH00000C5TQg" width="500"></img> Solution: Keep single VLAN ID under Tunnel-Pvt-Group-ID within NPS.

Why clients are getting IP from only one VLAN?

2024-10-14T11:23:38-0700 2024-10-17T08:00:07-0700 https://support.ruckuswireless.com/articles/000014363 2024-10-09T13:16:33-0700 monthly 0.8 admin,premium knowledge_article_5568 knowledge_article_5568 2024-10-09T13:14:56-0700 000014363 Validated (External) Premium Upgrade-path-for-ICX-Switches

Upgrade-path-for-ICX-Switches

2024-10-09T13:16:33-0700 2024-10-14T12:00:10-0700 https://support.ruckuswireless.com/articles/000007404 2024-10-07T10:10:15-0700 monthly 0.8 admin,premium knowledge_article_5565 knowledge_article_5565 2017-12-12T16:13:29-0800 000007404 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to create a VLAN? ! Management VLAN configuration. SCH-ACCESS-101(config)# vlan 10 by port SCH-ACCESS-101(config-vlan-10)# untag ethernet 1/1/1 to 1/1/4 SCH-ACCESS-101(config-vlan-10)# management-vlan SCH-ACCESS-101(config-vlan-10)# default-gateway 10.10.10.1 1 SCH-ACCESS-101(config-vlan-10)# default-gateway 10.20.20.1 2 ! User VLAN configuration. SCH-ACCESS-101(config)# vlan 1011 SCH-ACCESS-101(config-vlan-1011)# tagged ethernet 1/1/13 to 1/1/17 ethernet 1/2/2 ethernet 1/2/4 ethernet 2/2/2 ethernet 2/2/4 SCH-ACCESS-101(config-vlan-1011)# untagged ethernet 1/1/12 SCH-ACCESS-101# show vlan 1011 Total PORT-VLAN entries: 14 Maximum PORT-VLAN entries: 64 Legend: [Stk=Stack-Id, S=Slot] PORT-VLAN 1011, Name data_vlan, Priority level0, Spanning tree On Untagged Ports: (U1/M1) 12 Tagged Ports: (U1/M1) 13 14 15 16 17 Tagged Ports: (U1/M2) 2 4 Tagged Ports: (U2/M2) 2 4 Uplink Ports: None DualMode Ports: None Mac-Vlan Ports: None Monitoring: Disabled ! Multiple VLANs applied to a single port. Device(config)#vlan 2 3 5 6 9 12 Device(config-mvlan-2*12)#tagged ethernet 1/1/1 Device(config-mvlan-1*12)#show vlan brief ethernet 1/1/1 Port 1/1/1 is a member of 6 VLANs VLANs 1 3 5 to 6 9 12 Untagged VLAN : 1 Tagged VLANs : 3 5 to 6 9 12

How to create a VLAN

2024-10-07T10:10:15-0700 2024-10-08T06:00:06-0700 https://support.ruckuswireless.com/articles/000014473 2024-10-07T07:38:13-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5563 knowledge_article_5563 2024-10-07T07:38:13-0700 000014473 Validated (External) Public Ruckus support services Installation;Support license activation Installation, Support License Activation, Ruckus Support Services How do I deploy a new instance of On-Prem Cloudpath without needing a new Activation-Code? Sometimes, there is a need to migrate On-Prem Cloudpath to a different VM or to re-deploy as a part of troubleshooting some issue. However, re-deploying Cloudpath would need an Activation-Code from Cloudpath Licensing/Renewals team in order to access it's Web UI and manage it further. As a solution, we can use the process of "Cannibalization" to migrate the database of an existing server to a new server without requiring an Activation Code. Important points to consider before doing Cannibalization - <ul><li>Please take a VM snapshot before proceeding with Cannibalization</li><li>Make sure the existing server and the new server have reachability to each other</li></ul> After the OVA has been deployed, network configuration is completed, and the system has rebooted, log into the system command line of new server and run the following command - # maintenance cannibalize <IP address or hostname of existing system> For example: # maintenance cannibalize 172.16.4.20 This will export the database from existing server and import into the new server. At the end of this command, it will prompt you whether you would also like to move the IP address from the existing server to the new server. Choose the desired option and the system will reboot and come up with the imported database.

2024-10-07T07:38:13-0700 2024-10-08T06:00:06-0700 https://support.ruckuswireless.com/articles/000014444 2024-10-04T07:30:06-0700 monthly 0.8 admin,premium knowledge_article_5532 knowledge_article_5532 2024-10-04T07:30:06-0700 000014444 Validated (External) Premium Ruckus wan gateway rwg Firmware;Installation;Troubleshooting Firmware, Installation, Troubleshooting, RUCKUS WAN Gateway RWG I have a standing error indicating "operating system version is outdated". Upgrade the OS to the latest version or 'cure' the error on Archive -> Notification

The RWG system was upgraded, but it continues to show that the operating system version is outdated. This could be due to the underlying OS being outdated or because the upgrade didn't clear the alert. The solution is to update the OS or use the 'Cure' option to clear the message.

2024-10-04T07:30:06-0700 2024-10-07T08:00:07-0700 https://support.ruckuswireless.com/articles/000014520 2024-10-03T11:13:32-0700 monthly 0.8 admin,premium knowledge_article_5530 knowledge_article_5530 2024-10-03T11:03:21-0700 000014520 Validated (External) Premium Sz144;Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration Configuration, SZ144, SZ300, SCG200, virtual SmartCell Gateway, SZ100 Can we configure SMTP without using Logon name and Password ? We cannot configure SMTP without logon name or password. We need to allow the SZ/vSZ to contact the mail server with the credential to establish a connection.

Customer trying to configure SMTP without username and password

2024-10-03T11:13:32-0700 2024-10-04T08:00:07-0700 https://support.ruckuswireless.com/articles/000014519 2024-10-02T03:57:02-0700 monthly 0.8 admin,premium knowledge_article_5529 knowledge_article_5529 2024-10-02T03:57:02-0700 000014519 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway Why is POST API not working for my switch devices from POSTMAN app ? The issue is due to incorrect type of value set on POSTMAN app. Below change was made on POSTMAN app which made issue fixed and POST API Calls success Click on headers >> check content type and make sure its application/JSON. <img alt="User-added image" height="201" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CWz&feoid=00N50000002Cf3M&refid=0EMPH00000Bh2Ej" width="500"></img>

Customer is using POSTMAN app for API auth and GET works but POST was not working while switch API is failing with error Unsupported Media Type | Errorcode 415

2024-10-02T03:57:02-0700 2024-10-03T12:00:06-0700 https://support.ruckuswireless.com/articles/000002988 2024-10-01T10:44:29-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3393 knowledge_article_3393 2014-05-02T08:31:34-0700 000002988 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector Why do I have an error message on the ZD (under Administer->Registration) registration? A bug in all the Zone Director versions does improper field validation on the Administer -> Registration (Product Registration) screen. <img alt="Example error" height="165" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CC1&feoid=00N50000002Cf3M&refid=0EM50000000LTkr" width="500"></img> Also note that the registration files (.CSV) should not be sent to Ruckus and they should be used to register on <a href="https://support.ruckuswireless.com/register" target="_blank">https://support.ruckuswireless.com/register</a> for the warranty registration. This will provide warranty registration, assign the assets to their account and inform them of other support contract status, or warranty expiration. If the device(s) registered is still under the 5 months limited software warranty, registering on the portal will also promote your guest-level account to premium for the remainder of the warranty. Need assistance with product registration, please refer article <a href="https://support.ruckuswireless.com/articles/000002007 " target="_blank">https://support.ruckuswireless.com/articles/000002007 </a>

Error says: "The registration name can only contain alpha-numeric characters, underscores, and hyphens, but the first character cannot be underscores or hyphens

2024-10-01T10:44:29-0700 2024-10-02T02:00:09-0700 https://support.ruckuswireless.com/articles/000006193 2024-10-01T10:45:52-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3409 knowledge_article_3409 2016-12-15T08:04:05-0800 000006193 Validated (External) Public Smartcell insight;SmartCell Insight (SCI) Performance;Installation;System network management;Known issues and workarounds;Support license activation;Registration Performance, Installation, System Network Management, Known Issues and Workarounds, Support License Activation, Registration, SmartCell Insight Why is my SCI showing 90 day trial license and will expires in 90 days even when perpetual license is active? Please ignore the warning message about the default license expiration, as long as you have activated and uploaded the permanent license (.bin) file for SCI2.X and also if you see the licenses as permanent on the SCI UI under license tab. <img alt="User-added image" height="54" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CFF&feoid=00N50000002Cf3M&refid=0EM50000000ak3m" width="500"></img> <img alt="User-added image" height="338" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CFF&feoid=00N50000002Cf3M&refid=0EM50000000ak3r" style="width: 729px; height: 469px;" width="500"></img> <img alt="User-added image" height="162" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CFF&feoid=00N50000002Cf3M&refid=0EM50000000ak3w" width="500"></img> The temp license takes precedence until it expires and then the permanent will automatically takes over.

When migrating from SCI1.X to SCI2.X license, both temp and permanent license retains in the SCI license tab. The temp license will take precedence until it expires and the permanent will automatically takes over.

2024-10-01T10:45:52-0700 2024-10-02T02:00:08-0700 https://support.ruckuswireless.com/articles/000008655 2024-10-01T11:03:00-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3462 knowledge_article_3462 2018-12-03T06:47:24-0800 000008655 Validated (External) Public Virtual smartcell gateway System network management;Support license activation;Registration System Network Management, Support License Activation, Registration, virtual SmartCell Gateway Geo-Redundancy Licensing Concept Geo-Redundancy (HA) licenses are available from 3.6 on SZ platform and are to be applied only on the standby cluster controller to enable the redundancy between the active and Standby cluster controllers. The license SKU for HA license is L09-0001-SGHA and is granular to a single AP license. How it works: <ol><li> Activation of HA licenses remains the same as virtual AP license activation Refer to article <a href="https://support.ruckuswireless.com/articles/000003436" target="_blank">https://support.ruckuswireless.com/articles/000003436</a> to know how the activation works </li><li> Unlike any other AP licenses, HA licenses do not show up on the controller web UI even after associating them to a specific SN via LiMAN. They are available only after configuring geo-redundancy and performing sync </li><li> HA licenses would only function on the standby cluster, hence they should be added on the standby controllers only </li><li> For SZ 6.0. the Switch license SKU: L09-0CX1-SGHA, is available CAPACITY-SWITCH-HA: Switch Capacity License on Standby cluster only. </li></ol>

Article has got information about Geo-redundancy licenses and the way they work

2024-10-01T11:03:00-0700 2024-10-02T02:00:08-0700 https://support.ruckuswireless.com/articles/000007282 2024-10-01T10:51:07-0700 monthly 0.8 admin,premium knowledge_article_2830 knowledge_article_2830 2017-12-12T15:45:10-0800 000007282 Validated (External) Premium Ruckus icx switches Configuration;Installation Configuration, Installation, Ruckus ICX Switches ICX License Install Instructions How to upload ICX license file for version below 08.0.70 Upload .xml file on ICX Switch below version 08.0.70 To enable the software via Telnet: The XML License File can be directly uploaded and installed on the unit. Complete the Following Steps: 1. Save the attached xml file and copy it to a tftp server that can be accessed by the ICX 6610 system. Use the CLI to access the switch/router. 2. The command copy tftp license will copy the license to the system and install it. Note: In the event that you require additional assistance, please contact your switch/router provider. Please retain the Serial Number and Software License file information for future reference. If any further assistance is required, please contact your vendor or Ruckus Support at https://support.ruckuswireless.com/contact-us.

How to upload ICX license file for version below 08.0.70?

2024-10-01T10:51:07-0700 2024-10-02T02:00:08-0700 https://support.ruckuswireless.com/articles/000001685 2024-10-01T11:04:32-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_551 knowledge_article_551 2013-02-28T09:22:00-0800 000001685 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;System network management;Troubleshooting;Support license activation Configuration, Installation, System Network Management, Troubleshooting, Support License Activation, ZoneDirector Does it matter which order to upgrade the license files on Zone Director in Smart Redundancy? AP License upgrade in SR will not affect the network, as the license upgrade will only add licenses to the ZD. You can upload AP license upgrade file on the Active ZD first and then on the standby ZD. However, make sure that you have the same number of AP licenses on both the controllers to not disturb the SR configuration between them.

Adding AP licenses does not affect the network for ZD's in Smart Redundancy, but both ZD's must have same number of AP licenses if running below 9.9 version

2024-10-01T11:04:32-0700 2024-10-02T02:00:08-0700 https://support.ruckuswireless.com/articles/000001564 2024-10-01T11:25:27-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_197 knowledge_article_197 2013-01-30T11:25:35-0800 000001564 Validated (External) Public Zonedirector;Flexmaster umm;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;System network management;Support license activation Configuration, Installation, System Network Management, Support License Activation, ZoneDirector, FlexMaster UMM How does FlexMaster licensing works? The warning message The maximum number of devices that your current license supports has been reached is displayed when you try adding a ZoneDirector and there are no free/available licenses on the FM. For example: If we have a Flex master(FM) with 100 license and ZoneDirectors(100 AP license) with Smart Redundancy enabled: The FM need 101 license (which means he need additional license on the FM), because the redundant ZD consumes one more license. If we try to join the SR ZD with the FM, the error The maximum number of devices that your current license supports has been reached pops out. <div> In this case you need to purchase additional licenses on the FM, activate them and upload the same on the FM, by logging into FM UI and navigating to Administer -> License </div> If the you try adding a standalone ZoneDirector (No SR enabled) with 100 AP license, the ZoneDirector should join the FM without any issues.

Article has got information about the FlexMaster licensing

2024-10-01T11:25:27-0700 2024-10-02T02:00:07-0700 https://support.ruckuswireless.com/articles/000004489 2024-10-01T11:51:01-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5527 knowledge_article_5527 2015-05-04T00:40:40-0700 000004489 Validated (External) Public Ruckus support services;Zonedirector 1000;Zonedirector 1100;Zonedirector 3000;Zonedirector 5000;ZoneDirector 1000;ZoneDirector 1100;ZoneDirector 3000;ZoneDirector 5000 Configuration;Support license activation Configuration, Support License Activation, Ruckus Support Services, ZoneDirector 1000, ZoneDirector 1100, ZoneDirector 3000, ZoneDirector 5000 How to activate and download RDY (Redundant controller) support and licenses below version 9.9? Have both the Primary and Secondary ZD serial numbers ready. Open the Support Purchase Acknowledgement (SPA) email you have received from Ruckus/Disti/VAR for your order. <ul><li>Login to Ruckus support portal- <a href="https://support.ruckuswireless.com/login" target="_blank">https://support.ruckuswireless.com/login</a> and click on Activate Purchase </li></ul> <img alt="User-added image" height="211" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CS9&feoid=00N50000002Cf3M&refid=0EM50000000lgYz" width="500"></img> <ul><li>Copy the activation code from the activation email </li></ul> <img alt="User-added image" height="398" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CS9&feoid=00N50000002Cf3M&refid=0EM50000000lgZ4" width="500"></img> <ul><li>Paste the activation code into the dialog box and click on Validate</li></ul> ? <img alt="User-added image" height="287" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CS9&feoid=00N50000002Cf3M&refid=0EM50000000Lj2x" width="500"></img> <ul><li>Accept the terms and conditions and click on Activate Purchase </li></ul> <img alt="User-added image" height="290" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CS9&feoid=00N50000002Cf3M&refid=0EM50000000Lj32" width="500"></img> <ul><li>Click on the Hyper link for the product code. This is a very important step, as this binds the product SN to the support contract and to generate the license </li></ul> <img alt="User-added image" height="154" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CS9&feoid=00N50000002Cf3M&refid=0EM50000000Lj37" width="500"></img> <ul><li>Primary serial number is the main controller SN and support serial number is the redundant or backup SN. Enter the SN’s and click Submit?</li></ul> Note: Read the SN's before submitting, as the ZD licenses once activated, cannot be transferred over <img alt="User-added image" height="281" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CS9&feoid=00N50000002Cf3M&refid=0EM50000000Lj3H" width="500"></img> <ul><li>Click on Download License if the license status says Active </li></ul> <img alt="User-added image" height="268" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000001CS9&feoid=00N50000002Cf3M&refid=0EM50000000lgZT" width="500"></img> <ul><li>If the license status says Pending, please allow 30 minutes for the licenses to be available</li><li>Once License status says Active, click on Download to download the license</li><li>The file should be of .LIC extension</li></ul>

Activating the RDY support on secondary ZD and downloading RDY licenses from support portal

2024-10-01T11:51:01-0700 2024-10-02T02:00:07-0700 https://support.ruckuswireless.com/articles/000009485 2024-09-22T22:41:06-0700 monthly 0.8 admin,premium knowledge_article_5522 knowledge_article_5522 2019-06-27T09:22:02-0700 000009485 Validated (External) Premium Ruckus cloud wifi Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, Ruckus Cloud WiFi Does Ruckus One Wi-Fi support SNMP? SNMPv2 or SNMPv3 are the two SNMP agents that now can be configured from the RUCKUS One controller if you go to: Network Control > SNMP Agent > Add SNMP Agent. From this dashboard you should be able to add a Profile Name, and Add SNMPv2 Agent. <img alt="User-added image" height="222" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013VJ&feoid=00N50000002Cf3M&refid=0EMPH00000B0Rt8" width="500"></img> If "Add SNMPv2 Agent" option is selected we should have Community Name, Privilege, Target IP and Port as part of the settings. <img alt="User-added image" height="222" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013VJ&feoid=00N50000002Cf3M&refid=0EMPH00000B0gTx" width="500"></img> If "Add SNMPv3 Agent" option is selected we should have User Name, Authentication Mode, Authentication Password, Privacy, and Privilege, <img alt="User-added image" height="220" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013VJ&feoid=00N50000002Cf3M&refid=0EMPH00000B0eGs" width="500"></img> Once you finish with the SNMP Agent you can finish with the profile. You can configure multiple SNMP Agents under the same profile. When the profile is setup you have to apply this configuration per Venue settings: Venues > Wi-Fi Configuration > Network Control > AP SNMP > Toggle ON "Use AP SNMP" > Select the profile created from the drop down menu. Or you can apply it per AP (individually): Wi-Fi > Select AP name, and click "Edit" > Network Control > AP SNMP > Customize > Toggle ON "Use AP SNMP" > Select the profile created from the drop down menu. Note: For more details about how to configure SNMP and the concepts for each field please take a look at the RUCKUS One Online Help User Guide: https://support.ruckuswireless.com/documents/4481-ruckus-one-online-help-user-guide/download

Ruckus already supports SNMP functionality in RUCKUS One controller

2024-09-22T22:41:06-0700 2024-09-24T08:00:07-0700 https://support.ruckuswireless.com/articles/000014504 2024-09-22T22:37:20-0700 monthly 0.8 admin,premium knowledge_article_5524 knowledge_article_5524 2024-09-22T22:37:20-0700 000014504 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath Why does client fail to authenticate via CloudPath using DPSK? In CloudPath, the DPSK pool was configured with the SSID name : "DPSK" In Smartzone, the WLAN was configured with the SSID name : " DPSK" The extra space in vSZ configuration caused the SSID mismatched. Issue would be resolved by changing it to "DPSK"

2024-09-22T22:37:20-0700 2024-09-24T08:00:07-0700 https://support.ruckuswireless.com/articles/000014422 2024-09-19T23:27:11-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5520 knowledge_article_5520 2024-09-19T23:27:11-0700 000014422 Validated (External) Public Zoneflex indoor Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor Why I couldn't upgrade the H550 solo AP to any firmware version locally? This issue is resolved in the next solo release 118.2.0.0.875.

Unable to perform a local upgrade on H550 using web UI from 116.0.0.0.1506 to any version.

2024-09-19T23:27:11-0700 2024-09-23T00:00:07-0700 https://support.ruckuswireless.com/articles/000010351 2024-09-19T04:37:41-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5519 knowledge_article_5519 2020-04-30T03:34:12-0700 000010351 Validated (External) Public Ruckus cloud lte;Ruckus analytics;Ruckus cloud switch;Ruckus cloud wifi Known issues and workarounds Known Issues and Workarounds, Ruckus Cloud LTE, Ruckus Analytics, Ruckus Cloud Switch, Ruckus Cloud WiFi Does the Admin password for Access points and switches are visible for the customers in RUCKUS-One? The access to the admin password for Access Points is restricted for the customers. Only VAR/Support Team/System Engineers should be able to see the AP CLI login password. SSH restricted and HTTPS access is disabled due to security reasons. Modifying AP configuration manually can cause issues and also config will not work after a reboot or after a new configuration push, this is why SSH and HTTPs is not open once AP joins the Cloud. For switches managed by RUCKUS-One, the login credentials can be found by navigating to: Venue ? Configure ? Switch Configuration ? AAA ? Local Users. <img alt="User-added image" height="236" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000019HN&feoid=00N50000002Cf3M&refid=0EMPH00000AbHs9" width="500"></img>

This article explains whether the admin password for the Access points and switches are visible for the customers in RUCKUS-One

2024-09-19T04:37:41-0700 2024-09-20T00:00:06-0700 https://support.ruckuswireless.com/articles/000009947 2024-09-18T07:38:52-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5515 knowledge_article_5515 2019-12-12T12:14:31-0800 000009947 Validated (External) Public Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Performance;Configuration Performance, Configuration, SZ144, SZ300, virtual SmartCell Gateway, SZ100 What is Auto Cell Sizing ? <div class="NIGHTEYE_BlueFilter NIGHTEYE_Filter"> </div> <div class="NIGHTEYE_YellowFilter NIGHTEYE_Filter"> </div> <div class="NIGHTEYE_DimFilter NIGHTEYE_Filter"> </div> When Wi-Fi is deployed in a high-density environment, despite the use of auto-channel selection, multiple APs operating on the same channel face a significant overlap of coverage regions. This could happen more so in a 2.4 GHz band where there is limited number of available channels and band path loss is lower than 5 GHz band. In such circumstances, the performance could be affected by AP to AP co-channel interference. To overcome this circumstance, the Auto Cell Sizing feature uses AP to AP communication to share information on the degree of interference seen by each other. Based on this information, the APs dynamically adjust their radio Tx power and Rx parameters (or cell size) to mitigate interference. Note: <ul><li>Enabling the Auto cell sizing option, disables the TX Power Adjustment configuration.</li><li>Ensure that Background Scanning is enabled.</li><li style="">Auto cell sizing feature is supported in SZ-100, SZ-144, SZ-300, vSZ-E and vSZ-H </li></ul> <div style="">To configure Auto-cell sizing follow the below steps: <ol><li>Login to controller GUI.</li><li>It can be configured either on Zone level or AP level,</li></ol> Click on the Zone -> Edit -> Under Radio options, enable Auto cell sizing. <ol start="3"><li style="">It can be enabled on both 2.4 Ghz and 5 Ghz.</li></ol> <div style=""><img alt="Auto cell sizing config" height="224" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015C9&feoid=00N50000002Cf3M&refid=0EM2J000000vb9W" width="500"></img></div> </div> From 6.0 and above versions it can be enabled by Clicking on the Zone -> Edit -> Under Band/Spectrum Configuration. <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015C9&feoid=00N50000002Cf3M&refid=0EMPH00000ALeW9"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015C9&feoid=00N50000002Cf3M&refid=0EMPH00000ALeWA"></img> <div class="NIGHTEYE_BlueFilter NIGHTEYE_Filter"> </div> <div class="NIGHTEYE_YellowFilter NIGHTEYE_Filter"> </div> <div class="NIGHTEYE_DimFilter NIGHTEYE_Filter"> </div>

Auto-Cell-Sizing description and how to enable it on the Web UI of the controllers

2024-09-18T07:38:52-0700 2024-09-19T06:00:07-0700 https://support.ruckuswireless.com/articles/000014494 2024-09-18T08:07:46-0700 monthly 0.8 admin,premium knowledge_article_5517 knowledge_article_5517 2024-09-18T08:07:46-0700 000014494 Validated (External) Premium Can we schedule a reboot of the APs every weeks or every months? Note:- Below process will reboot all the APs that are placed under the zone that you will select for the script to be executed on. vSZ is running on 6.1.2.0.404 and the AP is running on 6.1.2.0.981. Step: -1 Copy and save the below 3 lines in a notepad on your PC. model=all fw_version=6.1.2.0.981 reboot Step: -2 Login into the controller Web UI. Upload the Script under Monitor -> Troubleshooting & Diagnostics -> Scripts -> AP CLI Scripts <img alt="User-added image" height="203" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000018wP&feoid=00N50000002Cf3M&refid=0EMPH00000Ay5rx" width="500"></img> Step: -3 Click on Upload and assign any name under the script name, and select the .txt file saved on your PC. <img alt="User-added image" height="256" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000018wP&feoid=00N50000002Cf3M&refid=0EMPH00000AyHbK" width="500"></img> After uploading the script, the script will show up under the scripts. <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000018wP&feoid=00N50000002Cf3M&refid=0EMPH00000AyEOy"></img> Step: -4 Few commands are blacklisted so it is mandatory to check the box to execute the commands. <img alt="User-added image" height="214" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000018wP&feoid=00N50000002Cf3M&refid=0EMPH00000B2mLa" width="500"></img> Note: - The below AP CLI script commands are blacklisted from 5.1 and above software releases. reboot set factory set scg reset set scg init set scg ip set scg disable/enable set hub disable/enable set interface set password set login <img alt="User-added image" height="169" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000018wP&feoid=00N50000002Cf3M&refid=0EMPH00000B2oQc" width="500"></img> FYI:- If the CLI script contains any blacklisted commands, it is imperative to check the box. Otherwise, the "OK" option will be greyed out and unavailable for selection. <img alt="User-added image" height="316" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000018wP&feoid=00N50000002Cf3M&refid=0EMPH00000B2yZd" width="500"></img> Step: -5 Mention the details in the schedule options. <img alt="User-added image" height="191" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000018wP&feoid=00N50000002Cf3M&refid=0EMPH00000AyJQE" width="500"></img> Click on OK and save it.

The document provides a step-by-step process for executing a CLI script to reboot all Access Points (APs) within a specified zone. It includes instructions for creating and uploading the script, as well as information on blacklisted commands. Additionally, it highlights the importance of checking the box if blacklisted commands are present to enable the "OK" option for execution.

2024-09-18T08:07:46-0700 2024-09-19T06:00:07-0700 https://support.ruckuswireless.com/articles/000004057 2024-09-15T23:07:06-0700 monthly 0.8 admin,premium knowledge_article_5510 knowledge_article_5510 2015-02-17T08:32:27-0800 000004057 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How do I create an AP CLI script for the SCG200? For controller version 5.1.0 and older, follow these steps: 1. Use any simple text editor (like Notepad or vi, notepad) with below format #define AP FW version (must match the AP version in the zone) fw_version=2.1.2.0.110 #define Model class (only option available is 'all') model=all # Command (these are examples, any AP CLI command will be accepted; One command per line) set remote-mgmt snmp set snmp community ro READ <div style="margin-left: 40px;">2. Save the file. 3. Go to v/SZ/SCG WebUI: Administration -> Diagnostics -> AP CLI Scripts. 4. Select the zone where you want to apply it. 5. Click on 'Browse' and select the file from your PC. 6. Click on 'Upload' to load into SCG. 7. Click on 'Execute' to run it in the selected zone. For each AP you obtain execution status, if any command fails that AP will be marked as Failed. Otherwise it will be marked as 'succeed'.</div> The script will be executed only on currently connected APs. If at a later time new APs are added into the zone or they were disconnected when it was executed, the script needs to be executed it again. For controller version 5.1.1 or above, follow these steps: <div style="margin-left: 40px;">1. Use any simple text editor (like Notepad or vi, notepad) with below format</div> # A sample for AP CLI Script # Specific AP Model to run this script, # skip this part if there is no need to restrict AP Model model=R500,R700 # Below are example commands to be executed on APs. One command per line set provisioning-tag ruckus123 set beacon-interval wlan0 600 set blacklist wlan0 8 -1 set blacklist wlan0 9 -1 set blacklist wlan0 rx_phyerr 20000 set http enable set https disable set telnet enable set ssh disable set dns ipv4 111.1.1.1 222.1.1.1 Note: Below commands are not allowed in AP CLI script starting from 5.1.1 or above versions. However, you can execute blacklisted commands by selecting the checkbox: This script contains blacklisted commands, please confirm and agree execution. <img alt="User-added image" height="583" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015NR&feoid=00N50000002Cf3M&refid=0EMPH00000AOrqD" width="500"></img> reboot set factory set scg reset set scg init set scg ip set scg disable set scg enable set hub disable set hub enable set interface set password set login <div style="margin-left: 40px;">2. Save the file. 3. Go to v/SZ WebUI: Administration -> Diagnostics -> AP CLI Scripts. 4. Click on 'Upload' button, brows the script file created in step-1, give this script a name and click on Ok. 5. Now script will be listed in the same page, select the script which you wish to run and click on 'Execute", Choose the desired Zone and hit OK. 6. Script will run in background. To check the status, please see the History section on same page, choose the specific entry and then click on "View Execution Summery" </div>

Execute AP CLI commands (for configuration options not available in v/SZ/SCG) into all the APs assigned to a zone

2024-09-15T23:07:06-0700 2024-09-17T06:00:06-0700 https://support.ruckuswireless.com/articles/000014269 2024-09-12T11:55:04-0700 monthly 0.8 admin,premium knowledge_article_5224 knowledge_article_5224 2024-01-12T13:49:35-0800 000014269 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to process Wireless RMAs for Morocco? How to process Wireless RMAs for Morocco? Advance Replacement <ol><li style="margin-left: 8px;">Change the FSL Information to WSDF6.</li><li style="margin-left: 8px;">Send an email to the customer seeking their confirmation on brokerage and license. (Email template attached) </li><li style="margin-left: 8px;">Process the replacement if customer responds stating they have their brokerage and have necessary paperwork for clearance. <ol style="list-style-type: lower-alpha;"><li style="margin-left: 8px; margin-bottom: 11px;">IF customer states they DO NOT have broker for clearing, we should NOT process the replacement & escalate the same to RMA OD Manager. </li></ol> </li></ol> RTF (Return to Factory) <ol><li style="margin-left: 8px;">Change the FSL Information to WSDF6.</li><li style="margin-left: 8px;">SFDC will push the RTF template to customer to retrieve the defectives. </li><li style="margin-left: 8px;">Send an email to the customer seeking their confirmation on brokerage and license. (Email template attached) </li><li style="margin-left: 8px;">Process the replacement if customer responds stating they have their brokerage and have necessary paperwork for clearance. <ol style="list-style-type: lower-alpha;"><li style="margin-left: 8px; margin-bottom: 11px;">IF customer states they DO NOT have broker for clearing, we should NOT process the replacement & escalate the same to RMA OD Manager. </li></ol> </li></ol> Reason à If customer DO NOT have brokerage at the time of arrival, customs is NOT waiting or giving time for them to get one & charging $750 USD on us/RUCKUS. To avoid such a huge penalty we should process the replacements ONLY after customers confirmation on brokerage & license/paperwork.

How to process Wireless RMAs for Morocco?

2024-09-12T11:55:04-0700 2024-09-16T00:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA2Ht000000Pj6aKAC?attachment_index=0 2024-09-16T00:00:06-0700 monthly admin,premium knowledge_article_5224 knowledge_article_5224_attachment_1 Email Template - Morocco RMAs.docx 14342.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000008288 2024-09-12T02:50:47-0700 monthly 0.8 admin,premium knowledge_article_5509 knowledge_article_5509 2018-10-24T01:56:49-0700 000008288 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware Configuration, Firmware, SmartCell Gateway How to perform an upgrade of Virtual SmartZone (vSZ)? Prerequisites: Check the release notes for the supported AP models list and make sure that all your APs are supported in the new release. Use the below link to find the release note. <a href="https://support.ruckuswireless.com/documents/4767" style="color: blue; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/documents/4767</a> <img alt="User-added image" height="286" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am5qs" width="500"></img> STEP 1: Verify the Upgrade Path: Download the Release Notes for the target upgrade and refer the section ‘Supported Upgrade Path’ to confirm if there is any direct upgrade possible. If not, then go to the least required firmware to get to the Target Firmware. You can download the Release Notes for all the versions from the below link: - <a href="https://support.ruckuswireless.com/products/83-virtual-smartzone-vsz#documents" style="color: blue; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/products/83-virtual-smartzone-vsz#documents</a> For an Instance: - Current version on vSZ: 3.6.0 Target version: 6.1.2 Note: You can upgrade the vSZ to 6.1.2 only when the vSZ is at least on Version 3.6.2 or above Upgrade from SZ versions 3.6.2, 5.2.2, 6.0.0, 6.1.0 to 6.1.1 is supported. STEP 2: Verify the minimum required resource: Below screenshot is ONLY for 6.1.2 version: Note: Similarly refer the Required Resource for all other Version at each stage of the upgrade. <img alt="User-added image" height="425" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am6II" width="500"></img> <img alt="User-added image" height="308" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am8Gr" width="500"></img> STEP 3: Take Cluster backup: There are 2 ways to take the backup one is through GUI and another is from CLI: From GUI, Login to GUI --> Administration --> Backup & Restore --> Cluster --> ‘Back Up Entire Cluster’: <img alt="User-added image" height="97" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Alyiw" width="500"></img> You can download the cluster backup from the Smartzone GUI <img alt="User-added image" height="148" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am8Ov" width="500"></img> From CLI, Login to the vSZ CLI (SSH Session) à run the command ‘backup’ from the Enable mode: <img alt="User-added image" height="265" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am8QX" width="500"></img> SZ# copy backup tftp TFTP server host: <IP address of the tftp server> TFTP server port [default: 69]: 69 <img alt="User-added image" height="101" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am8Tl" width="500"></img> STEP 4: Take Configuration Backup: From GUI, Login to GUI --> Administration --> Backup & Restore --> Configuration --> ‘Backup’: <img alt="User-added image" height="200" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am3lq" width="500"></img> To download the configuration backup from the SZ GUI <img alt="User-added image" height="214" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am8dR" width="500"></img> From CLI, Run the below command to take the config back-up: <img alt="User-added image" height="59" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am8f3" width="500"></img> Run the below command to retrieve/download the config back-up to the local system using any TFTP server: <img alt="User-added image" height="112" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am76I" width="500"></img> You can use FTP to take the backup as well. copy backup ftp://username:password@<ftp server IP>/ Example below: SZ100-103# copy backup <a href="ftp://tac:tac@1.1.1.1/" style="color: blue; text-decoration: underline;" target="_blank">ftp://tac:tac@1.1.1.1/</a> STEP 5: Schedule a Downtime for the upgrade: - At each stage of the upgrade, the vSZ will reboot and the services will restart. It takes about 40 to 45 mins or above (the time varies depending upon the customer Network) for the services to come up. <img alt="User-added image" height="454" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am8n7" width="500"></img> Note: While the controller is upgrading, the AP continues to service the clients and there is no downtime during the vSZ upgrade. However, once the vSZ is upgraded and the AP Upgrade starts, AP’s will reboot during the upgrade stage and there will be client disconnection/downtime. The AP upgrade time depends upon the bandwidth to which the AP is connecting to VSZ. When we upgrade the controller, the WiFi will still be operational but there are two scenarios in which clients may be affected during the controller upgrade: <ol><li class="x" style="margin-left: 8px;">If we have a dot1x WLAN with the controller set up as a proxy, then during the controller upgrade, that specific WLAN will not allow clients to authenticate. Clients who are already authenticated will not experience any issues. Only new users attempting to connect to that WLAN will encounter the problem.</li></ol> <ol start="2"><li class="x" style="margin-left: 8px;">Additionally, if we have any WLAN with tunneling enabled, that WLAN will not function while the controller is being upgraded.</li></ol> Dot1x, WISPr, WebAuth, or other services hosted in the controller as a 'proxy' will be interrupted as the controller is offline. Additional Info: - By default, the AP Reboot timeout is set as shown in the below screenshot. You can increase this timeout depending upon the Network and the requirement: - <img alt="User-added image" height="287" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am8rx" width="500"></img> STEP 6: - Download the Firmware files: - Use the below link to download, all version Firmware files for the vSZ: <a href="https://support.ruckuswireless.com/products/83-virtual-smartzone-vsz#firmwares" style="color: blue; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/products/83-virtual-smartzone-vsz#firmwares</a> Sort the version as shown below: <img alt="User-added image" height="212" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am91d" width="500"></img> STEP 7: - Upload the Firmware file: - Login to the GUI --> Administration --> Upgrade --> Upgrade --> Browse under ‘Upload’ section --> <img alt="User-added image" height="188" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am6dG" width="500"></img> STEP 8: - Initiate the Upgrade: - Once the file is uploaded you will find the Tab for ‘Upgrade’ and ‘Backup and Upgrade’. If you have already taken the backup, then directly hit the Upgrade Tab. STEP 9: - AP Upgrade Procedure: - In 3.5.x and above you must manually change the AP Firmware from vSZ as shown below: - <img alt="User-added image" height="225" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am902" width="500"></img> Note: - The above step needs to be done for all the Zones. All AP’s on the respective Zones will be upgraded to the selected version. If you have any zone on 3.2, you cannot upgrade to 3.6.x and if you have any zone on 3.2 or 3.4, you cannot upgrade to 5.0. At any stage during the upgrade, if you need Technical Support Assistance, feel free to reach us on your Regional Support line number or through Chat:- <a href="https://support.ruckuswireless.com/contact-us" style="color: blue; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/contact-us</a> STEP 10 (Optional): - vDP Plane Upgrade: This step is applicable if you have vDP on the Network. Note: DP- Plane upgrade is a separate upgrade. First, upgrade the vSZ and then the DP. Follow the upgrade path for DP as well. You can download DP Firmware files from the below link: - <a href="https://support.ruckuswireless.com/products/84-virtual-smartzone-dataplane-vsz-d#firmwares" style="color: blue; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/products/84-virtual-smartzone-dataplane-vsz-d#firmwares</a> You can download the Documents from the below link: - <a href="https://support.ruckuswireless.com/products/84-virtual-smartzone-dataplane-vsz-d#documents" style="color: blue; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/products/84-virtual-smartzone-dataplane-vsz-d#documents</a> You can view and upgrade the virtual data plane version using patch files. This feature is only supported on vSZ-H and vSZ-E. <ul style="margin-bottom: 11px;"><li style="margin-left: 32px;">Select Administration > Upgrade.</li><li style="margin-left: 32px; margin-bottom: 11px;">Select the DP Patch tab. The DP Patch page appears.</li></ul> <img alt="User-added image" height="240" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000015P3&feoid=00N50000002Cf3M&refid=0EMPH00000Am7Pf" width="500"></img> <ul style="margin-bottom: 11px;"><li style="margin-left: 32px;">In Patch File Upload, click Browse to select the patch file (.ximg file).</li><li style="margin-left: 32px;">Click Upload.</li><li style="margin-left: 32px;">In Data Planes, choose a patch file version from the Select upgrade version.</li><li style="margin-left: 32px; margin-bottom: 11px;">Click Apply to apply the patch file version to the virtual data plane.</li></ul>

Firmware upgrade Procedure for Virtual SmartZone (vSZ)

2024-09-12T02:50:47-0700 2024-09-12T12:00:08-0700 https://support.ruckuswireless.com/articles/000008550 2024-09-11T23:03:12-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5508 knowledge_article_5508 2018-10-31T00:28:57-0700 000008550 Validated (External) Public Flexmaster umm Support license activation Support License Activation, FlexMaster UMM How does licensing works on UMM (Unleashed Multi-Site Manager) Ruckus Unleashed Multi-Site Manager (UMM) is a new NMS platform for Unleashed, ZoneDirector, P300 bridges. If you have Unleashed networks deployed across multiple small sites, Unleashed Multi-Site Manager is the one-stop solution for management, monitoring and reporting. It is a complete management platform that is intuitive and easy to use. It enables Unleashed networks to be securely monitored and managed from anywhere in the world with a single sign-on. Three types of Software Licenses are available for UMM : <ol><li>ZoneDirector and P300 APs </li><li>Unleashed APs </li><li>ICX switches</li></ol> Note : ZoneDirector consumes the Unleashed Multi-Site Manager license based on its AP licenses. For example, a ZoneDirector 3000 licensed for 500 APs consumes 500 licenses though there are no APs managed by ZoneDirector. 2 ways of getting UMM : <ol><li> Purchasing and installing new UMM In this case, it is required to purchase licenses along with the UMM </li><li> Upgrading FM to UMM 2.x If the FM is upgraded to UMM, the existing licenses on the FM gets migrated over to UMM 2.0 </li></ol> Note : An Unleashed Multi-Site Manager installation provides only one Unleashed license. If you upgrade from FlexMaster, Unleashed Multi-Site Manager provides 100 ZoneDirector licenses and one Unleashed license. Uploading the Device License UMM To enable the UMM license, you must first upload the license file to the UMM server. 1. Log in to Unleashed Multi-Site Manager 2. Select Administration > License. 3. Click Upload License. The Upload a license file dialog box is displayed. 4. Click Drop file here or click to upload file. 5. Select the license file and click Open. 6. Click OK to upload the license file to Unleashed Multi-Site Manager

Article has got information about UMM licensing

2024-09-11T23:03:12-0700 2024-09-12T12:00:08-0700 https://support.ruckuswireless.com/articles/000001405 2024-09-12T04:14:41-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3743 knowledge_article_3743 2013-01-17T07:37:12-0800 000001405 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Support license activation Support License Activation, ZoneDirector Is there any official path for purchasing licenses in package on ZoneDirectors? ZD1100: The minimum number of licenses that the ZD1100 can have is 5 and the maximum is 50. The LKU upgrade for ZD1100 is: 6 ==>12 ==> 25 ==> 50 ZD1200: The minimum number of licenses that the ZD1200 can have is 5 and can go up to either 75 or 150, depending on the firmware version running on the ZoneDirector <ul><li> If the ZD1200 is running below version 10.0, the maximum count that it can have is 75 AP licenses and anything above version 10.0 is 150 </li><li> ZD1200 does not have a upgrade license package to follow, the customers can choose their numbers depending on the requirement </li></ul> ZD1200 follows single AP license upgrade multiplied by the number of licenses required. The LKU upgrade path for ZD1200 is: 1 ==> 2 ==> 3 ==> 4 ........==> 75/150 ZD3000: The minimum number of licenses that the ZD3000 can have is 25 and the maximum is 500. The LKU upgrade for ZD3000 is: 25 ==> 50 ==> 100 ==> 150 ==> 200..... ==> 400 ==> 450 ==> 500 Note: Increments of 50 from 50 to 450. ZD5000: The minimum number of licenses that the ZD5000 can have is 100 and the maximum is 1000. The LKU upgrade for ZD ZD5000 is: 100 ==> 150 ==> 200 ==> 250 ......... ==> 900 ==> 950 ==> 1000 Note: Increments of 50 from 100 to 1000.

Article has got information about license packages that can be purchased on ZoneDirectors.

2024-09-12T04:14:41-0700 2024-09-12T12:00:08-0700 https://support.ruckuswireless.com/articles/000006190 2024-09-10T03:30:26-0700 monthly 0.8 admin,premium knowledge_article_4652 knowledge_article_4652 2016-12-14T11:03:01-0800 000006190 Validated (External) Premium Ruckus cloud wifi Known issues and workarounds;Website access Known Issues and Workarounds, Website Access, Ruckus Cloud WiFi I get an error when I refresh my timed out RUCKUS One WebUI login, what's wrong? If you encounter the error message "We're sorry, but something went wrong." while trying to log in to an expired RUCKUS One WebUI session, don't worry—this error typically occurs when the session has expired, and the system encounters an issue during the re-login process. Below are several methods you can try to resolve this issue and regain access to your RUCKUS One account. <h3>Steps to Resolve the Error</h3> <ol><li> Refresh the Page: <ul><li>Sometimes, simply re-typing the URL and refreshing the screen can resolve the issue. Try to re-enter the RUCKUS One URL in your browser and hit refresh.</li></ul> </li><li> Open a New Session: <ul><li>If refreshing the page doesn’t work, try opening a new session window. Close the current browser window, open a new one, and navigate back to the RUCKUS One login page to attempt logging in again.</li></ul> </li><li> Re-Type the URL: <ul><li>Another quick fix is to re-type the RUCKUS One URL directly in your browser's address bar and attempt to log in again.</li></ul> </li><li> Clear Browser History, Cookies, and Cache: <ul><li>Clearing your browser's history, cookies, and cache can help eliminate any stored data that might be causing the login issue.</li><li>After clearing, close the browser, reopen it, and try logging in again.</li></ul> </li><li> Try a Different Browser: <ul><li>If the problem persists, switch to a different web browser to see if the issue is browser-specific. Sometimes, compatibility issues can cause login errors in certain browsers.</li></ul> </li></ol> <h3>Still Experiencing Issues?</h3> If you’ve tried all of the above steps and are still unable to log in, the problem may be more complex. In such cases, it's best to reach out for professional support. <ul><li>Contact Ruckus Support: Visit the Ruckus Support page at <a href="https://support.ruckuswireless.com/contact-us" target="_new">Ruckus Support Contact</a> for further assistance.</li></ul>

Login issues with RUCKUS One WebUI can usually be resolved by refreshing the session, re-typing the URL, or clearing your browser's cache and cookies. If these solutions don't work, don't hesitate to contact Ruckus Support for help. By following the steps shared in this article, you should be able to quickly resolve the issue and regain access to your account.

2024-09-10T03:30:26-0700 2024-09-10T12:00:07-0700 https://support.ruckuswireless.com/articles/000008549 2024-09-10T04:18:03-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5493 knowledge_article_5493 2018-10-31T00:05:44-0700 000008549 Validated (External) Public Virtual smartcell gateway System network management;Support license activation System Network Management, Support License Activation, virtual SmartCell Gateway What is URL filtering? URL filtering is a crucial feature for network administrators, allowing them to block access to inappropriate or harmful websites, ensuring a secure browsing environment for users. If you're using URL filtering on a Virtual SmartZone (vSZ-H) version 3.6.1 or above, here’s what you need to know about managing your licenses effectively. <h3>URL Filtering Licenses Overview</h3> <ul><li> Duration and Scope: <ul><li>URL filtering licenses are issued for a duration of one year per Access Point (AP). This means that each license covers one AP for a full year, providing continuous URL filtering services.</li></ul> </li><li> Adding Licenses Over Time: <ul><li>Licenses can be purchased and added incrementally throughout the year. For example, you might buy 100 one-year licenses on January 1st and later add another 200 one-year licenses in May. This flexibility allows you to scale your URL filtering capabilities as your network grows.</li></ul> </li></ul> <h3>Monitoring License Details</h3> <ul><li>Viewing License Information: <ul><li>Detailed information about your licenses, including start date, end date, and total capacity, can be accessed through the vSZ-H interface. Navigate to: Administration -> Licenses -> Installed Licenses tab. Here, you can monitor the status of your licenses and plan renewals or expansions accordingly.</li></ul> </li></ul> <h3>License Expiry and Warnings</h3> <ul><li> Dashboard Warnings: <ul><li>The system will issue dashboard warnings 30 days before a license is set to expire. This gives administrators ample time to renew or add licenses before any service disruption occurs.</li></ul> </li><li> Event Codes and Alarms: <ul><li>Event Code 1281: This code is triggered when the license capacity is fully utilized, indicating that no additional APs can be covered by URL filtering unless more licenses are added.</li><li>Alarm Code 8003: This alarm is generated when the license period expires, which also means the URL filtering server becomes unreachable. Immediate action is required to restore functionality.</li></ul> </li></ul> <h3>Additional Resources</h3> <ul><li>Temporary Licenses: <ul><li>In cases where a temporary solution is needed, such as during a transition or license renewal period, Ruckus provides options for temporary licenses. For more details on how to obtain and use temporary licenses, refer to the following article: <a href="https://support.ruckuswireless.com/articles/000008351" target="_new">Temporary Licenses on URL Filtering</a>.</li></ul> </li></ul>

Proper management of URL filtering licenses is essential to maintain the security and functionality of your network. By keeping track of your licenses, responding to warnings and alarms promptly, and knowing when and how to add or renew licenses, you can ensure uninterrupted service. This article provides you details of URL Filtering for vSZ-H.

2024-09-10T04:18:03-0700 2024-09-10T12:00:06-0700 https://support.ruckuswireless.com/articles/000002097 2024-09-08T12:48:07-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5507 knowledge_article_5507 2013-06-11T17:15:21-0700 000002097 Validated (External) Public Zonedirector;Ruckus support services;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Support license activation Support License Activation, ZoneDirector, Ruckus Support Services What is RDY SKU (Support Key Upgrades) and Smart Redundancy on Ruckus ZoneDirector <h3>What is RDY SKU?</h3> The RDY SKU was introduced to allow users to upgrade the secondary or redundant ZoneDirector to match the software and functionality level of the primary ZoneDirector. This upgrade is crucial for ensuring that both ZoneDirectors in a redundant pair operate in harmony, providing consistent network management and failover capabilities. Key Benefits of RDY SKU: <ul><li>Advanced Replacement Support: The RDY SKU provides advanced replacement support specifically for the redundant ZoneDirector. This means that if your secondary ZoneDirector experiences a hardware failure, you can quickly replace it with minimal disruption to your network.</li><li>Synchronization of Features: With the RDY SKU, the secondary ZoneDirector can be upgraded to the same software version as the primary ZoneDirector, ensuring feature parity and smooth operation during failover events.</li></ul> <h3>How Does Smart Redundancy Work?</h3> The Smart Redundancy feature, available on Ruckus ZoneDirector version 9.9 and above, is designed to provide a robust failover mechanism for networks managed by ZoneDirectors. This feature allows two ZoneDirectors to be configured as a redundant pair, with one actively managing the network and the other serving as a backup in standby mode. Key Features of Smart Redundancy: <ul><li> Active and Standby Roles: In a redundant pair, one ZoneDirector is designated as the active unit, managing all Access Points (APs) and client connections. The other ZoneDirector is in standby mode, monitoring the health of the active unit and synchronizing its settings periodically. </li><li> Automatic Failover: If the active ZoneDirector fails or loses power, the standby ZoneDirector automatically takes over, becoming the active unit. The failover process is designed to be seamless, with all associated APs re-associating to the newly active ZoneDirector within approximately one minute. This ensures that wireless service to clients continues without significant interruption. </li><li> State Synchronization: The standby ZoneDirector continuously monitors the active ZoneDirector and synchronizes its configuration settings to ensure that it can take over immediately if needed. This synchronization is crucial for maintaining consistent network management during a failover event. </li><li> Transition Back to Standby: When the original active ZoneDirector recovers, it automatically detects the presence of an already active ZoneDirector on the network. It then assumes the standby role, ready to take over again if needed. </li></ul> Important Notes: <ul><li> Model Requirements: Smart Redundancy requires that both ZoneDirectors in the pair be of the same model. For example, you cannot configure Smart Redundancy using a ZoneDirector 1200 as the primary and a ZoneDirector 3000 as the backup unit. </li><li> AP Discovery and Management: The ZoneDirector in standby mode does not respond to Discovery requests from APs, meaning it won’t manage APs until it becomes the active unit. Upon failover, the newly active ZoneDirector will take control of all APs and client connections. </li></ul> <h3>How to Activate RDY Support</h3> For detailed instructions on activating RDY support, you can refer to the following article: <a href="https://support.ruckuswireless.com/articles/000004489" target="_new">How to activate and download RDY Support and License</a>. <h3>Conclusion</h3> The RDY SKU and Smart Redundancy features are essential for ensuring the reliability and continuity of networks managed by Ruckus ZoneDirectors. The RDY SKU allows you to upgrade and maintain your redundant ZoneDirector, while Smart Redundancy ensures that your network remains operational even in the event of a ZoneDirector failure. By configuring your ZoneDirectors with these capabilities, you can minimize downtime and provide a consistent and reliable wireless experience for your users.

Ruckus introduced the RDY SKU (Support Key Upgrades) in April 2023, to enhance the capabilities and reliability of ZoneDirector (ZD) deployments, particularly those configured with redundancy in mind. This article explores what RDY SKU is and how Smart Redundancy works to ensure seamless network management and minimize downtime in case of failures.

2024-09-08T12:48:07-0700 2024-09-10T04:00:06-0700 https://support.ruckuswireless.com/articles/000001626 2024-09-05T20:12:13-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5504 knowledge_article_5504 2013-02-12T11:49:46-0800 000001626 Validated (External) Public Ruckus icx switches;Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Installation;Known issues and workarounds;Website services Installation, Known Issues and Workarounds, Website Services, Ruckus ICX Switches, ZoneDirector, SmartCell Gateway What is 3 Legged RMA and how does it work? 3 Legged RMA is created to lessen the number of unit swaps a customer must perform and the time they must wait for turnaround to manage the network in the event of failure. This type of RMA is created when a Reseller/VAR or Distributor is providing RMA Replacement services to the End Customer. Work Flow : <ol><li> End Customers goes faulty. </li><li> End Customer contacts VAR/Distributor for replacement </li><li> VAR/Distributor Replace the End Customers Unit from their own Stock. </li><li> VAR/Distributor contacts Ruckus Support for RMA on the Original/End Customer's Defective Serial Number with the below information: End User Defective SN Description/Issue with the Device VAR/Distributors Replacement SN (Which is sent as Replacement to EU) Shipping Address for Ruckus to ship the Replacement Unit </li><li> Ruckus Support to create 3 Legged RMA to transfer the Licenses and Support Entitlement from the actual defective unit(End Users Defective) to the Replacement Unit provided by the VAR/Distributor. </li><li> Replacement Unit sent by Ruckus is returned to spares inventory for the VAR/Distributor and will go out only with the default AP Licenses. Note : Replacement sent by Ruckus will be like to like replacements </li></ol>

This procedure is to be followed when a reseller or distributor is providing RMA replacement services such as 4-hour on-site, same-day replacement, etc to the end customers.

2024-09-05T20:12:13-0700 2024-09-06T14:00:06-0700 https://support.ruckuswireless.com/articles/000014471 2024-09-03T11:53:45-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5502 knowledge_article_5502 2024-09-03T11:53:45-0700 000014471 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Installation Installation, SmartCell Gateway Can I attach external antenna to T750 AP model? External Antenna is supported on T750SE AP model, not T750 AP. T750 AP only has internal omnidirectional antenna, while T750SE provides internal 120-degree sectorized antenna with option to attach an external antenna. <h1>How to identify if the AP is T750 or T750SE from the Part Code printed on the AP -</h1> <ul><li>T750 AP has it's part code in the following two formats -</li></ul> <div style="margin-left: 40px;">901-T750-XX01 901-T750-XX02</div> <ul><li> T750SE AP it's part code in the following two formats -</li></ul> <div style="margin-left: 40px;">901-T750-XX51 901-T750-XX52 Note - XX refers to the corresponding country code.</div> <div> More details can be found in the datasheet - https://www.commscope.com/globalassets/digizuite/61785-ds-ruckus-t750.pdf</div>

T750 AP only has internal omnidirectional antenna while T750SE can also use an external antenna.

2024-09-03T11:53:45-0700 2024-09-05T22:00:07-0700 https://support.ruckuswireless.com/articles/000006484 2024-09-02T10:39:16-0700 monthly 0.8 admin,premium knowledge_article_3508 knowledge_article_3508 2017-10-30T14:22:53-0700 000006484 Validated (External) Premium Ruckus cloud wifi;Unleashed;Zonedirector;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration Configuration, Ruckus Cloud WiFi, Unleashed, ZoneDirector, SmartCell Gateway How to configure the Radius to restrict users to connect to specific SSID based on radius attribute? How to restrict users to connect to specific WLAN? The AAA configuration: <ul><li>Same AAA server IP and shared secrets mapped to multiple WLAN's</li><li>Works in proxy and non-proxy modes</li></ul> <img alt="User-added image" height="389" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000VzXK" width="500"></img> 2)For this configuration, we created 2 WLANs: WLAN: Staff-dot1x For Staff Users WLAN: 802.1x-test. For Student Users Condition to apply: Staff-dot1x SSID users should not connect to 802.1x-test SSID and vice versa 3) Radius Server configuration: Create a Radius client on the server: <img alt="User-added image" height="343" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000VzYc" width="500"></img> 4) Create a connection policy as shown below image: <img alt="User-added image" height="307" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000VzYh" width="500"></img> 5) Create Network policy for Staff and Student as shown below: Under the network policy --->Conditions: Select following: 1) User Group: Staff (Name of the user group) 2) Called station ID: Staff-dot1x (Name of the SSID) <img alt="User-added image" height="301" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000VzZz" width="500"></img> For Students: 1) User Group: Student (Name of the user group) 2) Called station ID: 802.1x-test (Name of the SSID) <img alt="User-added image" height="295" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000VzaY" width="500"></img> 6) Constraints will be same for both the network policies. <img alt="User-added image" height="282" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000VzbH" width="500"></img> 7) Network Policy Setting: For Staff: Click on Vendor specific---> Add Attributes---->Under Add Vendor Specific Attribute choose Custom--->Vendor Specific as shown below. <img alt="User-added image" height="175" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000VzcF" width="500"></img> Click on Add and select following: 1) Enter Vendor Code = 25053 2) Select ->Yes it Conforms and click on Configure Attribute. Under Configure Attribute: 1) Attribute number: 3 2) Attribute Format: String 3) Attribute Value: Staff-dot1x (The SSID name) <img alt="User-added image" height="277" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000VzgC" width="500"></img> *Repeat the above procedure for 802.1x-test SSID as well. <img alt="User-added image" height="205" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000VzhU" width="500"></img> Now Create the AD directory for User Group and User: 1) Staff1 user for Staff Group 2) Adi user for Student Group <img alt="User-added image" height="398" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000Vzic" width="500"></img> Student: <img alt="User-added image" height="362" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000Vzir" width="500"></img> Tested the configuration : Audit Success when users try to connect to authorized WLAN: e.g: Staff1 to staff-dot1x SSID and Adi to 802.1x-test WLAN. <img alt="User-added image" height="338" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000Vzjf" width="500"></img> <img alt="User-added image" height="333" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000Vzjk" width="500"></img> Audit Fail: When users try to connect unauthorized WLAN. eg Adi to staff-dot1x SSID and Staff1 to 802.1x-test WLAN. <img alt="User-added image" height="329" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000Vzl2" width="500"></img> <img alt="User-added image" height="319" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000014zF&feoid=00N50000002Cf3M&refid=0EM50000000Vzl7" width="500"></img> ------------------------------------------------End of the Article---------------------------------------

Mutiple WLANS can use the same AAA server, the KB shows demo configuration for windows NPS on how to restrict users to a certain WLAN with the help of an attribute called "Called station ID" and the AD user group.

2024-09-02T10:39:16-0700 2024-09-03T04:00:07-0700 https://support.ruckuswireless.com/articles/000004928 2024-08-29T13:23:27-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5492 knowledge_article_5492 2018-10-29T16:10:10-0700 000004928 Validated (External) Public Ruckus support services Website services;Support license activation;Registration Website Services, Support License Activation, Registration, Ruckus Support Services How to update the support contract when its not reflecting after activation? If you are not able to view the status on the Asset management section and since using the same activation code to activate the support contract does not work, we will update it from our end, so please <a href="https://support.ruckuswireless.com/contact-us" target="_blank">Ruckus Support</a>

On rare occasions the support contract will take time to get updated or does not get updated even after the activation on the Ruckus Support Portal is completed.

2024-08-29T13:23:27-0700 2024-09-02T12:00:07-0700 https://support.ruckuswireless.com/articles/000011386 2024-08-29T14:23:34-0700 monthly 0.8 admin,premium knowledge_article_5494 knowledge_article_5494 2021-02-22T23:07:19-0800 000011386 Validated (External) Premium Cloud services Support license activation;Registration Support License Activation, Registration, Cloud Services How to activate cloud licenses <ul><li>Open the Support Purchase Acknowledgement (SPA) email you have received from Ruckus/Disti/VAR for your order</li></ul> <img alt="User-added image" height="539" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013a9&feoid=00N50000002Cf3M&refid=0EM2J000002JoLP" width="500"></img> <ul><li>Login to Ruckus support portal: https://support.ruckuswireless.com</li><li>Click the activation code in the email to activate.</li><li>Click on the Hyperlink for the product code to register the cloud region</li></ul> <img alt="User-added image" height="118" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013a9&feoid=00N50000002Cf3M&refid=0EM2J000002JoLU" width="500"></img> <ul><li>Select the region from the dropdown </li><li>For WiFi and ICX license </li></ul> <img alt="User-added image" height="174" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013a9&feoid=00N50000002Cf3M&refid=0EM2J000002JoLZ" width="500"></img> <ul><li>Few more options when we activate ruckus analytics licenses- RA licenses -we should select- controller type SmartZone</li></ul> <img alt="User-added image" height="240" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013a9&feoid=00N50000002Cf3M&refid=0EM2J000002JoLe" width="500"></img> <ul><li>click cloud region & Bind to support. </li></ul> <img alt="User-added image" height="174" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013a9&feoid=00N50000002Cf3M&refid=0EM2J000002JoLj" width="500"></img> <ul><li>We get confirmation as activated </li></ul> <img alt="User-added image" height="136" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013a9&feoid=00N50000002Cf3M&refid=0EM2J000002JoLo" width="500"></img> <ul><li>Click refresh in the cloud portal--license page to view the license.</li></ul> <img alt="User-added image" height="185" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013a9&feoid=00N50000002Cf3M&refid=0EM2J000002JoLt" width="500"></img>

2024-08-29T14:23:34-0700 2024-09-02T12:00:07-0700 https://support.ruckuswireless.com/articles/000011858 2024-08-29T14:27:49-0700 monthly 0.8 admin,premium knowledge_article_4744 knowledge_article_4744 2021-08-12T02:45:55-0700 000011858 Validated (External) Premium Ruckus analytics;Smartcell gateway;SmartCell Gateway 200 (SCG200) Registration Registration, Ruckus Analytics, SmartCell Gateway How to get free 90 days trial of RUCKUS AI or Cloud Analytics? <h1>For RUCKUS Cloud</h1> Analytics license is pre-bundled with RUCKUS Cloud for 90 days. This should not require any RA trial SKUs. With the built-in trial 100 devices for 90 days per account (not SmartZone). <h1>RUCKUS SmartZone</h1> To be eligible, you must be a current or new, or existing SmartZone customer with SmartZone 5.1.2 or later (or upgrade to 5.1.2 or later) with a current support contract. <h2>Please refer to the below workflow for the controller running on 6.x.</h2> <ul><li>RUCKUS AI link should appear in the left-hand nav which would take the user to the complete RA page</li><li>The banner shall have the following text: "Connect to RUCKUS AI for FREE. Please watch this <second> video for how" A Banner shall display on the SZ page, irrespective of which menu the user is in. Once the user connects to RUCKUS AI, the banner will disappear.</li></ul> <img alt="User-added image" height="161" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013bl&feoid=00N50000002Cf3M&refid=0EM2J0000020Mo3" width="500"></img> Administration -->External Services--->Ruckus Services--->Ruckus cloud services (Version 6.0) <img alt="User-added image" height="169" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013bl&feoid=00N50000002Cf3M&refid=0EM2J0000020Mn0" width="500"></img> <ul><li>If SmartZone is a multi-node cluster, always use leader node to enable Cloud Services and RA</li><li>Turn on Cloud SZ Services and log in with your Ruckus Support/cloud credentials.</li></ul> <img alt="User-added image" height="265" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013bl&feoid=00N50000002Cf3M&refid=0EM2J0000020MnK" width="500"></img> <ul><li>As seen above toggling Cloud SZ Services to ON will prompt for registered username and password.</li><li>Upon successful login and Cloud Services is enabled, then toggle Ruckus Analytics/RUCKUS AI to ON thus enabling it.</li></ul> <img alt="User-added image" height="273" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013bl&feoid=00N50000002Cf3M&refid=0EM2J0000020MnP" width="500"></img> <ul><li>The above two are independent processes. Enabling Cloud Services will assist SZ to interact with all Ruckus Cloud Services. Enabling Ruckus Analytics/RUCKUS AI then specifically onboards SZ onto RA.</li></ul> <h2>Controller Running < 5.1.2 please follow the below steps to get the 90 days trial license.</h2> <ol><li>Contact sales for Temp/Trail license for version below 5.1. Part number CLD-ANAP-TM90 (RUCKUS AI 90-day trial Subscription for 1 Cloud-or SmartZone[1]managed AP)</li><li>Activate the licenses (if required) and then onboard the controller.</li></ol> <h2>To enable Cloud Analytics, refer to the below workflow for the controller running on 5.1.2 or 5.2.2.</h2> <ul><li>Under System > General settings > Cloud Services is enabled, SZ presents an IDM login screen to the user</li></ul> <img alt="User-added image" height="303" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013bl&feoid=00N50000002Cf3M&refid=0EM2J0000020Mr2" width="500"></img> <img alt="User-added image" height="286" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013bl&feoid=00N50000002Cf3M&refid=0EM2J0000020Mr7" width="500"></img> <ol></ol> What to expect on RUCKUS AI after onboarding (enabling Cloud Services and Ruckus Analytics/RUCKUS AI) SmartZone? <ul><li>Log in to RUCKUS AI at <a href="https://ruckus.cloud/analytics" style="color: blue; text-decoration: underline;" target="_blank">https://ruckus.cloud/</a>ai (US cloud hosting), <a href="https://eu.ruckus.cloud/analytics" style="color: blue; text-decoration: underline;" target="_blank">https://eu.ruckus.cloud/</a>ai (EU cloud hosting), or <a href="https://asia.ruckus.cloud/analytics" style="color: blue; text-decoration: underline;" target="_blank">https://asia.ruckus.cloud/a</a>i (Asia cloud hosting) with your Ruckus Support credentials.</li><li>Within 5 minutes, the SmartZone should be onboarded on RUCKUS AI, and when the user logs in, they should see a "Green" circle in the Admin > Onboarded Systems for that SmartZone (SZ cluster name will be displayed).</li></ul> <img alt="User-added image" height="158" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013bl&feoid=00N50000002Cf3M&refid=0EM2J0000020MnU" width="500"></img> <ul><li>Go to Admin > Licenses and verify the licenses</li><li>Notice –no licenses found</li><li>Click “Claim your 90-day trial”</li></ul> <img alt="User-added image" height="180" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013bl&feoid=00N50000002Cf3M&refid=0EM2J0000020Mne" width="500"></img> <ul><li>Customers will be able to onboard up to 100 devices for 90 days</li></ul> <img alt="User-added image" height="168" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013bl&feoid=00N50000002Cf3M&refid=0EM2J0000020Mnj" width="500"></img> If the customers already have an active trial license (provided by Account Manager or Sales) with sales order/activation code. <img alt="User-added image" height="164" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013bl&feoid=00N50000002Cf3M&refid=0EM2J0000020Mnt" width="500"></img> If the customer already has an active trial license Click “Claim your 90-day trial” to add 100 more licenses for 90 days to the existing trial or wait until existing licenses expire and then click on a 90-day trial to continue to extend the trail another 90 days. <h2>What will happen after 90 days of trial license period?</h2> After 90 days, if customer does not purchase RA licenses, this link should be changed to 'Report'. Clicking on this link should take the user to the RA page with visibility only for Reports. Dashboard, Analytics, Service Validation, Data Explorer should be blocked or greyed out, or hidden. In this case, when the user purchases RA licenses, the complete RA page should be visible. Note: 90-Day Trial is not renewable!

Article explains how to get free 90 days trial of RUCKUS AI/Cloud Analytics.

2024-08-29T14:27:49-0700 2024-09-02T12:00:06-0700 https://support.ruckuswireless.com/articles/000008351 2024-08-29T14:38:20-0700 monthly 0.8 admin,premium knowledge_article_4241 knowledge_article_4241 2018-10-08T09:24:28-0700 000008351 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;Troubleshooting;Known issues and workarounds;Support license activation Installation, Troubleshooting, Known Issues and Workarounds, Support License Activation, SmartCell Gateway Why is there a warning banner in my SZ UI telling me that "URL Filtering licenses expire in nn days"? There are two likely scenarios which will play out. 1. Customer does not need this feature. Either they have not used it at all, or have tested it within the 90-day test period and decided to no longer use it. <ul><li>?In this scenario, the warning banner can be ignored. At the completion of the 90-day period, the temporary licenses will cease and the function will be automatically disabled.</li></ul> 2. Customer wishes to continue using this feature beyond the 90-day trial period. <ul><li>In this scenario, the customer will need to purchase relevant licenses for their system and upload these to their system prior to the end of the 90-day trial period.</li></ul>

URL Filtering Licenses Expire in nn Days - SZ Banner Warning appears in UI leading up to expiry of temporary 'Trial' License.

2024-08-29T14:38:20-0700 2024-09-02T12:00:06-0700 https://support.ruckuswireless.com/articles/000005728 2024-08-29T02:30:50-0700 monthly 0.8 admin,premium knowledge_article_5491 knowledge_article_5491 2016-05-11T14:37:11-0700 000005728 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, SmartCell Gateway <ul><li>Is it possible to change the admin password for the console access on SCG/vSZ, and how?</li><li>Is it possible to recover the SCG/vSZ admin/enable password if the password is lost?</li><li>Is it possible to retrieve the SCG/vSZ admin password from Scenario 1: The Admin account password on SmartZone can be set from WebUI or CLI methods(This is applicable only if the customer wants to change the password) 1. WebUI Log into the SCG/(v)SZ as the admin user via WEB-UI browser. To update the password select Change Password under My Account tab: <img alt="" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000013AL&feoid=00N50000002Cf3M&refid=0EM50000000E2Uc"></img> 2. CLI Log into the SCG/(v)SZ as the admin user to the CLI via SSH: After Enable mode, go to Config mode: config lab-sz100(config)# changepassword To change admin’s enable password: lab-sz100# enable Old Password: ********* New Password: ******** Retype: ******** Successful operation Please note only the admin user account can access the Enable level of CLI. Scenario 2:If customer the SCG/vSZ admin/enable password when the password is lost and have no backup? Answer: Please log a new TAC case so that TAC could help to change the admin/enable password via shell access Scenario 3:If customer want to recover the admin password from backup? Answer: Open a TAC case, provide the backup to the TAC

How to change the password for the SZ admin user created at setup.

2024-08-29T02:30:50-0700 2024-08-29T14:00:08-0700 https://support.ruckuswireless.com/articles/000014458 2024-08-29T02:36:25-0700 monthly 0.8 admin,premium knowledge_article_5490 knowledge_article_5490 2024-08-27T13:04:33-0700 000014458 Validated (External) Premium Sz144;Sz144 d;Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) System network management;Troubleshooting System Network Management, Troubleshooting, SZ144, SZ144 D, SZ300, SCG200, virtual SmartCell Gateway, SZ100 "When will the AP alarm auto-clear in the Smart Zone?" 1. Whenever the AP is disconnected from the SmartZone, an AP alarm will be created in the SmartZone. Below are the steps to check in SmartZone. Network >> Wireless >> Access points >> Click on AP >> Scroll down to alarm <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000012z3&feoid=00N50000002Cf3M&refid=0EMPH00000A4CeL"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000012z3&feoid=00N50000002Cf3M&refid=0EMPH00000A4HpM"></img> 2. When AP comes back online, the AP alarm will be automatically cleared. Below are the steps to check in the SmartZone. Network >> Wireless >> Access points >> Click on AP >> Scroll down to alarm <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000012z3&feoid=00N50000002Cf3M&refid=0EMPH00000A4CeN"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000012z3&feoid=00N50000002Cf3M&refid=0EMPH00000A4HpN"></img>

This articles describes under what condition an AP alarm gets cleared from SmartZone and what will the fields in the GUI look like using an example of the alarm - "AP Disconnected"

2024-08-29T02:36:25-0700 2024-08-29T14:00:07-0700 https://support.ruckuswireless.com/articles/000014460 2024-08-28T07:08:35-0700 monthly 0.8 admin,premium knowledge_article_5487 knowledge_article_5487 2024-08-27T20:52:36-0700 000014460 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath Why don't I see the PEAP menu in CloudPath? N/A

2024-08-28T07:08:35-0700 2024-08-28T14:00:07-0700 https://support.ruckuswireless.com/articles/000014331 2024-08-27T06:37:04-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5485 knowledge_article_5485 2024-08-07T16:04:49-0700 000014331 Validated (External) Public Ruckus icx switches Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, Ruckus ICX Switches <h2>What does the transceiver name seen on the part label mean ? and how can it help select the right components for the connection ?</h2> When working with Transceivers, fiber cables and connections its important to know what these specifications imply as they will aid in ensuring, <ul style=""><li style=""> Using right transceivers for the requirement at hand. </li><li style=""> Ensuring that connections are made within deigned parameters. </li></ul> <a href="https://www.ruckusnetworks.com/globalassets/digizuite/61722-ds-ethernet-optics-family.pdf" target="_blank">Click here</a> for the RUCKUS Optics Family Spec Sheet, which provides more information on the RUCKUS Optics offerings. This will be helpful when working with RUCKUS ICX Switch Offerings.

When working with SFPs and Fibers, terms and abbreviations explained at a glance.

2024-08-27T06:37:04-0700 2024-08-27T14:00:07-0700 https://support.ruckuswireless.com/articles/000003244 2024-08-23T07:50:38-0700 monthly 0.8 admin knowledge_article_5480 knowledge_article_5480 2014-08-21T02:52:23-0700 000003244 Validated (External) Internal Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to disable 2.4GHz or 5GHz radio on all the APs managed by Zone director at a time? We can disable the 2.4GHz or 5GHz radio only by disabling the "WLAN service" in the 'AP group' configuration. See the below procedure to disable 2.4GHz or 5GHz radio on all the APs using AP groups. 1) Create an 'AP Group' for all the APs on which the2.4GHz or 5GHz radio should be disabled. 2) Override the "WLAN service" under Radio Settings and select "Disable". <img alt="Disable 2.4GHz radio" height="290" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000010u1&feoid=00N50000002Cf3M&refid=0EMPH000009ufGD" width="500"></img> <img alt="Disable 5GHz radio" height="216" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000010u1&feoid=00N50000002Cf3M&refid=0EMPH000009uPzT" width="500"></img>

This article provides information on how to disable the radio on the Zone Director managed AP.

2024-08-23T07:50:38-0700 2024-08-26T02:00:05-0700 https://support.ruckuswireless.com/articles/000014448 2024-08-22T18:10:06-0700 monthly 0.8 admin,premium knowledge_article_5479 knowledge_article_5479 2024-08-22T18:10:06-0700 000014448 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How-to-configure-WPA2-encryption-with-Web-Authentication-SSID? To configure WPA2 Encryption + Web Authentication, go to Network > Wireless LANs > Edit WLAN or Create new WLAN on SZ GUI, a. Set Authentication Type to Web Authentication b. Set Encryption Options to WPA2 c. Configure the PSK Passphrase <img alt="User-added image" height="228" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH00000011Jp&feoid=00N50000002Cf3M&refid=0EMPH000009t4Ah" width="500"></img>

2024-08-22T18:10:06-0700 2024-08-23T08:00:07-0700 https://support.ruckuswireless.com/articles/000004230 2024-08-22T08:27:56-0700 monthly 0.8 admin,premium knowledge_article_5477 knowledge_article_5477 2015-03-20T03:56:48-0700 000004230 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway, SZ100 Why will an access point not connect to a vSCG? Confirm the following ports are available on the vSCG control IP from the AP management network: <ul><li>TCP 443</li><li>TCP 22</li></ul> It is therefore necessary to ensure: <ul><li>Both TCP 443 and TCP 22 are permitted on all firewalls/ACLs between the AP management network and the vSCG control network. Additionally, ICMP should be permitted for troubleshooting purposes.</li></ul> Additionally, if the vSCG is situated behind a NAT firewall, ensure that: <ul><li>1:1 NAT is configured on the router for the vSCG control IP OR a DNAT rule exists for TCP ports 22 and 443</li><li>The correct control-nat IP is specified on the vSCG</li></ul>

Newly configured access points, or access points which were previously connected to a vSCG are unable establish a connection to the vSCG.

2024-08-22T08:27:56-0700 2024-08-22T20:00:07-0700 https://support.ruckuswireless.com/articles/000006092 2024-08-22T08:33:53-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5476 knowledge_article_5476 2016-10-18T17:48:26-0700 000006092 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Known issues and workarounds;Support license activation;Registration Known Issues and Workarounds, Support License Activation, Registration, Unleashed How to activate support for Unleashed Access Points? 1. Log in to <a href="https://support.ruckuswireless.com/" target="_blank">Ruckus Support Portal</a> 2. Click on the "SUP-xxxxxxx-AAA-BBB-CCC" code which you have received from Ruckus/Disti/VAR in the SPA email (or) Go back to Ruckus support portal, click on "Activate Purchase tab" on the home page, paste the activation code and click on "Validate" <img alt="User-added image" height="233" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vBB&feoid=00N50000002Cf3M&refid=0EMPH000009r8tX" width="500"></img> ?????? <img alt="User-added image" height="208" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vBB&feoid=00N50000002Cf3M&refid=0EMPH000009rCDy" width="500"></img> 3. Accept the terms and conditions and click on Activate Purchase 4. Once the terms and conditions are accepted, it takes you to the activation Detail page (you can see the Quantity Activated and and To Be Activated) <img alt="User-added image" height="147" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vBB&feoid=00N50000002Cf3M&refid=0EM2J000000lt3Q" width="500"></img> 5. Click on the Hyper link below the product code. Example - <a href="https://ruckuswireless.my.salesforce.com/550PH00000LRJqT" target="_blank">806-RU35-3000</a> 6. Enter the Serial number of the device against the support you have purchased and click on Validate Serial Number. <img alt="User-added image" height="296" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vBB&feoid=00N50000002Cf3M&refid=0EM2J000000lt3V" width="500"></img> Note: Please Activate the support for one serial number at a time, once you complete the activation follow the steps again to activate support on another serial number.

Shows step by step method on activating Support contract for Unleashed Access Points.

2024-08-22T08:33:53-0700 2024-08-22T20:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Lb53CAC?attachment_index=0 2024-08-22T20:00:07-0700 monthly admin,premium,warranty,guest knowledge_article_5476 knowledge_article_5476_attachment_1 Unleashed Support activation.JPG 192745.0 image/jpeg https://support.ruckuswireless.com/articles/000012425 2024-08-22T07:50:18-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5475 knowledge_article_5475 2022-08-19T13:19:14-0700 000012425 Validated (External) Public Cloud services Support license activation;Registration Support License Activation, Registration, Cloud Services How to activate Ruckus One & Ruckus AI licenses with 180 Day Grace Activation Period <div>This 180 days grace period activation is applicable for orders post 10th of August 2022 The scope of this activation work flow is applicable for stand alone or bundled RUCKUS One & RUCKUS Analytics SKU's. Use case #1 Activation workflow for stand alone (Non-bundled) Ruckus Cloud & Analytics SKU’s</div> <ul><li>Open the Support Purchase Acknowledgement (SPA) email you have received from Ruckus/Disti/VAR for your order <ul><li style="margin-left: 8px;">You will notice the subscription start date is set to 180 days from the order date.</li><li style="margin-left: 8px;">Customer will be allowed to select any date between today’s date up-to 180th day of Order date, i.e. Order date+180 days</li><li style="margin-left: 8px;">Once the customer has selected the start date, the end date will auto adjust based on the subscription duration purchased.<img alt="User-added image" height="611" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J0000043VIj" width="500"></img></li></ul> </li><li>Login to Ruckus support portal: https://support.ruckuswireless.com</li><li>Click the activation code in the email to activate.</li></ul> <img alt="User-added image" height="613" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J000004306t" width="500"></img> <ul><li>Accept Terms and Conditions and click on "Activate Purchase</li></ul> <img alt="User-added image" height="477" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J0000043073" width="500"></img> <ul><li style="">Click on the Hyperlink for the product code to register the cloud region</li></ul> <img alt="User-added image" height="164" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J000004307N" width="500"></img> <ul><li style="margin-left: 8px;">Select the region, start date then click on "Register & Bind To Support"</li><li>Customer will be allowed to select any date between today’s date up-to 180th day of Order date, i.e. Order date+180 days</li><li>Customer cannot select a Start Date that is beyond the 180th date and will be enforced to select the Start Date as 180th day. <img alt="User-added image" height="356" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J000004307S" width="500"></img></li><li style="">We will get a confirmation as activated and the status changes to "Yes".</li></ul> <img alt="User-added image" height="175" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J000004307r" width="500"></img> Use case #2 Activation workflow for bundled Ruckus Cloud & Analytics SKU’s <ul><li>Open the Support Purchase Acknowledgement (SPA) email you have received from Ruckus/Disti/VAR for your order <ul><li style="margin-left: 8px;">You will notice the subscription start date is set to 180 days from the order date.</li><li style="margin-left: 8px;">Customer will be allowed to select any date between today’s date up-to 180th day of Order date, i.e. Order date+180 days</li></ul> </li></ul> <img alt="User-added image" height="658" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J000004308V" width="500"></img> <ul><li>Login to Ruckus support portal: https://support.ruckuswireless.com</li><li>Click the activation code in the email to activate.</li></ul> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J0000042vkE"></img> <ul><li>Accept Terms and Conditions and click on "Activate Purchase</li></ul> <img alt="User-added image" height="446" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J0000042vkO" width="500"></img> <ul><li>If the order is for bundled SKU (CLD-BNDL-SZWA-REC1/3/5 or CLD-BNDL-RCAW-REC1/3/5) you must first activate Ruckus Analytics </li><li>Click on the Hyperlink for the product code to register the cloud region </li></ul> <img alt="User-added image" height="380" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J0000043099" width="500"></img> <ul><li>If it is a Analytics + Smartzone bundle SKU, by design, the default Controller deployment will be Smartzone and the other deployment Type (Cloud) will be greyed out.</li></ul> <img alt="User-added image" height="107" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J000004NRF5" width="500"></img> <ul><li>If it is a Analytics + Ruckus Cloud bundle SKU, by design, the default Controller deployment will be Clous and the other deployment Type (Smartzone) will be greyed out.</li></ul> <img alt="User-added image" height="96" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J000004NREq" width="500"></img> <ul><li>Select the region, Start date and Controller Deployment Type then click on "Register & Bind To Support"</li><li>Customer will be allowed to select any date between today’s date up-to 180th day of Order date, i.e. Order date+180 days</li><li>Customer cannot select a Start Date that is beyond the 180th date and will be enforced to select the Start Date as 180th day.</li></ul> <img alt="User-added image" height="340" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J0000042vn3" width="500"></img> <img alt="User-added image" height="339" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J0000042vnD" width="500"></img> <ul><li>We will get a confirmation as activated and the status changes to "Yes".</li></ul> <img alt="User-added image" height="333" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J0000042vnI" width="500"></img> <ul><li>If bundle SKU, follow the same steps to activate the other pending SKU's.</li><li>For the licenses to reflect in Ruckus Cloud/Analytics portal, click refresh in the license page of the cloud portal.</li></ul> <img alt="User-added image" height="137" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000v4j&feoid=00N50000002Cf3M&refid=0EM2J0000042voV" width="500"></img>

2024-08-22T07:50:18-0700 2024-08-22T14:00:07-0700 https://support.ruckuswireless.com/articles/000006354 2024-08-20T11:33:25-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5473 knowledge_article_5473 2017-05-08T15:07:43-0700 000006354 Validated (External) Public Zonedirector 1200;ZoneDirector 1200 Firmware;Known issues and workarounds;Support license activation;Registration Firmware, Known Issues and Workarounds, Support License Activation, Registration, ZoneDirector 1200 What is the max number of temp licenses on ZD1200 ? From version 10.0, the capacity of AP licenses on ZD 1200 from 75-150 is applicable to purchased licenses only. A temporary license will still be limited to 75 AP licenses.

Capacity of AP licenses on ZD 1205 from version 10.0

2024-08-20T11:33:25-0700 2024-08-20T22:00:07-0700 https://support.ruckuswireless.com/articles/000009414 2024-08-19T12:43:01-0700 monthly 0.8 admin,premium knowledge_article_5472 knowledge_article_5472 2019-06-19T02:44:38-0700 000009414 Validated (External) Premium Ruckus icx switches Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, Ruckus ICX Switches Why do I need to disable TFTP client in the switch to use the USB system manifest upgrade on ICX switch? Upgrade to a version of code 8.0.90b or higher.

When using 8.0.90 you can use the newly introduced copy manifest command, but it only works when TFTP client in the ICX switch is disabled.

2024-08-19T12:43:01-0700 2024-08-20T12:00:08-0700 https://support.ruckuswireless.com/articles/000004498 2024-08-19T11:41:01-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5469 knowledge_article_5469 2015-05-05T05:19:48-0700 000004498 Validated (External) Public Sz144 d;Vsz dataplane;Sz100d;Zoneflex indoor;Zoneflex outdoor Troubleshooting Troubleshooting, SZ144 D, vSZ Dataplane, SZ100D, ZoneFlex Indoor, ZoneFlex Outdoor Why is my AP able to connect to the vSZ controller, but unable to create a tunnel to a data plane? <h2>AP Tunnel Formation with vDP</h2> <ul><li>The vSZ controller informs the AP of the vSZ-D/SZ100-D/SZ144-D data interface after a successful AP registration.</li><li>The vSZ-D/SZ100-D/SZ144-D is displayed as active and managed on vSZ controller under Network>Cluster>Data Planes.</li><li>AP establishes a RUCKUS GRE tunnel with the vSZ-D/SZ100-D/SZ144-D data interface when a tunnel WLAN is configured.</li><li>AP sends keepalive messages to data plane every 10 seconds. </li><li>If there is no response to keepalive message, AP retries 6 times and at the end of the number of retries, if there is no response AP determines tunnel is down.</li><li>AP tries to failover and establish tunnel with other vDP(if available).</li></ul> <h2>Manually activating tunnelmgr service on AP</h2> If the tunnelmgr service is disabled, set the service to enabled by issuing the below command on the AP CLI: <pre> set tunnelmgr enable</pre> Verify that the service is now operational by executing: <pre> get tunnelmgr</pre>

This article explains how to troubleshoot an AP that is connecting to the vSZ controller but not forming a tunnel to a data plane.

2024-08-19T11:41:01-0700 2024-08-20T12:00:08-0700 https://support.ruckuswireless.com/articles/000006575 2024-08-19T12:44:57-0700 monthly 0.8 admin,premium knowledge_article_5471 knowledge_article_5471 2017-12-12T14:34:03-0800 000006575 Validated (External) Premium Ruckus icx switches Security Security, Ruckus ICX Switches How to Prevent a TCP SYN Attack? <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div">For 1010 here is the command: config)#ip tcp burst 1500 ! Configuration to avoid being a victim in a TCP SYN attack. DO-DIST-301(config)# interface ve 3931 DO-DIST-301(config-vif-3931)# ip tcp burst-normal 1000 burst-max 1500 lockup 30 ! In this configuration example, if the number of TCP connections received per second exceeds 1000, the excess packets are dropped. If the number of ICMP packets received per second exceeds 1500, the device drops all TCP connections for the next 30 seconds. ! Show command to verify the DOS attack statistics. DO-DIST-301# show statistics dos-attack ----------------------- Local Attack Statistics ------------------ ICMP TCP-SYN ------------------------------- ------------------------------- Dropped pkts Blocked pkts Lockup Count Dropped pkts Blocked pkts Lockup Count ------------ ------------ ------------ ------------ ------------ ------------ 0 0 0 0 0 0 --------------------- Transit Attack Statistics ----------------------- ICMP TCP-SYN ------------------------------- -------------------------------- Port/VE Dropped pkts Blocked pkts Lockup Count Dropped pkts Blocked pkts Lockup Count ------- ------------ ------------ ------------ ------------ ------------ -----</div>

In a TCP SYN attack, an attacker floods a host with TCP SYN packets that have random source IP addresses.

2024-08-19T12:44:57-0700 2024-08-20T12:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000TvqlCAC?attachment_index=0 2024-08-20T12:00:08-0700 monthly admin,premium knowledge_article_5471 knowledge_article_5471_attachment_1 ka25B000000CdGbQAK_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000006531 2024-08-19T12:45:56-0700 monthly 0.8 admin,premium knowledge_article_5470 knowledge_article_5470 2017-12-12T15:03:15-0800 000006531 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches How to use FastIron MAC movement feature? Viewing the MAC address movement threshold rate configuration To display the configuration of the MAC address movement threshold rate, enter the show notification mac-movement threshold-rate command at the privileged EXEC level. This command also displays ongoing statistics for the current sampling interval. device# show notification-mac Mac notification trap feature is ENABLED Configured Interval: 3 seconds Number of trap messages sent= 0 Number of mac-notication events sent:0 Mac-notification enabled ports:

If MAC movement is suspected within the network, we can use FastIron's MAC address movement feature to gather additional information.

2024-08-19T12:45:56-0700 2024-08-20T12:00:07-0700 https://support.ruckuswireless.com/articles/000004381 2024-08-19T06:27:40-0700 monthly 0.8 admin,premium knowledge_article_5468 knowledge_article_5468 2015-04-15T15:46:04-0700 000004381 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, ZoneDirector How to update the private key length from 1024 to 2048 and signature algorithm of a Self-signed certificate on ZoneDirector? On ZD GUI, navigate to Administer >> Certificate >> Advanced Options >> Re-generate private key of a specific key length, select 2048 and click 'Create New'. <img alt="User-added image" height="70" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000zcz&feoid=00N50000002Cf3M&refid=0EMPH000009Zhg1" width="500"></img> Accept the pop-up warning by clicking 'OK'. <img alt="User-added image" height="212" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000zcz&feoid=00N50000002Cf3M&refid=0EMPH000009ZjgD" width="500"></img> Note: By default, the signature algorithm of the Self-signed Certificate present on ZD running 10.5.1 version will be sha256. However, if you notice it's still using sha1, then it can be updated to sha256 by re-generating the private key length. <img alt="User-added image" height="168" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000zcz&feoid=00N50000002Cf3M&refid=0EMPH000009ZynJ" width="500"></img>

This article explains how to update the private key length and signature algorithm of a Self-signed certificate on ZoneDirector

2024-08-19T06:27:40-0700 2024-08-19T14:00:07-0700 https://support.ruckuswireless.com/articles/000014436 2024-08-15T03:12:16-0700 monthly 0.8 admin,premium knowledge_article_5466 knowledge_article_5466 2024-08-15T03:12:16-0700 000014436 Validated (External) Premium What are the basic Subscription Licenses for IoT IoT Licensing Concept : From the 2.0.0.0 release onwards, RUCKUS provides support for the Device-based licensing model instead of AP-based licensing. Types of Licenses : • Core - The Core license is a perpetual license bound to the serial number of the controller. The duration of this license is perpetual. • Instance - The Instance license is based on a subscription and maintains a tenure of 1, 3, or 5 years. Instance licenses are offered in three types: Insight, Premium, and Base. • Device Capacity - To access the connected devices, after installing a Core license, you can purchase a Device Capacity license. The Device Capacity license is based on a subscription and maintains a tenure of 1, 3, or 5 years. Each device capacity license consists of either 50 or 250 devices, so if you purchase three 250 device capacity licenses, then you will be able to add 3*250=750 devices to the RUCKUS IoT Controller. With the release of RUCKUS IoT Controller 2.2.0.0, there is a significant change in the licensing model. The updated model now follows a per-AP container-based licensing system. Types of Licenses : • Core - The Core license is a perpetual license bound to the serial number of the controller. The duration of this license is perpetual. • RCAP - RCAP license is required for each Access Point or IoT Gateway connected to the RUCKUS IoT Controller. The RCAP license is offered on a subscription basis for a tenure of 1, 3, or 5 years, which includes Watch Dog support. • Solution (Optional for Insights) - This as an option feature for users wishing to visualize and interact with IoT Sensors directly rather than through external Services/Clouds or platforms. Related Articles : <a href="https://ruckuswireless.my.salesforce.com/ka2PH0000000vr7" target="_blank">IoT Subscription Activation</a> <a href="https://ruckuswireless.my.salesforce.com/ka2PH0000000aGP" target="_blank">IoT/vRIOT Migration process from 1.8.2 to 2.0 or 2.1 or 2.2</a> <a href="https://support.ruckuswireless.com/articles/000003436" target="_blank">Steps to activate RTU and AP Licenses on vSCG/vSZ, vSPOT, SCI</a> <a href="https://support.ruckuswireless.com/articles/000006071" target="_blank">Steps to Add Licenses to Virtual Controllers from Support Portal (LiMAN)</a> <a href="https://support.ruckuswireless.com/articles/000012203" target="_blank">Steps to Download License File for Virtual Controllers from Support Portal (LiMAN)</a> RUCKUS IoT Controller Software Licensing Guide : <a href="https://support.ruckuswireless.com/documents/4771-ruckus-iot-2-2-1-0-mr-controller-software-licensing-guide" target="_blank" title="RUCKUS IoT 2.2.1.0 (MR) Controller Software Licensing Guide">RUCKUS IoT 2.2.1.0 (MR) Controller Software Licensing Guide</a> <a href="https://support.ruckuswireless.com/documents/4662-ruckus-iot-2-2-ga-controller-software-licensing-guide" target="_blank" title="RUCKUS IoT 2.2 (GA) Controller Software Licensing Guide">RUCKUS IoT 2.2 (GA) Controller Software Licensing Guide</a> <a href="https://support.ruckuswireless.com/documents/4632-ruckus-iot-2-1-1-0-mr-controller-software-licensing-guide" target="_blank" title="RUCKUS IoT 2.1.1.0 (MR) Controller Software Licensing Guide">RUCKUS IoT 2.1.1.0 (MR) Controller Software Licensing Guide</a> <a href="https://support.ruckuswireless.com/documents/4595-ruckus-iot-2-1-0-0-ga-controller-software-licensing-guide" target="_blank" title="RUCKUS IoT 2.1.0.0 (GA) Controller Software Licensing Guide">RUCKUS IoT 2.1.0.0 (GA) Controller Software Licensing Guide</a> <a href="https://support.ruckuswireless.com/documents/4350-ruckus-iot-2-0-1-0-mr-controller-software-licensing-guide" target="_blank" title="RUCKUS IoT 2.0.1.0 (MR) Controller Software Licensing Guide">RUCKUS IoT 2.0.1.0 (MR) Controller Software Licensing Guide</a> <a href="https://support.ruckuswireless.com/documents/4151-ruckus-iot-2-0-0-0-ga-controller-software-licensing-guide" target="_blank" title="RUCKUS IoT 2.0.0.0 (GA) Controller Software Licensing Guide">RUCKUS IoT 2.0.0.0 (GA) Controller Software Licensing Guide</a>

This article explains the required list of Subscription Licenses for IoT

2024-08-15T03:12:16-0700 2024-08-16T04:00:07-0700 https://support.ruckuswireless.com/articles/000004850 2024-08-15T03:20:05-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5465 knowledge_article_5465 2018-10-29T15:11:03-0700 000004850 Validated (External) Public Ruckus support services Support license activation Support License Activation, Ruckus Support Services What to do when PO number is missing/blank on the order? Reason you are getting this error or you are unable to activate the license on the Ruckus Support Portal is because of the, missing purchase order number or blank purchase order number in the SO/PO. The purchase Order number needs to be updated on the order, in order to fix the issue. Please contact <a href="https://support.ruckuswireless.com/contact-us" target="_blank">RUCKUS Support team</a> and we will help you to get this fixed.

The activation will not be successful on the Ruckus Support Portal, when the purchase order number is blank on the order.

2024-08-15T03:20:05-0700 2024-08-16T04:00:06-0700 https://support.ruckuswireless.com/articles/000014429 2024-08-14T02:00:43-0700 monthly 0.8 admin,premium knowledge_article_5463 knowledge_article_5463 2024-08-14T02:00:43-0700 000014429 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;Firmware Performance, Firmware, Unleashed Why Radio type as are seen as 802.11axa and 802.11axg in Unleashed? Starting from 200.16 we have optimized the radio type information in the GUI since we have introduced Wifi7 support (which is a 802.11be standard) in 200.16. axa and axg standards are for the 11 ax AP models, there are other standards for 11be models like R770. Below are the enhanced information as per radio and model. <table style="width: 292px;" width="291"><colgroup><col style="width: 63pt;" width="84"></col><col style="width: 52pt;" width="69"></col><col style="width: 52pt;" width="69"></col></colgroup><tbody><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; width: 84px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;"> </td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; width: 69px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">2.4G</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; width: 69px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">5G</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; width: 69px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">6G</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">For 11ax AP</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">802.11axg</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">802.11axa</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">802.11ax6</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">For 11be AP</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">802.11beg</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">802.11bea</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">802.11be6</td></tr></tbody></table>

This article explains why we see 802.11axa and 802.11 axg for Radius types in Unleashed after upgrading to 200.16. This also explains about the new standards in Wifi7

2024-08-14T02:00:43-0700 2024-08-15T04:00:07-0700 https://support.ruckuswireless.com/articles/000003614 2024-08-14T02:33:31-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5462 knowledge_article_5462 2014-11-06T19:27:04-0800 000003614 Validated (External) Public Ruckus support services;Smartcell insight;Virtual smartcell gateway;SmartCell Insight (SCI) System network management;Known issues and workarounds;Website services;Support license activation System Network Management, Known Issues and Workarounds, Website Services, Support License Activation, Ruckus Support Services, SmartCell Insight, virtual SmartCell Gateway Who can activate vSPoT RTU The license activation email for Right to Use License - L09-VSPT-WW00 must be received by the actual end-user. This is because the vSpoT and Ruckus require that the actual end-user understands the ramifications of purchasing a virtual product. So, in that vein, the end-user must first sign and accept the terms and conditions as part of the license activation process. If you are a VAR or the Distributor and the end-user for the virtual product is not you, you cannot sign and accept the terms and conditions on behalf of the end-user company. Doing so will generate an error. <img alt="User-added image" height="139" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vEP&feoid=00N50000002Cf3M&refid=0EM2J0000024PFM" width="500"></img>

Article provides an understanding of why the end user must accept the terms and conditions of buying a Right to Use License prior to activating and downloading the license.

2024-08-14T02:33:31-0700 2024-08-15T04:00:07-0700 https://support.ruckuswireless.com/articles/000014430 2024-08-14T07:14:48-0700 monthly 0.8 admin,premium knowledge_article_5464 knowledge_article_5464 2024-08-14T07:14:07-0700 000014430 Validated (External) Premium Cloud services Support license activation;Registration Support License Activation, Registration, Cloud Services How to Activate Licenses for RUCKUS End Customers from the RUCKUS One Web Interface RUCKUS One allows you to activate your license subscriptions directly from its web interface. Activating a purchased subscription is necessary to make it active and usable. RUCKUS One provides comprehensive visibility into your subscription details, including the types of licenses you've purchased, and the status of your subscription. Follow these steps to effectively manage your RUCKUS One subscription: Accessing Your Subscription Information: Log in to RUCKUS One: <ul style="margin-bottom: 11px;"><li style="list-style-type: none;"> <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Navigate to the RUCKUS One platform and log in using your credentials.</li></ul> </li></ul> Navigate to Subscriptions: <ul style="margin-bottom: 11px;"><li style="list-style-type: none;"> <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">From the main navigation pane, click on Administration.</li><li style="margin-bottom: 11px;">Under Administration, select Account Management.</li><li style="margin-bottom: 11px;">Click on Subscriptions to open the Subscriptions page.</li></ul> </li><li style="margin-bottom: 11px;"><img alt="User-added image" height="365" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000zDB&feoid=00N50000002Cf3M&refid=0EMPH000009S9RP" width="500"></img></li></ul> View Your Subscription Details: <ul style="margin-bottom: 11px;"><li style="list-style-type: none;"> <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">The Subscriptions page displays the following key information:</li><li style="margin-bottom: 11px;"><img alt="User-added image" height="138" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000zDB&feoid=00N50000002Cf3M&refid=0EMPH000009SFVE" width="500"></img> <ul style="list-style-type: square;"><li style="margin-bottom: 11px;">Subscriptions: Shows the maximum number of APs, switches, or Analytics allowed under your license subscription.</li><li style="margin-bottom: 11px;">Type: Indicates the type of RUCKUS One license your organization has purchased, such as Basic or TEMP.</li><li style="margin-bottom: 11px;">Device Count: Displays the number of devices covered by the subscription.</li><li style="margin-bottom: 11px;">Starting Date: The date and time when your license subscription began.</li><li style="margin-bottom: 11px;">Expires on: The expiration date and time of your license subscription.</li><li style="margin-bottom: 11px;">Time left: The remaining days before your license subscription expires.</li><li style="margin-bottom: 11px;">Status: Indicates whether the license is active or expired.</li></ul> </li></ul> </li></ul> Access Pending Activations: <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Click the Pending Activations tab to view subscriptions that are pending activation.</li><li style="margin-bottom: 11px;"><img alt="User-added image" height="113" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000zDB&feoid=00N50000002Cf3M&refid=0EMPH000009S5PO" width="500"></img></li><li style="margin-bottom: 11px;">The following details are displayed for each pending subscription: <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Order Date: Date when the subscription was purchased.</li><li style="margin-bottom: 11px;">SPA Activation Code: The RUCKUS activation code for your purchase order, containing one or more license Part Numbers. This is an interactive link that redirects you to the RUCKUS Support Portal for activation.</li><li style="margin-bottom: 11px;">Part Number: The SKU of the subscription.</li><li style="margin-bottom: 11px;">Part Number Description: A brief description of the subscription type and term length (e.g., "CLDPROF-APSW-REC3" for a RUCKUS One Professional tier license for one network device for three years).</li><li style="margin-bottom: 11px;">Quantity: The quantity of the Part Number purchased.</li><li style="margin-bottom: 11px;">Subscription Term: Duration of the purchased subscription in months.</li><li style="margin-bottom: 11px;">Last of Grace Activation Period: The final date by which you can select a start date for your subscription. If you activate before this date, you may choose any start date within this period. After this date, the start date is automatically set to the activation period's end date.</li></ul> </li></ul> Activate the Subscription: <ul style="margin-bottom: 11px;"><li style="list-style-type: none;"> <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Click on the specific Part Number to activate it directly from the RUCKUS One web interface. This will open the Activate Purchase page.</li><li style="margin-bottom: 11px;"><img alt="User-added image" height="247" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000zDB&feoid=00N50000002Cf3M&refid=0EMPH000009SIzJ" width="500"></img></li></ul> </li><li style="margin-bottom: 11px;">Select Region and Start Date: <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">On the Activate Purchase page, select the region for the RUCKUS One hosted cloud service. Options include: <ul style="list-style-type: square;"><li style="margin-bottom: 11px;">Asia</li><li style="margin-bottom: 11px;">Europe</li><li style="margin-bottom: 11px;">North America</li></ul> </li><li style="margin-bottom: 11px;">Choose the start date for the service. For paid licenses, ensure that the activation is completed before the Last of Grace Activation Period date. For trial licenses, this field is not applicable.</li></ul> </li><li style="margin-bottom: 11px;">Accept Terms and Activate: <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Check the box to accept the RUCKUS One terms and conditions.</li><li style="margin-bottom: 11px;">Click Activate.</li></ul> </li><li style="margin-bottom: 11px;">Confirmation and Review: <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">A notification will appear confirming the successful activation of the license.</li><li style="margin-bottom: 11px;">Additional details about the activation can be found on the Activities page.</li><li style="margin-bottom: 11px;">The newly activated license information will be displayed under Subscriptions > My Subscriptions. Click Refresh to view the latest information.</li></ul> </li></ul> License Expiration Notifications: RUCKUS One offers several mechanisms to notify you about license expiration: <ul style="margin-bottom: 11px;"><li style="margin-bottom: 11px;">Banner Alerts: If any of your licenses are about to expire or have expired, a banner will be displayed at the top of the Subscriptions page. <ul style="list-style-type: circle;"><li style="margin-bottom: 11px;">Paid Licenses: A 60-day grace period is provided after expiration. <ul style="list-style-type: square;"><li style="margin-bottom: 11px;">Alarms & Notifications: Thirty days before the subscription expires, an alarm is raised, and the administrator receives weekly email notifications until the expiration date.</li></ul> </li><li style="margin-bottom: 11px;">TEMP Licenses: These are valid only for 60 days, with no grace period.</li></ul> </li></ul> Managing Multiple Subscriptions: You can manage and view multiple license subscriptions within the Subscriptions page, ensuring that all your devices and services remain active and properly licensed. For further assistance or training on managing your RUCKUS One subscription, contact RUCKUS support or refer to the RUCKUS One Licensing Guide.

RUCKUS One now offers visibility into unactivated purchases.

2024-08-14T07:14:48-0700 2024-08-15T04:00:06-0700 https://support.ruckuswireless.com/articles/000007762 2024-08-09T15:48:23-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3400 knowledge_article_3400 2018-10-24T12:05:14-0700 000007762 Validated (External) Public Ruckus icx switches;Ruckus support services Configuration;Support license activation Configuration, Support License Activation, Ruckus ICX Switches, Ruckus Support Services How do we enable PREM license on ICX 7650? The ICX 7650 support Premium Layer 3 features. Enabling the PREM license on the switch gives you access to the following features: <ul id="GUID-72D601BE-49B8-42F2-89B3-64554C29CC32__UL_4BFB23B84FC4495E8BD2115DE3CFC017"><li id="GUID-72D601BE-49B8-42F2-89B3-64554C29CC32__LI_6ECF6DD2391047069508EFF74C3405DA">OSPFv2</li><li id="GUID-72D601BE-49B8-42F2-89B3-64554C29CC32__LI_E8EEC644ACA84AE9AFD5B9356F3A27CE">OSPFv3</li><li id="GUID-72D601BE-49B8-42F2-89B3-64554C29CC32__LI_9BFA160C62FE47C5AFBAA9E3C6D447B9">VRRP</li><li id="GUID-72D601BE-49B8-42F2-89B3-64554C29CC32__LI_DF0764943CCE4034B21574C24D9AA3C8">VRRPv3</li><li id="GUID-72D601BE-49B8-42F2-89B3-64554C29CC32__LI_F93D5A3543934DEA8D0C17BD6B015791">VRRP-E</li><li id="GUID-72D601BE-49B8-42F2-89B3-64554C29CC32__LI_AA20EF456D294CA5B0B55C66CA290CF1">GRE</li><li id="GUID-72D601BE-49B8-42F2-89B3-64554C29CC32__LI_B5F7F2B1D09142DF9A624E58FBE1977A">PBR</li><li id="GUID-72D601BE-49B8-42F2-89B3-64554C29CC32__LI_A19400A9EC714EC08B926609133B30C3">PIM-SM, PIM-SSM, PIM-DM</li><li id="GUID-72D601BE-49B8-42F2-89B3-64554C29CC32__LI_837EDC283C124EEFAA086B33AC2ACEDD">PIM Passive</li><li id="GUID-72D601BE-49B8-42F2-89B3-64554C29CC32__LI_84E93BA7E18449479173FC3129B444EB">BGP, BGP4+ (IPv6)</li><li id="GUID-72D601BE-49B8-42F2-89B3-64554C29CC32__LI_B3603CC82EE441749BDD1C0A2CCC67C7">VRF (IPv4, IPv6)</li></ul> The ICX 7650 uses Self-Authenticated Upgrade (SAU) licensing feature that allows you to upgrade or downgrade to a licensed feature set with a single command NOTE: The SAU license install command replaces other licensing commands for installing or deleting a licensed feature. More importantly, you no longer need to install a license file using TFTP or SCP, or delete a license using the license delete command. What is the license part number for ICX 7650 PREM license? ICX7650-PREM-LIC What are the steps to enable the ICX 7650 PREM license? Pre-requisites to perform the PREM license enabling: A purchase order has to be placed with Ruckus order management as needed. Once the order is processed, you will be provided with a unit number and the purchased license name NOTE: The following steps to enable the license is valid from version 08.0.7 and above. Steps to Enable the PREM feature/license Enter the show license installed command to check the if licenses are already installed on the device. Eg: ICX7650-48ZP Router# show license installed Unit License Name L3 Prem PoD Speed Ports MACsec SerialNo(L3/ICX7150) SerialNo(PoD/MACsec) 1 l3-prem NA NA NA NA No 1. Enter the license install perpetual command, followed by the unit number and the purchased license name. device# license install perpetual 1 l3-prem (Here, "1" is the unit number) 2. Enter "y" to Accept the End User License Agreement (EULA), or "n" to Cancel 3. Confirm the license installation with the show license installed command 4. Enter the "show version" command for additional details to verify that the license is installed correctly Steps to Disable the PREM feature/license Note: Enter the show license installed command to check if the licenses are already installed on the device 1. Enter the license install perpetual command, followed by the unit number and the purchased license name device# license delete perpetual 1 l3-prem (Here, "1" is the unit number) 2. By selecting 'y' current license will be downgraded. All licensed configurations will be lost after reload Continue?(enter 'y' to continue, 'n' to cancel): y License downgrade successful. Reboot may be required for licensed features to be automatically disabled. If you did not intend to perform a license downgrade, you can use the license install command to upgrade the license. 3. Confirm the license deletion with the show license installed command

Ruckus ICX 7650 uses Self-Authenticated Upgrade (SAU) feature to enable license features.

2024-08-09T15:48:23-0700 2024-08-13T08:00:08-0700 https://support.ruckuswireless.com/articles/000007612 2024-08-09T16:29:44-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5457 knowledge_article_5457 2018-10-24T12:16:09-0700 000007612 Validated (External) Public Icx 7150;Ruckus support services;RUCKUS ICX 7150 Campus Switches Configuration;Installation;Support license activation Configuration, Installation, Support License Activation, ICX 7150, Ruckus Support Services How do we enable the purchased license feature on ICX 7150? The ICX 7150 switch has the following license upgrades possible if the corresponding part number is purchased. <img alt="ICX 7150 License upgrades" height="154" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xjF&feoid=00N50000002Cf3M&refid=0EM2J000000lsSK" width="500"></img> The ICX 7150 uses Self-Authenticated Upgrade (SAU) licensing feature that allows you to upgrade or downgrade to a licensed feature set with a single command. NOTE: The SAU license install command replaces other licensing commands for installing or deleting a licensed feature. More importantly, you no longer need to install a license file using TFTP or SCP, or delete a license using the license delete command. What are the steps to Enable the ICX 7150 purchased license? Pre-requisites to perform the license enabling: A purchase order has to be placed with Ruckus order management as needed. Once the order is processed, you will be provided with a unit number and the purchased license name. We need to get the License Serial Number from the Ruckus Certificate of Entitlement (CoE) PDF file. This file can be obtained from the support portal by searching with the serial number of the unit (after license activation) and then downloading the file. <img alt="User-added image" height="177" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xjF&feoid=00N50000002Cf3M&refid=0EM50000000ldf9" width="500"></img> NOTE: The following steps to enable the license is valid from 08.0.7 and above. Steps to Enable the License Enter the show license installed command to check the if the licenses are already installed on the device. Eg:ICX7150-24P Router# show license installed Unit License Name L3 Premium Port Speed Upgrade Speed Ports 1 2X10G No Yes 10G 2 1. Enter the license install perpetual command, followed by the unit number and the purchased license name device# license install perpetual <unit number> <type of license> Eg: # license install perpetual 1 4x10GR (Here, "1" is the unit number) (4X10GR is the license type) 2. Enter "y" to accept the End User License Agreement (EULA), or "n" to cancel 3. Confirm the license installation with the show license installed command 4. Use the license set serial-number command to add the CoE serial number to the device. device# license set serial-number <unit id> <type of license> <license serial number> 5. Enter the "show version" command for additional details to verify that the license is installed correctly Steps to Disable the License Note: Enter the show license installed command to check the licenses already installed on the device 1. Enter the license install perpetual command, followed by the unit number and the purchased license name. device# license delete perpetual 1 4x10gr (Here, "1" is the unit number) 2. By selecting 'y' current license will be downgraded. All licensed configurations will be lost after reload. Continue?(enter 'y' to continue, 'n' to cancel): y License downgrade successful. Reboot may be required for licensed features to be automatically disabled. If you did not intend to perform a license downgrade, you can use the license install command to upgrade the license 3. Confirm the license deletion with the show license installed command

Enabling the license upgrade for purchased license feature for Ruckus ICX 7150 switch

2024-08-09T16:29:44-0700 2024-08-13T08:00:07-0700 https://support.ruckuswireless.com/articles/000006611 2024-08-09T16:27:17-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5396 knowledge_article_5396 2017-12-12T16:04:05-0800 000006611 Validated (External) Public Icx 6450;Icx 6610;Icx 7150;Icx 7250;Ruckus support services;Ruckus ICX 6610 Campus Switches;RUCKUS ICX 7150 Campus Switches;Ruckus ICX 7250 Campus Switches Performance;Configuration;Installation;Support license activation Performance, Configuration, Installation, Support License Activation, ICX 6450, ICX 6610, ICX 7150, ICX 7250, Ruckus Support Services What are the PoD licenses available for ICX 6610, ICX 6450, ICX 7150, ICX 7250? Please have a look at the below image that has got information about the Ports on Demand (PoD) license part numbers along with the models <img alt="POD License Matrix" height="319" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xeP&feoid=00N50000002Cf3M&refid=0EM2J000000lsht" width="500"></img> The show license command can be used to verify the license status on the switch. The show pod command is used to display the license configuration for PoD ports in a stack after a license upgrade: Eg: ICX6610# show pod Unit-Id: 1 PoD license capacity: 8 PoD license capacity used: 8 PoD-ports Lic-Available Lic-Used 1/3/1 Yes Yes 1/3/2 Yes Yes 1/3/3 Yes Yes

Article has got brief description about Ports On Demand (PoD) licenses for ICX 6610, ICX 6450,ICX 7150, ICX 7250

2024-08-09T16:27:17-0700 2024-08-13T08:00:07-0700 https://support.ruckuswireless.com/articles/000014423 2024-08-09T01:21:14-0700 monthly 0.8 admin,premium knowledge_article_5392 knowledge_article_5392 2024-08-08T03:37:04-0700 000014423 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Security Security, Cloudpath Q. Is the RUCKUS CloudPath vulnerable to CVE-2024-3596 (Radius Blast)? ANS: Yes (conditions are given in the Troubleshooting section), CloudPath is vulnerable to CVE-2024-3596 and the patch fix is available for CloudPath <div> Where to apply the Patch on the CloudPath server:- For Cloud Hosted setup:- No need to upload/apply this patch as this has been already applied to all the Cloud hosted accounts. The only step needed is to enable the “Message-Authenticator” for RADIUS Clients. For On-Prem Setup:- NOTE: It is recommended to take CloudPath VM snapshot before making any changes.</div> <ol style="list-style-type: upper-alpha;"><li>Download the Patch from the above link: http://dist.cloudpath.net/patches/patch_608_MITIGATE_BLASTRADIUS_5.12.5614.bin</li><li>Upload on the CloudPath server and apply as shown below. (Note: Patch is available only for the 5.12.5614 version, if your Cloudpath is running lower than this then first upgrade to the 5.12.5614 version and then apply the patch).</li><li>Enable the “Message-Authenticator” on the RADIUS Client in the Cloudpath server.</li></ol> <div style="margin-left: 120px;"><img height="185" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xZZ&feoid=00N50000002Cf3M&refid=0EMPH0000099sYf" width="709"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xZZ&feoid=00N50000002Cf3M&refid=0EMPH0000099sYg" style="height: 175px; width: 713px;"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xZZ&feoid=00N50000002Cf3M&refid=0EMPH0000099sYh" style="height: 84px; width: 245px;"></img> </div> <div style="margin-left: 120px;">Note: This will take a few mins to apply the patch and restart the jboss services (approx. 90sec of network impact). </div> How to enable "Message-Authenticator" on CloudPath Server:- UI: Configuration > RADIUS Server > Clients (tab) > "edit" (pencil). <div style="margin-left: 120px;"><img alt="User-added image" height="215" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xZZ&feoid=00N50000002Cf3M&refid=0EMPH000009CC9v" width="500"></img> <img alt="User-added image" height="205" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xZZ&feoid=00N50000002Cf3M&refid=0EMPH000009CAkp" width="500"></img></div> NOTE: <div style="margin-left: 120px;"> <img height="30" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xZZ&feoid=00N50000002Cf3M&refid=0EMPH0000099mZj" width="926"></img> </div> By default, RUCKUS AP/SZ/ICX includes "Message-Authenticator" in the RADIUS "Access-Request" packets. <div style="margin-left: 120px;"> <img alt="User-added image" height="267" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xZZ&feoid=00N50000002Cf3M&refid=0EMPH000009CI0p" width="500"></img></div>

Patch fix for the Radius Blast (CVE-2024-3596) vulnerability is available for CloudPath running on 5.12.5614 version. This KB gives the detail steps on how to apply the Patch fix.

2024-08-09T01:21:14-0700 2024-08-09T16:00:07-0700 https://support.ruckuswireless.com/articles/000014424 2024-08-08T07:34:22-0700 monthly 0.8 admin,premium knowledge_article_5393 knowledge_article_5393 2024-08-08T07:34:22-0700 000014424 Validated (External) Premium Sz144;Sz144 d;Sz300;Ruckus icx switches;Unleashed;Sz100d;Zonedirector;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartZone 100-D (SZ100-D) Troubleshooting Troubleshooting, SZ144, SZ144 D, SZ300, Ruckus ICX Switches, Unleashed, SZ100D, ZoneDirector, SZ100 Q. What information needs to be provided before raising an RMA/Bulk RMA? A. The field engineer is expected to fill in the below details in an Excel sheet while raising the RMA support case. Along with the serial number, part number they also have to id <ol><li>Identify cabling issues if any</li><li>Rule out all the network-related or DHCP-related issues</li><li>Test with various power supplies/power points/PoE/Adapters etc to isolate the issue.</li><li>Test by swapping working and non-working ports/cables/devices</li><li>Hard Reset the unit.</li></ol> Procedure to Hard Reset the Unit: <ol><li>Use a paper clip (not a pen/pencil)</li><li>Press and hold the F/D (Factory Default) pinhole for 30 - 40 secs (You will notice the Power LED blinking while pressing the button) while the unit/device is powered ON.</li><li>Release the pin, and access the device with its default IP (NOTE: All RUCKUS devices are designed to get an IP from the DHCP server if connected to the network and if DHCP is available). Refer to the respective product Install Guide/Config Guide/Getting Started Guide/Quick Start Guide available on the RUCKUS Support Portal (https://support.ruckuswireless.com)</li></ol>

The bulk RMA are being raised without any basic details about the issue type and the troubleshooting done. This document is created to help the field engineer with a basic approach to isolate the hardware issue. Also, it helps to document the problem type which will be useful for Ruckus TAC to process the RMA further. Beyond the approach mentioned in the document, it is always advised to call the Ruckus support if any problem found in the Ruckus gear.

2024-08-08T07:34:22-0700 2024-08-08T14:00:06-0700 https://support.ruckuswireless.com/articles/000005477 2024-08-07T19:23:07-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5390 knowledge_article_5390 2016-01-27T17:00:10-0800 000005477 Validated (External) Public Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Firmware;Installation;Support license activation;Registration Firmware, Installation, Support License Activation, Registration, SmartCell Gateway, SmartCell AP What is SmartZone/vSZ Entitlement File and How to Download it? Which are the SmartZone Controllers? <ul><li>Ruckus Controllers SZ 100, SZ 300, SZ 144, SCG-200 (running firmware 3.2 or above), Virtual SmartZone (vSZ) are classified as SmartZone Controllers.</li></ul> What Information does the SmartZone Entitlement File contain? <div> </div> <ul><li>SmartZone Entitlement File is ".bin" File. </li><li> The file name will be in the format xxxxxxxxxx.bin (Serial Number followed by ".bin" extension). </li><li> ".bin" File will contains the latest Activated Support on the Controller, Support on AP Licenses (above 5.2 version), Capacity Licenses and all the Feature Licenses added to the Serial Number of the Controller.</li></ul> <div> Why is the SmartZone Entitlement File required?</div> Uploading the latest ".bin" file on the Controller will, <ul><li>Update the RTU information as in LiMAN</li><li>Update the Support on the Controller as in LiMAN (Please Note : Active Support contract on the Controller is required to upgrade the Firmware on the Controller)</li><li>Update the Capacity License Count (includes AP and Switch) (Please Note : Updated License Count on the Controller is required to connect devices)</li><li>Update the Data Plane (vSZ-D) License Count (Please Note : Updated vSZ-D License Count on the Controller is required for the Data Plane to connect to the Virtual SmartZone (vSZ) controller)</li><li>Update all the Feature Licenses added to the Serial Number</li></ul> How do I get the Support Entitlement File for SmartZone Controllers? <ul><li>".bin" File will include Support and Licenses added to the Controller. </li><li>''.bin" File cane be downloaded from <a href="https://support.ruckuswireless.com/" target="_blank">Support Portal</a> >LiMAN </li></ul> <h1>Steps to Download Virtual/LiMAN Licenses for vSPoT, vSCG, SCI, SZ, vRIoT, and SCG controllers:</h1> <ul><li>Login to the Ruckus support portal: <a href="https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com</a></li><li>Click on LiMAN </li></ul> <img alt="User-added image" height="269" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xRV&feoid=00N50000002Cf3M&refid=0EM2J0000038t5p" width="500"></img> <ul><li>Takes you to the LiMAN (Smart License Manager) Portal</li><li>All the Virtual Devices registered under your account will be listed here</li></ul> <img alt="User-added image" height="337" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xRV&feoid=00N50000002Cf3M&refid=0EM2J0000038t6O" width="500"></img> <ul><li>Click on the Serial Number of the Controller from the Registered Smart Devices</li><li>Click the Download Icon as displayed in the below image.</li></ul> <img alt="" height="310" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xRV&feoid=00N50000002Cf3M&refid=0EM2J0000038t6Y" width="500"></img> <ul><li>License File with Serial Number followed by (.bin) extension will be downloaded.</li><li>Check your "Downloads" Folder for the File.</li></ul> Steps to sync the Licenses on Controller GUI: <ul><li>If the Controller has access to Internet > Login to Controller GUI> Click on Administration > Licenses > SYNC NOW.</li></ul> Steps to manually Upload Licenses on the Virtual Controllers GUI: <ul><li>Login to Controller GUI navigate to Administration > License.</li><li>Click on Upload license (browse the file from Download folder)</li><li>Click on Upload</li><li>Once the License File is successfully uploaded, you will see the updated License Count on the License page</li></ul> You can also refer to below article for, "<a href="https://ruckuswireless.my.salesforce.com/ka2PH0000000xCz" target="_blank">Steps to Upload Licenses on Virtual Controllers</a>" How can a Ruckus Partner/VAR Download Licenses from LiMan on behalf of their End user : To Download Licenses from LiMan on behalf of their End user, VAR should first masquerade as the End User. Steps to masquerade as the End User: <ul><li>Log into Support Portal,</li><li>Click on View Customers</li><li>The VAR contact should be able to view the List of End Users</li><li>Click on the End User Account Name</li><li>Click on Switch To The Account</li><li>Now the VAR/Reseller contact can Masquerade as the end user contact. (You can stop "masquerading" as the End User contact, by clicking on "Return to being yourself")</li><li> </li></ul> Once the VAR has Masqueraded/Switched to the End User Account, VAR can Download the Licenses from LiMAN. Steps to Download Licenses from End User's LiMAN: <ul><li>Click on LiMAN </li><li>Click on the Device Serial Number to which you wish to download the Licenses. </li><li>Click on the Download License (shown as ? License) the License File will be download with a (.bin) extension.</li></ul> Steps to sync the Licenses on Controller GUI: <ul><li>If the Controller has access to Internet > Login to Controller GUI> Click on Administration > Licenses > SYNC NOW.</li></ul> Steps to manually Upload Licenses on the Virtual Controllers GUI: <ul><li>Login to Controller GUI navigate to Administration > License.</li><li>Click on Upload license (browse the file from Download folder)</li><li>Click on Upload</li><li>Once the License File is successfully uploaded, you will see the updated License Count on the License page</li></ul> You can also refer to below article for, "<a href="https://ruckuswireless.my.salesforce.com/ka2PH0000000xCz" target="_blank">Steps to Upload Licenses on Virtual Controllers</a>" Information on Support on AP Licenses from release 5.2 GA onwards "<a href="https://ruckuswireless.my.salesforce.com/ka2PH0000000n0j" target="_blank">AP Support License for Firmware Version 5.2 and Above</a>"

Steps to download the Support and License File for the SmartZone/vSZ controllers

2024-08-07T19:23:07-0700 2024-08-08T04:00:07-0700 https://support.ruckuswireless.com/articles/000014220 2024-08-07T10:44:20-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5391 knowledge_article_5391 2023-06-20T08:36:52-0700 000014220 Validated (External) Public Ruckus wan gateway rwg Support license activation;Registration Support License Activation, Registration, RUCKUS WAN Gateway RWG Where is the location of the RWG asset ID used in the asset field when opening a RWG case? In the RWG gui. SYSTEM tab ---> licenses On the license page in the license summary field. Lower left the RWG asset ID will be displayed. EX: rwg asset7696 <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xOH&feoid=00N50000002Cf3M&refid=0EMHt000005RIcW"></img>

Where do i find the RWG asset ID needed to open a case

2024-08-07T10:44:20-0700 2024-08-07T20:00:06-0700 https://support.ruckuswireless.com/articles/000008262 2024-08-06T22:46:47-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3345 knowledge_article_3345 2018-09-11T15:18:17-0700 000008262 Validated (External) Public Smartcell gateway;Smartcell insight;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) Installation;Support license activation;Registration Installation, Support License Activation, Registration, SmartCell Gateway, SmartCell Insight Steps to Upload Licenses on the Virtual Controllers (vSCG, vSZ, vSPoT, SCI, SCG)? Steps to Upload Licenses on Virtual Controller GUI: Note : If the Controller has access to Internet > Login to Controller GUI> Click on Administration > Licenses > SYNC NOW. Uploading Manual License File : To upload the Licenses manually on the Controller, we first need to Download Licenses from Ruckus Support Portal. Download Licenses from Ruckus Support Portal: Login to Ruckus Support Portal, using link: <a href="https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com</a> Click on LiMAN <img alt="User-added image" height="103" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xCz&feoid=00N50000002Cf3M&refid=0EM2J0000024bva" width="500"></img> Smart Devices License Manages (LiMAN), all the Virtual Device Serial Numbers registered under your account, will be listed here. If you are not able to view the Serial Number under Smart Devices License Manages (LiMAN), please check Advanced Portal. <img alt="User-added image" height="338" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xCz&feoid=00N50000002Cf3M&refid=0EM50000000lgdB" width="500"></img> Click on the Device Serial Number >> click on Download Licenses (shown as ? License), the License File will be download. <img alt="User-added image" height="197" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xCz&feoid=00N50000002Cf3M&refid=0EM50000000lge9" width="500"></img> Note : License File will be (.bin) extension. <img alt="User-added image" height="53" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xCz&feoid=00N50000002Cf3M&refid=0EM50000000lgfg" width="500"></img> Uploading License File on the Controller GUI: Note : Platform: vSCG/vSZ,SCG=>3.2 Platfor : vSCG Login to Controller GUI navigate to Administration > License > Click on Upload license (browse the file from Download folder) <img alt="User-added image" height="240" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xCz&feoid=00N50000002Cf3M&refid=0EM2J0000024c0f" width="500"></img> Click on Upload Once the License File is successfully uploaded, you will see the updated License Count on the License page Platform: vSPoT <ul></ul> Login to Controller GUI navigate to Settings > License > Upload License. Note: SN should first be generated in order to add and upload licenses. (Click Generate to obtain a SN for the virtual machine. Have SN of your vSPoT VM device ready during the RTU activation itself) <img alt="User-added image" height="206" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xCz&feoid=00N50000002Cf3M&refid=0EM50000000YjpV" width="500"></img> Click on Upload Smart License Choose the license file from your client to upload it to the vSPoT VM Once the License File is successfully uploaded, you will see the updated License Count on the License page <img alt="User-added image" height="188" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xCz&feoid=00N50000002Cf3M&refid=0EM50000000Yjpf" width="500"></img> Platform: SCI Login to SCI application, navigate to Admin > License <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xCz&feoid=00N50000002Cf3M&refid=0EM50000000lggP"></img> Browse for the License File and click on Upload <img alt="User-added image" height="179" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000xCz&feoid=00N50000002Cf3M&refid=0EM50000000lggU" width="500"></img> Once the License File is successfully uploaded, you will see the updated License Count on the License page <ul></ul>

Licenses are activated and added on the Controller, need to Upload them on the Virtual Controller via GUI

2024-08-06T22:46:47-0700 2024-08-07T12:00:08-0700 https://support.ruckuswireless.com/articles/000010368 2024-08-06T22:09:29-0700 monthly 0.8 admin,premium knowledge_article_4147 knowledge_article_4147 2020-04-21T01:19:19-0700 000010368 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration Configuration, SmartCell Insight How to install a Custom SSL Certificate on SCI Requirement : Server certificate Private Key Please follow the below steps to install the certificate Step 1: Copy the Certificate and Private key to SCI using WinSCP or SCP. Make sure the Server cert and the private key is named as "server.crt" and "server.key" ex: scp server.* rsa@<SCI Ip address>:. Copy the files to the folder /home/rsa Step 2: Copy the Certs and Private key to the rsa-gateway docker ssing the below command cd /home/rsa sudo docker cp server.crt rsa-gateway:/etc/ssl/certs/server.crt sudo docker cp server.key rsa-gateway:/etc/ssl/private/server.key Step 3: Restart the Gateway sudo docker restart rsa-gateway Below is the sample output for reference. <img alt="User-added image" height="147" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000x9l&feoid=00N50000002Cf3M&refid=0EMPH00000987Gr" width="500"></img> Note: These steps need to be done every time SCI is updated as the cert will be replaced by the default certificate once SCI updates.

2024-08-06T22:09:29-0700 2024-08-07T12:00:08-0700 https://support.ruckuswireless.com/articles/000004516 2024-08-02T03:17:23-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5388 knowledge_article_5388 2015-05-06T13:46:17-0700 000004516 Validated (External) Public Virtual smartcell gateway Support license activation;Registration Support License Activation, Registration, virtual SmartCell Gateway Why are my AP Licenses not showing up in the License Summary when we have Permanent License? On the vSCG >> License Summary if you see the License Count as 0 : <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vxZ&feoid=00N50000002Cf3M&refid=0EMPH000008vuKD"></img> Please Login to vSCG GUI and check if the "Permanent" "INSTANCE-VSCG" ( Virtual SmartCell Gateway, 1 Instance) License is showing up. <img alt="User-added image" height="240" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vxZ&feoid=00N50000002Cf3M&refid=0EM50000000LjGB" width="500"></img> If there is NO Permanent "INSTANCE-VSCG" ( Virtual SmartCell Gateway, 1 Instance) on the GUI, you need to Purchase the Licenses. Permanent RTU is Purchased, please check if you have received a SPA Email for the RTU License If the SPA Email for the RTU License is received : Activate the RTU Licenses Once the RTU is activated, login vSCG GUI and "Sync Now". "INSTANCE-VSCG" ( Virtual SmartCell Gateway, 1 Instance) should get updated on the GUI. Note : If the you have not received the SPA Email for the RTU License, please contact your Ruckus Partner/Distributor. Reference Articles : <a href="https://ruckuswireless.my.salesforce.com/ka2PH0000000muH" target="_blank">Steps to activate RTU and AP Licenses on vSCG/vSZ, vSPOT, SCI</a> <a href="https://ruckuswireless.my.salesforce.com/ka2PH0000000ui9" target="_blank">Steps to Add Licenses to Virtual Controllers from Support Portal (LiMAN)</a> <a href="https://ruckuswireless.my.salesforce.com/ka2PH0000000sgL" target="_blank">Steps to Download License File for Virtual Controllers from Support Portal (LiMAN)</a> <a href="https://ruckuswireless.my.salesforce.com/ka2PH0000000uWr" target="_blank">Uploading Licenses on the Virtual Controllers</a>

You see the AP License Count as "0" when there is no Permanent RTU and AP Licenses applied on the Instance

2024-08-02T03:17:23-0700 2024-08-05T08:00:07-0700 https://support.ruckuswireless.com/articles/000002728 2024-08-01T23:19:40-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4621 knowledge_article_4621 2014-02-28T00:34:24-0800 000002728 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector Steps to Upload Licenses on the ZoneDirector Prerequisite : <div>ZoneDirector License should be activated. Need help with activating the Licenses, follow <a href="https://support.ruckuswireless.com/articles/000008284" target="_blank">Activation from Support Portal</a> Have the License File (.lic) downloaded from Ruckus Support Portal. Need help downloading the License File, follow <a href="https://support.ruckuswireless.com/articles/000003116" target="_blank">How to Download Licenses from Ruckus Support Portal</a></div> Steps to upload the upgraded AP License File on ZoneDirector : Login to the ZD GUI <img alt="User-added image" height="189" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vsj&feoid=00N50000002Cf3M&refid=0EM50000000lkwv" width="500"></img> Click on Administer >> License >> Choose File <img alt="User-added image" height="302" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vsj&feoid=00N50000002Cf3M&refid=0EM50000000lkx0" width="500"></img> Select the License File Click on Upgrade License<img alt="User-added image" height="292" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vsj&feoid=00N50000002Cf3M&refid=0EM50000000lkx5" width="500"></img> A pop-up window comes up to confirm the License Upload >> Click "OK"<img alt="User-added image" height="205" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vsj&feoid=00N50000002Cf3M&refid=0EM50000000lkxF" width="500"></img> Once the License File is successfully uploaded, you will see the updated License Count on the License page <img alt="User-added image" height="293" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vsj&feoid=00N50000002Cf3M&refid=0EM50000000lkxA" width="500"></img>

Steps to Upload Licenses on the ZoneDirector

2024-08-01T23:19:40-0700 2024-08-05T08:00:07-0700 https://support.ruckuswireless.com/articles/000001955 2021-04-08T00:03:21-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4642 knowledge_article_4642 2013-04-25T14:02:40-0700 000001955 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why the Access Points are not getting IP address from external DHCP server? Once after configuring the DHCP Server properly to assign IP address to separate untagged subnet(vlan), Access Points started obtaining IP address from DHCP Server and everything worked fine.

Access Points are not getting IP address from the DHCP server

2021-04-08T00:03:21-0700 2024-08-02T16:40:01-0700 https://support.ruckuswireless.com/articles/000004354 2024-08-01T08:45:35-0700 monthly 0.8 admin,premium knowledge_article_3387 knowledge_article_3387 2015-04-24T03:29:17-0700 000004354 Validated (External) Premium Smartcell insight;Spot;Virtual smartcell gateway;SmartCell Insight (SCI);Ruckus SPoT;Calibrator App for SPoT;vSPoT Support license activation;Registration Support License Activation, Registration, SmartCell Insight, SPoT, virtual SmartCell Gateway What are the basic Support and Licenses required for vSZ, vSPoT and SCI ? Below are the basic Support and Licenses required for vSZ/vSPoT/SCI for the controller to operate without any interruption: <ol><li>Right to Use / Instance license ( RTU )</li><li>Support on RTU / Support on the Controller</li><li>Capacity License (AP/Switch) </li><li>Support on Capacity Licenses</li></ol> For more details, please refer to the below link, <a href="https://support.ruckuswireless.com/documents/4315-ruckus-smartzone-software-licensing-guide" title="RUCKUS SmartZone Software Licensing Guide" target="_blank">RUCKUS SmartZone Software Licensing Guide</a> <a href="https://support.ruckuswireless.com/documents/1235-smartcell-insight-sci-licensing-guide" title="SmartCell Insight (SCI) Licensing Guide" target="_blank">SmartCell Insight (SCI) Licensing Guide</a> You can also contact your Ruckus Partner / Distributor or <a href="https://www.ruckusnetworks.com/support/contact-us/" target="_blank">Ruckus Sales / Ruckus Support</a>

This article explains the required list of Support and Licenses for the vSZ, vSPoT and SCI

2024-08-01T08:45:35-0700 2024-08-02T00:00:13-0700 https://support.ruckuswireless.com/articles/000001332 2024-08-01T09:48:04-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3430 knowledge_article_3430 2012-11-24T12:48:13-0800 000001332 Validated (External) Public All;Brocade Mobility 6511 Wallplate Access Point Installation Installation, All Unable to dowload Software Files from Support Portal. Can't see all products in support portal. For Resellers: <ul><li>If you have an active contract on one of the products that belong to you or your end users, you should have Premium Access on the Support Portal.</li><li>If you encounter a Premium Error, please contact Ruckus Customer Support.</li></ul> Activating Support for Customers: <ul><li>Activation is usually automatic if you provide the customer's email address while placing a Purchase Order (PO). An activation email is sent to the customer upon order receipt, allowing them to register for an account on <a target="_new">support.ruckuswireless.com</a>.</li></ul> For End-Users During the 5-Month Limited Software Warranty: <ul><li>You can elevate your account to Premium status during the 5-month software warranty by registering your products for warranty. The warranty period starts from the date Ruckus ships the unit to the distributor. This registration provides full access to the site for the remainder of your warranty period.</li></ul> Issues Downloading Firmware or Accessing KB Articles: <ul><li>If you have purchased a support contract and are logged in but receive a warning when trying to download firmware files for ZD/vSZ/SCG/SZ or access certain KB articles, this indicates that your login account is not properly associated with your devices and entitlement permissions.</li></ul> Steps to Resolve Missing Support Purchase Acknowledgement (SPA) Email: <ol><li>Ensure that your firewall is not blocking emails from @ruckuswireless.com.</li><li>Check your junk/spam email folder.</li><li>If the email is still not found, open a case with us.</li></ol> Contact Us for Assistance: If you believe you have a warranty or contract for your devices but need access to software updates, cannot view the product under Asset Management, or need Premium Knowledge Base access, please contact us with the following information: <ul><li>Your account (login) name.</li><li>The serial number and model of any devices you would like associated with your account.</li><li>Sales Order or Purchase Order Number from Ruckus.</li><li>Support Activation code sent by Ruckus.</li><li>The name of your reseller.</li></ul> We will respond promptly to set up your account properly.

I registered for an account on Support Portal and logged in. I get a warning message that I need Premium access, when I try to download Software Files from Support Portal. Can't see all products in support portal.

2024-08-01T09:48:04-0700 2024-08-02T00:00:12-0700 https://support.ruckuswireless.com/articles/000001326 2024-08-01T09:52:51-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_13 knowledge_article_13 2012-10-22T16:56:11-0700 000001326 Validated (External) Public Ruckus support services Website issues Website Issues, Ruckus Support Services What does the Ruckus Customer Support portal provide? The RUCKUS Customer Support portal offers several key features and services to assist customers: <ol><li>Case Management: Allows customers to open, track, and manage support cases.</li><li>Knowledge Base: Provides access to articles, documentation, and solutions to common issues.</li><li>Software Downloads: Customers can download firmware, software updates, and patches.</li><li>Product Registration: Enables the registration of RUCKUS products for warranty and support purposes.</li><li>License Management: Manages software licenses and activations.</li><li>Training and Certification: Offers information on training programs and certification opportunities.</li><li>Community Forums: A platform for customers to interact with other users and share knowledge.</li><li>Technical Documentation: Access to detailed technical documents and user manuals.</li><li>RMA Processing: Facilitates the Return Merchandise Authorization process for defective products.</li></ol> These features ensure comprehensive support and resources for RUCKUS customers to effectively manage their products and resolve issues. <h3>Key Features of the Ruckus Support Portal</h3> <ol><li> Ruckus Support Knowledge Base The Ruckus Support Knowledge Base is your go-to resource for almost all queries, both technical and non-technical. With a powerful search feature, you can easily find information by product. This extensive library of articles and documentation ensures that you have the information you need to resolve issues quickly and efficiently. </li><li> Open & Track Cases Need to report a problem or seek assistance? The Open & Track Cases feature allows you to initiate a support case with Ruckus and follow the activity through to resolution. You can add comments, receive updates, and stay informed about the progress of your case from start to finish. </li><li> Request and Track RMAs If you need to return a product, the Request and Track RMAs feature simplifies the process. You can create an RMA request, and Ruckus Support will review it, determine the entitlement, and generate the appropriate RMA type—Advance Replacement (AR) or Return to Factory (RTF). Once created, your RMAs will be displayed under CASES -> RMA's for easy tracking. </li><li> Forums The Ruckus Support Forums provide a space for you to exchange ideas and solutions with your peers. Engage with other Ruckus users, share experiences, and find community-driven support and insights. </li><li> Temporary License In situations where you haven't received your permanent license yet and need to install a product, the Temporary License feature offers a 30-day temporary license for the ZoneDirector. This ensures you can keep your operations running smoothly while awaiting your permanent license. </li><li> Registered Product Tracking Keep tabs on all your registered products with the Registered Product Tracking feature. This tool provides a list of all products registered under your account and displays the status of their support contracts, helping you manage your assets effectively. </li><li> Log Analyzer Analyzing log files can be complex, but the Log Analyzer tool simplifies this task. It interprets the results of log files, making it easier to understand and troubleshoot issues. </li><li> Support Chat For quick and convenient assistance, the Support Chat feature allows you to contact Ruckus and conduct support transactions using chat instead of phone, email, or portal cases. This real-time support option ensures you get help when you need it. </li></ol> <h3>Access Levels</h3> The Ruckus Support Portal offers three different types of access levels: <ol><li>Guest Access</li><li>Premium Access</li><li>Warranty Access</li></ol> For detailed information on the differences between Guest and Premium access, visit the <a href="https://support.ruckuswireless.com/account" target="_new">Ruckus Support Portal Account Page</a>. Warranty Access is provided to customers who are part of an account registered with Ruckus but have no or expired support contracts. Note that customers under warranty-only access cannot obtain full site access.

This article describes the main features of the Ruckus Customer portal as a comprehensive support tool that gives the customer a single destination to address their support needs.

2024-08-01T09:52:51-0700 2024-08-02T00:00:12-0700 https://support.ruckuswireless.com/articles/000005067 2024-08-01T11:05:34-0700 monthly 0.8 admin,premium knowledge_article_5386 knowledge_article_5386 2015-08-24T17:52:15-0700 000005067 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Installation;System network management;Troubleshooting;Known issues and workarounds Performance, Installation, System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway Why am I getting a support license expired message when upgrading my vSCG/vSZ cluster? If you're unable to upgrade your RUCKUS vSCG (Virtual SmartCell Gateway) cluster due to a support license expiry, you'll need to follow certain steps to address the issue. Here are detailed instructions and considerations to help you resolve this problem: <h3>Steps to Resolve License Expiry Issue</h3> <ol><li> Check License Status: <ul><li>Verify the current status of your support license. Log in to the vSCG web interface and navigate to the license management section to see the expiry dates and status of all licenses.</li></ul> </li><li> Renew or Purchase License: <ul><li>If your support license has expired, you will need to renew it. Contact your RUCKUS reseller or RUCKUS support to purchase a new support license or renew the existing one.</li></ul> </li><li> Apply the New License: <ul><li>Once you have the new license, apply it through the vSCG web interface. Go to the license management section, upload the new license file, and ensure it is activated correctly.</li></ul> </li><li> Upgrade Preparation: <ul><li>Before starting the upgrade, ensure that your cluster is in a stable state. Check for any existing issues and resolve them.</li><li>Backup your current configuration. This is critical in case you need to roll back to the previous version.</li></ul> </li><li> Perform the Upgrade: <ul><li>Follow the official RUCKUS upgrade documentation specific to your version. This usually involves downloading the upgrade package from the RUCKUS support site and uploading it to the vSCG.</li><li>Initiate the upgrade process through the web interface. Monitor the upgrade process closely and ensure that all nodes in the cluster are upgraded successfully.</li></ul> </li><li> Post-Upgrade Checks: <ul><li>After the upgrade, perform thorough testing to ensure that all functionalities are working correctly. Verify that all nodes are online and operational.</li></ul> </li></ol> “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

This article explains why a vSCG/vSZ cluster upgrade may fail with the error "The support license has expired. Please contact Ruckus Wireless Support for assistance.”

2024-08-01T11:05:34-0700 2024-08-02T00:00:11-0700 https://support.ruckuswireless.com/articles/000002082 2024-08-01T11:12:05-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3401 knowledge_article_3401 2013-06-06T09:04:10-0700 000002082 Validated (External) Public All;Brocade Mobility 6511 Wallplate Access Point Known issues and workarounds;Website issues;Support license activation;Registration Known Issues and Workarounds, Website Issues, Support License Activation, Registration, All How to change the support contract from Partner Support to End User Support? To change a Ruckus support contract from Partner Support to End User Support (or vice versa), follow these detailed steps: <h3>End Users:</h3> <ol><li> Contact Your Reseller: <ul><li>Reach out to the reseller from whom you purchased the partner support contract.</li></ul> </li><li> Request a Quote: <ul><li>Ask the reseller to provide a quote for changing the support contract from Partner Support to End User (Direct) Support.</li></ul> </li><li> Place a New Purchase Order: <ul><li>Once you receive the quote, place a new purchase order with your reseller.</li><li>Ensure that the new purchase order includes all necessary details to change the support contract type.</li></ul> </li><li> Provide Required Information: <ul><li>Old Purchase Order Number (PO#)</li><li>Serial Number(s) of the device(s)</li><li>SKU/Part Number of the old support contract</li></ul> </li></ol> <h3>Resellers:</h3> <ol><li> Contact Your Distributor: <ul><li>Get in touch with your distributor to initiate the process of changing the support contract.</li></ul> </li><li> Place a New Purchase Order: <ul><li>Place a new purchase order with the distributor.</li><li>Include the following details in the new purchase order: <ul><li>Old Purchase Order Number (PO#)</li><li>Serial Number(s) of the device(s)</li><li>SKU/Part Number of the old support contract</li></ul> </li></ul> </li><li> Request Credit for Previous Contract: <ul><li>Request any applicable credit for the previous support contract from the distributor.</li></ul> </li><li> Provide Required Information: <ul><li>Old Purchase Order Number (PO#)</li><li>Serial Number(s) of the device(s)</li><li>SKU/Part Number of the old support contract</li></ul> </li></ol> By following these steps and providing the necessary details, the transition from Partner Support to End User Support (or vice versa) can be smoothly handled. <ul><li> Submit Documentation: <ul><li>Provide any required documentation or proof of purchase. This may include the original purchase order, proof of ownership, and any authorization letters from the partner and end user.</li></ul> </li><li> Authorization: <ul><li>Obtain authorization from the current partner to transfer the support contract to the end user. This might involve a formal request or approval from the partner.</li></ul> </li><li> Ruckus Support Review: <ul><li>Ruckus Support will review the submitted information and documentation. They may contact you for additional details or clarifications.</li></ul> </li></ul>

Article has got information about changing the support type from one to another

2024-08-01T11:12:05-0700 2024-08-02T00:00:11-0700 https://support.ruckuswireless.com/articles/000002394 2024-08-01T10:28:44-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3486 knowledge_article_3486 2013-12-01T14:58:32-0800 000002394 Validated (External) Public Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) System network management;Known issues and workarounds;Support license activation System Network Management, Known Issues and Workarounds, Support License Activation, ZoneDirector, SmartCell Gateway Can we move ZD licenses from one device to another device? Transferring Licenses and Support from ZD to ZD <ul><li>Both ZoneDirectors belong to you. RUCKUS can ask for a picture of the physical ZD and/or print screen from the GUI</li><li>The devices involved should be like to like i.e. From ZD1200 to ZD1200</li><li>You have the necessary credentials and access to both ZoneDirectors.</li><li>You have a record of all the licenses and support contracts associated with the original ZoneDirector.</li></ul> <h3>Step-by-Step Guide</h3> <h4>1. Verify Compatibility</h4> Ensure that the new ZoneDirector is compatible with the licenses and support contracts from the original ZoneDirector. Both devices should be the same model to facilitate a seamless transfer. <h4>2. Backup Configuration</h4> Before making any changes, back up the configuration of the original ZoneDirector. This includes all settings, configurations, and license information. <h4>3. Contact Ruckus Support</h4> Reach out to Ruckus Support to inform them about the planned transfer. Provide details about both ZoneDirectors, including serial numbers and model information. Ruckus Support can guide you through the process and ensure that all necessary steps are followed. <h4>4. Transfer Licenses</h4> Ruckus may require you to provide proof of ownership and ensure that the devices are eligible for license transfer. The support team will assist in deactivating licenses on the original ZoneDirector and reactivating them on the new one. Follow their instructions carefully to avoid any disruptions. <h4>5. Update Support Contracts</h4> After transferring the licenses, update the support contracts to reflect the new ZoneDirector. This may involve updating records in the Ruckus Support Portal and ensuring that the new ZoneDirector is covered under the existing support agreements. <h4>6. Verify Functionality</h4> Once the transfer is complete, verify that all licenses are active and functioning correctly on the new ZoneDirector. Test key functionalities to ensure that there are no issues with the transition. <h3>Ruckus Support Obligations</h3> <h4>License Management</h4> Ruckus Support is responsible for assisting with the deactivation and reactivation of licenses during the transfer process. They ensure that the licenses are correctly applied to the new ZoneDirector. <h4>Technical Assistance</h4> Ruckus Support provides technical assistance throughout the transfer process, helping to troubleshoot any issues that may arise and ensuring that the new ZoneDirector operates smoothly. <h4>Documentation</h4> Ruckus Support maintains records of the transfer, including updated support contracts and license information. They provide documentation to the customer to confirm the successful completion of the transfer.

Transferring ZoneDirector

2024-08-01T10:28:44-0700 2024-08-02T00:00:11-0700 https://support.ruckuswireless.com/articles/000005874 2024-08-01T13:10:26-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3447 knowledge_article_3447 2016-07-06T11:40:53-0700 000005874 Validated (External) Public Flexmaster umm Firmware;Installation;Known issues and workarounds;Support license activation Firmware, Installation, Known Issues and Workarounds, Support License Activation, FlexMaster UMM How to download and upload FlexMaster Licenses? Can I get a temporary license for my FlexMaster system? If it's a First time installation, kindly <a href="https://support.ruckuswireless.com/products/12-flexmaster#firmwares" target="_blank">click here</a> to download the FlexMaster Software from Support Portal. <ol><li> Save the file</li><li> Install the Software</li><li> Log into FlexMaster</li><li> Navigate to Administer -> License -> Browse file and upload</li><li> Once the license file is uploaded on to the FlexMaster, you can see all the purchased licenses on the FlexMaster.</li></ol> Software and Licenses can also be sent via Bitstream URL Link. Here is an example of how the URL Link and access code are sent to you via email https://bitstream.ruckuswireless.com FILE: 901-0025-FME0_SN123456789012.iso 661221376 Kb AccessCode: 665b5871fe0028e5ac8b6eacd Link Expires: 05-06-2014(MM-DD-YYYY) If you have received the email with the Bitstream URL Link, please follow these steps to install your software and licenses. <ol><li> Please click on the link - https://bitstream.ruckuswireless.com</li><li> Enter the access code from your email to download the Software</li><li> Install the FlexMaster Software</li><li> Go to Administer Menu (on the top)</li><li> Then go to licenses (this menu is on the left)</li><li> On the top of the screen you will see “Total Licenses purchased. For example, if you requested 25 AP licenses, the screen should read 25.</li></ol> If the license count is 0, then follow the steps below. Note: You need to have active support contracts prior to following the steps below. <ol><li>Login to the support site</li><li>Go to Downloads</li><li>Choose a product</li><li>Type FlexMaster</li><li>Click on FlexMaster Latest Software Version</li><li>Click on Download Software</li><li>This ISO file has the software and the default 100 AP licenses.</li></ol> The software contains both the software and license file included. Please install the ISO file and it is okay to re-install the software. The software will be over written and you will have 100 licenses. <a href="https://support.ruckuswireless.com/software?filter=12#firmwares" target="_blank">Here is the link to download the FlexMaster software and licenses.</a> If the Bitstream URL Link has expired, if you are unable to download FlexMaster licenses and/or your access code has expired. Please open a case by contacting Ruckus <a href="https://support.ruckuswireless.com/contact-us" target="_blank">Customer Support</a> and provide the following details - How many licenses are you expecting Product SN# (if you have it) Part# (starts with 901) Distributor's Purchase Order # Date of purchase

This article describes the steps to download and upload FlexMaster licenses.

2024-08-01T13:10:26-0700 2024-08-02T00:00:10-0700 https://support.ruckuswireless.com/articles/000004832 2024-08-01T12:56:48-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2004 knowledge_article_2004 2015-07-03T08:19:45-0700 000004832 Validated (External) Public Zonedirector 1200;ZoneDirector 1200 Performance;Configuration;System network management;Support license activation Performance, Configuration, System Network Management, Support License Activation, ZoneDirector 1200 How licensing work on ZD 1200 Smart Redundancy configuration? The RUCKUS ZoneDirector (ZD) 1200 is designed to manage wireless networks with various features and licensing requirements. When deploying a ZD 1200 in Smart Redundancy (SR) mode, it is important to understand the licensing constraints and procedures to ensure optimal performance and compliance. <h3>Licensing Requirements</h3> <ol><li> Permanent Licenses: <ul><li>Mandatory for SR Mode: Smart Redundancy mode requires permanent licenses to operate. Temporary licenses cannot be used in SR environments.</li><li>Purpose: Permanent licenses ensure that the ZD 1200 device can fully support Smart Redundancy features, providing consistent and reliable network management.</li></ul> </li><li> Temporary Licenses: <ul><li>Not Compatible with SR Mode: Temporary licenses are not supported in Smart Redundancy mode. These licenses are intended for short-term use and cannot be used to enable or operate SR mode.</li></ul> </li></ol> Once you enable Smart Redundancy on ZD 1200, the licenses on the primary and standby ZDs are pooled together. If the primary ZD goes defective or is removed from the pool, the standby ZD will act as the primary controller and start to manage all the APs automatically for the next 60 days. Once the replacement for the primary controller returns to the pool within 60 days, the new ZD will stay as a standby controller until the current primary fails, gets rebooted or force failure is selected on the SR configuration. If a replacement for the primary controller does not return to the pool within 60 days, then the current primary controller (originally configured as a standby controller) will only manage the number of APs that it is licensed to manage prior to enabling Smart Redundancy. Example: Two ZD 1200 with 25 AP licenses each, once smart redundancy is enabled between them, active ZD 1200 shows the total number of AP licenses as 50 and is capable of managing 50 APs. After the 60th day, if the primary controller is not returned to the pool, the primary controller (originally configured as a standby controller) will have only 25 APs connected to it. <img alt="User-added image" height="312" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vfp&feoid=00N50000002Cf3M&refid=0EMPH000008teug" width="500"></img> Configuration: With permanent licenses in place, configure Smart Redundancy mode. This involves setting up a primary and secondary ZD 1200 device to ensure high availability and failover capabilities. Testing: Test the SR setup to confirm that redundancy features are functioning correctly and that the network remains operational during failover scenarios. To utilize the RUCKUS ZD 1200 in Smart Redundancy mode, you must use permanent licenses. Temporary licenses are not supported in SR environments. Ensure to reset the device to factory settings, install the appropriate permanent licenses, and configure Smart Redundancy as required.

Article describes the licensing concept on ZD 1200 in smart redundancy mode.

2024-08-01T12:56:48-0700 2024-08-02T00:00:10-0700 https://support.ruckuswireless.com/articles/000005437 2024-08-01T12:40:56-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2255 knowledge_article_2255 2016-01-20T16:19:15-0800 000005437 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;System network management;Support license activation Performance, Configuration, System Network Management, Support License Activation, ZoneDirector Can we add a temp license to ZD while in SR mode? <h2>Adding a Temporary License to a ZD in Smart Redundancy Mode</h2> When working with ZD (ZoneDirector) devices, you might encounter scenarios where you need to add temporary licenses. However, it's important to note that there are specific constraints and procedures for incorporating temporary licenses, especially when dealing with Smart Redundancy (SR) mode. <h3>Constraints for Temporary Licenses in Smart Redundancy</h3> <ol><li> Temporary Licenses and SR Mode: <ul><li>Temporary licenses cannot be used with ZD devices in Smart Redundancy (SR) mode. Smart Redundancy requires permanent licenses to ensure full operational stability and reliability.</li></ul> </li><li> Import Restrictions: <ul><li>Importing a temporary license into a ZD device that is configured for Smart Redundancy is forbidden. Temporary licenses are not compatible with the SR environment.</li><li><img alt="User-added image" height="173" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000veD&feoid=00N50000002Cf3M&refid=0EMPH000008tcMc" width="500"></img></li></ul> </li></ol> <h3>Steps to Add Permanent Licenses</h3> To use a ZD device in Smart Redundancy mode, follow these steps: <ol><li> Factory Reset the ZD Device: <ul><li>Perform a factory reset on the ZD device to clear all existing configurations and temporary licenses. This step ensures a clean slate for the installation of permanent licenses.</li><li><img alt="User-added image" height="147" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000veD&feoid=00N50000002Cf3M&refid=0EMPH000008tjzC" width="500"></img></li></ul> </li><li> Install Permanent Licenses: <ul><li>After resetting the ZD device, proceed to install the permanent licenses. Ensure that these licenses are compatible with Smart Redundancy mode to avoid any configuration issues.</li></ul> </li><li> Enable Smart Redundancy: <ul><li>Once the permanent licenses are installed and validated, you can enable Smart Redundancy mode on the ZD device.</li></ul> </li></ol>

If two controllers are in SR mode, the question is whether we can add a temp license to active ZD.

2024-08-01T12:40:56-0700 2024-08-02T00:00:10-0700 https://support.ruckuswireless.com/articles/000001551 2020-08-09T23:51:18-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2141 knowledge_article_2141 2013-01-27T13:41:12-0800 000001551 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Firmware Firmware, ZoneFlex Indoor, ZoneFlex Outdoor How to upgrade standalone AP via CLI? - Standalone AP can be upgraded via CLI through FTP/TFTP. - Download the AP image file from the Ruckus Support Portal and follow the below procedure to upgrade the AP via CLI. - Place the image file in the root directory of FTP/TFTP sever. FTP: fw set host <FTP server IP address> fw set proto ftp fw set user <FTP username> fw set password <FTP password> fw set control <image file name> fw update reboot TFTP: fw set host <TFTP server IP address> fw set proto tftp fw set port 69 fw set control <image file name> fw update reboot - You can verify the FTP/TFTP settings on the AP using 'fw show' command.

This article gives you information on how to upgrade the standalone AP via CLI.

2020-08-09T23:51:18-0700 2024-08-01T14:13:57-0700 https://support.ruckuswireless.com/articles/000001927 2024-08-01T06:19:00-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5384 knowledge_article_5384 2013-06-13T20:58:08-0700 000001927 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;System network management;Known issues and workarounds;Support license activation Installation, System Network Management, Known Issues and Workarounds, Support License Activation, ZoneDirector Steps to get Licenses on the Replacement ZoneDirector ZoneDirector Licenses are automatically transferred to the Replacement ZoneDirector post RMA. Check if you received the Licenses for the Replacement ZD. Received the Licenses for Replacement ZoneDirector: <ul><li>Upload the Licenses on the ZoneDirector GUI >> Administration >> Licenses. </li></ul> Not Received the Licenses for Replacement ZoneDirector: <ul><li>If you have not received the License File(s) for the Replacement ZoneDirector, please verify if the Licenses are transferred to the Replacement ZoneDirector, using <a href="https://support.ruckuswireless.com/asset/123456789000" target="_blank">https://support.ruckuswireless.com/asset/123456789000</a>(123456789000 to be replaced by the 12-digits numeric serial number of the ZoneDirector) or <a href="https://support.ruckuswireless.com/tools/warranty_checker" target="_blank">https://support.ruckuswireless.com/tools/warranty_checker</a></li><li>If the Licenses are available on the Replacement ZoneDirector</li><li>Download the Licenses from the Support Portal</li><li>Upload it on the ZoneDirector GUI >> Administration >> Licenses</li></ul> Reference Articles: <a href="https://support.ruckuswireless.com/articles/000003116" target="_blank">How to Download Licenses from Ruckus Support Portal</a> <a href="https://support.ruckuswireless.com/articles/000002728" target="_blank">AP upgrade license file upload on the ZoneDirector</a> Need further assistance, please contact <a href="https://support.ruckuswireless.com/contact-us" target="_blank">Ruckus Support Team</a>

Steps to get Licenses on the Replacement ZoneDirector

2024-08-01T06:19:00-0700 2024-08-01T14:00:10-0700 https://support.ruckuswireless.com/articles/000003116 2024-08-01T06:49:25-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4088 knowledge_article_4088 2014-06-05T15:37:40-0700 000003116 Validated (External) Public Ruckus icx switches;Zonedirector;Flexmaster umm;Scg200;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Website services;Downloads;Support license activation Website Services, Downloads, Support License Activation, Ruckus ICX Switches, ZoneDirector, FlexMaster UMM, SCG200 How to Download Licenses from Ruckus Support Portal? Follow the below steps to Download Hardware/Serial Number specific Licenses: There are 2 ways to download Licenses from Support Portal: Download through Hardware Summary: Log in to Ruckus Support Portal <a href="https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com</a> Click on Assets <img alt="User-added image" height="119" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vKr&feoid=00N50000002Cf3M&refid=0EM50000000liXF" width="500"></img> Click on Hardware Summary <img alt="User-added image" height="487" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vKr&feoid=00N50000002Cf3M&refid=0EM50000000liXK" width="500"></img> Search for the Controller Serial Number in the Search box <img alt="User-added image" height="368" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vKr&feoid=00N50000002Cf3M&refid=0EM50000000liXP" width="500"></img> Click on Serial Number <img alt="User-added image" height="151" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vKr&feoid=00N50000002Cf3M&refid=0EM50000000liXU" width="500"></img> Note: If you do not find Serial Number, please register it by following the instructions mentioned in Article 000002007 In the next screen, click on Download under Licenses >> Action. <img alt="User-added image" height="220" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vKr&feoid=00N50000002Cf3M&refid=0EM50000000liXZ" width="500"></img> You should have License (.lic) File downloaded. <img alt="User-added image" height="53" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vKr&feoid=00N50000002Cf3M&refid=0EM50000000liXe" width="500"></img> Upload the same File on the Controller under Administer >> Licenses tab to ?increase the AP License count and to add additional AP's on the controller. Refer article <a href="https://support.ruckuswireless.com/articles/000002728" target="_blank">AP upgrade license file upload on the ZoneDirector</a> Download through License Purchases: Click on Assets >> License Purchases <img alt="User-added image" height="247" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vKr&feoid=00N50000002Cf3M&refid=0EMPH000008MEqv" width="500"></img> Search for LIC code <img alt="User-added image" height="288" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vKr&feoid=00N50000002Cf3M&refid=0EMPH000008MFS1" width="500"></img> Click Purchase Code(LIC Code) >> will provide you the License Info Click Download License <img alt="User-added image" height="188" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vKr&feoid=00N50000002Cf3M&refid=0EMPH000008M77v" width="500"></img> You should have License (.lic) File downloaded. <img alt="User-added image" height="53" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000vKr&feoid=00N50000002Cf3M&refid=0EM50000000liXe" width="500"></img> Upload the same File on the Controller under Administer >> Licenses tab to ?increase the AP License count and to add additional AP's on the controller. Refer article <a href="https://support.ruckuswireless.com/articles/000002728" target="_blank">AP upgrade license file upload on the ZoneDirector</a>

How to Download Licenses from Ruckus Support Portal

2024-08-01T06:49:25-0700 2024-08-01T14:00:09-0700 https://support.ruckuswireless.com/articles/000004556 2024-08-01T03:18:13-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3418 knowledge_article_3418 2015-12-08T16:09:20-0800 000004556 Validated (External) Public Ruckus support services Known issues and workarounds;Website services;Support license activation;Registration Known Issues and Workarounds, Website Services, Support License Activation, Registration, Ruckus Support Services Why do I have Primary Partner or End User as blank on the Order? If you are unable to activate the Order and getting an error, that Primary Partner/VAR or End User not updated on the Sales Order is because these details are missing on the Sales Order. <img alt="User-added image" height="290" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uyH&feoid=00N50000002Cf3M&refid=0EM50000000LjjS" width="500"></img> <img alt="User-added image" height="184" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uyH&feoid=00N50000002Cf3M&refid=0EM50000000LjyX" width="500"></img> Resolution : Please contact <a href="https://support.ruckuswireless.com/contact-us" target="_blank">Ruckus Support</a> and we will update the missing information on the Order. Once the Order is updated by Ruckus Support Team, you should be able to complete the Activation through the Support Portal. Note: End User Information is Missing on the Order : End User needs to contact their Ruckus VAR/Re-seller or Distributor and inform them to contact us. Primary Partner/Ruckus VAR/Re-seller Information is Missing on the Order : End User / Primary Partner needs to contact your Distributor and inform them to contact us.

Both End User and Primary Partner/VAR must be listed on Sales Orders in order to activate Support or License on the Ruckus Support Portal

2024-08-01T03:18:13-0700 2024-08-01T10:00:09-0700 https://support.ruckuswireless.com/articles/000003083 2024-08-01T02:30:41-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5383 knowledge_article_5383 2014-05-28T14:38:43-0700 000003083 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware Configuration, Firmware, ZoneDirector Why do I see 90-day Support Warning on the ZoneDirector GUI? Q. Why is there a 90-day Support Warning on the ZoneDirector GUI? <ul><li>The Support Entitlement on the ZoneDirector is updated, either via clicking on the Check Entitlement/Renew Entitlement button on the ZoneDirector GUI or manually uploading the <a href="https://support.ruckuswireless.com/articles/000003546" target="_blank">Support Entitlement file</a>.</li><li>If the ZoneDirector does not have an Active Support Contract, then a default 90-day Entitlement File is provided by Ruckus Entitlement Server and that would result in the warning message on the GUI</li></ul> <div style="margin-left: 40px;"> </div> Q. How can I verify the Support Contract on the ZoneDirector? <ul><li>Please use the below links to verify Support Contracts on a ZoneDirector, <a href="https://support.ruckuswireless.com/asset/123456789000" target="_blank">https://support.ruckuswireless.com/asset/123456789000</a> (123456789000 to be replaced by the 12-digits numeric serial number of the ZoneDirector) or </li><li><a href="https://support.ruckuswireless.com/tools/warranty_checker" target="_blank">https://support.ruckuswireless.com/tools/warranty_checker</a></li></ul> Q. How can I get a New Support Contract on a ZoneDirector? <ul><li>To purchased Support Contract you can contact <a href="https://www.ruckuswireless.com/contact" target="_blank">Ruckus Sales</a> or the <a href="https://support.ruckuswireless.com/renewals" target="_blank">Ruckus Renewal</a> team</li></ul> Q. How can I Renew the Support Contract on a ZoneDirector? <ul><li>If you are the end-customer, please contact your Ruckus VAR/re-seller to get a quote for the support renewal. If you are a Ruckus VAR/re-seller OR Distributor, please contact <a href="https://support.ruckuswireless.com/renewals" target="_blank">Ruckus Renewal</a> team.</li><li><a href="https://support.ruckuswireless.com/articles/000006104" target="_blank">Support contract renewals</a></li></ul> Q. I am a Ruckus End Customer, but do not want to go through a Re-seller/VAR to purchase a contract <ul><li>All Ruckus End Users are required to go through their authorized Ruckus Re-seller/VAR to process orders.</li><li>To know who your local authorized Ruckus Re-sellers /VARs, please contact <a href="https://www.ruckuswireless.com/contact" target="_blank">Ruckus Sales</a> team or your Account Manager.</li></ul>

90-day default Support Warning banner is on the ZoneDirector GUI

2024-08-01T02:30:41-0700 2024-08-01T10:00:09-0700 https://support.ruckuswireless.com/articles/000004224 2024-08-01T01:38:22-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3432 knowledge_article_3432 2015-03-19T08:26:21-0700 000004224 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Support license activation;Registration Configuration, Installation, Support License Activation, Registration, ZoneDirector Support Expiration warning message, even when the Support Contract is active on the ZoneDirector Support Warning Message is displayed on the ZoneDirector GUI, please verify the below : Q. ZoneDirector has an active Support Contract, but still there is a Support Warning displayed on the ZoneDirector GUI? <ol><li>We need to first determine, if the Support Contract is activat and mapped to the ZoneDirector. This can be checked using, <a href="https://support.ruckuswireless.com/asset/123456789000" target="_blank">https://support.ruckuswireless.com/asset/123456789000</a>(123456789000 to be replaced by the 12-digits numeric serial number of the ZoneDirector) or <a href="https://support.ruckuswireless.com/tools/warranty_checker" target="_blank">https://support.ruckuswireless.com/tools/warranty_checker</a></li><li>Once the Support Contract is verified, we can Download the <a href="https://support.ruckuswireless.com/articles/000003546" target="_blank">Support Entitlement File</a> for the ZoneDirector from Support Portal.</li><li>Upload the Support Entitlement File on the ZoneDirector GUI >> Administration >> Support to remove the Support Warning.</li></ol> Q. I uploaded the Support Entitlement File, but I still see the Support Expiry Warning. Why? <ol><li>Verify if the Support Expiry date updated on Ruckus Support Portal is the same as the Support Expiry Date seen on the ZoneDirector GUI >> Administration >> Support</li><li>The notification about the Support Expiry on the ZoneDirector GUI starts 90-days prior to the Premium Support Contract expiration. This is a reminder to renew the Support Contract.</li></ol> Q. I have an Activation Code, but do not see it mapped to the ZoneDirector in Ruckus Support Portal, how do I map it? <ol><li>The Support Activation Code can be mapped to the ZoneDirector Serial Number through the Support Portal >> <a href="https://support.ruckuswireless.com/code_registration" target="_blank">Activate Purchase</a>. </li><li>Once it is activated, verify the same at <a href="https://support.ruckuswireless.com/asset/123456789000" target="_blank">https://support.ruckuswireless.com/asset/123456789000</a> (123456789000 to be replaced by the 12-digits numeric serial number of the ZoneDirector) or <a href="https://support.ruckuswireless.com/tools/warranty_checker" target="_blank">https://support.ruckuswireless.com/tools/warranty_checker</a></li><li>Once the Support Contract is activated and verified, the server takes about 24 hours to generate the latest Support Entitlement File. After 24 hours from the activation, the file can be downloaded by following the steps: <a href="https://support.ruckuswireless.com/articles/000003546" target="_blank">Entitlement File Download</a></li><li>Upload the Support Entitlement File on the ZoneDirector GUI >> Administration >> Support to remove the Support Warning.</li></ol> Q. I have two ZoneDirectors in Redundancy (RDY) / High Availability (HA) mode, does the Secondary Controller need an Active Support too? <ol><li>Yes, an Active Support Contract is required on the Primary and as well on Secondary Controller. If an Active Support File is missing on any one of the controllers, the Support Warning will be displayed on the GUI of the Primary Controller. </li><li>To upload the Support Entitlement File on a Secondary Controller, fail over has to be carried out to get access to the GUI of the Secondary Controller and then the new Support Entitlement File can be uploaded.</li></ol> Related Articles : How to check the support contract status of Assets - <a href="https://support.ruckuswireless.com/articles/000004543" target="_blank">https://support.ruckuswireless.com/articles/000004543</a> How to Download ZD Entitlement File - <a href="https://support.ruckuswireless.com/articles/000004543" target="_blank">https://support.ruckuswireless.com/articles/000003546</a> Please contact <a href="http://https//support.ruckuswireless.com/contact-us" target="_blank">Ruckus Support </a>for any further queries.

Support-Expiration-warning-message-even-when-the-Support-Contract-is-active-on-the-ZoneDirector

2024-08-01T01:38:22-0700 2024-08-01T08:00:08-0700 https://support.ruckuswireless.com/articles/000014417 2024-07-31T18:56:40-0700 monthly 0.8 admin,premium knowledge_article_5381 knowledge_article_5381 2024-07-31T18:56:40-0700 000014417 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway Why did scheduled report generation status failed? <img alt="User-added image" height="44" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uqD&feoid=00N50000002Cf3R&refid=0EMPH000008qhM3" width="500"></img> R6.1.2 does not have this issue, so Ruckus recommends to upgrade to the latest release.

Report generation is failed.

2024-07-31T18:56:40-0700 2024-08-01T02:00:07-0700 https://support.ruckuswireless.com/articles/000005298 2024-07-31T07:54:28-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3611 knowledge_article_3611 2015-11-10T09:47:34-0800 000005298 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Website services;Support license activation Website Services, Support License Activation, Unleashed Details of Unleashed Support Ruckus Support for Unleashed is on a per-AP basis. Unleashed Support is now also available with 807, 808, and 804 prefix. WatchDog End User Support: This offering is for customers who wish to engage Ruckus directly for their support needs. Associate Partner Support : With Associate Partner Support, Ruckus support partners provide Level 1 support services to end users, with support engineers trained and certified on Ruckus Wireless products. If an event requires escalation to Ruckus support, our partners will open a case on your behalf and provide you with updates on the status of the issue. 807-XXXX-X000 - Associate Partner Support for Unleashed 806-XXXX-X000 - WatchDog End User Support for Unleashed 804-XXXX-XS00 - BullDog Support for Unleashed If "No" Advance Replacement is desired, customers can purchase the 806-ULAP-XU00 SKU for each AP For more details on WatchDog Support Guide for Ruckus Wireless Products, refer to the below link: <a href="https://support.ruckuswireless.com/documents/3535-unleashed-end-user-support/download" target="_blank">https://support.ruckuswireless.com/documents/2174-watchdog-support-for-wired-and-wireless-products/download</a>

Unleashed Support SKUs and Deliverables

2024-07-31T07:54:28-0700 2024-07-31T20:00:08-0700 https://support.ruckuswireless.com/articles/000014416 2024-07-31T10:44:22-0700 monthly 0.8 admin,premium knowledge_article_5379 knowledge_article_5379 2024-07-31T10:44:22-0700 000014416 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Troubleshooting Firmware, Troubleshooting, SmartCell Gateway What should I do next if my SmartZone cluster upgrade to 6.1.2.x has failed? Please gather the following information and open a new case with Ruckus technical support: <ol><li>Take a screenshot of all errors seen in the web UI.</li><li>Take a controller application snapshot log for each node.</li><li>Note the timestamp of the failure.</li><li>Log into the console or CLI and note any errors seen.</li></ol> Ruckus Technical Support will analyze the data and provide the next steps towards resolution.

This article provides the next steps if the 6.1.2.0.441 cluster upgrade fails

2024-07-31T10:44:22-0700 2024-07-31T20:00:07-0700 https://support.ruckuswireless.com/articles/000008930 2024-07-31T11:42:26-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5378 knowledge_article_5378 2019-03-21T09:45:50-0700 000008930 Validated (External) Public All;Brocade Mobility 6511 Wallplate Access Point Firmware;Troubleshooting;Website issues Firmware, Troubleshooting, Website Issues, All Why is my contact listed under Unknown Support Customer? When a contact / Support Web User is not associated to a registered account, "My Profile" tab shows the user's Company ID to be RUCKUS Account ID and Account Type & Level will shows as 'Guest' <img alt="User-added image" height="110" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000rYz&feoid=00N50000002Cf3M&refid=0EMPH000008pICo" width="500"></img> When a Support Web User is not associated to a registered account, the user’s access is restricted as follows: <ul><li>Limited access to KB Articles</li><li>Not allowed to get software updates</li><li>Unable to view Assets/Cases</li><li>Unauthorized to TAC Support. </li></ul> To have an account registered, please reach out to our <a href="https://gsa.ruckus.support/#/gsa/workflow-select" target="_blank">Sales Team</a>. Post the account creation, the contact can be associated to the account by <a href="https://support.ruckuswireless.com/contact-us" target="_blank">RUCKUS Support </a>team.

Article has got information about what needs to be done when the account on a contact is "Unknown Support Customer"

2024-07-31T11:42:26-0700 2024-07-31T20:00:07-0700 https://support.ruckuswireless.com/articles/000008651 2024-07-30T16:36:16-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3763 knowledge_article_3763 2018-12-04T01:10:08-0800 000008651 Validated (External) Public Ruckus support services Website access;Website services;Case management;Knowledge base;Registration Website Access, Website Services, Case Management, Knowledge Base, Registration, Ruckus Support Services How do I open a support case on the Ruckus Networks' Support Portal? Information required before opening a support case: <ol><li>Brief description of the issue</li><li>Product information (Like SN, Firmware Version, Build)</li><li>Controller and AP information (Total number of AP's Vs AP's affected)</li><li>Best time to reach (along with time zone)</li><li>Preferred mode of contact</li><li>Your Full Name</li><li>Email ID</li><li>Contact Number</li><li>Login ID (In case of Ruckus Cloud issues)</li></ol> Also during the case progression, Ruckus support engineer might need more information to best analyze and identify the root cause of a problem. The data should be sufficient for TSEs to file a bug with the Engineering team, if required. <div>Opening a Support Case with Ruckus Networks:</div> <div style="margin-left: 40px;"> 1. Navigate to https://support.ruckuswireless.com and click "Log in"</div> <div style="margin-left: 40px;"> <img alt="Login Button" height="67" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx4X" width="500"></img></div> <div style="margin-left: 40px;"> </div> <div style="margin-left: 40px;">2. Enter your Ruckus Wireless Support credentials in the fields provided. <img alt="Ruckus Login" height="255" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx4c" width="500"></img> 3. If you have forgotten your password, click "Forgot password" to receive a password reset email. 4. If you do not have a Ruckus Wireless Support Account, click "Join now" to setup a new account. 5. Once logged in, you should use the "What do you need help with?" search facility to discover whether an answer to your issue already exists in our knowledge base. Our Technical Forums can also be used to pose questions before opening a case. <img alt="Knowledge and Forum" height="69" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx4w" width="500"></img> 6. If you still need to open a case with Ruckus, click "Submit A Case" <img alt="Submit a case" height="418" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx4h" width="500"></img> 7. The type of case being opened should be selected in the "Case Type" section. 8. The priority of the case should be set in the "Priority" section. <img alt="Case Type and Priority" height="405" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx51" width="500"></img> 9. Priority should be set according to the below table. <table border="1" style="height: 100px; width: 750px;"><thead><tr><th colspan="1" rowspan="1" style="background-color: rgb(51, 153, 255);">Priority</th><th colspan="1" rowspan="1" style="background-color: rgb(51, 153, 255);">Description</th></tr></thead><tbody><tr><td colspan="1" rowspan="1">P1 - Critical</td><td colspan="1" rowspan="1">Network service is down and business is impacted. No known workaround.</td></tr><tr><td colspan="1" rowspan="1">P2 - High</td><td colspan="1" rowspan="1">Network or service is impacted but not down. Business impact may be high. Workaround may be available.</td></tr><tr><td colspan="1" rowspan="1">P3 - Medium</td><td colspan="1" rowspan="1">Network or service is moderately impacted but most business remains functional.</td></tr><tr><td colspan="1" rowspan="1">P4 - Low</td><td colspan="1" rowspan="1">Request for information, product documentation or product enhancements.</td></tr></tbody></table> ** Please note: <div style="margin-left: 80px;">P1 cases cannot be raised through the support portal - please phone support or use the Live Chat function to raise a P1. P2 cases need to be confirmed by phone or live chat within 15 minutes or will automatically revert to a P3.</div> 10. An Administration or Ruckus Cloud case requires a Subject (brief description of the fault), Description (in-depth description of the fault) and an optional "Searchable Reference Number" (a free-text field which can be used to record a customer's internal reference number). Once selected, "Best way to contact me" will be the method Ruckus Technical Support uses to initially contact the case opener. <img alt="User-added image" height="318" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx56" width="500"></img> 11. A Software case requires the same information as an Administration or Ruckus Cloud case but in addition, the product name and software version are required. <img alt="User-added image" height="363" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx5B" width="500"></img> 12. When reporting suspected faulty hardware (which is either covered by warranty or a support contract), shipping information needs to be recorded in the relevant fields. <img alt="User-added image" height="585" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx5G" width="500"></img> 13. If an RMA is required for a virtual machine (vSZ, vSPoT), the defective serial number and the serial number of the new unit is required. <img alt="User-added image" height="495" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx5L" width="500"></img> 14. Once case type and priority have been set and all supporting information have been entered, click "Submit" to open a case with Ruckus.Networks. <img alt="User-added image" height="424" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx5Q" width="500"></img> 15. Once processing is complete, a new screen will appear. This displays the Case Number which will be used as the reference for all communications regarding the reported issue. An email will be sent to the originator of the case confirming case opening. <img alt="User-added image" height="429" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx5V" width="500"></img> 16. Attachments to the case can be uploaded at this point (logs, backups, screenshots, etc.) by clicking the "Attachments" tab and uploading the relevant files. <img alt="User-added image" height="416" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx5a" width="500"></img> 17. Any emails sent regarding the case are archived in the "Email Messages" tab. <img alt="User-added image" height="286" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000uNB&feoid=00N50000002Cf3M&refid=0EM2J000000lx5f" width="500"></img> Note: Active entitlement on the device is required to get uninterrupted service from Ruckus. Ruckus prioritize the delivery of support based on the support entitlement.</div>

Customer would like to open a support case via Ruckus Networks Support Portal

2024-07-30T16:36:16-0700 2024-07-31T02:00:06-0700 https://support.ruckuswireless.com/articles/000008832 2024-07-30T09:16:30-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4666 knowledge_article_4666 2019-02-06T08:08:08-0800 000008832 Validated (External) Public Ruckus cloud lte;Ruckus cloud wifi Website access Website Access, Ruckus Cloud LTE, Ruckus Cloud WiFi How to reset the password for Ruckus Cloud Portal? Sure, here is a refined article based on your instructions: <hr></hr> <h2>Recovering Your Ruckus Cloud Account</h2> If you are unable to log in to the Cloud Portal due to an authentication error or have forgotten your password, please follow these steps to request a password reset link: <ol><li> Navigate to the Cloud Home Page: <ul><li>Click on the "Forgot Password" link.</li><li><img alt="User-added image" height="545" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000u5R&feoid=00N50000002Cf3M&refid=0EMPH000008kpJ3" width="500"></img></li></ul> </li><li> Enter Your Email Address: <ul><li>Type in your email address and click on the "Reset Password" button.</li><li><img alt="User-added image" height="214" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000u5R&feoid=00N50000002Cf3M&refid=0EMPH000008kpNt" width="500"></img></li></ul> </li><li> Submit Password Reset Request: <ul><li>An automated password reset email will be sent to the provided email address.</li></ul> </li><li> Open the Password Reset Email: <ul><li>Locate the email in your inbox and click on the "Reset Password" link.</li><li><img alt="User-added image" height="296" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000u5R&feoid=00N50000002Cf3M&refid=0EMPH000008kaFC" width="500"></img></li></ul> </li><li> Set a New Password: <ul><li>You will be redirected to a page where you can enter your preferred password.</li><li>After entering your new password, click "Submit" to be redirected to the login screen.</li><li><img alt="User-added image" height="193" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000u5R&feoid=00N50000002Cf3M&refid=0EMPH000008kpVx" width="500"></img></li></ul> </li><li> Login to Cloud Portal: <ul><li>Once the password reset is completed on the Support Portal, visit the Cloud Portal and log in using your email and the new password.</li><li><img alt="User-added image" height="519" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000u5R&feoid=00N50000002Cf3M&refid=0EMPH000008kpZB" width="500"></img></li></ul> </li></ol> <h3>Important Note:</h3> The support login will not work unless the initial account registration is confirmed via the confirmation link. This may be one of the reasons why you cannot log in to the Support Portal even after multiple password resets.

Cloud Portal & Support Portal are interlinked, resetting your password on the Support Portal (support.ruckuswireless.com) will reset your Cloud Portal credentials.

2024-07-30T09:16:30-0700 2024-07-30T18:00:07-0700 https://support.ruckuswireless.com/articles/000008578 2024-07-30T08:06:08-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5369 knowledge_article_5369 2018-12-03T03:12:28-0800 000008578 Validated (External) Public Ruckus cloud wifi Website access;Registration Website Access, Registration, Ruckus Cloud WiFi How-can-I-get-access-to-Ruckus-Cloud-Wi-Fi trial account? <h3>How to Sign Up for a Ruckus Cloud Wi-Fi Trial Account</h3> You can get a 60-day trial account for Ruckus Cloud Wi-Fi by following these steps: <ol><li> Visit the Ruckus Wireless Website <ul><li>Go to <a href="https://www.ruckuswireless.com/" target="_new">Ruckus Wireless</a>. https://www.ruckuswireless.com/ </li></ul> </li><li> Navigate to Ruckus Cloud Wi-Fi <ul><li>Click on Products in the menu.</li><li>Select Network Control and Management.</li><li><img alt="User-added image" height="200" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000u3p&feoid=00N50000002Cf3M&refid=0EMPH000008kDvL" width="500"></img></li><li>Click on <a href="https://www.ruckusnetworks.com/products/network-control-and-management/cloud-managed/" target="_new">Ruckus Cloud Wi-Fi</a>. https://www.ruckusnetworks.com/products/network-control-and-management/cloud-managed/ </li></ul> </li><li> Request a RUCKUS One Trial <ul><li>Click on Request a RUCKUS One Trial Today.</li><li>Alternatively, you can directly visit the <a href="https://www.ruckusnetworks.com/ruckus-one-trial/" target="_new">Ruckus One Trial Request page</a>. https://www.ruckusnetworks.com/ruckus-one-trial/ </li><li><img alt="User-added image" height="106" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000u3p&feoid=00N50000002Cf3M&refid=0EMPH000008kQCc" width="500"></img></li></ul> </li><li> Fill Out the Trial Form <ul><li>Complete the trial form on the next page.</li><li>Click on Request a RUCKUS One Trial Today after filling out the form.</li><li>Make sure to read the Terms and Conditions.</li><li><img alt="User-added image" height="469" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000u3p&feoid=00N50000002Cf3M&refid=0EMPH000008kVnN" width="500"></img></li></ul> </li><li> Follow Up <ul><li>After you submit your request, a Ruckus ISR (Inside Sales Representative) will reach out to you within 48 business hours to help set up your account.</li></ul> </li></ol> Note: If you are a Ruckus Networks distributor or reseller, do not submit the trial form. You can access Ruckus Cloud from the Partner portal. Partners will have permanent 0/0 (0 Licenses) accounts by default.

Customer's registering on the Cloud portal for trial account

2024-07-30T08:06:08-0700 2024-07-30T18:00:07-0700 https://support.ruckuswireless.com/articles/000014338 2024-07-09T10:59:03-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5317 knowledge_article_5317 2024-06-17T10:52:46-0700 000014338 Validated (External) Public Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi What is changing about RUCKUS One (R1) Captive Portal Authentication? <h4>Key Changes</h4> <ol><li> Limited One-Time Gesture: We are excited to announce that upon the effective date, as an initial gesture, we will allow 100 messages for your experimentation. This will give you an opportunity to assess and adapt to the changes smoothly. You will be able to monitor usage of your one-time gesture messages directly in RUCKUS One. In the tool bar on the left, click on Administration and then Account Settings to see your available allotment. You can set an SMS Provider from this page as well. <img alt="Limited One-Time Gesture SMS" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mCj&feoid=00N50000002Cf3M&refid=0EMPH000007l6ac"></img> Users will receive an email when 80% of SMS text messages have been used. </li><li> Transition to Alternative Options: After utilizing the 100 messages, you will be required to choose from alternative authentication methods or provide your own SMS provider. We offer several options including social media platforms such as (X, Google, LinkedIn, Facebook) for seamless sign-in experiences </li><li> Email-based Captive Portal Authentication: We’ve added an additional way for your network users to authenticate using a One Time Passcode, they would simply enter their details and email address to authenticate with the email provided token. You can choose email as an authentication option as part of captive portal creation. <img alt="Choose email-based authentication" height="292" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mCj&feoid=00N50000002Cf3M&refid=0EMPH000007l8m5" width="500"></img></li><li> Choose your own SMS provider: RUCKUS One now allows customers to select a provider for SMS text service, e.g. Twilio, and provide network authentication with One Time Passcode provided in text to the network users Mobile phones. You can change your SMS text provider from your Account Settings page. <img alt="Choose your own SMS Provider" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mCj&feoid=00N50000002Cf3M&refid=0EMPH000007l8XZ"></img></li></ol> This article will be updated with additional details as they are made available.

As part of our ongoing efforts to enhance our services, our Captive portal self-sign-in SMS-based authentication system will receive modifications to ensure the efficient use of our SMS resources. In addition, we will role out two new captive portal enhancements. This change in policy and features will be effective as of July 19, 2024.

2024-07-09T10:59:03-0700 2024-07-29T06:15:37-0700 https://support.ruckuswireless.com/articles/000012203 2024-07-26T04:55:52-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4825 knowledge_article_4825 2022-04-06T03:55:44-0700 000012203 Validated (External) Public Smartcell gateway;Smart wireless services;SmartCell Gateway 200 (SCG200) Installation;Support license activation;Registration Installation, Support License Activation, Registration, SmartCell Gateway, Smart Wireless Services Steps to Download License File for Virtual Controllers from Support Portal (LiMAN) <h1>Steps to Download Virtual/LiMAN licenses on vSPoT, vSCG, SCI, SZ, vRIoT, and SCG controllers:</h1> <ul><li>Login to the Ruckus support portal: <a href="https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com</a></li><li>Click on LiMAN </li></ul> <img alt="User-added image" height="269" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sgL&feoid=00N50000002Cf3M&refid=0EM2J0000038t5p" width="500"></img> <ul><li>Takes you to the LiMAN (Smart License Manager) Portal</li><li>All the Virtual Devices registered under your account will be listed here</li></ul> <img alt="User-added image" height="337" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sgL&feoid=00N50000002Cf3M&refid=0EM2J0000038t6O" width="500"></img> <ul><li>Click on the Serial Number of the Controller from the Registered Smart Devices</li><li>Click the Download Icon as displayed in the below image.</li></ul> <img alt="" height="310" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sgL&feoid=00N50000002Cf3M&refid=0EM2J0000038t6Y" width="500"></img> <ul><li>License File with Serial Number followed by (.bin) extension will be downloaded.</li><li>Check your "Downloads" Folder for the File.</li></ul> <ul></ul>

2024-07-26T04:55:52-0700 2024-07-26T12:00:07-0700 https://support.ruckuswireless.com/articles/000014327 2024-07-24T07:15:04-0700 monthly 0.8 admin,premium knowledge_article_5365 knowledge_article_5365 2024-07-24T07:15:04-0700 000014327 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting Performance, Troubleshooting, SmartCell Gateway Why airtime utilization is high and how to resolve it? <h3 id="toc-hId--1269970415">Best practices to reduce the Airtime Utilization:</h3> <ul><li>Limit the number of SSIDs to 2-3 per band.</li><li>Both bands should be used for Guest WLAN.</li><li>Staff SSID should be configured to use only 5 GHz band.</li><li>Use different VLANs for different SSIDs to segment layer 2 traffic.</li><li>Adjust BSS min rate value for each WLAN appropriately based on the lowest client RSSI: <ul><li>If lowest RSSI is > -65dBm, set to 24Mbps</li><li>If lowest RSSI is > -70dBm, set to 12Mbps</li><li>If lowest RSSI is < -70dBm, set to Default</li></ul> </li><li>Enable OFDM on WLAN.</li><li>Enable proxy ARP.</li><li>Avoid using 80 MHz channelization on the 5 GHz band.</li><li>Avoid using min RSSI threshold, OCE, and SmartRoam.</li><li>Increasing AP Radio TX power can be helpful(If the signal coverage is poor). </li><li>Enable multicast filter on WLAN(where multicast services such as Airplay, Chromecast etc. not used by client devices). </li><li>Enable Anti-spoofing and turn on ARP request rate limit and DHCP request limit under the advanced option on the WLAN.</li><li>Apply ACLs on access Switches connected to APs to restrict multicast traffic.</li><li>To reduce unnecessary IPv6 and VRRP traffic, create L3 ACLs and apply them to guest WLAN.</li><li>Make sure APs are connected with 1 Gbps link.</li></ul>

This article explains the reasons for high airtime utilization and possible solutions.

2024-07-24T07:15:04-0700 2024-07-26T06:00:07-0700 https://support.ruckuswireless.com/articles/000011259 2024-07-24T10:20:16-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5366 knowledge_article_5366 2021-02-04T08:22:48-0800 000011259 Validated (External) Public Vsz dataplane Knowledge base;Support license activation Knowledge Base, Support License Activation, vSZ Dataplane What is CAPACITY-DP-SNAT/DHCP-DEFAULT License

How long are the default SNAT/DHCP-Licensing valid on vSZ?

2024-07-24T10:20:16-0700 2024-07-26T06:00:06-0700 https://support.ruckuswireless.com/articles/000010685 2024-07-24T10:59:27-0700 monthly 0.8 admin,premium knowledge_article_4279 knowledge_article_4279 2020-07-01T05:18:18-0700 000010685 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector How to enable Temp/Purchased URL filtering licenses on Controller <h4>Part Numbers</h4> The URL Filtering licenses for ZoneDirector are available in different subscription periods: <ul><li>S01-URL1-1LZD: 1-year subscription</li><li>S01-URL1-3LZD: 3-year subscription</li><li>S01-URL1-5LZD: 5-year subscription</li></ul> <h4>Enabling URL Filtering</h4> To activate the URL filtering feature on the ZoneDirector, a temporary license is added on the day the feature is enabled. Follow these steps to create and apply a URL Filtering profile: Creating a URL Filtering Profile: <ol><li>Go to <code>Services & profiles > URL Filtering</code>.</li><li>Click the <code>Profiles</code> tab.</li></ol> Applying a URL Filtering Policy to a WLAN: <ol><li>Go to <code>Wireless LANs</code>, select the WLAN you would like to configure, and click <code>Edit</code>.</li><li>Scroll down and expand the <code>Advanced Options</code> section.</li><li>In <code>URL Filtering</code>, select <code>Enable URL Filtering</code> and choose a URL Filtering profile from the drop-down list. Alternatively, click the <code>+ (Create New)</code> icon to create a new policy and apply it to this WLAN.</li></ol> <h4>Managing URL Filtering Licenses</h4> Once the URL filtering feature is activated, the temporary license becomes active. To manage purchased URL filtering licenses, follow these steps: <ol><li>Go to <code>Administer > License & Support</code>.</li><li>In the <code>URL Filtering License</code> tab, you can: <ul><li>Update Services By File: Import a new locally saved license file.</li><li>Renew Services Online: Connect to the Ruckus license server to download a license file.</li><li>Show Details: Select the license file from the list and click <code>Show Details</code> to view license expiration details.</li></ul> </li></ol> The license file (.spt) will be added to the URL Filtering License tab. Once a permanent (e.g., 3-year) URL filtering license is added, the temporary license status changes to Inactive.

We have uploaded Temp/Purchased URL filtering licenses on controller and they are not showing up on Controller

2024-07-24T10:59:27-0700 2024-07-26T06:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000Pig3SAC?attachment_index=0 2024-07-26T06:00:06-0700 monthly admin,premium knowledge_article_4279 knowledge_article_4279_attachment_1 ZD URL filtering license.docx 654183.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000002021 2024-07-09T14:28:28-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5219 knowledge_article_5219 2013-05-06T19:20:33-0700 000002021 Validated (External) Public Ruckus support services Website issues Website Issues, Ruckus Support Services How do I register on <a href="https://support.ruckwireless.com" target="_blank">support.ruckwireless.com</a>? If you are a brand new user and have never "signed up" at the Ruckus support site, then please follow the below steps to sign up <ul><li> Please go to https://support.ruckuswireless.com/ Click Login. <img alt="User-added image" height="21" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mSr&feoid=00N50000002Cf3M&refid=0EMPH000007lqqL" width="500"></img> Click Join Now <img alt="User-added image" height="270" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mSr&feoid=00N50000002Cf3M&refid=0EMPH000007ljId" width="500"></img> </li><li> Fill out the registration form, accept the <a href="https://support.ruckuswireless.com/tos" style="text-align: start;" target="_blank">Terms of Use</a>, <a href="https://support.ruckuswireless.com/privacy_policy" style="text-align: start;" target="_blank">Privacy Policy</a> and <a href="http://c541678.r78.cf2.rackcdn.com/support/ruckus-standard-warranty.pdf" style="text-align: start;" target="_blank">Software License Agreement</a> and click on Register <img alt="User-added image" height="444" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mSr&feoid=00N50000002Cf3M&refid=0EMPH000007lqwn" width="500"></img> </li><li> ?Now, the registration confirmation email from Ruckus (@ruckuswireless.com) is sent to the above-registered email address <img alt="User-added image" height="263" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mSr&feoid=00N50000002Cf3M&refid=0EM50000000lhq6" width="500"></img> </li><li> ?Click on Confirm Email <img alt="User-added image" height="266" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mSr&feoid=00N50000002Cf3M&refid=0EM50000000lhq1" width="500"></img> </li><li> This will take you back to the login page, where you need to enter your username (Email) and password and then click on Login <img alt="User-added image" height="251" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mSr&feoid=00N50000002Cf3M&refid=0EM50000000lhqB" width="500"></img> </li></ul> <ul><li> At this point you are a Guest user to our site. Welcome user! <img alt="User-added image" height="172" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mSr&feoid=00N50000002Cf3M&refid=0EM50000000lhqG" width="500"></img> </li></ul> <ul><li> To get Premium access to the Ruckus Support portal, you need to have either </li></ul> <ol><li>An active support contract, Or</li><li>A newly purchased product that still has the initial 5-month software warranty*. Registering a product that is still under its 5-month software warranty, gives you full access to the support site for a limited time.</li></ol> Also, existing users from your account can add/invite you to the Support Portal. Please refer to article 000003775 for the steps to be followed. If you have purchased a support contract on the device(s), please refer to article 000008284 to activate it. If you have purchased new devices, register them by following the steps mentioned in article 000002007. Note: You can register all of your products, even those out of warranty.

How to register a New User in Ruckus Support portal

2024-07-09T14:28:28-0700 2024-07-25T03:29:04-0700 https://support.ruckuswireless.com/articles/000004551 2024-07-23T23:06:35-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5359 knowledge_article_5359 2018-10-21T14:40:39-0700 000004551 Validated (External) Public All;Brocade Mobility 6511 Wallplate Access Point Known issues and workarounds Known Issues and Workarounds, All Who do I contact for a refund on Ruckus Support or License? If the support or licenses purchased are wrong or incompatible with the product you have and if you would like to cancel them, please get in touch with your VAR / Distributor. New Support/Licenses : Distributor will then work with RUCKUS Orders team at, NAR# <a href="mailto:orders.ruckusnar@commscope.com" target="_blank" title="mailto:orders.ruckusnar@commscope.com">orders.ruckusnar@commscope.com</a> , EMEA <a href="mailto:orders-emea@commscope.com" target="_blank" title="mailto:orders-emea@commscope.com">orders-emea@commscope.com</a> and APAC <a href="mailto:orderentry_ruckus_apac@commscope.com" target="_blank" title="mailto:orderentry_ruckus_apac@commscope.com">orderentry_ruckus_apac@commscope.com</a><a href="mailto:Order.support-EMEA@commscope.com" target="_blank" title="mailto:order.support-emea@commscope.com"> </a>to check if the support/licenses are eligible to be cancelled and credited. Renewal Support/Licenses: Distributor will work the Renewals Team at, <ul><li>Email Us: Send an email to <a target="_blank">ruckus.renewals@commscope.com</a>. </li><li>Call Us: You can also reach out to us by phone at 855-782-5871, then select Option 2. Our Renewals Sales Specialists will check if the support/licenses are eligible to be cancelled and credited.</li></ul> Please Note : Ruckus do not directly sell to End Customers, hence please work with VAR/Distributor for cancellation and refund.

Article has information about getting refund for the support and licenses ordered incorrectly by the customer

2024-07-23T23:06:35-0700 2024-07-24T08:00:08-0700 https://support.ruckuswireless.com/articles/000014360 2024-07-23T22:19:52-0700 monthly 0.8 admin,premium knowledge_article_5364 knowledge_article_5364 2024-07-23T22:19:52-0700 000014360 Validated (External) Premium Virtual smartcell gateway Configuration;Firmware Configuration, Firmware, virtual SmartCell Gateway When the AP attempts to join the vSZ, it updates its firmware and enters a loop, resulting in a ‘Failed to update configuration’ status. Download the Sigpack-v2 -1.670.2 from below link. https://support.ruckuswireless.com/software_downloads/3983-smartzone-7-0-0-ga-sigpack-v2-1-670-2-application-signature-package Then installed this signature package by navigating to SZ GUI >> Security >> Application Control >> Application Signature package

When the AP attempts to join the vSZ, it updates its firmware and enters a loop, resulting in a ‘Failed to update configuration’ status. This issue occurred because the correct application signature package was not installed on vSZ.

2024-07-23T22:19:52-0700 2024-07-24T08:00:08-0700 https://support.ruckuswireless.com/articles/000001881 2024-07-23T23:44:24-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_272 knowledge_article_272 2013-03-26T13:14:18-0700 000001881 Validated (External) Public Ruckus support services Website access;Website services Website Access, Website Services, Ruckus Support Services How to get access to Ruckus training portal ? How to get access to Commscope-University? Log into Ruckus training portal ? ???????Log into Ruckus Commscope-University? <h4>RUCKUS Partner training has officially moved from RUCKUS Training portal to CommScope University!</h4> <h5>You must create a MyCommscope account to access training on CommScope University.</h5> Getting started in the new training platform: <ul><li> You will be able to access CommScope University through <a href="https://www.commscope.com/membership/" target="_blank">MyCommScope</a>. If you do not have a MyCommScope account <a href="https://share.vidyard.com/watch/GHgR1Fz69xk5Sj2fiLXoC1?" target="_blank">watch this video</a> to learn how to register and request access. </li><li> Once you are logged into MyCommScope, click on the CommScope University tile from your My Applications landing page in order to enter CommScope University. </li><li> Once access is granted and you have entered CommScope University, select RUCKUS Networking. </li><li><a href="https://share.vidyard.com/watch/4NBnXHmgDoQkjtTmCpNu1u" target="_blank">Watch this video</a> for a tour of CommScope University and how to navigate it.</li></ul> A few things to note: <ul><li> You will no longer access and complete your RUCKUS training via training.ruckuswireless.com. </li><li> For all other <a href="https://partners.ruckuswireless.com/" target="_blank">RUCKUS Partner Portal </a>needs, please continue to use your @rwbigdogs.com login credentials. </li><li> You will not be able to see your previously completed certifications in CommScope University, but you will still be able to see your completed certifications on your profile in the RUCKUS Partner Portal. </li></ul> Feel free to reach us at <a href="mailto:commscopeuniversity@commscope.com" target="_blank">commscopeuniversity@commscope.com</a> if you have any questions as you navigate through the new platform.

How-can-a-Ruckus-Partner-VAR-access-Training-Portal-Commscope-University

2024-07-23T23:44:24-0700 2024-07-24T08:00:08-0700 https://support.ruckuswireless.com/articles/000003113 2024-07-24T00:40:22-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1109 knowledge_article_1109 2014-06-06T04:30:44-0700 000003113 Validated (External) Public Zonedirector;Flexmaster umm;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) System network management;Support license activation System Network Management, Support License Activation, ZoneDirector, FlexMaster UMM, SmartCell Gateway Do I need to declare downtime when uploading AP license file on Ruckus Controllers? No downtime is required to upload license file on the controller. Once the license file is uploaded on the controller, upgraded AP licenses should be available on the GUI -> Admin-> License tab for you to add additional AP's. ---------- Note: There will not be any impact on the connected clients. ----------

Once the license file is uploaded on the controller, upgraded AP licenses should be available on the GUI.

2024-07-24T00:40:22-0700 2024-07-24T08:00:07-0700 https://support.ruckuswireless.com/articles/000001929 2024-07-23T23:55:10-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1858 knowledge_article_1858 2013-06-13T20:56:00-0700 000001929 Validated (External) Public Ruckus support services Known issues and workarounds;Website access;Website services Known Issues and Workarounds, Website Access, Website Services, Ruckus Support Services Who can a customer contact in case of any issues with Ruckus Training Portal/Commscope University? If you are unable to view details/data on the Training portal/Commscope University, Feel free to reach us at <a href="mailto:commscopeuniversity@commscope.com" target="_blank">commscopeuniversity@commscope.com</a> Please provide the below details, <ol><li>Full name</li><li>Email ID</li><li>Login ID</li><li>Issue description</li></ol> Ruckus Training team will get back to you and assist further with the issue you are facing.

Explains about the steps that the customer needs to follow when they are unable to view the data in the Training Portal

2024-07-23T23:55:10-0700 2024-07-24T08:00:07-0700 https://support.ruckuswireless.com/articles/000012036 2024-07-24T00:18:46-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4799 knowledge_article_4799 2022-01-12T04:23:23-0800 000012036 Validated (External) Public Ruckus support services Website issues;Support license activation;Registration Website Issues, Support License Activation, Registration, Ruckus Support Services End Customer Delegation to another End Customer This Support Portal enhancement is about allowing an End Customer to be able to manage another End Customer account. A Support Portal End Customer User can be linked only to one End Customer Account. However, there is a need for some End Customer Users to be able to manage other End Customers accounts. Like a school district has multiple schools. This feature will allow the IT person to masquerade as IT persons of the other schools and manage their accounts To get access to other end customers, end-user contact needs to give viewing permission to the End Customer. Below are the steps that need to be performed to delegate: <ul><li style="margin-left: 8px;">Log in to <a href="https://support.ruckuswireless.com/" style="color: #0563c1; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/</a> </li><li style="margin-left: 8px;">Click on My Support Account</li></ul> <div style="margin-left: 8px;"> </div> <img alt="User-added image" height="112" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sBh&feoid=00N50000002Cf3M&refid=0EM2J000003Wu1m" width="500"></img> <ul><li style="margin-left: 8px;">Click on Add Delegates</li></ul> <div style="margin-left: 8px;"> </div> <img alt="User-added image" height="287" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sBh&feoid=00N50000002Cf3M&refid=0EM2J000003Wu1r" width="500"></img> <ul><li style="margin-left: 8px;">Enter the email of the user you wish to act on your behalf.</li><li style="margin-left: 8px;">The user must be registered to the Support Portal.</li><li style="margin-left: 8px;">The user must be A RUCKUS Networks End Customer</li><li style="margin-left: 8px;">Click the "Add Delegate" button.</li></ul> <div style="margin-left: 8px;"> </div> <img alt="User-added image" height="199" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sBh&feoid=00N50000002Cf3M&refid=0EM2J000003Wu1w" width="500"></img> <ul><li style="margin-left: 8px;">Delegate added. Confirmation needed.</li></ul> <div style="margin-left: 8px;"> </div> <img alt="User-added image" height="236" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sBh&feoid=00N50000002Cf3M&refid=0EM2J000003Wu2B" width="500"></img> <ul><li style="margin-left: 8px;">Email sent to the registered email to confirm</li></ul> <div style="margin-left: 8px;"> </div> <img alt="User-added image" height="257" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sBh&feoid=00N50000002Cf3M&refid=0EM2J000003Wu2G" width="500"></img> <ul><li style="margin-left: 8px;">After confirmation, the confirmed status will change to Yes </li><li style="margin-left: 8px;">Delegates registered under My Profile </li></ul> <div style="margin-left: 8px;"> </div> <div style="margin-left: 8px;"><img alt="User-added image" height="237" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sBh&feoid=00N50000002Cf3M&refid=0EM2J000003Wu2L" width="500"></img></div> Delegatee - The End Customer user that was delegated to manage the Delegator’s account Delegator - The End Customer user that delegates his account to another End The delegate will have Admin level if Delegator is Admin Delegatee can view the delegated accounts under Ruckus Dashboard- View Delegated Accounts <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sBh&feoid=00N50000002Cf3M&refid=0EM2J000003Wu2Q"></img> Once the account is confirmed via email, the account can be viewed under Delegated Accounts and hyperlink to click on the account. <img alt="User-added image" height="132" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sBh&feoid=00N50000002Cf3M&refid=0EM2J000003Wu2f" width="500"></img> Without confirmation cannot click on account and no hyperlink. <img alt="User-added image" height="138" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sBh&feoid=00N50000002Cf3M&refid=0EM2J000003Wu2a" width="500"></img> Click on the account to manage- An email will be sent to the delegator that you have accessed this account. <img alt="User-added image" height="228" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sBh&feoid=00N50000002Cf3M&refid=0EM2J000003Wu2p" width="500"></img> Deleting Delegate Under Action click Delete. <img alt="User-added image" height="306" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sBh&feoid=00N50000002Cf3M&refid=0EM2J000003Wu2u" width="500"></img> An email will be sent to both the Delegator and Delegate notifying that Delegate is no longer a Delegate for the specific account. <img alt="User-added image" height="348" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000sBh&feoid=00N50000002Cf3M&refid=0EM2J000003Wu2z" width="500"></img>

A Support Portal End Customer User can be linked only to one End Customer Account. However, there is a need for some End Customer Users to be able to manage other End Customers accounts. Like a school district has multiple schools. This feature will allow the IT person to masquerade as IT persons of the other schools and manage their accounts

2024-07-24T00:18:46-0700 2024-07-24T08:00:07-0700 https://support.ruckuswireless.com/articles/000002161 2024-07-23T09:03:52-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5356 knowledge_article_5356 2013-07-15T16:05:42-0700 000002161 Validated (External) Public Zonedirector;Ruckus support services;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Support license activation Support License Activation, ZoneDirector, Ruckus Support Services What are the steps to receive the support/license that I ordered? If you are an end-user and have not received the file you ordered, please get in touch with your Partner/VAR. If you are a VAR or distributor, contact the RUCKUS Orders team at NAR# <a href="mailto:orders.ruckusnar@commscope.com" target="_blank" title="mailto:orders.ruckusnar@commscope.com">orders.ruckusnar@commscope.com</a> , EMEA <a href="mailto:orders-emea@commscope.com" target="_blank" title="mailto:orders-emea@commscope.com">orders-emea@commscope.com</a> APAC <a href="mailto:orderentry_ruckus_apac@commscope.com" target="_blank" title="mailto:orderentry_ruckus_apac@commscope.com">orderentry_ruckus_apac@commscope.com</a> If you are unable to reach the RUCKUS Orders team, please contact the RUCKUS Support team through one of the mediums mentioned on the <a href="https://support.ruckuswireless.com/contact-us" target="_new">Contact Us</a> page, providing the following mandatory information: <ul><li>Serial Number of the controller</li><li>End User’s account name</li><li>VAR’s account name</li><li>Distributor's PO#</li><li>Copy of the PO</li></ul> Please note: Support Purchase Acknowledgement (SPA) will be sent to the email ID that is present in the purchase order.

2024-07-23T09:03:52-0700 2024-07-24T00:00:09-0700 https://support.ruckuswireless.com/articles/000003638 2024-07-22T13:30:43-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3424 knowledge_article_3424 2014-11-12T17:45:31-0800 000003638 Validated (External) Public Zonedirector 1100;Zonedirector 3000;Zonedirector 5000;Zonedirector 1200;ZoneDirector 1100;ZoneDirector 3000;ZoneDirector 5000;ZoneDirector 1200 Performance;Configuration;Installation;System network management;Troubleshooting Performance, Configuration, Installation, System Network Management, Troubleshooting, ZoneDirector 1100, ZoneDirector 3000, ZoneDirector 5000, ZoneDirector 1200 What is License Pooling? License pooling was introduced in ZoneDirector version 9.9, enabling pooling between ZoneDirectors in Smart Redundancy (SR) mode. This allows a pair of ZoneDirectors to share their AP licenses, providing flexibility and resilience in network management. <h4>Key Features</h4> <ol><li>Pooling of Licenses: When two ZoneDirectors in SR mode have different license levels, the total number of licenses is displayed in the Smart Redundancy dashboard widget.</li><li>Automatic Management: If the primary ZoneDirector fails, the standby ZoneDirector assumes the primary role and continues to manage all APs.</li><li>60-Day License Pool: The licenses are pooled for 60 days. If the primary ZoneDirector is not replaced within this period, the standby ZoneDirector reverts to managing only its licensed APs.</li><li>License Pool Adjustment: If the total licenses in the pool decrease (due to the 60-day timer), the user must choose how to derive the new license pool. APs will be disconnected in a Last In, First Out (LIFO) manner if the license pool capacity is reduced after 60 days.</li><li>Compatibility: Both ZoneDirectors in SR mode must be of the same series (e.g., both ZD 1100, 3000, 5000, or 1200) and must be configured correctly to communicate and share licenses.</li></ol> <h4>Example Scenario</h4> <ul><li>Total Available AP Licenses: 150</li><li>ZoneDirector 2 (ZD2): ZD 3000 with 50 AP Licenses</li><li>ZoneDirector 1 (ZD1): ZD 3000 with 100 AP Licenses</li></ul> If ZD1 goes down, ZD2 can manage all 150 APs for 60 days. After 60 days, if ZD1 is not replaced, ZD2 can only manage its original 50 AP licenses. <h4>Requirements for Smart Redundancy</h4> <ol><li>Same Series: Both controllers must belong to the same series.</li><li>Smart Redundancy Configuration: The SR option must be enabled on both controllers.</li><li>IP Configuration: Each controller must have the IP address of the other.</li><li>Network Configuration: Both controllers must be on the same network.</li><li>Disabling SR: When SR is disabled, each ZoneDirector reverts to using its own pre-SR installed licenses.</li></ol> <img alt="User-added image" height="367" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000rVl&feoid=00N50000002Cf3M&refid=0EMPH000008MaHx" width="500"></img> <h3>Important Considerations</h3> <ul><li>Temporary Licenses: ZoneDirectors with temporary licenses cannot be part of an SR pair.</li><li>License Limit: The pooled license cannot exceed the maximum AP license limit supported by the ZoneDirector model.</li></ul> <h4>Summary</h4> Smart Redundancy in ZoneDirectors enhances network resilience by allowing license pooling and automatic failover management. However, careful configuration and timely replacement of failed ZoneDirectors are crucial to maintaining optimal network performance.

Article provides information about license pooling feature which is enabled from 9.9 release

2024-07-22T13:30:43-0700 2024-07-23T06:00:06-0700 https://support.ruckuswireless.com/articles/000001629 2019-10-17T08:39:00-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3520 knowledge_article_3520 2013-02-24T19:44:40-0800 000001629 Validated (External) Public Zoneflex outdoor Installation Installation, ZoneFlex Outdoor What does the LED status on the AP mean? Open the attached document to find details of LED status on all Indoor APs or refer below. LED Description PWR Off: Off Red: Boot up in process Green: On DIR Off: The AP is not being managed by a controller (Standalone mode) Green: The AP is being managed by a controller Slow flashing green (one flash every two seconds): The AP is managed by a controller but is currently unable to communicate with it. Fast flashing green (two flashes every second): The AP is managed by a controller and is currently receiving configuration settings or an image update. AIR Off: The AP is operating in standalone mode or as a Root AP (RAP) or non-Mesh AP. Green: The AP is functioning as a Mesh AP (MAP), and the wireless uplink signal is good. Fast flashing green (two flashes every second): The AP is functioning as a Mesh AP (MAP), and the wireless uplink signal is fair. Slow flashing green (one flash every two seconds): Mesh networking is enabled, but the AP is still searching for a mesh uplink. 2.4G Off: The WLAN service is down. Green: The WLAN is up and at least one client is associated. Amber: The WLAN is up. No clients are associated. 5G Off: The WLAN service is down. Green: The WLAN is up and at least one client is associated. No downlink MAPs are connected. Slow flashing green (one flash every two seconds): The WLAN is up and at least one downlink MAP is connected. No clients are associated. Fast flashing green (two flashes every second): The WLAN is up, at least one downlink MAP is connected and at least one client is associated.

Details of LED status on Ruckus Indoor Zone Flex APs

2019-10-17T08:39:00-0700 2024-07-21T13:23:06-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PCmoCAG?attachment_index=0 2024-07-21T13:23:06-0700 monthly admin,premium,warranty,guest knowledge_article_3520 knowledge_article_3520_attachment_1 LED Status.docx 912718.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000007578 2024-07-18T04:11:02-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5353 knowledge_article_5353 2018-01-03T14:02:26-0800 000007578 Validated (External) Public Ruckus cloud wifi System network management System Network Management, Ruckus Cloud WiFi What link should I use to access RUCKUS One Cloud portal? Please use the below URL's to log into RUCKUS One Cloud portal, depending on your Cloud Region, NA Region - <a href="https://ruckus.cloud/" target="_blank">https://ruckus.cloud/</a> EU(EMEA) Region - <a href="https://ruckus.cloud/" target="_blank">https://eu.ruckus.cloud/</a> AS(Asia) Region - <a href="https://ruckus.cloud/" target="_blank">https://asia.ruckus.cloud/</a>

Links to log into RUCKUS One Cloud portal.

2024-07-18T04:11:02-0700 2024-07-19T08:00:08-0700 https://support.ruckuswireless.com/articles/000003546 2024-07-18T06:33:37-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5354 knowledge_article_5354 2014-10-27T11:40:47-0700 000003546 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Firmware;Registration Performance, Configuration, Firmware, Registration, ZoneDirector How to Download ZD Entitlement File? If you want to check the Support Contract status before downloading the Support Entitlement File please use the below link <a href="https://support.ruckuswireless.com/tools/warranty_checker" target="_blank">https://support.ruckuswireless.com/tools/warranty_checker</a> You can also refer to article on How to check the support contract status of Assets <a href="https://support.ruckuswireless.com/articles/000004543" target="_blank">https://support.ruckuswireless.com/articles/000004543</a> Please follow the below steps to download the Support Entitlement File for Support Portal, Step 1. Log in to RUCKUS support portal - <a href="http://https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com</a>. On the home page, select Warranty & RMA and select "Support Service" Missing or Expiring. <img alt="User-added image" height="148" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000q6f&feoid=00N50000002Cf3M&refid=0EM2J000000waxM" width="500"></img> Step 2. Enter the ZD Serial Number <img alt="User-added image" height="160" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000q6f&feoid=00N50000002Cf3M&refid=0EM500000005lmc" width="500"></img> Step 3. Click on Submit to download the Entitlement(.spt) file Please follow the below steps to Upload the Support Entitlement File on the Controller - Step 1. Log in to the ZD GUI using Chrome or Firefox (IE is not recommended) Step 2. Navigate to >> Administer >> Support and click on Choose File <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000q6f&feoid=00N50000002Cf3M&refid=0EM50000000La6A"></img> Step 3. Select the Entitlement(.spt) file from the Downloads section and upload it on the controller. Post uploading the Support Entitlement File on the ZD, the warning message will go away. Also the Support Contract Start and End date will be displayed on the UI. Note: The entitlement server takes about 24 hours from the support activation time, to generate the new entitlement file.

Article provides step by step instructions on how to download an entitlement file. This is specially useful, if you have upgraded to 9.8.1 and above firmware. By downloading and uploading this file, the warning message on the controller's dashboard should go away.

2024-07-18T06:33:37-0700 2024-07-19T08:00:07-0700 https://support.ruckuswireless.com/articles/000002391 2024-07-18T07:04:13-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_634 knowledge_article_634 2013-12-01T14:54:23-0800 000002391 Validated (External) Public Ruckus support services Website services Website Services, Ruckus Support Services How to become Ruckus Channel Partner/ VAR? To becoming Ruckus Channel Partner/VAR/Reseller follow the below, <ul><li>Click on <a href="https://partners.ruckuswireless.com/apply" target="_blank">https://partners.ruckuswireless.com/apply</a></li><li>Fill in the RUCKUS BIG DOGS PARTNER PROGRAM APPLICATION</li><li>Submit the Partner Application</li></ul> Once the Partner Application is submitted, the concerned team will take get back to you in 24-48 business hours and assist with the further process. Incase you have not heard from the team, alternatively you can send an email to ruckuschannel@commscope.com

Article has got information about submitting an application to become Ruckus partner

2024-07-18T07:04:13-0700 2024-07-19T08:00:07-0700 https://support.ruckuswireless.com/articles/000002426 2024-07-18T07:30:43-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3398 knowledge_article_3398 2013-12-09T13:43:27-0800 000002426 Validated (External) Public Ruckus support services Website issues Website Issues, Ruckus Support Services How can a Ruckus Partner access Support portal? Partners can access Ruckus Support portal from the Partners portal. Please follow the below steps to access Support portal from the Partners portal: Login to the <a href="https://partners.ruckuswireless.com/" target="_blank">Partners portal</a> On the Home Page >> click on Resources <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000q9t&feoid=00N50000002Cf3M&refid=0EMPH000008CcMf"></img> Scroll down and click on RUCKUS Support <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000q9t&feoid=00N50000002Cf3M&refid=0EMPH000008CcMg"></img> You will be redirected to <a href="https://support.ruckuswireless.com" target="_blank">Ruckus Support portal</a> Click on Login <img alt="User-added image" height="156" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000q9t&feoid=00N50000002Cf3M&refid=0EM2J000000lsce" width="500"></img> Enter the same (Partners portal) credentials as your user name and password and click on Login <img alt="User-added image" height="251" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000q9t&feoid=00N50000002Cf3M&refid=0EM2J000000lscj" width="500"></img> And you are now logged in to the Support portal

Article has got information about Partner accessing Support portal from the Partners portal

2024-07-18T07:30:43-0700 2024-07-19T08:00:06-0700 https://support.ruckuswireless.com/articles/000002007 2024-07-17T12:40:55-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5351 knowledge_article_5351 2013-05-06T19:21:50-0700 000002007 Validated (External) Public Ruckus support services Registration Registration, Ruckus Support Services How to Register products through Ruckus Support Site? Follow the below steps to register the assets: <ol><li>Login to Ruckus support portal: <a href="https://support.ruckuswireless.com" target="_blank">https://support.ruckuswireless.com</a></li><li><a href="http://support.ruckuswireless.com/" target="_blank">I</a>f you do not have an account registered with Ruckus, you can get a free account. Have a look at the article <a href="https://support.ruckuswireless.com/answers/000002021" target="_blank">https://support.ruckuswireless.com/articles/000002021</a> for details</li><li>Click on Register Warranty</li><li>There are two ways to register products: <ol><li> Manual Input – Manually entering SN’s a. Enter SN’s one per line <img alt="User-added image" height="321" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pQj&feoid=00N50000002Cf3M&refid=0EM50000000lmVS" width="500"></img> b. Click on Register. The assets are now registered under your account. <img alt="User-added image" height="215" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pQj&feoid=00N50000002Cf3M&refid=0EM50000000lmVX" width="500"></img> You can find the registered assets by going to Assets -> Hardware Summary <img alt="User-added image" height="360" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pQj&feoid=00N50000002Cf3M&refid=0EMPH0000089tzy" width="500"></img> </li><li> ?CSV Upload – Downloading the asset information file from ZD and uploading it on the support portal To register assets via CSV upload, you need to download .CSV file from the Zone Director. Follow the below steps to download .CSV file: a. Login to ZD UI b. Click on Administer -> Registration -> Enter all the information and click on Apply <img alt="User-added image" height="244" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pQj&feoid=00N50000002Cf3M&refid=0EM50000000ln72" width="500"></img> c. Now the .CSV file is downloaded on your system <img alt="User-added image" height="98" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pQj&feoid=00N50000002Cf3M&refid=0EM50000000lnD5" width="500"></img> Steps to upload the file on the support portal a. Click on Register Warranty b. Under CSV Upload, click on Choose File <img alt="User-added image" height="148" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pQj&feoid=00N50000002Cf3M&refid=0EM50000000lnDA" width="500"></img> c. Select the file and Click on Upload <img alt="User-added image" height="158" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pQj&feoid=00N50000002Cf3M&refid=0EM50000000lnDK" width="500"></img> The assets are now registered under your account. You can find the registered assets by going to Assets -> Hardware Summary </li></ol> </li></ol> By inputting serial numbers manually or uploading a CSV file, you are letting us know that you are now the owner of registered product(s).

Registering all the assets under the account, after obtaining access to Ruckus support portal.

2024-07-17T12:40:55-0700 2024-07-18T06:00:10-0700 https://support.ruckuswireless.com/articles/000003780 2024-07-17T13:16:44-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4373 knowledge_article_4373 2014-12-10T16:51:21-0800 000003780 Validated (External) Public Ruckus support services Website access;Website services;Registration Website Access, Website Services, Registration, Ruckus Support Services How can a VAR view their End User's account? VAR/Reseller/Partner contacts can view what their end users have purchased, I.e. Registered assets, licenses, activated support contracts, To be activated support contracts, Cloud subscription, etc by masquerading as the end user. All this can be accomplished at Ruckus Wireless <a href="https://support.ruckuswireless.com/" target="_blank">Support portal</a> Note: You (Partners) can masquerade as the end user, only when the PO/SO processed with Ruckus had your(Partners) account name on it. In order to view end users products and licenses, both the VAR and the end user contact must have created their support login account for the Ruckus Wireless <a href="https://support.ruckuswireless.com/" target="_blank">Support portal</a>. If you do not have a support login, you can request for one at <a href="https://support.ruckuswireless.com/registration" target="_blank">https://support.ruckuswireless.com/registration</a> Need help with the registration? - refer article <a href="https://support.ruckuswireless.com/articles/000002021" target="_blank">https://support.ruckuswireless.com/articles/000002021</a> Once you are logged into the Support portal, follow the below steps to masquerade as the end user: <ol><li> Click on View Customers <img alt="User-added image" height="208" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pTx&feoid=00N50000002Cf3M&refid=0EM2J000000lsrP" width="500"></img> </li><li> The VAR contact should be able to view the list of end users <img alt="User-added image" height="190" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pTx&feoid=00N50000002Cf3M&refid=0EM2J000000lsqW" width="500"></img> </li><li> Click on the end user account name </li><li> Click on Switch To The Account <img alt="User-added image" height="161" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pTx&feoid=00N50000002Cf3M&refid=0EM2J000000lsqb" width="500"></img> </li><li> Now the VAR/Reseller contact can Masquerade as the end user contact. Note the bar at the top of the Ruckus Wireless Support portal <img alt="User-added image" height="167" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pTx&feoid=00N50000002Cf3M&refid=0EMPH000008A8pK" width="500"></img> </li><li> You can stop "masquerading" as the End User contact, by clicking on "Return to being yourself". </li></ol> Further, you can click on Cases, and Assets to view the product, licenses, and support contract details of the end user. You will also be able to Activate Purchase, Register Warranty, and Download Licenses for your end user. In case if you do not see Switch To The Account option and have the warning message as This account requires explicit permission from the admin in order for you to access it. please note that it is because of the end user dealing with 2 or more Reseller. <img alt="User-added image" height="152" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pTx&feoid=00N50000002Cf3M&refid=0EM2J000000lsr0" width="500"></img> In order to get access to such end customers, end user contact needs to give viewing permission to the VAR contact. So, please have your end customer to delegate their account. Below are the steps that are need to be performed in order to delegate: <ol><li> The end user contact must log in to https://support.ruckuswireless.com/ </li><li> Click on my My Support Account <img alt="User-added image" height="115" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pTx&feoid=00N50000002Cf3M&refid=0EM2J000000lsrF" width="500"></img> </li><li> Click on Delegate Account <img alt="User-added image" height="184" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pTx&feoid=00N50000002Cf3M&refid=0EM2J000000lsr5" width="500"></img> </li><li> Enter the email id of the VAR/Reseller contact and click on Allow Masquerade <img alt="User-added image" height="208" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pTx&feoid=00N50000002Cf3M&refid=0EM2J000000lsqv" width="500"></img> </li><li> Now the access is delegated to a VAR/Reseller contact <img alt="User-added image" height="222" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pTx&feoid=00N50000002Cf3M&refid=0EM2J000000lsrK" width="500"></img> </li><li> And the VAR/Reseller contact has permission to view the end user's account </li></ol>

Article provides instructions on how a VAR contact can view their End User's account to manage end users assets, licenses and support contracts

2024-07-17T13:16:44-0700 2024-07-18T06:00:09-0700 https://support.ruckuswireless.com/articles/000012529 2024-07-17T17:00:11-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4917 knowledge_article_4917 2022-11-11T12:52:08-0800 000012529 Validated (External) Public Smartcell gateway;Ruckus support services;Smartcell insight;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) Support license activation;Registration Support License Activation, Registration, SmartCell Gateway, Ruckus Support Services, SmartCell Insight How to Register and Activate Licenses for Cloud Hosted SPoT How to Register and Activate Licenses for Cloud Hosted SPoT Requesting an Account for SPoT registration. <ul><li style="margin-bottom: 11px;">Once you have purchased your SPoT license, you will receive an email notification with instructions on how to access your account in the SPoT Admin portal</li></ul> <div style="margin-bottom: 11px;"> <img alt="User-added image" height="744" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pnJ&feoid=00N50000002Cf3M&refid=0EM2J000004Megz" width="500"></img></div> <ul><li style="margin-bottom: 11px;">Click the link in the SPA Email to go visit the “Register” page</li><li>Enter a Group Name and your registration information to register. </li><li>Click Register.</li></ul> <div style="margin-bottom: 11px;"> <img alt="User-added image" height="506" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pnJ&feoid=00N50000002Cf3M&refid=0EM2J000004Meiq" width="500"></img></div> <ul><li style="margin-bottom: 11px;">The “Thank you for Registering” page appears.</li></ul> <div style="margin-bottom: 11px;"> <img alt="User-added image" height="259" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pnJ&feoid=00N50000002Cf3M&refid=0EM2J000004MehJ" width="500"></img> <ul><li style="margin-left: 8px;">A registration email is sent to the email address entered. Follow the instructions in the email to confirm your SPoT admin account registration.</li></ul> Note: It may take about 24 hours for customer to receive registration confirmation, if you do not receive the confirmation contact Ruckus support <a href="https://support.ruckuswireless.com/contact-us" style="color: #0563c1; text-decoration: underline;" target="_blank">Contact-us</a> Activating Licenses for Cloud Hosted SPoT <ul><li>Login to <a href="https://us-sys.ruckuslbs.com/sessions/new" style="color: #0563c1; text-decoration: underline;" target="_blank">https://us-sys.ruckuslbs.com/sessions/new</a> </li></ul> <img alt="User-added image" height="254" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pnJ&feoid=00N50000002Cf3M&refid=0EM2J000004MehT" width="500"></img> <ul><li style="margin-left: 8px;">The License page is where Client Capacity Licenses are activated</li><li style="margin-bottom: 11px; margin-left: 8px;">Key in the activation code and click on Save. </li></ul> <div style="margin-bottom: 11px; margin-left: 8px;"> <img alt="User-added image" height="294" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pnJ&feoid=00N50000002Cf3M&refid=0EM2J000004Mehi" width="500"></img></div> <ul><li style="margin-bottom: 11px;">The Licenses will be added to the Group for use across venues set up under the Group. Along with the Activation codes, the license page will display the License SKU, quantity of the SKU, order date and expiry date. This page will also display the total number of Client Capacity for the Group</li></ul> <div style="margin-bottom: 11px;"> <img alt="User-added image" height="316" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pnJ&feoid=00N50000002Cf3M&refid=0EM2J000004MeiC" width="500"></img></div> Contact <a href="https://support.ruckuswireless.com/contact-us" style="color: #0563c1; text-decoration: underline;" target="_blank">Ruckus Support</a> for any issues/queries</div>

2024-07-17T17:00:11-0700 2024-07-18T06:00:09-0700 https://support.ruckuswireless.com/articles/000001930 2024-07-17T18:11:54-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5352 knowledge_article_5352 2013-04-26T18:11:23-0700 000001930 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Website services;Support license activation Installation, Website Services, Support License Activation, ZoneDirector How to generate temporary license file for the ZoneDirector Follow the below steps to generate a temporary AP license file for the ZoneDirector: Login to RUCKUS Support Portal: Enter your login credentials and sign in. Navigate to License Management: Once logged in, scroll down to find the "License Management" section on the main page. Select Temporary License: In the License Management section, look for an option labeled "Temporary License" and select it. <img alt="User-added image" height="207" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pyb&feoid=00N50000002Cf3M&refid=0EMPH000008Awe1" width="500"></img> Request a Temporary License for ZD: Follow the on-screen instructions to provide specific details such as the ZoneDirector's serial number, model, and email. <img alt="User-added image" height="478" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pyb&feoid=00N50000002Cf3M&refid=0EMPH000008Ax5R" width="500"></img> Download and Apply the License: <ul><li>After submitting the request, you should receive a temporary license key.</li><li>Download the license key.</li><li>Log in to your ZoneDirector's management interface and navigate to the licensing section.</li><li>Upload the temporary license key and apply it to your ZoneDirector</li></ul> Direct link # Please visit <a href="https://support.ruckuswireless.com/temp_license_requests/new" target="_blank">Temporary 30 day ZD License</a> page Once the request is submitted, an email will be sent out from @ruckuswireless.com with the temp license file, valid for 30 days from the upload date. These steps should help you obtain and apply a temporary license for your ZoneDirector from the RUCKUS support portal. If you encounter any issues or need further assistance, the support team at RUCKUS can provide additional guidance.

Steps to get a Temporary license for the ZoneDirector

2024-07-17T18:11:54-0700 2024-07-18T06:00:06-0700 https://support.ruckuswireless.com/articles/000011657 2024-07-17T17:24:36-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4680 knowledge_article_4680 2021-05-05T08:25:33-0700 000011657 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Support license activation;Registration Support License Activation, Registration, Unleashed How to activate and add unleashed URL license URL Filtering service requires an active URL filtering license to function. URL filtering licenses can be purchased from Ruckus partners and distributors. Follow the below steps to activate the Unlshd URL Filtering and apply it to the device. Have Unleashed ID ready. How to get Unleashed ID. Go to Admin & Services > System > System Info. Click Admin & Services, and expand the System tab to configure system settings The System Info page displays the firmware version, system name, and Unleashed ID Click Copy. <img alt="User-added image" height="145" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024hvR" width="500"></img> <img alt="User-added image" height="188" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024hvW" width="500"></img> How to activate Unlshd URL Filtering. Open the Support Purchase Acknowledgement (SPA) email you have received from Ruckus/Disti/VAR for your order <img alt="User-added image" height="450" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024hvg" width="500"></img> Log in to the Ruckus Support portal: https://support.ruckuswireless.com Click the activation code in the email to activate Accept the terms and conditions and click on Activate Purchase Click on the Hyperlink for the product code((you can see the Quantity Activated and To Be Activated) <img alt="User-added image" height="161" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024hvl" width="500"></img> Enter the Unleashed ID and click on Validate Serial Number <img alt="User-added image" height="206" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024hvq" width="500"></img> Select device model and click register device &bind to support button <img alt="User-added image" height="296" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024hvv" width="500"></img> Unlshd URL Filtering will be bound to the Unleashed ID. <img alt="User-added image" height="232" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024hw0" width="500"></img> Once the support is activated, the server takes about 24 hours to generate the latest support file/URL license (.SPT). After 24 hours, you can download the support file/URL license. Steps to download the URL licenses. Log in to the RUCKUS support portal - <a href="http://https//support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com</a>. On the home page, select Warranty & RMA and select "Support Service" Missing or Expiring. <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J000000waxM"></img> Enter the serial number <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM500000005lmc"></img> Click on Submit to download the entitlement(.spt) file Applying for URL Filtering license Go to Admin & Services > Services > URL Filtering. <img alt="User-added image" height="220" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024hwP" width="500"></img> In the License tab, configure any of the following: <ul id="GUID-6E615F8C-859F-428B-87D9-7D1303FF8B44__CHOICES_08F3C6B79BF4414DBDB4CDC65A1E6D19"><li id="GUID-6E615F8C-859F-428B-87D9-7D1303FF8B44__CHOICE_7A9CEC502F774D03930C205FF4802C14">Update Services By File: Import a new locally saved license file.</li><li id="GUID-6E615F8C-859F-428B-87D9-7D1303FF8B44__CHOICE_51321EEA6C974E86BC9DEBB2506BB3D9">Renew Services Online: Connect to the Ruckus license server to download a license file.</li><li id="GUID-6E615F8C-859F-428B-87D9-7D1303FF8B44__CHOICE_0949F97C23BF473DB3293315027026A9">Show Details: Select the license file from the list and click Show Details to view license expiration details.</li></ul> <img alt="User-added image" height="196" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024hwZ" width="500"></img> Update Services by file--Upload file <img alt="User-added image" height="222" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024hzx" width="500"></img> Click Yes. <img alt="User-added image" height="249" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024i02" width="500"></img> <h1> </h1> URL licenses added. <img alt="User-added image" height="106" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024i0M" width="500"></img> Temp URL licenses will be added after the URL filtering profile created and enable URL profile. 90days temp license for 128AP <img alt="User-added image" height="113" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pwz&feoid=00N50000002Cf3M&refid=0EM2J0000024k89" width="500"></img>

Unleashed-URL-license

2024-07-17T17:24:36-0700 2024-07-18T06:00:06-0700 https://support.ruckuswireless.com/articles/000001960 2024-07-17T10:21:13-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4664 knowledge_article_4664 2013-06-19T21:23:09-0700 000001960 Validated (External) Public Ruckus support services Website access;Website services;Knowledge base Website Access, Website Services, Knowledge Base, Ruckus Support Services I forgot my password. How do I reset it? If you are unable to login to Support Portal due to Authentication Error or have Forgotten your Password, don't worry, we can help by sending you a link to reset it. Please follow these simple instructions to request a link to reset password on Support Portal. <ol><li> <a href="https://support.ruckuswireless.com/" target="_blank">Click here to go to Support Portal Login Page</a>. You will see the following screen: <img alt="User-added image" height="211" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pKH&feoid=00N50000002Cf3M&refid=0EM2J000000lsRb" width="500"></img> </li><li> Click on Login and you will see the following screen, click on Forgot Password <img alt="User-added image" height="268" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pKH&feoid=00N50000002Cf3M&refid=0EM2J000000lsRg" width="500"></img> </li><li> Once Forgot Password is clicked, the following page will appear to type your email address <img alt="User-added image" height="331" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pKH&feoid=00N50000002Cf3M&refid=0EM2J000000lsS5" width="500"></img> </li><li> After the email address is submitted to reset the password, you will receive the Reset Email with the Password Reset Link as shown below <img alt="User-added image" height="353" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pKH&feoid=00N50000002Cf3M&refid=0EM2J000000lsR7" width="500"></img> </li><li> Kindly, click on Reset Password </li><li> You will be redirected to the below page when clicked on Reset Password Link <img alt="User-added image" height="313" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pKH&feoid=00N50000002Cf3M&refid=0EM2J000000lsRC" width="500"></img> </li><li> After the Password is reset you will be redirected to Support Portal as shown below <img alt="User-added image" height="277" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pKH&feoid=00N50000002Cf3M&refid=0EM2J000000lsRH" width="500"></img> </li></ol> Note: The support login will not work unless the login is confirmed, this is also on the of reason why you can not login to the support site even after resetting the password.

Assisting customer to reset the Password on Support Portal by sending the Reset Password Link.

2024-07-17T10:21:13-0700 2024-07-17T18:00:09-0700 https://support.ruckuswireless.com/articles/000003775 2024-07-17T10:56:58-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5350 knowledge_article_5350 2014-12-09T14:40:26-0800 000003775 Validated (External) Public Ruckus support services Website access;Website services Website Access, Website Services, Ruckus Support Services How can I add more contacts on the Support portal? An existing portal user from an account can add more users from his/her company to the support portal. In order for that to happen, existing portal user must first be assigned an "Account Administrator" role/access on Ruckus support portal. For example, if John Doe of XYZ company is assigned an "Account Administrator", John Doe can add other people from his company to the Ruckus support site. Here are the steps that the existing portal user has to go through to add more contacts to his/her company account. <ol><li>Log in to the <a href="https://support.ruckuswireless.com" target="_blank">Support portal</a></li><li>Click on My Support Account</li><li>Click on Users OR Add Users</li><li>Click on + New User</li><li>Enter the email id of the contact that you wish to add</li><li>Click on Add User</li></ol> The contact that has been added will get an auto-email with a link to register his/her contact with Ruckus, by clicking on the link in the email, the contact can register himself/herself on the support portal Need more information - Please follow the instructions mentioned in the attached document which has got step by step instructions along with the screenshots.

Article describes about an existing support portal user adding/inviting new users on the support portal

2024-07-17T10:56:58-0700 2024-07-17T18:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PHv2CAG?attachment_index=0 2024-07-17T18:00:08-0700 monthly admin,premium,warranty,guest knowledge_article_5350 knowledge_article_5350_attachment_1 User Registration.pdf 698134.0 application/pdf https://support.ruckuswireless.com/articles/000005318 2024-07-17T11:08:01-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3388 knowledge_article_3388 2015-11-30T15:27:48-0800 000005318 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Support license activation;Registration Support License Activation, Registration, SmartCell Gateway How to Register SZ100 and SZ300 SN's? SZ serial numbers can be registered on the Support Site under LIMAN Tab. Log into the Support Portal <a href="https://support.ruckuswireless.com" target="_blank">https://support.ruckuswireless.com</a> Click on LiMAN <img alt="User-added image" height="103" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pNV&feoid=00N50000002Cf3M&refid=0EM2J0000024bpw" width="500"></img> Under LiMAN, you will see a tab Register RuckusOS Hardware <img alt="User-added image" height="138" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pNV&feoid=00N50000002Cf3M&refid=0EM2J0000024bo6" width="500"></img> Click on the same Enter the SZ SN in the given box <img alt="SN" height="236" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pNV&feoid=00N50000002Cf3M&refid=0EM500000005YcF" width="500"></img> Click on Register RuckusOS Hardware <img alt="User-added image" height="112" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pNV&feoid=00N50000002Cf3M&refid=0EM2J000000ls5C" width="500"></img> Upon the completion of registration, you will be able to see the SN of smart Zone under LiMAN -> Smart Devices

Registering SZ100 and SZ300 serial numbers on the Support Site under LIMAN Tab.

2024-07-17T11:08:01-0700 2024-07-17T18:00:08-0700 https://support.ruckuswireless.com/articles/000002693 2024-07-16T14:24:02-0700 monthly 0.8 admin,premium knowledge_article_765 knowledge_article_765 2014-02-23T21:56:36-0800 000002693 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management;Support license activation System Network Management, Support License Activation, ZoneDirector When will the temporary license on ZD become inactive? Temporary license on the Zone Director is valid for 30 days from the date of upload and it supports full capacity of the ZD. After 30 days license status will be Inactive. Note: Temp licenses can only be installed once on the Zone Directors by the customers and can only be removed by Ruckus Support.

Article explains about the validity of temp licenses on ZD

2024-07-16T14:24:02-0700 2024-07-17T10:00:08-0700 https://support.ruckuswireless.com/articles/000001594 2024-07-16T14:22:02-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_548 knowledge_article_548 2013-02-08T07:08:23-0800 000001594 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector What happens if a License Upgrade is done on a ZD which has a Temporary License file installed? A new permanent ZD License upgrade can be done with no issues, and this license will come into effect only after the temporary license file expires. There will be no issues caused when the new ZD license file is uploaded.

ZD permanent license installation over temporary license works with no problems.

2024-07-16T14:22:02-0700 2024-07-17T10:00:08-0700 https://support.ruckuswireless.com/articles/000001322 2024-07-16T14:08:36-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5347 knowledge_article_5347 2012-10-22T16:56:11-0700 000001322 Validated (External) Public All;Brocade Mobility 6511 Wallplate Access Point Firmware;Support license activation;Registration Firmware, Support License Activation, Registration, All How long will Ruckus Support EOL products (end of life / end of support)? Product End of Life At some point, all companies choose to discontinue products and Ruckus is no exception. When this happens, Ruckus will advise you of the discontinuance and present you with options for continuing service. The End of Life process is described below: <ul><li>Ruckus will make a public announcement when a product End of Life is planned.</li><li>Ruckus will continue to sell the product for an additional six months to allow Customers to make a last purchase of that specific product. Ruckus will publish an End of Sale notice at that time.</li><li>Ruckus will continue to ship the product for an additional six months after End of Sale.</li><li>The last hardware repair/replace and support for advanced hardware replacement date for discontinued products is 5 years after the End of Sale date.</li><li>The EOL products are listed at: <ul><li><a href="https://support.ruckuswireless.com/product_families/4-eol-ruckus-products" target="_blank">EOL Ruckus Products</a></li><li><a href="https://support.ruckuswireless.com/product_families/23-eol-fastiron-icx-products" target="_blank">EOL FastIron & ICX and Mobility Products</a></li></ul> </li><li>EOL products are also described in the release notes of the SW of which the product is being phased out of</li></ul> Is it the same for the software components? Software by nature is different; consequently, software End of Life is handled differently. Please review the points below: <ul><li>S/W products are supported for up to twelve months following their initial release or two subsequent releases of such software, whichever occurs first.</li><li>At this point, the S/W is considered to have reached its End of Development (EOD) date and may no longer be actively supported by Ruckus.</li><li>Update releases will no longer be created for major software releases that have reached the EOD milestone.</li><li>Ruckus Support will continue to offer assistance on a limited basis after EOD.</li><li>At this point the S/W has reached its end of life/support (EOL/EOS) date.</li><li>After a software release reaches EOL/EOS date, Ruckus will provide support only on a best effort basis.</li><li>If a solution cannot be found for the existing S/W that has reached EOD date, Ruckus will require that the system be updated with a more recent software version. There may be an additional charge for the new S/W.</li></ul> End of Life Policy document: <a href="http://support.ruckuswireless.com/documents/289-ruckus-standard-end-of-life-policy/download" style="color: #0563c1; text-decoration: underline;" target="_blank">http://support.ruckuswireless.com/documents/289-ruckus-standard-end-of-life-policy/download</a>

This article describes Ruckus End of Life / End of Support Policy

2024-07-16T14:08:36-0700 2024-07-17T10:00:08-0700 https://support.ruckuswireless.com/articles/000011637 2024-07-16T14:55:12-0700 monthly 0.8 admin,premium knowledge_article_5346 knowledge_article_5346 2021-04-28T05:39:58-0700 000011637 Validated (External) Premium Cloud services Firmware;Knowledge base;Downloads;Registration Firmware, Knowledge Base, Downloads, Registration, Cloud Services How do I find Ruckus Cloud Wi-Fi Version / Release Notes / Documentation? Version Management Can view and update the firmware versions of the APs and switches from RUCKUS One. Following steps to view the AP firmware version or the switch firmware version From the navigation bar, click Administration > Account Management > Version Management. • AP Firmware • Switch Firmware • Application Library By default, the AP Firmware page is displayed. <img alt="User-added image" height="178" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000H0r&feoid=00N50000002Cf3M&refid=0EMPH0000086jc9" width="500"></img> You can search the list of venues by entering a complete or partial venue name in the search field; all matching venues are displayed. You can sort and filter the venues using the Current AP Firmware and the Firmware Type filters. You can make multiple selections to filter the AP Firmware table. Select the Switch Firmware tab to view the switch firmware version. <img alt="User-added image" height="177" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000H0r&feoid=00N50000002Cf3M&refid=0EMPH0000086mgT" width="500"></img> To view whether new switch firmware is available, pause your cursor on the <img id="GUID-CD34BD0F-4D59-40A6-8380-5A76D6988DCF__IMAGE_CQW_L3G_1CC" src="https://docs.cloud.ruckuswireless.com/ruckusone/userguide/GUID-54F061FB-33B7-45B8-9A37-9F888C4FF9EE-low.png" width="20"></img> icon in the Switch Firmware tab. To view details about the latest switch firmware versions available, click Show more in the Recommended Version tile. On the upper-right corner, locate the cog icon and click Preferences to set your preference for the firmware version management. <img alt="User-added image" height="177" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000H0r&feoid=00N50000002Cf3M&refid=0EMPH0000086kGT" width="500"></img> Under the Choose update schedule method, select one of these: • Schedule Automatically: Click Change to modify the preferred update slots. • Schedule Manually: You can set this to manually update the firmware at a suitable time Click Save Preferences. Select the Application Library tab to view the latest application version. The Application Library page is displayed. <img alt="User-added image" height="186" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000H0r&feoid=00N50000002Cf3M&refid=0EMPH0000086lPR" width="500"></img>

Ruckus Cloud Wi-Fi Version number, Release Notes

2024-07-16T14:55:12-0700 2024-07-17T10:00:07-0700 https://support.ruckuswireless.com/articles/000003972 2024-07-16T15:03:20-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2074 knowledge_article_2074 2015-02-03T13:26:56-0800 000003972 Validated (External) Public Smartcell gateway;Ruckus support services;Smartcell insight;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) Website access;Support license activation Website Access, Support License Activation, SmartCell Gateway, Ruckus Support Services, SmartCell Insight Why can I not find the LiMAN Smart Licensing Manager ? The <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000p8z&feoid=00N50000002Cf3M&refid=0EM50000000Ldko"></img> button is only accessible once you have successfully activated the smart licensing capable product via the hyperlink in your Support Product Activation (SPA) email (look for ‘License and Activation’ in the subject line). Note: The LiMAN - Smart License Manager is used only for controllers that use Smart Licensing. If you are unsure what type of licensing your controller uses, see KB article # <a href="http://support.ruckuswireless.com/answers/000003971" target="_blank">000003971 - What type of Licensing does my controller use ?</a> If you have not yet done so, test your Ruckus Support account by logging in to <a href="https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com/</a> Once you have verified your Ruckus support account follow these steps: <ol><li>Open the SPA License and Activation email and click the activation link found within it</li><li>Accept the Terms and Conditions and click Activate purchase</li><li>When successful the <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000p8z&feoid=00N50000002Cf3M&refid=0EM50000000Ldke"></img> button will appear</li><li>You should now be able to click the LiMAN button to view and manage licenses for your Smart License capable products</li></ol> Once activated using the procedure above, the LiMAN button will remain accessible via the Ruckus Support website.

Describes what must be done to be able to access and use LiMAN

2024-07-16T15:03:20-0700 2024-07-17T10:00:07-0700 https://support.ruckuswireless.com/articles/000004543 2024-07-16T15:14:03-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5345 knowledge_article_5345 2015-05-27T15:54:30-0700 000004543 Validated (External) Public All;Brocade Mobility 6511 Wallplate Access Point System network management System Network Management, All How to check the support contract status of Assets Please follow the below steps to know the status of support and licenses of your assets. Login to Ruckus <a href="https://support.ruckuswireless.com//" target="_blank">Support Portal</a> Click on Assets <img alt="User-added image" height="107" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Ht000000bq1z&feoid=00N50000002Cf3M&refid=0EM2J0000024boe" width="500"></img> Under Assets, click on Hardware Summary <img alt="User-added image" height="455" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Ht000000bq1z&feoid=00N50000002Cf3M&refid=0EM2J0000024boo" width="500"></img> Enter SN in the search box and click on the SN <img alt="User-added image" height="189" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Ht000000bq1z&feoid=00N50000002Cf3M&refid=0EM2J0000024bpN" width="500"></img> <img alt="User-added image" height="261" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Ht000000bq1z&feoid=00N50000002Cf3M&refid=0EM2J0000024bpI" width="500"></img> Note: If you do not get any results, you need to register your hardware for the warranty. Follow the steps mentioned here <a href="https://support.ruckuswireless.com/articles/000002007" target="_blank">https://support.ruckuswireless.com/articles/000002007</a> In the next page, you can find the information about licenses (If there are any upgraded one's on the controller) and support entitlement <img alt="User-added image" height="249" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Ht000000bq1z&feoid=00N50000002Cf3M&refid=0EM2J0000024bpX" width="500"></img> Second Option Click Warranty Checker in the support portal <img alt="User-added image" height="149" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Ht000000bq1z&feoid=00N50000002Cf3M&refid=0EMPH0000086orx" width="500"></img> Use this tool to check the coverage that Ruckus shows on your device. If what we show, doesn't agree with what you think you have, please <a href="https://support.ruckuswireless.com/contact-us" target="_blank">Contact Support</a> and let us know so that we can fix it for you. <ol><li>Enter the serial number of your device below.</li><li>Click the "Submit" button.</li></ol> <img alt="User-added image" height="344" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2Ht000000bq1z&feoid=00N50000002Cf3M&refid=0EMPH0000086p6T" width="500"></img> Provides PRODUCT DETAILS and SUPPORT CONTRACT DETAILS

Article has got steps to check the support contract status of all the assets that are registered under the customer's account

2024-07-16T15:14:03-0700 2024-07-17T10:00:06-0700 https://support.ruckuswireless.com/articles/000008663 2024-07-16T15:28:56-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4686 knowledge_article_4686 2018-12-03T13:47:00-0800 000008663 Validated (External) Public All;Brocade Mobility 6511 Wallplate Access Point Support license activation Support License Activation, All What Covers under WatchDog Partner Premium Support? With Associate Partner Support, Ruckus support partners provide Level 1 support services to end users, with support engineers trained and certified on Ruckus Wireless products. If an event requires escalation to Ruckus support, our partners will open a case on your behalf and provide you with updates on the status of the issue. • Technical support through Ruckus Support Partners, backed up by Ruckus if necessary. • Access to product information, technical documentation, software downloads, community forums, and more via Ruckus Web support at http://support.ruckuswireless.com .• Software updates and upgrades, including bug fixes and maintenance releases, as available, for controllers and APs. • Advance Hardware Replacement on controllers. Associate Partner Support Summary <img alt="User-added image" height="166" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000pDp&feoid=00N50000002Cf3M&refid=0EMPH0000086r53" width="500"></img> Document for reference.. https://ruckus-support.s3.amazonaws.com/private/documents/1232/Associate%20Partner%20Support_Feb21.pdf?AWSAccessKeyId=AKIAJM3QLNNKLOV235TQ&Expires=1721168948&Signature=OMZSHlvPkR1VIa7L8UojJPdlLdk%3D

Article explains about the WatchDog Partner Premium Support benefits

2024-07-16T15:28:56-0700 2024-07-17T10:00:06-0700 https://support.ruckuswireless.com/articles/000006970 2024-07-16T06:03:56-0700 monthly 0.8 admin,premium knowledge_article_5342 knowledge_article_5342 2017-12-12T15:03:27-0800 000006970 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How do I configure a mirror port? There are 2 terms that are commonly referenced when setting up a mirror port. Mirror port - This is the port you want the traffic in question copied/mirrored to or where the packet analyzer (Wireshark, Ethereal, etc.) will be attached to. The mirror port is configured via the global config. Monitor port/s - Monitor port/s are the port/s that you are looking to gather the packet/traffic information from for further analysis and is configured under that particular interface/s. The following is a basic configuration for mirror/monitoring ports: Brocade(config)# mirror-port ethernet 1/1/1 Brocade(config)# interface ethernet 1/1/4 Brocade(config-if-e1000-1/1/4)# monitor ethernet 1/1/1 both Brocade(config-if-e1000-1/1/4)##show mirror Mirror port 1/1/1 Input monitoring : (U1/M1) 4 Output monitoring : (U1/M1) 4 The above configuration will monitor port 1/1/4, and that monitored traffic will be copied/mirrored to port 1/1/1. <img alt="User-added image" height="142" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000kcL&feoid=00N50000002Cf3M&refid=0EM50000000XGxH" width="500"></img>

How do I configure a mirror port?

2024-07-16T06:03:56-0700 2024-07-16T16:00:10-0700 https://support.ruckuswireless.com/articles/000014366 2024-07-16T05:41:47-0700 monthly 0.8 admin,premium knowledge_article_5340 knowledge_article_5340 2024-07-16T05:41:47-0700 000014366 Validated (External) Premium Mobile apps;Cloud services;RUCKUS One Mobile Apps;Ruckus Cloud Mobile Apps Configuration;Troubleshooting;Known issues and workarounds;Website issues Configuration, Troubleshooting, Known Issues and Workarounds, Website Issues, Mobile Apps, Cloud Services Why is login through the Cloud app throwing error "Connection Error. Please check internet connection and try again" Since the Account has been updated to R1 ( Ruckus One ) recently, the old Mobile App is not allowing for authentication through the old Mobile App. Hence, the solution is to install the latest "R1" app instead of the old Ruckus Cloud app.

Since the Account has been updated to R1 ( Ruckus One ) recently, the old Mobile App is not allowing authentication through the old Mobile App.

2024-07-16T05:41:47-0700 2024-07-16T16:00:10-0700 https://support.ruckuswireless.com/articles/000008662 2024-07-12T05:17:02-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5338 knowledge_article_5338 2018-12-03T13:08:14-0800 000008662 Validated (External) Public Ruckus cloud lte;Ruckus cloud wifi System network management;Website access;Website services System Network Management, Website Access, Website Services, Ruckus Cloud LTE, Ruckus Cloud WiFi How can I invite my VAR as 3rd Party Administrator on the Ruckus Cloud? If you are an End user and if you want your Ruckus Cloud to be managed by your Partner OR If you want a 3rd Party Administrator to manage your Ruckus Cloud account for you, you can send an invitation to your Partner from the Cloud UI. Before starting this procedure, you must know the email address of your authorized Ruckus Partner administrator that you want to invite. If you do not have this information, please get in touch with your Partner. Follow the below steps to invite your partner as 3rd Party Administrator: <ol><li> Login to Ruckus <a href="https://ruckus.cloud/" target="_blank">Cloud Portal</a> </li><li> On the Home Page, click on Administration </li><li> Click the Administrators tab. The Administrators page appears and displays a list of local Administrators and Delegated Admins (Known as 3rd Party administrators or Ruckus Partners) whom you have authorized to manage your account </li><li> Click on the Delegated Admins tab, and then click on Add Delegated Admin. The Invite 3rd Party Administrator screen appears <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000nIT&feoid=00N50000002Cf3M&refid=0EMPH000007cmxF"></img> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000nIT&feoid=00N50000002Cf3M&refid=0EMPH000007cmxG"></img> </li><li> Enter your Partner's email address </li><li> Click on Add Administrator Ruckus Cloud will check its support account database for the email address that you entered. >> An authorized Ruckus partner who is registered using the email address you entered will receive the invitation. After the Ruckus partner accepts your invitation, the partner will have administrative access to your Ruckus Cloud account. You will also receive a notification from Ruckus Cloud when the partner accepts your invitation. If the Ruckus partner does not have Ruckus Cloud account, a Prime Admin account should be created using the entered email address to allow the invitation process to continue. Note: The End users can now invite up to 10 Partner's to their Cloud Account. </li><li> You have completed inviting a 3rd party administrator to manage your Ruckus Cloud account </li></ol>

The article has got step by step instructions to invite the partner as 3rd Party Administrator on the Ruckus Cloud portal

2024-07-12T05:17:02-0700 2024-07-16T06:00:07-0700 https://support.ruckuswireless.com/articles/000005720 2021-03-05T11:23:11-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4526 knowledge_article_4526 2016-05-09T16:23:27-0700 000005720 Validated (External) Public Unleashed;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware;Installation;Known issues and workarounds Configuration, Firmware, Installation, Known Issues and Workarounds, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor Can I convert a Standalone or SZ/ZD managed AP to become an Unleashed AP? Ruckus recommends purchasing Unleashed (9U1) ordering part number APs, if you want to use Unleashed features/functions. All APs requiring RMA will be replaced by matching original SKU products. But for "evaluation purposes", CU can follow the steps below to apply Unleashed to a Standalone/Solo image AP. 1. Obtain the correct unleashed image onto your PC for your AP model at https://support.ruckuswireless.com/software?filter=82#firmwares 2. Connect PC and AP - You will need to power the AP externally via a power adapter or via an inline power injector and connect AP to PC via Ethernet cable, or with a PoE switch powering the AP and only your PC device connected. 3. Factory default the AP by holding in the reset button for 10 seconds. This will reset the APs IP address to 192.168.0.1. 4. Configure a 192.168.0.x (other than .1) on the PC Ethernet interface: - Go to the start button on your PC and click on control panel. - Click on Network and Internet and then Network and Sharing center. - On the next screen click on "Change Adapter Settings". - On the next screen Right mouse click on the Ethernet adapter and then choose "Properties". - On the next window scroll down to "Internet Protocol version 4(TCP/IPv4)" and double-click, to bring up the next window. - Change the setting from "Obtain an IP address automatically" to "Use the following IP address". - In the next line down enter the IP address 192.168.0.20 and use a subnet mask of 255.255.255.0, and click OK. (Remember to change the auto IP address setting back when done working with the AP). 5. If AP is powered up you should be able to point a browser to 192.168.0.1 and get a connection. In case you could not get access to the UI, please SSH into the AP CLI using its default IP and enable HTTP/HTTPS rkscli#set http enable rkscli#set https enable 6. Log in using the default username and password (super/sp-admin). 7. Navigate to the Maintenence::Upgrade page, 8. Click on the "Local" Upgrade Method, and browse to where you have the 200.x.x.x image loaded and then click the "Upgrade" button. 9. Once AP is upgraded to the Unleashed firmware. Perform a factory reset to clean RPM Keys of Solo firmware version from the Access point and reboot the AP. The AP will then load code and after rebooting you should next see the Unleashed screen. Follow the instructions for setting up Unleashed network.

Steps needed to convert a Standalone or SZ/ZD managed AP to Unleashed Firmware

2021-03-05T11:23:11-0800 2024-07-14T19:14:08-0700 https://support.ruckuswireless.com/articles/000006019 2020-08-14T12:43:52-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2417 knowledge_article_2417 2016-08-31T12:01:04-0700 000006019 Validated (External) Public Sz144;Sz300;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Scg200;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration Configuration, SZ144, SZ300, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SCG200, SZ100 What are the default IPs and access method for Ruckus products? - Default IP address for SCG200/SZ300 - http://192.168.2.2:8080 - Default IP address for SZ-100/SZ-144 - https://192.168.2.2:8443 - Default IP address for p300 - https://192.168.2.1 (or 192.168.2.254 for non-root bridges) - Default IP address for ZD - 192.168.0.2 - Default IP address for AP - 192.168.0.1 - For Unleashed As soon as the Unleashed AP is powered on and connected to the local network, it boots up and begins broadcasting a temporary unencrypted ESSID named “Configure.Me-[xxxxxx]”from the 2.4 GHz radio only. Using your client’s WiFi configuration settings, select and associate to the “Configure.Me-[xxxxxx]” SSID. Launch a web browser and enter the following into the browser’s URL bar: unleashed.ruckuswireless.com, and press Enter.

Default-IP-address for SZ/SCG, ZD, AP, P300

2020-08-14T12:43:52-0700 2024-07-14T11:30:58-0700 https://support.ruckuswireless.com/articles/000011009 2020-12-23T10:06:44-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4469 knowledge_article_4469 2020-10-21T05:35:21-0700 000011009 Validated (External) Public Unleashed;Mobile apps;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;RUCKUS One Mobile Apps;Ruckus Cloud Mobile Apps Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, Unleashed, Mobile Apps How to fix Recover.Me? The options provided on the Troubleshooting Steps should fix the issue with the Recover.Me

How to deal with Recover.Me when the client only sees this on the WiFi connections. The Configure.Me or the current SSID disappears

2020-12-23T10:06:44-0800 2024-07-14T06:13:16-0700 https://support.ruckuswireless.com/articles/000006286 2024-07-11T04:48:23-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5335 knowledge_article_5335 2017-02-27T11:12:54-0800 000006286 Validated (External) Public Ruckus cloud wifi Installation;Troubleshooting;Known issues and workarounds;Registration Installation, Troubleshooting, Known Issues and Workarounds, Registration, Ruckus Cloud WiFi Why aren't the subscribed AP licenses showing in GUI? Why aren't my subscription showing in GUI? RUCKUS One subscriptions are now 100% device agnostic. Customer can purchase subscriptions for a time interval to use the RUCKUS One platform. You can now purchase, activate and view subscription in RUCKUS One Portal. To View the Subscription details, please follow the below steps: <ol><li>Log in to the RUCKUS One Cloud portal, click on Administration >> Subscription >> Refresh.</li></ol> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mmD&feoid=00N50000002Cf3M&refid=0EMPH000007rijd"></img> Clicking Manage Subscription will route you to https://support.ruckuswireless.com/cloud_subscriptions, please make sure the licenses you purchased are activate and then click Refresh. Please refer the KBA article <a href="https://support.ruckuswireless.com/articles/000012425" target="_blank" title="https://support.ruckuswireless.com/articles/000012425">000012425</a> for steps on how to activate Ruckus Cloud Licenses. If you are still unable to view the subscription licenses please try the above steps again, after 15-20 minutes from the license activation time. If the issue still persist, please contact Ruckus Support at https://support.ruckuswireless.com/contact-us Note: Please enable Ruckus Support (under Administration >> Settings)

Article describes about the steps which are to be performed when the licenses are not available on the Ruckus Cloud UI

2024-07-11T04:48:23-0700 2024-07-12T04:00:07-0700 https://support.ruckuswireless.com/articles/000003971 2024-07-11T08:13:06-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5336 knowledge_article_5336 2015-02-03T13:21:47-0800 000003971 Validated (External) Public Zonedirector;Smartcell gateway;Ruckus support services;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Support license activation Configuration, Support License Activation, ZoneDirector, SmartCell Gateway, Ruckus Support Services What type of licensing does my controller use? Below are the types of licensing available for Ruckus controllers: <h4>1. Traditional Licensing</h4> <ul><li>Description: Device-based licenses.</li><li>Applicable Controllers: ZoneDirector (ZD) and SmartCell Gateway (SCG) with version 3.1 or earlier.</li><li>AP Granularity: Check the specific licensing details for each model.</li><li>License Transferability: Varies by controller model.</li><li>Maximum APs Managed: Varies by controller model.</li></ul> <h4>2. Smart Licensing</h4> <ul><li>Description: LiMAN / Cloud-based, transferable licenses.</li><li>Applicable Controllers: SmartZone (SZ) and virtual SmartZone (vSZ/vSCG).</li><li>Management: Managed via the LiMAN (Smart Licensing Manager) accessed through the <a href="https://support.ruckuswireless.com/liman" target="_new">Ruckus LiMAN page</a>.</li><li>AP Granularity: Check the specific licensing details for each model.</li><li>License Transferability: Transferable.</li><li>Maximum APs Managed: Varies by controller model.</li></ul> <h3>Licensing Comparison Table</h3> <table height="463" style="" width="584"><colgroup><col style="width: 86pt;" width="115"></col><col style="width: 81pt;" width="108"></col><col style="width: 99pt;" width="132"></col><col style="width: 86pt;" width="114"></col><col style="width: 70pt;" width="93"></col></colgroup><tbody><tr><td colspan="1" rowspan="1" class="xl68" style="border-bottom: 1px solid black; height: 59px; width: 115px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #ed7d31; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Controller Model </td><td colspan="1" rowspan="1" class="xl68" style="border-bottom: 1px solid black; width: 108px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #ed7d31; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">Granular to 1 AP</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; width: 132px; text-align: center; white-space: normal; padding-top: 1px; padding-right: 1px; padding-left: 1px; background-color: #ed7d31; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">License Transferable between the controllers</td><td colspan="1" rowspan="1" class="xl68" style="border-bottom: 1px solid black; width: 114px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #ed7d31; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">Licensing Method</td><td colspan="1" rowspan="1" class="xl68" style="border-bottom: 1px solid black; width: 93px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #ed7d31; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">Max AP Count</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; height: 19px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">ZD1100</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">No</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Traditional</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">50</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; height: 19px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">ZD1200</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Traditional</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">150</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; height: 19px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">ZD3000</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">No</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Traditional</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">500</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; height: 19px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">ZD5000</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">No</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Traditional</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">1000</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; height: 19px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SCG 200 <= 3.1</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">No</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">No</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Traditional</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">10000</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; height: 19px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SCG 200 => 3.2</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Smart Licensing</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">10000</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; height: 19px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">vSZ </td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Smart Licensing</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">10000</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; height: 19px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SZ-104/124</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Smart Licensing</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">1024</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; height: 19px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SZ-144</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Smart Licensing</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">2000</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; height: 19px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SZ-300</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">Smart Licensing</td><td colspan="1" rowspan="1" class="xl67" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #fce4d6; border-top: none; border-right: 1px solid black; border-left: none;">10000</td></tr><tr><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; height: 19px; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">SCI</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Yes</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">Smart Licensing</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; text-align: center; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #f8cbad; border-top: none; border-right: 1px solid black; border-left: none;">1000000</td></tr></tbody></table> Note: The exact AP granularity and maximum number of APs managed depend on the specific model and configuration of the controller. For detailed information, refer to the product documentation or contact Ruckus support. <h3>Conclusion</h3> Understanding the type of licensing your Ruckus wireless controller uses is essential for managing your network effectively. By identifying your controller model and referring to the licensing details provided, you can determine whether your controller uses traditional or smart licensing. For further assistance or detailed information, please contact Ruckus customer support at <a href="https://support.ruckuswireless.com/contact-us" target="_new">Ruckus Customer Support</a>.

This article describes the types of licensing models available for Ruckus wireless controllers and explains how to determine which licensing model your controller uses.

2024-07-11T08:13:06-0700 2024-07-12T04:00:06-0700 https://support.ruckuswireless.com/articles/000006141 2024-07-11T09:31:35-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4687 knowledge_article_4687 2016-11-17T15:41:15-0800 000006141 Validated (External) Public Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Ruckus support services;Virtual smartcell gateway;Sz100;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartZone 100-D (SZ100-D) Support license activation;Registration Support License Activation, Registration, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, Ruckus Support Services, virtual SmartCell Gateway, SZ100 What should you do when you encounter the "You can not activate this code. Your account does not match the sales order." error? If the login email and the Sales Order are registered to two different accounts, please contact Ruckus Support for assistance. You can reach us via the <a href="https://support.ruckuswireless.com/contact-us" target="_new">Ruckus Support Contact</a> page.

This article addresses the error encountered while trying to activate support or license activation codes in the Ruckus Support portal: "You can not activate this code. Your account does not match the sales order."

2024-07-11T09:31:35-0700 2024-07-12T04:00:06-0700 https://support.ruckuswireless.com/articles/000001321 2024-07-11T02:27:04-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5334 knowledge_article_5334 2012-10-22T16:56:11-0700 000001321 Validated (External) Public Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Ruckus support services;Smartcell insight;Smart wireless services;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) Website issues;Support license activation;Registration Website Issues, Support License Activation, Registration, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, Ruckus Support Services, SmartCell Insight, Smart Wireless Services What support programs does Ruckus offer? Ruckus offers the following WatchDog support programs, designed to meet the needs of Enterprise, Education, Hospitality, and many other customers. 801/821/S01/S21: Watchdog End-User Premium Support WatchDog End-User Premium Support provides the safety net to ensure your network availability remains high and outages are minimized. Ruckus will answer your questions, assist with product configuration, diagnose issues, help identify interoperability problems with other products, and facilitate repair or replacement of defective units. Key Premium Support attributes include: <ul><li>24X7 technical assistance by Ruckus Support Representatives</li><li>Ruckus case tracking, management and escalation processes apply</li><li>Hardware Advance Replacement for defective products with overnight delivery where available. Applies to physical Ruckus controllers only</li><li>Software updates and upgrades</li><li>Full knowledge base access</li></ul> Access to technical assistance is available via the Ruckus support portal, phone and chat (<a href="https://support.ruckuswireless.com/contact-us" target="_blank">Contact US</a>). This includes both service and RMA requests. Additionally, the support portal provides a full knowledge base to assist with your service request, forums to discuss items with your peers, software downloads, case and RMA history, and a view of your registered products. 802/822/S02/S22: WatchDog Partner Premium Support WatchDog Partner Premium Support includes most of the key features of End User Premium Support. There are three primary differences: <ul><li>The Partner is the only contact point for the End customer</li><li>The Partner is responsible for managing the request through resolution</li><li>Partners may offer additional services beyond the normal WatchDog program</li></ul> Ruckus provides the following services to the Partner as needed <ul><li>24X7 technical assistance by Ruckus Support Representative</li><li>Ruckus case tracking, management and escalation processes are invoked</li><li>Hardware Advanced Replacement for defective products with overnight delivery where available, shipped directly to the end customer. This is only available for physical Ruckus controllers.</li><li>Software updates and upgrades directly available to the end customer via the support portal (Only if the PO has end customer name on it)</li><li>Full knowledge base access for the partner and end customer</li></ul> 803: WatchDog Hardware Advance Replacement and Redundancy SKUs Hardware Advance Replacement (AR) support allows you to maximize network uptime by ensuring rapid delivery of replacement hardware in the event of a hardware failure. This support can be purchased on the Backup controller and on all the controller connected AP's 806 (End User) and 807 (Partner): Standalone AP Support These support offers are available for Access Points that are not connected to / managed by a controller. The support offers: <ul><li>24X7 technical assistance by Ruckus Support Representative</li><li>Ruckus Support Web access, phone and chat support.</li><li>Software updates and upgrades, as available</li><li>Advance Replacement on Access Points</li></ul> 806 ULAP (End user (No AR)): Unleashed AP Support End User Unleashed Support delivers the following to ensure the reliability and functionality of Unleashed networks: <ul><li>24X7 technical assistance by Ruckus Support Representative</li><li>Software updates and upgrades, as available</li><li>Support web access to content and tools</li><li>This support does not offer Advance Hardware Replacement on Unleashed APs</li></ul> 808/828/S08/S28 : Hospitality Support Hospitality Support includes most of the key features of End User Premium Support. There are three primary differences: <ul><li>The Partner is the only contact point for the End customer</li><li>The Partner is responsible for managing the request through resolution</li><li>Partners may offer additional services beyond the normal WatchDog program</li></ul> Ruckus provides the following services to the Partner as needed <ul><li>24X7 technical assistance by Ruckus Support Representative</li><li>Ruckus case tracking, management and escalation processes are invoked</li><li>Hardware Advanced Replacement for defective products with overnight delivery available, shipped directly to the end customer. This is only available for physical Ruckus controller/devices depending on the SKU purchased (does not include HSP Spt for UNL "no Adv" rep - 808-ULAP-XXXX)</li><li>Software updates and upgrades directly available to the end customer via the support portal (Only if the PO has end customer name on it)</li><li>Full knowledge base access for the partner and end customer</li></ul> Please refer to the below link for more information on Support Programs, https://support.ruckuswireless.com/programs-watchdog

Describes the types of Support Contracts available for Ruckus controllers and APs

2024-07-11T02:27:04-0700 2024-07-11T10:00:08-0700 https://support.ruckuswireless.com/articles/000014243 2024-07-10T16:59:30-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5330 knowledge_article_5330 2023-09-04T02:07:41-0700 000014243 Validated (External) Public Knowledge;Cloud services Knowledge base;Support license activation Knowledge Base, Support License Activation, Knowledge, Cloud Services 1. What is a Ruckus One license? A Ruckus One license is used to enable features and functionality in the RUCKUS One cloud-based management platfo <div class="WordSection1"> Activating the License for a RUCKUS Managed Service Provider Complete the following steps to activate the Managed Service Provider (MSP) license. <ol><li style="margin-top: 9px; margin-right: 69px; margin-left: 56px;"> Open the SPA email message that you received from RUCKUS, and verify the End User Account information. Only a registered user can complete the activation process. </li></ol> </div> <div class="WordSection2"> <ol start="2"><li style="margin-top: 4px; margin-left: 56px;"> Click the Activation Code link in the email message. </li></ol> FIGURE 25 Verifying End User Account Information <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mr3&feoid=00N50000002Cf3M&refid=0EMHt000005bsjN"></img> You are redirected to the RUCKUS Support website " <a href="https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com</a>". If you are not logged in to the website, the RUCKUS Single Sign-on page is displayed. </div> <div class="WordSection3"> <ol start="3"><li style="margin-top: 4px; margin-left: 56px;"> Log in to the RUCKUS Support portal using your credentials. </li></ol> NOTE Ensure you log in as a valid user in the End User Account. Only valid users are authorized to activate the licenses. FIGURE 26 Logging In to the Support Portal <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mr3&feoid=00N50000002Cf3M&refid=0EMHt000005bsjS"></img> NOTE If you are unable to activate the license due to account mismatch error, contact <a href="https://support.ruckuswireless.com/contact-us" target="_blank">RUCKUS Support team</a>. After a successful login, the Activating Your Support Contract & License Code page is displayed. </div> <div class="WordSection4"> FIGURE 27 Code Validation from the Activating Your Support Contract & License Code Page <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mr3&feoid=00N50000002Cf3M&refid=0EMHt000005bsjX"></img> Because you have initiated the activation process by clicking the Activation Code link in the email message, the code is populated by default. If you have initiated the activation process using the Activate Purchase option on the RUCKUS Support website " <a href="https://support.ruckuswireless.com/" target="_blank">https://</a> <a href="https://support.ruckuswireless.com/" target="_blank">support.ruckuswireless.com</a>", you must manually enter the activation code received in the SPA mail. FIGURE 28 License Activation: Manual Code Entry <img alt="User-added image" height="164" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mr3&feoid=00N50000002Cf3M&refid=0EMHt000005bsjc" width="500"></img> <ol start="4"><li style="margin-top: 10px; margin-left: 56px;"> Click Validate. </li></ol> After the successful validation of the license code, you can review the purchase order and user account details. </div> <div class="WordSection5"> <ol start="5"><li style="margin-top: 4px; margin-left: 56px;"> Accept the terms and conditions, and click Activate Purchase. </li></ol> The following page is displayed if you are activating the line item in the activation code for the first time. For subsequent license activations, this step is skipped. FIGURE 29 Accepting Terms and Conditions </div> <div class="WordSection6"> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mr3&feoid=00N50000002Cf3M&refid=0EMHt000005bsjh"></img> <ol start="6"><li style="margin-top: 4px; margin-left: 56px;"> Click the license entry for RUCKUS One (CLD-PROF-APSW-MSP1) to activate the license. </li></ol> NOTE A single Activation Code can carry multiple assets that are part of the original purchase order and sales order. Therefore, there may be multiple line items within one Activation Code. Each line item must be activated. For example, if you have Cloud Wi-Fi, Cloud Switching, and RUCKUS One purchased under the same purchase order, you will see three entries, and each must be activated separately. FIGURE 30 Activating a RUCKUS One Professional License for a RUCKUS MSP <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mr3&feoid=00N50000002Cf3M&refid=0EMHt000005bsjm"></img> A managing network downtime message is displayed. Click Proceed. FIGURE 31 Managing Network Downtime Message <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mr3&feoid=00N50000002Cf3M&refid=0EMHt000005bsjr"></img> The Entitling Your Asset For Support page is displayed. </div> <div class="WordSection7"> <ol start="7"><li style="margin-top: 4px; margin-left: 56px;"> In the Entitling Your Asset For Support page, select the following options: <ul><li style="margin-top: 7px; margin-right: 89px;"> The region where you want to maintain your RUCKUS One data. Currently, the supported regions are Asia, Europe, and North America. </li><li style="margin-top: 4px; margin-right: 52px;"> The subscription start date. You can select any date within a 180-day activation grace period as the subscription start date. The dates beyond the activation grace period are disabled in the calendar. </li></ul> </li></ol> NOTE Once the start date is selected, the subscription end date is automatically calculated by adding the purchased subscription duration to the selected start date; thereby ensuring the full term of the subscription to the customer. <ul><li style="list-style-type: none;"> <ul><li style="margin-left: 40px;"> The number of licenses to be allocated to switches. </li></ul> </li></ul> NOTE The remaining licenses are automatically allotted to APs. FIGURE 32 Entitling Assets <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mr3&feoid=00N50000002Cf3M&refid=0EMHt000005bsjw"></img> 8. Click Submit Activation to activate the license. A confirmation dialog box is displayed. </div> FIGURE 33 Confirmation Dialog Box <div class="WordSection9"> <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mr3&feoid=00N50000002Cf3M&refid=0EMHt000005bsk1"></img> <ol start="9"><li style="margin-top: 4px; margin-left: 56px;"> Click Continue with Activation to proceed with the selected options. </li></ol> If the asset is successfully activated, a green banner with a confirmation message "Support added to serial number" is displayed. FIGURE 34 Activation Confirmation of a Professional License for a RUCKUS MSP <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mr3&feoid=00N50000002Cf3M&refid=0EMHt000005bsk6"></img> You can click the activated product code to view the activation and subscription details. A managing network downtime message is displayed. Click Proceed. FIGURE 35 Managing Network Downtime Message <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mr3&feoid=00N50000002Cf3M&refid=0EMHt000005bskB"></img> The Professional license subscription details for the RUCKUS MSP are displayed. </div> FIGURE 36 Professional License Subscription Details for a RUCKUS MSP <img alt="User-added image" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mr3&feoid=00N50000002Cf3M&refid=0EMHt000005bskG"></img>

This article provides instructions on how to activate RUCKUS One - Managed Service Provider (MSP) License. You can activate licenses through the RUCKUS Support Portal.

2024-07-10T16:59:30-0700 2024-07-11T04:00:07-0700 https://support.ruckuswireless.com/articles/000003436 2024-07-10T16:59:28-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5331 knowledge_article_5331 2014-09-24T09:26:03-0700 000003436 Validated (External) Public Smartcell gateway;Ruckus support services;Smartcell insight;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) Installation;Support license activation;Registration Installation, Support License Activation, Registration, SmartCell Gateway, Ruckus Support Services, SmartCell Insight How to activate RTU and AP Licenses on vSCG/vSZ, vSPOT, SCI? Steps to activate RTU/ Right To Use (Instance) license for your vSPoT/vSCG/SCI deployment: <ul><li>Make sure you have Virtual controller serial number handy.</li><li>Open the Support Purchase Acknowledgement (SPA) email you have received from Ruckus/Disti/VAR for your order</li><li>Login to Ruckus support portal: https://support.ruckuswireless.com</li><li>Click the activation code in the email to activate.</li></ul> <img alt="User-added image" height="629" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000muH&feoid=00N50000002Cf3M&refid=0EMPH000007q18s" width="500"></img> <ul><li>Upon clicking the activation could, you will be redirected to Ruckus Support portal to complete the activation.</li><li>Review the account details and proceed to Accept Terms and Conditions and click on "Activate Purchase</li></ul> <img alt="User-added image" height="316" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000muH&feoid=00N50000002Cf3M&refid=0EMPH000007q7iv" width="500"></img> <ul><li>Enter the serial number of the controller and click on "Validate Serial Number</li></ul> Note: SN is case sensitive <img alt="User-added image" height="374" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000muH&feoid=00N50000002Cf3M&refid=0EMPH000007q85W" width="500"></img> <ul><li>Select the device model from the dropdown menu and click on Register Device & Bind To Right To Use</li></ul> <img alt="User-added image" height="218" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000muH&feoid=00N50000002Cf3M&refid=0EMPH000007q9hV" width="500"></img> <ul><li>You will get a confirmation about RTU activation and the SN will start reflecting in End Users LiMan dashboard.</li></ul> <img alt="User-added image" height="161" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000muH&feoid=00N50000002Cf3M&refid=0EMPH000007pzLb" width="500"></img> Steps to activate AP capacity (Or) Switch capacity license for your vSPoT/vSCG/SCI deployment: <ul><li>Open the Support Purchase Acknowledgement (SPA) email you have received from Ruckus/Disti/VAR for your order</li><li>Login to Ruckus support portal: https://support.ruckuswireless.com</li><li>Click the activation code in the email to activate.</li></ul> <img alt="User-added image" height="612" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000muH&feoid=00N50000002Cf3M&refid=0EMPH000007q3Qp" width="500"></img> <ul><li>Upon clicking the activation could, you will be redirected to Ruckus Support portal to complete the activation.</li><li>Review the account details and proceed to Accept Terms and Conditions and click on "Activate Purchase</li></ul> <img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000muH&feoid=00N50000002Cf3M&refid=0EMPH000007qDzd"></img> <ul><li>You will get a confirmation about license activation and these will now be available in End Users LiMan "License Pool",</li></ul> <img alt="User-added image" height="150" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000muH&feoid=00N50000002Cf3M&refid=0EMPH000007q1yV" width="500"></img> Note: Unlike your RTU license activation, here you will not be prompted to enter controller SN. Licenses for Virtual controllers are activated against account (End User account in the Sales Order) <ul><li>?Customer can now manage/add these license to any virtual controller registered in LiMan "Smart Device"</li></ul> <img alt="User-added image" height="239" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000muH&feoid=00N50000002Cf3M&refid=0EMPH000007qDQ9" width="500"></img> Looking for instruction to add the activated AP licenses on the controller? - If yes, refer article 000006071.

How to activate RTU and AP Licenses on vSCG/vSZ, vSPOT, SCI

2024-07-10T16:59:28-0700 2024-07-11T04:00:07-0700 https://support.ruckuswireless.com/articles/000008929 2024-07-10T16:59:05-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5332 knowledge_article_5332 2019-03-20T09:26:04-0700 000008929 Validated (External) Public Ruckus support services Case management Case Management, Ruckus Support Services What is Closed No Contact status on a case ? If you would like to re-open the case, you can do so within the 24 hours from the time the case is closed, by contacting <a href="https://support.ruckuswireless.com/contact-us" target="_blank">Ruckus </a><a href="https://support.ruckuswireless.com/contact-us" target="_blank">Support.</a> After the 24 hours, you can by mentioning the closed case number for the reference, to help us understand the issue and assist efficiently. While creating a new <a href="https://support.ruckuswireless.com/contact-us" target="_blank">Open a New Case</a>, please provide us the below information: <ol><li>Serial Number of the RUCKUS product (Also the controller's serial number if the AP is connected to a controller) or the Login ID if the issue is related to RUCKUS One</li><li>Firmware Version with build</li><li>Phone Number</li><li>Preferred mode of contact</li><li>Business E-mail Address</li><li>Best time to contact with the Time Zone</li></ol>

The article explains the case status "Closed No Contact"

2024-07-10T16:59:05-0700 2024-07-11T04:00:07-0700 https://support.ruckuswireless.com/articles/000003942 2021-05-06T00:54:37-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1600 knowledge_article_1600 2015-01-19T07:49:01-0800 000003942 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Performance Performance, ZoneFlex Indoor, ZoneFlex Outdoor Why should I still care about BeamFlex since 802.11ac includes Beamforming? Beamforming in 802.11ac is a radio based technology. Whereas BeamFlex engages adaptive antennas so this is an antenna based technology. What Ruckus does is use beamforming (which is radio based) and combines it with adaptive antennas (BeamFlex which antenna based) to maximize the performance. Other advantages include: 1. BeamFlex is not client dependent. It can work with any 802.11 standard client. Whereas beamforming requires a 802.11ac client. Just to add, not all 802.11ac standard clients come with TxBF built-in. 2. Spatial multiplexing with TxBF will use one of its chains just to send same data. So TxBF will waste one of two chains just to provide redundancy. 3. BeamFlex is more accurate in reaching the destination. This will cause less interference to neighbors and also maximize performance.

802.11ac standard includes beamforming technology. This does the same thing as the BeamFlex, which helps to focus signal towards the destination giving additional gain. Keeping this basic functionality aside, there are few things that BeamFlex can do which TxBF can't. This articles lists some of those advantages.

2021-05-06T00:54:37-0700 2024-07-11T00:12:31-0700 https://support.ruckuswireless.com/articles/000008658 2024-07-10T11:08:28-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3461 knowledge_article_3461 2018-12-03T10:29:15-0800 000008658 Validated (External) Public Ruckus icx switches System network management;Support license activation System Network Management, Support License Activation, Ruckus ICX Switches How can I transfer the licenses from one switch to the other? If the licenses are activated on an incorrect switch or if you are looking to transfer the licenses from one switch to the other, please contact<a href="https://support.ruckuswireless.com/contact-us" target="_blank"> Ruckus Support</a> team with the below information: LID or SN of the switch from which the licenses need to be released LID or SN of the switch to which the licenses need to be added/transferred Reason for the licenses transfer Note: Part of the licenses cannot be transferred between the switches. Example: If you are looking to transfer licenses from switch A to switch B, and if there are 2x10 and 8x10 licenses on switch A, both 2x10 and 8x10 licenses gets transferred over to switch B.

Articles describes about what needs to be done in order to transfer the licenses from one switch to the other.

2024-07-10T11:08:28-0700 2024-07-10T22:00:11-0700 https://support.ruckuswireless.com/articles/000008284 2024-07-10T11:52:55-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5329 knowledge_article_5329 2018-09-14T14:43:59-0700 000008284 Validated (External) Public Ruckus support services Website services;Support license activation;Registration Website Services, Support License Activation, Registration, Ruckus Support Services How to activate support/service contact? Follow the below steps to activate the support you purchased on your products Have the product SN’s ready <ul><li> Open the Support Purchase Acknowledgement (SPA) email you have received from Ruckus/Disti/VAR for your order <img alt="User-added image" height="798" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mcX&feoid=00N50000002Cf3M&refid=0EM50000000lhp3" width="500"></img> </li><li style="color: black;"> Login to Ruckus support portal: https://support.ruckuswireless.com </li><li style="color: black;"> Click on Activate Purchase <img alt="User-added image" height="211" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mcX&feoid=00N50000002Cf3M&refid=0EM50000000lhot" width="500"></img> </li><li style="color: black;"> Enter the activation code "SUP-xxxxxxx-AAA-BBB-CCC" in the box <img alt="User-added image" height="186" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mcX&feoid=00N50000002Cf3M&refid=0EM50000000lhoy" width="500"></img> </li><li style="color: black;"> Review the order, accept the terms and conditions and click on Activate Purchase <img alt="User-added image" height="243" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mcX&feoid=00N50000002Cf3M&refid=0EM50000000lhp8" width="500"></img> </li><li style="color: black;"> Click on the Hyper link for the product code. This is a very important step, as this binds the product SN to the support contract <img alt="User-added image" height="196" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mcX&feoid=00N50000002Cf3M&refid=0EM50000000lhpI" width="500"></img> </li><li style="color: black;"> Enter the product SN and click on Validate Serial Number <img alt="User-added image" height="298" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mcX&feoid=00N50000002Cf3M&refid=0EM50000000lhpD" width="500"></img> </li></ul> Note: If the support purchased is on 2 or more quantity, you need to go back, click on the hyper link and repeat the process <img alt="User-added image" height="138" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mcX&feoid=00N50000002Cf3M&refid=0EM50000000lhpN" width="500"></img> <ul><li style="color: black;"> And the support is activated <img alt="User-added image" height="190" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mcX&feoid=00N50000002Cf3M&refid=0EM50000000lhpX" width="500"></img> </li></ul>

Activating the newly purchased support contract

2024-07-10T11:52:55-0700 2024-07-10T22:00:11-0700 https://support.ruckuswireless.com/articles/000008664 2024-07-10T13:06:10-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3464 knowledge_article_3464 2018-12-03T14:14:25-0800 000008664 Validated (External) Public Ruckus cloud wifi System network management;Support license activation System Network Management, Support License Activation, Ruckus Cloud WiFi Where can I view the Subscriptions Information on the Ruckus Cloud? RUCKUS One subscriptions are now 100% device agnostic. Customer can purchase subscriptions for a time interval to use the RUCKUS One platform. To View the Subscription details, please follow the below steps: <ol><li>Log in to the RUCKUS One Cloud portal.</li><li>RUCKUS One dashboard is displayed, click on Administration >> Subscription</li><li>In the Subscriptions tab, you can view the following subscription details:</li></ol> <ul><li style="margin-left: 40px;">Subscription Utilization: The network device utilizing subscription.</li><li style="margin-left: 40px;">Part Number: The part number of the purchased subscription</li><li style="margin-left: 40px;">Device Count: The number of licenses associated with the license subscription</li><li style="margin-left: 40px;">Starting Date: The starting date of the subscription</li><li style="margin-left: 40px;">Expiration Date: The date the subscription expires</li><li style="margin-left: 40px;">Time Left: The time remaining before the subscription expires</li><li style="margin-left: 40px;">Status: The status of the license subscription (active or inactive)</li><li style="margin-left: 40px;">Current Subscription Tier: Essentials/Professional </li></ul> 4. (Optional) Click Manage Subscriptions to go to the Subscription web page. 5. Click Refresh to view any new licenses added in the Subscriptions tab (for example, when additional licenses are activated). NOTE : Trial Mode subscription is valid for 30 days from the date of activation. You can upgrade from Trial Mode to Paid Subscription. There is no grace period in Trail Mode. Please refer to below article to view REC/MSP Licenses : 000014244 - Viewing the Licenses for RUCKUS End Customers in the RUCKUS One Cloud Portal 000014245 - Viewing the Licenses for MSP Customers in the RUCKUS One Cloud Portal

Article explains about how to read the Subscriptions page information on the Ruckus cloud

2024-07-10T13:06:10-0700 2024-07-10T22:00:10-0700 https://support.ruckuswireless.com/articles/000012275 2024-07-10T10:56:30-0700 monthly 0.8 admin,premium knowledge_article_4846 knowledge_article_4846 2022-06-27T11:15:21-0700 000012275 Validated (External) Premium How to reset password for Partners Portal In order to reset password for Ruckus Partners Portal, click on below link - <a href="https://partners.ruckuswireless.com/forgot-password" target="_blank" title="https://partners.ruckuswireless.com/forgot-password">https://partners.ruckuswireless.com/forgot-password</a> Alternatively, you can send an email to ruckuschannel@commscope.com For further assistance, you can reach out to Ruckus Support on below link - https://support.ruckuswireless.com/contact-us

Follow this article to reset your Ruckus Partners Portal login password

2024-07-10T10:56:30-0700 2024-07-10T18:00:08-0700 https://support.ruckuswireless.com/articles/000004883 2024-07-09T14:17:08-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5327 knowledge_article_5327 2015-07-21T04:14:46-0700 000004883 Validated (External) Public Virtual smartcell gateway Installation;Website services Installation, Website Services, virtual SmartCell Gateway How to create vSCG, SCI & vSPOT,vRIoT RMA on LiMAN Portal? Whenever there is a change in the UUID of a VM instance OR if the existing VM Snapshot backup is installed on a different VM, a new SN gets generated. So, it requires initiating an RMA case to transfer all the licenses, support, and RTU from the old instance SN to the new instance SN. Please follow the below steps to perform RMA on the virtual SN. <ol><li> Login to the Ruckus support portal: <a href="https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com</a> </li><li> Click on LiMAN <img alt="User-added image" height="135" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mFx&feoid=00N50000002Cf3M&refid=0EMPH000007leKa" width="500"></img> </li><li style=""> On the next screen, you will find the instructions and also all the registered LiMAN serial numbers that are under your account <img alt="User-added image" height="312" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mFx&feoid=00N50000002Cf3M&refid=0EM50000000liIK" width="500"></img> </li><li> Find the correct SN which needs to be RMA’d on the LiMan page. </li><li> Click on the RMA icon which is next to SN, under the tab Action <img alt="User-added image" height="213" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mFx&feoid=00N50000002Cf3M&refid=0EM2J0000038nBu" width="500"></img> </li><li style=""> It takes you to the RMA creation page <img alt="User-added image" height="285" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mFx&feoid=00N50000002Cf3M&refid=0EM2J0000038nC9" width="500"></img> </li><li style=""> Select RMA of Virtual Appliances (vSZ/vSCG/vSPoT/SCI/IoT) </li><li> Enter the new SN in the New Serial Number box.? Note: SN is case sensitive, enter what you see on the GUI <img alt="User-added image" height="281" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mFx&feoid=00N50000002Cf3M&refid=0EM2J0000038nCO" width="500"></img> Before performing RMA, please do read the note which is mentioned in Red and just above the Submit button Note: Once this step has been completed, the old instance SN will lose its entire license and may cease operation </li><li> Click on Submit Next page we see RMA Detail, Case ID, and RMA Line Items with defective and replaced serial number <img alt="User-added image" height="310" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000mFx&feoid=00N50000002Cf3M&refid=0EM2J0000038nE0" width="500"></img> This creates an RMA case to transfer all the entitlements from the old SN to the new SN. In case, if you find any discrepancies with the licenses, RTU, and/or support transfer, please get in touch with the support team (https://support.ruckuswireless.com/contact-us) by referring to the RMA number. </li><li> RMA case results in the addition of new SN and deletion of old SN from the LiMAN portal. 11. vRIoT-RMA from 1.8.2 to 2.0.0 will update only the RTU/Core license. 12. RTU activation email will be sent with the new RTU and the code will be mapped to the new SN automatically. RTU activation email as confirmation of RTU transfer. 13. Old SN will be deleted from the LiMan portal. Mapped licenses will be added back to the pool. 14. Customer should manually map the licenses to the new SN from the pool. </li></ol>

Virtual RMA is used to transfer the RTU, Licenses and Support from old instance SN to new instance SN

2024-07-09T14:17:08-0700 2024-07-10T10:00:08-0700 https://support.ruckuswireless.com/articles/000003423 2020-08-18T03:53:19-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4348 knowledge_article_4348 2014-10-22T19:21:25-0700 000003423 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector Why does aRuckus AP fail to join the intended ZoneDirector? If none of the Troubleshooting steps help, collect corresponding AP support info and ZD debug logs and open a case with Ruckus Wireless Technical Support.

Possible reasons for an AP failure to join the ZD and troubleshooting steps to be taken to address them.

2020-08-18T03:53:19-0700 2024-07-08T15:44:03-0700 https://support.ruckuswireless.com/articles/000002448 2020-08-14T15:45:56-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_670 knowledge_article_670 2013-12-19T08:16:18-0800 000002448 Validated (External) Public Zoneflex indoor;Zoneflex outdoor System network management System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor How to factory reset standalone AP from CLI mode Log-in to the AP CLI using Putty application. set factory is the command to reset the Standalone AP to factory default settings. <div>rkscli: set factory</div> <div>Factory defaults will take effect after reboot</div> <div>OK</div> <div>rkscli: reboot</div> <div>Rebooting... please wait. Once the AP is rebooted the AP will goes to factory default settings with an IP address of 192.168.0.1. Note: If there is a DHCP server in the network then the AP will be obtaining IP address from the DHCP server as APs are DHCP clients. A good best-practice is to statically assign IP addresses using MAC address mapping on your DHCP server so that you have a reliable IP address to refer to when accessing an AP.</div>

Factory reset of standalone AP from CLI

2020-08-14T15:45:56-0700 2024-07-03T03:52:25-0700 https://support.ruckuswireless.com/articles/000002334 2024-06-27T22:45:12-0700 monthly 0.8 admin,premium knowledge_article_2652 knowledge_article_2652 2013-10-30T17:32:15-0700 000002334 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector Why do clients not get Login authentication when initial web URL is an HTTPS page? When wireless client's default page across their web-browser is set to HTTPS (or) the first page they open makes an HTTPS request, then the wireless clients will be unable to obtain the login page - unless/until they try to access a webpage which contains an HTTP request. This applies for all types of Web-Authentication mechanisms such as Guest Access, Captive Portal and Hotspot authentication.

HTTPS cannot be used to trigger any Web re-direction (WISPr, Guest Access) authentication

2024-06-27T22:45:12-0700 2024-07-02T16:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PEJuCAO?attachment_index=0 2024-07-02T16:00:06-0700 monthly admin,premium knowledge_article_2652 knowledge_article_2652_attachment_1 appnote_wispr.pdf 3603271.0 application/pdf https://support.ruckuswireless.com/articles/000002613 2024-06-27T17:18:39-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4364 knowledge_article_4364 2014-02-18T01:16:41-0800 000002613 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Known issues and workarounds Performance, Configuration, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can I ensure best possible performance in a high density deployment? Follow the above recommendations if you see ping latency or loss issues on a wireless network.

This article explains about some of the best practices to follow in a high density deployment

2024-06-27T17:18:39-0700 2024-07-02T16:00:06-0700 https://support.ruckuswireless.com/articles/000004495 2019-01-28T03:15:35-0800 monthly 0.8 admin,premium knowledge_article_1822 knowledge_article_1822 2015-05-04T15:55:07-0700 000004495 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can you tell the advertising AP from the BSSIDs seen? Access Point MAC offset for WLANs: BSSIDs generated are based on AP’s base MAC Address. Current mechanism is described as follows. For BSSID (WLAN’s MAC addresses): Assume the base MAC of an AP is 00:01:02:03:04:50 (note, the last 4 bits of the last octet is always 0 in a base MAC), The BSSID’s of the first radio (2.4G) is: 00:01:02:03:04:58 (0x50 + 0x8) 00:01:02:43:04:58 00:01:02:83:04:58 00:01:02:c3:04:58 00:01:02:03:04:59 (0x50 + 0x9) 00:01:02:43:04:59 00:01:02:83:04:59 00:01:02:c3:04:59 And the BSSID’s for the second radio (5G in your case) is 00:01:02:03:04:5c (0x50 + 0xc) 00:01:02:43:04:5c 00:01:02:83:04:5c 00:01:02:c3:04:5c 00:01:02:03:04:5d (0x50 + 0xd) 00:01:02:43:04:5d 00:01:02:83:04:5d 00:01:02:c3:04:5d Note the bits change in the 4th octet. The bit format of 4th octet in base MAC is always 00xxxxxx. For Ethernet MAC addresses, they are (Base MAC +3) to (Base MAC +7)

You can determine the AP advertising the BSSIDs seen

2019-01-28T03:15:35-0800 2024-07-02T11:58:55-0700 https://support.ruckuswireless.com/articles/000014339 2024-06-18T04:58:47-0700 monthly 0.8 admin,premium knowledge_article_5316 knowledge_article_5316 2024-06-18T04:58:47-0700 000014339 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, SmartCell Gateway Why is my single NIC deployment on Azure cloud requesting for three NIC ? We have seen similar issues when customer deploy/uses the instance on non recommended machine type. For example we have seen this issue with multiple customer using machine type as D4s v5 or D32lds v5. The customers should ONLY use machine type which is recommended on our official support guides. Snippet of the recommended machine type for 6.1.2 : <img alt="User-added image" height="314" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000hZd&feoid=00N50000002Cf3M&refid=0EMPH000006lhZ7" width="657"></img> <img alt="User-added image" height="195" src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000hZd&feoid=00N50000002Cf3M&refid=0EMPH000006lhaj" width="652"></img> Note : Please always go to ruckus support site (https://support.ruckuswireless.com/) and validate the machine type for that code listed on the RN or Upgrade guide of v/SZ.

Customer is deploying single interface vSZ High Scale or Essential and its failing due to request of three NIC IP's.

2024-06-18T04:58:47-0700 2024-06-19T16:00:06-0700 https://support.ruckuswireless.com/articles/000014325 2024-06-11T16:25:51-0700 monthly 0.8 admin,premium knowledge_article_5314 knowledge_article_5314 2024-06-11T16:25:51-0700 000014325 Validated (External) Premium Knowledge Performance;Installation;Troubleshooting Performance, Installation, Troubleshooting, Knowledge Why is the vSZ-D (vDP) going in boot loop after upgrading to 5.2.2 or later version? <ul><li>Upgrading a Virtual SmartZone Dataplane ( vSZ-D / vDP ) from 5.2.1 version to 5.2.2 and later versions were failing and the vSZ-D was going on a boot loop every few minutes.</li><li>Collected vSZ-D debug logs and checked the vDP_boot.log. We could see the following error in the boot log :- </li></ul> >> @@@@ dplane boot start, start vDP datacore, Mon Jan 29 19:04:35 2024 >>> No extra CLI params in file: '/tmp/cli_opt.txt' & '/etc/dp_config/cli_opt.txt' >>> cmd: core_mask=f >>> cmd: port_mask=1 >> core_mask=f val=F, num_cores=4 >> 4 lcores found in the core_mask, rx_cores=1, tx_lcores=1 >> MASTER_LCORE=3, RX_LOCRE0=0, ASIC_LOCRE0=1, TX_LOCRE0=1 >> FLOW_LCORE0=2, MISC_LCORE0=2, QOS_LCORE0=2 >> 4 lcores: [Rx], [Asic, Tx], [Flow, Misc, QoS], [CLI] >>> Performing 'rte_eal_init()' now... ***do_eal_init() Error <ul><li>The "do_eal_init" error occurs during the initialization phase of DPDK's (Data Plane Development Kit) Environment Abstraction Layer (EAL). Therefore we knew that is failing in the initialization phase only. So, upon checking the ESXi version, we found that it is running on ESXi 6.0 version which is no longer a supported version on newer vSZ-D firmware (5.2 and above) as per the SmartZone Dataplane Configuration guide - <a href="https://support.ruckuswireless.com/documents/2820-ruckus-smartzone-data-plane-configuration-guide-vsz-d-sz100-d-sz144-d" target="_blank">Dataplane Configuration Guide</a>. After changing the ESXi version to 6.7, the upgrade was successful.</li></ul> <div style="text-align: center;"><img src="https://ruckuswireless.my.salesforce.com/servlet/rtaImage?eid=ka2PH0000000dpN&feoid=00N50000002Cf3M&refid=0EMPH000005xupk"></img></div>

vSZ-D is stuck at initialization phase because newer firmware versions of vSZ-D (5.2 & above) needs ESXi version to be 6.7 or above.

2024-06-11T16:25:51-0700 2024-06-17T10:00:06-0700 https://support.ruckuswireless.com/articles/000014321 2024-05-21T14:32:00-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5312 knowledge_article_5312 2024-05-21T14:32:00-0700 000014321 Validated (External) Public Sz144;Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) System network management System Network Management, SZ144, SZ300, SCG200, virtual SmartCell Gateway, SZ100 Does RUCKUS SmartZone Supports Mobile App for the management, control and configuration? As of now, RUCKUS SmartZone does not offer a dedicated mobile app for management, monitoring, or configuration purposes. Users primarily interact with SmartZone through web-based interfaces on desktop platforms or use API calls. RUCKUS SmartZone remains committed to enhancing user experience. While there’s no mobile app currently, future updates may introduce mobile app compatibility. Keep an eye out for announcements and release notes. <h3>Disclaimer</h3> RUCKUS retains the discretion to either support or not support this feature in the future, contingent upon usability, business justification, and other relevant factors.

Availability of mobile app support for RUCKUS SmartZone controllers. While administrators seek a dedicated mobile app to manage and control SmartZone devices, currently, no official app exists. However, administrators can still manage these controllers through web interfaces and other management tools.

2024-05-21T14:32:00-0700 2024-06-11T18:00:08-0700 https://support.ruckuswireless.com/articles/000014315 2024-05-21T15:28:57-0700 monthly 0.8 admin,premium knowledge_article_5311 knowledge_article_5311 2024-05-17T05:13:37-0700 000014315 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Why Airtime detail pie chart in health tab is missing from SmartZone's Web UI? This feature was added back with the fix on SZ 6.1.2.0.441 and later versions. <img alt="User-added image" height="471" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000c3h&feoid=00N50000002Cf3M&refid=0EMPH000005LuQv" width="500"></img> <img alt="User-added image" height="533" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000c3h&feoid=00N50000002Cf3M&refid=0EMPH000005Ludp" width="500"></img>

Airtime chart was removed from 6.1.0 and 6.1.1 release due to inconsistency in the data display, but added back to 6.1.2 (Patch2) and 7.0 versions.

2024-05-21T15:28:57-0700 2024-06-11T18:00:07-0700 https://support.ruckuswireless.com/articles/000014318 2024-05-21T15:51:44-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5308 knowledge_article_5308 2024-05-17T09:54:59-0700 000014318 Validated (External) Public Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Can we change the SSH default port on the SZ controller, or add additional port? Important note: An additional SSH port can be configured for SmartZone's CLI access but default port will always remain 22 which will be utilized by the APs and other devices to communicate with the controller. Supported version: SmartZone 6.1.X and later. Procedure Log into the SZ/vSZ as the admin user to the CLI via SSH: Welcome to the Ruckus SmartZone 100 Command Line Interface Version: 6.1.2.0.354 SZ100-45> enable Password: ******** SZ100-45# SZ100-45# debug SZ100-45(debug)# SZ100-45(debug)# debug-tools [Change to system] Welcome to Debug CLI Framework! (debug tool-set) system $ (debug tool-set) system $ use sz [Change to sz] (debug tool-set) sz $ (debug tool-set) sz $ manage-alias-ssh-port 1.) Set alias SSH port 2.) Get alias SSH port 3.) Delete alias SSH port Select Option (1/2/3): <Enter the number as per requirement> 1.) To Set SSH port (debug tool-set) sz $ manage-alias-ssh-port 1.) Set alias SSH port 2.) Get alias SSH port 3.) Delete alias SSH port Select Option (1/2/3): 1 Enter the port number: 3333 Done [Execution Done!] 2.) To view the SSH port (debug tool-set) sz $ (debug tool-set) sz $ manage-alias-ssh-port 1.) Set alias SSH port 2.) Get alias SSH port 3.) Delete alias SSH port Select Option (1/2/3): 2 3333 [Execution Done!] 3.) To delete the SSH port (debug tool-set) sz $ manage-alias-ssh-port 1.) Set alias SSH port 2.) Get alias SSH port 3.) Delete alias SSH port Select Option (1/2/3): 3 Done [Execution Done!] (debug tool-set) sz $ Access Points cannot communicate with the alias SSH port, and used only to access CLI of the controller.

Article talks about how to configure an additional port for SSH access, while default port remains 22 for SZ and AP/Switch/Dataplane communication.

2024-05-21T15:51:44-0700 2024-06-11T18:00:07-0700 https://support.ruckuswireless.com/articles/000014314 2024-05-21T14:51:08-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5306 knowledge_article_5306 2024-05-16T12:15:46-0700 000014314 Validated (External) Public Vsz dataplane;Virtual smartcell gateway Configuration;Installation Configuration, Installation, vSZ Dataplane, virtual SmartCell Gateway Is the migration from one hypervisor to another hypervisor environment supported in RUCKUS SmartZone? vSZ doesn't support migration from one hypervisor to another. We advise setting up the vSZ from the scratch on the target hypervisor with identical settings of the source vSZ.

Customer wants to migrate their vSZ from one hypervisor like ESXi to Hyper-V. However, migration from one to another Hypervisor environment is not supported by the vSZ. This is as per system's design and limitations.

2024-05-21T14:51:08-0700 2024-06-11T18:00:07-0700 https://support.ruckuswireless.com/articles/000006352 2021-04-15T05:02:15-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2609 knowledge_article_2609 2017-04-26T16:02:27-0700 000006352 Validated (External) Public Ruckus icx switches;Unleashed;Zonedirector;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches, Unleashed, ZoneDirector, SmartCell Gateway How to add a Un-tagged and tagged VLAN on ICX switch ports? How to allow Un-tagged and tagged VLAN, in a Trunk port.. To achieve this, add desired VLANs as tagged into the interface and then use "dual-mode" command to make any of the added Tagged VLAN as Un-tagged. NOTE : Dual-mode command is depreciated from FI 08.0.80 so need to untag and tag the same port on desired vlans on later releases. Example: User has VLAN 10 as native, VLAN 20 and 30 for wireless clients. User wants to add VLAN 10 as Un-tagged and VLAN 20,30 a tagged to switch port ethernet 1/1/1. To enable the dual-mode feature on port 1/1/1, enter the following commands: Access the Brocade ICX switch- device# enable device(config)# vlan 10 device(config-vlan-10)# tagged ethernet 1/1/1 (This will allow VLAN 10 as tagged into interface ethernet 1/1/1) device(config-vlan-10)# exit device(config)# interface ethernet 1/1/1 device(config-if-e1/1/1)# dual-mode 10 (This will make VLAN 10 as Un-tagged into interface ethernet 1/1/1) device(config-if-e1/1/1)# exit device(config)# vlan 20 device(config-vlan-20)# tagged ethernet 1/1/1 (This will allow VLAN 20 as tagged into interface ethernet 1/1/1) device(config-if-e1000-2/11)# exit device(config)# vlan 30 device(config-vlan-30)# tagged ethernet 1/1/1 (This will allow VLAN 20 as tagged into interface ethernet 1/1/1) device(config-if-e1000-2/11)# exit ===================================== To verify the VLAN setting, use below command: device# show vlan Total PORT-VLAN entries: 3 Maximum PORT-VLAN entries: 16 legend: [S=Slot] PORT-VLAN 1, Name DEFAULT-VLAN, Priority level0, Spanning tree Off Untagged Ports: (S1) 2 3 4 5 6 7 8 Untagged Ports: (S2) 2 3 4 5 6 7 8 12 13 14 15 16 17 18 19 Untagged Ports: (S2) 20 21 22 23 24 Tagged Ports: None Uplink Ports: None DualMode Ports: None PORT-VLAN 10, Name [None], Priority level0, Spanning tree Off Untagged Ports: (S2) Tagged Ports: None Uplink Ports: None DualMode Ports: (S2) 1 PORT-VLAN 20, Name [None], Priority level0, Spanning tree Off Untagged Ports: None Tagged Ports: (S2) 1 Uplink Ports: None DualMode Ports: (S2) PORT-VLAN 30, Name [None], Priority level0, Spanning tree Off Untagged Ports: None Tagged Ports: (S2) 1 Uplink Ports: None DualMode Ports: (S2) ==================================== You can now go to the Ruckus controller and change the WLAN configuration advance settings and change the VLAN from default 1 to 20 or 30. ---------- Note: In above output, 1 represents the port ethernet 1/1/1 ---------- For better understanding, you may follow below article <a href="http://www.brocade.com/content/html/en/configuration-guide/FI_08030_L2/GUID-77B587E9-90F4-4DE7-92EA-BEBD594D184F.html" target="_blank">http://www.brocade.com/content/html/en/configuration-guide/FI_08030_L2/GUID-77B587E9-90F4-4DE7-92EA-BEBD594D184F.html</a>

Adding untagged & tagged vlan on the same switch port on Ruckus ICX switch.

2021-04-15T05:02:15-0700 2024-06-11T05:04:01-0700 https://support.ruckuswireless.com/articles/000004684 2021-03-05T11:43:55-0800 monthly 0.8 admin,premium knowledge_article_4524 knowledge_article_4524 2015-06-11T22:07:41-0700 000004684 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway How to change AP IP in to dynamic settings from CLI.

AP wan ip setting can be changed form SCG CLI and AP CLI.

2021-03-05T11:43:55-0800 2024-06-07T00:41:55-0700 https://support.ruckuswireless.com/articles/000006453 2024-02-15T00:15:11-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5239 knowledge_article_5239 2017-10-13T16:37:34-0700 000006453 Validated (External) Public Ruckus cloud wifi Configuration;Installation;Website services Configuration, Installation, Website Services, Ruckus Cloud WiFi How do I find my Tenant ID from cloud portal? Tenant ID is located in the Address bar of the browser screen. Once we login to the cloud portal, we could find the Tenant ID in the URL as pointed below: <img alt="User-added image" height="169" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000HAX&feoid=00N50000002Cf3M&refid=0EMPH000001vlOD" width="500"></img>

This article explains where we could find the Tenant ID of cloud portal

2024-02-15T00:15:11-0800 2024-06-03T13:16:44-0700 https://support.ruckuswireless.com/articles/000005204 2020-08-10T01:51:36-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2205 knowledge_article_2205 2015-10-14T17:28:53-0700 000005204 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Installation Configuration, Installation, Unleashed Can I setup a Ruckus Unleashed network remotely? The point and purpose of this article is to explain that the network administrator cannot be remote from the site where the *initial* Ruckus Unleashed Master AP is configured, and will need to configure via a wireless connection. -- 1. Ruckus Unleashed networking has been simplified for quick and easy deployment and management, but requires that the first AP setup, which will become the Master AP, needs to be configured wirelessly, thru the AP's Configure.Me-XXYYZZ SSID that a factory defaulted AP running Ruckus Unleashed firmware will advertise. Once connected to a customer LAN with an active DHCP server, a Ruckus Unleashed AP will get it's IP from the DHCP scope. The customer does not need to find it's IP address from the DHCP lease table in order to use HTTPS for configuration, but does need to know the last half of the AP MAC Address. Users *must* configure the *initial* Ruckus Unleashed Master AP through it's wireless Configure.Me-XXYYZZ SSID, where XXYYZZ correspond to the last half of the AP MAC address. ie. AP MAC = 58:B6:33:01:D5:10 would advertise it's default setup SSID of Configure.Me-01D510. Once connected to this Open SSID, opening a browser to 'unleashed.ruckuswireless.com' URL will take you to the AP's setup wizard. If not connected wirelessly, the wizard will not continue after trying to click Next on this screen. <img alt="User-added image" height="377" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxbi&feoid=00N50000002Cf3M&refid=0EM50000000HPzW" width="500"></img> 2. Once the Ruckus Unleashed Master AP *has* been configured, additional Unleashed APs added to the Layer2 VLAN will automatically recognize the Master AP's existence, and will become Member APs (all but Mesh APs are eligible to become Master) in the Unleashed network. Regarding remote/satellite office deployments, if a company admin has setup up the Ruckus Unleashed Master AP, and extends the Layer2 VLAN to remote/satellite offices, new Unleashed APs installed there will automatically connect to the network. (only L2 currently) ==== See the helpful YouTube video on this topic here: <a href="https://www.youtube.com/watch?v=W37rtATRPjk" target="_blank">https://www.youtube.com/watch?v=W37rtATRPjk</a>

The initial configuration of the Unleashed Master AP *requires* that the user be connected wirelessly to the AP's Configure.Me-XXYYZZ SSID.

2020-08-10T01:51:36-0700 2024-06-03T00:44:49-0700 https://support.ruckuswireless.com/articles/000001959 2020-08-18T06:33:53-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4371 knowledge_article_4371 2013-04-25T13:49:22-0700 000001959 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Configuration;Installation;System network management Configuration, Installation, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor Can I keep an AP in Standalone mode on a ZD managed network? To configure Access Point in Standalone mode to not connect to a ZoneDirector in the network, provide bogus ZD IP address(es) to look for. If Access Point is managed by Zone Director then Factory default and proceed as below: <div style=""> </div> <div style="">1. Before connecting to the Access Point in the network, connect Access Point to laptop and SSH into it using applications like Putty.</div> 2. Provide the IP address of the Access Point(192.168.0.1) to ssh into it. Log in with AP credentials Username: super password: sp-admin 3. After successful login, execute the below commands: rkscli: set director ip 1.1.1.1 2.2.2.2 ** Please reboot for this change to take effect OK rkscli: reboot After a successful reboot of Access Point, connect the AP back to the network. Now Access Point will look for ZD with IP address 1.1.1.1/2.2.2.2 (which are not present) and hence would work in Standalone mode.

You can configure Standalone APs to not join ZDs on the network.

2020-08-18T06:33:53-0700 2024-05-28T10:10:34-0700 https://support.ruckuswireless.com/articles/000002543 2020-09-23T19:40:12-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_935 knowledge_article_935 2014-01-27T01:48:59-0800 000002543 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor New APs are not connecting to the ZD. If we see the follow log message while trying to add new APs to the Zone Director under Zone Director web UI >> Monitor >> All Events/Activities, the log messages indicate that the no.of AP licenses limit is reached on the Zone director and it is refusing the AP connection request. <img alt="User-added image" height="203" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyE1&feoid=00N50000002Cf3M&refid=0EM50000000LQEO" width="500"></img> Note : We need to upgrade the licenses on the Zone Director. Once the license is upgraded, then the new APs will connect to the Zone Director.

AP licenses limit is reached in ZD and so new APs are not joining the controller.

2020-09-23T19:40:12-0700 2024-05-24T11:06:36-0700 https://support.ruckuswireless.com/articles/000014317 2024-05-20T08:39:28-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5310 knowledge_article_5310 2024-05-20T06:30:22-0700 000014317 Validated (External) Public Sz144;Ruckus cloud wifi;Sz300;Unleashed;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;SmartZone 100-D (SZ100-D) Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, SZ144, Ruckus Cloud WiFi, SZ300, Unleashed, virtual SmartCell Gateway, SZ100 <h3>Why Do RUCKUS APs Change Channels Frequently?</h3> <ul><li>Varies based on environmental conditions and AP deployment specifics.</li><li>Increasing background scan intervals or using Channelfly can mitigate frequent channel changes.</li><li>Reduce the number of WLANs advertised in dense AP deployments.</li><li>Consider environmental factors when making changes.</li><li>Always review floor maps, site survey reports, and client service requirements before making configuration changes.</li></ul> Remember: Changing configurations without proper assessment may not resolve issues effectively. For real-time insights, consider using RUCKUS AI and monitoring client and AP statuses, along with RRM (Radio Resource Management) suggestions.

Wireless access points (APs) play a crucial role in providing reliable Wi-Fi connectivity. However, frequent channel changes can disrupt network performance and lead to client disconnections. In this article, we’ll explore the reasons behind AP channel changes and provide best practices for optimizing your RUCKUS AP deployment.

2024-05-20T08:39:28-0700 2024-05-21T16:00:09-0700 https://support.ruckuswireless.com/articles/000003945 2020-08-18T07:30:23-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1559 knowledge_article_1559 2015-01-19T07:41:49-0800 000003945 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What will cause a heartbeats lost message and how can I prevent them? Possible fixes include: 1. Verify everything from AP all the way to the ZD 2. Make sure UDP ports 12222 and 12223 are opened if there is a firewall in between 3. Check with Ruckus Support and find the appropriate firmware to use

This article explains possible reasons for a heartbeats lost message and how to prevent them.

2020-08-18T07:30:23-0700 2024-05-17T08:27:41-0700 https://support.ruckuswireless.com/articles/000001179 2021-04-07T02:15:28-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3298 knowledge_article_3298 2012-03-21T12:00:40-0700 000001179 Validated (External) Public Zoneflex indoor Performance;Configuration;Firmware;Installation;Troubleshooting Performance, Configuration, Firmware, Installation, Troubleshooting, ZoneFlex Indoor How to Upgrade AP firmware version using locally stored image from PC on standalone AP <h1> </h1> For the AP's get a 10x.x.x.x firmware or a 110.x.x.x firmware, these have the option to use the WebGUI. If the AP has this firmware. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3xy&feoid=00N50000002Cf3M&refid=0EM50000000L9DB"></img> <img alt="User-added image" height="261" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3xy&feoid=00N50000002Cf3M&refid=0EM50000000L9DG" width="500"></img> <img alt="User-added image" height="370" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3xy&feoid=00N50000002Cf3M&refid=0EM50000000L9DL" width="500"></img> If you are not running 10x.x.x.x or 11x.x.x.x firmware and you want to upgrade, then use the FTP method.

How to Upgrade AP firmware version using locally stored image from PC on standalone AP

2021-04-07T02:15:28-0700 2024-05-10T00:24:59-0700 https://support.ruckuswireless.com/articles/000001538 2021-04-30T01:25:03-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_184 knowledge_article_184 2013-01-23T14:59:01-0800 000001538 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor Making sure the AP is able to communicate before installation The best way to make sure that the AP is able to communicate with other devices is to connect it directly to a computer and see if you are able to ping and access the GUI of the AP. <ul><li>Initially hard reset the AP by pressing and holding the reset button on the AP for 10 to 15 seconds using a pin or paperclip, make sure the AP is powered up. </li><li>Connect the AP directly to a computer and assign an IP address to the computer in the same range as AP ( eg. 192.168.0.22)</li><li>Ping the AP - 192.168.0.1 from the computer, if there is no packet loss try to access the GUI of the AP by opening a browser and typing in 192.168.0.1 in the address bar.</li></ul> If these steps are successful, then you've shown that the AP is able to communicate with the network and working fine. Otherwise, it is defective. NOTE: By default AP is a DHCP client, so the AP will grab an IP address as soon as it is connected to the network. When the AP is powered by PoE switch and there is a DHCP server in the network the default ip for the AP is not 192.168.0.1 . The corresponding ip can be found on the DHCP server using the MAC address of the AP .

How to check if the network part of the AP is working correctly.

2021-04-30T01:25:03-0700 2024-05-04T14:08:35-0700 https://support.ruckuswireless.com/articles/000001673 2020-08-18T07:08:16-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_230 knowledge_article_230 2013-02-24T19:44:18-0800 000001673 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Installation;Troubleshooting;Known issues and workarounds Performance, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Which model of APs can use Smart Mesh together? Ruckus supports original single-band 802.11g, dual-band 802.11n, and dual-band 802.11ac APs with which to form a Smart Mesh network. It is not possible to mesh single-band AP’s with different 2.4G radio types - an 802.11b/g only radio cannot mesh with 802.11b/g/n APs. Meshing on a dual band AP happens on the 5 GHz radio - and 802.11an APs can mesh with 802.11ac APs. (*except R300) Mesh restrictions are only for AP - AP, not client - AP connections. 802.11g clients can connect to 802.11an/ac APs. Check AP model mesh compatibility with below details: Ruckus ZF 2925, 2942, and 2741 will mesh with each other on 2.4 ghz on 802.11g Ruckus ZF 7343, 7942 & 7352 will mesh with each other on 2.4 ghz on 802.11n Ruckus ZF 7962, 7762, 7363, 7372, 7982 & 7782 will mesh with each other on 5 ghz only, on 802.11an Ruckus ZF 7962, 7762, 7363, 7372, 7982 & 7782 will mesh with R500, R600, R700, T300-series, H500 on 5 ghz only, on 802.11an Ruckus 802.11ac APs R500, R600, R700, T300-series, H500 will mesh with each other on 5 ghz only, on 802.11an (*ac planned) <div id="cke_pastebin" style="width: 1px; height: 1px;"> </div>

This article explains what are the prerequisites to establish Mesh between different model APs

2020-08-18T07:08:16-0700 2024-05-03T08:09:05-0700 https://support.ruckuswireless.com/articles/000005817 2018-12-26T13:49:52-0800 monthly 0.8 admin,premium knowledge_article_2340 knowledge_article_2340 2016-06-06T11:24:04-0700 000005817 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security;Known issues and workarounds Configuration, Security, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Cannot reach UDP port 3799 Non-Proxy RADIUS with APs contacting AAA directly. Port 3799 is for Radius CoA and DM messages and this feature is not supported in Non-Proxy Mode. Customer will need to use Proxy mode. Please note that CoA, DM messages are supported in Proxy mode only if Proxy Accounting is enabled. (User is authenticated and Accounting session is started)

UDP port 3799 is necessary for RADIUS CoA and DM messages and are ONLY supported in Proxy Mode.

2018-12-26T13:49:52-0800 2024-05-01T21:50:58-0700 https://support.ruckuswireless.com/articles/000014303 2024-05-01T01:16:21-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5299 knowledge_article_5299 2024-05-01T01:16:21-0700 000014303 Validated (External) Public Sz144;Ruckus cloud wifi;Sz300;Zonedirector;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartZone 100-D (SZ100-D) Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, SZ144, Ruckus Cloud WiFi, SZ300, ZoneDirector, virtual SmartCell Gateway, SZ100 Why do my devices struggle to roam between access points efficiently, either staying connected when they should switch or roaming excessively even when stationary?</s Based on the troubleshooting steps, you may encounter different resolutions. Here are the most common scenarios: For Specific Device Issues: <ul><li style="margin-top: 7px; margin-bottom: 16px; margin-left: 8px; text-align: justify;">Follow troubleshooting steps to adjust client settings.</li><li style="margin-top: 7px; margin-bottom: 16px; margin-left: 8px; text-align: justify;">If the issue persists, analyze OTA data for status codes and reassociation frames. Customer may have to contact the client device vendor for firmware fixes.</li></ul> For Network-wide Roaming Issues: <ul><li style="margin-bottom: 16px; text-align: justify; margin-left: 8px;">Typically, network roaming issues stem from suboptimal AP placement rather than configuration or software issues (confirmed via OTA analysis).</li><li style="margin-bottom: 16px; text-align: justify; margin-left: 8px;">Consider adjusting channel bonding, activating Auto Cell Sizing (ACS), modifying BSS minimum rates, client load balancing, or utilizing smart roaming features.</li><li style="margin-bottom: 16px; text-align: justify; margin-left: 8px;">Although these adjustments can help in the roaming, a permanent solution requires optimizing AP placement through comprehensive site surveys or detailed floor plans.</li></ul>

The objective of this article is to provide a comprehensive understanding of client roaming issues in wireless networks, along with practical guidance and strategies for troubleshooting, identifying root causes, and implementing corrective measures to optimize network performance and user connectivity.

2024-05-01T01:16:21-0700 2024-05-01T12:00:06-0700 https://support.ruckuswireless.com/articles/000001909 2020-08-10T01:45:13-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_275 knowledge_article_275 2013-04-01T13:39:35-0700 000001909 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why can't I log-into my factory defaulted Ruckus AP or ZD How to clear the Cache on the IE browser. Click on the “Tools” tab on the top of the window. Click on “Internet options”. The Internet options window will appear, select the first tab “General”. The second item down is marked “Browsing history”. Make sure that the “Delete browsing history on exit” button isn’t selected unless you want to clear the history as well. Click on the “delete” button. A new window named “Delete browsing history” will appear, check the box named “Temporary internet files” as well as the box named “Cookies”. Click on the “Delete” button on the bottom of the page to complete the action. How to clear the cache on the Firefox browser. Click on the “Tools” tab on the top of the page then click on “Options” below. The new options window will open. Click on the “Advanced” icon on the top far right. Click on the “Network” tab The second bracket down is titled “Cached Web Content” Click on the button marked “ Clear now” and then click on “OK” on the bottom of the page to complete the task. How to clear the Cache on the Chrome browser. Click on the “Customize and control Google Chrome” button on the top far right corner of the window. Click on “tools” then “clear browsing data”. A new “Clear browsing data” window will open. The next line down has a pull down menu “Obliterate the following items from” select t “from the beginning of time”. Next select “empty the cache” and “delete cookies and other site and plug-in data” to complete the action click on the “clear browsing data” button on the bottom of the page.

Ruckus is aware of an issue that has been identified where the administrative log into a Ruckus unit doesn’t accept a known good userid and password or a Factory defaulted userid and password .

2020-08-10T01:45:13-0700 2024-04-30T14:28:14-0700 https://support.ruckuswireless.com/articles/000006308 2020-08-17T06:21:10-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2598 knowledge_article_2598 2017-03-22T14:26:09-0700 000006308 Validated (External) Public Smartcell insight;SmartCell Insight (SCI) Installation;Support license activation Installation, Support License Activation, SmartCell Insight How do I find SCI serial number from WebUI? In order to get the SCI serial number, log in to the SCI GUI and click on License Tab. Under the License page, you will find a serial number of the SCI. <div style="margin-left: 40px;"><img alt="User-added image" height="178" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxpp&feoid=00N50000002Cf3M&refid=0EM50000000h3uK" style="width: 813px; height: 305px;" width="500"></img></div>

This article explains how to get SCI serial number from the WebUI

2020-08-17T06:21:10-0700 2024-04-24T21:57:28-0700 https://support.ruckuswireless.com/articles/000003789 2020-08-09T23:27:00-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1501 knowledge_article_1501 2014-12-15T07:10:02-0800 000003789 Validated (External) Public Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway What to do when DHCP Decline response message is received from a client? 1. Increase DHCP scope to avoid duplication. 2. If there are manually assigned IPs causing the duplication, avoid manual assignment or exclude those IPs from dynamic assignment.

This article explains what causes DHCP Decline response from a client, how to diagnose the problem, and what needs to be done to fix the issue.

2020-08-09T23:27:00-0700 2024-04-24T21:45:05-0700 https://support.ruckuswireless.com/articles/000006826 2024-04-15T06:29:41-0700 monthly 0.8 admin,premium knowledge_article_5287 knowledge_article_5287 2017-12-12T14:35:53-0800 000006826 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure access to the Web Management Interface? A) For 8095 and below 1) Configure IP address on switch (config)# ip address A.B.C.D 255.255.255.0 2) Enable super user password (config)# enable super-user-password <password> 3) Enable Web Management on HTTP (port 80) (config)# web-management <HTTP/HTTPS> 4) Add a username and password (config)# username <username> password <password> 5) Add Authentication (config)#aaa authentication web-server default local 6) Additional step required for HTTPS (config)# crypto-ssl certificate generate https://docs.commscope.com/bundle/fastiron-08095-webguide/page/GUID-43210924-D6FC-4FAB-B7E3-91CF51FDA392.html B) For 9010 and higher: 1) Configure IP address on switch: for a switch image: (config)# ip address A.B.C.D 255.255.255.0 for a router image: device(config)# interface management 1 <pre id="GUID-43210924-D6FC-4FAB-B7E3-91CF51FDA392__GUID-8391AB76-0732-4399-824F-B9CFAAB7F29D"> <code>device(config-if-mgmt1)# ip address </code>A.B.C.D 255.255.255.0<code> device(config)# ip route 0.0.0.0 0.0.0.0 172.26.64.1</code></pre> 2) Configure a user account with a password and privilege levels for authentication purposes. <pre id="GUID-43210924-D6FC-4FAB-B7E3-91CF51FDA392__GUID-E5959B7E-CD73-4691-B372-0A5422F4E5EC"> <code>device(config)# username user1 privilege 0 password xpassx</code></pre> 3) Configure device authentication methods <pre id="GUID-43210924-D6FC-4FAB-B7E3-91CF51FDA392__GUID-EE7085C5-0925-4EA7-945C-12CD8B33BEAE"> <code>device(config)# aaa authentication web-server default local radius tacacs+</code></pre> <code>https://docs.commscope.com/bundle/fastiron-09010-webguide/page/GUID-43210924-D6FC-4FAB-B7E3-91CF51FDA392.html</code>

How to configure access to the Web Management Interface?

2024-04-15T06:29:41-0700 2024-04-18T10:00:09-0700 https://support.ruckuswireless.com/articles/000006895 2024-04-15T06:31:31-0700 monthly 0.8 admin,premium knowledge_article_5286 knowledge_article_5286 2017-12-12T15:44:55-0800 000006895 Validated (External) Premium Ruckus icx switches;Fastiron cx series;Brocade FastIron CX Series Switches Configuration Configuration, Ruckus ICX Switches, FastIron CX Series How to replace a stack unit on a FCX or ICX stack? 1. Power off the unit that needs to be replaced. 2. Disconnect stack cables. 3. Make sure the new unit is running the same software as the stack and there is no configuration on it. 4. Use<code style="color: red; font-size: 13px;"> erase startup-config </code>to erase configuration on the new unit. 5. Replace the unit . 6. Connect stack cables to the new unit. 7. Power it on. This procedure can be used to replace Active, Standby and Member units.

How to replace a stack unit on a FCX or ICX stack?

2024-04-15T06:31:31-0700 2024-04-18T10:00:09-0700 https://support.ruckuswireless.com/articles/000006633 2024-04-15T06:33:22-0700 monthly 0.8 admin,premium knowledge_article_5285 knowledge_article_5285 2017-12-12T14:27:16-0800 000006633 Validated (External) Premium Ruckus icx switches;Brocade eos products System network management;Troubleshooting System Network Management, Troubleshooting, Ruckus ICX Switches, Brocade EOS Products How to manually switch over to the standby management module on a SX? <div id="GUID-D31FC7B2-04B8-43DF-BC83-410B41AC3F12__GUID-63E603C2-23DF-4D69-BCDE-9C39FBFF5FE4">A user can cause the system to switch over to the standby module (and thus make it the active module). To do so, enter the following command: </div> <div id="GUID-D31FC7B2-04B8-43DF-BC83-410B41AC3F12__GUID-8C3D3562-9335-4D69-A406-E2BB2964B33B">device# switch-over-active-role</div> <div id="GUID-D31FC7B2-04B8-43DF-BC83-410B41AC3F12__GUID-08B32FBA-AAB1-48B8-926D-E9CD37B1C6AA"> Once you enter this command, the system will prompt the user as follows: </div> <div id="GUID-D31FC7B2-04B8-43DF-BC83-410B41AC3F12__GUID-70E02E07-AC90-486F-999A-4C5F7B85F0FB">Are you sure? (enter ’y’ or ’n’): y Running Config data has been changed. Do you want to continue the switch-over without saving the running config? (enter ’y’ or ’n’): n Please save the running config and try switch-over again </div> <div id="GUID-D31FC7B2-04B8-43DF-BC83-410B41AC3F12__GUID-CF314839-9BE6-4DD6-A9F8-D2AF6A65D4BA">Syntax: switch-over-active role</div>

This article describes how to switch the role of a management module from the active module to the standby module.

2024-04-15T06:33:22-0700 2024-04-18T10:00:09-0700 https://support.ruckuswireless.com/articles/000006601 2024-04-15T06:35:20-0700 monthly 0.8 admin,premium knowledge_article_5284 knowledge_article_5284 2017-12-12T14:27:14-0800 000006601 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches How to gather information for ICX POE issues? Here is a basic list of non-intrusive commands in no specific order. show commands: 1. show config 2. show running-config 3. show stack 4. show version 5. show chassis 6. show vlan 7. show inline power | inc stack/slot/port) 8. show interface brief 9. show inline power detail 10. show chassis 11. show lldp 12. show lldp neighbors detail ports all (for single port: ports ethernet stack/slot/port) 13. show fdp 14. show fdp neighbors ethernet stack/slot/port 14. show inline power emesg General information to request: What Powered Device (PD) types are connecting to the Power Source Equipment (PSE) i.e. Model number, firmware version, serial number, manufacturer, PoE standard provides up to 15.4 W, PoE+ or PoE plus, provides up to 25.5 W of power? And/or Power over HDBaseT (PoH), ratified in September 2011, extends PoE’s capabilities to deliver up to 95W?

Basic list of non-intrusive commands.

2024-04-15T06:35:20-0700 2024-04-18T10:00:08-0700 https://support.ruckuswireless.com/articles/000006589 2024-04-15T06:38:42-0700 monthly 0.8 admin,premium knowledge_article_5281 knowledge_article_5281 2017-12-12T16:14:25-0800 000006589 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration Configuration, ICX 7250, ICX 7450, ICX 7750 How to configure Link Aggregation Groups? <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div">! Configure the LAG and assign member ports, newever versions SCH-ACCESS-102(config)# lag dynSP102toAGG201_2 dynamic id 1 SCH-ACCESS-102(config-lag-dynSP102toAGG201_2)# ports ethernet 1/1/13 SCH-ACCESS-102(config)# lag staticSP102toAGG201 static id 1 SCH-ACCESS-102(config-lag-staticSP102toAGG201)# ports ethernet 1/2/1 ethernet 2/2/1 ethernet 3/2/1 ! Show command to verify the LAG. SCH-ACCESS-102# show lag brief Total number of LAGs: 2 Total number of deployed LAGs: 2 Total number of trunks created:2 (254 available) LACP System Priority / ID: 1 / cc4e.24f1.1bb0 LACP Long timeout: 90, default: 90 LACP Short timeout: 3, default: 3 LAG Type Deploy Trunk Primary Port List dynamicSP102todynamic Y 1022 1/1/13 e 1/1/13 e 2/1/13 e 3/1/13 staticSP102toAstatic Y 1 1/2/1 e 1/2/1 e 2/2/1 e 3/2/1 ------------------------------------------------------------------------------- SCH-ACCESS-102# show lag Total number of LAGs: 2 Total number of deployed LAGs: 2 Total number of trunks created:2 (254 available) LACP System Priority / ID: 1 / cc4e.24f1.1bb0 LACP Long timeout: 90, default: 90 LACP Short timeout: 3, default: 3 === LAG "dynamicSP102toAGG201_2" ID 1022 (dynamic Deployed) === LAG Configuration: Ports: e 1/1/13 e 2/1/13 e 3/1/13 Port Count: 3 Primary Port: 1/1/13 Trunk Type: hash-based LACP Key: 21022 Deployment: HW Trunk ID 1 Port Link State Dupl Speed Trunk Tag Pvid Pri MAC Name 1/1/13 Up Forward Full 1G 1022 Yes N/A 0 cc4e. 2488.98dc 2/1/13 Up Forward Full 1G 1022 Yes N/A 0 cc4e. 2488.98dc 3/1/13 Up Forward Full 1G 1022 Yes N/A 0 cc4e. 2488.98dc Port [Sys P] [Port P] [ Key ] [Act][Tio][Agg][Syn][Col][Dis][Def][Exp][Ope] 1/1/13 1 1 21022 Yes L Agg Syn Col Dis No No Ope 2/1/13 1 1 21022 Yes L Agg Syn Col Dis No No Ope 3/1/13 1 1 21022 Yes L Agg Syn Col Dis No No Ope Partner Info and PDU Statistics Port Partner Partner LACP LACP System MAC Key Rx Count Tx Count 1/1/13 cc4e.24f1.1230 21022 4876 4927 2/1/13 cc4e.24f1.1230 21022 4860 4858 3/1/13 cc4e.24f1.1230 21022 4871 4910 === LAG "staticSP102toAGG201" ID 1 (static Deployed) === LAG Configuration: Ports: e 1/2/1 e 2/2/1 e 3/2/1 Port Count: 3 Primary Port: 1/2/1 Trunk Type: hash-based Deployment: HW Trunk ID 2 Port Link State Dupl Speed Trunk Tag Pvid Pri MAC Name 1/2/1 Disable None None None 1 Yes N/A 0 cc4e. 2488.9901 2/2/1 Up Forward Full 10G 1 Yes N/A 0 cc4e.2488.9901 </div>

Link aggregation allows a network administrator to combine multiple Ethernet links into a larger logical trunk known as a Link Aggregation Group (LAG).

2024-04-15T06:38:42-0700 2024-04-18T10:00:08-0700 https://support.ruckuswireless.com/articles/000006591 2024-04-15T06:37:26-0700 monthly 0.8 admin,premium knowledge_article_5282 knowledge_article_5282 2017-12-12T16:14:25-0800 000006591 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products How Power over Ethernet (POE) operates on FastIron and how to enable it? <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div">! Configure PoE on the ports connecting to VoIP phones, wireless access point, etc. One 8090 and later Poe is enabled by default. DO-ACCESS-401(config)# interface ethernet 1/1/1 DO-ACCESS-401(config-if-e1000-1/1/1)# inline power DO-ACCESS-401(config-if-e1000-1/1/1)# interface ethernet 1/1/2 DO-ACCESS-401(config-if-e1000-1/1/2)# inline power DO-ACCESS-401# show inline power Power Capacity: Total is 748000 mWatts. Current Free is 735400 mWatts. Power Allocations: Requests Honored 9 times Port Admin Oper ---Power(mWatts)--- PD Type PD Class Pri Fault/ State State Consumed Allocated Error -------------------------------------------------------------------------- 1/1/1 On On 3500 6300 802.3af Class 2 3 n/a 1/1/2 On On 3600 6300 802.3af Class 2 3 n/a -------------------------------------------------------------------------- Total 7100 12600 </div>

Brocade Power over Ethernet (PoE) devices are compliant with the standards described in the IEEE 802.3af and 802.3at specifications for delivering inline power.

2024-04-15T06:37:26-0700 2024-04-18T10:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tvr1CAC?attachment_index=0 2024-04-18T10:00:08-0700 monthly admin,premium knowledge_article_5282 knowledge_article_5282_attachment_1 ka25B000000CdGMQA0_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000006884 2024-04-15T06:36:55-0700 monthly 0.8 admin,premium knowledge_article_5283 knowledge_article_5283 2017-12-12T13:15:43-0800 000006884 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure a static route? Configuring Static Routes Prerequisites: Switch is running Full Layer-3 code and IP address are already assigned to interface or virtual interfaces Notes: Although the next hop can be the interface name, Do NOT use this. Always specify the IP address of the next router for which the packets should be sent to. Troubleshooting Command: show ip route Configuration Example: ip route 192.168.10.0/24 192.168.2.1 For further information, please watch this YouTube video from our BROCADE CAMPUS FEATURE EXPLAINER SERIES - STATIC ROUTING: <a href="https://www.youtube.com/watch?v=KqK2-LfdttY&feature=youtu.be" target="_blank">https://www.youtube.com/watch?v=KqK2-LfdttY&feature=youtu.be</a> Also see the command guide: https://docs.commscope.com/bundle/fastiron-10010-commandref/page/GUID-2E5545F8-42DD-476B-A033-96B1171223D6.html

How to configure a static route?

2024-04-15T06:36:55-0700 2024-04-18T10:00:08-0700 https://support.ruckuswireless.com/articles/000006885 2024-04-15T06:39:24-0700 monthly 0.8 admin,premium knowledge_article_5280 knowledge_article_5280 2017-12-12T14:35:55-0800 000006885 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Where is the video for Brocade Campus - Collecting a SupportSave? YouTube video: <a href="https://www.youtube.com/watch?v=rhNOr5hMcxk" target="_blank">https://www.youtube.com/watch?v=rhNOr5hMcxk</a> <a href="https://community.ruckuswireless.com/t5/RUCKUS-Self-Help/bd-p/ruckusselfhelppublic" target="_blank">RUCKUS Self Help</a> forum post: https://community.ruckuswireless.com/t5/RUCKUS-Self-Help/Methods-for-Collecting-Support-Save-from-ICX-Switches/m-p/71219

ICXCampus - Collecting a SupportSave

2024-04-15T06:39:24-0700 2024-04-18T10:00:07-0700 https://support.ruckuswireless.com/articles/000006863 2024-04-15T06:40:18-0700 monthly 0.8 admin,premium knowledge_article_5279 knowledge_article_5279 2017-12-12T13:15:41-0800 000006863 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What to collect when an interface flaps? Interface Flaps: show statistics show statistics eth <x/y/z> show optic <x/y/z> (optical monitoring must be on - fiber only) show media show media eth <x/y/z> show debug-statistics show log Show media validation *For more details of the commands that we provided above please download and check the "Brocade FastIron Command Reference"

What to collect when an interface flaps?

2024-04-15T06:40:18-0700 2024-04-18T10:00:07-0700 https://support.ruckuswireless.com/articles/000006933 2024-04-15T06:40:50-0700 monthly 0.8 admin knowledge_article_5278 knowledge_article_5278 2017-12-12T14:12:00-0800 000006933 Validated (External) Partner Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches How to determine hardware faults on a EBU device with dm diag? To perform a successful hardware diagnostics please use the following procedure: <ol><li>Make a backup on a tftp or pc of the current configuration of the device in question</li><li>Remove ALL cables from the switch, except the console and power cables</li><li>Enable <code>dm diag</code></li><li>Erase the configuration from the switch by pressing 'Y' when asked</li><li>Reload the switch from console by pressing 'Y' when asked</li><li>Capture all the outputs until the switch has completely rebooted - this is needed by TAC to confirm your findings</li><li>Please note if you do not remove the configuration and or remove the cable, you can get false negatives on the <code>dm diag</code> results.</li></ol> On the console port it would look like this: dm diag Diagnosis option will be turned ON during next boot-up erase startup-config Erase startup-config Done. reload Are you sure? (enter 'y' or 'n'): y Could not verify if the Running Config data has been changed. Do you want to continue the reload anyway? (enter 'y' or 'n'):Y Once this is completed, and the outputs have been captured, please open a service request with TAC to confirm your findings. Also describe the issues you were having with the device.

Determine hardware faults on a EBU device with dm diag

2024-04-15T06:40:50-0700 2024-04-18T10:00:06-0700 https://support.ruckuswireless.com/articles/000006934 2024-04-15T06:41:22-0700 monthly 0.8 admin,premium knowledge_article_5277 knowledge_article_5277 2017-12-12T14:12:00-0800 000006934 Validated (External) Premium Ruckus icx switches Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches Why does Dynamic MAC address free space fall short? Check new Release Notes to verify which version of code has the fix.

Dynamic MAC address free space falls short under the condition that there is a lot of VLAN over ICX/FCX switch code

2024-04-15T06:41:22-0700 2024-04-18T10:00:06-0700 https://support.ruckuswireless.com/articles/000006063 2020-09-15T19:03:37-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3378 knowledge_article_3378 2016-10-12T10:12:57-0700 000006063 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Firmware Firmware, Unleashed Where can I find serial number for Unleashed Access Point on GUI? Please follow the below steps to get to the information: <ol><li> Log into the GUI of Unleashed AP </li><li> Click on Dashboard </li><li> Click on Access Points on the left </li><li> Click on Ruckus AP having a tag as Master AP on it </li><li> Click on System Overview Info </li><li> Find the serial number under the System Overview details We can also find the Firmware Version of the Access Point, below the Serial Number. Please take reference from below screenshot: <img alt="User-added image" height="174" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy6b&feoid=00N50000002Cf3M&refid=0EM50000000loIp" width="500"></img> </li><li> To find serial number of Slave Unleashed AP's, follow the steps above and then click on the leader AP name showing below Master AP Please take reference from below screenshot: <img alt="User-added image" height="307" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy6b&feoid=00N50000002Cf3M&refid=0EM50000000loJ9" width="500"></img> </li></ol>

Steps to find Unleashed AP serial number

2020-09-15T19:03:37-0700 2024-04-17T12:42:10-0700 https://support.ruckuswireless.com/articles/000010931 2022-06-24T01:06:13-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4432 knowledge_article_4432 2020-10-07T12:16:05-0700 000010931 Validated (External) Public R510 unl Configuration;Troubleshooting Configuration, Troubleshooting, R510 UNL How to perform a hard reset(R510)? How to perform the Factory reset First make sure how many access point are in the network Make sure ONLY the AP that need to apply the factory reset is connected to the switch. The AP must be physically reachable (remove from the ceiling if needed) Locate the Reset pin hole on the rear panel of the Access point. <img alt="User-added image" height="281" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000YdfI&feoid=00N50000002Cf3M&refid=0EM2J000001Ct9w" width="500"></img> Insert a straightened paper clip in the hole and press for at least 12-14 seconds. After the reset is complete, the PWR LED will initially be solid red, indicating boot up in process, then blinks green, indicating that the system is in factory default state. when you complete the Setup Wizard, the PWR LED will be steady green. Then the unleashed is reboot now we have to see a wireless Configure. Me-XXYYZZ SSID, where XXYYZZ correspond to the last half of the Access point MAC address Example: AP MAC = 58:31:33:01:68:54 would advertise its default setup SSID of Configure.Me-016854.

Steps to perform factory reset AP R510

2022-06-24T01:06:13-0700 2024-04-16T06:22:37-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000GvQMSA0?attachment_index=0 2024-04-16T06:22:37-0700 monthly admin,premium,warranty,guest knowledge_article_4432 knowledge_article_4432_attachment_1 Configuration using the APP.docx 1714579.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document http://support.ruckuswireless.com/article_attachments/kA22J000000GvQMSA0?attachment_index=1 2024-04-16T06:22:37-0700 monthly admin,premium,warranty,guest knowledge_article_4432 knowledge_article_4432_attachment_1 Web browser.docx 512249.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000014295 2024-04-10T14:30:42-0700 monthly 0.8 admin,premium knowledge_article_5276 knowledge_article_5276 2024-04-10T14:30:42-0700 000014295 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway What is the Smart Zone ICX CLI template capacity ? The Smart Zone ICX CLI template have capacity hard limit but we suggest to not go over 1000 The Smart Zone ICX CLI template variable capacity is 200

What is the Smart Zone ICX CLI template capacity ?

2024-04-10T14:30:42-0700 2024-04-15T08:00:11-0700 https://support.ruckuswireless.com/articles/000002490 2020-09-15T15:09:52-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_686 knowledge_article_686 2014-01-03T19:55:09-0800 000002490 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;System network management Firmware, System Network Management, ZoneDirector What is a GA release? GA means "General Availability" and signifies that it's the first version of a major release that we publish to the Support website. GA releases will be numbered like 9.9.0.0.212 - that bold zero indicates it's the first release. Subsequent Maintenance Releases (MR's) would be numbered like 9.9.1.0.xx, 9.9.2.0.xx, etc. MR's include fixes that either were identified too late to make it into the GA build but were not considered blockers*"or include fixes to issues identified after the release. *Blockers are so named because they "block" the release when they are deemed too impacting to allow the release. It's our goal that the majority of customers are able to run a GA release in production without concerns. We continually refine our blocker criteria and QA procedures to ensure the highest possible release quality. However, if you don't need new AP model support or features introduced in the latest GA, then a more conservative stance would be to use the latest MR of the previous release. For example, 9.8.2.0.15 MR has had more "soak time" and may contain newer bug fixes than the 9.9 GA, and therefore we can assign a higher confidence to recommend it. All releases of firmware include Release Notes, with supported hardware platform, upgrade path, and known issues.

Explanation of GA vs MR releases and how to choose, what to run

2020-09-15T15:09:52-0700 2024-04-12T18:51:13-0700 https://support.ruckuswireless.com/articles/000004949 2020-09-20T22:38:09-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2070 knowledge_article_2070 2015-07-31T11:40:02-0700 000004949 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector For SR, how do I determine sync from peer or sync from peer? Before enabling smart-redundancy, it is recommended to get a backup of the ZD that will become active. Backup the ZD at the ZD GUI, Administer / Backup option. When one first enables smart redundancy, go to the ZD that you want to be active (usually the ZD with the connected APs and working configuration) and then click on ‘Sync to peer’ option. If the ZDs have been in smart-redundancy configuration previously and one is re-enabling smart-redundancy, these are the options: @ previously active ZD, sync to peer: <ul><li>Move configuration from active ZD to standby ZD.</li><li>Previously active ZD stays active.</li></ul> @ previously active ZD, sync from peer: <ul><li>Move configuration from standby ZD to active ZD.</li><li>Previously active ZD stays active.</li></ul> @ previously standby ZD, sync to peer: <ul><li>Move configuration from standby ZD to active ZD.</li><li>Previously active ZD stays active.</li></ul> @ previously standby ZD, sync from peer: <ul><li>Move configuration from active ZD to standby ZD.</li><li>Previously active ZD stays active.</li></ul> Important note: If you want to make a previously active ZD a standby ZD, factory default the ZD before re-enabling smart-redundancy.

When enabling smart-redundancy (SR), there needs to be a decision made on sync to peer or sync from peer. Explanation of selection of both of these options is explained.

2020-09-20T22:38:09-0700 2024-04-11T18:12:12-0700 https://support.ruckuswireless.com/articles/000012194 2023-05-18T12:54:34-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4956 knowledge_article_4956 2023-05-18T12:52:34-0700 000012194 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management;Troubleshooting;Website access System Network Management, Troubleshooting, Website Access, ZoneDirector How to enable TLS 1.0 on Modern Browsers On Mozilla FireFox: Firefox 43 supports TLS 1.0, 1.1, and 1.2 by default. You shouldn't need to make any changes, but you can double-check the settings here if you like: (1) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful. (2) In the search box above the list, type or paste TLS and pause while the list is filtered (3) If the security.tls.version.max preference is bolded and "user set" to a value other than 3, right-click > Reset the preference to restore the default value of 3 (4) If the security.tls.version.min preference is bolded and "user set" to a value other than 1, right-click > Reset the preference to restore the default value of 1 The values for these preferences mean: 1 => TLS 1.0 2 => TLS 1.1 3 => TLS 1.2 Reference: https://support.mozilla.org/en-US/questions/1101896 On Google Chrome: Deprecated in Chrome 72 - use version 71 or below by custom .exe install from https://filehippo.com/download_google-chrome/70.0.3538.22/ Reference: https://security.googleblog.com/2018/10/modernizing-transport-security.html If on windows 10 or below : use IE

To access legacy Ruckus / Other vendor Web Interfaces which makes use of TLS 1.0 or below

2023-05-18T12:54:34-0700 2024-04-11T13:56:35-0700 https://support.ruckuswireless.com/articles/000007063 2024-03-27T01:52:17-0700 monthly 0.8 admin,premium knowledge_article_5275 knowledge_article_5275 2017-12-12T15:44:57-0800 000007063 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products High CPU on switches configured to provide PoE 1. Check the end devices and ensure they are PoE capable 2. If end devices are not PoE capable, then 'inline power' for those ports can be disabled.

A switch configured for PoE may exhibit high CPU

2024-03-27T01:52:17-0700 2024-04-10T16:00:06-0700 https://support.ruckuswireless.com/articles/000006719 2024-03-27T01:53:20-0700 monthly 0.8 admin,premium knowledge_article_5274 knowledge_article_5274 2017-12-12T16:04:14-0800 000006719 Validated (External) Premium Fastiron ws series;Fastiron cx series;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration Configuration, FastIron WS Series, FastIron CX Series How do I access the console of units other than a stack master in an IronStack? To access individual stack unit direct console access: From the Privileged (#) prompt, type rsonsole [x], where x is the desired unit ID To return to the Active controller: Method 1: Type in [STBY]local-2@FCX> rconsole active Method 2: Press Ctrl-O X to exit Method 3: Exit, then type exit again <code>ICX6450-24P#rconsole 2 Connecting to unit 2... (Press Ctrl-O X to exit) [STBY]rconsole-2@ICX6450-24P# exit [STBY]rconsole-2@msachdev-1297486-May-16-ICX6450-24P>exit Disconnected. Returning to local session... msachdev-1297486-May-16-ICX6450-24P# </code>

How do I access the console of units other than a stack master in an IronStack?

2024-03-27T01:53:20-0700 2024-04-10T16:00:06-0700 https://support.ruckuswireless.com/articles/000007003 2024-03-27T01:54:05-0700 monthly 0.8 admin,premium knowledge_article_2864 knowledge_article_2864 2017-12-12T15:44:57-0800 000007003 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches, Brocade EOS Products How to check spanning tree state of ports on SX, FCX and ICX FastIron SX 800 Router# dm pp-dev 15 read-vlan 100 Address: 0x0a000640 Data: 0 0 1 13 Valid [0] = 1 Learn Enable [1] = 1 No_Local_Members [2] = 0 No_Uplink_Members [3] = 0 CPU_Member [4] = 1 Reserved[10:5] = 0 Reserved[11] = 0 Stp_Entry[19:12] = 0 <------------------- Spanning tree index Port 0 (8/23) Member [20] = 0, Tagged [21] = 0 Port 1 (8/24) Member [22] = 0, Tagged [23] = 0 Port 2 (8/21) Member [24] = 0, Tagged [25] = 0 Port 3 (8/14) Member [26] = 0, Tagged [27] = 0 Port 4 (8/13) Member [28] = 0, Tagged [29] = 0 Port 5 (8/16) Member [30] = 0, Tagged [31] = 0 Port 6 (8/20) Member [32] = 1, Tagged [33] = 0 Port 7 (8/19) Member [34] = 0, Tagged [35] = 0 Port 8 (8/22) Member [36] = 0, Tagged [37] = 0 Port 9 (8/17) Member [38] = 0, Tagged [39] = 0 Port 10 (8/18) Member [40] = 0, Tagged [41] = 0 Port 11 (8/15) Member [42] = 0, Tagged [43] = 0 FastIron SX 800 Router#dm pp-dev 15 read-stp 0 <------------- 0 is spanning tree index for VLAN 100 from previous command Address: 0x0a020000 Data: 0xff557555 Port 0 (8/23) STP State [1:0] = BLOCKING (1) Port 1 (8/24) STP State [3:2] = BLOCKING (1) Port 2 (8/21) STP State [5:4] = BLOCKING (1) Port 3 (8/14) STP State [7:6] = BLOCKING (1) Port 4 (8/13) STP State [9:8] = BLOCKING (1) Port 5 (8/16) STP State [11:10] = BLOCKING (1) Port 6 (8/20) STP State [13:12] = FORWARDING (3) <---------- this port forwarding in hardware Port 7 (8/19) STP State [15:14] = BLOCKING (1) Port 8 (8/22) STP State [17:16] = BLOCKING (1) Port 9 (8/17) STP State [19:18] = BLOCKING (1) Port 10 (8/18) STP State [21:20] = BLOCKING (1) Port 11 (8/15) STP State [23:22] = BLOCKING (1) FastIron SX 800 Router#

How to check spanning tree state of ports on SX, FCX and ICX.

2024-03-27T01:54:05-0700 2024-04-10T16:00:05-0700 https://support.ruckuswireless.com/articles/000010021 2024-02-15T07:38:46-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5244 knowledge_article_5244 2020-01-07T07:07:28-0800 000010021 Validated (External) Public Ruckus cloud lte Performance;Installation;Troubleshooting Performance, Installation, Troubleshooting, Ruckus Cloud LTE How can I measure CBRS LTE signal strength with my iPhone 11? First, open the Control Center (or head over to the Settings app) and turn off Wi-Fi. Then, open the Phone app and enter in the following numbers and symbols, exactly as written (including the stars and pound signs): *3001#12345#* Select LTE: <img src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000HSH&feoid=00N50000002Cf3M&refid=0EM2J000000vpJg"></img> Then look for menu labeled “Serving Cell Meas.” This will contain measurements taken from the “serving” cell—the one you’re currently connected to. <img src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000HSH&feoid=00N50000002Cf3M&refid=0EM2J000000vpJh"></img> <img src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000HSH&feoid=00N50000002Cf3M&refid=0EM2J000000vpJi"></img> You’re looking for “rsrp0,” which is the Reference Signal Received Power for the tower closest to you (although you may be connected to a secondary, further tower, whose power is listed under “rsrp1”). This should be a negative number, in a range from around -40 to -140. A number closer to -40 is a really strong signal, while a number closer to -140 is a really poor signal. Anything between -40 and -80 is very good and you shouldn’t have any signal problems. Anything below -120 is very poor, and you might suffer interruptions in your connection and very poor data speeds. There’s another useful data point on this page, labeled RSRQ0 (Reference Signal Received Quality). This is a value derived from both the signal strength and interference. This usually ranges between -3 (good) and -19.5 (bad). It’s possible to have a lower number, but to do so you have to have a really noisy, low-power signal.

This is a hidden tool for iOS to measure Rx CBSD signal strength

2024-02-15T07:38:46-0800 2024-04-04T07:46:54-0700 https://support.ruckuswireless.com/articles/000006820 2024-03-26T01:49:02-0700 monthly 0.8 admin,premium knowledge_article_5272 knowledge_article_5272 2017-12-12T14:34:15-0800 000006820 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to set up Local User Accounts? Up to 32 local user accounts can be defined. User accounts regulate access to the management functions in the CLI using the following methods: <ul id="GUID-4830DA73-E36F-44D4-B6C3-0D5653A82168__GUID-067F1992-23F0-4045-BD6D-A8A295397368"><li id="GUID-4830DA73-E36F-44D4-B6C3-0D5653A82168__GUID-28C2D9F1-80C6-4823-9DDE-DE685A372060">Telnet access</li><li id="GUID-4830DA73-E36F-44D4-B6C3-0D5653A82168__LI_EB44182405984798A833E12289B32D04">Web management access</li><li id="GUID-4830DA73-E36F-44D4-B6C3-0D5653A82168__GUID-FCA4B306-C109-41AE-A84F-0E00F7FCBA3E">SNMP access</li><li id="GUID-4830DA73-E36F-44D4-B6C3-0D5653A82168__GUID-A3E56630-FB02-4DFF-B4E3-627557A88AB5">RESTCONF</li><li id="GUID-4830DA73-E36F-44D4-B6C3-0D5653A82168__GUID-59D38341-F75C-4B55-BE67-213BE753ADB7">SSH access?SSH refers to SSHv2, which is supported on all RUCKUS ICX devices.</li></ul> Configuring a Local User Account Create local user accounts either: <ul><li>With passwords</li><li>Without passwords</li><li>encrypted </li><li>unencrypted</li></ul> Assign management privilege level <ul><li>0 - Super User level (full read-write access)</li><li>4 - Port Configuration level</li><li>5 - Read Only level</li></ul> ---------- Note: You must be an Admin (super user) account to configure users ---------- Create Local User Accounts Local User Accounts with No Passwords, enter at the CLI global CONFIG level: Syntax: [no] username <user-string> privilege <privilege-level> nopassword FastIron(config)# username brocade nopassword Note: This has been Deprecated Commands for FastIron 09.0.10a Local User Accounts with Unencrypted Passwords Syntax: [no] username <user-string> [privilege <privilege-level>] password | nopassword [<encryption-type>] <password-string> FastIron(config)# username brocade password 0 willy FastIron(config)# username brocade privilege 5 password 0 willy Note: This has been Deprecated Commands for FastIron 09.0.10a Local User Accounts with MD5 Encrypted Passwords First, create the user, then issue the command: Syntax: [no] service password-encryption FastIron(config)# username wonka privilege 5 password 0 willy FastIron(config)# service password-encryption Note: FastIron 09.0.10a and later releases support only SHA-512 encryption for local user accounts. The following encryption types are deprecated: <ul id="GUID-4830DA73-E36F-44D4-B6C3-0D5653A82168__UL_X4X_RK1_XXB"><li id="GUID-4830DA73-E36F-44D4-B6C3-0D5653A82168__GUID-552A809C-610E-45B8-ACCB-18EF6B741331">service password-encryption sha1</li><li id="GUID-4830DA73-E36F-44D4-B6C3-0D5653A82168__GUID-C00105BB-5DBE-4D9F-879C-F10C0201A8EE">service password-encrypiton sha256</li></ul> Most updated Guidelines: https://docs.commscope.com/bundle/fastiron-10010-securityguide/page/GUID-4830DA73-E36F-44D4-B6C3-0D5653A82168.html

How to set up Local User Accounts?

2024-03-26T01:49:02-0700 2024-03-27T02:00:08-0700 https://support.ruckuswireless.com/articles/000006817 2024-03-26T01:49:54-0700 monthly 0.8 admin,premium knowledge_article_5270 knowledge_article_5270 2017-12-12T14:34:13-0800 000006817 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Which ICX devices support long-distance stacking? Long-distance stacking with LR4 optics is supported on the models and ports listed in the following table. <table id="GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5__TABLE_4DD697B000164561A6F6E38FB7EBDCF5"><caption>Table 1. FastIron Long-Distance 100-Gbps Ports</caption><colgroup><col></col><col></col><col></col></colgroup><thead><tr><th colspan="1" rowspan="1" id="GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5__TABLE_4DD697B000164561A6F6E38FB7EBDCF5__entry__1"> <table class="Table" style="border: solid windowtext 1px;"><thead><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Product and Model</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Ports that Support 100-Gbps Optics</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Long-Distance Stacking Ports</td></tr></thead><tbody><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7550 (all models)1</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1, 1/2/2</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1, 1/2/2</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7650 (all models)2</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1, 1/3/2</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1, 1/3/2</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7850-32Q</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1 through 1/2/12, 1/3/1 through 1/3/8</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1 through 1/3/8</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7850-48C/48F/48FS</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1 through 1/2/8</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1 through 1/2/8</td></tr></tbody></table> </th></tr></thead></table> <a id="GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5__GUID-99D5A7C3-5F61-4CA7-BEE7-FB45E4A7D6DF" target="_blank">1</a> Only the following ICX 7550 models support 100-Gbps stacking: ICX 7550-24F, ICX 7550-24ZP, ICX 7550-48F, ICX 7550-48ZP. <a id="GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5__GUID-2A3166C9-EAC8-425B-9C73-406402D99DED" target="_blank">2</a> When ICX 7650-48F/P/ZP devices are configured in stacking mode, front panel slot 2 also supports 2 X 40-Gbps or 1 X 100-Gbps modules with their respective RUCKUS-qualified optical hardware. ICX models and 40-Gbps ports that can be used for long-distance data and stacking connections are listed in the following table. <table id="GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5__TABLE_8A15993F5DED4552B0A49C9B73B30510"><caption>Table 2. FastIron Long-Distance 40-Gbps Ports</caption><colgroup><col></col><col></col><col></col></colgroup><thead><tr><th colspan="1" rowspan="1" id="GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5__TABLE_8A15993F5DED4552B0A49C9B73B30510__entry__1"> <table class="Table" style="border: solid windowtext 1px;"><thead><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Product and Model</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Ports that Support 40-Gbps Optics</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Long-Distance Stacking Ports</td></tr></thead><tbody><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7450 (all models) <a href="https://docs.commscope.com/bundle/fastiron-09010-switchstackingguide/page/GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5.html#GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5__GUID-806BD15A-E4CB-4163-A13A-8BE22D44113C" target="_blank">3</a></td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1, 1/4/1</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1, 1/4/1</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7550 (all models)</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1, 1/2/2</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1, 1/2/2</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7650 (all models) <a href="https://docs.commscope.com/bundle/fastiron-09010-switchstackingguide/page/GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5.html#GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5__GUID-B717EFB4-DF98-49FA-AEE9-2FE3C9E0426D" target="_blank">4</a></td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1, 1/3/2, 1/3/3, 1/3/4</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1, 1/3/2, 1/3/3, 1/3/4</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7850-32Q</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1 through 1/2/12, 1/3/1 through 1/3/8</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1 through 1/3/8</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7850-48C/48F/48FS</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1 through 1/2/8</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1 through 1/2/8</td></tr></tbody></table> </th></tr></thead></table> <a id="GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5__GUID-806BD15A-E4CB-4163-A13A-8BE22D44113C" target="_blank">3</a> ICX 7450-24/24P devices also support a 1 X 40-Gbps module in front panel slot 2 (port 1/2/1). <a id="GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5__GUID-B717EFB4-DF98-49FA-AEE9-2FE3C9E0426D" target="_blank">4</a> When ICX 7650-48F/P/ZP devices are configured in stacking mode, front panel slot 2 also supports 2 X 40-Gbps or 1 X 100-Gbps modules with their respective RUCKUS-qualified optical hardware. LR optics can be used on ICX 7450 4 X 10-Gbps ports when a 4X10GF module is present. LR optics can also used on ICX 7150 ports when either a 4X10GF module or 2X10GF module is present. LR optics can support distances up to 10 kilometers for data or stacking. The following table summarizes LR support on ICX 7150 and ICX 7450 devices. <table id="GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5__TABLE_751128AEE6BA425F9A30D3D6064F5F1C"><caption>Table 3. FastIron Long-Distance 2X10-Gbps and 4X10-Gbps Ports</caption><colgroup><col></col><col></col><col></col></colgroup><thead><tr><th colspan="1" rowspan="1" id="GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5__TABLE_751128AEE6BA425F9A30D3D6064F5F1C__entry__1"> <table class="Table" style="border: solid windowtext 1px;"><thead><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Product and Model</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">10-Gbps Ports that Support LR Optics</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Long-Distance Stacking Ports</td></tr></thead><tbody><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7150-48ZP</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1 through 1/2/8</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1 through 1/2/4</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7150-48, ICX 7150-48P, ICX 7150-48PF, ICX 7150-24, ICX 7150-24P, ICX 7150 24F</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1 through 1/3/4</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1 through 1/3/4</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7150-C10ZP, ICX 7150-C12P (2X10GF module)</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1 and 1/3/2</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1 and 1/3/2</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7450 front (all models, with 4X10GF module)</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1 through 1/2/4</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/2/1 through 1/2/4</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7450 back (all models, with 4X10GF module)</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">1/3/1 through 1/3/4 and 1/4/1 through 1/4/4 (data only)</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: .100px .100px .100px .100px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Not available with 4X10GF module</td></tr></tbody></table> </th></tr></thead></table> <h5> </h5> Reference guide:https://docs.commscope.com/bundle/fastiron-09010-switchstackingguide/page/GUID-15485C93-99A2-4DC9-B99C-B2B4495131E5.html <ul></ul>

Which ICX-devices support long-distance stacking?

2024-03-26T01:49:54-0700 2024-03-27T02:00:07-0700 https://support.ruckuswireless.com/articles/000006818 2024-03-26T01:49:28-0700 monthly 0.8 admin,premium knowledge_article_5271 knowledge_article_5271 2017-12-12T14:34:13-0800 000006818 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What is the configuration for DHCP-Port Bootp command? DHCP related to the command: port bootp <h4 dir="LTR">The Bootstrap Protocol:</h4> The bootstrap protocol (BOOTP) is a host configuration protocol developed before DHCP. DHCP improves on BOOTP and resolves specific limitations BOOTP had as a host configuration service BOOTP and DHCP use nearly identical request messages (sent by clients) and reply messages (sent by servers). Messages in either of these protocols use a single User Datagram Protocol (UDP) datagram of 576 bytes to enclose each protocol message. Message headers are the same for both BOOTP and DHCP with one exception: the final message header field used to carry optional data. For BOOTP, this optional field is called the vendor-specific area and is limited to 64 octets. For DHCP, this area is called the options field and can carry up to 312 octets of DHCP options information. <h4 dir="LTR">Scenario/Solution:</h4> If you have a network environment where the IP helper is set on the VE, but it not forwarding any DHCP traffic, it is very possible that the problem is related to the configuration. Make sure that you have port bootp because if you have no port bootp command it will disable all DHCP connections. The problem can be resolved by issuing the command: port bootp Note: This has been Deprecated Commands for FastIron 09.0.10

DHCP-Port bootp command explanation/Configuration

2024-03-26T01:49:28-0700 2024-03-27T02:00:07-0700 https://support.ruckuswireless.com/articles/000006278 2021-07-12T23:02:49-0700 monthly 0.8 admin,premium knowledge_article_4718 knowledge_article_4718 2017-02-21T10:06:16-0800 000006278 Validated (External) Premium Scg200;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, SCG200, virtual SmartCell Gateway Why are my APs flagged and how do I remove the flag? Please refer Troubleshooting steps for resolution.

This article explains the reason why the APs are flagged in the controller GUI and what can be done to avoid the flag messages.

2021-07-12T23:02:49-0700 2024-03-26T08:38:00-0700 https://support.ruckuswireless.com/articles/000006812 2024-03-21T07:38:00-0700 monthly 0.8 admin,premium knowledge_article_5267 knowledge_article_5267 2017-12-12T15:44:55-0800 000006812 Validated (External) Premium Icx 6430;Icx 6450;Icx 6610;Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 6430 and 6450 Campus Switches;Ruckus ICX 6610 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration Configuration, ICX 6430, ICX 6450, ICX 6610, ICX 7250, ICX 7450, ICX 7750 Which are the default stacking ports? <h3>ICX 6430 or ICX 6450</h3> <table border="1" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">Stacking ports </td><td colspan="1" rowspan="1">4 ports on front panel (Ports 1, 2, 3, and 4). Ports 2 and 4 require additional configuration.</td></tr><tr><td colspan="1" rowspan="1">Default ports</td><td colspan="1" rowspan="1">Ports 1 and 3</td></tr></tbody></table> <h3> ICX 6610</h3> <table border="1" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">Stacking ports </td><td colspan="1" rowspan="1">4 dedicated ports</td></tr><tr><td colspan="1" rowspan="1">Default ports</td><td colspan="1" rowspan="1">Dedicated ports: 1/2/1, 1/2/2, 1/2/6, and 1/2/7</td></tr></tbody></table> <h3> FCX</h3> <table border="1" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">Stacking ports </td><td colspan="1" rowspan="1">4 ports: Two 16 Gbps ports in rear (Slot 2) Two 10 Gbps ports in front (Slot 3)</td></tr><tr><td colspan="1" rowspan="1">Default ports</td><td colspan="1" rowspan="1">Ports 1/2/1 and 1/2/2</td></tr></tbody></table> ICX -7150 <table class="Table"><tbody><tr><td colspan="1" rowspan="1" style="padding: 0in 0in 0in 0in;"> <table class="Table" style="border: solid windowtext 1px;"><tbody><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Stacking ports </td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Four 1-Gbps / 10-Gbps ports on fixed module on front panel that are available for stacking only when configured for 10-Gbps operation. Note: ICX 7150-C10ZP and ICX 7150-C12P devices have two 1-Gbps / 10-Gbps ports that are available for stacking only when configured for 10-Gbps operation.</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Valid-stack-port sets </td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">On most models, (x/3/1, x/3/3, 2) On ICX 7150-C10ZP and ICX 7150-C12P devices, (x/3/1, x/3/2, 1) On ICX 7150-48ZP devices, (x/2/1, x/2/3, 2) Note: The third number in the set is the maximum number of ports in a stacking trunk. One indicates stack-port only. </td></tr></tbody></table> </td></tr></tbody></table> <h3>ICX 7250</h3> <table border="1" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">Stacking ports </td><td colspan="1" rowspan="1">Four 10-Gbps stacking ports (from eight available ports) on fixed module on front panel</td></tr><tr><td colspan="1" rowspan="1">Default ports</td><td colspan="1" rowspan="1">Two ports: 1/2/1 and 1/2/3 NOTE: Default stacking ports can be changed to 1/2/5 and 1/2/7. Use the default-ports command to change the default ports.</td></tr></tbody></table> <h3>ICX 7450</h3> <table border="1" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">Stacking ports </td><td colspan="1" rowspan="1">Two 40 Gbps ports in rear or 4 X 10 Gbps ports as an option on front. NOTE: 40 Gbps stacking and 4 X 10 Gbps stacking cannot be used simultaneously in the same stack.</td></tr><tr><td colspan="1" rowspan="1">Default ports</td><td colspan="1" rowspan="1">Two ports: 1/3/1 and 1/4/1 NOTE: Default ports can be changed to 1/2/1 and 1/2/3 if a 4X10GF module is installed in slot 2. Use the default-ports command to change the default ports</td></tr></tbody></table> <h3> ICX 7550</h3> <table align="left" class="Table" style="border: none; margin-left: 9px; margin-right: 9px;"><tbody><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 194px; padding: 0in 7px 0in 7px; height: 50px; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Stacking ports</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 194px; padding: 0in 7px 0in 7px; height: 50px; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">100 Gbps or 2 X 40 Gbps</td></tr><tr><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 194px; padding: 0in 7px 0in 7px; height: 50px; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">Valid-stack-port sets</td><td colspan="1" rowspan="1" valign="top" style="border-bottom: 1px solid black; width: 194px; padding: 0in 7px 0in 7px; height: 50px; border-top: none; border-right: 1px solid black; border-left: none;">(x/2/1, x/2/2, 1) Note: The third number in the set is the maximum number of ports in a stacking trunk. The number "1" indicates a single stack-port only.</td></tr></tbody></table> <h3> ICX 7650 </h3> <table class="Table" style="border: solid windowtext 1px;"><tbody><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Stacking ports </td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7650 devices support 40-Gbps and 100-Gbps stacking.</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Valid-stack-port sets</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">For 100-Gbps stacking: (x/3/1, x/3/2, 1) For 40-Gbps stacking: (x/3/1, x/3/3, 2) Note: The third number in the set is the maximum number of ports in a stacking trunk. One indicates stack-port only.</td></tr></tbody></table> <h3> ICX 7750</h3> <table border="1" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">Stacking ports </td><td colspan="1" rowspan="1">Six 40 Gbps ports, Module 2: 1/2/1 to 1/2/6 (Front) or Six 40 Gbps ports, Module 3: 1/3/1 to 1/3/6 (Rear)</td></tr><tr><td colspan="1" rowspan="1">Default ports</td><td colspan="1" rowspan="1">Ports 1/2/1 and 1/2/4</td></tr></tbody></table> ICX-7850 <table class="Table" style="border: solid windowtext 1px;"><tbody><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Stacking ports </td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">8 X 100 Gbps or 8 X 40 Gbps ICX 7850-32Q: ports 1/3/1 to 1/3/8 ICX 7850-48C/48FS/48F: ports 1/2/1 to 1/2/8</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Valid-stack-port sets</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 7850-32Q: (x/3/1, x/3/5, 4) ICX 7850-48C/48FS/48F: (x/2/1, x/2/5, 4 Note: The third number in the set is the maximum number of ports in a stacking trunk. The number "1" indicates a single stack-port only.</td></tr></tbody></table> ICX-8200 <table class="Table" style="border: solid windowtext 1px;"><tbody><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Stacking ports </td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">4 X 25 Gbps or 2 X 10 Gbps ICX 8200-C08PF / C08ZP: ports 1/2/1 to 1/2/2 ICX 8200-24FX: ports 1/2/1 to 1/2/8 All other ICX 8200-24 and ICX 8200-48 models: ports 1/2/1 to 1/2/4.</td></tr><tr><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Valid-stack-port sets</td><td colspan="1" rowspan="1" style="border-bottom: 1px solid black; padding: 0in 0in 0in 0in; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">ICX 8200-C08PF / C08ZP: (x/2/1, x/2/2, 1) ICX 8200-24 / 24P / 24ZP / 24F / 48 / 48F / 48P / 48PF / 48PF2 / 48ZP2: (x/2/1, x/2/3, 2) ICX 8200-24FX: (x/2/1, x/2/3, 2) (x/2/5, x/2/7, 2) Note: The third number in the set is the maximum number of ports in a stacking trunk. The number "1" indicates a single stack-port only.</td></tr></tbody></table>

Which are the default stacking ports?

2024-03-21T07:38:00-0700 2024-03-26T00:00:07-0700 https://support.ruckuswireless.com/articles/000006821 2024-03-21T05:58:42-0700 monthly 0.8 admin,premium knowledge_article_5263 knowledge_article_5263 2017-12-12T14:34:15-0800 000006821 Validated (External) Premium Ruckus icx switches Configuration;Security Configuration, Security, Ruckus ICX Switches How to configure passwords? Set the password “brocade” for Telnet access to the CLI: Syntax: [no] enable telnet password <string> FastIron(config)# enable telnet password brocade Note: This has been Deprecated Commands for FastIron 09.0.10a By default, Brocade software sends a message to the denied Telnet client. To do this, enter: Syntax: [no] telnet server suppress-reject-message FastIron(config)# telnet server suppress-reject-message Note: This has been Deprecated Commands for FastIron 09.0.10a <h4>Passwords for Management Privilege Levels</h4> Super User level FastIron(config)# enable super-user-password <text> Note: This has been Deprecated Commands for FastIron 09.0.10a ---------- Note: Once done, you can now set Port Configuration level and Read-Only level passwords ---------- Port Configuration level FastIron(config)# enable port-config-password <text> Read Only level FastIron(config)# enable read-only-password <text> Note: This has been Deprecated Commands for FastIron 09.0.10a Augmenting Management Privilege Levels Syntax: [no] privilege <cli-level> level <privilege-level> <command-string> Only applies to CLI management access levels and not the GUI. To grant the additional access, specify the: <ul><li>privilege level being enhanced,</li><li>CLI level that contains the command, and</li><li>individual command.</li></ul> Examples: Brocade(config)# privilege configure level 4 ip This will enhance Port Configuration privilege level so users can enter IP commands in global CONFIG level. Specifying a Minimum Password Length Syntax: enable password-min-length <number-of-characters> The <number-of-characters> can be from 1 - 48 Brocade(config)# enable password-min-length 8 Specifies the Line, Enable and Local passwords be at least 8 characters. Note: This has been Deprecated Commands for FastIron 09.0.10a

How to configure passwords?

2024-03-21T05:58:42-0700 2024-03-26T00:00:07-0700 https://support.ruckuswireless.com/articles/000007309 2024-03-21T07:40:56-0700 monthly 0.8 admin,premium knowledge_article_5265 knowledge_article_5265 2017-12-12T14:34:20-0800 000007309 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products How do I redirect debug output to my telnet/ssh session? These commands are applicable until version 8095x for ICX7xxx series. In order to redirect the output of the debug message to a remote session (such as telnet or ssh) use the command: debug destination <source> <session id> show who – This will tell you what session you are in: debug destination <source type> <session #> - This will redirect the debug output telnet@NetIron MLX-4 Router# sh who Console connections: established, monitor enabled, privilege read-only 11 days 18 hours 14 minutes 46 seconds in idle Telnet server status: Enabled Telnet connections (inbound): 1 established, client ip address 10.0.0.1, privilege super-user using vrf default-vrf. you are connecting to this session 2 seconds in idle 2 closed 3 closed 4 closed 5 closed Telnet connections (outbound): 6 closed 7 closed 8 closed 9 closed 10 closed SSH server status: Enabled SSH connections: 1 closed 2 closed 3 closed 4 closed NetIron MLX-4 Router# debug destination telnet 1

How do I redirect debug output to my telnet/ssh session?

2024-03-21T07:40:56-0700 2024-03-26T00:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tw2bCAC?attachment_index=0 2024-03-26T00:00:06-0700 monthly admin,premium knowledge_article_5265 knowledge_article_5265_attachment_1 fastiron-08095-debugcommand.pdf 1293247.0 application/pdf https://support.ruckuswireless.com/articles/000006814 2024-03-21T07:39:39-0700 monthly 0.8 admin,premium knowledge_article_5266 knowledge_article_5266 2017-12-12T15:44:55-0800 000006814 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to map a vlan priority to a different hardware forwarding queue? To map a VLAN priority to a different hardware forwarding queue, enter the qos tagged-priority command while in the global configuration mode of the CLI. <pre> device(config)# qos tagged-priority 2 qosp0</pre>

How to map a vlan priority to a different hardware forwarding queue?

2024-03-21T07:39:39-0700 2024-03-26T00:00:06-0700 https://support.ruckuswireless.com/articles/000014288 2024-03-20T01:52:33-0700 monthly 0.8 admin,premium knowledge_article_5262 knowledge_article_5262 2024-03-20T01:52:33-0700 000014288 Validated (External) Premium Sz144 d Known issues and workarounds Known Issues and Workarounds, SZ144 D Why does Multicast service not work with SZ144D using 6.1.2 build 404 Engineering has provided a new SZ144D ximg image "sz144d-6.1.2.0.500.ximg" where the threshold for rx pool is changed as 8191 * 0.9 = 7371 from 8191 * 0.5 = 4095 as a fix. Please reach out to Ruckus support to get this image. https://support.ruckuswireless.com/contact-us

Customer has a SZ144-D and a vSZ-D as a backup. They need multicast forwarding to work but when using the vSZ-D everything works as expected but when switch to the SZ144-D it does not work and client is unable to use airplay or Chromecast services.

2024-03-20T01:52:33-0700 2024-03-21T06:00:06-0700 https://support.ruckuswireless.com/articles/000006766 2024-03-19T11:10:20-0700 monthly 0.8 admin,premium knowledge_article_3214 knowledge_article_3214 2017-12-12T13:15:34-0800 000006766 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers How to implement VRRP for wireless controller cluster running 5.3.1 code? RFS6000 controllers running 5.3.1.0 code version. Redundancy cluster has already implemented on these two RFS6000 controllers (rfs6000-170 and rfs6000-175). In this example, VRRP is implemented on vlan 100 to provide redundancy for guest wireless clients Internet access. The VRRP virtual router ip 10.10.10.10 is defined for serving as default gateway to clients in vlan 100 so in the event that one of the RFS6000 wireless controllers fails, wireless clients can still access the Internet. (1) Configure VRRP for Mobility wireless controller rfs6000-170: rfs6000-170(config-device-00-24-38-DC-84-19)# vrrp version 3 rfs6000-170(config-device-00-24-38-DC-84-19)# vrrp 10 description NAT-gateway rfs6000-170(config-device-00-24-38-DC-84-19)# vrrp 10 priority 100 rfs6000-170(config-device-00-24-38-DC-84-19)# vrrp 10 timers advertise 1 rfs6000-170(config-device-00-24-38-DC-84-19)# vrrp 10 ip 10.10.10.10 rfs6000-170(config-device-00-24-38-DC-84-19)# vrrp 10 preempt rfs6000-170(config-device-00-24-38-DC-84-19)# vrrp 10 interface vlan 100 rfs6000-170(config-device-00-24-38-DC-84-19)# commit rfs6000-170(config-device-00-24-38-DC-84-19)# wr mem (2) Configure VRRP for Mobility wireless controller rfs6000-175: rfs6000-170(config)# br-rfs6000 00-24-38-DC-87-EC rfs6000-170(config-device-00-24-38-DC-87-EC)# vrrp version 3 rfs6000-170(config-device-00-24-38-DC-87-EC)# vrrp 10 description NAT-gateway rfs6000-170(config-device-00-24-38-DC-87-EC)# vrrp 10 priority 50 rfs6000-170(config-device-00-24-38-DC-87-EC)# vrrp 10 timers advertise 1 rfs6000-170(config-device-00-24-38-DC-87-EC)# vrrp 10 ip 10.10.10.10 rfs6000-170(config-device-00-24-38-DC-87-EC)# vrrp 10 preempt rfs6000-170(config-device-00-24-38-DC-87-EC)# vrrp 10 interface vlan 100 rfs6000-170(config-device-00-24-38-DC-87-EC)# commit rfs6000-170(config-device-00-24-38-DC-87-EC)# wr mem (3) Since these two RFS6000 controllers are in the redundancy cluster, the configuration on rfs6000-170 will be replicated to controller rfs6000-175. Issue wr-mem on rfs6000-175 to save the configuration to startup.cfg. rfs6000-175# wr mem (4) The following commands are used to display the newly configured VRRP information: rfs6000-170# show vrrp brief ------------------------------------------------------------------------------ INTERFACE GRP OP. PRI STATE EXP. TIME REMOTE MASTER IP VIRTUAL IP ------------------------------------------------------------------------------ vlan100 10 100 master 91 centisec - 10.10.10.10 ------------------------------------------------------------------------------- rfs6000-170# rfs6000-170# sh vrrp details VRRP Group 10: version 3 interface vlan100, status up_and_running configured priority 100 advertisement interval 100 centisec local IP address 10.10.10.1 virtual addr count 1, [10.10.10.10] preempt enable, preempt-delay 0 virtual mac address 00-00-5E-00-01-0A sync group disable rfs6000-170# rfs6000-170# show vrrp stats VRRP Group 10: num master transitions 4 new master reason master-no-response advertisment recvd. 133 advertisment recvd. with advertisment interval mismatch 0 advertisment recvd. with address list errors 0 advertisment recvd. in init state 0 advertisment recvd. with zero priority 1 advertisment sent 965469 advertisment sent with zero priority 2 rfs6000-170# (5) RFS6000 rfs6000-170 running-config rfs6000-170# show run ! ! Configuration of BR-RFS6000 version 5.3.1.0-009R ! version 2.1 ! ip access-list nat-rule permit ip 10.10.10.0/24 any rule-precedence 1 permit ip 172.25.2.0/24 any rule-precedence 10 ! wlan Guest-user description Guest Users ssid Guest-user vlan 100 bridging-mode tunnel encryption-type none authentication-type none ! dhcp-server-policy Guest-DHCP dhcp-pool Guest-DHCP network 10.10.10.0/24 address range 10.10.10.11 10.10.10.100 lease 0 8 default-router 10.10.10.10 dns-server 8.8.8.8 8.8.4.4 ! profile br-rfs6000 default-br-rfs6000 no legacy-auto-update br650 autoinstall configuration autoinstall firmware no ap-upgrade auto crypto ikev1 policy ikev1-default isakmp-proposal default encryption aes-256 group 2 hash sha crypto ikev2 policy ikev2-default isakmp-proposal default encryption aes-256 group 2 hash sha crypto ipsec transform-set default esp-aes-256 esp-sha-hmac crypto ikev1 remote-vpn crypto ikev2 remote-vpn crypto auto-ipsec-secure interface me1 interface up1 ip dhcp trust qos trust dscp qos trust 802.1p interface ge1 ip dhcp trust qos trust dscp qos trust 802.1p interface ge2 ip dhcp trust qos trust dscp qos trust 802.1p interface ge3 ip dhcp trust qos trust dscp qos trust 802.1p interface ge4 ip dhcp trust qos trust dscp qos trust 802.1p interface ge5 ip dhcp trust qos trust dscp qos trust 802.1p interface ge6 ip dhcp trust qos trust dscp qos trust 802.1p interface ge7 ip dhcp trust qos trust dscp qos trust 802.1p interface ge8 ip dhcp trust qos trust dscp qos trust 802.1p interface wwan1 interface pppoe1 use firewall-policy default use auto-provisioning-policy Corp-Adoption-Policy service pm sys-restart router ospf ! rf-domain default timezone America/Los_Angeles country-code us use smart-rf-policy Corp-Smart-RF channel-list dynamic ! br-rfs6000 00-24-38-DC-84-19 use profile default-br-rfs6000 use rf-domain default hostname rfs6000-170 ip default-gateway 10.18.13.1 interface vlan1 ip address 10.18.13.170/24 ip dhcp client request options all ip nat outside interface vlan2 ip address 172.25.2.4/24 ip nat inside interface vlan100 description Guest ip address 10.10.10.1/24 ip nat inside use dhcp-server-policy Guest-DHCP cluster name cluster cluster member ip 10.18.13.175 no cluster member vlan ip nat inside source list nat-rule interface vlan1 overload vrrp 10 description NAT-gateway vrrp 10 priority 100 vrrp 10 timers advertise 1 vrrp 10 ip 10.10.10.10 vrrp 10 preempt vrrp 10 interface vlan100 no vrrp 10 sync-group no vrrp 10 monitor critical-resource no vrrp 10 delta-priority vrrp version 3 ! br-rfs6000 00-24-38-DC-87-EC use profile default-br-rfs6000 use rf-domain default hostname rfs6000-175 license AP f600ae9b9426d81086e929744b4ba7540b85a47f8bd8e39401c396c96fd9ee56680a20517a3c5504 ip name-server 10.31.2.10 ip name-server 10.31.2.11 ip default-gateway 10.18.13.1 interface me1 ip address 192.168.0.1/24 interface up1 no shutdown interface ge1 no shutdown switchport mode access switchport access vlan 1 interface ge8 power interface vlan1 description management ip address 10.18.13.175/24 ip dhcp client request options all ip nat outside interface vlan2 no description ip address 172.25.2.4/24 ip nat inside interface vlan100 description Guest ip address 10.10.10.2/24 ip nat inside use dhcp-server-policy Guest-DHCP cluster name cluster cluster member ip 10.18.13.170 no cluster member vlan cluster master-priority 99 logging on logging console warnings logging buffered debugging ip nat inside source list nat-rule interface vlan1 overload vrrp 10 description NAT-gateway vrrp 10 priority 50 vrrp 10 timers advertise 1 vrrp 10 ip 10.10.10.10 vrrp 10 preempt vrrp 10 interface vlan100 no vrrp 10 sync-group no vrrp 10 monitor critical-resource no vrrp 10 delta-priority vrrp version 3 !

How to implement VRRP for wireless controller cluster running 5.3.1 code?

2024-03-19T11:10:20-0700 2024-03-20T02:00:07-0700 https://support.ruckuswireless.com/articles/000006740 2024-03-19T10:57:34-0700 monthly 0.8 admin,premium knowledge_article_3025 knowledge_article_3025 2017-12-12T14:34:11-0800 000006740 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products Why is the Radius command authorization not working for all permitted commands by read-only users? <h1>aaa authorization commands</h1> Configures the AAA authorization configuration parameters for EXEC commands. <h2>Syntax</h2> aaa authorization commands privilege-level default radius [ tacacs+ ] [ none ] no aaa authorization commands privilege-level default radius [ tacacs+ ] [ none ] aaa authorization commands privilege-level default tacacs+ [ radius ] [ none ] no aaa authorization commands privilege-level default tacacs+ [ radius ] [ none ] aaa authorization commands privilege-level default none no aaa authorization commands privilege-level default none <h2>Command Default</h2> AAA authorization is not enabled. <h2>Parameters</h2> <dl><dt> privilege-level</dt><dd id="GUID-64D6D5C2-2919-4DF3-8AA4-DD6E703D223D__GUID-B1094899-FD63-46C7-9E90-4096E8662AE4">Configures the device to perform AAA authorization for the commands available at the specified privilege level. Valid values are 0 (Super User level - all commands), 4 (Port Configuration level - port-config and read-only commands), and 5 (Read Only level - read-only commands).</dd><dt> default</dt><dd id="GUID-64D6D5C2-2919-4DF3-8AA4-DD6E703D223D__GUID-8CC88C21-F5DE-4995-892C-918948D4F894">Configures the default named list.</dd><dt> radius</dt><dd id="GUID-64D6D5C2-2919-4DF3-8AA4-DD6E703D223D__GUID-70A7BC9E-EC41-4295-927A-6329DD26A76C_unique_6">Configures RADIUS authorization.</dd><dt> tacacs+</dt><dd id="GUID-64D6D5C2-2919-4DF3-8AA4-DD6E703D223D__GUID-7170264F-CD88-4C33-A691-4DC569D7D46D_unique_3">Configures TACACS+ authorization.</dd><dt> none</dt><dd id="GUID-64D6D5C2-2919-4DF3-8AA4-DD6E703D223D__GUID-CAFA707F-2B36-4BC5-AA13-E57F31BD12DB_unique_6">Disables accounting.</dd></dl> <h2>Modes</h2> Global configuration mode <h2>Usage Guidelines</h2> You can configure RADIUS, TACACS+, and None as authorization methods. If the configured primary authorization fails due to an error, the device tries the backup authorization methods in the order they are configured. When TACACS+ command authorization is enabled, the Brocade device consults a TACACS+ server to get authorization for commands entered by the user. When RADIUS command authorization is enabled, the Brocade device consults the list of commands supplied by the RADIUS server during authentication to determine whether a user can issue a command that was entered. NOTE TACACS+ and RADIUS command authorization can be performed only for commands entered from Telnet or SSH sessions, or from the console. No authorization is performed for commands entered at the Web Management Interface. TACACS+ command authorization is not performed for the following commands: <ul id="GUID-64D6D5C2-2919-4DF3-8AA4-DD6E703D223D__UL_F9828F98D9944FB8A7C819B5BC49B58C"><li id="GUID-64D6D5C2-2919-4DF3-8AA4-DD6E703D223D__LI_715AB40568C142168201A30052279FB7">At all levels: exit, logout, end, and quit.</li><li id="GUID-64D6D5C2-2919-4DF3-8AA4-DD6E703D223D__LI_2754A47FB78F415D9D74DE68EFC914B9">At the Privileged EXEC level: enable or enable text, where text is the password configured for the Super User privilege level.</li></ul> Because RADIUS command authorization relies on the command list supplied by the RADIUS server during authentication, you cannot perform RADIUS authorization without RADIUS authentication. The no form of the command disables authorization. <h2>Examples</h2> The following example shows how to configure RADIUS command authorization for the commands available at the Super User privilege level (that is, all commands on the device). <pre id="GUID-64D6D5C2-2919-4DF3-8AA4-DD6E703D223D__GUID-8F8C68AF-3EF3-4071-B8CA-639ACBA06B52"> device(config)# aaa authorization commands 0 default radius</pre> The following example shows how to configure TACACS+ command authorization for the commands available at the Super User privilege level (that is, all commands on the device). <pre id="GUID-64D6D5C2-2919-4DF3-8AA4-DD6E703D223D__GUID-76D5D948-3C4E-44A9-AA86-4268578A7CAB"> device(config)# aaa authorization commands 0 default tacacs+</pre>

Why is the Radius command authorization not working for all permitted commands by read-only users?

2024-03-19T10:57:34-0700 2024-03-20T02:00:05-0700 https://support.ruckuswireless.com/articles/000006656 2024-03-19T11:46:26-0700 monthly 0.8 admin,premium knowledge_article_2801 knowledge_article_2801 2017-12-12T16:04:11-0800 000006656 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches How to delete "Crash dump information" message in boot up? You can delete the message after collecting the supportsave.

During boot up, *** Crash dump information is available; please collect it using "supportsave" CLI *** message.

2024-03-19T11:46:26-0700 2024-03-20T02:00:05-0700 https://support.ruckuswireless.com/articles/000014287 2024-03-15T04:02:53-0700 monthly 0.8 admin,premium knowledge_article_5261 knowledge_article_5261 2024-03-15T04:02:53-0700 000014287 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;Firmware;Known issues and workarounds Performance, Configuration, Firmware, Known Issues and Workarounds, SmartCell Gateway Why user are not working with Microsoft Social Media Login ? Engineering confirmed this is working as designed and it's the current limitation while using corporate accounts with their Azure AD based credentials. Currently Microsoft personal account would only work. There is already an active FR raised "FR-6232" to implement enterprise account support in future.

While using Microsoft Social Media Login on vSZ with Corporate account user are unable to authenticate

2024-03-15T04:02:53-0700 2024-03-19T14:00:06-0700 https://support.ruckuswireless.com/articles/000002004 2020-08-10T02:18:28-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_497 knowledge_article_497 2013-06-18T07:18:29-0700 000002004 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector If I forget my Admin password, what is the backdoor login instructions to get into my ZoneDirector. There is no backdoor login method to login into a ZoneDirector. If you have a saved ZoneDirector backup or debug log, contact Ruckus Tech Support, who may be able to decipher the admin password from your files. Ruckus Technical Support will need to validate you are the legal administrator of the device before doing this.

If I forget my Admin password, what is the backdoor login instructions to get into my ZoneDirector.

2020-08-10T02:18:28-0700 2024-03-17T17:32:35-0700 https://support.ruckuswireless.com/articles/000010440 2024-03-11T01:21:27-0700 monthly 0.8 admin,premium knowledge_article_5258 knowledge_article_5258 2020-06-03T01:41:32-0700 000010440 Validated (External) Premium Ruckus cloud wifi Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi Does the Network Name needs to be unique in Ruckus Cloud WIFI? <ul><li>Since the network name needs to be unique in the Ruckus Cloud</li><li>We cannot create an additional network with the same name in Venues.</li><li>However, the SSID can still be set to “Guest” and this will work for multiple Guest networks. </li><li>Create a new network with unique network name.</li><li>Then click the button to change the SSID and you will be able to make your changes as per Venue.</li></ul> <div style="margin-left: 80px;"><img alt="User-added image" height="299" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000Hor&feoid=00N50000002Cf3M&refid=0EM2J000001SW8J" width="500"></img> <img alt="User-added image" height="277" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000Hor&feoid=00N50000002Cf3M&refid=0EM2J000001SW8O" width="500"></img></div> <div style="margin-left: 40px;"> Note: if a customer requests an SSID that is the same as another one, but obviously a different password, etc. this would help. </div>

This article explains whether the Network Name needs to be unique in the Ruckus Cloud WIFI.

2024-03-11T01:21:27-0700 2024-03-13T14:00:10-0700 https://support.ruckuswireless.com/articles/000006258 2024-03-11T01:19:48-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_5259 knowledge_article_5259 2017-02-08T12:18:06-0800 000006258 Validated (External) Public Ruckus cloud wifi Configuration;Security;Known issues and workarounds Configuration, Security, Known Issues and Workarounds, Ruckus Cloud WiFi Does the Cloud interface have the capability to block a particular user/client from connecting to WLAN/SSID? We can block clients from connecting to the SSID by creating L2 ACL and adding the client MAC addresses to the list. Go to WLAN settings > Advanced >> Access control >> Layer 2 Services > Access Control > Access Control Profiles > Create a profile and enable L2 ACL Please find the steps to add the MAC addresses. To configure an L2/MAC ACL: 1. Go to Services & Profiles > Access Control 2. Expand the L2-L7 Access Control section. 3. In L2/MAC Access Control, click Create NewAlternatively, you can create a Layer 2/MAC ACL from the WLAN creation page while creating a new WLAN or modifying an existing WLAN ( Wireless LANs > Edit > Advanced Options > Access Control > L2/MAC > Create New.) 4. Type a Name for the ACL. Configuring Services and Profiles Configuring Network Access Controls 5. Type a Description of the ACL. 6. Select the Restriction mode as either allow or deny. 7. Type a MAC address in the MAC Address text box, and then click Create New to save the address. The new MAC address that you added appears next to the Stations field. You can enter up to 128 MAC addresses per ACL. <img src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000HqT&feoid=00N50000002Cf3M&refid=0EMPH000001zXXx"></img> 8. Click OK to save the L2/MAC based ACL. You can create up to 32 L2/MAC ACL rules and each rule can contain up to 128 MAC addresses. Each WLAN can be configured with one L2 ACL.

Does the Cloud interface have the capability to block a particular user/client from connecting to WLAN/SSID?

2024-03-11T01:19:48-0700 2024-03-13T14:00:10-0700 https://support.ruckuswireless.com/articles/000006293 2024-03-11T01:32:20-0700 monthly 0.8 admin,premium knowledge_article_5251 knowledge_article_5251 2017-03-06T14:43:30-0800 000006293 Validated (External) Premium Cloud services Configuration;Firmware;Installation;Known issues and workarounds;Downloads Configuration, Firmware, Installation, Known Issues and Workarounds, Downloads, Cloud Services How do I upgrade a T300 to be used on the Ruckus Cloud WiFi? Since the T300 doesn't use power adapters you will need a dumb POE switch in-between the PC and the AP to give it power or use an inline power injector. 1. Go to support.ruckuswirless.com and download the 110.0.0.0.2005 image for the T300. Link to download the image is as below: https://support.ruckuswireless.com/software/2436-zoneflex-solo-access-point-110-0-0-0-2005-ga-software-release-t300 2. Factory default the AP by holding the reset button down for 10 seconds. Reset button is next to the ethernet connector inside. Yes, this is not easy to do. 3. Set up your PC to be on the 192.160.0.0 network. Go to start and select the control panel, click on network and sharing options icon. On the left side of the next screen click on Change adapter settings. Find the local area connection that you are using and right click on the icon and select properties. Double-click the TCP IPv4. In the next screen select "use the following IP address" and put in 192.168.0.20/24 , don't need DNS set. Click ok. Your PC is now set up to be on the 192.168.0.x subnet. To change back when done follow same instructions but choose "Obtain address automatically" instead of setting an IP address. Plug the AP into the switch and wait for it to fully power up, just a couple of minutes. Point a browser to 192.168.0.1 and the AP should display a Standalone screen. Once the standalone screen is displayed (it will show tabs on left side of screen, Status, Configuration, Maintenance and Admin. Select Upgrade under the Maintenance tab. In the next screen select the Local Upgrade option and point the file you loaded earlier. It will take about 5 minutes to load. Once it stops rebooting you should be good to go with the new image. 4. Power cycle your AP, after you enter it's Serial Number into your Cloud Wi-Fi access points page.

How do I upgrade my T300 AP to be used on the Ruckus Cloud WiFi.

2024-03-11T01:32:20-0700 2024-03-13T14:00:07-0700 https://support.ruckuswireless.com/articles/000005686 2024-03-11T01:28:26-0700 monthly 0.8 admin,premium knowledge_article_5253 knowledge_article_5253 2016-04-13T15:41:22-0700 000005686 Validated (External) Premium Ruckus cloud wifi Configuration;Installation;System network management;Troubleshooting;Known issues and workarounds Configuration, Installation, System Network Management, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi Why is my Sponsored Guest notifications are not received by the Sponsored Guest.

Instruction on how to get the Sponsored Guest SMS or Email notifications to be sent to the sponsored guest

2024-03-11T01:28:26-0700 2024-03-13T14:00:07-0700 https://support.ruckuswireless.com/articles/000001748 2020-08-09T22:01:12-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1886 knowledge_article_1886 2013-03-05T22:07:54-0800 000001748 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware Firmware, ZoneDirector How do I upgrade ZoneDirector to the latest firmware, using the WebUI? <div>Latest firmware info is available at Ruckus Wireless Support website at <a href="https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com/</a> Choose PRODUCTS, and the ZoneDirector (ZD) Product Family box. ZD1200 and ZD3000 have listed Recommended Firmware version, and pages for Technical Documents and Software Downloads. (ZD1000 and ZD5000 are found under EOL Ruckus Products page: <a href="https://support.ruckuswireless.com/product_families/4-eol-products" target="_blank">https://support.ruckuswireless.com/product_families/4-eol-products</a> ) Click on Software Downloads link to the right of the ZD product page. You will find: 1. All the available firmware versions 2. All available SNMP MIBs and any AP or security patch bundles. 3. Each Software Release Firmware download page has a link to Release Notes under "Documents" that goes into specific details on Supported AP Platforms and Upgrade Paths, Enhancements and Resolved issues, and Client Interoperability information. Note: Please ensure you have an active support contract on the ZoneDirector in order to download the firmware. Once you decide on the firmware version to use, download the file to your local machine. - Login to the ZD and go to the Administer > Upgrade page. - Click on the "Choose File" and browse the downloaded firmware file. - ZD will prompt you to backup the current configuration. - If you don't have the most latest backup, say "Yes" to this before proceeding with ZoneDirector upgrade. </div> <div><img alt="User-added image" height="441" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxau&feoid=00N50000002Cf3M&refid=0EM2J000000q8BA" width="740"></img></div> <div> - Upgrade can take anywhere from 15-20 minutes depending on the ZoneDirector model, and amount of configuration you have. - Once the ZoneDirector is upgraded, firmware upgrade will be pushed to all ZD managed APs (so there is really no separate upgrade action required for APs). This in turn can take another 15-20 minutes depending on the number of APs this network has and the model of APs. DO NOT DISCONNECT OR POWER OFF THE ZD DURING ANY PART OF THE UPGRADE PROCEDURE. ---------- Notes: 1. If you are on one of the very old ZoneDirector firmware, please follow the suggested upgrade path explained in the Software Release you wish to upgrade to. Upgrade to the minimum required version (and perhaps further back) if you are on older than directly upgradeable versions. 2. If your setup includes two ZoneDirectors in a SmartRedundancy mode, please follow the upgrade procedure explained in <a href="https://support.ruckuswireless.com/answers/000001374" target="_blank">KBA-1374: Firmware upgrade in smart redundancy setup</a>. ---------- “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.” </div>

Procedure to perform firmware upgrade of ZoneDirector using WebGUI.

2020-08-09T22:01:12-0700 2024-03-08T00:58:34-0800 https://support.ruckuswireless.com/articles/000014280 2024-02-29T12:14:17-0800 monthly 0.8 admin,premium knowledge_article_5248 knowledge_article_5248 2024-02-29T12:14:17-0800 000014280 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Security;System network management;Troubleshooting Security, System Network Management, Troubleshooting, SmartCell Gateway Why did I lose the access to SSH post upgrading my zone from 6.1.2.0.850 to higher? Issue: We recently noticed a behavior where APs started losing SSH client access after upgrading the zone from 6.1.2.0.850 to higher code. Customer was using vSZ-H appliance on version 6.1.2.0.404, however the AP/zone version was set to 6.1.2.0.850. Impact: Losing SSH access to APs would be minimal impact for users, however it could be a major impact for admin's, who need SSH access to APs during troubleshooting and AP-vSZ connectivity process. Who will face this issue? Majority of the SSH clients supports updated ciphers. Only old SSH clients which are using weaker ciphers would lose the access to SSH of the AP. Solution: This is a design intend and not a defect. Starting release 6.1.2 patch 1 (6.1.2.0.981), weaker ciphers are not supported. The dropbear is replaced with openssh for this reason. Please find the release notes of 6.1.2.patch1 below which has the security feature added under BSI compliance mode supported features. <a href="https://support.ruckuswireless.com/documents/4669" target="_blank">https://support.ruckuswireless.com/documents/4669</a> <img src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000K8P&feoid=00N50000002Cf3M&refid=0EMPH000002F5fm"></img> As a part of security measures, Customers are requested to update their SSH client with more robust ciphers to avoid any security holes. Note: Anyone using latest/updated key algorithm would be able to connect just fine in version above 6.1.2.0.850.

Losing SSH access after upgrade

2024-02-29T12:14:17-0800 2024-03-05T10:00:07-0800 https://support.ruckuswireless.com/articles/000008823 2021-04-07T05:07:30-0700 monthly 0.8 admin,premium knowledge_article_3584 knowledge_article_3584 2019-02-13T03:02:22-0800 000008823 Validated (External) Premium Ruckus cloud wifi;Unleashed;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;Configuration;Installation;Troubleshooting Performance, Configuration, Installation, Troubleshooting, Ruckus Cloud WiFi, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor how do I access an AP when It is not reachable but It is radiating the recovery SSID <ul><li style="margin-left: 0cm;">Before 3.6 release</li></ul> <div style="margin-left: 40px;"><img alt="User-added image" height="428" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3yh&feoid=00N50000002Cf3M&refid=0EM2J000000m7ed" width="760"></img> </div> <div style="margin-left: 0cm;">When the passphrase says “Hash of BSSID” It means only Ruckus Support can get the password inside one of the APs by launching a shell command with the Island BSSID of the AP (please, open a support case from Ruckus portal if this is the case). This is the case only for APs in factory default and pre 3.4.</div> <div style="margin-left: 0cm;"> <ul><li style="margin-left: 0cm;">3.6 onwards. Here there is no Island BSSID anymore, but Configure.Me-xxxxxx or Recover.Me-xxxxxx, depending the case:Note: ZD allows configuring passwords less than 8 chars, but passphrase has to be at least 8 chars long Hence, for passwords less than 8, dashes (-) are padded to passphrase to reach length 8. For example - if admin password is ’admin’ then passphrase would be ‘admin---’ Passphrase length : 8-32 chars</li></ul> <div style="margin-left: 40px;"><img alt="User-added image" height="292" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3yh&feoid=00N50000002Cf3M&refid=0EM2J000000m7ei" width="767"></img></div> </div>

Depending on the version release, there are different methods to access an AP via WiFi when It is not accessible by GUI/CLI/ssh but It is radiating the recovery SSID

2021-04-07T05:07:30-0700 2024-02-28T08:47:20-0800 https://support.ruckuswireless.com/articles/000001879 2024-02-23T12:40:10-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_270 knowledge_article_270 2013-03-25T18:50:39-0700 000001879 Validated (External) Public All;Brocade Mobility 6511 Wallplate Access Point Installation;Security;Known issues and workarounds;Website issues;Registration Installation, Security, Known Issues and Workarounds, Website Issues, Registration, All Where can I find more information on Ruckus Security policies? We have two areas on the website describing Security policies: <table border="1" style="width: 500px;"><tbody><tr><td colspan="1" rowspan="1">Location</td><td colspan="1" rowspan="1">Content</td></tr><tr><td colspan="1" rowspan="1"><a href="http://www.ruckuswireless.com/security" target="_blank">http://www.ruckuswireless.com/security</a></td><td colspan="1" rowspan="1">This is a general overview of our security policies and information on how to report a vulnerability. No login is required.</td></tr><tr><td colspan="1" rowspan="1"><a href="https://support.ruckuswireless.com/security" target="_blank">https://support.ruckuswireless.com/security</a></td><td colspan="1" rowspan="1">This has the most up-to-date information and is the location where we first post information. It is available to premium support customers only and requires a valid login with support contract.</td></tr></tbody></table> RUCKUS Security Policy Requires customers to provide a minimum of following information which is not limited to, in order to report a security issue : [1]Detailed description of the issue [2]Details Information to reproduce the issue for the reported CVE and/or Tools used with details to confirm impact of the CVE along with the results. [3] Technical contact for follow-up [4] List of Ruckus products / software version(s) affected as per customer [5] Logs or any other helpful information Please refer to the following link for RUCKUS Security incident response policy and the Lifecycle of reported Security issue : <a class="fui-Link ___1rxvrpe f2hkw1w f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn" href="https://support.ruckuswireless.com/security-incident-response-policy" target="_blank" title="https://support.ruckuswireless.com/security-incident-response-policy">https://support.ruckuswireless.com/security-incident-response-policy</a>

Where can customers find information on Ruckus Security policies and Vulnerability reporting?

2024-02-23T12:40:10-0800 2024-02-27T22:00:06-0800 https://support.ruckuswireless.com/articles/000003241 2020-08-18T07:27:14-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1970 knowledge_article_1970 2014-07-25T13:05:54-0700 000003241 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What is the need for inactivity timeout? Once a client makes a connection, AP will keep monitoring for its traffic. If there is no traffic at all for a certain period of time, the AP will remove that particular client's entry. This period is called the Inactivity Timeout. We could set a value between 1-10 minutes on Sone director with the default being 5 minutes. On the SZ platform, the inactivity time out value could be set between 60-1000 seconds with 120 seconds being the default. When this value gets triggered, AP will also send a disassociate packet to the client and log a message under events. This type of purging of inactive client entries is essential especially if the environment is highly transient in terms of client foot traffic. This is true for shopping malls and city-wide WiFi deployments. This purging will avoid controller resource consumption in maintaining client entries that are no longer active on the network. This will also help to avoid controller reaching system limits in terms of the number of clients that can connect. There may be certain deployments where the default inactivity timeout can cause unnecessary client disconnection. Examples include warehouses that use barcode scanners. Barcode scanners can be silent (non-chatty) to conserve battery power and communicate only if required. In these conditions, if the scanner gets disconnected, it has to reconnect back which will be unacceptable. For such SSIDs, raising inactivity timeout value is suggested. We can find inactivity field in Zonedirector under WLAN configuration. <Configure --> WLANs --> Select the WLAN Affected --> Advanced Options Inactivity timeout> <img alt="User-added image" height="220" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxxF&feoid=00N50000002Cf3M&refid=0EM50000000LmbT" width="500"></img> On the SZ, we would see it under WLAN configuration > Advance options, <img alt="User-added image" height="177" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxxF&feoid=00N50000002Cf3M&refid=0EM2J000001CITs" width="500"></img>

This article explains the need for inactivity timeout for clients.

2020-08-18T07:27:14-0700 2024-02-18T23:55:41-0800 https://support.ruckuswireless.com/articles/000011498 2024-02-15T07:37:59-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4628 knowledge_article_4628 2021-03-30T02:48:56-0700 000011498 Validated (External) Public Ruckus cloud switch Performance;System network management;Known issues and workarounds Performance, System Network Management, Known Issues and Workarounds, Ruckus Cloud Switch How to add the production switch to the Ruckus Cloud without loosing its existing configuration? We have the Brownfield Switch Configuration feature supported from Cloud v21.03 where production ICX switch can be added to the Ruckus Cloud without loosing its existing configuration, meaning as long as the switch is a model supported by Ruckus Cloud, and running a firmware version that is manageable by Ruckus Cloud, we will be able to manage that switch and retain their existing switch configuration.

Feature to add production switch to the Rucks Cloud without loosing its existing configuration

2024-02-15T07:37:59-0800 2024-02-16T02:00:07-0800 https://support.ruckuswireless.com/articles/000011612 2024-02-15T00:13:50-0800 monthly 0.8 admin,premium knowledge_article_5241 knowledge_article_5241 2021-04-29T06:41:47-0700 000011612 Validated (External) Premium Ruckus cloud wifi Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi How to add stack switches to the RUCKUS One? Steps to add stack ICX switches to the RUCKUS One is as follows. Step 1: Connect the stacking cable between the switches offline. Data port cannot be used for Stacking. Step 2: On the Ruckus One Dashboard, click Wired > Switch list Step 3: Click Add in the upper-right corner and select Switch Stack. The Create Stack dialog box is displayed. Alternatively, from Venue page, select a venue, select Devices, then select Switch, and then click Add Stack found on the top right corner. <img src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000HFN&feoid=00N50000002Cf3M&refid=0EMPH000001vvLx"></img> Step 4: Complete the following fields to add a stack: <ul><li>Venue: Select the venue to which you want to deploy this switch.</li><li>Stack Name: Enter the name of the stack.</li><li>Description: (Optional) Add a brief description of the switch.</li><li>Stack Members: Select the switches that you want to add to the stack.</li><li>Serial Number: Enter the 11-digit valid serial numbers of the switches. Click Add another member to add more switches to the stack.</li></ul>

These steps to be followed to add stack switches in the RUCKUS One

2024-02-15T00:13:50-0800 2024-02-15T10:00:10-0800 https://support.ruckuswireless.com/articles/000014234 2024-02-15T00:17:40-0800 monthly 0.8 admin,premium knowledge_article_5236 knowledge_article_5236 2023-07-27T08:30:25-0700 000014234 Validated (External) Premium Ruckus cloud wifi Configuration;Firmware;Installation Configuration, Firmware, Installation, Ruckus Cloud WiFi Ruckus-one supported and access points Supported Firmware and AP Models: Below are the access points that are supported on Ruckus-One. Includes both indoor and outdoor. <table style="width: 323px;" width="322"><colgroup><col style="width: 139pt;" width="185"></col><col style="width: 103pt;" width="137"></col></colgroup><tbody><tr><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; height: 19px; width: 185px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #b4c6e7; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Indoor Access Points</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; width: 137px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #b4c6e7; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">End of Sale Products</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">H550</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">H510</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">H350</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">H320</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">R770</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">M510</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">R760</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">R730</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">R750</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">R720</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">R850</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">R710</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">R650</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">R610</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">R560</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">R600</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;"> R550</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">R510</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;"> R350</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">R500</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;"> </td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">R320</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;"> </td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">R310</td></tr></tbody></table> Note: R760 or R560 cannot be added to customers migrated from RUCKUS Cloud. Workaround: Minimum firmware version to support R560, R760 is 6.2.1.x. Some migrated Cloud customers may have 6.2.0.x. Ensure Venue firmware is updated to the latest firmware version. <table style="width: 291px;" width="289"><colgroup><col style="width: 111pt;" width="147"></col><col style="width: 107pt;" width="142"></col></colgroup><tbody><tr><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; height: 19px; width: 147px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #b4c6e7; border-top: 1px solid black; border-right: 1px solid black; border-left: 1px solid black;">Outdoor Access Points</td><td colspan="1" rowspan="1" class="xl66" style="border-bottom: 1px solid black; width: 142px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; background-color: #b4c6e7; border-top: 1px solid black; border-right: 1px solid black; border-left: none;">End of Sale Products</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">T750 Series</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">E510</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;">T350</td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">T610</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;"> </td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">T610S</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;"> </td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">T310 Series</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;"> </td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">T301 Series</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;"> </td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">T300 Series</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;"> </td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;">T710 Series</td></tr><tr><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; height: 19px; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: 1px solid black;"> </td><td colspan="1" rowspan="1" class="xl65" style="border-bottom: 1px solid black; padding-top: 1px; padding-right: 1px; padding-left: 1px; white-space: nowrap; border-top: none; border-right: 1px solid black; border-left: none;"> </td></tr></tbody></table> Ruckus Cloud WiFi supports ZoneFlex 802.11ac Access Points, but not all ZoneFlex APs support Ruckus Cloud management straight from the factory. The Table included in this article identifies starting Serial Numbers of 802.11ac APs that have firmware allowing Ruckus Cloud management from the factory. Most RUCKUS APs manufactured after November 2016 are supported by RUCKUS One. To find out whether your APs have the right cloud-ready firmware, please check the below url. https://support.ruckuswireless.com/articles/000006310 To verify the updated list, please check the below URL https://www.ruckusnetworks.com/ruckus-one-supported-network-devices

2024-02-15T00:17:40-0800 2024-02-15T10:00:08-0800 https://support.ruckuswireless.com/articles/000007992 2024-02-14T02:24:45-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5235 knowledge_article_5235 2018-06-14T13:15:40-0700 000007992 Validated (External) Public Ruckus cloud wifi Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Cloud WiFi What IP addresses or FQDNs do I need to add to my Firewall or Content Filter for the Ruckus Cloud WiFi? To allow RUCKUS One to function properly, for Ruckus Cloud WiFi Access Point & RUCKUS ONE connectivity, please configure your firewall to allow for outbound connectivity according to the following guidelines: Outbound HTTPS (TCP 443) from APs and Switches to: https://ap-registrar.ruckuswireless.com https://sw-registrar.ruckuswireless.com https://ocsp.comodoca.com https://ocsp.entrust.net https://ruckus.cloud https://eu.ruckus.cloud https://asia.ruckus.cloud https://device.ruckus.cloud https://device.eu.ruckus.cloud https://device.asia.ruckus.cloud https://storage.googleapis.com Outbound SSH (TCP 22) from APs and Switches to: device.ruckus.cloud device.eu.ruckus.cloud device.asia.ruckus.cloud <img alt="User-added image" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000Gw1&feoid=00N50000002Cf3M&refid=0EM2J000000mAuW"></img> Note: Please contact Ruckus support, if you are still facing issues to connect your APs to Ruckus Cloud WiFi controller.

These are the URLs that need to be added to Firewall/Content Filters, that will allow Ruckus Access Points to connect successfully to RUCKUS-ONE

2024-02-14T02:24:45-0800 2024-02-14T18:00:07-0800 https://support.ruckuswireless.com/articles/000002776 2024-02-12T01:06:54-0800 monthly 0.8 admin,premium knowledge_article_5233 knowledge_article_5233 2014-03-11T14:57:25-0700 000002776 Validated (External) Premium Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway 1. What could cause DVLAN to break after upgrading to 9.7+? 2. What are the compatible versions of ZD/SZ and Bradford NAC? It has been discovered that Ruckus Wireless ZD Controllers version 9.12.x or later require a different Called-Station-Id configuration than previously when integrating with Network Sentry. Solution: In order to ensure the proper Called-Station-Id format on Ruckus Wireless ZD Controllers (version 9.12.x or later), use the following CLI command to specify the format: called-station-id-type ap-mac Documented email sent from Bradford in case 475784.

What could cause DVLAN to break after upgrading to 9.7+? What are compatiblie versions of ZD/SZ and Bradford NAC?

2024-02-12T01:06:54-0800 2024-02-13T10:00:11-0800 https://support.ruckuswireless.com/articles/000002824 2024-02-12T01:10:08-0800 monthly 0.8 admin,premium knowledge_article_5231 knowledge_article_5231 2014-03-24T00:09:43-0700 000002824 Validated (External) Premium Flexmaster umm Configuration;Troubleshooting Configuration, Troubleshooting, FlexMaster UMM Purge policy configuration not working properly in FM 9.6.0.0.17 - It is working as per design. - Before doing purge, there will be 8 days of data in the DB. <div>- FM only purges data once in a day. Conclusion: 8 days of data will be on the system when we use display period as more than 7 days for the report, so that there will be some additional records while creating the report. </div>

If the FM device events purge policy is set to 7 days , why it is showing more records for 31 days?

2024-02-12T01:10:08-0800 2024-02-13T10:00:10-0800 https://support.ruckuswireless.com/articles/000002873 2024-02-12T01:22:57-0800 monthly 0.8 admin,premium knowledge_article_5227 knowledge_article_5227 2014-04-25T20:06:07-0700 000002873 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector How to know the Access Points that could be managed by Zone Director Finding if any Access Points that could be managed/supported by Zone Director we could check this under the Zone Director. Below is the process to check this > Go to Administer > Upgrade > Under “Current Software” click on 'click here' it will give the list of Access points supported, below is the snippet <img alt="User-added image" height="315" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000Fgb&feoid=00N50000002Cf3M&refid=0EMPH000001r74P" width="500"></img> - It is also available inside ZD release notes under Supported AP models. <img src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000Fgb&feoid=00N50000002Cf3M&refid=0EMPH000001r7M9"></img>

Which access points could be managed by Zone Director

2024-02-12T01:22:57-0800 2024-02-13T10:00:07-0800 https://support.ruckuswireless.com/articles/000003146 2024-02-12T01:22:11-0800 monthly 0.8 admin,premium knowledge_article_5228 knowledge_article_5228 2014-06-17T20:44:10-0700 000003146 Validated (External) Premium Unleashed;Zonedirector;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, Unleashed, ZoneDirector Meaning for the log "IOCTL(89f8) failed for station <04:0c:ce 4:91:78> deletion -- No such file or directory(2)" “IOCTL(89f8) failed for station <04:0c:ce 4:91:78> deletion -- No such file or directory(2)” Meaning for the above mentioned log is as follows. Specific wireless client leaves a BSSID without sending De-authentication packet, ZD tries to delete the MAC entry of the client but does not see the client present anymore. No need to worry about the above mentioned error. It is harmless one.

Meaning for the log "IOCTL(89f8) failed for station <04:0c:ce 4:91:78> deletion -- No such file or directory(2)"

2024-02-12T01:22:11-0800 2024-02-13T10:00:07-0800 https://support.ruckuswireless.com/articles/000002966 2024-02-12T01:24:30-0800 monthly 0.8 admin,premium knowledge_article_5226 knowledge_article_5226 2014-04-25T14:00:20-0700 000002966 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What are acceptable MAC address formats for WLAN Whitelist? Only colon delimited client MAC addresses are accepted. Screenshot attached for your reference; <img src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2PH0000000FiD&feoid=00N50000002Cf3M&refid=0EMPH000001r7Qz"></img> Configure WLAN >> Advanced options >> Wireless Client Isolation >> Create whitelist for gateway and other allowed hosts.

Only a colon delimited MAC address can be entered in the Access Control Whitelist (00:00:00:11:22:33), with a dot delimited IPv4 address. It doesn't take dash delimiter or no delimiter, and will popup a warning with those MAC address formats.

2024-02-12T01:24:30-0800 2024-02-13T10:00:06-0800 https://support.ruckuswireless.com/articles/000010855 2024-02-08T09:54:51-0800 monthly 0.8 admin,premium knowledge_article_4390 knowledge_article_4390 2020-09-08T05:51:48-0700 000010855 Validated (External) Premium Sz144;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 100-D (SZ100-D) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, SZ144, SZ100 Can I restore a configuration backup of SZ104/SZ124 on SZ144? If you have a configuration backup of a SZ104 or SZ124 which is from version 5.1.x or 5.2.x then you can restore it in the SZ144 running 5.2.1.0.515. vSZ-E and vSZ-H configuration backups can also NOT be restored on SZ144. This is only about the configuration backup, not about the AP firmware that can be used in a zone.

Can I restore a configuration backup of the SZ104 or SZ124 on a SZ144?

2024-02-08T09:54:51-0800 2024-02-12T02:00:09-0800 https://support.ruckuswireless.com/articles/000001619 2021-04-07T02:09:46-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3527 knowledge_article_3527 2013-02-24T19:44:51-0800 000001619 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor Does Ruckus access points supports STP (Spanning Tree Protocol)? STP is not Supported by Ruckus Access Points.

STP is required by most of network devices to detect and prevent network loops.

2021-04-07T02:09:46-0700 2024-02-10T15:17:21-0800 https://support.ruckuswireless.com/articles/000003367 2020-09-01T19:50:31-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4385 knowledge_article_4385 2014-09-08T00:32:29-0700 000003367 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What causes the yellow triangle icon with exclamation mark to appear in the system tray and what to do do to fix the connection? Some of the possible solutions include: 1. Wireless driver upgrade. If the driver version is already brand new and the problem isn't resolved, try uninstalling and installing a fresh driver copy. 2. Remove the wireless profile and re-add the target network again 3. Change the network location type from Public to either Home or Work. Please check this URL <a href="http://www.sevenforums.com/tutorials/43629-network-location-set-home-work-public-network.html" style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" target="_blank">http://www.sevenforums.com/tutorials/43629-network-location-set-home-work-public-network.html</a> 4. Try the "ipconfig /renew" command 5. Enable FIPS for this particular wireless connection. Please check this URL <a href="http://support.lenovo.com/us/en/documents/ht080645?tabName=Solutions" style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" target="_blank">http://support.lenovo.com/us/en/documents/ht080645?tabName=Solutions</a> 6. Increase the DHCP lease time to 24 hours or more. With 24 hour lease time, the client will not attempt to renew the IP for 12 hours which should be sufficient to cover an entire work shift. Irrespective of the above attempts, if the problem still persists, following are few more things to try: 1. Use "Troubleshoot problems" option by right clicking on the limited connection icon 2. Use "Diagnose this connection" option. This can be seen when you highlight the wireless network connection icon under the All Control Panel Items --> Network Connections. 3. Check for registry key issues 4. First temporarily disable AV and other security software. If this doesn't resolve the issue, try temporarily uninstalling to check again (assuming you are at least behind the corporate firewall and using safe browsing practices). 5. Reload entire Windows OS (as a last resort) 6. Check with your laptop vendor to see if any other customers have reported a similar issue

This article discusses possible reasons for the limited connectivity icon in the system tray and what can be done to address it

2020-09-01T19:50:31-0700 2024-02-08T18:10:29-0800 https://support.ruckuswireless.com/articles/000009272 2024-02-02T05:38:40-0800 monthly 0.8 admin,premium knowledge_article_5223 knowledge_article_5223 2019-06-11T00:00:49-0700 000009272 Validated (External) Premium Icx 7850;RUCKUS ICX 7850 Campus Switches Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ICX 7850 How to change speed to 10g on ICX7850-48F (applicable only to 08.0.95 and below code series) We need to change the speed on all four ports using a range, this will happen on every 4 ports on the ICX7850-48F. EX: 1/1/1 to 1/1/4, 1/1/5 to 1/1/9, ...until 1/1/48 ICX7850-48F Router(config)#interface ethernet 1/1/9 to 1/1/12 ICX7850-48F Router(config-mif-1/1/9-1/1/12)#speed-duplex 10g-full ICX7850-48F Router(config-mif-1/1/9-1/1/12)# Then when the ports are on 10G we can individually change the speed on the ports to 1G or 10G: ICX7850-48F Router(config)#int ethernet 1/1/9 ICX7850-48F Router(config-if-e25000-1/1/9)#speed-duplex 1000-full ICX7850-48F Router(config-if-e25000-1/1/9)# The behavior has been modified starting from software versions 09.0.10x and above. As of version 09.0.10x and later, the combination of 1000-full and 10g-full is not supported for individual ports. To ensure consistency, the speed config will be restricted to quad ports.

Trying to change speed on ICX7850-48F there is a limitation.

2024-02-02T05:38:40-0800 2024-02-05T06:00:07-0800 https://support.ruckuswireless.com/articles/000001494 2024-02-02T05:41:36-0800 monthly 0.8 admin,premium knowledge_article_5222 knowledge_article_5222 2013-01-22T13:17:30-0800 000001494 Validated (External) Premium Flexmaster umm Installation;System network management Installation, System Network Management, FlexMaster UMM Not able to install the FM patch file from the GUI. FM patch file can be installed only from CLI. Once after downloading the FM patch file , Please check the MD5 checksum value of the file to ensure that the file has downloaded properly from the Ruckus FTP server. In RedHat Linux CLI use the following command. md5sum <patch file name> When you execute the above mentioned command, You will get some values. Compare the values with the original one. If the MD5 check sum value did not match then you cannot install the patch file. Please download once again and try to install after checking the MD5 checksum values.

2024-02-02T05:41:36-0800 2024-02-05T06:00:07-0800 https://support.ruckuswireless.com/articles/000001536 2024-02-02T05:42:15-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_5221 knowledge_article_5221 2013-01-23T12:55:05-0800 000001536 Validated (External) Public Zoneflex indoor;Zoneflex outdoor;Smartcell ap Performance;System network management Performance, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP How to view CPU and Memory utilization from AP CLI Using the following CLI command from SSH, the AP CPU & Memory utilization can be viewed. Execute the below CLI command. $ ssh 172.16.69.102 Please login: admin password : Copyright(C) 2021 Ruckus Wireless, Inc. All Rights Reserved. ** Ruckus R550 Multimedia Hotzone Wireless AP: 362072009444 rkscli: sysinfo CPU : 0.50% Memory : 384476 KB (free), 793836 KB (total) OK rkscli:

How to view CPU and Memory utilization from AP CLI

2024-02-02T05:42:15-0800 2024-02-05T06:00:06-0800 https://support.ruckuswireless.com/articles/000005116 2024-02-02T05:43:09-0800 monthly 0.8 admin,premium knowledge_article_5220 knowledge_article_5220 2015-11-03T10:31:54-0800 000005116 Validated (External) Premium Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Installation;Troubleshooting Installation, Troubleshooting, ZoneDirector, SmartCell Gateway Why ZD managed AP's fail to get configuration updated after joining vSZ? We have a recommended migration process that need to be followed if the APs are managed by a ZD. There are are two ways to migrate them: 1- Use migration script as described under: https://support.ruckuswireless.com/documents/736-zonedirector-to-scg-vscg-sz-access-point-migration-guide/download 2- Convert the APs to SCG code using LWAPP2SCG, and then factory reset the AP. It is required to factory reset the AP in this case, otherwise the AP will have a corrupted configuration. The only case where a factory reset is not required is when the AP has an empty configuration (Brand new out of box). “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

If ZD managed AP's fail to get config updated after joining vSZ, it may be due to reset required after code change.

2024-02-02T05:43:09-0800 2024-02-05T06:00:06-0800 https://support.ruckuswireless.com/articles/000001388 2020-08-12T04:06:31-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4182 knowledge_article_4182 2013-01-16T07:51:30-0800 000001388 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Configuration;Security Configuration, Security, ZoneFlex Indoor, ZoneFlex Outdoor Is there a way to enable Client Isolation on standalone AP? We do have some form of client isolation on standalone APs. <div>However, there has never been full client isolation on Standalone APs. Standalone APs do not have layer 3/layer4 isolation filters. </div> rkscli : set ap-bridge <wlan name> [enable|disable] rkscli : get ap-bridge <wlan name> set ap-bridge : set ap-bridge <wlan name> {enable|disable} -- Modify AP WLAN's wireless bridge mode Example : rkscli : get ap-bridge wlan0 wlan0 AP-Bridge Mode: Disabled OK rkscli : set ap-bridge wlan0 enable OK The ‘set ap-bridge disable’ disables the inter BSS relay that permits clients associated to the same WLAN to intercommunicate directly via Layer 2 (MAC forwarding). Disabling this feature will not block users from directly communicating if associated to other WLANs on the same AP or across APs. The full isolation feature is only available with ZoneDirector that manages layer 3 filter, implemented on each AP, that uses a destination Layer3/layer4 filter to block traffic on the locally defined subnets. However, it will not block L2 port snooping, ARP resolution, or other L2 communications across Access Points.

Enable client isolation on Standalone AP

2020-08-12T04:06:31-0700 2024-01-26T04:39:30-0800 https://support.ruckuswireless.com/articles/000014272 2024-01-24T04:47:51-0800 monthly 0.8 admin,premium knowledge_article_5210 knowledge_article_5210 2024-01-24T04:47:51-0800 000014272 Validated (External) Premium Ruckus support services Support license activation;Registration Support License Activation, Registration, Ruckus Support Services How to Enable or Disable a user to receive SPA email for future Sales orders

This is article has steps/ workflow on how to enable/disable a user to receive SPA email for future Sales orders

2024-01-24T04:47:51-0800 2024-01-24T14:00:06-0800 https://support.ruckuswireless.com/articles/000004799 2020-08-18T04:23:27-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4347 knowledge_article_4347 2015-07-01T05:00:13-0700 000004799 Validated (External) Public Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway How can I apply VLAN for AP management under SmartZone? Unlike in ZoneDirector there is no GUI option available to apply VLAN ID setting for AP management. This can be done in two different ways if this is desired: 1. Via AP CLI: A. Admin has to login to the AP and run "set ipaddr wan vlan <vlan_id> <ip_addr> <subnet_mask> <gateway>" command. B. After a reboot all management traffic coming out of this AP will be tagged with VLAN ID specified in the above command. As you will see, this needs to be done by going into each AP if this is what you want. Other drawback includes, first you need to connect to an access port, run this command, and move it to a trunk port (unless that trunk port's native VLAN is 1). 2. By setting switch port's native VLAN to desired VLAN. A. By default APs management traffic goes out as untagged with ID 1. Switch port's native VLAN doesn't need to match this. B. For example, if you set switch port to use native VLAN 200 all the management traffic from the AP will be tagged with 200 and sent upstream. This may be the easiest option. Note: Changing untagged VLAN ID under Port Settings via GUI doesn't have any impact on the AP's management traffic.

This article explains available options if you want to use VLANs for AP management under SZ-100, vSZ, and SC-200.

2020-08-18T04:23:27-0700 2024-01-17T09:32:44-0800 https://support.ruckuswireless.com/articles/000005132 2021-07-12T22:56:26-0700 monthly 0.8 admin,premium knowledge_article_3969 knowledge_article_3969 2015-09-30T15:13:09-0700 000005132 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway What are the commands to enable smart-roam on the SmartZone Platform ? NOTE: REFER TO KBA- 000002277 BEFORE CONFIGURING THE SMART ROAM FEATURE ON THE ACCESS POINTS. A. To enable Smart-Roam on SZ100/vSZ-E: SYNTAX: SZ100> en Password: ******** SZ100# config SZ100(config)# zone <Zone Name> SZ100(config-zone)# wlan <wlan-name> SZ100(config-zone-wlan)# roam SZ100(config-zone-wlan)# roam-factor 2.4g <roam-factor value> SZ100(config-zone-wlan)# roam-factor 5g <roam-factor value> SZ100(config-zone-wlan)# end Do you want to update this context configuration (or input 'no' to cancel)? [yes/no] yes SZ100# EXAMPLE: SZ100-92> en Password: ******** SZ100-92# config SZ100-92(config)# zone Smartroam SZ100-92(config-zone)# wlan Roam SZ100-92(config-zone-wlan)# roam SZ100-92(config-zone-wlan)# roam-factor 2.4g 5 SZ100-92(config-zone-wlan)# roam-factor 5g 4 SZ100-92(config-zone-wlan)# end Do you want to update this context configuration (or input 'no' to cancel)? [yes/no] yes SZ100-92# VERIFICATION: SZ100-92# show running-config zone Smartroam wlan Roam General Options ---------------------------------------------------------------- Name : Roam SSID : Roam HESSID : Description : . . Truncated . . Advanced Options ---------------------------------------------------------------- User Traffic Profile : System Default L2 Access Control : Disabled Device Policy : Disabled Application Visibility : Disabled Access VLAN : VLAN ID : 1 Hide SSID : Hide SSID in beacon broadcast : Disabled Disable Client Load Balancing : Disabled Proxy ARP : Disabled Max Clients : 100 802.11d : Support for 802.11d : Enabled 802.11k : Enabled 802.11k neighbor reports Force DHCP : Disabled DHCP Option 82 : Disabled Client TX/RX Statistics : Ignore statistics from unauthorized clients : Disabled Inactivity Timeout : 120 seconds Client Fingerprinting : Enabled OFDM Only : Disabled BSS Min Rate : Disabled Mgmt TX Rate : 2mbps Smart Roam : Enabled Smart Roam Factor (2.4G/5G) : 5 / 4 Band Balancing : Enabled Service Schedule : Always On Qos Map Set : Disabled SSID Rate Limiting : Uplink : Disabled Downlink : Disabled DNS Server Profile : Disabled DTIM Interval : 1 Directed MC/BC Threshold : 5 Flow Log : Disabled B. To enable Smart-roam on SZ300/vSZ-H: SCENARIO 1: When the AP-Zone is part of Default Domain SYNTAX: vSZ-H# config vSZ-H(config)# zone <zone-name> vSZ-H(config-zone)# wlan <wlan-name> vSZ-H(config-zone-wlan)# roam vSZ-H(config-zone-wlan)# roam-factor 2.4g <roam-factor value> vSZ-H(config-zone-wlan)# roam-factor 5g <roam-factor value> vSZ-H(config-zone-wlan)# end Do you want to update this context configuration (or input 'no' to cancel)? [yes/no] yes vSZ-H# EXAMPLE: vSZ-H-211# config vSZ-H-211(config)# zone "Zone 1" vSZ-H-211(config-zone)# wlan Srcli vSZ-H-211(config-zone-wlan)# roam vSZ-H-211(config-zone-wlan)# roam-factor 2.4g 4 vSZ-H-211(config-zone-wlan)# roam-factor 5g 3 vSZ-H-211(config-zone-wlan)# end Do you want to update this context configuration (or input 'no' to cancel)? [yes/no] yes vSZ-H-211# VERIFICATION: vSZ-H-211# show running-config zone "Zone 1" wlan Srcli General Options ---------------------------------------------------------------- Name : Srcli SSID : Srcli HESSID : Description : . . Truncated . . Advanced Options ---------------------------------------------------------------- User Traffic Profile : System Default L2 Access Control : Disabled Device Policy : Disabled Application Visibility : Disabled Access VLAN : VLAN ID : 1 Hide SSID : Hide SSID in beacon broadcast : Disabled Disable Client Load Balancing : Disabled Proxy ARP : Disabled Max Clients : 100 802.11d : Support for 802.11d : Enabled 802.11k : Enabled 802.11k neighbor reports Force DHCP : Disabled DHCP Option 82 : Disabled Client TX/RX Statistics : Ignore statistics from unauthorized clients : Disabled Inactivity Timeout : 120 seconds Client Fingerprinting : Enabled OFDM Only : Disabled BSS Min Rate : Disabled Mgmt TX Rate : 2mbps Smart Roam : Enabled Smart Roam Factor (2.4G/5G) : 4 / 3 Band Balancing : Enabled Service Schedule : Always On Qos Map Set : Disabled SSID Rate Limiting : Uplink : Disabled Downlink : Disabled DNS Server Profile : Disabled Enable Calea : Disabled Enable DP Tunnel NAT : Disabled Enable External NAS IP : Disabled Enable Venue Code : Disabled DTIM Interval : 1 Directed MC/BC Threshold : 5 Flow Log : Disabled SCENARIO 2: When AP-Zone is part of a different Domain SYNTAX: vSZ-H-211# config vSZ-H-211(config)# domain <domain-name> vSZ-H(config-domain)# zone <zone-name> vSZ-H(config-domain-zone)# wlan <wlan-name> vSZ-H(config-zone)# wlan <wlan-name> vSZ-H(config-domain-zone-wlan)# roam vSZ-H(config-domain-zone-wlan)# roam-factor 2.4g <roam-factor value> vSZ-H(config-domain-zone-wlan)# roam-factor 5g <roam-factor value> vSZ-H(config-domain-zone-wlan)# end Do you want to update this context configuration (or input 'no' to cancel)? [yes/no] yes vSZ-H# EXAMPLE: vSZ-H-211# config vSZ-H-211(config)# zone zone zone-affinity zone-template vSZ-H-211(config)# zone SRAP ; When tried to enter the AP-Zone which is not part of the DEFAULT domain, it'll give the below error % Can not edit the AP Zone which does not belong to current Domain vSZ-H-211(config)# domain SRD vSZ-H-211(config-domain)# zone SRAP vSZ-H-211(config-domain-zone)# wlan rscli vSZ-H-211(config-domain-zone-wlan)# roam vSZ-H-211(config-domain-zone-wlan)# roam-factor 2.4g 4 vSZ-H-211(config-domain-zone-wlan)# roam vSZ-H-211(config-domain-zone-wlan)# roam-factor 5g 3 vSZ-H-211(config-domain-zone-wlan)# end Do you want to update this context configuration (or input 'no' to cancel)? [yes/no] yes vSZ-H-211# VERIFICATION: vSZ-H-211# show running-config domain SRD zone SRAP wlan rscli General Options ---------------------------------------------------------------- Name : rscli SSID : rscli HESSID : Description : . . Truncated . . Advanced Options ---------------------------------------------------------------- User Traffic Profile : System Default L2 Access Control : Disabled Device Policy : Disabled Application Visibility : Disabled Access VLAN : VLAN ID : 1 Hide SSID : Hide SSID in beacon broadcast : Disabled Disable Client Load Balancing : Disabled Proxy ARP : Disabled Max Clients : 100 802.11d : Support for 802.11d : Enabled 802.11k : Enabled 802.11k neighbor reports Force DHCP : Disabled DHCP Option 82 : Disabled Client TX/RX Statistics : Ignore statistics from unauthorized clients : Disabled Inactivity Timeout : 120 seconds Client Fingerprinting : Enabled OFDM Only : Disabled BSS Min Rate : Disabled Mgmt TX Rate : 2mbps Smart Roam : Enabled Smart Roam Factor (2.4G/5G) : 4 / 3 Band Balancing : Enabled Service Schedule : Always On Qos Map Set : Disabled SSID Rate Limiting : Uplink : Disabled Downlink : Disabled DNS Server Profile : Disabled Enable Calea : Disabled Enable DP Tunnel NAT : Disabled Enable External NAS IP : Disabled Enable Venue Code : Disabled DTIM Interval : 1 Directed MC/BC Threshold : 5 Flow Log : Disabled NOTE: In both scenarios, the difference is Domain. If it is part of the same default domain, then the commands are same as SZ100/vSZ-E.

How to enable smart-roam on SmartZone controller via CLI.

2021-07-12T22:56:26-0700 2024-01-15T09:06:38-0800 https://support.ruckuswireless.com/articles/000004259 2021-05-06T00:04:59-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3477 knowledge_article_3477 2015-03-25T16:34:44-0700 000004259 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector What's the best way of changing the static IP address of my ZD without affecting AP connectivity much? This document describes a way to change the IP address of the ZD if the ZD is a standalone ZD (not smart-redundant ZD). This described a 2 step process from the ZD GUI. 1. First thing to do is to change the IP address of the ZD's limited discovery and change the Primary and Secondary addresses in the Configure / Access Points section of the ZD, put the primary IP address to the current IP address of the ZD and the secondary to address that you will be changing the IP address to: <img alt="User-added image" height="97" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4DX&feoid=00N50000002Cf3M&refid=0EM50000000Lgjj" width="534"></img> This change gets proliferated to the APs and to confirm if the APs have taken the change, you can do a ‘get director’ from the AP CLI. This is what the command shows before the change rkscli: get director ------ ZoneDirector Info ------ Primary Controller : n/a Secondary Controller : n/a DHCP Opt43 Code : 3 And this is what the AP shows after the change is made at the ZD: rkscli: get director ------ ZoneDirector Info ------ Primary Controller : 10.9.50.36 Secondary Controller : 10.9.51.31 DHCP Opt43 Code : 3 The primary/secondary command is a soft change, it gets sent to the APs and the APs do not need to reboot for the command to take effect. 2. Then change the IP address of the ZD in the Configure / System GUI: <img alt="User-added image" height="263" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4DX&feoid=00N50000002Cf3M&refid=0EM50000000Lgjo" width="500"></img> Keep in mind that if there’s an IP address change that also the Gateway/DNS Servers/ and other network information might need to be changed/modified as well. Make sure that the new ZD IP address/subnet is pingable from the side of the gateway where the APs reside. This can take some planning from the network side. Again, this change is for a non-smart-redundant ZD and for a smart redundant solution the change would be different.

Customer wants to change IP address of the ZD without minimal interruption to the AP connection to the ZD. The APs IP addresses are statically assigned and so is the ZD IP. The APs are going through a Microtik 750.

2021-05-06T00:04:59-0700 2024-01-11T01:19:48-0800 https://support.ruckuswireless.com/articles/000002001 2020-08-18T06:45:30-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_800 knowledge_article_800 2014-03-28T03:01:55-0700 000002001 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How to unhide SSID <div class="row" id="outputText"> <div class="translated_result"> The configuration to hide the SSID could be seen under WLAN configuration. Go to Configure > WLANs. In the WLANs Section, select the SSID that has to be configured and click Edit. In the Advanced options, in the Hide SSID Section, select or unselect Hide SSID option as per requirement and then click OK/Apply If one has only a support info file, there's a way to find out through the RPM keys if the WLAN is hidden. wlans/wlanx/wlan-ssid-hide='1' --> SSID is hidden. wlans/wlanx/wlan-ssid-hide='0' --> SSID is broadcasting. If the customer only has AP, we can access to AP GUI, do the following operation to unhide the SSID: Go to Configuration > Radio 2.4G, find what you want to hide the SSID, click it. In the Broadcast SSID Section, select Enable. and then click Update Settings, You can find this SSID is broadcast. We could also hide or unhide the SSID from the controller CLI using the below set of commands, ruckus# config ruckus(config)# wlan <WLAN name> ruckus(config-wlan)# hide-ssid The command was executed successfully. We could use the "no hide-ssid" command so that the clients would see the SSID. </div> </div>

Customer could set the SSID to hidden or broadcast in beacons

2020-08-18T06:45:30-0700 2024-01-10T07:04:11-0800 https://support.ruckuswireless.com/articles/000008576 2020-03-02T10:12:35-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_3454 knowledge_article_3454 2018-11-12T04:23:49-0800 000008576 Validated (External) Public Icx 7250;Ruckus ICX 7250 Campus Switches Configuration;Firmware;Knowledge base;Downloads;Support license activation;Registration Configuration, Firmware, Knowledge Base, Downloads, Support License Activation, Registration, ICX 7250 What are the licenses available for Ruckus ICX 7250 switch? Ruckus ICX 7250 device supports the use of FastIron license feature or feature sets. The following feature licenses are available for the ICX 7250 device: <ul><li> Premium Layer 3 (non-node locked license) - Activation of ICX 7250 PREM License Article 000008579 </li><li> Ports on Demand (PoD) license - Activation of ICX 7250 POD Licenses Article 000008580 <img alt="ICX 7250 License Types" height="239" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054d5&feoid=00N50000002Cf3M&refid=0EM2J000000luAI" width="500"></img> </li></ul> Q. Why is ICX 7250 PREM referred to as a Non-Node Locked license? A. The ICX 7250 PREM license activation code starts with DVX (eg DVX-11111111-ABC-BCA-EYZ). When this code is activated, the process does not require a switch serial number. Once the activation is completed, the license code gets mapped to the End-user account under which the order was activated. On the support portal, we see this as "Bound To Unique Numeric ID" <img alt="ICX 7250 PREM" height="316" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054d5&feoid=00N50000002Cf3M&refid=0EM2J000000luAc" width="500"></img> Above screenshot 1 Illustrates A. The ICX 7250 PREM license activation code sample B. The code is bound to unique account numeric ID C. The button on top-right to download the XML file A non-node locked license can be moved from one device and redeployed to another device within the same product platform. The non-node locked license is not specific to a device, unlike a node-locked license (eg ICX 7250 POD license) for which the serial number is associated with the license code. You can now enable non-node locked licensed features prior to purchasing the license (from version 08.0.8). The licenses are fulfilled directly, without the need for an Activation Code and activation process, which dramatically simplifies the deployment process. NOTE: Installation of the same non-node locked license on multiple units is prohibited. Q. How can we install/enable PREM license on ICX 7250? A. Installation of <a href="http://docs.ruckuswireless.com/fastiron/08.0.70/fastiron-08070-licenseguide/GUID-89C81B48-CB5C-4464-B18F-45570670C725.html" target="_blank">ICX 7250 PREM License by .xml File</a> (for 08.0.7 and lower). <a href="http://docs.ruckuswireless.com/fastiron/08.0.70/fastiron-08070-licenseguide/GUID-F0E4098E-FF98-4AF1-84F1-603A52BBC3B8.html" target="_blank">Enable ICX 7250 PREM license via SAU</a> (for 08.0.8 and above. Q. Where can I download the ICX 7250 PREM License? A. If the ICX 7250 switch is on a firmware 08.0.7 or lower, an XML file is required to enable the PREM feature. As soon as the PREM license code, a blue button appears on the top right side of the page to download the XML file. The activated licenses are also available under <a href="https://support.ruckuswireless.com/license_upgrades" target="_blank">Download License</a> link in the Ruckus Support portal homepage. Q. What is a Certificate of Entitlement? A. The license Certificate of Entitlement (CoE) is a proof of purchase that includes a description of the license, the Ruckus part number, and the license serial number. From version 08.0.8 and above, a license file(XML) is not required to enable the purchased license feature. The CoE is proof/ authorization for the customer to use a purchased license feature. Below is the screenshot of 'how the COE looks like' <img alt="CoE Format" height="645" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054d5&feoid=00N50000002Cf3M&refid=0EM2J000000luAr" width="500"></img> Q. What is a Node-Locked license? A. Licenses like 2x10G POD and 8x10G POD for ICX 7250 are examples for Node-Locked licenses. These licenses requires the SN pf switch during the activation process. The licenses that get generated are mapped to the specific serial number. The license file generated for these cannot be used to enable POD on any other device. The activation codes for 2x10G POD start with DVV and for 8x10G POD start with DVW <img alt="ICX 7250 POD license" height="294" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054d5&feoid=00N50000002Cf3M&refid=0EM2J000000luAm" width="500"></img> Above screenshot illustrates A. The ICX 7250 POD license activation code sample B. The code is bound to an ICX 7250 switch serial number C. The button on top-right to download the XML file Q. How can we install/enable PoD license on ICX 7250? A. Installation of <a href="http://docs.ruckuswireless.com/fastiron/08.0.70/fastiron-08070-licenseguide/GUID-89C81B48-CB5C-4464-B18F-45570670C725.html" target="_blank">ICX 7250 POD License by .xml File</a> (for 08.0.7 and lower). Enable <a href="http://docs.ruckuswireless.com/fastiron/08.0.70/fastiron-08070-licenseguide/GUID-F0E4098E-FF98-4AF1-84F1-603A52BBC3B8.html" target="_blank">ICX 7250 POD license </a><a href="http://docs.ruckuswireless.com/fastiron/08.0.70/fastiron-08070-licenseguide/GUID-F0E4098E-FF98-4AF1-84F1-603A52BBC3B8.html" target="_blank">via SAU</a> (for 08.0.8 and above) NOTE: The base 2x10G POD license has to be active/installed for the switch, only then can the 8x10G license feature be installed/enabled. Q. Where can I download the ICX 7250 POD License? A. If the ICX 7250 switch is on a firmware 08.0.7 or lower, an XML file is required to enable the POD feature. As soon as the POD license code, a blue button appears on the top right side of the page to download the XML file. The activated licenses are also available in your support portal under <a href="https://support.ruckuswireless.com/license_upgrades" target="_blank">Download License</a> link in the Homepage. As the ICX 7250 POD licenses are serial number specific, you can use the link: https://support.ruckuswireless.com/asset/xxxxxxxxx (xxxxxxxxx to be replaced with the switch serial number) to get to the SN <img alt="ICX 7250 Asset" height="248" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054d5&feoid=00N50000002Cf3M&refid=0EM2J000000luBQ" width="500"></img>

The licenses available for ICX 7250 switch

2020-03-02T10:12:35-0800 2024-01-08T22:01:44-0800 https://support.ruckuswireless.com/articles/000004129 2019-06-23T23:49:09-0700 monthly 0.8 admin,premium knowledge_article_2026 knowledge_article_2026 2015-03-03T09:29:48-0800 000004129 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What are latest Ruckus SNMP MIBs? Ruckus provides latest SNMP MIB files on the Support website. Choose the ZD platform under "Software Downloads". Included in the ZD MIBs, is a 'mib-oid-changes-history.xls' spreadsheet listing the OIDs that have been added in each successive ZoneFlex firmware release. This spreadsheet is helpful for customers to determine how to monitor ZD/AP behavior. If you have a standalone AP instead, you can get corresponding AP only MIBs by selecting the AP model.

Ruckus provides SNMP MIB files for 3rd party network management systems. This article gives information on them and where to find them

2019-06-23T23:49:09-0700 2024-01-04T13:32:21-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PIGyCAO?attachment_index=0 2024-01-04T13:32:21-0800 monthly admin,premium knowledge_article_2026 knowledge_article_2026_attachment_1 910-mib-oid-changes-history.xlsx 59945.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000009888 2019-10-24T00:25:09-0700 monthly 0.8 admin,premium knowledge_article_3977 knowledge_article_3977 2019-10-24T00:25:09-0700 000009888 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Are the large number of RADIUS accounting and authentication unavailalbe events valid and are they reflected in the Monitor AAA Servers Statistics Saved Packet capture verifies events are valid Monitoring Event log for unavailable events while capturing packets on Zone Director: <table class="Table" style=""><tbody><tr><td colspan="1" rowspan="1" style="">2019/10/22 13:15:34</td><td colspan="1" rowspan="1" style="">Medium</td><td colspan="1" rowspan="1" style=""> </td><td colspan="1" rowspan="1" style="width: 420.75pt;" width="561">RADIUS accounting server [xx.xx.xx.xx] unavailable.</td></tr><tr><td colspan="1" rowspan="1" style="">2019/10/22 13:14:26</td><td colspan="1" rowspan="1" style="">Medium</td><td colspan="1" rowspan="1" style=""> </td><td colspan="1" rowspan="1" style="width: 420.75pt;" width="561">RADIUS accounting server [xx.xx.xx.xx] unavailable.</td></tr></tbody></table> PCAP shows these are valid events due to failure to receive accounting response within configured RADIUS accounting timeout. Original request packet time stamp 69 13:14:11.295568 yyy.yyy.yyy.yyy xxx.xxx.xxx.xxx RADIUS 298 Accounting-Request id=158 Duplicate after timeout 146 13:14:26.296755 yyy.yyy.yyy.yyy xxx.xxx.xxx.xxx RADIUS 298 Accounting-Request id=158, Duplicate Request Response: 149 13:14:26.418746 xxx.xxx.xxx.xx yyy.yyy.yyy.yyy RADIUS 62 Accounting-Response id=158 Original request: 394 13:15:24.624637 yyy.yyy.yyy.yyy xxx.xxx.xxx.xxx RADIUS 333 Accounting-Request id=134 Duplicate request after timeout: 429 13:15:34.625588 yyy.yyy.yyy.yyy xxx.xxx.xxx.xxx RADIUS 333 Accounting-Request id=134, Duplicate Request Response: 430 13:15:34.707101 xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy RADIUS 62 Accounting-Response id=134 This corresponds approximately to RADIUS accounting retry configuration: <img alt="User-added image" height="304" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000548b&feoid=00N50000002Cf3M&refid=0EM2J000000vRTn" width="500"></img> Also the accounting retry counter is updating with each event, but it was reset earlier so the total number only represents timeouts since resetting Monitor AAA Servers Statistics <img alt="User-added image" height="106" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000548b&feoid=00N50000002Cf3M&refid=0EM2J000000vRTx" width="500"></img>

Verify if large number of RADIUS accounting server and authentication server unavailable events are valid and if the statistics found under Monitor::AAA Servers Statistics reflect these events.

2019-10-24T00:25:09-0700 2024-01-03T00:52:21-0800 https://support.ruckuswireless.com/articles/000008371 2021-04-07T01:59:49-0700 monthly 0.8 admin,premium knowledge_article_3376 knowledge_article_3376 2018-10-10T11:32:20-0700 000008371 Validated (External) Premium Ruckus cloud wifi;Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, Ruckus Cloud WiFi, ZoneDirector How do I convert a ZoneDirector managed AP to Ruckus Cloud Wi-Fi? Download a Solo AP image for the model of APs managed by ZoneDirector, and follow the steps outlined in the attached Tech Tip.

The attached guide helps convert a ZD managed AP for use on Ruckus Cloud Wi-Fi.

2021-04-07T01:59:49-0700 2023-12-13T04:19:50-0800 http://support.ruckuswireless.com/article_attachments/kA2500000008nnoCAA?attachment_index=0 2023-12-13T04:19:50-0800 monthly admin,premium knowledge_article_3376 knowledge_article_3376_attachment_1 ZD Access Point to Cloud Wi-Fi.pdf 581474.0 application/pdf https://support.ruckuswireless.com/articles/000001919 2021-05-04T04:35:36-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2476 knowledge_article_2476 2013-06-18T12:05:11-0700 000001919 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Q: What do I need to connect to a ZoneDirector serial port? Q: I can’t seem to find a reliable USB/Serial converter to connect my PC to the ZoneDirector Console. Can you recommend a solution? A: You can use any inexpensive USB to serial converter. Just remember Ruckus uses 115200 baud, 8 databits, no parity, 1 stopbit, no flowcontrol on our ZoneDirector. You can use Putty or tera term as free programs as terminal software.

What is needed to connect to a ZD serial port

2021-05-04T04:35:36-0700 2023-12-05T17:02:11-0800 https://support.ruckuswireless.com/articles/000010277 2021-07-12T22:29:45-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4719 knowledge_article_4719 2020-03-25T23:26:03-0700 000010277 Validated (External) Public Smartcell insight;SmartCell Insight (SCI) Performance;Configuration;System network management;Troubleshooting;Known issues and workarounds Performance, Configuration, System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Insight How to verify SCI time against the VM NTP time? 1] Login to SCI CLI (username:rsa and password: Node Token) 2] Run the command: chronyc tracking 3] Below output is from my Lab SCI rsa@master-52057bdc ~ $ chronyc tracking Reference ID : 42554E50 (66.85.78.80) Stratum : 3 Ref time (UTC) : Thu Mar 26 05:58:45 2020 System time : 396.387756348 seconds slow of NTP time Last offset : +7.678009033 seconds RMS offset : 125.715812683 seconds Frequency : 221812.766 ppm slow Residual freq : +72073.070 ppm Skew : 5494.750 ppm Root delay : 0.283793688 seconds Root dispersion : 35.606792450 seconds Update interval : 93.6 seconds Leap status : Normal rsa@master-52057bdc ~ $ 4] We need to check a couple of things in this output to verify time/date against the VM NTP <ul><li>System time: This will tell you if the time is in sync with NTP or not.</li><li>Frequency: If you see a number > 500 ppm fast/slow here, it could mean that the time on SCI is continuously drifting even though chrony(an NTP client) is running on it and SCI is able to sync with NTP. This points to time sync problems at the hypervisor level.</li></ul> 5] Below are the couple of article which explains about possible resolutions when time is drifting at an abnormal frequency: <ul><li>NTP not configured on the ESXi host. See: https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2012069.</li><li>HPET misreporting frequency. See: https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1006090.</li></ul>

This article explains how to check SCI time is properly syncing with VM NTP

2021-07-12T22:29:45-0700 2023-12-05T00:44:21-0800 https://support.ruckuswireless.com/articles/000011413 2021-06-25T09:45:58-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4715 knowledge_article_4715 2021-06-25T08:36:11-0700 000011413 Validated (External) Public Sz144;Sz300;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Installation;System network management;Troubleshooting Configuration, Installation, System Network Management, Troubleshooting, SZ144, SZ300, SZ100 How to factory reset different SmartZone hardware controller models via physical button? <img alt="SZ100 front panel view" height="348" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Qg&feoid=00N50000002Cf3M&refid=0EM2J000002JsvP" width="822"></img> For SZ104 and SZ124 models, Below are the details of F/D (button 4) and Reset (button 13). <ul><li>Button 4 is called the f/d button which factory defaults / factory resets the device</li><li>F/D (factory default) button. Press this button for at least 10 seconds to reset the controller to factory default settings.</li><li>Button 13 is reset which is for restarting the device </li><li>Reset button. Press for 5 seconds to restart the SZ 100</li></ul> For SZ144, it is slightly in different location than other two models. <img alt="User-added image" height="480" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Qg&feoid=00N50000002Cf3M&refid=0EM2J0000025LYP" width="823"></img>

Since there are two dedicated push down buttons on the SmartZone hardware models, it is slightly confusing to find the right button to factory reset the device.

2021-06-25T09:45:58-0700 2023-11-29T06:36:34-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000GvkvSAC?attachment_index=0 2023-11-29T06:36:34-0800 monthly admin,premium,warranty,guest knowledge_article_4715 knowledge_article_4715_attachment_1 SZ100 getting started.pdf 114026.0 application/pdf https://support.ruckuswireless.com/articles/000003463 2019-01-27T22:11:16-0800 monthly 0.8 admin,premium knowledge_article_2200 knowledge_article_2200 2014-10-02T15:12:53-0700 000003463 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell ap Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP How do you convert a SmartZone (SCG/SZ-100/vSZ) AP to work with a ZD? Use the following steps to manually convert a SCG mode AP to a ZD mode AP. 1. Verify the AP is a SmartZone AP <div style="margin-left: 40px;"> CLI: SSH into the AP and issue a "get scg" <img alt="User-added image" height="325" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095RO&feoid=00N50000002Cf3M&refid=0EM50000000LZEc" width="500"></img> GUI: <img alt="User-added image" height="426" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095RO&feoid=00N50000002Cf3M&refid=0EM50000000LZEh" width="500"></img></div> 2. Make sure the AP is in standalone mode and get the necessary ZD mode AP image. <div style="margin-left: 40px;"> 1. log into the AP and navigate to "Mainenance>Upgrade" 2. Click on "Local" Upgrade Method 3. Click on "Choose File" and browse for the ZD AP image. 4, Verify the AP type and software version 5. Click on upgrade to perform the actual upgrade. <img alt="User-added image" height="381" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095RO&feoid=00N50000002Cf3M&refid=0EM50000000LZEX" width="500"></img> </div> 3. Verify the the AP loaded the ZD image correctly <div style="margin-left: 40px;">CLI: SSH into the AP and issue a "get director" <img alt="User-added image" height="314" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095RO&feoid=00N50000002Cf3M&refid=0EM50000000LZEm" width="500"></img> GUI: <img alt="User-added image" height="426" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095RO&feoid=00N50000002Cf3M&refid=0EM50000000LZEr" width="500"></img> 4. You must reset the Access Point to Factory Defaults after upgrading the code to ZD or Standalone (100.x) to erase any SCG configuration parameters. This can be done from the WEB-UI - Maintenance::Reboot/Reset or from the AP CLI - set factory - reboot </div>

2019-01-27T22:11:16-0800 2023-11-28T19:54:11-0800 https://support.ruckuswireless.com/articles/000007649 2023-11-16T18:16:48-0800 monthly 0.8 admin,premium knowledge_article_3274 knowledge_article_3274 2018-02-08T09:41:24-0800 000007649 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Configuration Configuration, SZ100 Does SZ-100/124/144 forward data between two ports in a single port group? To avoid loops when the SZ is connected to two switches that act as a switch in terms of STP, run the command: no data-plane <name> forward- stp This will only block STP and not any other data because there is no data that is transmitted or forwarded between the ports.

Spanning-tree is blocking both Cisco Nexus ports connected to the SZ-100

2023-11-16T18:16:48-0800 2023-11-22T10:00:13-0800 https://support.ruckuswireless.com/articles/000005820 2017-06-22T19:01:34-0700 monthly 0.8 admin,premium knowledge_article_2342 knowledge_article_2342 2016-06-09T13:52:18-0700 000005820 Validated (External) Premium Zoneflex indoor Performance;System network management;Troubleshooting Performance, System Network Management, Troubleshooting, ZoneFlex Indoor What are the flashing lights on R500 / R600 APs? Ruckus 802.11ac model R500 and R600 look similar and each provide colored LEDs that can be used to determine proper functionality. These tables describe the LED and meaning of on/off, blink speed, and color to describe the conditions at the present time. R500 Front Panel LEDs: LED Description PWR Off: Off Red: Boot up in process Green: On DIR Off: The AP is not being managed by a controller (Standalone mode) Green: The AP is being managed by a controller Slow flashing green (one flash every two seconds): The AP is managed by a controller but is currently unable to communicate with it. Fast flashing green (two flashes every second): The AP is managed by a controller and is currently receiving configuration settings or an image update. AIR Off: The AP is operating in standalone mode or as a Root AP (RAP) or non-Mesh AP. Green: The AP is functioning as a Mesh AP (MAP), and the wireless uplink signal is good. Fast flashing green (two flashes every second): The AP is functioning as a Mesh AP (MAP), and the wireless uplink signal is fair. Slow flashing green (one flash every two seconds): Mesh networking is enabled, but the AP is still searching for a mesh uplink. 2.4G Off: The WLAN service is down. Green: The WLAN is up and at least one client is associated. Amber: The WLAN is up. No clients are associated. 5G Off: The WLAN service is down. Green: The WLAN is up and at least one client is associated. No downlink MAPs are connected. Slow flashing green (one flash every two seconds): The WLAN is up and at least one downlink MAP is connected. No clients are associated. Fast flashing green (two flashes every second): The WLAN is up, at least one downlink MAP is connected and at least one client is associated. R500 Real Panel Elements: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000051th&feoid=00N50000002Cf3M&refid=0EM50000000Ep30"></img> Behavior of Ethernet port LEDs on the R500 LEDs Description Off = Not connected Amber + Green = Connected to 10Mbps device Amber = Connected to 100Mbps device Green = Connected to 1000Mbps device ============================================================================= R600 Front Panel LEDs: LED Description PWR Off: Off Red: Boot up in process Green: On DIR Off: The AP is not being managed by a controller (Standalone mode) Green: The AP is being managed by a controller Slow flashing green (one flash every two seconds): The AP is managed by a controller but is currently unable to communicate with it. Fast flashing green (two flashes every second): The AP is managed by a controller and is currently receiving configuration settings or an image update. AIR Off: The AP is operating in standalone mode or as a Root AP (RAP) or non-Mesh AP. Green: The AP is functioning as a Mesh AP (MAP), and the wireless uplink signal is good. Fast flashing green (two flashes every second): The AP is functioning as a Mesh AP (MAP), and the wireless uplink signal is fair. Slow flashing green (one flash every two seconds): Mesh networking is enabled, but the AP is still searching for a mesh uplink. 2.4G Off: The WLAN service is down. Green: The WLAN is up and at least one client is associated. Amber: The WLAN is up. No clients are associated. 5G Off: The WLAN service is down. Green: The WLAN is up and at least one client is associated. No downlink MAPs are connected. Slow flashing green (one flash every two seconds): The WLAN is up and at least one downlink MAP is connected. No clients are associated. Fast flashing green (two flashes every second): The WLAN is up, at least one downlink MAP is connected and at least one client is associated. R600 Real Panel Elements: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000051th&feoid=00N50000002Cf3M&refid=0EM50000000Ep3F"></img> Behavior of Ethernet port LEDs on the R600 LEDs Description Off = Not connected Amber + Green = Connected to 10Mbps device Amber = Connected to 100Mbps device Green = Connected to 1000Mbps device

Viewing the combination of front panel LEDs and rear panel Ethernet LEDs can determine proper function of R500 / R600 APs.

2017-06-22T19:01:34-0700 2023-11-18T12:40:19-0800 https://support.ruckuswireless.com/articles/000006397 2021-03-25T15:45:04-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4619 knowledge_article_4619 2017-06-28T11:09:12-0700 000006397 Validated (External) Public Ruckus cloud wifi System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi How do I reconnect to a Cloud AP wirelessly that doesn’t have connection to a Ruckus Cloud controller? The cloud AP will start broadcasting, after 30 minutes of no connection to the cloud controller, a Configure-Me SSID. The name of the WLAN will be as such: Configure.Me-yyyyyy, where yyyyyy are the last 6 digits of the AP mac address. Make sure your computer connects to the WLAN and that prior to connecting that your computer is set for DHCP or dynamic IP address acquisition. However, if you will like to statically assign an IP address to your wireless interface, make sure that it’s in the same network as the AP. The AP new IP address will be 192.168.101.1. Once you connect to the Configure.Me-yyyyyy SSID, you can access the AP with the IP address = 192.168.101.1 or with the unleashed.ruckuswireless.com URL. The username and password will be, username = super, password = sp-admin

A Cloud AP that is not connected to the Ruckus Cloud controller will broadcast an Island / Configure-Me SSID which can be accessed wirelessly.

2021-03-25T15:45:04-0700 2023-11-15T06:03:17-0800 https://support.ruckuswireless.com/articles/000005193 2021-07-12T03:44:33-0700 monthly 0.8 admin,premium knowledge_article_2347 knowledge_article_2347 2015-10-13T06:45:21-0700 000005193 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, Unleashed Can I convert an Unleashed AP to a ZoneFlex Standalone/Controller managed mode? Follow these steps to convert an Unleashed AP to ZoneFlex Standalone Mode. 1. Obtain the corresponding AP model Standalone 100.x base image firmware from the Support Site. Save it on the PC/laptop that you're using to change the AP code. 2. To revert an Unleashed AP to ZF Standalone mode, we have to do a hard reset on the AP and downgrade the firmware. Power on the Unleashed AP and once it is fully powered up, press the indented Hard Reset button for 8 seconds before releasing. 3. Use the PC/laptop's wireless adapter to find the SSID Configure.Me-XXYYZZ (where XXYYZZ are last 6 digits of AP MAC address) 4. If the AP is connected to the network, you could directly access the GUI using the IP address of the AP. 5. Connect to the Configure.Me-XXYYZZ SSID, and open a Browser to 'unleashed.ruckuswireless.com'. 6. The default Unleashed startup page is seen. Click on "Show AP Info" and we can see the Upgrade option to upload the firmware. <img alt="User-added image" height="319" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Tk&feoid=00N50000002Cf3M&refid=0EM50000000HP0Y" width="772"></img> 7. Browse to the 100.x ZoneFlex base image version for that model of Access Point, and proceed to upgrade. 8. When the AP has loaded ZoneFlex 100.x base image firmware, reboot the AP, and it will be accessible via Ethernet, at 192.168.0.1 IP address, with super/sp-admin login credentials. 9. Operate the AP in Standalone mode thru the WebUI, or SSH to the AP and issue 'set director ip a.b.c.d' with the IP address of a ZoneDirector or 'set scg ip a.b.c.d' for a SmartZone controller, to manage the AP if desired.

This article explains how to convert an Unleashed AP to ZoneFlex Standalone mode AP.

2021-07-12T03:44:33-0700 2023-11-08T19:43:19-0800 https://support.ruckuswireless.com/articles/000002711 2020-08-18T06:49:11-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4370 knowledge_article_4370 2014-03-02T22:21:21-0800 000002711 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;Mediaflex;Smartcell ap;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;MediaFlex 2501;MediaFlex 2900;MediaFlex 2811;MediaFlex 5811;MediaFlex 7811;MediaFlex 7211 Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, MediaFlex, SmartCell AP What causes a client to disconnect and what can be done to address it? Following actions can be taken to prevent client disconnections: 1. Proper site survey that will prevent any type of interference OR use some modern WiFi system that can avoid interference through advanced channel selection algorithms 2. A good site survey will also ensure good coverage and optimal data rates 3. Use open authentication system if the issue is related to encryption or authentication 4. Make the wireless a known system if wireless intrusion prevention system is on the network 5. Use standard beacon interval and data rate for management traffic 6. Update drivers or update radio hardware on the clients 7. Physical inspection of the coverage and surrounding areas for any recent changes 8. Install latest software on the wireless system 9. Add more APs if the existing APs are overloaded 10. Adjust roaming aggressiveness on the stations 11. Attempt to connect to a single frequency instead of keeping both radios enabled. For example, if the 2.4 GHz is not usable, make use of 5 GHz spectrum. 12. Replace or move the AP to a different location 13. Check network connectivity 14. Use local breakout instead of tunnelling traffic to the controller 15. Make sure client radio is enabled or disable and then re-enable the radio 16. Check the country code setting for any incompatibility if 802.11d is enabled

This article tries to list all possible reasons for client disconnections and possible remedies.

2020-08-18T06:49:11-0700 2023-11-07T17:27:54-0800 https://support.ruckuswireless.com/articles/000014257 2023-10-24T06:47:27-0700 monthly 0.8 admin,premium knowledge_article_5070 knowledge_article_5070 2023-10-24T06:47:27-0700 000014257 Validated (External) Premium R550;R850;Smartcell gateway;RUCKUS R550;RUCKUS R850;SmartCell Gateway 200 (SCG200) Performance;Firmware;Known issues and workarounds Performance, Firmware, Known Issues and Workarounds, R550, R850, SmartCell Gateway Why is my client unable to access Internet and internal server with wifi6 APs like R550 and R850 ? The AP had LACP enabled and when LACP is enabled vlan tag is not set correctly in NSS rflow offload table causing the failure. As a fix we have build available "AP patch 6.1.1.0.1354" and above which works well.

Clients unable to access Internet, webpages are not loading and ssh to internal server failing while ICMP is success.

2023-10-24T06:47:27-0700 2023-11-06T14:00:10-0800 https://support.ruckuswireless.com/articles/000002296 2020-08-18T07:40:16-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4369 knowledge_article_4369 2013-11-09T09:01:09-0800 000002296 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;System network management;Known issues and workarounds Performance, Configuration, System Network Management, Known Issues and Workarounds, ZoneDirector Can the two Eth ports on a ZoneDirector be used for Load Balancing? The two Ethernet ports on a ZoneDirector are each 1GB capable, but the two Physical interfaces are one Logical interface to the ZoneDirector. You can connect each ZD interface to a separate network switch, but Spanning Tree should be blocked on one of the switches port paths to prevent the ZD MAC address from being seen on its other interface, forming a loop. This provides High Availability for uptime purposes, in the event that a cable/interface/switch went bad or went down, but we cannot transmit/receive traffic over both ZD interfaces simultaneously (Load Balancing / Link Aggregation).

Can the two Eth ports on a ZoneDirector be used for Load Balancing / link aggregation?

2020-08-18T07:40:16-0700 2023-11-05T16:46:38-0800 https://support.ruckuswireless.com/articles/000005422 2021-03-24T09:50:26-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4617 knowledge_article_4617 2016-01-14T10:23:53-0800 000005422 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware Configuration, Firmware, Unleashed Unleashed: How to check for and Upgrade to latest Release If the versions in the "Requesting to update image" From and To images are different, plan and schedule a change management period to perform a network upgrade. (15-30min) Click OK when ready, and the Master AP (first) and all Unleashed Member APs will be upgraded to the current Unleashed version. All new APs on previous versions, will also upgrade to the new current Unleashed version. For further information, see Online Help administration guide link, in top/right corner of Master AP WebUI page (Admin, Help, Logout).

Administrators can check to see if they are running the latest Release, and execute a Network upgrade.

2021-03-24T09:50:26-0700 2023-11-04T20:06:39-0700 https://support.ruckuswireless.com/articles/000001583 2014-01-11T14:11:25-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_207 knowledge_article_207 2013-02-05T13:31:16-0800 000001583 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector Can Ruckus Zone Director Manage other vendor Access Points? Ruckus Zone Director can manage only Ruckus Wireless Access Points. It can not manage other vendor access point.

2014-01-11T14:11:25-0800 2023-10-26T02:22:15-0700 https://support.ruckuswireless.com/articles/000003006 2023-10-12T00:59:45-0700 monthly 0.8 admin,premium knowledge_article_978 knowledge_article_978 2014-05-07T13:56:29-0700 000003006 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Why am not able to see the wired clients on the ZD web administration Active wired clients will only be displayed when 802.1X is enabled on the Ethernet port of the Access point and when clients are connected and authorized over it. This information can be observed from the "Clients >> Wired Clients" page of the Zonedirector's Web user interface. The Clients table lists the wired client’s MAC address, user name or IP address, the AP it is connected to, the port number, VLAN and authorization status.

None of the Active wired clients are being displayed on the ZD web interface

2023-10-12T00:59:45-0700 2023-10-17T16:00:36-0700 https://support.ruckuswireless.com/articles/000003177 2023-10-12T05:16:21-0700 monthly 0.8 admin,premium knowledge_article_1145 knowledge_article_1145 2014-06-24T07:33:02-0700 000003177 Validated (External) Premium Zonedirector 5000;ZoneDirector 5000 Installation Installation, ZoneDirector 5000 How to swap fan modules on ZD5000 The ZoneDirector 5000 includes six redundant, hot-swappable system fans (four 80mm fans and two 60mm fans). There are also two fans located inside the power supply units. Redundancy for the two PSU fans is only achieved when both PSUs are installed. If any of the system fans requires replacement, the replacement procedure is identical. <ol><li>Open the front chassis cover of the ZoneDirector 5000. It may be necessary to extend the ZoneDirector into a maintenance position.</li><li>Identify the faulty fan. Each fan has a “service required” LED that lights Amber when the fan is malfunctioning.</li><li>Remove the faulty fan by grasping both sides of the fan assembly, using the plastic finger guard on the left side and pulling the fan out of the metal fan enclosure.</li><li>Slide the replacement fan into the same metal fan enclosure. Use the edges of the metal enclosure to align the fan properly and ensure the power connector is seated properly in the header on the side of the enclosure.</li><li>Apply firm pressure to fully seat the fan.</li><li>Verify that the (service required) LED on the top of the fan is not lit.</li><li>Close the front chassis cover and return the ZoneDirector 5000 to its normal position in the rack, if necessary.</li></ol> <img alt="User-added image" height="426" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000U3UF&feoid=00N50000002Cf3M&refid=0EM50000000LW08" width="500"></img>

This article contains instructions for swapping the Fan Module on ZD5000

2023-10-12T05:16:21-0700 2023-10-17T16:00:18-0700 https://support.ruckuswireless.com/articles/000003160 2023-10-12T04:30:51-0700 monthly 0.8 admin,premium knowledge_article_1126 knowledge_article_1126 2014-06-20T09:43:08-0700 000003160 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Zonedirector 1200;ZoneDirector 1200 Security Security, ZoneFlex Indoor, ZoneFlex Outdoor, ZoneDirector 1200 Are-Ruckus-APs-capable-of-transporting-H-323-traffic The H.323 standard provides a foundation for audio, video, and data communications across IP-based networks, including the Internet. All Ruckus Access Points are capable of transporting H.323 traffic. In the stack below H.323 is at the same layer as G.711 or the purple block, it is transported via RTP / UDP and then IP. <img alt="User-added image" height="300" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000U3Tv&feoid=00N50000002Cf3M&refid=0EM50000000LVu0" width="500"></img>

This Article explains about the capability of H3232 traffic

2023-10-12T04:30:51-0700 2023-10-17T16:00:13-0700 https://support.ruckuswireless.com/articles/000002937 2023-10-11T01:00:05-0700 monthly 0.8 admin,premium knowledge_article_925 knowledge_article_925 2014-04-21T12:15:13-0700 000002937 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector The issue appears to be with format in the spread sheet were the user name's are listing in second column(cell) instead of first column, moving them to first column should load the complete list of user names(DPSK's) in the file. <img alt="User-added image" height="189" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000U3SE&feoid=00N50000002Cf3M&refid=0EM50000000LTNi" width="500"></img> Note: Follow the default format generated by the ZD to avoid this issue.

2023-10-11T01:00:05-0700 2023-10-12T00:00:14-0700 https://support.ruckuswireless.com/articles/000002971 2023-10-11T01:09:27-0700 monthly 0.8 admin,premium knowledge_article_2081 knowledge_article_2081 2014-04-28T18:08:56-0700 000002971 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What's difference between HT20, HT40 and HT80

What's difference between HT20, HT40 and HT80 in channels.

2023-10-11T01:09:27-0700 2023-10-12T00:00:11-0700 https://support.ruckuswireless.com/articles/000002957 2023-10-11T00:58:41-0700 monthly 0.8 admin,premium knowledge_article_2370 knowledge_article_2370 2014-09-04T04:03:37-0700 000002957 Validated (External) Premium Zoneflex 7781 cm;Zonedirector;Zoneflex 7782;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneFlex 7781 CM, ZoneDirector, ZoneFlex 7782 What is the significance of "Radar Avoidance Pre-Scanning" RAPS? <div>The Radar Avoidance Pre-Scanning (RAPS) setting allows pre-scanning of DFS channels in the 5 GHz band to ensure the channel is clear of radar signals prior to transmitting on the channel. If a channel is blocked by this feature, it will be listed as "DFS Block Radar" in the AP monitoring page. This setting affects selected outdoor dual band 802.11n AP models (7782, 7781, 8800) only and has no impact on APs that do not support the feature as they have 3 radios in it.</div> <div> </div> <div>To enable this please navigate the following on ZD GUI</div> <div> </div> <div>Configure -- > Services -- > Radar Avoidance Pre-Scanning check mark "Enable Radar Avoidance Pre-Scanning". Question: Will a channel remain blocked indefinitely by RAPS? Answer: No. Channel will remain blocked for a minimum of 30 minutes (Non-Occupancy Period) . Will be re-scanned sometime after the NOP expires and added to the channel availability list if scan is clear. There is not a specific max time before the channel is re-scanned. The AP scans channels randomly so could take up to approx. 25 minutes before channel is re-scanned w/ current fw. With 3.4 operating in UK this will increase since the AP will scan weather radar channels for 10 minutes each instead of the usual 1 minute. If the AP was using a fixed channel before it was blocked, the AP will return to that channel after the NOP expires and successful re-scan. </div>

This article describe the significance of "Radar Avoidance Pre-Scanning"

2023-10-11T00:58:41-0700 2023-10-12T00:00:08-0700 https://support.ruckuswireless.com/articles/000001688 2015-09-11T09:53:32-0700 monthly 0.8 admin,premium knowledge_article_2147 knowledge_article_2147 2013-02-28T17:21:21-0800 000001688 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor System network management System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor Enabling WMM and power save on Ruckus Ruckus has WMM and U-APSD (which is essentially WMM Power Save) are enabled by default.

2015-09-11T09:53:32-0700 2023-10-11T09:53:29-0700 https://support.ruckuswireless.com/articles/000011594 2023-10-09T12:49:08-0700 monthly 0.8 admin,premium knowledge_article_4668 knowledge_article_4668 2021-04-28T06:44:27-0700 000011594 Validated (External) Premium Ruckus analytics;Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Ruckus Analytics, SZ144, SZ300, virtual SmartCell Gateway, SZ100 How do I fix a flagged zone in RUCKUS AI that supposedly has the 5.8Ghz band enabled? On the SZ GUI: <ol><li>Navigate to your zone's settings.</li><li>Make sure the setting "5.8Ghz Channels" is turned off for the zone that conflicts with 5.8Ghz. Keep in mind that not every country will show the 5.8Ghz slider as described under "Troubleshooting Steps" above. </li></ol> Alternatively, you can set your zone's settings through an API PATCH call: <ol><li>https://SZ-address:8443/wsg/api/public/v9_1/rkszones/zoneID?serviceTicket={{serviceTicket}}</li><li>Method: PATCH</li><li>Header field: 'Content-Type: text/plain'</li><li>Raw data field: '{ "countryCode": "IE", "cbandChannelEnabled": false, "cbandChannelLicenseEnabled": false }' (Note: IE for Ireland is just an example)</li><li>Expected return value: 204 No Content </li></ol> It is recommended to double check that the API PATCH call took effect by running the GET call for zone details again (as described under "Troubleshooting Steps"). Next: open the RUCKUS AIAnalytics GUI (https://ruckus.cloud/ai). <ol><li>Navigate to menu: Admin > Licenses.</li><li>Click the pen icon for the license that is assigned to the affected zone.</li><li>In the "Explore Network" tree navigate to the zone that is being flagged. </li><li>On the right hand side, remove the licenses for all access points that are part of the zone.</li><li>Click "Save".</li><li>Re-open the zone and re-apply all licenses that were just removed. Click "Save".</li><li>This is going to initiate a re-sync with the SZ. RUCKUS AI is going to pick up your 5.8Ghz settings and remove the flag under "Admin > Onboarded Systems".</li></ol>

An issue where RUCKUS AI flags a zone as invalid because the zone's country code does not permit the use of 5.8Ghz by default.

2023-10-09T12:49:08-0700 2023-10-11T00:00:16-0700 https://support.ruckuswireless.com/articles/000011712 2023-10-09T12:52:48-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4704 knowledge_article_4704 2021-06-03T01:26:55-0700 000011712 Validated (External) Public Ruckus diagnostic dashboard rdd;Sz144;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, Ruckus Diagnostic Dashboard RDD, SZ144, virtual SmartCell Gateway, SZ100 How to get RUCKUS AI added to the SmartZone controller for troubleshooting purposes?

This article explains the process of how to install RUCKUS AI to troubleshoot any issues on the SmartZone Controller

2023-10-09T12:52:48-0700 2023-10-11T00:00:15-0700 https://support.ruckuswireless.com/articles/000008703 2020-05-06T16:07:33-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4184 knowledge_article_4184 2018-12-19T06:39:27-0800 000008703 Validated (External) Public Zoneflex outdoor;Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Configuration Configuration, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP How do I decode the DHCP Option 43 Hexadecimal value in Ruckus? When we want to use DHCP Option 43, we usually go to this URL and generate the code, https://shimi.net/services/opt43/ But if we want to understand how this code is generated or even more, do the reverse procedure of obtaining the IP addresses, we need to fully understand how this generation is done. So, the result of the option 43 is "option 43 hex aabb[variable code]" and the syntax would be, aa = Sub Option Code (this will be 03 or 06) -- > Typically 06 for SmartZone (SCG) APs. bb = length of the IP address including the “.” characters in Hex. For example 192.168.1.1 = 11 characters the Hex value would be 11, so in Hex is 0B [variable code] = the IP address of the controller -- > This is the trickiest part, because It translates each decimal digit into ASCII code, including the “.” - For each number, the ASCII translation is “3” plus the number in decimal - For the “.” character, the ASCII code is “2e” e.g. 192.168.1.120 option 43 hex 060d3139322e3136382e312e313230 06 -- > Option 6 0d -- > 13 characters 31 --> 1 39 --> 9 32 --> 2 2e --> . etc.

Explanation on how to generate the Option 43 Hexadecimal value

2020-05-06T16:07:33-0700 2023-09-25T21:05:47-0700 https://support.ruckuswireless.com/articles/000014249 2023-09-18T06:51:55-0700 monthly 0.8 admin,premium knowledge_article_5065 knowledge_article_5065 2023-09-18T06:51:55-0700 000014249 Validated (External) Premium Ruckus analytics Known issues and workarounds Known Issues and Workarounds, Ruckus Analytics When user try to download a filtered CSV report for a dashboard, filters are defaulting and downloaded data is also as per the default filters. Currently this is a limitation. Product teams are checking if they can find a solution to make it work.

Article explains about the limitation with Data Studio dashboard report export as CSV limitation

2023-09-18T06:51:55-0700 2023-09-22T12:00:10-0700 https://support.ruckuswireless.com/articles/000014239 2023-09-13T13:19:47-0700 monthly 0.8 admin,premium knowledge_article_5064 knowledge_article_5064 2023-08-18T14:31:34-0700 000014239 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway Why AP's stuck in "New Configuration" State and will not download the firmware? Once we ruled out the issue with CCMD sync between AP's and the SZ, We need to collect the snapshot logs from all the nodes and restarted CCMD to resume CCMD sync. Please note: Restart CCMD requires access to SZ backend and hence Customer Support Team must be engaged. However, we can alternatively restart all the services (service restart), post collecting the snapshot logs. For multiple nodes, we need to restart CCMD/Services on each node separately. Corrective Action: CCMD sync issue has been resolved in 6.1.1-LT GA Release and we recommend upgrading to this version to avoid future issues.

This Article explains why multiple AP's are stuck in new configuration state on the SZ

2023-09-13T13:19:47-0700 2023-09-18T08:00:10-0700 https://support.ruckuswireless.com/articles/000001794 2021-03-07T13:29:31-0800 monthly 0.8 admin,premium knowledge_article_4539 knowledge_article_4539 2013-03-19T11:26:29-0700 000001794 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor How to configure Different VLAN's and DHCP on stand alone AP Please follow below steps to configure the setup for private and guest users. Configure==>WIreless 1 Create two wlans Ex:- wireless1(private) and wireless2(guest). 2 To wireless1 assign a access VLAN ex:- 10 3 To wireless2 assign a access VLAN ex:- 20 Configure==>Local subnet==>Localsubnet1==>Subnet==>check enable radio button. Configure your own subnet and DHCP Scope and in Access VLAN mention wireless1 VLAN (here its 10). Configure==>Local subnet==>Localsubnet2==>Subnet==>check enable radio button. Configure your own subnet and DHCP Scope and in Access VLAN mention wireless2 VLAN (here its 20). Note The switch ports to which AP's connected should be trunk port and allow both VLAN 10 and 20. And the AP port to which Ethernet cable is connected also must be trunk port. To configure on AP's Please go through below steps. AP GUI==>Configure=>Ethernet ports. If you are connected to port1 check enable check box and select it as trunk port.

2021-03-07T13:29:31-0800 2023-09-18T01:31:38-0700 https://support.ruckuswireless.com/articles/000003778 2020-08-17T06:49:14-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1493 knowledge_article_1493 2014-12-10T09:17:26-0800 000003778 Validated (External) Public Virtual smartcell gateway Installation;Known issues and workarounds Installation, Known Issues and Workarounds, virtual SmartCell Gateway How to get serial number of vSCG/vSZ? As vSCG is a virtual platform, the serial number of it is generated only after the complete installation. Once the vSCG is successfully installed, to get the SN, you can either <ul><li>Login to vSCG UI and click on System -> General Settings, OR</li><li>SSH into the vSCG and run show version command.</li></ul> Below is a sample output of show version command: testSCG# show version Model:WSGvm Serial#:xxxxxxxxxxxx // 24 digit serial number of the vSCG SCG Version:2.5.0.1.174 AP Firmware Version:2.5.0.1.174

This article helps you in getting the serial number of vSCG

2020-08-17T06:49:14-0700 2023-09-14T23:42:06-0700 https://support.ruckuswireless.com/articles/000006864 2017-12-12T13:15:41-0800 monthly 0.8 admin,premium knowledge_article_3193 knowledge_article_3193 2017-12-12T13:15:41-0800 000006864 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure SNMP versions 2 and 3? Using and Securing SNMPv2 Prerequisites: Standard ACL created (optional) ---------- Note: By default, a read-only community string of “public” is defined. It will not appear in the configuration, but is present. You need to change this from the default value. A snmp-server host is the server to which SNMP traps will be sent. IMPORTANT: If you remove all SNMPv2 strings, the system will replace “public” on reload. ---------- Troubleshooting: show snmp server Configuration Example: snmp-server host 192.168.10.2 no snmp-server community public ro snmp-server community <secret> ro 10 snmp-server community <secret> rw 10 Using and Securing SNMPv3 Prerequisites: Standard ACL created (optional) ---------- Note: SNMPv3 using encryption to send and receive SNMP traffic. ---------- Configuration Example: snmp-server group admin v3 auth access 10 read all write all notify all snmp-server user admin admin v3 auth md5 <passwd> priv des <passwd> snmp-server host 192.168.10.2 version v3 privacy <passwd>

How to configure SNMP versions 2 and 3?

2017-12-12T13:15:41-0800 2023-09-12T10:49:26-0700 https://support.ruckuswireless.com/articles/000001462 2021-05-03T04:14:13-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_811 knowledge_article_811 2013-01-24T16:51:01-0800 000001462 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor AP unable to connect to ZD behind NAT <div>Steps followed to get the AP's to talk to the ZD at the main site. This procedure was done on a Juniper SSG-140 Firewall.</div> <div> </div> <div> </div> <div>Step 1) Identify publicly addressable IP addresses that are available to use on your network Firewall.</div> <div>Step 2) Create a custom service group on your Firewall specifically for your ZoneDirector to be able to talk to the internet. </div> <div> </div> <div style="margin-left: 40px;">As listed the required is needed: (source port is 0-65535)</div> <div style="margin-left: 40px;">Port 22 TCP</div> <div style="margin-left: 40px;">Port 12222 UDP</div> <div style="margin-left: 40px;">Port 12223 UDP</div> <div style="margin-left: 40px;">Port 21 TCP</div> <div style="margin-left: 40px;">Port 443 TCP</div> <div> </div> <div>Step 3) On your Firewall, configure a MIP (Mapped IP) on the interface (publicly addressable IP address) to the private IP address of the ZoneDirector.</div> <div> </div> <div>Step 4) Return to your policy list on your Firewall. Create the policy within your internet connection to your privately addressable space. In this case: Untrust-B to Trust-B. </div> <div>Step 5) Create a new policy on your Firewall and for service ports use your custom service group defined in Step #2 and turn on logging. (See attached image)</div> <div> </div> <div>Step 6) SSH to the required access point, login and run the following command:</div> <div> </div> <div style="margin-left: 40px;">“ set director ip x.x.x.x “ hit enter (x.x.x.x is where you input your publicly addressable IP address)</div> <div> </div> <div>Step 7) After the AP reboots it should go out through its current internet connection and communicate with the publically addressable IP based on the MIP that we had provisioned in Step #3. Check logging to ensure communication to the ZoneDirector at your central location is passing the traffic. No additional Firewall setup or configuration is needed at the “branch” locations as the traffic is routed out across the internet.</div> <div> </div> <div> </div>

Both AP and ZD are behind NAT and are unable to reach each other. AP is at a remote location and even manually programming the ZD's IP on the device does not get the AP connected to the ZD.

2021-05-03T04:14:13-0700 2023-09-08T04:27:54-0700 https://support.ruckuswireless.com/articles/000001976 2023-08-30T19:34:48-0700 monthly 0.8 admin,premium knowledge_article_306 knowledge_article_306 2013-04-25T13:34:48-0700 000001976 Validated (External) Premium Flexmaster umm Configuration;Firmware;System network management Configuration, Firmware, System Network Management, FlexMaster UMM Flex-master default alarm which can not be modified running 9.5 There are few alarms are enabled in flex master and can not be modified as they are very important and critical from network prospective. 1.AP heartbeat Lost 2.Ap lost contact ZD 3.AP Join 4.AP delete 5.AP joined with reason

2023-08-30T19:34:48-0700 2023-09-04T04:00:40-0700 https://support.ruckuswireless.com/articles/000001970 2023-08-30T19:20:50-0700 monthly 0.8 admin,premium knowledge_article_299 knowledge_article_299 2013-04-25T13:45:35-0700 000001970 Validated (External) Premium Zonedirector;Flexmaster umm;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, FlexMaster UMM FM gives cosmetic alarm for AP reboots Most of the times, It is due to synchronization problem between ZD/FM timings including time zone and date/time. It is a good practice to keep the ZD/FM sync in time to avoid any unexpected results. Example of such is AP reporting false reboot alarms. If possible, configure NTP server settings on the ZD and keep the Linux server where FM is installed, also sync to the similar NTP server.

FM constantly gives false alarm for AP reboots even though AP actually does not reboot

2023-08-30T19:20:50-0700 2023-09-04T04:00:38-0700 https://support.ruckuswireless.com/articles/000001991 2023-08-30T19:48:31-0700 monthly 0.8 admin,premium knowledge_article_326 knowledge_article_326 2013-05-02T08:47:59-0700 000001991 Validated (External) Premium Zonedirector;Ruckus support services;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, Ruckus Support Services Why iPhone 5 is unable to authenticate against LDAP server for Guest and Zero-IT? This is usually caused by blocking to store cookies across the web browser esp. for IOS devices. So, look for safari browser settings(On IPhone, Settings-->Safari) and change the Cookies settings from "Never Accept" to "From Visited" which should eventually fix this issue. Also, use Chrome and verify if it works fine which will confirm the above.

2023-08-30T19:48:31-0700 2023-09-04T04:00:37-0700 https://support.ruckuswireless.com/articles/000002091 2023-08-30T20:49:08-0700 monthly 0.8 admin,premium knowledge_article_463 knowledge_article_463 2013-06-10T13:30:08-0700 000002091 Validated (External) Premium Zoneplanner;ZonePlanner Installation Installation, ZonePlanner Can we install the Ruckus Planner and Full AirMagnet Survey Pro on same machine? <div style="">It is not possible to install the Ruckus Zone planner and Full AirMagnet Survey Pro on the same machine.</div> Because they are ultimately the same software. The only differences are the licenses from each other. On top of that, Airmagnet Survey Pro has a newer build and is not supported Ruckus Planner. <div style="">It is recommended to install Ruckus Planner and AirMagnet Survey Pro. on separate machines </div>

Can we install the Ruckus Planner and Full AirMagnet Survey Pro on same machine?

2023-08-30T20:49:08-0700 2023-09-04T04:00:34-0700 https://support.ruckuswireless.com/articles/000001949 2023-08-30T18:35:30-0700 monthly 0.8 admin,premium knowledge_article_495 knowledge_article_495 2013-06-18T07:23:40-0700 000001949 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector How is ZD precedence determined in Smart Redundancy mode? · On bootup, unless the ZD is still in discovery, it will start up in the standby state. · It will change to the active state if does not see its peer ZD. · If a peer ZD is discovered in the active state, it will stay in the standby state. · If both ZD are in the standby state, the ZD with the "higher" MAC address will become active and the other one becomes standby. · If 2 active ZD's discover each other (e.g. some broken network link just got repaired), determination of the ZD's state will be based on the following criteria: § The ZD with the fewer number of connected AP will become standby. It will disconnect all its APs which will seek out the active ZD. § If both ZD have the same number of connected AP, the previous tie breaking rule based on MAC address applies. · Situations where 2 ZDs cannot form an active/standby pair: The 2ZD's are licensed to support a different number of Aps.

How is ZD precedence determined in Smart Redundancy mode

2023-08-30T18:35:30-0700 2023-09-04T04:00:32-0700 https://support.ruckuswireless.com/articles/000002180 2023-08-30T21:28:53-0700 monthly 0.8 admin,premium knowledge_article_526 knowledge_article_526 2013-07-26T14:23:57-0700 000002180 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why Novell clients are unable to authenticate with the Server over the AP eth interface. This Novell server is integrated with Active Directory server. These work-stations work fine and successfully authenticates(for login) when they were directly connected to their network. However, they start to face unsuccessful authentication issue with their Novell server despite they were able to ping them. Certain QoS features such as directed Multicast and IGMP snooping will be causing this issue. We have to disable these features on ethernet interface of the Access point as a work-around for this issue. Access the Command line interface of the Zonedirector using a tool like putty or tera-term on SSH port and execute the below set of commands commands:- ruckus> ruckus>en ruckus# debug ruckus(debug)# remote_ap_cli –A “set qos <ethernet interface> directed multicast disable” Eg:- ruckus(debug)# remote_ap_cli –A “set qos eth0 directed multicast disable” ruckus(debug)# remote_ap_cli –A “set qos igmp_query v2 disable” ruckus(debug)# remote_ap_cli –A “set qos igmp_query v3 disable” ruckus(debug)# remote_ap_cli –A “set qos mld_query v1 disable” ruckus(debug)# remote_ap_cli –A “set qos mld_query v2 disable”

2023-08-30T21:28:53-0700 2023-09-04T04:00:31-0700 https://support.ruckuswireless.com/articles/000002147 2023-08-30T21:21:17-0700 monthly 0.8 admin,premium knowledge_article_959 knowledge_article_959 2014-05-02T02:19:01-0700 000002147 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector Is there a way to set a schedule on specific access points so that they are only available during certain times? Resolution: --------------- 1. Create WLANs by enabling the Service Schedule option. 2. Create a WLAN group and assign all WLANs for which service schedule option is enabled to this group. 3. Now create an Access Point Group and assign the WLAN group which you have created, in both 2.4 Ghz and 5 Ghz and select the Access Points on which you are looking to set a schedule. see the following images: 1. WLAN Service schedule <img alt="User-added image" height="135" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000YeAa&feoid=00N50000002Cf3M&refid=0EM50000000LJj5" width="500"></img> 2. WLAN Group <img alt="User-added image" height="288" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000YeAa&feoid=00N50000002Cf3M&refid=0EM50000000LJjA" width="500"></img> 3. AP Group in which WLAN group must be over ridden for both 2.4 Ghz and 5 Ghz . <img alt="User-added image" height="373" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000YeAa&feoid=00N50000002Cf3M&refid=0EM50000000LJjF" width="500"></img> 4. Save and APPLY changes 5. Verify that NTP is setup and working for this feature to work.

Sometimes I want to setup specific APs to be available to clients at a specific time of day or on a given day - how can I do this?

2023-08-30T21:21:17-0700 2023-09-04T04:00:23-0700 https://support.ruckuswireless.com/articles/000001876 2023-08-30T18:11:04-0700 monthly 0.8 admin,premium knowledge_article_1938 knowledge_article_1938 2013-03-25T11:58:02-0700 000001876 Validated (External) Premium Zonedirector;Flexmaster umm;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, FlexMaster UMM Not able to access the ZD GUI from FM. Solution: This problem may be due to wrong dates in ZD certificate. Please find the attachment file for more details. If the issue is due to wrong dates on the ZD then we have to recreate the ZD's root CA. Following is the procedure details. <ol><li>Recreate root CA on the ZD.</li><li>Recreate private key.</li><li>Reboot the ZD and test.</li></ol> Find the below CLI commands which has to be executed on the ZD CLI. To run these commands, you must first enter the config-certificate context in the ZD CLI. 1. To restore the default Zone Director certificate and private key, use the following command. ruckus(config-certificate)# restore - (Restore the default Zone Director certificate and private key. The restore process will be completed after Zone Director is rebooted.) 2. To regenerate the Zone Director private key, use the following command ruckus(config-certificate)# re-generate-private-key {1024|2048} - (Regenerate the Zone Director private key Specify the length of the private key as either 1024 or 2048). 3. Restart the ZD using "reboot" command which can be executed from the privileged mode of the ZD CLI. If the above mentioned does not work then we request you to contact Ruckus support. So that we can assist you further.

2023-08-30T18:11:04-0700 2023-09-04T04:00:20-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDW3CAO?attachment_index=0 2023-09-04T04:00:20-0700 monthly admin,premium knowledge_article_1938 knowledge_article_1938_attachment_1 ZD GUI is not accessible from FM.rtf 5724026.0 application/rtf https://support.ruckuswireless.com/articles/000001956 2023-08-30T19:08:52-0700 monthly 0.8 admin,premium knowledge_article_2446 knowledge_article_2446 2013-04-26T16:18:28-0700 000001956 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector How to block clients in Zone director It is not possible to block an arbitrary MAC address on the blocked clients list, either from Web user Interface or Command Line Interface. The only way is marking the Currently active clients as block. In ZD Web UI, Goto Monitor-->Currently Active Active clients, click on the red color(block) icon under the action column to add the client under the blocked list. Also Refer below KB for further reference: 000001917, 000001948, 000002071

2023-08-30T19:08:52-0700 2023-09-04T04:00:17-0700 https://support.ruckuswireless.com/articles/000001839 2023-08-30T20:02:17-0700 monthly 0.8 admin,premium knowledge_article_5012 knowledge_article_5012 2013-03-15T09:22:27-0700 000001839 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can I avoid certain channels being selected? After logging into the ZD CLI, enter into the ‘enable’ context, then the ‘debug’ context. To enable channel Blacklist feature run the below command: remote_ap_cli –A “set blacklist [wifi0¦wifi1] [enable¦disable]" – It executes for all the ZD managed Aps. remote_ap_cli –a MAC address of the AP “set blacklist [wifi0¦wifi1] [enable¦disable]" – It executes on the specif AP. Where: wifi0 = 2.4Ghz radio wifi1 = 5Ghz radio Manually Blacklisting channels from channel selection: To manually specify blacklisted channels use the command: remote_ap_cli –A “set blacklist [wifi0¦wifi1] <ch> <option>” Where <option>: -1 = permanently add to the blacklist (will survive a reboot) 0 = clear channel from blacklist 1 = temporarily add to the blacklist (won’t survive a reboot) Note : From 9.5 and above firmware version, we can block the channel from the ZD GUI :: Configure :: Access Points, click on the particular AP, under 'Channel Range Settings' you can see that option.

2023-08-30T20:02:17-0700 2023-09-04T04:00:15-0700 https://support.ruckuswireless.com/articles/000014240 2023-08-25T13:52:37-0700 monthly 0.8 admin,premium knowledge_article_5010 knowledge_article_5010 2023-08-25T13:52:37-0700 000014240 Validated (External) Premium Ruckus wan gateway rwg Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, RUCKUS WAN Gateway RWG Why RWG is not syncing configuration with Virtual SmartZone configuration when both RWG and v/SZ are in the same L2 Subnet? The RWG communicates to the v/SZ over the Management Interface on port 8443 and therefore changed the WLAN controller IP from the Control Interface to the Management Interface. Subsequently RWG started communicating to the v/SZ

This Article explains why RWG is not syncing configuration with vSZ

2023-08-25T13:52:37-0700 2023-08-29T10:00:12-0700 https://support.ruckuswireless.com/articles/000001175 2023-08-21T21:10:17-0700 monthly 0.8 admin,premium knowledge_article_5009 knowledge_article_5009 2012-03-21T12:00:29-0700 000001175 Validated (External) Premium Flexmaster umm Performance;Configuration;System network management;Troubleshooting Performance, Configuration, System Network Management, Troubleshooting, FlexMaster UMM What can I do to improve FM's sluggish performance? FlexMaster data is kept in a MySQL database. When a report is generated a database query is sent to the MySQL. Response time will depend on the network latency + query/response interval + data display interval. First, you can check the network latency using ping response times to the FM. If the ping response is reasonable, check number of events under “Monitor” tab. If there are millions of events it can potentially slow down loading of data on the FM Dashboard as well as report generation. Resolution: Decrease the number of events that get saved under FM database. To reduce the number of events go to Administer à System Settings à Purge Policy. This settings section will look like this: <img alt="User-added image" height="108" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000Ye43&feoid=00N50000002Cf3M&refid=0EM50000000L9Ia" width="500"></img>

What can I do to improve FM's sluggish performance?

2023-08-21T21:10:17-0700 2023-08-25T14:00:45-0700 https://support.ruckuswireless.com/articles/000001714 2023-08-21T20:07:28-0700 monthly 0.8 admin,premium knowledge_article_243 knowledge_article_243 2013-03-01T09:22:03-0800 000001714 Validated (External) Premium Flexmaster umm Configuration;Troubleshooting Configuration, Troubleshooting, FlexMaster UMM Where the Flex Master configuration backup file will be stored? Details as follows. When we take the configuration backup on Flex Master, The configuration backup file will be stored under the following location. <div>/opt/FlexMaster/dbBackup</div> <div> If you allow the Flex Master to assign the name for the backup file automatically, The name will be in the following format. FMDB_[YYYY-mm-dd-hh] Ex: FMDB_2013-03-01-13-45GMT</div>

2023-08-21T20:07:28-0700 2023-08-25T14:00:32-0700 https://support.ruckuswireless.com/articles/000001783 2023-08-21T21:03:35-0700 monthly 0.8 admin,premium knowledge_article_5000 knowledge_article_5000 2013-03-12T07:56:44-0700 000001783 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector Is there a way to only allow Fallback to local admin if and only if the AAA server is unreachable? As of now when Fall back is enabled we will be able to login with both the AAA server and the local admin credentials. It is not possible to allow the local admin to work only when AAA server is not available. The local admin will work in either case - if AAA server is available or NOT.

2023-08-21T21:03:35-0700 2023-08-25T14:00:30-0700 https://support.ruckuswireless.com/articles/000001474 2023-08-21T19:01:00-0700 monthly 0.8 admin,premium knowledge_article_4992 knowledge_article_4992 2013-01-22T14:29:02-0800 000001474 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How does DHCP relay work? <div>DHCP relay improves network performance by converting DHCP broadcast traffic to unicast to prevent flooding the Layer 2 network. Zone Director version 9.5 contains a new DHCP relay agent feature. The DHCP Relay Agent improves tunneled WLAN performance by delivering unicast DHCP messages instead of broadcast messages to prevent DHCP flooding across tunnel interfaces. Broadcast DHCP messages, common from Windows OS, are limited to the client’s AP tunnel/radio interface and unicast DHCP messages are returned to the client instead of broadcasting messages. The DHCP Relay Agent allows forwarding DHCP requests directly to a DHCP server without the need to configure DHCP forwarding on a router interface.</div> <div> CONFIGURATION:</div> <ul><li>This can be configured under: ZD GUI > Configure > DHCP relay</li><li>This can be applied per WLAN basis under: ZD GUI > Configure > WLANs > Advanced options > DHCP Relay</li></ul> <div>LIMITATIONS: </div> <ul><li>Can’t run DHCP relay and servers at the same time</li><li>Does not support IPv6</li></ul> <div>TROUBLESHOOTING:</div> <ul><li>Check L3 connection between ZD and DHCP server</li><li>Sniff DHCP packets on ZD and DHCP server</li><li>DHCP Server configuration</li></ul>

Configuring DHCP relay on ZD

2023-08-21T19:01:00-0700 2023-08-25T14:00:29-0700 https://support.ruckuswireless.com/articles/000001768 2023-08-21T20:54:00-0700 monthly 0.8 admin,premium knowledge_article_4999 knowledge_article_4999 2013-03-05T22:11:25-0800 000001768 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Allow the IP address(x.x.x.x/32 - IP of the mail server ) in the restricted subnet access under Configure > Guest Access. Guest users should now be able to access mails though internal mail server.

2023-08-21T20:54:00-0700 2023-08-25T14:00:27-0700 https://support.ruckuswireless.com/articles/000001591 2023-08-21T19:18:08-0700 monthly 0.8 admin,premium knowledge_article_4991 knowledge_article_4991 2013-02-08T07:09:10-0800 000001591 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How I can allow Particular IP from my private network for guest users Please follow below mentioned steps. <div>--> Log into ZD GUI </div> <div> </div> <div>-->Goto Configure </div> <div> </div> <div>-->Click on Guest Access </div> <div> </div> <div>-->Goto Restricted Subnet Access </div> <div> Create new -->select type as allow and enter the destination address x.x.x.x/32,make sure subnet mask is 32.</div> <div> </div>

Customer wants to allow a single IP address from his private network for guest users

2023-08-21T19:18:08-0700 2023-08-25T14:00:26-0700 https://support.ruckuswireless.com/articles/000001509 2023-08-21T19:04:26-0700 monthly 0.8 admin,premium knowledge_article_4990 knowledge_article_4990 2013-01-21T08:36:43-0800 000001509 Validated (External) Premium Zoneflex 7731 Installation Installation, ZoneFlex 7731 What is the significance of distance value on 7731 bridges? The distance setting adjusts the access point/bridge's time out values to account for the time required for radio signals to travel from access point/bridge to access point/bridge. If more than one non-root access point/bridge communicates with the root access point/bridge, enter the distance from the root access point/bridge to the non-root access point/bridge that is farthest away. In 802.11a/b/g all data transmissions are acknowledged by the receiving radio and the transmitter makes a number of retransmission attempts if such an ack is not received. (Note that there are ways to send unacknowledged packets using multicast or multimedia features.) The acknowledgments affect long distance links in that the transmitter waits for a limited amount of time before retrying. If the ACK timeout is set too short, the transmitter will start retransmitting before an ACK could have possibly been received and this retransmission may well actually interfere with an ACK that is "on it's way".(It is important to note that this retransmission will occur after a random backoff) The end result is that actual throughput is very low and the number of retransmissions is excessively high. If, conversely, the ACK timeout is set too long, the transmitter waits unncesessarily long before retransmitting in the case no ACK is received. This represents lost time and thus reduces the throughput of the link.

The article explains the significance of distance value that can be set on bridges

2023-08-21T19:04:26-0700 2023-08-25T14:00:24-0700 https://support.ruckuswireless.com/articles/000001696 2023-08-21T19:24:20-0700 monthly 0.8 admin,premium knowledge_article_4989 knowledge_article_4989 2013-03-01T08:56:52-0800 000001696 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Is it possible to connect an Mesh AP to an specific Root AP manually. Yes. We can connect an Mesh AP to an specific Root AP manually. Details as follows. In a wireless mesh network, the default behavior of Mesh APs is to connect automatically to a mesh node (either Mesh AP or Root AP) that provides the highest throughput. If you want to shape your mesh network or force a certain topology, you will need to disable Smart Uplink Selection and manually set the mesh nodes to which an AP can connect. To set the mesh uplink for an AP manually: <ul><li style="">On the ZoneDirector GUI, click the Configure tab.</li><li style="">On the menu, click Access Points.</li><li style="">In the Access Points table, find the AP you want to restrict, and click Edit under the Actions column. The editing form appears below your selection.</li><li style="">Under Advanced Options > Uplink Selection, select the Manual radio button. The other APs details will appear below.</li><li style="">Select the check box for the specific AP that the current AP can use as uplink.</li></ul> Here we are forcing the mesh AP to establish an Uplink only with the specific Root AP.

2023-08-21T19:24:20-0700 2023-08-25T14:00:22-0700 https://support.ruckuswireless.com/articles/000001421 2023-08-21T21:10:41-0700 monthly 0.8 admin,premium knowledge_article_4998 knowledge_article_4998 2013-01-17T21:17:34-0800 000001421 Validated (External) Premium Flexmaster umm Configuration;System network management Configuration, System Network Management, FlexMaster UMM How to create user account in Flex Master? Creating a New User Account If you want to delegate the responsibility of managing FlexMaster and its managed devices to other authorized users in your organization, you can create a user account for each of them. There is no limit to the number of user accounts that you can create. To create a new user -> Go to Administer > Users. -> Click the Create a User Account link below the Users table. The Create a New User pane appears below the link. -> In User Name, type a name that you want to assign to this user account. For example, you can type john or john doe. The user name is not case-sensitive and can contain up to 45 alphanumeric characters and spaces. -> In Password, type a password for the account. The password is case-sensitive and can contain up to 45 alphanumeric characters. -> In User Role, select the role that you want to assign to this user. The options that appear on the User Role menu depends on your own user role. If you are a Network Administrator, the following user roles appear on the menu: Network Administrator, Group Administrator, Group Operator, and Device Operator. -> Click OK to create the account. The page refreshes, and then the user account you have created appears in the Users list. Understanding User Roles and Privileges: -> Network Administrator: The Network Administrator role grants full read and write privileges to the entire FlexMaster system. The installation process creates one default Network Administrator (admin) account; this default admin account cannot deleted or renamed. Network Administrator can create other user accounts, including Group Administrators, Group Operators, Operators, or other Network Administrators Note:The default Network Administrator (also called Super User) has the highest account privilege and can view, edit, and delete templates, auto-provisioning rules, and other user accounts (including other Network Administrator accounts). -> Group Administrator: The Group Administrator role grants full read and write privileges to the assigned devices. -> Group Operator: The Group Operator role grants read privileges only to the assigned devices.A Group Operator does not have Configure and Administer privileges. Although the Configure and Administer tabs still appear on the Web interface, changes to these by the Group Operator cannot be saved. -> Device Operator: A Device Operator has read/write access at the device level only. Upon login, a Device Operator sees the Device View page without content. The Device Operator must enter the serial number or MAC address of a managed device to view details for that device. A Device Operator role is typically assigned to customer support personnel; the Operator can only see details once the customer provides the device information.

What all the different user accounts we can create in FlexMaster.

2023-08-21T21:10:41-0700 2023-08-25T14:00:21-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PCW7CAO?attachment_index=0 2023-08-25T14:00:21-0700 monthly admin,premium knowledge_article_4998 knowledge_article_4998_attachment_1 User account creation in FlexMaster.odt 581301.0 application/vnd.oasis.opendocument.text https://support.ruckuswireless.com/articles/000001176 2023-08-21T21:08:04-0700 monthly 0.8 admin,premium knowledge_article_4996 knowledge_article_4996 2012-03-21T12:00:40-0700 000001176 Validated (External) Premium Flexmaster umm Performance;Configuration;Installation;Troubleshooting Performance, Configuration, Installation, Troubleshooting, FlexMaster UMM How do I install FM for the first time? What troubleshooting methods are available if I hit any issue? Minimum system requirements are mentioned in the FM user guide. Once you have met those requirements ensure no other webserver OR MySQL instances are running prior to the FM install. Load the install CD into the machine and mount it on the Linux system. Run the install.sh script and follow the onscreen instructions. Once the installation is complete you should be able to access it using machine’s IP in any browser. If the FM installation says it is successful and you can ping the machine but can’t access it using a browser here are few things to check: <ul><li>Java and MySQL service should be up and running (“top” commands output)</li><li>/etc/hosts file should have an entry for “127.0.0.1 localhost.localdomain localhost”</li><li>SELINUX should not be running (“sestatus” command output)</li><li>Make sure ports 80 and 443 are open</li></ul> If none of it helps please either open a case with Support or call. You also need to include install.log file from the FM install directory.

How do I install FM for the first time? What troubleshooting methods are available if I hit any issue?

2023-08-21T21:08:04-0700 2023-08-25T14:00:18-0700 https://support.ruckuswireless.com/articles/000001774 2023-08-21T20:59:57-0700 monthly 0.8 admin,premium knowledge_article_4995 knowledge_article_4995 2013-03-12T07:50:40-0700 000001774 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to disable Mesh on the ZD? Once the Mesh functionality is enabled on the ZD then it cannot be disabled from the ZD GUI. Only option to disable the mesh functionality on the ZD is Hard Reset or Factory Reset. ZD Hard Reset can be done as follows, <ul><li>Power on the ZD.</li><li>On the front side of the ZD we can see the Reset hole.</li><li>Insert a paper clip or tooth pick in to the hole and press & hold it for 10 seconds.</li><li>When you release the Hard Reset button, ZD will automatically restarts and will goes to factory default settings with an default IP address 192.168.0.2.</li><li>Now the Mesh functionality will be disabled on the ZD.</li></ul> Or you can disable it on AP refer to KB 000003918

2023-08-21T20:59:57-0700 2023-08-25T14:00:16-0700 https://support.ruckuswireless.com/articles/000001712 2023-08-21T20:05:11-0700 monthly 0.8 admin,premium knowledge_article_4994 knowledge_article_4994 2013-03-01T09:19:40-0800 000001712 Validated (External) Premium Flexmaster umm Configuration;Security Configuration, Security, FlexMaster UMM How to view the current certificate in Flex Master? Please find the details in the attached file.

2023-08-21T20:05:11-0700 2023-08-25T14:00:15-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDBKCA4?attachment_index=0 2023-08-25T14:00:15-0700 monthly admin,premium knowledge_article_4994 knowledge_article_4994_attachment_1 FM Certificate.doc 53760.0 application/msword https://support.ruckuswireless.com/articles/000001627 2023-08-21T19:21:43-0700 monthly 0.8 admin,premium knowledge_article_4987 knowledge_article_4987 2013-02-24T19:44:40-0800 000001627 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Guest pass wlan is not appearing to the users If any customer reports that the WLANs is not visible or unable to see it then we need to check the below points: <ul><li>Check whether that particular WLAN is checked in the WLAN group and assigned to the particular AP or not.</li><li>Check whether 'Hidden SSID' has been enabled or disabled.</li><li>Check in the advanced options of the WLAN whether we have configured any service scheddioule or not for some time period.</li><li>Check on the ZD GUI:: Configure :: Access Points, whether we have enabled or disabled the ' Enable WLAN service for this radio'. If disabled we should enable that.</li></ul>

2023-08-21T19:21:43-0700 2023-08-25T14:00:13-0700 https://support.ruckuswireless.com/articles/000001751 2023-08-21T20:51:31-0700 monthly 0.8 admin,premium knowledge_article_4993 knowledge_article_4993 2013-03-05T22:08:35-0800 000001751 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor Explanation of AP IP behavior In the ZD GUI there 3 options for AP IP: Keep AP's Setting, Manual and DHCP. When the "Keep AP's Setting" option is chosen, ZD does not change’s how AP gets its IP address. If AP is configured locally to use DHCP, then AP obtains IP address from DHCP server. If AP is configured locally to use static IP address, AP uses the configured IP address. ZD does not change AP’s configuration. “Keep AP’s Setting” is the default option when a new AP joins ZD. If user changes to “Manual” (for static IP) or “DHCP”, the new setting is applied to AP when it joins.

2023-08-21T20:51:31-0700 2023-08-25T14:00:10-0700 https://support.ruckuswireless.com/articles/000003100 2021-05-06T00:02:44-0700 monthly 0.8 admin,premium knowledge_article_1042 knowledge_article_1042 2014-06-03T06:05:11-0700 000003100 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Can-rate-limiting-be-used-per-user-basis? WLAN configuration has an option where the uplink/downlik bandwidth can be configured. But this is common for the all the users connecting to that WLAN. If an administrator wishes to provide different bandwidth limitations to different users connecting on the same WLAN, then it can be achieved by using RADIUS attributes. The attribute values that can be used in RADIUS: • WISPr vendor specific attributes (vendor id = 14122) • (7) WISPr Bandwidth-Max-Up: Maximum transmit rate (bits/second) • (8) WISPr Bandwidth-Max-Down: Maximum receive rate (bits/second)

RADIUS attribute to limit the bandwidth on WLAN based on the user profile.

2021-05-06T00:02:44-0700 2023-08-25T05:46:44-0700 https://support.ruckuswireless.com/articles/000001243 2023-08-20T20:36:06-0700 monthly 0.8 admin,premium knowledge_article_4979 knowledge_article_4979 2012-03-21T12:01:27-0700 000001243 Validated (External) Premium Zoneplanner;ZonePlanner Configuration;Installation;System network management Configuration, Installation, System Network Management, ZonePlanner How to create or customize antenna field - Ruckus Wireless Airmagnet planner Overview: AirMagnet Planner’s built-in antenna manager allows you to select the type of antenna your wireless device uses. It also contains an antenna pattern modification tool, so if your antenna doesn’t appear in the list, you can hand-draw the signal field that your antenna generates. You can custom-generate your own pattern and adjust AP height and the direction of the field. For anyone to start using the antenna manager feature of the Ruckus Zone planner, one has to start a new project in the program and once new project wizard has been completed. Follow below steps: <ul><li>Click File>Antenna Manager</li><li>The Antenna Manager screen pops up. See figure below:</li></ul> <img alt="User-added image" height="552" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000Ye51&feoid=00N50000002Cf3M&refid=0EM50000000L9Aq" width="500"></img> <ul><li>From the Antenna Manager Screen ( above), click the New button. The Antenna Pattern screen appears (see below).</li></ul> Note: While creating a new field, it might be easier to modify a field that is already similar to the one you are creating. To do so, select a pattern that is close to yours from the Antenna Manager Screen before clicking New. The new Antenna Pattern Screen will be based off of the pattern you had selected. <img alt="User-added image" height="450" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000Ye51&feoid=00N50000002Cf3M&refid=0EM50000000L9Av" width="500"></img> <ul><li>Enter a unique name for your antenna pattern.</li><li>Fill in the fields in the Property box according to below table:</li></ul> <img alt="User-added image" height="248" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000Ye51&feoid=00N50000002Cf3M&refid=0EM50000000L9Ah" width="500"></img> <ul><li>Adjust the field by dragging the Handle and Assist points as needed. Handle points allow for larger changes, where Assist points let you fine-tune your data. See below picture</li></ul> <img alt="User-added image" height="423" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000Ye51&feoid=00N50000002Cf3M&refid=0EM50000000L9B0" width="500"></img> <ul><li>Once you are satisfied that new antenna pattern has been modified to extent that it now meets your need then you can click on the OK button and then this customized pattern will show in antenna manager.</li><li>If you wish to remove your new pattern, simply select it and click the Delete button.</li><li>Note that you cannot delete any of the pre-set/default patterns.</li></ul>

How to create or customize antenna field - Ruckus Wireless Airmagnet planner

2023-08-20T20:36:06-0700 2023-08-21T20:00:39-0700 https://support.ruckuswireless.com/articles/000001296 2023-08-20T23:18:07-0700 monthly 0.8 admin,premium knowledge_article_4982 knowledge_article_4982 2012-04-12T20:25:13-0700 000001296 Validated (External) Premium Zoneswitch Performance;Configuration;Installation;System network management;Troubleshooting Performance, Configuration, Installation, System Network Management, Troubleshooting, ZoneSwitch How to make a port untagged member of a particular VLAN on the ZoneSwitch Doc 34 Product(s): ZoneSwitch 4124/4224 CLI ZS4224# conf ZS4224(config)# interface vlan 21 ZS4224(config-if)# member 1/[1-8,21] ZS4224(config-if)# add tagged ports 1/[1-8] ZS4224(config-if)# add untagged ports 1/21 ZS4224(config-if)#end *Note that the “member” command should specify the existing port members and the new port member to be added. GUI VLAN -> 802.1Q VLAN -> Create/Modify VLAN. Click the “Modify” link to select VLAN to edit. <img alt="User-added image" height="402" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000Ye5G&feoid=00N50000002Cf3M&refid=0EM50000000L9BA" width="500"></img> In the next screen select the port to add to this VLAN as “Untagged member”. Click “Apply”. <img alt="User-added image" height="148" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000Ye5G&feoid=00N50000002Cf3M&refid=0EM50000000L9BF" width="500"></img> VLAN -> 802.1Q VLAN -> VLANs by port. Select the port and make sure only one VLAN is selected. If other VLAN is selected then unselect it and click “Apply”. <img alt="User-added image" height="329" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000Ye5G&feoid=00N50000002Cf3M&refid=0EM50000000L9BK" width="500"></img> *Remember to always save your configuration to retain between system reset.

How to make a port untagged member of a particular VLAN on the ZoneSwitch

2023-08-20T23:18:07-0700 2023-08-21T20:00:34-0700 https://support.ruckuswireless.com/articles/000001291 2023-08-20T23:14:41-0700 monthly 0.8 admin,premium knowledge_article_4981 knowledge_article_4981 2012-04-12T20:26:55-0700 000001291 Validated (External) Premium Mediaflex 2800 series Firmware Firmware, MediaFlex 2800 Series How do I determine the version of the firmware? <ul style="margin-left: 2em;"><li style="margin-left: 0px;">Open to WebUI of the MF2900 (default address <a class="rmdotted" href="http://192.168.0.1/" style="color: rgb(0, 102, 153); text-decoration: none;" target="_blank">192.168.0.1</a>)</li><li style="margin-left: 0px;">Under the Information section, click on “System"</li><li style="margin-left: 0px;">Firmware will be listed @ “S/W version:"</li></ul>

2023-08-20T23:14:41-0700 2023-08-21T20:00:33-0700 https://support.ruckuswireless.com/articles/000001252 2023-08-20T23:11:58-0700 monthly 0.8 admin,premium knowledge_article_4980 knowledge_article_4980 2012-03-21T12:01:35-0700 000001252 Validated (External) Premium Zoneflex 7731 Configuration Configuration, ZoneFlex 7731 How to configure QoS on the 7731/P300 ? The defaulted parameters for 7731 QoS are outlined in the following GUI screen: <img alt="User-added image" height="290" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000Ye56&feoid=00N50000002Cf3M&refid=0EM50000000L999" width="500"></img> Where TOS classification = values are entries in a field in the IP header of an incoming or outgoing packet used to classify IP packets into different WMM priority queues. WMM priority queues consist of four traffic types called Access Categories. The values are hexadecimal where 0xE0, 0xC0 and 0xB8 represent 7,6,5 respectively. Priority values are 0-7, where 7 takes highest priority. The table below details the hexadecimal values for TOS classification: <img alt="User-added image" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000Ye56&feoid=00N50000002Cf3M&refid=0EM50000000L99E"></img> By default, TOS is disabled. To enable TOS classification, click on the QoS -> Wireless tab, then enable as below by clicking on the update tab: <img alt="User-added image" height="318" src="https://ruckuswireless.file.force.com/servlet/rtaImage?eid=ka2Ht000000Ye56&feoid=00N50000002Cf3M&refid=0EM50000000L99J" width="500"></img> Dot1p Classification value is a field in the VLAN header that indicates the priority of this VLAN tagged packet. Dot1p classification is similar to ToS classification but for VLANs--when a packet enters the bridge from an interface, it is classified and prioritized according to its Dot1p value. However, while ToS values apply to any IP packet that enters the device, Dot1p values apply only to traffic belonging to the specified VLANs. Note that if Dot1p classification and ToS classification are both enabled, Dot1p classification takes precedence. Therefore, if you want to use solely ToS classification, Dot1p classification should be disabled if you’re not using VLANs.

This document describes how to configure the QoS (quality of service) on the 7731, P300 PtP Bridge

2023-08-20T23:11:58-0700 2023-08-21T20:00:31-0700 https://support.ruckuswireless.com/articles/000001382 2023-08-21T01:44:16-0700 monthly 0.8 admin,premium knowledge_article_4984 knowledge_article_4984 2013-01-16T07:53:32-0800 000001382 Validated (External) Premium Flexmaster umm Firmware;Installation Firmware, Installation, FlexMaster UMM FM-official-upgrade-path-using-patch-file <div>Official upgrade path for FM 8.2.0.0.14 ==> 9.0.0.0.157</div> <div>8.2.1.0.2 ==> 9.0.0.0.157</div> <div>8.6.1.0.14 ==> 9.0.0.0.157</div> <div> </div> <div>9.0.0.0.157 ==> 9.1.0.0.103</div> <div> </div> <div>9.0.0.0.157 ==> 9.1.0.0.105 </div> <div>9.0.0.0.159 ==> 9.1.0.0.105</div> <div>9.1.0.0.103 ==> 9.1.0.0.105</div> <div> </div> <div>9.1.0.0.105 ==> 9.1.1.0.12</div> <div> </div> <div>9.1.0.0.105 ==> 9.1.1.0.20</div> <div>9.1.1.0.12 ==> 9.1.1.0.20</div> <div> </div> <div>9.1.1.0.20 ==> 9.2.0.0.41</div> <div> </div> <div>9.2.0.0.41 ==> 9.3.0.0.12</div> <div>9.2.0.0.41 ==> 9.3.0.0.15</div> <div>9.2.0.0.41 ==> 9.3.0.0.18</div> <div> </div> <div>9.3.0.0.18 ==> 9.4.0.0.17</div> <div> </div> <div>9.4.0.0.17 ==> 9.5.0.0.29</div> <div> </div>

How to upgrade FM to 9.5.0.0.29 which is running on 8.2.0.0.14

2023-08-21T01:44:16-0700 2023-08-21T20:00:28-0700 https://support.ruckuswireless.com/articles/000001394 2023-08-21T01:49:52-0700 monthly 0.8 admin,premium knowledge_article_4983 knowledge_article_4983 2013-01-16T19:32:17-0800 000001394 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to assign manual channel from the ZD for a specific AP when Channelfly (or bkgrd scan) is enabled. Login to the ZD GUI. Configure ==> AccessPoints. Click on the Edit hyperlink for the specific AP. You can see the Radio configurations , Please see the attachments. Select the Channel check box and use the drop down box to select the specific channel and save the configuration. Note: If the AP is dual band one then change the option for both 2.4 Ghz and 5 Ghz radios.

You can manually set an AP channel to ignore ChannelFly (or background scanning) channel changes.

2023-08-21T01:49:52-0700 2023-08-21T20:00:22-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PCTwCAO?attachment_index=0 2023-08-21T20:00:22-0700 monthly admin,premium knowledge_article_4983 knowledge_article_4983_attachment_1 Manual-Channel-for-AP-on-ZD.docx 35458.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000001206 2023-08-20T20:22:23-0700 monthly 0.8 admin,premium knowledge_article_4978 knowledge_article_4978 2012-03-21T12:01:04-0700 000001206 Validated (External) Premium Flexmaster umm Configuration Configuration, FlexMaster UMM How do I stop the MySQL service on FlexMaster machine Go to “/opt/FlexMaster” directory and type “./shutdown.sh —mysql”

How do stop the MySQL service on FlexMaster machine

2023-08-20T20:22:23-0700 2023-08-21T20:00:19-0700 https://support.ruckuswireless.com/articles/000004886 2023-08-20T20:32:43-0700 monthly 0.8 admin,premium knowledge_article_2035 knowledge_article_2035 2015-07-15T00:56:51-0700 000004886 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance Performance, ZoneDirector How many VLANs can be supported by the ZD1200 at the maximum? A ZD (1200/3000/5000) running 9.10 or later, can support up to 4094 VLANs in total. Each WLAN we can have up to 32 VLANs. ZD1200 supports 256 WLAN groups, ZD3000 supports 1024 WLAN groups, ZD5000 supports 2048 WLAN groups.

This article explains the maximum VLAN supported by the ZD1200 platform and also explains the maximum number of VLANs for each WLAN.

2023-08-20T20:32:43-0700 2023-08-21T20:00:12-0700 https://support.ruckuswireless.com/articles/000001440 2023-08-20T20:12:15-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1419 knowledge_article_1419 2013-01-18T08:26:03-0800 000001440 Validated (External) Public Flexmaster umm Installation;System network management Installation, System Network Management, FlexMaster UMM How to backup and restore the FlexMaster's database? <pre style=""> 1. How to backup DB in Flexmaster You can backup DB using FlexMaster UI. Go to Administer -> DB Backup/Restore. DB backup will cause FlexMaster be restarted, and if DB is big, it can take a while for backup to be finished. You can backup DB with linux commands too, if you do this way, you must shutdown FlexMaster before you start to take backup. Once the backup is done, restart the FM. cd /opt/FlexMaster ./shutdown.sh cd 3rdparty/mysql/mysql-enterprise-5.1.53-linux-x86_64-glibc23 </pre> <pre> tar –zcvf data_<sn_FM>.tgz data </pre> <div> </div> Ex: tar –zcvf data_201006011115.tgz data Then you can find backup file under /opt/FlexMaster/3rdparty/mysql/mysql-enterprise-5.1.53-linux-x86_64-glibc23. The file name is data_201006011115.tgz <pre style=""> ./startup.sh</pre> 2. How to restore DB? You can restore DB using FlexMaster UI, go to Administer -> DB Backup/Restore. The alternate way to restore is to use command line. cd /opt/FlexMaster ./shutdown.sh cd /opt/FlexMaster/3rdparty/mysql/mysql-enterprise-5.1.53-linux-x86_64-glibc23 rm –rf data (removes the current database) tar –zxvf data_201006011115.tgz cd /opt/FlexMaster ./startup.sh 3. How to perform auto backup of FM's db? Go to Administer --> DB Backup/Restore. Enable the auto backup under the "Schedule Backup Task" section. Frequency and time values can be adjusted within this section. Since the db backup makes FM unavailable for regular usage, it is suggested to do this backup during minimum usage time. OR manual backup: Use “./mysqldump -u root -p itms > [backupfilename.sql]” command to perform the backup from time to time. To restore the server, install the FlexMaster software from the CD and then restore the MySQL database from the latest backups. Notice FlexMaster needs to be shut down before running backup or restore: /opt/FlexMaster/shutdown.sh --tomcat ... Do the backup/restore /opt/FlexMaster/startup.sh --tomcat

FM has an option to backup and restore the database. It comes handy in case of any corruption either to the hosted OS or to the machine itself. There is also an alternate way to do this via Linux CLI. Both methods are covered in this article.

2023-08-20T20:12:15-0700 2023-08-21T20:00:10-0700 https://support.ruckuswireless.com/articles/000001229 2023-08-20T20:16:15-0700 monthly 0.8 admin,premium knowledge_article_4976 knowledge_article_4976 2012-03-21T12:01:17-0700 000001229 Validated (External) Premium Flexmaster umm Configuration Configuration, FlexMaster UMM How do I mount FlexMaster CD on a Red Hat Enterprise Linux machine? You have to create a mount point for the CD before accessing it, eg “/mnt” Then at the Linux shell type “mount /dev/cdrom /mnt” command. After mounting the CD, you can see the contents inside the CD by executing “ls /mnt"

How do I mount FlexMaster CD on a Red Hat Enterprise Linux machine?

2023-08-20T20:16:15-0700 2023-08-21T20:00:09-0700 https://support.ruckuswireless.com/articles/000001157 2023-08-16T18:31:51-0700 monthly 0.8 admin,premium knowledge_article_2135 knowledge_article_2135 2012-03-21T12:00:13-0700 000001157 Validated (External) Premium Zoneflex 7025 Performance;Configuration;Firmware;Installation;System network management;Troubleshooting Performance, Configuration, Firmware, Installation, System Network Management, Troubleshooting, ZoneFlex 7025 Minimum-software-requirement-for-ZF-7025 Product: AP ZF7025 Topic: Firmware What is the minimum firmware required to run the ZF 7025? The ZF 7025 was first introduced in ZoneFlex Software Release 9.1. Note: when NOT using the 7025 in standalone mode, the ZD1000 is NOT able to support the 7025. All other controllers do support the 7025

Minimum-software-requirement-for-ZF-7025

2023-08-16T18:31:51-0700 2023-08-17T10:00:11-0700 https://support.ruckuswireless.com/articles/000007705 2023-08-15T07:13:21-0700 monthly 0.8 admin,premium knowledge_article_4974 knowledge_article_4974 2018-03-12T14:03:46-0700 000007705 Validated (External) Premium Ruckus icx switches Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, Ruckus ICX Switches What code should I run on my ICX? Check the 'Recommended Firmware' field on the product support page! Have you ever wondered what code Ruckus recommends you run on your ICX? You are in luck. Each product page has a built-in recommendation or recommendations. While these recommendations will not cover every scenario or customer, it should be your starting reference when selecting code for ICX devices. The recommendations are updated occasionally and will change over time. We recommend most customers look to our Stability Release if it contains all needed features for your network. As always, you can contact us if you are unsure where to start. To find the recommended code, navigate to: <a href="https://support.ruckuswireless.com/documents" target="_blank">https://support.ruckuswireless.com/documents</a> From there, select the 'Choose a Product' dropdown, select your switch model. I have attached a screenshot from our ICX7850 page highlighting the recommended code field. Clicking on the link will bring you directly to the software download page. <img src="https://community.ruckuswireless.com/t5/image/serverpage/image-id/6808i9D4C816E004858B2/image-size/large?v=v2&px=999"></img> Reference from Forum: https://community.ruckuswireless.com/t5/RUCKUS-Self-Help/What-code-should-I-run-on-my-ICX-Check-the-Recommended-Firmware/m-p/33612 NOTE: For those used to the old 'Target Path' document, that term and document has been deprecated and replaced by these direct recommendations on the respective product pages

2023-08-15T07:13:21-0700 2023-08-16T14:00:16-0700 https://support.ruckuswireless.com/articles/000014224 2023-08-09T15:13:06-0700 monthly 0.8 admin,premium knowledge_article_4971 knowledge_article_4971 2023-08-09T15:13:06-0700 000014224 Validated (External) Premium Ruckus wan gateway rwg Configuration;Troubleshooting Configuration, Troubleshooting, RUCKUS WAN Gateway RWG How can we safely delete Zones and Access Points in RWG that were imported from the SmartZone? <ol><li>Take a configuration backup in RWG and in the SmartZone;</li><li>Check if the SZ sync is disabled in RWG (Network -> Wireless);</li></ol> <ul><li>Make sure the sync is disabled, if the sync is enable this process will also delete in the SmartZone;</li></ul> <ol start="3"><li>In network -> wireless -> Access points: Delete the APs from the zones that you do not want to see (you can use the search to make it easy to find and delete in batch);</li></ol> <ul><li>After deleting an AP, please verify in the SmartZone if the AP still exists to ensure that the sync is not occurring;</li><li>Continue deleting all unwanted Aps;</li></ul> <ol start="4"><li>Finally, delete the unwanted zones.</li></ol>

How can we safely delete Zones and Access Points in RWG that were imported from the SmartZone?

2023-08-09T15:13:06-0700 2023-08-14T14:00:15-0700 https://support.ruckuswireless.com/articles/000002823 2020-09-15T18:58:14-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_809 knowledge_article_809 2014-03-27T01:43:32-0700 000002823 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector Why web pages fail to load on Apple devices while Windows devices don't have any issue? What can I do about it? Following steps explain the DNS server IP address change on an iOS device: 1. Tap on the "Settings" from the home screen 2. Tap on Wi-Fi and click on the blue arrow right next to your desired wireless network 3. You will find DNS server setting under the DHCP tab 4. Change the DNS server IPs to either the OpenDNS (<code style="font-size: 14px; background-color: rgb(255, 255, 255);">208.67.222.222</code> and <code style="font-size: 14px; background-color: rgb(255, 255, 255);">208.67.220.220</code>) or Google DNS (<code style="font-size: 14px; background-color: rgb(255, 255, 255);">8.8.8.8</code> and <code style="font-size: 14px; background-color: rgb(255, 255, 255);">8.8.4.4</code>). The Google Public DNS IP addresses (IPv4) are as follows: - 8.8.8.8 - 8.8.4.4 The Google Public DNS IPv6 addresses are as follows: - 2001:4860:4860::8888 - 2001:4860:4860::8844 You can use either address as your primary or secondary DNS server. More detailed instructions including the screenshots can be found at http://www.macinstruct.com/node/558 You need to make similar setting changes on MacBooks as well if the browsing failures are noticed on OS X platform as well. Just as an additional note, these setting changes are recommended at an Apple Forums page. Please find this discussion at <a href="https://discussions.apple.com/message/24884041#24884041" target="_blank">https://discussions.apple.com/message/24884041#24884041</a> We found the DNS setting change had a positive impact at one of the customer sites.

This article discusses web page load failures on Apple devices and a method to address it.

2020-09-15T18:58:14-0700 2023-08-12T10:14:08-0700 https://support.ruckuswireless.com/articles/000003197 2021-07-22T07:01:47-0700 monthly 0.8 admin,premium knowledge_article_4490 knowledge_article_4490 2014-07-07T10:04:00-0700 000003197 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, SmartCell Gateway, SmartCell AP How to configure DHCP Option 43 for vSCG on MS server? 1. Open the DHCP server Options menu, select the Option 43 and highlight the Binary section and enter “06” in the field, followed by the number of characters of SCG IP address that follows. (digits and periods) ie. 10.9.101.5 = 10. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Xh&feoid=00N50000002Cf3M&refid=0EM50000000LWJU"></img> 2. Once the SCG vendor code “06” and IP address length has been entered in the Binary section, click under the ASCII section and enter the IP address of the SCG’s Control Plane IP address: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Xh&feoid=00N50000002Cf3M&refid=0EM50000000LWJV"></img> Note: If you are converting ZoneFlex APs to operate under SCG/vSCG, then *also* include code 03 and the length of the SCG/vSCG IP address, either before or after the 06 code/length parameters. (example IP = 10.9.104.77) <img alt="User-added image" height="443" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Xh&feoid=00N50000002Cf3M&refid=0EM500000005lWj" width="500"></img>

Configure Option 43 on a MS server to have an SCG AP automatically connect to the SCG control interface

2021-07-22T07:01:47-0700 2023-08-09T15:55:58-0700 https://support.ruckuswireless.com/articles/000001695 2021-05-03T04:16:21-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3544 knowledge_article_3544 2013-02-28T17:44:20-0800 000001695 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;Known issues and workarounds Configuration, Security, Known Issues and Workarounds, ZoneDirector Why am I getting a Certificate error while accessing a captive portal enabled wlan after installing Wild Card certificate (Digisign)? There are two types of certificates as follows. Trusted , Untrusted Whenever the browser request a page, ZD will pass the information to the browser. Certificate will be validated by the browser only. If the certificate is trusted by the browser then it will not give any error. When the certificate is untrusted by the browser, It will throw the error. In this case we have to use the "Proceed anyway" option to proceed further. Nothing to be done with the ZD. Certificate thing works based on the browser. Digisign certificate is untrusted one. Please find the below URL from Microsoft which gives more details. http://support.microsoft.com/kb/2641690

Information on Digisign certificate.

2021-05-03T04:16:21-0700 2023-08-02T06:07:40-0700 https://support.ruckuswireless.com/articles/000012045 2022-01-26T17:59:01-0800 monthly 0.8 admin,premium knowledge_article_4804 knowledge_article_4804 2022-01-26T17:59:01-0800 000012045 Validated (External) Premium R750;Smartcell ap;RUCKUS R750 Installation;Troubleshooting Installation, Troubleshooting, R750, SmartCell AP Why is my laptop or other external device unable to establish network connection on R750 Non-PoE port? R750 requires 802.3AT to utilize the Non-POE port. Use a Ruckus Wireless 48VAC power adapter --OR-- 802.3at-compliant Power over Ethernet (PoE) switch or PoE injector. ** Ruckus R750 Multimedia Hotzone Wireless AP Using ICX POE Switch results: rkscli: get power-mode PoE Configured Mode : Auto Power Consumption Status : 802.3at Switch/Injector OK Using a Ruckus Wireless Power Adapter results: rkscli: get power-mode PoE Configured Mode : Auto Power Consumption Status : PoE Injector OK rkscli: get eth Port Interface 802.1X Logical Link Physical Link Label ----------------------------------------------------------------- 0 eth0 None Down Down 10/100/1000 ->using 802.3AF, not sufficient Power Consumption 1 eth1 None Up Up 1000Mbps full 100/1000/2500 PoE Note: Read Port#N as N+1, if you are referring this CLI output with AP's "Configure :: Ethernet Ports" UI Page. OK rkscli: get eth Port Interface 802.1X Logical Link Physical Link Label ----------------------------------------------------------------- 0 eth0 None Up Up 1000Mbps full 10/100/1000 ->after sufficient 802.3AT Power Consumption 1 eth1 None Up Up 1000Mbps full 100/1000/2500 PoE Note: Read Port#N as N+1, if you are referring this CLI output with AP's "Configure :: Ethernet Ports" UI Page. OK rkscli:

No link light on R750 second port when I connect a laptop.

2022-01-26T17:59:01-0800 2023-07-27T00:16:44-0700 https://support.ruckuswireless.com/articles/000005680 2019-10-16T09:53:03-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3517 knowledge_article_3517 2016-04-13T09:39:40-0700 000005680 Validated (External) Public Unleashed;Zonedirector 1200;R710;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector 1200;Ruckus R710 Configuration;Troubleshooting Configuration, Troubleshooting, Unleashed, ZoneDirector 1200, R710 Why Unleashed member AP could not join Master? <ul><li>Enabled 'discovery-agent' from AP CLI. </li><li>Execute command 'set discovery-agent enable'. The AP should start sending out discovery packets and join the ZD/Master AP.</li><li>APs should be on same subnet or need to manually point the AP or use DHCP option 43</li><li>Any new AP joining Unleashed should be on 200.x firmware.</li><li>Member AP firmware should be same or lower than master AP.</li></ul>

Unleashed AP not able to join existing Master AP. The resolution is also applicable for ZD managed AP's running firmware version 9.9.x and later releases.

2019-10-16T09:53:03-0700 2023-07-21T00:48:16-0700 https://support.ruckuswireless.com/articles/000010538 2020-08-19T08:22:06-0700 monthly 0.8 admin,premium knowledge_article_4372 knowledge_article_4372 2020-06-03T01:37:07-0700 000010538 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway What are the different options to configure Rogue AP Detection and how to configure them? Customers come in with queries regarding various option available for WIPS/WIDS. The User Guide mentions the configuration steps, however, the definition or the explanation is not present for all the option. Another query that the customers usually came with what is the proper way to configure the policies. This Articles aims to answer such queries. Note: Some of the information in the Article may be redundant to the information present in the user guide. However, it is intentionally added to achieve better understanding You can configure Rogue AP polices at 3 levels <ul><li>Zone</li><li>AP Group</li><li>For a Specific AP</li></ul> At all 3 levels you will observe the below options under Advanced Setting, when you enable "Rogue AP Detection" <ul><li>The first option is "Rogue Classification policy" <ul><li>Click on the + sign to create a new policy</li><li>The Create Rogue Classification Policy page appears.</li><li>Configure the following: <ul><li>Name: Type a name for the policy.</li><li>Description: Type a description for the policy.</li><li>Rogue Classification Rules: To create the policy rule Click on Create.</li></ul> </li><li>The Create Rogue Classification Rules page appears.</li><li>Configure the following options: <ul><li>Name: Enter a name for the rule.</li><li>Rule Type: Select one of following the rule type for the Classification: <ul><li>Ad HOC: <ul><li>When this rule type is selected, you only need to provide a "classification" field to define how to handle this type of rogue</li><li>The monitoring AP is able to detect the ad hoc network as a rogue.</li><li>This can be used in cases where, user may configure there device as a mobile hotspot</li></ul> </li><li>CTS Abuse: <ul><li>When this rule type is selected, you only need to provide a "classification" field to define how to handle this type of rogue</li><li>Reported when the number of CTS frames per second to a specific receiver MAC address exceeds the specific threshold. The default number of frames per second is 50.</li><li>You can use CLI option in SZ to disable or change threshold packets per seconds for CTS abuse <ul><li>To change the threshold detection follow the CLI command:</li></ul> </li></ul> </li></ul> </li></ul> </li></ul> </li></ul> <div style="margin-left: 280px;">remote ap-cli <AP MAC address> "set rogued <attack-type> <pf packets> ". Example: remote ap-cli 8c:fe:74:1c:d6:b8 "set rogued ctsthreshhold 10"</div> <ul style="margin-left: 240px;"><li>To enable/disable the CTS flood detection follow the CLI command:</li></ul> <div style="margin-left: 280px;">remote ap-cli <AP MAC address> "set rogued <attack-type> <pf packets> ". Example: remote ap-cli 8c:fe:74:1c:d6:b8 "set rogued ctsdetect enable/disable"</div> <ul style="margin-left: 160px;"><li>Deauth Flood: <ul><li>When this rule type is selected, you only need to provide a "classification" field to define how to handle this type of rogue</li><li>Reported when the number of deauthentication frames per second exceeds the specific threshold from a specific transmitter. The default number of frames per second is 50</li><li>You can use CLI option in SZ to disable or change threshold packets per seconds for Deauth flood <ul><li>To change the threshold detection follow the CLI command:</li></ul> </li></ul> </li></ul> <div style="margin-left: 280px;">remote ap-cli <AP MAC address> "set rogued <attack-type> <pf packets> ". Example: remote ap-cli 8c:fe:74:1c:d6:b8 "set rogued deauththreshhold 10"</div> <ul style="margin-left: 240px;"><li>To enable/disable the CTS flood detection follow the CLI command:</li></ul> <div style="margin-left: 280px;">remote ap-cli <AP MAC address> "set rogued <attack-type> <pf packets> ". Example: remote ap-cli 8c:fe:74:1c:d6:b8 "set rogued deauthdetect enable/disable"</div> <ul style="margin-left: 160px;"><li>Disassoc Flood: <ul><li>When this rule type is selected, you only need to provide a "classification" field to define how to handle this type of rogue</li><li>Reported when the number of deauthentication frames per second exceeds the specific threshold from a specific transmitter. The default number of frames per second is 50</li><li>You can use CLI option in SZ to disable or change threshold packets per seconds for Disassoc flood <ul><li>To change the threshold detection follow the CLI command:</li></ul> </li></ul> </li></ul> <div style="margin-left: 280px;">remote ap-cli <AP MAC address> "set rogued <attack-type> <pf packets> ". Example: remote ap-cli 8c:fe:74:1c:d6:b8 "set rogued disassocthreshhold 10"</div> <ul style="margin-left: 240px;"><li>To enable/disable the CTS flood detection follow the CLI command:</li></ul> <div style="margin-left: 280px;">remote ap-cli <AP MAC address> "set rogued <attack-type> <pf packets> ". Example: remote ap-cli 8c:fe:74:1c:d6:b8 "set rogued disassocdetect enable/disable"</div> <ul style="margin-left: 160px;"><li>Excessive Power: <ul><li>When this rule type is selected, you only need to provide a "classification" field to define how to handle this type of rogue</li><li>Reported when the power from a scanned AP is more than expected</li><li>This can be validated using the CLI option in SZ <ul><li>You can use the following command:</li></ul> </li></ul> </li></ul> <div style="margin-left: 280px;">remote ap-cli <AP MAC address> "get scanresults wifi1/wifi0. Wifi1: 5GHz radio Wifi0: 2.4Ghz radio</div> <ul style="margin-left: 160px;"><li>Low RSSI: <ul><li>When this rule type is selected, a field called "Signal Threshold" is provided to enter the RSSI (in units of dBm) as a match criteria.</li><li>In this policy type, you will have to defines the RSSI threshold at which the classification will be made</li></ul> </li><li>MAC OUI: <ul><li>When this rule type is selected, a field called "MAC OUI" is provided to enter the MAC OUI as a match criteria.</li><li>In this policy type, you will have to defines the MAC OUI being matched and then defines the classification to make based on that MAC OUI (e.g. 11:22:33)</li><li>The first 3 ocates represents the vendor that manufactures the device</li></ul> </li><li>MAC Spoofing: <ul><li>When this rule type is selected, you only need to provide a "classification" field to define how to handle this type of rogue</li></ul> </li><li>Null SSID: <ul><li>When this rule type is selected, a field called "MAC OUI" is provided to enter the MAC OUI as a match criteria.</li><li>Reported when the SSID filed in Beacon packet is "null" or "null probe request" packet is detected</li><li>This can be used in case of hidden SSID</li></ul> </li><li>RTS Abuse: <ul><li>When this rule type is selected, you only need to provide a "classification" field to define how to handle this type of rogue</li><li>Reported when the number of RTS frames per second to a specific receiver MAC address exceeds the specific threshold. The default number of frames per second is 50.</li><li>You can use CLI option in SZ to disable or change threshold packets per seconds for RTS abuse <ul><li>To change the threshold detection follow the CLI command:</li></ul> </li></ul> </li></ul> <div style="margin-left: 280px;">remote ap-cli <AP MAC address> "set rogued <attack-type> <pf packets> ". Example: remote ap-cli 8c:fe:74:1c:d6:b8 "set rogued rtsthreshhold 10"</div> <ul style="margin-left: 240px;"><li>To enable/disable the CTS flood detection follow the CLI command:</li></ul> <div style="margin-left: 280px;">remote ap-cli <AP MAC address> "set rogued <attack-type> <pf packets> ". Example: remote ap-cli 8c:fe:74:1c:d6:b8 "set rogued rtsdetect enable/disable"</div> <ul style="margin-left: 160px;"><li>Same Network: <ul><li>Again, when this rule type is selected, you only need to provide a "classification" field to define how to handle this type of rogue</li></ul> </li><li>SSID: <ul><li>When this rule type is selected, a field called "SSID" is provided to enter the SSID itself as a match criteria.</li><li>In this policy type, you will have to defines the SSID being matched and then defines the classification to make based on the SSID</li></ul> </li><li>SSID Spoofing: <ul><li>Again, when this rule type is selected, you only need to provide a "classification" field to define how to handle this type of rogue</li></ul> </li></ul> <ul style="margin-left: 120px;"><li>Classification: Select one of the following action for the selected Rule Type: <ul><li>Ignore: <ul><li>If a rule is matched where the rogue is classified as ignore, it will not display the AP in the rogue AP list</li><li>However, an Alarm/Event would still be generated such as: "AP (AP Name (MAC address)) has detected and ignored rogue AP (MAC address) because of rogue classification policy (policy name, rule name)."</li></ul> </li><li>Known: <ul><li>If a rule is matched where the rogue is classified as known, it will be Reported in the SZ GUI as "known"</li><li>However, an Alarm/Event would still be generated such as: "AP (AP Name (MAC)) has detected a rogue AP (MAC) classified as "known" because of rogue classification policy (policy name, rule name)."</li></ul> </li><li>Malicious: <ul><li>If a rule is matched where the rogue is classified it is Reported it in the SZ GUI as "Malicious (Policy Name)" and an Alarm/Event is generated such as: "AP (AP Name (MAC)) has detected a malicious rogue AP (MAC) because of rogue classification policy (policy name, rule name)."</li><li>There is possibility of false alarms as well</li><li>In such a case you can navigate to Report > Rogue Access Points.</li><li>The Rogue Access Points page appears.</li><li>You can select the Rogue AP from the list and click Mark as Known.</li><li>The classification Type of the Rogue AP changes to Known.</li><li>You can also select the Rogue AP from the list and click Unmark, to change the classification.</li></ul> </li><li>Rogue: <ul><li>If a rule is matched where the rogue is classified it is Reported it in the SZ GUI as "Rogue (Policy Name)" and an Alarm/Event is generated such as: "AP (AP Name (MAC)) has detected a rogue AP (MAC) because of rogue classification policy (policy name, rule name)."</li><li>There is possibility of false alarms as well</li><li>In such a case you can navigate to Report > Rogue Access Points.</li><li>The Rogue Access Points page appears.</li><li>You can select the Rogue AP from the list and click Mark as Known.</li><li>The classification Type of the Rogue AP changes to Known.</li><li>You can also select the Rogue AP from the list and click Unmark, to change the classification.</li></ul> </li></ul> </li><li>Click OK.</li><li>You have created a Rogue classification rule.</li></ul> <ul style="margin-left: 80px;"><li>Now Click on "Create" to create a new rule or Click on "OK" to submit the classification policy</li></ul> NOTE: Difference between Rogue AP and Malicious Rogue AP <div style="margin-left: 40px;">Rogue AP: A Rogue AP is any AP that your AP can hear the beacons from that is not part of your wifi network. Another vendors AP in the next office will show up as a rogue. Not usually a problem unless they are blasting your office too. Malicious Rogue AP: Malicious AP is an AP that your AP can hear and its either transmitting your SSID (man in the middle attack) usually with an open SSID which clients may prefer and will connect to it instead of your AP. Or another scenario is when an AP that is not part of your wifi system and it is on your network. When you are configuring the policies, the priority of the rules within a single classification policy matters For example, you may wish to specify a policy in which low RSSI rogues are ignored, but SSIDs matching "Test" are classified as rogue. In this case, you should apply the low RSSI priority first, such that even if the "Test" SSID is detected, it is still ignored because the rogue AP would have low RSSI. </div> <ul><li>The second option is "RSSI threshold setting" <ul><li>This threshold value is between 0 to 100</li><li>AP will leave out all entries that have signal strength lower than the defined threshold</li><li>When the RSSI threshold is zero, AP will not report any rogue device.</li></ul> </li><li>The third option is "Protect the network from malicious" <ul><li>SZ will send malicious list (that include Ruckus and 3rd party AP) to Ruckus AP terminating on the controller in every 15 minutes.</li><li>The malicious list pushed from SZ consists of BSSIDs only and AP will send broadcast deauthentication frame, when "Protect the network" function is enabled, during the background scan.</li><li>This option provided Wireless Intrusion Protection System functionality to the AP in addition to Wireless Intrusion Detection system functionality</li><li>There are three type deauth frequency that you can choose from <ul><li>Aggressive: With the aggressive interval, AP will be sent the deauth frame every 2 seconds</li><li>Auto: With the auto interval, AP will dynamically send out deauth frame based on the current wireless traffic load of a radio</li><li>Conservative: With conservative interval, a deauth frame will be sent out per background scan cycle.</li></ul> </li></ul> </li><li>The last option that we have is the "Radio Jamming Detection" <ul><li>You can enable/disable the “Radio Jamming Detection” and set the jamming threshold, as a percentage</li><li>For instance, if the radio “Busy” percentage goes beyond 80% of the overall airtime, the jamming alert will be reported to SZ and “Rogued” will take samples for 30 seconds and if there are 3 consecutive samples exceed the threshold, AP will categorize it as the jamming activity.</li></ul> </li></ul>

This article aims to answer and explain basic customer queries related to configuration options available for Rogue AP Detection and prevention

2020-08-19T08:22:06-0700 2023-07-19T13:52:51-0700 https://support.ruckuswireless.com/articles/000006452 2019-04-19T16:55:39-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3666 knowledge_article_3666 2017-09-20T15:43:17-0700 000006452 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Installation;Known issues and workarounds Firmware, Installation, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What APs are supported on what ZoneDirector versions? The attached spreadsheet shows all supported AP models on all ZoneDirector models, by ZoneFlex firmware version/release. Per ZoneDirector model, the boxes under ZoneFlex Firmware release, that have an AP model shown, indicate AP supported on that ZD/firmware platform. This spreadsheet was designed for an interactive Upgrade Now Support site tool for ZD customers.

The attached spreadsheet shows all supported AP models on all ZoneDirector models, by ZoneFlex firmware version/release.

2019-04-19T16:55:39-0700 2023-07-14T11:05:38-0700 http://support.ruckuswireless.com/article_attachments/kA250000000TvhtCAC?attachment_index=0 2023-07-14T11:05:38-0700 monthly admin,premium,warranty,guest knowledge_article_3666 knowledge_article_3666_attachment_1 UpgradeGuide-ZD.xlsx 43835.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000002074 2023-07-06T02:29:22-0700 monthly 0.8 admin,premium knowledge_article_4967 knowledge_article_4967 2013-06-02T19:20:11-0700 000002074 Validated (External) Premium Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration Configuration, ZoneDirector, SmartCell Gateway Where can I find Ruckus VSA dictionary file? # -*- text -*- # # dictionary.ruckus # # place the following line into the "dictionary" file of your FreeRadius installation # $INCLUDE dictionary.ruckus # # For use with FreeRadius and ZoneDirector # # rm, 17.06.2010 # # Vendor-ID: 25053 # VENDOR Ruckus 25053 # BEGIN-VENDOR Ruckus # Value Format: group_attr1,group_attr2,... ATTRIBUTE Ruckus-User-Groups 1 string ATTRIBUTE Ruckus-Sta-RSSI 2 integer ATTRIBUTE Ruckus-SSID 3 string ATTRIBUTE Ruckus-Wlan-Id 4 integer ATTRIBUTE Ruckus-Location 5 string ATTRIBUTE Ruckus-Grace-Period 6 integer ATTRIBUTE Ruckus-SCG-CBlade-IP 7 ipaddr ATTRIBUTE Ruckus-SCG-DBlade-IP 8 ipaddr ATTRIBUTE Ruckus-Sta-Vlan-Id 9 integer ATTRIBUTE Ruckus-WSG-User 10 string ATTRIBUTE Ruckus-Sta-UUID 11 string ATTRIBUTE Ruckus-Accept-Enhancement-Reason 12 integer ATTRIBUTE Ruckus-Sta-Inner-Id 13 string ATTRIBUTE Ruckus-BSSID 14 octets ATTRIBUTE Ruckus-WSG-Authorization 15 integer ATTRIBUTE Ruckus-Triplets 101 octets ATTRIBUTE Ruckus-IMSI 102 octets ATTRIBUTE Ruckus-MSISDN 103 octets ATTRIBUTE Ruckus-APN-NI 104 string ATTRIBUTE Ruckus-QoS 105 octets ATTRIBUTE Ruckus-Selection-Mode 106 integer ATTRIBUTE Ruckus-APN-Resolution-Req 107 integer ATTRIBUTE Ruckus-Start-Time 108 octets ATTRIBUTE Ruckus-NAS-Type 109 integer ATTRIBUTE Ruckus-Status 110 integer ATTRIBUTE Ruckus-APN-OI 111 string ATTRIBUTE Ruckus-Auth-Type 112 integer ATTRIBUTE Ruckus-Gn-User-Name 113 string ATTRIBUTE Ruckus-Brand-Code 114 string ATTRIBUTE Ruckus-Policy-Name 115 string ATTRIBUTE Ruckus-Client-Local-IP 116 ipaddr ATTRIBUTE Ruckus-SGSN-IP 117 ipaddr ATTRIBUTE Ruckus-Charging-Charac 118 octets ATTRIBUTE Ruckus-PDP-Type 119 octets ATTRIBUTE Ruckus-Dynamic-Address-Flag 120 octets ATTRIBUTE Ruckus-ChCh-Selection-Mode 121 octets ATTRIBUTE Ruckus-AAA-IP 122 ipaddr ATTRIBUTE Ruckus-CDR-TYPE 123 integer ATTRIBUTE Ruckus-SGSN-Number 124 octets ATTRIBUTE Ruckus-Session-Type 125 integer ATTRIBUTE Ruckus-Accounting-Status 126 integer ATTRIBUTE Ruckus-Zone-Id 127 string ATTRIBUTE Ruckus-Auth-Server-Id 128 string ATTRIBUTE Ruckus-Utp-Id 129 string ATTRIBUTE Ruckus-Area-Code 130 octets ATTRIBUTE Ruckus-Cell-Identifier 131 octets ATTRIBUTE Ruckus-Wispr-Redirect-Policy 132 string ATTRIBUTE Ruckus-Eth-Profile-Id 133 integer ATTRIBUTE Ruckus-Zone-Name 134 string ATTRIBUTE Ruckus-Wlan-Name 135 string ATTRIBUTE Ruckus-AP-Roamed 136 integer ATTRIBUTE Ruckus-Read-Preference 137 string ATTRIBUTE Ruckus-Client-Host-Name 138 string ATTRIBUTE Ruckus-Client-Os-Type 139 string ATTRIBUTE Ruckus-Client-Os-Class 140 string ATTRIBUTE Ruckus-Vlan-Pool 141 string ATTRIBUTE Ruckus-Dpsk 142 octets ATTRIBUTE Ruckus-AAA-Id 152 string #FB Changes ATTRIBUTE Ruckus-CP-Token 143 string ATTRIBUTE Ruckus-Max-DL-UL-Quota 144 integer ATTRIBUTE Ruckus-Traffic-Class-Attribute-Ids 145 string ATTRIBUTE Ruckus-TC-Attr-Ids-With-Quota 146 tlv ATTRIBUTE Ruckus-TC-Name-Quota 146.1 string ATTRIBUTE Ruckus-TC-Quota 146.2 octets ATTRIBUTE Ruckus-TC-Acct-Ctrs 149 tlv ATTRIBUTE Ruckus-Acct-Ctrs_TC-Name 149.1 string ATTRIBUTE Ruckus-Acct-Ctrs_Input-Octets 149.2 octets ATTRIBUTE Ruckus-Acct-Ctrs_Output-Octets 149.3 octets ATTRIBUTE Ruckus-Acct-Ctrs_Input-Packets 149.4 octets ATTRIBUTE Ruckus-Acct-Ctrs_Output-Packets 149.5 octets ATTRIBUTE Ruckus-Nat-Pool-Name 147 string ATTRIBUTE Ruckus-Sta-SVlan-Id 148 integer # Role Support for [FR-2334 - ZD Parity]. ATTRIBUTE Ruckus-Role 150 string ATTRIBUTE Ruckus-DPSK-Params 153 tlv ATTRIBUTE Ruckus-DPSK-AKM-Suite 153.1 octets ATTRIBUTE Ruckus-DPSK-Cipher 153.2 byte ATTRIBUTE Ruckus-DPSK-Anonce 153.3 octets ATTRIBUTE Ruckus-DPSK-EAPOL-Key-Frame 153.4 octets ATTRIBUTE Ruckus-Cluster-Name 154 string ATTRIBUTE Ruckus-Domain-Name 155 string ATTRIBUTE Ruckus-Client-Device-Type 156 string ATTRIBUTE Ruckus-Vlan-Name 157 string # MDU Segmentation Support ATTRIBUTE Ruckus-Vxlan-Id 159 integer ATTRIBUTE Ruckus-Venue-Code 200 string # Attributes range from 201-250 reserved for SCI activities #

Free RADIUS dictionary file with Ruckus Vender Specific Attributes (VSAs).

2023-07-06T02:29:22-0700 2023-07-14T10:00:11-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDmVCAW?attachment_index=0 2023-07-14T10:00:11-0700 monthly admin,premium knowledge_article_4967 knowledge_article_4967_attachment_1 dictionary.ruckus_5.0 7871.0 application/octet-stream;type=unknown http://support.ruckuswireless.com/article_attachments/kA250000000PDmVCAW?attachment_index=1 2023-07-14T10:00:11-0700 monthly admin,premium knowledge_article_4967 knowledge_article_4967_attachment_1 dictionary.ruckus_5.2.1 9424.0 application/octet-stream;type=unknown http://support.ruckuswireless.com/article_attachments/kA250000000PDmVCAW?attachment_index=2 2023-07-14T10:00:11-0700 monthly admin,premium knowledge_article_4967 knowledge_article_4967_attachment_1 dictionary.ruckus_6.1.1 9677.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000003332 2019-12-10T13:19:23-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_2676 knowledge_article_2676 2014-08-26T13:44:08-0700 000003332 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Can third party wireless bridges be configured to work with Ruckus? Ruckus does not support standard WDS.

Can any third party wireless bridges be used with Ruckus? Maybe, under certain conditions.

2019-12-10T13:19:23-0800 2023-07-13T10:14:14-0700 https://support.ruckuswireless.com/articles/000009525 2019-07-09T06:52:57-0700 monthly 0.8 admin,premium knowledge_article_3819 knowledge_article_3819 2019-07-09T06:52:57-0700 000009525 Validated (External) Premium Virtual smartcell gateway Configuration;System network management Configuration, System Network Management, virtual SmartCell Gateway How to configure cluster between the vSZs/SZs? A vSZ cluster supports a maximum of four nodes. If you are building a vSZ-E cluster with more than two nodes, two (2) additional cores must be added to each node to support the added search and replication capabilities. NOTE: To add this vSZ to an existing cluster, the entire target cluster must be in a healthy state (no node must be in “out of service” state). If any member node is out of service, the join request will fail. You will need to remove any out-of-service node from the cluster before you can add a new node successfully. Follow these steps to join a vSZ to an existing cluster. 1. In vSZ setup wizard, under Cluster Setting, select Join Existing Cluster option. 2. In Cluster Name, type the name of the cluster that this vSZ is joining. The Cluster Name and Controller Name boxes only accept alphanumeric characters, hyphens (-), and underscores (_). They do not accept the space character or other special characters (for example, $, *, #, !). 3. In Controller Name (optional), type a name that you want to assign to this new controller. 4. In Controller Description, type a description for this new controller. 5. In Join Exist vSZ Cluster IP, type the IP address of the leader in the existing cluster. 6. In Admin Password, type the administrator password to the web interface of the leader node. 7. Click Next to continue to the Administrator page and follow the remaining steps to complete the setup. <img alt="User-added image" height="341" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Oi&feoid=00N50000002Cf3M&refid=0EM2J000000uhCB" width="899"></img>

This article provides you with the information on how to join a new vSZ node to an existing vSZ appliance to form a cluster.

2019-07-09T06:52:57-0700 2023-07-03T04:51:53-0700 https://support.ruckuswireless.com/articles/000002417 2020-08-18T03:41:08-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4361 knowledge_article_4361 2013-11-30T13:44:09-0800 000002417 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why SSID is not seen even though the Access point is active on the zone director There are five possibilities in which the clients would not be able to see the ssid even though the AP is active on zone director. They are 1. SSID is Hidden 2. Service schedule is set to " Always off" under advanced options. 3. WLAN itself is disabled in the configuration. 4. Clients does not support the radio in which the ssid is broadcasting. 5. Access point is operating on a channel which does not support the local regulatory domain.

Why SSID is not seen even though the Access point is active on the zone director

2020-08-18T03:41:08-0700 2023-06-18T20:56:33-0700 https://support.ruckuswireless.com/articles/000002443 2020-08-18T03:49:36-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4355 knowledge_article_4355 2013-12-29T17:39:33-0800 000002443 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector How secure is 802.1x and should I add MAC authentciation to increase security? 802.1x is a very secure method of protecting your wireless network. Each time the device connects the user configured on the device is authenticated against a RADIUS server and is given a unique encryption key that changes every 90 seconds. Removing a user from the Active Directory will block device access based on that account. Unique and changing encryption keys make it almost impossible to sniff customer traffic in the air. Additional authentication using the MAC address is redundant and unnecessary. The option 802.1x EAP + MAC Address found in Configure::WLAN's under Authentication Options is a special feature for a specific customer that uses an insecure version of 802.1x (EAP-MD5) that does not include encryption. User devices are authenticated with 802.1x or MAC address authentication, not both. This feature is really not useful for other customers. MAC authentication is really difficult to administer since you must gather the MAC address of all devices and populate a RADIUS database with the MAC address prior to the device getting access. If using Microsoft NPS or IAS you must also decrease the password security requirements to permit the MAC address to be used as a password. At this moment 802.1x with AES encryption is considered the most secure solution for wireless networks but requires configuring each device with the correct EAP method and authentication credentials.

Security level provided by 802.1x EAP, adding MAC authentication, using 802.1x+MAC authentication option

2020-08-18T03:49:36-0700 2023-06-15T01:12:39-0700 https://support.ruckuswireless.com/articles/000001261 2020-08-18T03:50:38-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4353 knowledge_article_4353 2012-03-21T12:05:15-0700 000001261 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;Mediaflex;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;MediaFlex 2501;MediaFlex 2900;MediaFlex 2811;MediaFlex 5811;MediaFlex 7811;MediaFlex 7211 System network management;Troubleshooting System Network Management, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, MediaFlex What is "SSID-spoofing AP detected" and "LAN Rogue AP detected"? Ruckus Access Points scan all channels in the band they operate on with background scanning enabled. <img alt="BGS" height="164" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxqY&feoid=00N50000002Cf3M&refid=0EM50000000LMgd" width="500"></img> There are several types of rogue detection: 1. Basic rogue detection: <ul><li>Ruckus Access Points scan for beacons from other access points. All access points are considered rogues that are not being managed by the Zone Director.</li><li>These Access Points may be neighbor systems or other Access Points located in the listening area of the Ruckus Access Points not necessarily connected to your network. </li><li>While neighbor Access Points are not necessarily a threat, they do broadcast RF signals that may interfere with your system and reduce available bandwidth. </li><li>At least three access points need to hear the rogue in order to triangulate the location within 10 meters.</li></ul> 2. SSID spoofing rogues: <ul><li>Access Points transmitting the same SSID as Zone Director controlled Access Points will be detected as SSID Spoofing Rogues</li><li>Often these are older Access Points still in operation</li><li>These may also be “honey pot” or “Man in the Middle” attacks</li><li>If Wireless Intrusion Prevention Systems (WIPS) is enabled, access points should be considered malicious and automatically blocked.</li></ul> 3. LAN rogue/Same Network AP: <ul><li>AP’s whose beacons are detected in the air and also transmitting packets on the wired network</li><li>The Ruckus system compares MAC address on the wired network to MAC address of detected rogue. If the MAC addresses are close enough to indicate they come from the same AP, then these rogues are labeled LAN. </li><li>This indicates systems that may be true rogues (malicious Access Points on the network). If Wireless Intrusion Prevention Systems (WIPS) is enabled, access points should be considered malicious and automatically blocked.</li><li>Since the method for recognizing this type of “true” rogue is limited, some of the other rogues on the network may actually be connected on your wired network, but use a wired MAC address completely different than the wired MAC, or maybe doing NAT/Gateway to hide their existence. There is also the possibility of false positives, that is some device on the network with MAC within the same range as an AP, but not necessarily the same device (not as likely as most Access Points control a large range of MAC addresses to provide multiple SSID capability)</li></ul> ?4. MAC spoofing/BSSID-spoof: <ul><li>Detecting beacon from a rogue AP using the same BSSID/MAC address as a Zone Director controlled AP</li><li>This is also considered a “man in the middle” or “evil twin” attack</li><li>If Wireless Intrusion Prevention Systems (WIPS) is enabled, access points should be considered malicious and automatically blocked.</li></ul> For more information, please reference the Zone Director User Guide. See the section on Configuring Security and Other Services.

Type of Rogue Access Points detected by Ruckus Zone directors

2020-08-18T03:50:38-0700 2023-06-07T23:50:00-0700 https://support.ruckuswireless.com/articles/000010643 2020-06-19T05:12:25-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4236 knowledge_article_4236 2020-06-19T05:12:25-0700 000010643 Validated (External) Public Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway Is social media authentication is supported on SmartZone? Feature is not supported on SmartZone version 3.5.x and above directly. You may need to use Hotspot (WISPr) authentication with a third party server which supports Social media authentication. Ruckus recommends <a href="https://www.commscope.com/product-type/enterprise-networking/network-access-policy/network-access/?utm_source=ruckus&utm_medium=redirect&r=1" target="_blank">Cloudpath enrollment system</a> which supports multiple ways of onboarding clients/authentication/certificate management and alot more. To know more about the product, please refer below link. <a href="https://www.commscope.com/product-type/enterprise-networking-carrier-wi-fi-cbrs/network-access-policy/cloudpath/?utm_source=ruckus&utm_medium=redirect" target="_blank">Ruckus Cloudpath</a>

Feature is not supported on SmartZone version 3.5.x and above

2020-06-19T05:12:25-0700 2023-06-06T10:25:39-0700 https://support.ruckuswireless.com/articles/000002610 2020-08-09T23:29:59-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2563 knowledge_article_2563 2014-02-18T01:00:48-0800 000002610 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector How do I setup a Ruckus Secure Hotspot (WiSPr) with Captive Portal for Zero-IT/DPSK on ZoneDirector? Here is what is required to setup a secure hotspot: 1. A web portal server to host the login page and related scripts 2. An authentication server (such as a AAA server) to validate the login accounts 3. ZoneDirector running on v9.5 firmware or above 4. ZoneFlex APs managed by a ZoneDirector 5. Wireless client devices such as smartphones, tablets, or laptops Detailed instructions can be found in the Secure Hotspot configuration guide downloadable from : <a href="http://a030f85c1e25003d7609-b98377aee968aad08453374eb1df3398.r40.cf2.rackcdn.com/support/secure_hotspot_configuration.pdf" target="_blank">http://a030f85c1e25003d7609b98377aee968aad08453374eb1df3398.r40.cf2.rackcdn.com/support/secure_hotspot_configuration.pdf</a> Links in the document above no longer exist. Scripts to run the portal login logic can be downloaded from : <a href="http://securehotspot.ruckuswireless.com/assets/template_files/unix/www" target="_blank">http://securehotspot.ruckuswireless.com/assets/template_files/unix/www</a>

What is required to deploy a secure Hotspot on ZoneDirector

2020-08-09T23:29:59-0700 2023-06-05T01:01:13-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PEiGCAW?attachment_index=0 2023-06-05T01:01:13-0700 monthly admin,premium,warranty,guest knowledge_article_2563 knowledge_article_2563_attachment_1 Secure Hotspot README.pdf 56244.0 application/pdf https://support.ruckuswireless.com/articles/000002612 2020-08-18T03:52:28-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4350 knowledge_article_4350 2014-02-11T02:14:11-0800 000002612 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration Performance, Configuration, ZoneDirector How does the Bonjour work? What is the role of ZD as a Bonjour Gateway?

This article talks about Bonjour query, response and how a ZoneDirector provides this service when the Bonjour services are hosted on a different subnet.

2020-08-18T03:52:28-0700 2023-06-01T23:52:27-0700 https://support.ruckuswireless.com/articles/000003489 2018-12-17T16:15:46-0800 monthly 0.8 admin,premium knowledge_article_3496 knowledge_article_3496 2014-10-08T12:07:43-0700 000003489 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, ZoneDirector Why some bonjour gateway is not working on ZD managed APs? Create a Bonjour Policy that has no more than 28 characters.

If Bonjour policy name is over 28 characters, when applied to an AP, bonjour services are not working.

2018-12-17T16:15:46-0800 2023-06-01T23:33:45-0700 https://support.ruckuswireless.com/articles/000014202 2023-05-16T22:14:36-0700 monthly 0.8 admin,premium knowledge_article_4955 knowledge_article_4955 2023-05-16T22:14:36-0700 000014202 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway How to recover snmp trap service for Smart Zone cluster operating with uptime greater than 497 days? Enhancement has been made to Smart Zone 5.2.2 MR3 and 6.1.2 or higher version to report the snmp trap system uptime as 497 days

How to recover snmp trap service for Smart Zone cluster operating with uptime greater than 497 days?

2023-05-16T22:14:36-0700 2023-05-18T14:00:09-0700 https://support.ruckuswireless.com/articles/000012046 2022-01-26T18:36:08-0800 monthly 0.8 admin,premium knowledge_article_4803 knowledge_article_4803 2022-01-26T18:36:08-0800 000012046 Validated (External) Premium Sz144 d;Vsz dataplane;Sz100d Known issues and workarounds Known Issues and Workarounds, SZ144 D, vSZ Dataplane, SZ100D Why I am getting an "Upgrade failed" error for the v/DP? These Linux RPM Keys are not easy to recover by the upgrade process or KSP in current release. The temporary and fast workaround is to reboot the v/DP before upgrading, or after hitting the "Upgrade failed" issue. Rebooting the vDP would recover rpm file, which is much safer than running CLI command to rebuild RPM Database. In future release if RPM keys are corrupted, the pre-upgrade validation will identify it and it will prompt for the reboot of the system to recover it.

This article explains an RPM corruption situation which results into v/DP upgrade failure.

2022-01-26T18:36:08-0800 2023-05-17T12:51:19-0700 https://support.ruckuswireless.com/articles/000010540 2020-05-27T05:40:15-0700 monthly 0.8 admin,premium knowledge_article_4207 knowledge_article_4207 2020-05-27T05:40:15-0700 000010540 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, SmartCell Gateway, virtual SmartCell Gateway How to Upload and Restore Cluster backup on SmartZone? Below is the command to upload the cluster backup to the vSZ/SZ platform: 1. Upload the cluster backup using SSH or Console/Serial Access to vSZ/SZ setup: Ruckus>enable Password: Ruckus#copy ftp://<USERNAME>:<PASSWORD>@<FTP_SERVER_ADDR>/<FILE_NAME.bak> backup For Example: Ruckus>enable Ruckus#copy ftp://test:test@192.168.1.10/cluster_backup.bak backup Screenshot from the lab network is shown below: <img alt="User-added image" height="120" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxSe&feoid=00N50000002Cf3M&refid=0EM2J000001Sj6L" width="500"></img> 2. Restore the backup onto the controller: Ruckus>enable Ruckus#restore <img alt="User-added image" height="243" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxSe&feoid=00N50000002Cf3M&refid=0EM2J000001Sj6k" width="500"></img>

CLI Command to show the cluster backup upload and restore on vSZ or SZ platform using CLI (SSH/Serial Access)

2020-05-27T05:40:15-0700 2023-05-15T17:12:00-0700 https://support.ruckuswireless.com/articles/000002183 2020-09-20T21:54:14-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_588 knowledge_article_588 2013-07-30T15:59:16-0700 000002183 Validated (External) Public Flexmaster umm Firmware Firmware, FlexMaster UMM What is the recommended upgrade path for FlexMaster running older firmware versions? Following is the recommended upgrade path for FlexMaster running an older version. This upgrade path does not take into account any special build but just GA (general availability) and MR releases. If you don't see your starting version in the list below, please contact support https://support.ruckuswireless.com/contact-us 9.1.0.0.103 - 9.1.0.0.105 9.1.0.0.105 - 9.1.1.0.20 9.1.1.0.20 - 9.2.0.0.41 9.2.2.0.41 - 9.3.0.0.18 9.3.0.0.18 - 9.4.0.0.17 9.4.0.0.17 - 9.5.0.0.29 9.5.0.0.29 - 9.5.1.0.9 9.5.1.0.9 - 9.5.2.0.4 9.5.1.0.9 - 9.5.3.0.4 9.5.2.0.4 - 9.5.3.0.4 9.5.0.0.29 - 9.6.0.0.17 9.6.0.0.11 - 9.6.0.0.17 9.6.0.0.17 - 9.6.1.0.4 9.5.1.0.9 - 9.7.0.0.21 9.5.2.0.4 - 9.7.0.0.21 9.5.3.0.4 - 9.7.0.0.21 9.6.0.0.17 - 9.7.0.0.21 9.6.1.0.4 - 9.7.0.0.21 9.7.0.0.15 - 9.7.0.0.21 9.5.3.0.4 - 9.8.0.0.36 9.7.0.0.21 - 9.8.0.0.36 9.8.0.0.26 - 9.8.0.0.36 9.8.0.0.36 - 9.8.1.0.9 9.8.1.0.9 - 9.0.0.0.24 9.9.0.0.24 - 9.10.0.0.7

This article explains the recommended upgrade path for FlexMaster running an older version of firmware

2020-09-20T21:54:14-0700 2023-05-09T19:12:00-0700 https://support.ruckuswireless.com/articles/000002395 2021-04-07T18:08:50-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4640 knowledge_article_4640 2013-12-01T17:14:06-0800 000002395 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Can we telnet into an AP ? I had a query from a customer that , Can we telnet into an AP ? The answer is "NO" . We can only telnet to a ZD but not to an AP , However we can SSH into an AP for any kind of troubleshooting. You can SSH using any terminal emulator like PUTTY or TERA TERM and login using the administrative credentials.

2021-04-07T18:08:50-0700 2023-05-05T10:39:20-0700 https://support.ruckuswireless.com/articles/000014159 2023-04-18T17:29:15-0700 monthly 0.8 admin,premium knowledge_article_4952 knowledge_article_4952 2023-04-18T17:29:15-0700 000014159 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway How to resolve controller CLI #show service redis service frequently restarting ? Please upgrade to Smart Zone 6.1.2 or later to take on the fix

This knowledge article reflects how to resolve controller CLI #show service redis service frequently restarting

2023-04-18T17:29:15-0700 2023-04-21T14:00:10-0700 https://support.ruckuswireless.com/articles/000006050 2021-03-08T07:26:32-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4544 knowledge_article_4544 2016-09-19T17:48:44-0700 000006050 Validated (External) Public Zonedirector 1100;ZoneDirector 1100 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector 1100 Why I am not able to access ZD web GUI and getting error ssl_error_no_cypher_overlap Use the TLS 1.0 supported old browser version or upgrade the ZD to 9.7 or above using CLI, for permanent fix.

Unable to access ZD GUI Cipher suite RC4

2021-03-08T07:26:32-0800 2023-04-17T22:46:12-0700 https://support.ruckuswireless.com/articles/000005145 2019-01-27T16:26:39-0800 monthly 0.8 admin,premium knowledge_article_2629 knowledge_article_2629 2015-10-02T13:50:18-0700 000005145 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway Can I use Bonjour Gateway to bridge Google Chromecast? Chromecast dongles and Chromecast-enabled client devices (like Chromebooks) operate on separate subnets, an mDNS proxy function may be required to bridge the service advertisements across subnets. Thankfully, due to its similarity to Apple’s use of Bonjour, the Ruckus mDNS proxy feature (sometimes referred to as a “Bonjour Gateway”) is already prepared to handle Chromecast discovery and forwarding across network segments. Administrators simply configure an' Other' service proxy rule for (_googlecast._tcp.) from a specified source VLAN to a specified destination VLAN, and we handle the rest. Note: For ZD firmware 10.x and above, navigate to Services & Profiles > Bonjour <img alt="User-added image" height="254" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095PN&feoid=00N50000002Cf3M&refid=0EM50000000HL18" width="500"></img> <img alt="User-added image" height="254" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095PN&feoid=00N50000002Cf3M&refid=0EM50000000HL1D" width="500"></img> Please find further info in the below link which will help you with necessary changes on ZD end. <a href="http://a030f85c1e25003d7609-b98377aee968aad08453374eb1df3398.r40.cf2.rackcdn.com/wp/wp-google-classroom.pdf" target="_blank">Raising a Ruckus in the Google Classroom.</a>

A Bonjour Gateway rule can be defined to support mDNS for Chromecast between VLANs.

2019-01-27T16:26:39-0800 2023-04-11T04:48:19-0700 https://support.ruckuswireless.com/articles/000014053 2023-04-07T11:26:20-0700 monthly 0.8 admin,premium knowledge_article_4946 knowledge_article_4946 2023-04-07T11:26:20-0700 000014053 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway How to resolve missing DFS channels in Israel Smart Zone AP zones ? Upgrade to 5.2.2 patch 3 or 6.1.1.0.359 and newer releases to enable Israel DFS channels Note: As of 3/6/23 Smart Zone 5.2.2 patch 3 have not been released.

DFS channels have been approved by the Israel telecommunication authorities for some time. Why haven't Smart Zone enable DFS support for Israel AP Zones?

2023-04-07T11:26:20-0700 2023-04-10T12:00:07-0700 https://support.ruckuswireless.com/articles/000001537 2014-01-11T14:12:51-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_182 knowledge_article_182 2013-01-23T13:27:05-0800 000001537 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell ap;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP Where I can find MIB files for Ruckus devices --> Log in to support Portal www.support.ruckuswireless.com --> Click on downloads --> Click on the device for which you need MIB files There you can find MIB files for the device

2014-01-11T14:12:51-0800 2023-04-05T07:02:46-0700 https://support.ruckuswireless.com/articles/000003031 2020-08-18T03:47:44-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4357 knowledge_article_4357 2014-05-12T01:41:38-0700 000003031 Validated (External) Public Sz300;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Scg200;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, SZ300, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SCG200, virtual SmartCell Gateway, SZ100 How do I set the AP's Ethernet port to operate at 100 Mbps or 10 Mbps speed? ZoneFlex APs provide a CLI option to define their Ethernet ports to operate at either 100 Mbps or 10 Mbps speeds. In general, all 802.11n and 802.11ac capable APs come with at least one Gbps port (which is also a PoE port). Once they are connected to any of the latest switches they will negotiate the best possible speed and operate at it. There may be scenarios in which it is required to make the AP to operate at a lower speed meaning, either at 100 Mbps or at 10 Mbps. This can also apply to the non-PoE port if you are planning to connect it to a switch/hub or a client device. To support such scenarios, ZoneFlex APs come with a command line option. Here are the configuration options provided at the command line: <div> </div> <div>Usage: set ethspeed {<ifname>|<port num>} <connect speed></div> <div> -------------------------------------------------------------</div> <div> ** connect speed:</div> <div> ** 100 - Set to fixed 100Mbps full duplex</div> <div> ** 10 - Set to fixed 10Mbps full duplex</div> <div> ** 1 - Auto-negotiation to 100Mbps full duplex</div> <div> ** 0 - Auto-negotiation to max bandwidth capability of</div> <div> ** the interfaces (default) For example, if you would like to set the non-PoE port(eth1) to operate at 10 Mbps speed, enter the command as below: rkscli: set ethspeed eth1 10 This setting can be verified either via "get eth" command or via the AP's GUI option. To use the AP's GUI option, you have to login to the AP's web interface by typing its IP address in a browser. Note: Only Ethernet speed can be changed on Ruckus APs but not Duplex. Ruckus APs auto-negotiate the Duplex with the Switchport they are connected to.</div>

This article discusses command line options to manually set the AP's Ethernet port at 100 Mbps or 10 Mbps speed

2020-08-18T03:47:44-0700 2023-04-04T13:25:08-0700 https://support.ruckuswireless.com/articles/000003252 2020-03-26T01:33:34-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4107 knowledge_article_4107 2014-08-04T01:21:46-0700 000003252 Validated (External) Public Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) System network management System Network Management, SmartCell Gateway, virtual SmartCell Gateway How to create SZ & SCG diagnostics snapshot file <h2>via WebUI</h2> <ul><li>Go to Diagnostics >>>> Application logs</li></ul> <div style="margin-left: 40px;">Note : Select the appropriate control-plane from the drop down menu you are investigating or complete for all control-planes / nodes if unsure. </div> <div style="margin-left: 120px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054lE&feoid=00N50000002Cf3M&refid=0EM2J000000welF"></img></div> <ul><li>Select "Download Snapshot log" - collecting logs and generating a single download may take several minutes. The browser status bar will show "waiting for <SZ ip.addr>"</li></ul> <div style="margin-left: 120px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054lE&feoid=00N50000002Cf3M&refid=0EM2J000000welP"></img> <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054lE&feoid=00N50000002Cf3M&refid=0EM2J000000wele"></img></div> <ul><li>You will be prompted to download the file directly. Snapshots are also stored under the log file group "Diagnostics"</li></ul> <div style="margin-left: 80px;">- To show file names select the number link, in this case 1.</div> <div style="margin-left: 80px;">- The file can be downloaded by selecting the file name link. </div> <div style="margin-left: 120px;"><img alt="User-added image" height="108" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054lE&feoid=00N50000002Cf3M&refid=0EM2J000000welt" width="500"></img></div> <div style="margin-left: 80px;">- If the number is 0 no files are available for collection. </div> <h2>via CLI</h2> <ul><li>From the CLI, Enter the diagnostic mode and run execute all command. This command should be executed on each SZ/ vSZ node in the cluster</li></ul> <div> <div style="margin-left: 120px;">vSZ-H-35# diagnostic</div> <div style="margin-left: 120px;">vSZ-H-35(diagnostic)# execute all </div> </div> <ul><li>The concern SZ/ vSZ will respond with a message similar to the following</li></ul> <div style="margin-left: 120px;">Loading common/_DEFAULT.conf ... Log file archive in snapshot_20200326012248_vSZ-H-35_CLI-admin_701456.tgz</div> <ul><li>When the above process is completed the file can be retrieved from the WebUI under Diagnostics >>>> Application logs. Files can be found in the group called 'Diagnostics' for SZ/ vSZ version from 2.5 and later.</li></ul> <div style="margin-left: 120px;"><img alt="User-added image" height="108" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054lE&feoid=00N50000002Cf3M&refid=0EM2J000000wem3" width="500"></img></div> <ul><li>Alternatively, the snapshot can be copied to an FTP server using the following CLI command.</li></ul> <div style="margin-left: 120px;">vSZ-H-35(diagnostic)# copy snapshot <ftp-url> <ftp-url> FTP directory URL, Format: ftp://<username>:<password>@<ftp-host>[/<dir-path>] </div> <h2>Managing snapshot files</h2> <ul><li>When generated from the WebUI it is important to ensure these files are downloaded immediately, so they are not overwritten with new data</li><li>In the event a snapshot is overwritten, the full logs for specific modules are kept under. Ask support which specific files may be relevant to your issue.</li><li>From the CLI files, we can deleted the snapshot file using 'delete snapshot <cr>' command or using the specific file name 'delete snapshot <snapshot_name>''.</li></ul> <div style="margin-left: 120px;">To view a list of snapshots use 'show snapshot' </div> vSZ-H-35(diagnostic)# show snapshot snapshot_20200326012248_vSZ-H-35_CLI-admin_701456.tgz snapshot_20200326015118_vSZ-H-35_CLI-admin_701456.tgz vSZ-H-35(diagnostic)# delete snapshot snapshot_20200326012248_vSZ-H-35_CLI-admin_701456.tgz Do you want to continue to delete (or input 'no' to cancel)? [yes/no] yes vSZ-H-35(diagnostic)# show snapshot snapshot_20200326015118_vSZ-H-35_CLI-admin_701456.tgz

Create and collect SZ & SCG diagnostic snapshot file. Snapshots contain recent logs from various system components that provide engineering with a single file for initial diagnostics.

2020-03-26T01:33:34-0700 2023-04-04T04:32:43-0700 https://support.ruckuswireless.com/articles/000010825 2020-08-27T12:49:11-0700 monthly 0.8 admin,premium knowledge_article_4375 knowledge_article_4375 2020-08-27T12:45:10-0700 000010825 Validated (External) Premium Virtual smartcell gateway;Zonedirector 1200;ZoneDirector 1200 Performance;Configuration;System network management Performance, Configuration, System Network Management, virtual SmartCell Gateway, ZoneDirector 1200 How to integrate ForeScout with v/SZ or Zonedirector and what is the minimum software requirement? <ol><li>v/SmarZone from 5.1.1.x version or higher supports ForeScout.</li><li>Zonedirector supports ForeScoute from 9.9 and above.</li><li>Use API Version v8_1</li><li>Minimum ForeScout Plugin Version- V8.2: NC-1.0.0, NCC1.0.0 and higher.</li></ol> For more information, refer the attached ForeScout guide.

This article explains the requirement and procedure to integrate ForeScout with Ruckus v/SZ and Zonedirector

2020-08-27T12:49:11-0700 2023-03-30T19:23:36-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000GvK4SAK?attachment_index=0 2023-03-30T19:23:36-0700 monthly admin,premium knowledge_article_4375 knowledge_article_4375_attachment_1 ForeScout compatibility Matrix.pdf 1576655.0 application/pdf https://support.ruckuswireless.com/articles/000002655 2021-05-04T02:01:17-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_776 knowledge_article_776 2014-02-19T00:27:43-0800 000002655 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor When does a ZD managed AP download its configuration from the controller? Every time an AP loses heartbeats due to network issues or reboots or loses power, above steps will be performed in sequence. In addition if an admin changes configuration on the ZD side on a live network new configuration will be downloaded by all managed ZDs. It is better to avoid configuration changes during peak times. Configuration requests from all APs will put additional load on the ZD.

AP downloads configuration from the controller

2021-05-04T02:01:17-0700 2023-03-30T05:07:26-0700 https://support.ruckuswireless.com/articles/000007132 2018-08-30T10:48:29-0700 monthly 0.8 admin,premium knowledge_article_3109 knowledge_article_3109 2017-12-12T14:12:09-0800 000007132 Validated (External) Premium Ruckus icx switches Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches Why does ICX 7450 shows PD Detection Fault on ports 1 to 8? <table class="sectionContent" style="width: 862px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 684px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">The first 8 ports of the ICX 7450 are POH ports and split the current through 2 pairs of wires. POH does this in order to supply 95W as needed per standard. The power (7mA) is divided in 2 (3.5mA) on each of the 2 pairs, which is under the IEEE 802.3af/at PD power requirement and also below the extra margin provided on the switch. The other ports of the ICX 7450 are PoE ports; therefore, the PD devices will work as expected. Final recommendation: <ul><li> PD Device should be connected to the non-POH ports of the ICX7450. </li></ul> </div> </td></tr></tbody></table> </td></tr></tbody></table>

ICX 7450 shows PD Detection Fault on the first eight ports when connecting a PD device.

2018-08-30T10:48:29-0700 2023-03-28T11:53:34-0700 https://support.ruckuswireless.com/articles/000014090 2023-03-16T13:15:03-0700 monthly 0.8 admin,premium knowledge_article_4945 knowledge_article_4945 2023-03-16T13:15:03-0700 000014090 Validated (External) Premium Sz144;Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Troubleshooting;Knowledge base Configuration, Troubleshooting, Knowledge Base, SZ144, SZ300, SCG200, virtual SmartCell Gateway, SZ100 What is the IP address and DNS record for the Ruckus LiMan Licensing Server? Configure any firewall and/or access control list(ACL) with the following license server information to resolve any communication/sync issues with LiMan. Furthermore, it is recommended to utilize the DNS record vs. IP addresses to avoid any future licensing sync issues as the IP information may change. DNS record: ruckuswireless.flexnetoperations.com IP addresses: 185.146.155.64 185.146.155.65 185.146.155.66 Please also refer to the following page: <a href="https://community.flexera.com/t5/FlexNet-Operations-Knowledge/Network-Block-or-IP-Allow-List-for-FlexNet-Operations-Cloud/ta-p/2713" style="color: #0563c1; text-decoration: underline;" target="_blank">https://community.flexera.com/t5/FlexNet-Operations-Knowledge/Network-Block-or-IP-Allow-List-for-FlexNet-Operations-Cloud/ta-p/2713</a>

IP address and DNS Record for the LiMan Licensing Server

2023-03-16T13:15:03-0700 2023-03-23T12:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000fzIQSAY?attachment_index=0 2023-03-23T12:00:09-0700 monthly admin,premium knowledge_article_4945 knowledge_article_4945_attachment_1 Liman DNS and IP.png 115992.0 image/png https://support.ruckuswireless.com/articles/000001547 2020-08-09T10:27:42-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3276 knowledge_article_3276 2013-01-26T18:25:39-0800 000001547 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;Zoneswitch;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, ZoneSwitch How do I segregate traffic between two SSIDs using VLANs? <div>Customers Scenario : Corporate SSID - VLAN 1 (Native untagged VLAN) Guest SSID - VLAN 20 Guest Access configuration can be done only on ZD managed AP. Network segmentation can be achieved by configuring the guest network in a separate VLAN along with a DHCP server configured for this IP address subnet pool. This configuration can be implemented in the following way: 1. First create a separate VLAN for this guest network(eg. VLAN id 20). Make sure that an external DHCP server has been configured for this IP address pool in this VLAN subnet. 2. The corporate network can be available on native VLAN 3. Zonedirector switch port should be configured in the native VLAN, and Access Point switch ports should be configured as trunk port (with both native and VLAN 20) in the Managed switch. 4. Assign VLAN tag to the guest SSID at Configure-> WLANs> Create New/Edit> Advanced Options and enter the Vlan ID. Now the guest users who connect to the guest network will receive IP addresses in VLAN 20. By default, guest users will be restricted from accessing the internal network (only DHCP/ARP/DNS) until passing the WLAN specified authentication/authorization method (guest pass, terms and conditions only, no authentication) before accessing the network (and Internet if routed). </div>

VLAN configuration for Guest Network

2020-08-09T10:27:42-0700 2023-03-22T02:43:20-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PCgCCAW?attachment_index=0 2023-03-22T02:43:20-0700 monthly admin,premium,warranty,guest knowledge_article_3276 knowledge_article_3276_attachment_1 scenario.JPG 92600.0 image/jpeg https://support.ruckuswireless.com/articles/000008271 2020-02-18T15:13:48-0800 monthly 0.8 admin,premium knowledge_article_4070 knowledge_article_4070 2018-09-12T15:13:50-0700 000008271 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway How to use Ruckus AP as Air Monitor for Wifi Sniffer between AP and client Following are the steps on how to use a Ruckus AP as Wireless Sniffer: Step1: Verify the AP you would like to Monitor and note down the Channel it is operating on; I would call it as Monitored AP. In my case, I chose an AP which is on channel 40 as I am monitoring traffic on 5Ghz Radio. However in case you need to monitor 2.4Ghz, choose the Channel accordingly. <div>rkscli: get channel wifi1 wifi1 Channel: 40 (5200 Mhz) (Smart Auto Select) Note: For 2.4Ghz, use get channel Wifi0 </div> Step2: Pick another closer AP to the client and set it to the same channel as the Monitored AP; I would call it as Monitoring Access Point. As a best practice, it would be good to have an AP next to the client so that no packets are missed/lost due to RF conditions. rkscli: set channel wifi1 40 OK rkscli: get channel wlan32 wlan32 Channel: 40 (5200 Mhz) (Manual Channel Select) OK Step3: Set streaming capture on Monitoring Access Point using following CLI: rkscli: set capture wifi1 stream Capturing in 80 MHz channel BW OK Step4: Open Wireshark and start capturing traffic using Remote Interfaces: <img alt="User-added image" height="210" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054K8&feoid=00N50000002Cf3M&refid=0EM50000000lh0j" width="500"></img> <img alt="User-added image" height="338" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054K8&feoid=00N50000002Cf3M&refid=0EM50000000lh0o" width="500"></img> In this case I am running a ping from Wired Client 10.73.137.175 to Wireless Client 10.177.80.254. We could see packets over the air sent from Wired to the WiFi station on the Monitoring AP as follows: <img alt="User-added image" height="138" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054K8&feoid=00N50000002Cf3M&refid=0EM50000000lh0U" width="500"></img>

This Article explain how we can turn Ruckus AP as an Air Monitor when we do not have a macbook in customers premises to run OTA.

2020-02-18T15:13:48-0800 2023-03-15T10:37:39-0700 https://support.ruckuswireless.com/articles/000005308 2020-08-12T03:23:37-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2222 knowledge_article_2222 2015-11-20T13:04:56-0800 000005308 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Unleashed Why will Unleashed AP not join Master when using 192.168.101.x or 192.168.50.x subnet? Upgrade to 200.1.9.13 or above.

Unleashed AP fail to join master when using 192.168.101.x or 192.168.50.x subnet

2020-08-12T03:23:37-0700 2023-03-12T18:53:46-0700 https://support.ruckuswireless.com/articles/000013970 2023-02-24T06:43:56-0800 monthly 0.8 admin knowledge_article_4942 knowledge_article_4942 2023-02-24T06:43:56-0800 000013970 Validated (External) Internal Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Performance;Troubleshooting Performance, Troubleshooting, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Why some of the android devices, especially android 11 and android 12 are not connecting to the network and not receiving an IP? Disable DHCP option 108 in the DHCP server. This will restrict the DHCP server to respond with only IPV6-only preferred option in the OFFER packet of the DHCP process. Basically, option 108 from DHCP server allows the client to turn off the DHCP IPV4 stack and initiate the DHCP operation through IPV6 only mode. This is an operation flexibility offered by DHCP server upon request from clients first. Meaning, the update on android, let the IPV6 capable clients to request for IPv6-Only Preferred option code in the DISCOVER packet of IPV4 stack. Please find the screenshot below, which shows the parameter request list item includes the IPv6-Only Preferred option in the DISCOVER packet. <img alt="User-added image" height="227" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000bpgm&feoid=00N50000002Cf3M&refid=0EM2J000004NkuT" width="500"></img> Clients that do not include the option code in the parameter request list, receives the DHCP offer in IPV4 only and proceeds with DHCP request and acknowledgment. Below is an example from a Windows device. The windows clients do not include DHCP option 108 under Parameter Request list. <img alt="User-added image" height="215" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000bpgm&feoid=00N50000002Cf3M&refid=0EM2J000004NkvG" width="500"></img> <img alt="User-added image" height="247" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000bpgm&feoid=00N50000002Cf3M&refid=0EM2J000004NkvV" width="500"></img> External links about similar issue: <a href="https://www.reddit.com/r/networking/comments/l1jmzq/bit_of_a_weird_problem_with_dhcp_and_samsung_s20/" style="color: #0563c1; text-decoration: underline;" target="_blank">https://www.reddit.com/r/networking/comments/l1jmzq/bit_of_a_weird_problem_with_dhcp_and_samsung_s20/</a>

Android 11 and 12 can not get IP addresses

2023-02-24T06:43:56-0800 2023-03-03T08:00:08-0800 https://support.ruckuswireless.com/articles/000009910 2019-10-27T12:04:22-0700 monthly 0.8 admin,premium knowledge_article_3979 knowledge_article_3979 2019-10-27T12:04:22-0700 000009910 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway A new AP fails to configure any WLANs and the channel is showing as 'N/A' in SZ web interface - how can I resolve this? Follow the steps below to remove the AP from the SZ, clean-up the AP config and start fresh; 1. In SZ > Access Points > select the affected AP > click Delete icon 2. Factory reset the AP: a. SSH to the AP, enter commands; <div style="margin-left: 40px;"> [login] set factory reboot</div> or: b. Hold-down the 'Reset' button on the AP for ~15 seconds, then release. 3. SSH to the AP and configure the SZ IP address as done when first installing the AP: <div style="margin-left: 40px;"> [login] set scg ip X.X.X.X (where X = the IP of the SZ) reboot</div> 4. When the AP connects to SZ and is visible in the Staging Zone, move the AP into the correct zone. The AP should now connect to the Zone, and correctly pull the configuration/WLANs and become serviceable.

Steps to identify if the AP is failing to update it's configuration from SZ

2019-10-27T12:04:22-0700 2023-03-01T04:21:40-0800 https://support.ruckuswireless.com/articles/000014010 2023-02-17T00:55:12-0800 monthly 0.8 admin,premium knowledge_article_4941 knowledge_article_4941 2023-02-17T00:55:12-0800 000014010 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway What is a workaround for AP CLI script timing out on zones with large number of APs Please see Workaround

A workaround for AP CLI script timing out on zones with large number of APs

2023-02-17T00:55:12-0800 2023-02-24T08:00:07-0800 https://support.ruckuswireless.com/articles/000011636 2021-05-11T10:50:27-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4684 knowledge_article_4684 2021-05-11T10:47:02-0700 000011636 Validated (External) Public Sz144;Sz144 d;Ruckus cloud wifi;Sz300;Vsz dataplane;Unleashed;Sz100d;Virtual smartcell gateway;Sz100;Zonedirector 1200;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;SmartZone 100-D (SZ100-D);ZoneDirector 1200 Configuration;Security;Troubleshooting;Known issues and workarounds Configuration, Security, Troubleshooting, Known Issues and Workarounds, SZ144, SZ144 D, Ruckus Cloud WiFi, SZ300, vSZ Dataplane, Unleashed, SZ100D, virtual SmartCell Gateway, SZ100, ZoneDirector 1200 Is the network using Wi-fi as well as network features to protect and minimize potential exploitation from vulnerabilities? Recent 802.11 Vulnerability: The following Common Vulnerabilities and Exposures (CVEs) based on "Aggregation & Fragmentation Attacks Against Wi-Fi" vulnerability (tracked as usirp02_2020) reported to Wi-Fi Alliance will made public on 11th May 2021: • CVE-2020-24586 [Not clearing fragments from memory when (re)connecting to a network] A vulnerable device does not clear its cache/memory to remove fragments of an incomplete MSDU/MMPDU from previous session after reconnection/re-association. • CVE-2020-24587 [Reassembling fragments encrypted under different keys] A vulnerable device reassembles fragments encrypted under different keys in a protected network. • CVE-2020-24588 [Accepting non-SPP A-MSDU frames] Devices allow the encrypted payload to be parsed as containing one or more aggregated frames instead of a normal network packet. • CVE-2020-26139 [Forwarding EAPOL frames even though the sender is not yet authenticated] An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients. • CVE-2020-26140 [Accepting plaintext data frames in a protected network] An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration. • CVE-2020-26141 [Not verifying the TKIP MIC of fragmented frames] An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol. • CVE-2020-26142 [Processing fragmented frames as full frames] An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration. • CVE-2020-26143 [Accepting fragmented plaintext data frames in a protected network] An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration. • CVE-2020-26144 [Accepting plaintext A-MSDU frames that start with an RFC1042 header with EtherType EAPOL (in an encrypted network)] An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid EAPOL LLC/SNAP header. An adversary can abuse this to inject arbitrary network packets independent of the network configuration. • CVE-2020-26145 [Accepting plaintext broadcast fragments as full frames (in an encrypted network)] An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration. • CVE-2020-26146 [Reassembling encrypted fragments with non-consecutive packet numbers] An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. Note that WEP is vulnerable to this attack by design. • CVE-2020-26147 [Reassembling mixed encrypted/plaintext fragments] An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. The FragAttacks link is as follows: https://support.ruckuswireless.com/fragattacks-ruckus-technical-support-response-center Enabling WPA3: The admin guide should be used as guide to enable WPA3 on a WLAN: Admin Guide: Section: "Creating a WLAN Configuration"; subsection: "Encryption options" is where WPA3 can be selected for chosen WLAN to protect 802.11 Management Frames -- <a href="https://docs.commscope.com/bundle/sz-522-adminguide-sz300vsz/page/GUID-52C7C338-450C-4C3A-A45B-BD96E88F086B.html" target="_blank">https://docs.commscope.com/bundle/sz-522-adminguide-sz300vsz/page/GUID-52C7C338-450C-4C3A-A45B-BD96E88F086B.html</a> -- <a href="https://support.ruckuswireless.com/documents/3579-smartzone-5-2-2-ga-administrator-guide-sz300-vsz-h" target="_blank">https://support.ruckuswireless.com/documents/3579-smartzone-5-2-2-ga-administrator-guide-sz300-vsz-h</a>

The article aims to inform customers on precautionary measures that they can introduce in their network to minimize any potential exploitation from vulnerabilities.

2021-05-11T10:50:27-0700 2023-02-23T08:40:12-0800 https://support.ruckuswireless.com/articles/000003578 2021-05-06T00:50:16-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3497 knowledge_article_3497 2014-10-31T16:31:35-0700 000003578 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;System network management;Troubleshooting Installation, System Network Management, Troubleshooting, ZoneDirector Why can't I ping the ZD while connected to network or even after factory defaulting it? If you’re certain that you’ve tried all of the steps above, please contact Ruckus support and be specific (with screen captures perhaps) as to where you’re stuck in the access process.

The ZD is unreachable via ping and thus inaccessible via GUI.

2021-05-06T00:50:16-0700 2023-02-20T04:21:27-0800 https://support.ruckuswireless.com/articles/000014008 2023-02-15T01:19:16-0800 monthly 0.8 admin,premium knowledge_article_4940 knowledge_article_4940 2023-02-15T01:19:16-0800 000014008 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Troubleshooting Troubleshooting, Cloudpath How to extract the private key from the CP web cert, If the CSR is generated by CloudPath? <ul><li style="margin-left: 8px;">SSH into Cloudpath using the Credentials cpn_service</li><li style="margin-left: 8px;">Type 'console' and get to the Linux prompt. </li><li style="margin-left: 8px;">Then 'sudo su' to elevate to root access</li><li style="margin-left: 8px;">Location to find the files <ul style="list-style-type: circle;"><li style="margin-left: 8px;">Cd /etc/pki/tls/cert</li></ul> </li><li style="margin-left: 8px;">To open the file <ul style="list-style-type: circle;"><li style="margin-left: 8px;">Cat /etc/pki/tls/cert/certificate.cer (the public key)</li><li style="margin-left: 8px;">Cat /etc/pki/tls/cert/ca_intermediate.cer (the chain Root/Intermediates for the webserver cert)</li><li style="margin-left: 8px;">Cat /etc/pki/tls/private/certificate.key (the private key)</li></ul> </li><li style="margin-bottom: 11px; margin-left: 8px;">We can copy the text from the shell and save it in a notepad in .pem or .key format to reuse.</li></ul>

Steps to extract the private key of CP web server certificate from the shell

2023-02-15T01:19:16-0800 2023-02-17T02:00:07-0800 https://support.ruckuswireless.com/articles/000014007 2023-02-07T12:04:02-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4939 knowledge_article_4939 2023-02-07T11:07:44-0800 000014007 Validated (External) Public Zoneflex indoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Installation;Troubleshooting;Known issues and workarounds Firmware, Installation, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, SmartCell Gateway Can FIPS SKU Access Points join Non-FIPS controller? STEPS TO BRING UP FIPS ACCESS POINT ON A NON-FIPS CONTROLLER 1. Ensure that the controller is on Version 6.0 (this is supported only on 6.0 and higher Smartzone versions) or above 2. If the AP entry is already listed in Smartzone, delete the entries before proceeding with the below steps 3. Factory reset the AP and flash them to Standalone code 4. Allow the AP to find the controller and join NOTE: FIPS Access Points can be managed by a Non-FIPS controller and an RMA is NOT required.

Answer to the question of whether or not a FIPS SKU Access Points join a Non-FIPS controller

2023-02-07T12:04:02-0800 2023-02-15T02:00:07-0800 https://support.ruckuswireless.com/articles/000006299 2019-11-15T15:21:47-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_3996 knowledge_article_3996 2017-03-09T11:01:34-0800 000006299 Validated (External) Public Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Firmware;Troubleshooting Firmware, Troubleshooting, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway How to retrieve AP support info with Client details and RF Athstats? Providing controller/AP firmware platform with debugs or logs is necessary for troubleshooting, and can be collected beforehand and provided when opening a ticket with Tech Support. Here are the platform WebUI page and details on how to collect the Support Info file for desired access points. If using ZD, under Monitor/Access Points, click the first icon (blue/green) to the right of the AP to see System Info (support text) for connected client details and rolling 2 minute RF athstats samples. If using SZ or vSZ, Monitor/Access Points, click the AP MAC to look into, click Download -> Download Support log. If using Solo AP, Maintenance::Support Info page, Save to Local Computer -> supportinfo.txt. In Unleashed, Access Points, click the chosen AP, then Show System Overview Info -> and Save Logs. In Ruckus Cloud Wi-Fi, APs page, click the chosen AP, then More -> Download log.

The AP support info file/text/log provides rolling 2 minute RF sample and currently connected client statistics. This article explains where and how to collect this info from ZD, SZ, Cloud, or Solo APs.

2019-11-15T15:21:47-0800 2023-02-14T19:52:37-0800 https://support.ruckuswireless.com/articles/000001214 2021-04-07T01:59:57-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4639 knowledge_article_4639 2012-03-21T12:01:04-0700 000001214 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How do I set Country Code for ZoneDirector and the ZoneFlex APs? ZoneDirector <ul style="margin-left: 2em;"><li style="margin-left: 0px;">ZoneDirectors ship with no country code settings (they have no radios).</li><li style="margin-left: 0px;">As part of the installation wizard, the admin configures the country code for ZoneDirector and the ZoneFlex system</li><li style="margin-left: 0px;">Any later configuration change to the country code on ZoneDirector will reboot all APs and will force them to go through the steps below</li></ul> ZoneFlex APs <ul style="margin-left: 2em;"><li style="margin-left: 0px;">ZoneFlex APs are shipped in two formats depending on the country being shipped to: <ul style="margin-left: 2em;"><li style="margin-left: 0px;">With a fixed US country code setting to the US (fixed country code cannot be change by customers – even through factory default)</li><li style="margin-left: 0px;">With country code that is selectable to the country outside of the US</li></ul> </li></ul> <ul style="margin-left: 2em;"><li style="margin-left: 0px;">When an AP tries to join a ZoneDirector the country code is being synchronized as follow: <ul style="margin-left: 2em;"><li style="margin-left: 0px;">If the country code on the AP matches the one on ZoneDirector then the AP can join the Director</li><li style="margin-left: 0px;">If the country code on the AP is not the same as the one on ZoneDirector then the Director will set the country code on the AP <ul style="margin-left: 2em;"><li style="margin-left: 0px;">If the country code setting was successful the AP will reboot and then join the Director</li><li style="margin-left: 0px;">If the AP has a fixed country code already set (e.g. US) then this operation will fail and the AP will not be able to join the Director. This will be logged on ZoneDirector.</li></ul> </li></ul> </li></ul>

Country code on ZoneDirector and APs must match for APs to join ZD.

2021-04-07T01:59:57-0700 2023-02-13T22:39:12-0800 https://support.ruckuswireless.com/articles/000001582 2020-09-20T22:08:02-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_206 knowledge_article_206 2013-02-05T13:32:49-0800 000001582 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Installation Installation, ZoneFlex Indoor, ZoneFlex Outdoor Can APs be painted? Note: Painting any AP will void the warranty, please refer to the below links: <a href="http://c541678.r78.cf2.rackcdn.com/support/ruckus-standard-warranty.pdf" target="_blank">Download the Ruckus Warranty PDF</a> <a href="http://c541678.r78.cf2.rackcdn.com/support/ruckus-warranty-faqs.pdf" target="_blank">Download the Warranty FAQs PDF</a> However, you can paint the AP housing or other cover as long as you are not using metallic paint or paint that contains metallic chemicals. Metallic paints will degrade the quality of the RF signal.

Can APs be painted

2020-09-20T22:08:02-0700 2023-02-02T23:58:47-0800 https://support.ruckuswireless.com/articles/000002621 2021-04-07T01:59:41-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1900 knowledge_article_1900 2014-02-11T03:41:44-0800 000002621 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to get Serial Numbers of all the AP's managed by a ZD? You can get serial numbers and the MAC addresses of all the AP's managed by a ZD by following the below steps: <ol><li> Log in to the ZD UI </li><li> Go to Administer -> Registration </li><li> Fill in all the details like Name, Email, Phone, Company Name and Company Address. </li><li> Click on Apply </li></ol> Once you click on Apply, a .CSV file will be downloaded on the machine, and that will list the serial numbers and the MAC addresses of the AP's that are being managed by the ZD.

Article has got information about getting serial numbers of all the connected AP's from the ZD

2021-04-07T01:59:41-0700 2023-02-01T03:23:02-0800 https://support.ruckuswireless.com/articles/000005220 2020-03-31T09:51:00-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3405 knowledge_article_3405 2015-11-13T11:25:35-0800 000005220 Validated (External) Public Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;System network management;Troubleshooting Configuration, Firmware, System Network Management, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway Where can I obtain current Ruckus RADIUS dictionary for ZD/SZ? The latest SmartZone 5.1.1 RADIUS data dictionary file is attached. Ask Tech-Support if you need an earlier version.

802.1x AAA authentication methods can modify default WLAN settings by exchanging supported Vendor Specific Attributes. This is the latest SmartZone 5.1 AAA data dictionary file from Ruckus.

2020-03-31T09:51:00-0700 2023-01-28T16:19:12-0800 http://support.ruckuswireless.com/article_attachments/kA250000000L6gnCAC?attachment_index=0 2023-01-28T16:19:12-0800 monthly admin,premium,warranty,guest knowledge_article_3405 knowledge_article_3405_attachment_1 dictionary.ruckus_5.1 8962.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000001297 2021-07-05T03:17:36-0700 monthly 0.8 admin,premium knowledge_article_46 knowledge_article_46 2012-04-12T20:31:48-0700 000001297 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Firmware Firmware, ZoneFlex Indoor, ZoneFlex Outdoor How to upgrade standalone AP through FTP or local option Product: AP 7363 <h1>Upgrade firmware version in standalone AP. Two methods are covered depending on where the version is stored:</h1> <ul><li>Image stored in Ruckus public FTP server.</li><li>Image stored in local PC.</li></ul> <h1>1. Upgrade using Ruckus public FTP server</h1> To use this method you go to AP’s WebUI Maintenance::Upgrade menu and you select Upgrade Method->FTP as shown below: <img alt="User-added image" height="505" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SI&feoid=00N50000002Cf3M&refid=0EM50000000L9CD" width="500"></img> It is important to check the content of field ‘Image Control File’. This field contains the filename that the AP will download from the FTP server to know which firmware version it will download. This field contains information regarding which major version will attempt to download: ‘zf7363_912_cntrl.rcks’ In this example, it will attempt to download latest official 9.1.2 version. If it is required to upgrade to any other major version, this field must be modified accordingly with the corresponding three digits identifier of that release (for instance, 900 or 910). In case of doubt, please contact Ruckus Technical Support. Once you click on ‘Perform Upgrade’ button, the following steps will follow in your web browser: <img alt="User-added image" height="284" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SI&feoid=00N50000002Cf3M&refid=0EM50000000L9CI" width="500"></img> <img alt="User-added image" height="261" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SI&feoid=00N50000002Cf3M&refid=0EM50000000L9CN" width="500"></img> <img alt="User-added image" height="271" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SI&feoid=00N50000002Cf3M&refid=0EM50000000L9CS" width="500"></img> <img alt="User-added image" height="388" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SI&feoid=00N50000002Cf3M&refid=0EM50000000L9Bz" width="500"></img> Now, you have to manually reboot the AP for the new firmware to load. Go to Maintenance::Reboot/Reset: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SI&feoid=00N50000002Cf3M&refid=0EM50000000L9CX"></img> And click on ‘Reboot Now’ button. The AP will reboot and load the new firmware: <img alt="User-added image" height="254" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SI&feoid=00N50000002Cf3M&refid=0EM50000000L9Cc" width="500"></img> <img alt="User-added image" height="401" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SI&feoid=00N50000002Cf3M&refid=0EM50000000L9Ch" width="500"></img> <h1>2. Upgrade using locally stored firmware image</h1> To use this method you go to AP’s WebUI Maintenance::Upgrade menu and you select Upgrade Method->Local as shown below: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SI&feoid=00N50000002Cf3M&refid=0EM50000000L9Cm"></img> Now you select the firmware file from your PC’s folder and click on ‘Perform Upgrade’. This will upload new firmware AND will automatically reboot the AP (in the previous method you had to manually reboot the AP): <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SI&feoid=00N50000002Cf3M&refid=0EM50000000L9Cr"></img> <img alt="User-added image" height="261" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SI&feoid=00N50000002Cf3M&refid=0EM50000000L9Cw" width="500"></img> <img alt="User-added image" height="370" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SI&feoid=00N50000002Cf3M&refid=0EM50000000L9D1" width="500"></img>

Upgrading standalone AP through FTP or local option

2021-07-05T03:17:36-0700 2023-01-25T11:13:36-0800 https://support.ruckuswireless.com/articles/000004456 2021-01-22T07:12:32-0800 monthly 0.8 admin,premium knowledge_article_4492 knowledge_article_4492 2015-05-15T13:49:00-0700 000004456 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway How do I configure dhcp option 43 on dnsmasq First determine the hex value of the IP address of the controller using this link: http://shimi.net/services/opt43/index.php For Zonedirector with IP of 10.9.50.60: <img alt="User-added image" height="342" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxgx&feoid=00N50000002Cf3M&refid=0EM50000000Ligh" width="500"></img> <img alt="User-added image" height="452" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxgx&feoid=00N50000002Cf3M&refid=0EM50000000Ligm" width="500"></img> So for DHCP option 43 on dnsmasq for an AP to connect to a Zonedirector the setting will look like this: dhcp-option=43,03:0A:31:30:2E:39:2E:35:30:2E:36:30 For SCG/vSCG AP with a Control IP of 10.9.50.60: <img alt="User-added image" height="295" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxgx&feoid=00N50000002Cf3M&refid=0EM50000000Ligw" width="500"></img> <img alt="User-added image" height="457" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxgx&feoid=00N50000002Cf3M&refid=0EM50000000Lih6" width="500"></img> So for DHCP option 43 on dnsmasq for an AP to connect to a vSCG or SCG the setting will look like this: dhcp-option=43,06:0a:31:30:2e:39:2e:35:30:2e:36:30

Customers can use dnsmasq to provide DHCP option 43 to APs for ZD and SCG / vSCG / SZ.

2021-01-22T07:12:32-0800 2023-01-24T07:44:21-0800 https://support.ruckuswireless.com/articles/000006937 2017-12-12T15:03:23-0800 monthly 0.8 admin,premium knowledge_article_2905 knowledge_article_2905 2017-12-12T15:03:23-0800 000006937 Validated (External) Premium Ruckus icx switches;Fastiron cx series;Turboiron 24x switch;Brocade FastIron CX Series Switches Configuration Configuration, Ruckus ICX Switches, FastIron CX Series, TurboIron 24X Switch What do the 802.1x debug commands do? <ul><li>debug dot1x events</li></ul> Syntax: [no] debug dot1x events This command displays the authentications failed or succeeded and the application of VLANs or ACLs requested by the Remote Authentication Dial In User Service (RADIUS) server. This command works globally across all the ports. Brocade# debug dot1x events dot1x: Events debugging is on <ul><li>debug dot1x filter</li></ul> Syntax: [no] debug dot1x filter This command enables the 802.1x filter debugging. Brocade# debug dot1x filter dot1x: Filter debugging is on <ul><li>debug dot1x misc</li></ul> Syntax: [no] debug dot1x misc This command enables the 802.1x miscellaneous debugging. Brocade# debug dot1x misc dot1x: Misc debugging is on <ul><li>debug dot1x packets</li></ul> Syntax: [no] debug dot1x packets This command displays information about 802.1x packets. Brocade# debug dot1x packets dot1x: Packets debugging is on <ul><li>debug dot1x timers</li></ul> Syntax: [no] debug dot1x timers This command displays information about 802.1x timers. Brocade# debug dot1x timers dot1x: Timers debugging is on

What do the 802.1x debug commands do?

2017-12-12T15:03:23-0800 2023-01-20T12:08:14-0800 https://support.ruckuswireless.com/articles/000009388 2023-01-12T10:00:36-0800 monthly 0.8 admin,premium knowledge_article_4929 knowledge_article_4929 2019-06-13T12:06:41-0700 000009388 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Installation;Troubleshooting Performance, Installation, Troubleshooting, SmartCell Gateway What are the vSZ deployment requirements in Hypervisor? <h1 style="text-align: center;">For 5.1.1 and older releases</h1> Note: This KSP can be installed and executed in vSZ controllers running software 3.4.2, 3.6.2 or 5.1.1. For later releases a similar tool is already part of the software. <h2>How to install the tool (this procedure needs to be done in each controller where it will be executed):</h2> <div>1. If the controller is already in service the tool can be installed from WebUI:</div> <ul><li>Go to Diagnostics -> Scripts</li></ul> <img alt="User-added image" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000bph1&feoid=00N50000002Cf3M&refid=0EM2J000000uiL5"></img> <ul><li>Click on Browse and select the KSP file from your local computer</li></ul> <div><img alt="User-added image" height="115" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000bph1&feoid=00N50000002Cf3M&refid=0EM2J000000uiLA" width="500"></img></div> <ul><li>Click Upload to install it in the controller</li></ul> <div><img alt="User-added image" height="121" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000bph1&feoid=00N50000002Cf3M&refid=0EM2J000000v7Yl" width="500"></img></div> <ul><li>The script should be seen in 'System Uploaded Scripts' section:</li></ul> <div><img alt="User-added image" height="349" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000bph1&feoid=00N50000002Cf3M&refid=0EM2J000000v7Yq" width="500"></img></div> <div>2. If the controller is not yet setup, the tool can be installed from CLI:</div> <ul><li>Place the file in an FTP server reachable from the controller</li><li>In controller CLI execute the following commands to upload it:</li></ul> LAB-SZ-01# debug LAB-SZ-01(debug)# diagnostic LAB-SZ-01(debug-diagnostic)# upload ftp://<username>:<password>@<ftp-host>/<file-path> <ul><li>The script should be seen with this command:</li></ul> LAB-SZ-01(debug-diagnostic)# show diagnostic-script No. Name Description ----- ------------------- ----------------------------- 1 SZ_System_Benchmar Perform benchmark test k_Tool_1 <h3> </h3> <h2>How to execute the tool (this procedure needs to be done in each controller separately):</h2> <ul><li>In controller CLI, go to the menu where the tool is executed:</li></ul> LAB-SZ-01# debug LAB-SZ-01(debug)# diagnostic <ul><li>Execute it with this command, and you will see 5 possible options:</li></ul> LAB-SZ-01(debug-diagnostic)# exec SZ_System_Benchmark_Tool_1 Setup running... 1.) System Performance Qualification(CPU/IO) 2.) CPU benchmark 3.) IO benchmark Optional (WARNING: The option to stop all services can help for checking system capability more precisely, but this action will impact overall controller operations and new client connections. Please remember to start services again when finished.) 4.) Stop all services with maintenance mode 5.) Start all services with clear maintenance mode Select Option (1-5): Option 1 is to execute an overall qualification both of CPU and I/O, including a summary result if the tests pass or fail Option 2 is to execute CPU performance testing only, and it will provide more detailed results. To be run if requested by Ruckus TAC Option 3 is to execute I/O performance testing only, and it will provide more detailed results. To be run if requested by Ruckus TAC Option 4 is to stop all services in this controller, in case benchmark needs to be run without any load in the controller Option 5 is to resume all services in this controller <h3>Sample outputs:</h3> <ul><li>For option 1:</li></ul> Checking system capability, please wait this might take a while... Checking CPU capability... Checking IO capability with multiple files... CPU Qualification: Passed - Events per second: 242.88s (Need > 180) IO Qualification(Multiple Files): Passed - File Creation: 56.20 MiB/s (Need > 45 MiB/s) Note: In case the result for any of these two qualifications is Not Passed, please review the hardware resources available to this VM and make the necessary changes to improve them. <ul><li>For option 2: To be run if requested by Ruckus TAC</li></ul> sysbench 1.0.9 (using bundled LuaJIT 2.1.0-beta2) Running the test with following options: Number of threads: 128 Initializing random number generator from current time Prime numbers limit: 20000 Initializing worker threads... Threads started! CPU speed: events per second: 1497.70 General statistics: total time: 6.6752s total number of events: 10000 Latency (ms): min: 2.74 avg: 77.51 max: 942.88 95th percentile: 467.30 sum: 775112.15 Threads fairness: events (avg/stddev): 78.1250/10.99 execution time (avg/stddev): 6.0556/0.34 <ul><li>For option 3: To be run if requested by Ruckus TAC</li></ul> sysbench 1.0.9 (using bundled LuaJIT 2.1.0-beta2) Running the test with following options: Number of threads: 1 Initializing random number generator from current time Extra file open flags: 3 1 files, 2GiB each 2GiB total file size Block size 16KiB Calling fsync() at the end of test, Enabled. Using synchronous I/O mode Doing sequential write (creation) test Initializing worker threads... Threads started! File operations: reads/s: 0.00 writes/s: 4710.93 fsyncs/s: 0.00 Throughput: read, MiB/s: 0.00 written, MiB/s: 73.61 General statistics: total time: 20.0017s total number of events: 94235 Latency (ms): min: 0.08 avg: 0.21 max: 324.94 95th percentile: 0.18 sum: 19768.31 Threads fairness: events (avg/stddev): 94235.0000/0.00 execution time (avg/stddev): 19.7683/0.00 sysbench 1.0.9 (using bundled LuaJIT 2.1.0-beta2) Removing test files... sysbench 1.0.9 (using bundled LuaJIT 2.1.0-beta2) 1 files, 2097152Kb each, 2048Mb total Creating files for the test... Extra file open flags: 0 Creating file test_file.0 2147483648 bytes written in 26.68 seconds (76.75 MiB/sec). sysbench 1.0.9 (using bundled LuaJIT 2.1.0-beta2) Running the test with following options: Number of threads: 1 Initializing random number generator from current time Extra file open flags: 3 1 files, 2GiB each 2GiB total file size Block size 16KiB Calling fsync() at the end of test, Enabled. Using synchronous I/O mode Doing sequential read test Initializing worker threads... Threads started! File operations: reads/s: 4869.07 writes/s: 0.00 fsyncs/s: 0.00 Throughput: read, MiB/s: 76.08 written, MiB/s: 0.00 General statistics: total time: 20.0065s total number of events: 97422 Latency (ms): min: 0.07 avg: 0.20 max: 107.11 95th percentile: 0.16 sum: 19768.41 Threads fairness: events (avg/stddev): 97422.0000/0.00 execution time (avg/stddev): 19.7684/0.00 sysbench 1.0.9 (using bundled LuaJIT 2.1.0-beta2) Removing test files... sysbench 1.0.9 (using bundled LuaJIT 2.1.0-beta2) 128 files, 16384Kb each, 2048Mb total Creating files for the test... Extra file open flags: 0 Creating file test_file.0 ... Creating file test_file.127 2147483648 bytes written in 37.81 seconds (54.16 MiB/sec). sysbench 1.0.9 (using bundled LuaJIT 2.1.0-beta2) Running the test with following options: Number of threads: 24 Initializing random number generator from current time Extra file open flags: 3 128 files, 16MiB each 2GiB total file size Block size 16KiB Number of IO requests: 0 Read/Write ratio for combined random IO test: 1.00 Calling fsync() at the end of test, Enabled. Using synchronous I/O mode Doing random r/w test Initializing worker threads... Threads started! File operations: reads/s: 78.30 writes/s: 78.20 fsyncs/s: 0.00 Throughput: read, MiB/s: 1.22 written, MiB/s: 1.22 General statistics: total time: 20.6493s total number of events: 3232 Latency (ms): min: 0.17 avg: 152.81 max: 1163.93 95th percentile: 646.19 sum: 493894.30 Threads fairness: events (avg/stddev): 134.6667/9.20 execution time (avg/stddev): 20.5789/0.03 sysbench 1.0.9 (using bundled LuaJIT 2.1.0-beta2) Removing test files... sysbench 1.0.9 (using bundled LuaJIT 2.1.0-beta2) 1 files, 2097152Kb each, 2048Mb total Creating files for the test... Extra file open flags: 0 Creating file test_file.0 2147483648 bytes written in 25.24 seconds (81.13 MiB/sec). sysbench 1.0.9 (using bundled LuaJIT 2.1.0-beta2) Running the test with following options: Number of threads: 24 Initializing random number generator from current time Extra file open flags: 3 1 files, 2GiB each 2GiB total file size Block size 16KiB Number of IO requests: 0 Read/Write ratio for combined random IO test: 1.00 Calling fsync() at the end of test, Enabled. Using synchronous I/O mode Doing random r/w test Initializing worker threads... Threads started! File operations: reads/s: 76.04 writes/s: 76.39 fsyncs/s: 0.00 Throughput: read, MiB/s: 1.19 written, MiB/s: 1.19 General statistics: total time: 20.1195s total number of events: 3067 Latency (ms): min: 0.13 avg: 157.02 max: 1282.57 95th percentile: 612.21 sum: 481569.33 Threads fairness: events (avg/stddev): 127.7917/23.89 execution time (avg/stddev): 20.0654/0.04 sysbench 1.0.9 (using bundled LuaJIT 2.1.0-beta2) Removing test files... <h1 style="text-align: center;">For 5.1.2 and later releases</h1> vSZ10> enable vSZ10# debug vSZ10(debug)# debug-tools [Change to system] Welcome to Debug CLI Framework! (debug tool-set) system $ system-performance Setup running... 1.) System Performance Qualification(CPU/IO) 2.) CPU benchmark 3.) IO benchmark Select Option (1-3):

vSZ requires enough hardware resources to sustain the service. vSZ cannot support deployment in low performance Hypervisor.

2023-01-12T10:00:36-0800 2023-01-17T00:00:08-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000000OPqSAM?attachment_index=0 2023-01-17T00:00:08-0800 monthly admin,premium knowledge_article_4929 knowledge_article_4929_attachment_1 SZ_System_Benchmark_Tool_1.ksp 858185.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000001617 2021-04-30T02:04:27-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4670 knowledge_article_4670 2013-02-11T20:25:20-0800 000001617 Validated (External) Public Ruckus icx switches;Zoneflex indoor;Zoneflex outdoor Installation;Troubleshooting Installation, Troubleshooting, Ruckus ICX Switches, ZoneFlex Indoor, ZoneFlex Outdoor What are Troubleshooting steps to perform when AP is not powering on by PoE? Apply PoE by class, class 4 for R610 model AP. Indoor R610 802.11ac Wave 2 3x3:3 WiFi Access Point Data Sheet: https://ruckus-www.s3.amazonaws.com/pdf/datasheets/ds-ruckus-r610.pdf Power Supply........................Mode Features, Max Power consumption DC input 12V DC, 2.0A.........Full Functionality, 19.1W 802.3af.................................Limits 2.4G to 2-chain,noUSB,1Eth port, 15W 802.3at.................................Full Functionality, 18.8W

Steps to troubleshoot AP power issues, including switch port capabilities / total load, per number of AP power requirements.

2021-04-30T02:04:27-0700 2023-01-16T08:05:13-0800 https://support.ruckuswireless.com/articles/000001367 2020-08-18T04:08:45-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_547 knowledge_article_547 2013-01-14T06:01:02-0800 000001367 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Installation Installation, ZoneFlex Indoor, ZoneFlex Outdoor What are the PoE injector Specifications? Find this information in the attached Guide: Physical Adapter Number Recommended AP Models PoE Output Power DC Cable Length DC Plug Dimensions Ethernet Port Dimensions of the Injector Dimensions of the Associated Power Adapter PoE Port Pinout

Published Ruckus AP (ZF) PoE specifications

2020-08-18T04:08:45-0700 2023-01-03T18:47:15-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PCRlCAO?attachment_index=0 2023-01-03T18:47:15-0800 monthly admin,premium,warranty,guest knowledge_article_547 knowledge_article_547_attachment_1 PoE_Specification Guide -Srini.pdf 798657.0 application/pdf https://support.ruckuswireless.com/articles/000002358 2022-10-13T16:18:45-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3498 knowledge_article_3498 2013-11-11T16:21:52-0800 000002358 Validated (External) Public Zonedirector;Flexmaster umm;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, ZoneDirector, FlexMaster UMM, SmartCell Gateway How do I setup DHCP service on a Linux machine to provide option43 to Ruckus APs? Following steps explain the process of setting up DHCP server on a Linux machine and configuring DHCP service to provide DHCP IPs with option43 string to Ruckus APs. Here Ubuntu is used as a sample Linux OS. 1. Install ISC DHCP server on a Linux machine: $ sudo apt-get install isc-dhcp-server 2. Edit interfaces for dhcpd to listen on: $ sudo vi /etc/default/isc-dhcp-server (eth2 interface for the .12 subnet mentioned below) 3. Edit the dhcp daemon config: $ sudo vi /etc/dhcp/dhcpd.conf option domain-name "ruckus.jp"; option domain-name-servers 192.168.150.1, 8.8.8.8; default-lease-time 900; option space RKUS; option RKUS.fm-address code 1 = text; option RKUS.zd-address code 3 = text; option RKUS.scg-address code 6 = text; subnet 192.168.12.0 netmask 255.255.255.0 { range 192.168.12.100 192.168.12.199; option routers 192.168.12.1; option subnet-mask 255.255.255.0; option broadcast-address 192.168.12.255; option ntp-servers 192.168.11.22; class "Ruckus AP" { match if option vendor-class-identifier = "Ruckus CPE"; option vendor-class-identifier "Ruckus CPE"; default-lease-time 86400; vendor-option-space RKUS; option RKUS.fm-address "192.168.150.13"; option RKUS.zd-address "192.168.11.12"; option RKUS.scg-address "<a href="https://192.168.11.200/wsg/ap" target="_blank">192.168.11.200</a>"; } } Please make sure the SCG IP address mentioned above is the SCG control interface IP. 4. Start dhcpd: $ sudo /etc/init.d/isc-dhcp-server start 5. Verify operation by looking at: $ sudo tail -n 100 (you should see something like) Feb 19 10:50:51 ubuntu dhcpd: DHCPREQUEST for 192.168.1.163 from f0:a2:25:da:b7:40 (android-64dae312c37f4191) via eth0 Feb 19 10:50:51 ubuntu dhcpd: DHCPACK on 192.168.1.163 to f0:a2:25:da:b7:40 (android-64dae312c37f4191) via eth0 Feb 19 10:52:57 ubuntu dhcpd: DHCPREQUEST for 192.168.1.151 from 58:93:96:14:82:e0 via eth0 Feb 19 10:52:57 ubuntu dhcpd: DHCPACK on 192.168.1.151 to 58:93:96:14:82:e0 via eth0 Feb 19 10:55:40 ubuntu dhcpd: DHCPREQUEST for 192.168.1.163 from f0:a2:25:da:b7:40 (android-64dae312c37f4191) via eth0 Feb 19 10:55:40 ubuntu dhcpd: DHCPACK on 192.168.1.163 to f0:a2:25:da:b7:40 (android-64dae312c37f4191) via eth0 (connect AP to the network and verify the IP address served out) $ cat /var/lib/dhcp/dhcpd.leases . . etc etc . lease 192.168.1.163 { starts 2 2013/02/19 01:55:40; ends 2 2013/02/19 02:05:40; cltt 2 2013/02/19 01:55:40; binding state active; next binding state free; hardware ethernet f0:a2:25:da:b7:40; client-hostname "android-64dae312c37f4191"; } 6. Lastly check the AP side: rkscli: get director ------ ZoneDirector Info ------ Primary Controller : n/a Secondary Controller : n/a DHCP Opt43 Code : 3 The information of the most recent Zone Director: [1] 192.168.11.12 AP is under management of ZoneDirector: 192.168.11.12 / :: / c0:8a:de:3e:93:96, Currently AP is in state: RUN (and for the AP connected to an SCG) rkscli: get scg ------ SCG Information ------ SCG Service is enabled. AP is managed by SCG. Server List: 192.168.11.200 DHCP Opt43 Code: 6 Server List from DHCP Opt43: <a href="https://192.168.11.200/wsg/ap" target="_blank">192.168.11.200</a> SCG default URL: RuckusController SCG config|heartbeat intervals: 30|30 SCG gwloss|serverloss timeouts: 0|0 ----------------------------- OK

This article walks you through installation of DHCP server and configuring it to provide option43 setting to Ruckus APs. Once the APs retrieve a DHCP IP with option43 string they will discover ZD or SCG for management.

2022-10-13T16:18:45-0700 2023-01-01T14:26:44-0800 https://support.ruckuswireless.com/articles/000013963 2022-12-16T16:25:19-0800 monthly 0.8 admin,premium knowledge_article_4926 knowledge_article_4926 2022-12-16T16:25:19-0800 000013963 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway Are M1 or M2 Macbook pro users have Wi-fi connectivity issue? Request customer who use M1 or M2 Macbooks to upgrade to macOS: Ventura (13.1) or equally use workaround to disable AWDL as a temporary measure.

A Wi-Fi bug is impacting Macbooks that is built on M1 and M2 running ARM processor architecture. The bug affects M1 & M2 MacBooks running macOS Monterey and Ventura on a random basis. Those affected complain of lost Wi-Fi connections, slow internet performance in general, and dropped Zoom calls, for example. It should be noted that Intel microprocessor based Macbooks have not yet reported such an issue to date. The article suggests that M1 & M2 microprocessors’ based MacBook have Wi-Fi disconnection issue: https://www.macworld.com/article/1433791/m1-m2-macbooks-macos-ventura-wifi-bug-airdrop.html

2022-12-16T16:25:19-0800 2022-12-20T18:00:07-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000fzD1SAI?attachment_index=0 2022-12-20T18:00:07-0800 monthly admin,premium knowledge_article_4926 knowledge_article_4926_attachment_1 UCLA_confirms_13.1_fixes.PNG 90308.0 image/png https://support.ruckuswireless.com/articles/000013952 2022-12-06T09:50:39-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4922 knowledge_article_4922 2022-12-05T14:37:32-0800 000013952 Validated (External) Public Knowledge;Ruckus icx switches;Brocade eos products;Zoneflex indoor;Zoneflex outdoor Known issues and workarounds Known Issues and Workarounds, Knowledge, Ruckus ICX Switches, Brocade EOS Products, ZoneFlex Indoor, ZoneFlex Outdoor UAE – United Arab Emirates Advance Replacement Wired & Wireless – Strategic & Non- Strategic products <ul><li style="margin-left: 8px;">RKUS will work with the customers to retrieve the defectives in Dubai warehouse</li><li style="margin-left: 8px;">RKUS will bear the return cost.</li><li style="margin-bottom: 11px; margin-left: 8px;">UPS owns the documentation part while retrieving the defectives.</li></ul> Return to Factory Wired & Wireless – Strategic & Non- Strategic products <ul><li style="margin-left: 8px;">Defective return instructions are sent to UAE customers to return the defectives to Dubai warehouse respectively.</li><li style="margin-left: 8px;">Customers should add the BOE (Bill of Entry) while returning the defective to Dubai warehouse.</li><li style="margin-left: 8px;">If customers DO NOT have BOE, we can ask them to return the defective to Venlo warehouse.</li><li style="margin-bottom: 11px; margin-left: 8px;">Cost of defective return to be borne by Customers.</li></ul> What is BOE? A bill of entry is a legal document that is filed by importers or customs clearance agents on or before the arrival of imported goods. It's submitted to the Customs department as a part of the customs clearance procedure. Other Middle Eastern Countries Algeria, Bahrain, Egypt, Iraq, Israel, Jordan, Kuwait, Lebanon, Libya, Morocco, Oman, Qatar, Saudi Arabia, Tunisia, Turkey, and Yemen. (The mentioned country lists are not fixed ones, the new ones will be added accordingly) Advance Replacement Wired – Strategic & Non- Strategic products. <ul><li style="margin-left: 8px;">Defective return instructions are sent to the above customers to return the defectives to Louisville (USA)/Dubai warehouse respectively.</li><li style="margin-left: 8px;">If customers opt to return the defective to Dubai warehouse.</li><li style="margin-left: 8px;">Customers should add the BOE (Bill of Entry) while returning the defective to Dubai warehouse.</li><li style="margin-left: 8px;">If customers DO NOT have BOE, we can ask them to return the defective to Louisville warehouse.</li><li style="margin-bottom: 11px; margin-left: 8px;">Cost of defective return to be borne by Customers.</li></ul> Wireless – Strategic & Non- Strategic products. <ul><li style="margin-left: 8px;">RKUS will work with the customers to retrieve the defectives in Dubai warehouse either by arranging a pick-up or by providing a return shipping label (RSL).</li><li style="margin-left: 8px;">RKUS will bear the return cost.</li><li style="margin-bottom: 11px; margin-left: 8px;">UPS owns the documentation part while retrieving the defectives.</li></ul> Return to Factory Wireless – Strategic & Non- Strategic products. <ul><li style="margin-left: 8px;">Defective return instructions are sent to UAE customers to return the defectives to Dubai warehouse respectively.</li><li style="margin-left: 8px;">Customers should add the BOE (Bill of Entry) while returning the defective to Dubai warehouse.</li><li style="margin-bottom: 11px; margin-left: 8px;">If customers DO NOT have BOE, we can ask them to return the defective to Venlo warehouse.</li><li style="margin-bottom: 11px; margin-left: 8px;">Cost of defective return to be borne by Customers.</li></ul>

Process to follow while retrieving defectives to Dubai warehouse.

2022-12-06T09:50:39-0800 2022-12-14T06:00:07-0800 https://support.ruckuswireless.com/articles/000002849 2020-08-10T01:46:56-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4187 knowledge_article_4187 2014-03-27T10:09:08-0700 000002849 Validated (External) Public Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Configuration Performance, Configuration, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway What is the difference between directed-threshold and directed-multicast commands? Type of multicast traffic. Ruckus has a feature to convert multicast/broadcast traffic to unicast. The WiFi benefits for this are, 1. AP can send the data at higher rates. This behavior conserves airtime. 2. It also enables 802.11 acknowledgements. Acknowledgement from a receiver ensures reliable data transfer. Before explaining the commands involved we have to define what is the classification of multicast traffic in Ruckus: <ul><li>IGMP multicast traffic: multicast traffic that uses IGMP protocol. Comand used for this is (to be run from "wlan" context in ZD/SZ CLI)</li></ul> <div style="margin-left: 40px;">qos directed-multicast -- > All the IGMP multicast traffic is converted to unicast. Traffic is automatically classified as AC_VI (Video) with Priority=5. If there are no users on the IGMP table, the traffic is thrown away. This comes active on all WLANs by default (also IGMP Snooping). no qos directed-multicast -- > IGMP multicast traffic is not converted to unicast.</div> <ul><li>well-known multicast addresses: <img alt="User-added image" height="207" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxbd&feoid=00N50000002Cf3M&refid=0EM2J000000m8aw" width="500"></img> </li></ul> <div style="margin-left: 40px;">This traffic is controlled with command (to be run from "wlan" context in ZD/SZ CLI), qos directed-threshold X --> All traffic not being IGMP multicast (well-known multicast traffic, broadcast) is converted to unicast until X users on the WLAN. Traffic is classified as AC_BE (Best Effort) with Priority=0. When there are more than X users traffic is then not converted. If X is 0, there's no conversion. By default APs have this value set to 5. Be careful with any number above 5 since it will have performance impact on the AP.</div> Direct multicast processes traffic ingress from both wired and wireless interfaces. This command is enabled by default. Direct threshold processes traffic egress to wireless interfaces. This command is enabled with value 5 by default. <h2>How to check this configuration on AP</h2> We need to execute a command on each interface, in this example we can see ethernet 0 and wlan 0 interfaces <div style="margin-left: 18.0pt;">rkscli: get qos eth0 Ruckus Wireless SmartMedia QOS info for eth0 interface QOS Configuration options: Classification: Enabled UDP Heuristic Classification: Enabled TOS Classification: Enabled Dot1p Classification: Enabled VID Voice Classification: VID Video Classification: VID BE Classification: VID BK Classification: Dot1p Classification VIDs: Dot1p Marking VIDs: Directed Multicast: Enabled IGMP Snooping Mode: Enabled MLD Snooping Mode: Disabled Static TOS marking: Disabled (0x0) Static Dot1p marking: Disabled (0x0) General Mcast->U Cloned Filters TOS-Mark Stats 0 0 0/0/0 0/0/0/0 L2 Mcast Packets Unicast Unk-Drop Known-Mcast UDP Data 2525 0 2253 720 Heuristics Voice Video UDP Packets 0 0 IGMP/MLD Clone1/2/3 Errors 0/0/0 No Filters are currently defined on eth0 interface OK rkscli: get qos wlan0 Ruckus Wireless SmartMedia QOS info for wlan0 interface QOS Configuration options: Classification: Enabled UDP Heuristic Classification: Enabled TOS Classification: Enabled Dot1p Classification: Enabled VID Voice Classification: VID Video Classification: VID BE Classification: VID BK Classification: Dot1p Classification VIDs: Dot1p Marking VIDs: Directed Multicast: Enabled IGMP Snooping Mode: Enabled MLD Snooping Mode: Disabled Static TOS marking: Disabled (0x0) Static Dot1p marking: Disabled (0x0) General Mcast->U Cloned Filters TOS-Mark Stats 15 0 0/0/0 0/0/0/0 L2 Mcast Packets Unicast Unk-Drop Known-Mcast UDP Data 0 15 0 422 Heuristics Voice Video UDP Packets 0 0 IGMP/MLD Clone1/2/3 Errors 0/0/0 No Filters are currently defined on wlan0 interface OK</div> We can see in red the information related to this article.

This article explains what the "qos directed-threshold" and "qos directed-multicast" commands individually do and when to use them.

2020-08-10T01:46:56-0700 2022-12-11T23:55:56-0800 https://support.ruckuswireless.com/articles/000003400 2020-09-20T21:58:26-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1277 knowledge_article_1277 2014-09-16T01:54:09-0700 000003400 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor How do I prevent battery draining on mobile devices when connected to Ruckus APs? Ruckus APs by default convert both broadcast and multicast traffic into unicast. Advantages of this process are explained in article # 2849 (URL is provided above). This conversion process can keep handhelds constantly awake to receive the incoming traffic. Understandably this will cause battery drainage. This conversion process can be disabled as outlined in above article for ZD managed APs. If you want to perform the same task on a standalone for the same reason, use the following command: set directed-thr wlanX 0 Where X is WLAN's ID. Use "get wlanlist" command to find all WLAN details including their IDs.

Article https://support.ruckuswireless.com/answers/000002849 already talks about disabling directed broadcast on ZD managed APs (through qos directed-threshold 0 command). So this article is written to show how to perform the same task on a standalone AP. This change has helped several customers with increasing their battery life.

2020-09-20T21:58:26-0700 2022-12-11T23:55:34-0800 https://support.ruckuswireless.com/articles/000002978 2015-04-08T11:46:08-0700 monthly 0.8 admin,premium knowledge_article_1718 knowledge_article_1718 2014-04-29T06:35:52-0700 000002978 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation Installation, ZoneDirector How to convert .crt certficate to .pem format using OpenSSL software You can convert .crt format to .der fomat and from .der to .pem format by executing the below commands. Make sure that the .crt file is in the appropriate folder. In the example below, the example.crt file is in the C drive, or the file that is to be converted is in the working directory: C:\> openssl x509 -in example.crt -out openssl.der -outform DER (Substitute example.crt with your current CRT filename) C:\> openssl x509 -in openssl.der -inform DER -out openssl.pem -outform PEM Openssl x509 is a binary command. Using my windows dos prompt did not perform the command. OpenSSL needs to be added. If you have a 64 bit Windows machine, here’s the link to download the OpenSSL engine: <a href="http://slproweb.com/products/Win32OpenSSL.html" target="_blank">http://slproweb.com/products/Win32OpenSSL.html</a> Click on the <a href="http://slproweb.com/download/Win64OpenSSL_Light-1_0_2a.exe" target="_blank">Win64 OpenSSL v1.0.2a Light</a> URL option. By default, it will load/install the file in C:\OpenSSL-Win64, to run the SSL engine, go to the OpenSSL-Win64 folder, click on the bin folder, and double click on the openssl application file. You will then be in the OpenSSL> where you will be able to perform the "openssl x509 -in example.crt …" command

Steps to convert .crt certificate to .pem format

2015-04-08T11:46:08-0700 2022-12-08T01:53:32-0800 https://support.ruckuswireless.com/articles/000003000 2021-08-20T08:52:21-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4748 knowledge_article_4748 2014-05-05T13:45:28-0700 000003000 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Security;Troubleshooting Security, Troubleshooting, ZoneDirector Why do new users see security certificate error, even though CA cert has been installed on ZD? >We have to upload the intermediate certificate's in zone director to over come the security error message. > Get the intermediate certs from the concern CA and upload them in zone director. >Find the below procedure to upload the certificate. Restore the certificate to default and import the certificate again with the intermediate certs. >login to Zone director-->Configure-->Certificate.

The browser is throwing the security certificate error even though CA cert has installed on zone director but this appears to be only with the new user's joining the network, once they authenticate to the network through captive portal it doesn't appear again.

2021-08-20T08:52:21-0700 2022-11-29T14:55:44-0800 https://support.ruckuswireless.com/articles/000013923 2022-11-17T01:02:47-0800 monthly 0.8 admin,premium knowledge_article_4920 knowledge_article_4920 2022-11-17T01:02:47-0800 000013923 Validated (External) Premium Zoneflex outdoor Performance;Installation;Troubleshooting Performance, Installation, Troubleshooting, ZoneFlex Outdoor Can I use T305e without external antennas? Does T305e have internal antennas? Install external antennas for T305e APs, they don't have internal ones integrated, T305i does.

Customer reported T305e APs having very poor coverage. After troubleshooting the issue we realized customer had not installed external antennas for these APs.

2022-11-17T01:02:47-0800 2022-11-23T10:00:07-0800 https://support.ruckuswireless.com/articles/000003037 2021-05-06T00:13:18-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4682 knowledge_article_4682 2014-05-13T02:50:53-0700 000003037 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Any way to measure page load times in Chrome? If you are in a Chrome/ Firefox web browser here is how to measure the page load times for any website: 1. Right click on page and click inspect page. This will open an analysis section in the browser. 2. Type any website that you would like to visit (internal or external to your organization). 3. As the page loads you will see all the elements involved in the webpage (under the "Elements" tab). 4. If you want to see how long each element took and the timeline of their loading you have to click on the "Network" tab. Some browsers may declare webpage load failures if it takes beyond certain threshold time value. This can also depend on the device type. The feature described above can be used to baseline various websites although it is limited to Chrome.

By default browser has a built-in feature that allows to see the page load time over a timeline, element by element. This articles explains how this works.

2021-05-06T00:13:18-0700 2022-11-21T04:40:34-0800 https://support.ruckuswireless.com/articles/000006441 2021-03-15T03:27:00-0700 monthly 0.8 admin,premium knowledge_article_4594 knowledge_article_4594 2017-09-18T05:03:41-0700 000006441 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector What are suggested configuration parameters for Clickatell SMS intergration to work? Ruckus requires API IDs as a mandate requirement. Clickatell updated its account management some time ago and new platform user accounts doesn't work anymore with Ruckus at this moment due to unavailability of API IDs. You have to ask support from Clickatell to create you an old developer account. They will create an old account for me where API ID is still supported. Forum reference link:https://stackoverflow.com/questions/44493029/where-n-the-website-can-i-find-my-clickatell-api-id

Clickatell updated its account management some time ago and new accounts doesn't work anymore with Ruckus at this moment. Everytime a test is performed, it fails

2021-03-15T03:27:00-0700 2022-11-21T04:25:27-0800 https://support.ruckuswireless.com/articles/000001878 2021-05-03T05:00:22-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2150 knowledge_article_2150 2013-03-25T13:37:42-0700 000001878 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Firmware;Installation Firmware, Installation, ZoneFlex Indoor, ZoneFlex Outdoor Do I have to follow an Upgrade path to perform firmware upgrade on Standalone APs There is no upgrade path for performing firmware upgrades on Standalone APs. The Upgrade Path KB articles only apply to ZoneDirectors. You can upgrade the AP from any version to any more recent version. For example: We can directly upgrade from version 9.3.2.0.3 to 9.8.2.0.15 Note: Above is only true for Stand alone to stand alone firmware, like 100.x/101.x/110.x/104.x/106.x to 9.x/10.x/3.x/5.x. Changing it to Unleashed will make that AP an Unleashed master under a single AP setup.

2021-05-03T05:00:22-0700 2022-11-16T20:22:45-0800 https://support.ruckuswireless.com/articles/000013916 2022-11-08T16:44:09-0800 monthly 0.8 admin,premium knowledge_article_4916 knowledge_article_4916 2022-11-08T16:44:09-0800 000013916 Validated (External) Premium Vriot Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, vRIoT Why my vRIoT UI is stuck in "Services are still starting"? We removed all the ap logs under /dev/mapper to recover additional 9G of disk space. After recovering the disk space, the remaining services came up and we were able to login to the vRIOT’s UI. This issue is permanently fixed in IOT 2.0.1 MR Release.

This article provides details on why vRIOT is failing to boot due to ap log rotation bug.

2022-11-08T16:44:09-0800 2022-11-09T08:00:06-0800 https://support.ruckuswireless.com/articles/000008289 2018-09-20T15:20:07-0700 monthly 0.8 admin,premium knowledge_article_3354 knowledge_article_3354 2018-09-18T15:28:34-0700 000008289 Validated (External) Premium Virtual smartcell gateway Installation Installation, virtual SmartCell Gateway Does the MAC address matter in generating VSZ Serial Number? In Hyper-V environments, the MAC address assigned to the virtual NIC is dynamic unless you specify a static MAC to the virtual machine. The dynamic MAC works similar to DHCP in that it will not change unless you are offline and something else takes the MAC. Answer: vSZ only uses product/machine UUID to generate serial number. The MAC address doesn’t matter.

In Hyper-V environments, the MAC address assigned to the virtual NIC is dynamic unless you specify a static MAC to the virtual machine. The dynamic MAC works similar to DHCP in that it will not change unless you are offline and something else takes the MAC.

2018-09-20T15:20:07-0700 2022-10-25T02:37:31-0700 https://support.ruckuswireless.com/articles/000002781 2022-10-18T13:13:35-0700 monthly 0.8 admin,premium knowledge_article_3603 knowledge_article_3603 2014-03-12T13:55:13-0700 000002781 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector How to change the IP address on the ZD when GUI is not responding ? <h2>For ZD on 9.x versions</h2> ip addr <IP-ADDR> <NET-MASK> gateway <GW-IP-ADDRESS> <div>ruckus> enable ruckus# config</div> <div>ruckus(config)# system</div> <div>ruckus(config-sys)# interface</div> <div>ruckus(config-sys-if)# ip addr 192.168.0.1 255.255.255.0</div> <div>The command was executed successfully.</div> <h2>For ZD on 10.x and above</h2> <div> <div>ruckus> enable ruckus# config</div> <div>ruckus(config)# system</div> ruckus(config-sys)# mgmt-if ruckus(config-sys-mgmt-if)# ip addr 192.168.0.1 255.255.255.0 ruckus(config-sys-mgmt-if)# gateway 192.168.0.254</div>

ZDs have CLI commands to assign IP address.

2022-10-18T13:13:35-0700 2022-10-20T14:00:09-0700 https://support.ruckuswireless.com/articles/000012430 2022-10-13T18:28:05-0700 monthly 0.8 admin,premium knowledge_article_4912 knowledge_article_4912 2022-10-13T18:28:05-0700 000012430 Validated (External) Premium Ruckus cloud wifi;Cloudpath;Unleashed;Cloudpath Enrollment System (ES);BPG_Cloudpath;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Ruckus Cloud WiFi, Cloudpath, Unleashed The redirect URL format used in external WISPr for HTTP/HTTPS POST These are the redirect URLs used for the following Ruckus products when using external WISPr Portal: <ul><li>Unleashed <ul><li>https://${sip}:9998/login</li><li>http://${sip}:9997/login</li></ul> </li></ul> Replace ${sip} with the IP address or FQDN of unleashed. <ul><li> Ruckus Cloud <ul><li>https://<client ID>.wispr.ruckus.cloud/SubscriberPortal/hotspotlogin</li></ul> </li></ul> The client ID could be found from the login URL of Ruckus cloud <ul><li>SmartZone <ul><li>https://*HOSTNAME_HERE*:9998/SubscriberPortal/hotspotlogin</li><li>http://*HOSTNAME_HERE*:9997/SubscriberPortal/hotspotlogin</li></ul> </li></ul> Replace HOSTNAME_HERE with the IP address or FQDN of SZ. <ul><li>ZD <ul><li>http://${sip}:9997/login</li><li>https://${sip}:9998/login</li></ul> </li></ul> Replace ${sip} with the IP address or FQDN of ZD.

Redirect URL format used in external WISPr for HTTP/HTTPS POST

2022-10-13T18:28:05-0700 2022-10-18T14:00:08-0700 https://support.ruckuswireless.com/articles/000001716 2021-07-08T19:33:33-0700 monthly 0.8 admin,premium knowledge_article_241 knowledge_article_241 2013-03-01T09:25:41-0800 000001716 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector What are the capabilities, limitations, and recommendations for using the ZoneDirector DHCP server? <div>Prolog: There is an internal DHCP server in ZoneDirectors, which can be helpful for bringing up and pre-provisioning APs, or supporting a small (and fully trusted*) client connected network. *Ruckus recommends using a dedicated VLAN/subnet for your ZD/APs, and assign separate VLANs to WLANs for client WLAN traffic, with switch/router level ACL enforced security. In most environments, a full Enterprise level DHCP server should provide services to your clients.</div> <div> Details: 1. The ZD's DHCP server can only be enabled if the IP address of ZoneDirector is set to a static IP address. If ZD IP address is changed from static to DHCP, the DHCP server will be disabled if it is currently enabled. 2. DHCP server only provides IPs in same subnet. Prior to ZoneFlex 9.7, a ZD in Smart Redundancy configuration cannot be used as a DHCP server</div> <div> </div> <div>3. MAX DHCP Clients: a ZoneDirector scope can support at most 512 DHCP clients.</div> <div> </div> <div>4. DHCP Lease: The default lease time is set to 1 week. The DHCP lease information is saved in permanent storage so that, if ZD reboots, it will not assign an already assigned IP address to other clients until and unless the the lease expires.</div> <div> </div> <div>5. To manually clear the ZD DHCP leases, disable/re-enable the DHCP server -> “Apply”. Enable “DHCP Server” –> “Apply”.</div> <div> </div> <div>Example: If the customer has pool of 3 IP addresses created on the ZD and there are three clients connected and consumed three IP addresses. Later third client disconnects and fourth client will try to connect but it will not connect, since the three IP addresses are already bound to three MAC addresses and they only get free once the lease time expires.</div> <div> </div> <div>If the customer complains that the fourth client is not connecting then he/she should disable the DHCP server -> “Apply” . Enable “DHCP Server” –> “Apply” to clear/renew the leases. In larger installations with a high percentage of transient users, you may want to reduce the lease time so that the IP address pool is not exhausted.</div>

This article explains how to configure the internal DHCP server on the ZD, number of IP's that can be leased out, lease times, if the ZD can give out IPs on different subnets, and setup in case of smart redundancy.

2021-07-08T19:33:33-0700 2022-10-13T03:25:23-0700 https://support.ruckuswireless.com/articles/000008666 2022-08-19T03:34:28-0700 monthly 0.8 admin,premium knowledge_article_4866 knowledge_article_4866 2018-12-04T10:30:55-0800 000008666 Validated (External) Premium Icx 6430;Icx 6450;Icx 7250;Icx 7450;Ruckus ICX 6430 and 6450 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ICX 6430, ICX 6450, ICX 7250, ICX 7450 ICX device may behave unexpectedly when the system uptime reaches 1242 days For ICX 6K series, Pls schedule reboot before the system uptime reaches 1242 days. For the ICX 7x50 series, The fix is added to 8.0.61c however it is recommended to upgrade to 8090 patch or higher releases for stability.

ICX may behave abnormal once the system uptime is 1242 days or more.

2022-08-19T03:34:28-0700 2022-10-11T04:56:33-0700 https://support.ruckuswireless.com/articles/000012248 2022-06-01T01:07:04-0700 monthly 0.8 admin,premium knowledge_article_4834 knowledge_article_4834 2022-06-01T01:07:04-0700 000012248 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smart wireless services Firmware;Installation;System network management Firmware, Installation, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor, Smart Wireless Services Do you need extra VM resources to upgrade vSZ from version 5.2.2.0.317 to version 6.1.0.0.935 and what is the upgrade path ? Please note that some APs are not supported in version 6.1.0.0.935 , thus before making any plan of upgrading to 6.1.0.0.935 check the 6.1.0 release note for those unsupported APs. <ol><li class="MsoNoSpacing" style="margin-left: 8px;">Ruckus vSZ 6.1 VM resource requirements --> same VM resources running version 5.2.2.0.317 will be used for version 6.1.x (no need of extra resources) </li><li class="MsoNoSpacing" style="margin-left: 8px;">vSZ Controller 5.2.2.0.317 to 6.1.0.0.935 upgrade path --> you can upgrade directly from 5.2.2.0.317 to 6.1 (see RUCKUS SmartZone Upgrade Guide 6.1.0, page 11)</li><li class="MsoNoSpacing" style="margin-left: 8px;">vSZ-D (Dataplane) 5.2.2.0.317 to 6.1.0.0.935 upgrade path --> you can upgrade directly from 5.2.2.0.317 to 6.1.0.0.935 --> it’s recommended to upgrade the vSZ before updating the data plane version because if the data plane version is higher than controller vSZ version then data plane cannot be managed by vSZ platform. (RUCKUS SmartZone 6.1.0 Release Notes, page 12)</li><li class="MsoNoSpacing" style="margin-left: 8px;">Access point compatibility confirmation in 6.1 --> please find all supported and unsupported APs in RUCKUS SmartZone 6.1.0 Release Notes, page 16</li><li class="MsoNoSpacing" style="margin-left: 8px;">ICX Switch firmware compatibility confirmation in 6.1 --> please find compatible ICX firmware in RUCKUS SmartZone 6.1.0 Release Notes, page 17</li><li class="MsoNoSpacing" style="margin-left: 8px;">License and support requirements met on current version for upgrade --> All licenses and support will stay the same. (just make sure the vSZ you are going to upgrade has valid support entitlement, otherwise the upgrade will fail) </li><li class="MsoNoSpacing" style="margin-left: 8px;">Check list to perform upgrade successful --> since customer is running version 5.2.2.0.317 , then he just need to backup the entire cluster before the upgrade (RUCKUS SmartZone Upgrade Guide 6.1.0, page 13 )</li></ol>

Customer is running vSZ/vSZ-D version 5.2.2 with no issues and because they purchased R350 APs which are not supported in version 5.2.2.0.317 they must upgrade to version 6.1.0.0.935 to be able to manage those R350 APs.

2022-06-01T01:07:04-0700 2022-10-03T05:37:51-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000YaRgSAK?attachment_index=0 2022-10-03T05:37:51-0700 monthly admin,premium knowledge_article_4834 knowledge_article_4834_attachment_1 SmartZone-6.1.0-UpgradeGuide-.pdf 543097.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA22J000000YaRgSAK?attachment_index=1 2022-10-03T05:37:51-0700 monthly admin,premium knowledge_article_4834 knowledge_article_4834_attachment_1 SmartZone-6.1.0-ReleaseNotes-.pdf 1016207.0 application/pdf https://support.ruckuswireless.com/articles/000001762 2020-08-18T06:31:59-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_341 knowledge_article_341 2013-03-05T22:10:44-0800 000001762 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor Why are my clients have trouble connecting to the Internet? Use AP as the DHCP server to provide IP addresses to the clients. This should resolve the lack of IP address resulting in network access failures.

Customer has a standalone AP. Its a new installation. Clients were unable to connect to the SSID.

2020-08-18T06:31:59-0700 2022-09-25T20:19:52-0700 https://support.ruckuswireless.com/articles/000012459 2022-09-15T22:57:23-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4899 knowledge_article_4899 2022-09-15T22:57:23-0700 000012459 Validated (External) Public Ruckus analytics;Smartcell insight;SmartCell Insight (SCI) Performance Performance, Ruckus Analytics, SmartCell Insight are you seeing undefined value in exported reports in SCI data explorer? If we select lesser number of rows in the below drop down, data for some of the group by conditions are not present in the selected number of rows of data, which is leading to data being shown as undefined. <img alt="User-added image" height="471" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000g1QW&feoid=00N50000002Cf3M&refid=0EM2J0000043LUz" width="500"></img> To avoid this undefined issue while downloading the data through CSV, we recommend using higher rows or a data filter by zone to make the data less and fit to the number of intended rows.

2022-09-15T22:57:23-0700 2022-09-16T12:00:10-0700 https://support.ruckuswireless.com/articles/000006337 2022-09-08T18:07:24-0700 monthly 0.8 admin,premium knowledge_article_4894 knowledge_article_4894 2017-04-11T09:18:33-0700 000006337 Validated (External) Premium Cloudpath;Zonedirector;Smartcell gateway;Cloudpath Enrollment System (ES);BPG_Cloudpath;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, Cloudpath, ZoneDirector, SmartCell Gateway Will I still get an "unsecure connection" warning if using HTTPS, even with a CA signed certificate installed? This is current design (limitation). There is no fix. This is true and it is vendor neutral: <a href="https://serverfault.com/questions/596844/ssl-certificate-errors-in-captive-portals" target="_blank">https://serverfault.com/questions/596844/ssl-certificate-errors-in-captive-portals</a> <a href="http://community.arubanetworks.com/t5/Technology-Blog/Captive-Portal-why-do-I-get-those-certificate-warnings/ba-p/268921" target="_blank">http://community.arubanetworks.com/t5/Technology-Blog/Captive-Portal-why-do-I-get-those-certificate-warnings/ba-p/268921</a> “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

Certificate Warning when redirecting using HTTPS are unavoidable.

2022-09-08T18:07:24-0700 2022-09-15T14:00:10-0700 https://support.ruckuswireless.com/articles/000005357 2021-04-07T09:14:25-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2479 knowledge_article_2479 2015-12-10T17:35:55-0800 000005357 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor Do Ruckus APs support Wi-Fi Protected Setup (WPS) mode? Ruckus APs do not support Wi-Fi Protected Setup (WPS) mode.

Do Ruckus APs support Wi-Fi Protected Setup (WPS) mode?

2021-04-07T09:14:25-0700 2022-09-07T14:31:16-0700 https://support.ruckuswireless.com/articles/000012429 2022-08-31T10:41:32-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4891 knowledge_article_4891 2022-08-31T10:34:16-0700 000012429 Validated (External) Public How to activate Ruckus Cloud & Analytics licenses prior to 10th Aug, 2022. Activation of Ruckus Cloud & Analytics licenses prior to 10th Aug, 2022. The scope of this activation work flow is applicable for stand alone or bundled Ruckus Cloud & Analytics SKU's. Note: Activation workflow for both stand alone (Non-bundled) & Bundled Ruckus Cloud & Analytics SKU’s <ul><li>Open the Support Purchase Acknowledgement (SPA) email you have received from Ruckus/Disti/VAR for your order <ul><li style="margin-left: 8px;">The Subscription Start Date is set to same date as the Ordered Date.</li><li style="margin-left: 8px;">When activating the Support Contract customer's will see the same date as the Ordered Date.</li></ul> </li></ul> <div style="margin-left: 8px;"> <img alt="User-added image" height="411" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000g1OL&feoid=00N50000002Cf3M&refid=0EM2J00000436Oz" width="500"></img></div> <ul><li>Login to Ruckus support portal: https://support.ruckuswireless.com </li><li>Click the activation code in the email to activate.</li></ul> <img alt="User-added image" height="526" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000g1OL&feoid=00N50000002Cf3M&refid=0EM2J00000436QR" width="500"></img> <ul><li>Accept Terms and Conditions and click on "Activate Purchase</li></ul> <img alt="User-added image" height="477" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000g1OL&feoid=00N50000002Cf3M&refid=0EM2J00000436Qb" width="500"></img> <ul><li style="">Click on the Hyperlink for the product code to register the cloud region.</li></ul> <img alt="User-added image" height="164" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000g1OL&feoid=00N50000002Cf3M&refid=0EM2J00000436RA" width="500"></img> <ul><li>Select the region, start date then click on "Register & Bind To Support"</li><li>Customer will be allowed only to select the start date as of Order date to proceed with the activation.</li></ul> <img alt="User-added image" height="372" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000g1OL&feoid=00N50000002Cf3M&refid=0EM2J00000436Sm" width="500"></img> <ul><li style="">We will get a confirmation as activated and the status changes to "Yes".</li></ul> <img alt="User-added image" height="175" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000g1OL&feoid=00N50000002Cf3M&refid=0EM2J00000436Sw" width="500"></img> <ul><li>For the licenses to reflect in Ruckus Cloud/Analytics portal, click refresh in the license page of the cloud portal. </li></ul> <img alt="User-added image" height="137" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000g1OL&feoid=00N50000002Cf3M&refid=0EM2J00000436TG" width="500"></img> <ul></ul>

2022-08-31T10:41:32-0700 2022-09-07T04:00:08-0700 https://support.ruckuswireless.com/articles/000010830 2020-09-02T01:45:32-0700 monthly 0.8 admin,premium knowledge_article_4386 knowledge_article_4386 2020-09-02T01:45:32-0700 000010830 Validated (External) Premium R850;RUCKUS R850 Performance;Troubleshooting Performance, Troubleshooting, R850 Why am I only seeing one spatial stream on my client when it's connected to R850 If the AP is using 802.3af, the AP will only transmit using one transmit chain. Check to make sure the AP power consumption status is using 802.3at rkscli: get power-mode PoE Configured Mode : Auto Power Consumption Status : 802.3at Switch/Injector OK If you’re configuring AP in 80MHz with AT power, AP will transmit only using 4 chains, while with AT+ AP will use 8 chains for Tx. If you’re configuring AP in 160MHz mode, it requires AT+ as a minimum about 35 watts. We don’t support 160MHz config with AT power on R850.

2020-09-02T01:45:32-0700 2022-09-01T13:37:07-0700 https://support.ruckuswireless.com/articles/000003805 2019-01-23T12:43:39-0800 monthly 0.8 admin,premium knowledge_article_3554 knowledge_article_3554 2014-12-19T02:07:32-0800 000003805 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell ap;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP What QoS media queues are associated to High/Low WLAN Priority? This feature can be used to prioritize internal traffic over guest WLAN traffic. By default all WLANs are set to high priority. Essentially, this does a priority mapping on per VAP basis. Example, two WLANs configured one with high and other as low: For High priority WLAN, the priority would look something like **** HIGH PRIO **** rkscli: get class2mqprio wlan0 Class Voice : 0 Class Video : 2 Class Data : 4 Class Background : 6 OK For low priority, **** LOW PRIO **** rkscli: get class2mq wlan0 Command is not recognized: get class2mq wlan0 rkscli: get class2mqprio wlan0 Class Voice : 1 Class Video : 3 Class Data : 5 Class Background : 7 OK **Note that lower number is a higher priority (so Video = 03, is lower priority, than Video = 02) <img alt="WLAN Priotity described" height="375" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Fw&feoid=00N50000002Cf3M&refid=0EM2J000000m5rw" width="500"></img> <img alt="WLAN Priotity details" height="375" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Fw&feoid=00N50000002Cf3M&refid=0EM2J000000m5s6" width="500"></img> How To configure WLAN Priority (ZD controlled AP) <img alt="WLAN Priority ZD configuation" height="382" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Fw&feoid=00N50000002Cf3M&refid=0EM2J000000m5sG" width="500"></img> How To configure WLAN Priority (SZ controlled AP) Wireless LAN’s – Advanced Options: <img alt="WLAN Priority SZ configuation (ver 3.6.2)" height="126" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Fw&feoid=00N50000002Cf3M&refid=0EM2J000000m5sQ" width="500"></img> <div style="margin-left: .38in; text-align: left;">•Caveats and Deployment Guidelines</div> <div class="O1" style="margin-left: .81in; text-align: left;">–High vs Low Priority designator</div> <div class="O1" style="margin-left: .81in; text-align: left;">–Voice-Low remains prioritized over Video-, BE-, Background-High to ensure minimal latency</div>

Ruckus QoS media queues High / Low priority, explained.

2019-01-23T12:43:39-0800 2022-08-26T10:54:35-0700 https://support.ruckuswireless.com/articles/000012417 2022-08-15T00:29:31-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4862 knowledge_article_4862 2022-08-15T00:29:31-0700 000012417 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What are the steps involved in replacing defective/failed Standby ZD in Smart Redundancy Setup Steps: 1.Upgrade/downgrade the controller firmware to match Primary ZD 2.Set IP address for the backup controller and bring it up on the network and ensure reachability to the active/ primary controller 3.Browse to the new controller and add smart redundancy settings 4. Select 'Sync from Peer' to pull the config from Primary/Active controller Note: 1. Do take a backup of the configuration before this activity 2. Make sure that the software version of both the ZDs is the same 3. Schedule a maintenance window for this activity 4. Use Chrome or Firefox to configure the controller

Steps involved in replacing defective/failed Standby ZD in Smart Redundancy Setup

2022-08-15T00:29:31-0700 2022-08-24T01:01:23-0700 https://support.ruckuswireless.com/articles/000002269 2021-07-22T06:56:55-0700 monthly 0.8 admin,premium knowledge_article_4724 knowledge_article_4724 2013-09-30T14:03:41-0700 000002269 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How do ZoneDirectors maintain Smart Redundancy The current Smart Redundancy solution works with one Active Zonedirector, and one Standby ZoneDirector, who share updates to maintain one configuration/database. The two ZDs can be located in the same Data Center, or physically separated if timing requirements can be maintained. For Smart Redundancy, the Standby ZD will send heartbeats and the Active will send discovers, at every 6s intervals. If after 15s, no reply is seen, the ZDs will make a decision if it is disconnected with its peer, and the Standby ZD will change to Active. When the two ZoneDirectors are communicating again, one Active ZD will change to Standby role and an auto-synchronization process will be started. There is a timestamp to judge sync from which ZD, to sync the latest one to the peer. The timestamp is updated by configuration behavior. They will continue trying to communicate, sending discover msgs every 6s to peers, until the ZDs are communicating again, when they will determine Active/Standby roles based on 1) most managed APs, and/or 2) lower MAC address.

How do ZoneDirectors maintain Smart Redundancy

2021-07-22T06:56:55-0700 2022-08-18T10:21:28-0700 https://support.ruckuswireless.com/articles/000001346 2021-04-30T02:07:23-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3 knowledge_article_3 2013-01-07T12:04:22-0800 000001346 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector WebUI problem after upgrading to 9.5.0 We have seen a WebUI access issue after upgrade for a very few customers who went straight from version 9.4.0.0.110 to version 9.5.0.0.156, without going thru the 9.4.2.0.29 MR first. Symptoms: You will see a Secure Connection Failed message like the below <img alt="secure connection failed error after 9.5 upgrade from 9.4.0" height="250" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M49k&feoid=00N50000002Cf3M&refid=0EM50000000LEx2" width="500"></img> Ping and SSH access are unaffected, the operation of the wireless network is unaffected. You can avoid the problem if you go to our Support Site Downloads page, and get 9.4.2.0.29 firmware for your ZD. <a href="https://support.ruckuswireless.com/user-full-access/downloads-page" style="color: rgb(34, 68, 187);" target="_blank">https://support.ruckuswireless.com/user-full-ac…</a> To upgrade, start at Administer/Backup and save a copy of the current config. You might wish to add “9400110” to the filename afterwards. Then from Administer/ Upgrade, you browse the 9.4.2.0.29 file just downloaded, and when prompted to do a backup, you can skip and click Upgrade to continue. Run a continuous ping to your ZD’s IP address, and after it’s uploaded the whole image it will reboot, and you’ll see some pings miss (if you’re not able to see the status LED go from flashing red to green after rebooted and fully back up). A couple minutes later you should be redirected, else click the URL to get the ZD login. From Monitor/Access Points, you can watch as the APs go from upgrading firmware to disconnected when they reboot, to provisioning and finally Connected states again, when you can repeat the process for 9.5.0.0.156. WORKROUND: If you have already done the upgrade, and experienced the problem... There is a CLI command that can typically reset the WebUI, without having had to downgrade your firmware again, that we’d like to suggest before going thru the software install/reboot process. SSH to your ZD, login with your admin credentials and you can reset your certificate thru the command interface. This will restart your ZoneDirector after the certificate is reset. ruckus> en ruckus# config ruckus (config)# certificate ruckus (config-certificate)# restore ZoneDirector will restart now to apply the changes in the certificate settings. [ and you lose your connection ] Run a continuous ping from a DOS command prompt window, until your ZoneDirector replies again, when you can try the WebGUI once more.

2021-04-30T02:07:23-0700 2022-08-17T13:25:43-0700 https://support.ruckuswireless.com/articles/000004026 2020-06-05T09:29:28-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3984 knowledge_article_3984 2015-02-05T13:00:40-0800 000004026 Validated (External) Public Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;System network management;Website services;Support license activation Configuration, System Network Management, Website Services, Support License Activation, SZ300, SCG200, virtual SmartCell Gateway, SZ100 Does the customer need to buy another set of license for redundant controller ? In vSCG/SCG-200/SZ-100 cluster environment, AP licenses are pooled between all nodes in a cluster. If a node fails, the AP licenses remain active for other nodes for 45 days permitting time to RMA the failed node. The AP licenses are applied on a cluster level which is a logical representation of the two nodes (identified by their S/N). LiMAN license tool is used to initiate RMA to transfer the licenses from the defective node SN to the new node SN.

This article describes license requirements for vSCG/SCG-200/SZ-100/SZ-300 nodes operating in a cluster configuration

2020-06-05T09:29:28-0700 2022-08-15T11:59:23-0700 https://support.ruckuswireless.com/articles/000003818 2020-10-12T01:11:21-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4436 knowledge_article_4436 2014-12-29T00:48:18-0800 000003818 Validated (External) Public Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Installation;System network management Firmware, Installation, System Network Management, SmartCell Gateway, virtual SmartCell Gateway How do I install an engineering patch diagnostic script (.KSP) file for SCG / vSZ / SZ ? A KSP is released mainly because the customer can not wait for next upgradable image and needs a Patch immediately for the current reported problem It is highly recommended to confirm that the KSP you upload is compatible with the current environment These scripts are specific to the version of software running on the controller, so take care to ensure your version is supported by the KSP you have. The ER in which the KSP has been mapped and the supported version or versions are very much clear from the naming convention used for a KSP release You can upload a KSP package from: <ol><li>Diagnostics >> Scripts >> Patch/Diagnostic Scripts</li><li>Use the "Browse" option to choose the KSP file from the local file system</li><li>Click Upload</li><li>Once the script has been successfully uploaded to the controller, choose the script from the box under "System Uploaded Patch Scripts"</li><li>Click "Apply Patch"</li></ol> <img alt="User-added image" height="196" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyMt&feoid=00N50000002Cf3M&refid=0EM2J000001CszS" width="500"></img>

This article explains how to install an engineering patch diagnostic script on the SCG / vSCG / SZ controller platform

2020-10-12T01:11:21-0700 2022-08-15T09:56:23-0700 https://support.ruckuswireless.com/articles/000012393 2022-08-04T04:21:48-0700 monthly 0.8 admin,premium knowledge_article_4860 knowledge_article_4860 2022-08-04T04:21:48-0700 000012393 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Performance;Configuration;Installation Performance, Configuration, Installation, SmartCell Insight Why do the AP count is less in the Network wireless tab then compared to overview ? Total APs from Inventory/overview contains both Online and Offline APs where as Total APs from Network Wireless are those APs that are actively reporting traffic to SCI. If no client is connected to AP, that AP will not be available in Wireless Network overview and hence there is AP count difference seen in the specified tabs.

Why do the AP count is different on the SCI on different tabs of overview/inventory APs and in network wireless.

2022-08-04T04:21:48-0700 2022-08-11T14:00:10-0700 https://support.ruckuswireless.com/articles/000012342 2022-08-01T05:25:56-0700 monthly 0.8 admin,premium knowledge_article_4859 knowledge_article_4859 2022-08-01T05:25:56-0700 000012342 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Performance;Installation;Troubleshooting Performance, Installation, Troubleshooting, SmartCell Insight What is the maximum number of support for incoming records and segments in SCI ? The maximum supported incoming records on Spark for a single node is 12k per five minute and the maximum druid Segments for single node is 6k. If the value for any node is above this it will have issue and will not remain stable (it will crash and cause data loss). If the incoming record count is higher we will need to add/increase the number of data nodes as per the count, example adding another node mean (12*2) so now it can handle 24k incoming records. For the druid segment though we will need to reach out to Ruckus support to run manual compaction job to reduce the count if higher. Below is an example of SCI system having high and normal load for spark and druid : In the below we can see that incoming record for last 5 minute has been exceeded above 12k and similarly the druid segment count is way above 6k. <img alt="User-added image" height="315" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000U3QI&feoid=00N50000002Cf3M&refid=0EM2J0000049LAT" width="646"></img> <img alt="User-added image" height="301" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000U3QI&feoid=00N50000002Cf3M&refid=0EM2J0000049LAY" width="641"></img> In the below we can see that incoming record for last 5 minute has been well under 12k and similarly the druid segment is below 6k. <img alt="User-added image" height="292" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000U3QI&feoid=00N50000002Cf3M&refid=0EM2J0000049LAs" width="639"></img> <img alt="User-added image" height="238" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000U3QI&feoid=00N50000002Cf3M&refid=0EM2J0000049LAx" width="644"></img>

The spark and druid has a limitation based on per node to handle incoming records and Segments which is explained.

2022-08-01T05:25:56-0700 2022-08-04T06:00:11-0700 https://support.ruckuswireless.com/articles/000002018 2020-09-14T22:52:38-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3836 knowledge_article_3836 2013-05-03T19:55:53-0700 000002018 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector What is the list of Access Points supported by Zone Director 1000? The following list of Access Points are supported by Zone Director 1000 which is running across the 9.3 firmware version: 2741, 2942, 7341, 7343, 7363, 7762, 7762-S, 7762-s-ac, 7762-T, 7761cm, 7762-t-ac, 7942, and 7962. 9.3 is the highest software release the ZD1000 can support. Note: ZD 1000 does not support ZF 7025

2020-09-14T22:52:38-0700 2022-07-28T10:54:46-0700 https://support.ruckuswireless.com/articles/000003431 2021-03-08T06:38:24-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4545 knowledge_article_4545 2014-09-23T10:08:39-0700 000003431 Validated (External) Public Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, SmartCell Gateway, virtual SmartCell Gateway How to configure DHCP option 43 for SmartZone APs on Sonicwall Firewall See .pdf attachment for configuration. Note: The main aspect for the Sonic FW configuration is, each byte must be separated by semicolon.

Article explains how to configure DHCP option 43 on Sonicwall firewall for SmartZone

2021-03-08T06:38:24-0800 2022-07-27T12:32:39-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PHUzCAO?attachment_index=0 2022-07-27T12:32:39-0700 monthly admin,premium,warranty,guest knowledge_article_4545 knowledge_article_4545_attachment_1 Sonicwall_DHCP_option_43_for_vSCG.pdf 362421.0 application/pdf https://support.ruckuswireless.com/articles/000002904 2020-08-18T03:52:06-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4351 knowledge_article_4351 2014-04-17T18:19:03-0700 000002904 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How do I setup SNMP on ZD for monitoring purposes? Please go through the attached document to understand the SNMP configuration via the GUI. Below are the CLI configuration format on the ZD, To configure the SNMPv2 settings, use the "snmpv2" command. Executing this command enters the config-sys-snmpv2 context. ruckus(config)# system ruckus(config-sys)# snmpv2 ruckus(config-sys-snmpv2)# ro-community <community name> ruckus(config-sys-snmpv2)# rw-community <community name> To configure the SNMPv3 settings, use the "snmpv3" command. Executing this command enters the config-sys-snmpv3 context. ruckus(config)# system ruckus(config-sys)# snmpv3 ruckus(config-sys-snmpv3)# ro-user <> ruckus(config-sys-snmpv3)# rw-user <>

SNMP configuration for Zone director via both GUI and the CLI

2020-08-18T03:52:06-0700 2022-07-27T09:35:38-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PFExCAO?attachment_index=0 2022-07-27T09:35:38-0700 monthly admin,premium,warranty,guest knowledge_article_4351 knowledge_article_4351_attachment_1 SNMP.pdf 39096.0 application/pdf https://support.ruckuswireless.com/articles/000001853 2021-07-08T17:50:23-0700 monthly 0.8 admin,premium knowledge_article_552 knowledge_article_552 2013-03-19T11:27:39-0700 000001853 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell ap Troubleshooting Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP How to Access the AP on its default IP ? Tools required: 1. Straightened Paper Clip. 2. A Laptop. 3. PoE adapter/Power adapter to power up the AP. Step-1: Hard Reset - On the AP back console using paper clip, press hold the button which says "Hard Reset" within a tiny circular port for about 10 to 12 seconds. - AP reboots once the button is released. At this point AP should be ready to be accessed through default IP. Note that, partially pressing reset button will not Factory Reset the AP but reboots the AP. Step-2: Accessing the AP - Hard-wire a laptop to the AP and make sure static IP address is assigned in the range of 192.168.0.X/255.255.255.0. Example: 192.168.0.10/255.255.255.0. - Post assigning the IP address check if the AP's default IP 192.168.0.1 is reachable by initiating Ping requests. - If the ping request times out or unreachable. Try swapping Ethernet Cable/AP Eth Port/PC. - If the AP is reachable, we can make use of any Browsers or SSH into the AP using Putty to perform configuration.

Accessing the AP on its default IP

2021-07-08T17:50:23-0700 2022-07-24T14:51:50-0700 https://support.ruckuswireless.com/articles/000012297 2022-07-19T11:36:03-0700 monthly 0.8 admin,premium knowledge_article_4857 knowledge_article_4857 2022-07-12T10:41:54-0700 000012297 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, SmartCell Gateway Why v/SZ upgrade from 5.2.2.0.1562 to 6.1.0.0.935 fails? The Supported upgrade path from v/SZ 5.2.2 to 6.1 will be 5.2.2.0.317 >> 6.1.0.0.935 or 5.2.2.0.1161 >> 6.1.0.0.935. Once cluster restore is completed, downgrade the instance to either 5.2.2.0.317 or 5.2.2.0.1161 based on whichever was the previous release and then upgrade to 6.1.0.0.935. If this is a fresh install of 5.2.2.0.1562, we recommend installing a fresh instance of 6.1.0.0.935 from scratch. If you really need AP's on 5.2.2.x firmware for older AP's Models, you can install 5.2.2.0.2064 AP patch on top of 6.1.0 firmware to get AP Zones in 5.2.2. 5.2.2.0.1562 LT GD MR2 with a KSP will support a direct upgrade to 6.1.1 Release which is next 6.1.x firmware and it will be available in two months, tentatively.

This article explains why upgrade from v/SZ version 5.2.2.0.1562 LT GD MR2 to 6.1.0.0.935 version fails even when 6.1 is a higher version

2022-07-19T11:36:03-0700 2022-07-22T16:00:10-0700 https://support.ruckuswireless.com/articles/000003632 2020-08-18T03:36:18-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4365 knowledge_article_4365 2014-11-12T07:13:49-0800 000003632 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, ZoneDirector What parameters are available to influence client load balancing? To handle such scenarios, following parameters can be considered: 1. Adjacent Threshold: This parameter is available via GUI as well as through CLI which controls load balancing based on signal level seen from neighboring APs. 2. Activation Threshold: This parameter sets the value for client count above which client load balancing will initiate. This setting is available only via CLI. 3. Weak Bypass: If the client signal level is below this RSSI, AP will not take action to influence the client connection. This setting is available only via CLI. 4. Strong Bypass: If the client signal level is above this RSSI, AP will not take action to influence the client connection. This setting is available only via CLI. Other alternatives to the above software settings include: 1. Repositioning of APs 2. Adjusting power levels 3. Making use of SmartRoam feature. This is explained in KB article available at https://support.ruckuswireless.com/answers/000002277 Please note that Band Balancing (or Band Steering) is different from this as it works at the AP level (instead between neighboring APs) to balance clients between 2.4 GHz and 5 GHz radios.

This article explains what parameters are available in case the default client load balancing doesn't do the expected job.

2020-08-18T03:36:18-0700 2022-07-21T22:36:59-0700 https://support.ruckuswireless.com/articles/000012313 2022-07-14T23:28:07-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4855 knowledge_article_4855 2022-07-13T23:58:56-0700 000012313 Validated (External) Public Speedflex;Virtual smartcell gateway;Sz100;SpeedFlex;SmartZone 100-D (SZ100-D) Performance;System network management;Troubleshooting Performance, System Network Management, Troubleshooting, SpeedFlex, virtual SmartCell Gateway, SZ100 Why the Speed flex result is capping to 1 Gbps when testing between the AP and the SZ\vSZ? The Speedflex result was not exceeding more than 1 Gbps between the AP and controller, even though the Controller and AP’s ethernet speed capabilities was higher than 1 Gbps. This is due to the limitation on the controller side. Speedflex for AP\Controller performance was designed based on the older models which was capable of 1 Gbps. UI traffic is treated as data traffic and it goes through the controller’s ETH interface\Dataplane interface and this is not capped. However, when doing the Speeedflex test, it is not treated as data traffic and it goes through the controller Linux KNI interface and this interface is capped to 1 Gbps. This has been also tested with other tools like iPerf and ZAP test. 10 G port on SZ is designed for UE traffic, not for management/control traffic. The packet targeted to AP/DP is very limited, including image upgrade / configuration update and some connection to external server, so the traffic is always less than 1 Gbps. As there was no requirement to support over 1 G bandwidth for management/control traffic, the capping has not been improved from 1 Gbps. It can be increased but will take time since this has to go through the development process. The Speedflex is still considered to be used for AP\Controller speed performance test, however we need to set the right expectation with customer when using the AP models with higher Eth capabilities like R730\R850. Check the ER-11218 for complete discussion and test results. We have also updated the guides with respect to higher AP models. Previous details on the guide: <img alt="User-added image" height="76" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000U3OH&feoid=00N50000002Cf3M&refid=0EM2J00000497BU" width="829"></img> Updated info on the guides: <img alt="User-added image" height="230" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000U3OH&feoid=00N50000002Cf3M&refid=0EM2J00000497BZ" width="839"></img>

The Speed flex result is capping to 1 Gbps when testing between the AP and the SZ\vSZ.

2022-07-14T23:28:07-0700 2022-07-19T12:00:11-0700 https://support.ruckuswireless.com/articles/000009932 2020-01-06T22:17:16-0800 monthly 0.8 admin,premium knowledge_article_4037 knowledge_article_4037 2019-11-12T22:49:00-0800 000009932 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration Performance, Configuration, SmartCell Gateway, virtual SmartCell Gateway What is the Maximum Domains, Zones, WLAN CI Whitelist can be configured SZ100&300 vSZ-H/SCG300 support 10,000 max zones per system, 2048 max per domain. vSZ-E/SZ100 support 1024 max zones. Max AP Groups is 513 per Zone (including a hidden default ap-group), Per system: 513 (AP Groups) * 10000 (zones) = 5130000 Max WLAN groups is 2048 per Zone Per System: 2048 * 10000 = 20480000 Max WLAN;s is 2048 per Zone Per System - 65534 As for Client Isolation estimation on max data records as below: <ul><li>Max 2048 list in system</li><li>Max 64 list per zone</li><li>Max 64 entries per list</li></ul>

This article provides information of maximum number of domains, zones wlan and CI whitelist can be configured for vSZ & SZ in Release 5.x

2020-01-06T22:17:16-0800 2022-07-15T03:48:45-0700 https://support.ruckuswireless.com/articles/000004485 2020-08-18T03:39:27-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4362 knowledge_article_4362 2015-05-07T00:48:17-0700 000004485 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector What ports need to be kept opened on my firewall if ZD is setup behind it? Following ports need to be kept opened on a firewall for ZD to perform its functions: For administration: Web GUI access - you need to keep TCP port 443 open. If the administrator doesn't type https in front, the request will come TCP port 80 (http port). In such case, you need to keep port 80 opened as well. After receiving a request on port 80, ZD will redirect the administrator to an https login page (port 443). SSH - open TCP port 22. For AP join and management: Keep UDP ports 12222 and 12223 opened. For AP upgrades: APs use FTP for retrieving firmware from ZD and then they will upgrade automatically. Keep TCP port 21 open for this purpose. Below is the complete list of ports that has to be open. <img alt="User-added image" height="373" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxo3&feoid=00N50000002Cf3M&refid=0EM2J000001CHLO" width="500"></img>

This article explains what ports need to be kept opened for ZD to perform its functions if it is setup behind a firewall or a NAT box.

2020-08-18T03:39:27-0700 2022-07-14T23:35:11-0700 https://support.ruckuswireless.com/articles/000009636 2021-12-21T05:51:31-0800 monthly 0.8 admin,premium knowledge_article_3881 knowledge_article_3881 2019-07-24T14:15:17-0700 000009636 Validated (External) Premium Ruckus cloud wifi;Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;System network management Configuration, Firmware, System Network Management, Ruckus Cloud WiFi, ZoneDirector How can I migrate APs from ZD to the Ruckus Cloud Wi-Fi? How to migrate from ZD to Ruckus Cloud? Basic Recipe for migration Step 1: First thing to check is if customers Access Points are supported in Ruckus Cloud. Fortunately it is a simple task. Take a look <a href="https://www.ruckuswireless.com/cloud-devices" style="color: #0563c1; text-decoration: underline;" target="_blank">here</a> for all APs supported by Ruckus Cloud. Step 2: If APs are supported, prepare a list of AP serial numbers. Step 3: Create a cloud account for customer. Step 4: Import APs to Ruckus Cloud. Step 5: Use migrate option in ZD to point APs to Ruckus Cloud. -Go to Administration >ZD Migration, the ZD migration page will appears. -Type the ZD IP address and you will be prompted with the ZD credentials. -Click Connect and Select the AP that you want to migrate. -Click Migrate to migrate the APs. Step 6: Verify that APs are in Cloud Step 7: Complete configuration. This can happen any time after step 2

See steps to help migrate APs from ZD controller to Ruckus Cloud Wi-Fi management.

2021-12-21T05:51:31-0800 2022-07-14T09:16:57-0700 https://support.ruckuswireless.com/articles/000002611 2020-09-15T19:20:32-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_787 knowledge_article_787 2014-02-18T00:49:53-0800 000002611 Validated (External) Public Zonedirector;Mediaflex;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;MediaFlex 2501;MediaFlex 2900;MediaFlex 2811;MediaFlex 5811;MediaFlex 7811;MediaFlex 7211 Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, MediaFlex What authentication methods can be used on a 7211 to secure its connectivity to a AP?

This article talks about various authentication methods supported on a 7211 model CPE

2020-09-15T19:20:32-0700 2022-07-13T11:53:25-0700 https://support.ruckuswireless.com/articles/000002025 2020-08-18T09:24:15-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_336 knowledge_article_336 2013-05-08T16:19:39-0700 000002025 Validated (External) Public Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Cloud services;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Installation Performance, Installation, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, Cloud Services, virtual SmartCell Gateway Where can I find the best details about Ruckus Products and it's support? Q: Where to find data sheets on all products? A: Under the company web site and Products tab on top of the page. 1. Select the product category(Like, access point, controller, etc) you want information for. 2. Choose the product (e.i. R730). 3. A page loads with product introduction along with links to download Datasheet, White paper, Product info, etc. <img alt="Product page" height="236" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxy3&feoid=00N50000002Cf3M&refid=0EM2J000000m23t" width="500"></img> 4. Select the type of information desired and then mouse over on the desired device below. - Another pull down menu appears with which language you prefer. Click on a language and the info is loaded on the next screen. 5. Find the latest Ruckus Product Guide, check the below link. <a href="https://www.commscope.com/globalassets/digizuite/62228-ruckus-product-guide.pdf" target="_blank">https://www.commscope.com/globalassets/digizuite/62228-ruckus-product-guide.pdf</a> 6. To download user manuals/user guide, product software, software/firmware release notes and other support related queries, login to https://support.ruckuswireless.com 7. You may contact support from below available channels: - Support chat: https://support.ruckuswireless.com/login (Login required) - Support portal: https://support.ruckuswireless.com/cases/new (Login required) - Support hotline: For different global regions, support contact number can be found under https://support.ruckuswireless.com/contact-us Attachment: ruckus-product-guide.pdf

Ruckus Product Information - DATA SHEETS, FEATURES, CASE STUDIES, WHITE PAPERS, APPLICATION NOTES

2020-08-18T09:24:15-0700 2022-07-13T11:53:24-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDiTCAW?attachment_index=0 2022-07-13T11:53:24-0700 monthly admin,premium,warranty,guest knowledge_article_336 knowledge_article_336_attachment_1 ruckus-product-guide.pdf 1156131.0 application/pdf https://support.ruckuswireless.com/articles/000008519 2020-06-19T13:32:14-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4243 knowledge_article_4243 2018-10-26T12:45:41-0700 000008519 Validated (External) Public Icx 7650;Icx 6430;Icx 6450;Icx 6610;Icx 6650;Icx 7150;Icx 7250;Icx 7450;Icx 7750;Brocade network advisor;RUCKUS ICX 7650 Campus Switches;Ruckus ICX 6430 and 6450 Campus Switches;Ruckus ICX 6610 Campus Switches;Brocade ICX 6650 Campus Switches;RUCKUS ICX 7150 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches;Brocade Network Advisor (BNA) Performance;Firmware;System network management;Support license activation Performance, Firmware, System Network Management, Support License Activation, ICX 7650, ICX 6430, ICX 6450, ICX 6610, ICX 6650, ICX 7150, ICX 7250, ICX 7450, ICX 7750, Brocade Network Advisor What are the licenses required for Brocade Network Advisor (BNA)? Ruckus supports two versions of Brocade Network Advisor (BNA) i.e, version 14.2.10 and version 14.2.11. The BNA is used to manage/monitor Ruckus Switches. 14.2.10 and 14.2.11 versions of BNA do not require licenses to be additionally installed or added to manage or monitor Ruckus Switches. <a href="https://support.ruckuswireless.com/documents/1782-brocade-network-advisor-bna-14-2-10-ga-release-notes" target="_blank">Release Notes 14.2.10</a> - Please go through Page 4, for documentation on license information <a href="https://support.ruckuswireless.com/documents/2235-brocade-network-advisor-bna-14-2-11-ga-release-notes" target="_blank">Release Notes 14.2.11</a> - Page 14 for IP switch support count

The licensing details and requirement for Brocade Network Advisor (BNA)

2020-06-19T13:32:14-0700 2022-07-13T11:53:24-0700 https://support.ruckuswireless.com/articles/000008660 2019-10-30T04:54:04-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3983 knowledge_article_3983 2018-12-03T11:41:23-0800 000008660 Validated (External) Public Zoneplanner;ZonePlanner Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ZonePlanner What are 12037and 12038 error message on ZonePlanner? When attempting to download a license for an AirMagnet product through the in-product licensing screens, and if you receive any one of the below error messages, <ul><li> Error 12037 - SSL certificate date that was received from the server is bad. The certificate is expired. OR </li><li> Error 12038 - The Host name in the certificate is invalid or does not match. OR </li><li>Failed to download license from license server. Please check your network connection. if operating from inside a firewall, you may need to set proxy settings and try again.</li></ul> Please do follow the below mentioned steps: <ol><li> Perform a MAC Address Reset in My AirMagnet to an Ethernet adapter or wlan adapter </li><li> Download the license through My AirMagnet portal </li><li> Copy the license into the appropriate installation folder for the specific AirMagnet product, overwriting any existing license </li></ol> Please be sure that the product version number matches the license version number??.

The article describes about the various error messages which the customer sees on ZonePlanner

2019-10-30T04:54:04-0700 2022-07-13T11:53:24-0700 https://support.ruckuswireless.com/articles/000005747 2016-05-18T13:04:05-0700 monthly 0.8 admin,premium knowledge_article_2322 knowledge_article_2322 2016-05-18T13:04:05-0700 000005747 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed Can I use the Command Line Interface (CLI) to make changes on my Ruckus Unleashed network? The CLI, while available in Unleased version 200.0, is not supported at this time. Since Unleashed is based on existing AP and ZD code - It inherits commands from those platforms that are not fully tested by Ruckus QA so are unsupported. Using the CLI to make configuration changes on the MASTER (ZD code) is at your own risk at this time. You need to be very careful when using the CLI. On Ruckus AP's the CLI has never been fully supported for customer use, which is why no AP CLI guide is published. There are commands used by Ruckus QA which may not have the expected results.

Managing Ruckus Unleashed AP's using the Command Line Interface

2016-05-18T13:04:05-0700 2022-07-13T11:36:49-0700 https://support.ruckuswireless.com/articles/000008845 2020-09-01T21:00:40-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4381 knowledge_article_4381 2019-02-18T22:59:04-0800 000008845 Validated (External) Public Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, SmartCell AP Why 5G LED of R310 is off? There are 2 resolutions. 1. R3.5 does not have this issue 2. R104 standalone can work fine with R3.4 and earlier image

5G LED of wave 1 & AP is off with SCG AP image if original image was R110 standalone image.

2020-09-01T21:00:40-0700 2022-07-13T10:40:19-0700 https://support.ruckuswireless.com/articles/000004392 2020-08-18T03:46:17-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4358 knowledge_article_4358 2015-04-16T16:19:16-0700 000004392 Validated (External) Public Zonedirector;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, ZoneDirector, virtual SmartCell Gateway How do I exclude 11b clients from joining and what's the difference between ofdm-only and 11n-only? Here's the difference between OFDM-only and 11n-only: - OFDM only excludes 11b clients from connecting to the WLAN. - OFDM only configuration is done per WLAN at the CLI and not at the GUI. - 11n only excludes 11b and 11g clients. - 11n only configuration is done per AP group at the GUI (Configure / Access Points, Access Point Group) and can also be done through the CLI. Configuration on the WLANs in ZD : Here's the excerpt from the CLI for enabling OFDM only per WLAN. ruckus>en ruckus#config ruckus(config)# wlan 1RUCCAT The WLAN service '1RUCCAT' has been loaded. To save the WLAN service, type 'end' or 'exit'. ruckus(config-wlan)# ruckus(config-wlan)# ofdm-only The mgmt-tx-rate will be set to 6Mbps due to ofdm-only enable. The command was executed successfully. To save the changes, type 'end' or 'exit'. ruckus(config-wlan)# end The WLAN service '1RUCCAT' has been updated and saved. Your changes have been saved. ruckus(config)# Make sure to do an "end" after the command for the command to take effect. The command does not require a reboot for it to take effect. Again, OFDM-only is only configurable per WLAN and not per AP Group. You can also do OFDM-only per AP by logging in to the AP and following the following sequence. Notice that we use wlan0 instead of 1RUCCAT for the configuration. wlan0 and wlan32 will implement the change in both 2 and 5 GHz for 1RUCCAT wlan: rkscli: get wlanlist name status type wlanID radioID bssid ssid -------------------------------------------------------------------------------------------------- wlan0 up AP wlan0 0 2c:e6:cc:02:16:b8 1RUCCAT wlan100 up MON wlan100 0 00:00:00:00:00:00 recovery-ssid down AP wlan102 0 00:00:00:00:00:00 island-0216B0 wlan32 up AP wlan32 1 2c:e6:cc:02:16:bc 1RUCCAT wlan101 down MON wlan101 1 00:00:00:00:00:00 recovery-ssid down AP wlan103 1 00:00:00:00:00:00 island-0216B0 OK rkscli: set ofdm-only wlan0 enable OK rkscli: set ofdm-only wlan0 disable OK Configuration on the WLANs in vSCG/vSZ : - On vSZ, this option is available both in GUI and CLI. - In the GUI of vSCG/vSZ, this can be configured under WLAN(Edit)> Advanced Options > OFDM-Only. ( This option should be enabled.) - In the CLI, this option can be configured using the below commands. Commands for vSZ-H : ------------------------------- RuckusTAC-Node2(config)# domain Test-D RuckusTAC-Node2(config-domain)# zone Test-Z RuckusTAC-Node2(config-domain-zone)# wlan test123 RuckusTAC-Node2(config-domain-zone-wlan)# ofdm-only The new mgmt-tx-rate: 6mbps RuckusTAC-Node2(config-domain-zone-wlan)# Commands for vSZ-E : ------------------------------- RuckusTAC-Node(config)# common-settings RuckusTAC-Node(config-common-settings)#wlan test123 RuckusTAC-Node(config-common-settings-wlan)# ofdm-only The new mgmt-tx-rate: 6mbps RuckusTAC-Node(config-domain-zone-wlan)#

This document explains the difference between ofdm-only and 11n only from a configuration perspective both on ZD and vSCG

2020-08-18T03:46:17-0700 2022-07-06T23:04:58-0700 https://support.ruckuswireless.com/articles/000003360 2020-09-20T22:27:10-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1601 knowledge_article_1601 2014-09-08T00:40:10-0700 000003360 Validated (External) Public Zonedirector;Spot lbs;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, SPoT LBS What should I check if the APs are not sending out client location data to the LBS? In general, Ruckus recommends using firmware versions 9.8.2 or above for setups that need LBS services.

Prerequisites for LBS to work and what can cause location details to be absent on the LBS.

2020-09-20T22:27:10-0700 2022-07-06T22:55:22-0700 https://support.ruckuswireless.com/articles/000001829 2014-01-11T14:08:35-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_254 knowledge_article_254 2013-03-15T10:10:40-0700 000001829 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation Installation, ZoneDirector How much Heat Dissipation occurs in ZD1100 per hour Heat Dissipation: (The calculation is Watts * 3.414 because 1Watt=3.414BTU/hr) For ZoneDirector 1100 :: 5 watts * 3.414 = 17.07 BTU/hr where BTU stands for British Thermal Unit

2014-01-11T14:08:35-0800 2022-07-06T21:41:27-0700 https://support.ruckuswireless.com/articles/000012281 2022-06-30T19:43:09-0700 monthly 0.8 admin,premium knowledge_article_4851 knowledge_article_4851 2022-06-30T19:43:09-0700 000012281 Validated (External) Premium Vriot Performance;Configuration;Known issues and workarounds Performance, Configuration, Known Issues and Workarounds, vRIoT Why does my valid certificate fails on vRIOT with error "please provide valid certificate" There was a issue with the encoding of the key file causing the failure only with vRIOT, once we corrected it the Certificate upload was success. Below is the process followed : 1) The output from openssl openssl rsa -in out.key -modulus -noout -inform pem unable to load Private Key 139622049404224:error:0909006C:PEM routines:get_name:no start line:../crypto/pem/pem_lib.c:745:Expecting: ANY PRIVATE KEY 2) The private key had UTF-8 Unicode (with BOM) text encoding <pre> <code>$file test.key test.key: UTF-8 Unicode (with BOM) text</code></pre> 3) After converting the encoding of the private.key to UTF-8 saw some unwanted characters present before the key : <code>cat out.key ï»¿-----BEGIN RSA PRIVATE KEY----- MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC4+WXwwAodpNl+ 30ue1/KalrMgG2nCzGr2o2UHSpyykq811cp/rT8YaW5Grc2QYpmkXKzOYUiCyrrR</code> <code>DACvNuVQgPb7ZKBo7dLkw7mCr4kUO1bLFnrCyRG5aaAa0y88MG44GKsivxX3+yEM UBPI9dxItvt5Z9TZJOkCkxiMMhsR1/HNAtSI4dLmeYM44AjT1qcFqXNIMEuBy28i Bc/snQSrbBKUdt0yRWD6HYH35S22o8LXYQ11RF9NBuM9iaD</code> <pre> </pre> 4) Once removed the unwanted characters we are able to load the certificate and find the modulus for it openssl rsa -in out.key -modulus -noout Modulus=B8F965F0C00A1DA4D97EDF4B9ED7F29A96B3201B69C2CC6AF6A365074A9CB292AF35D5CA7FAD3F18696E46ADCD906299A45CACCE614882CABAD10C00AF36E55080F6FB64A068EDD2E4C3B9 <img alt="User-added image" height="310" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000YdgQ&feoid=00N50000002Cf3M&refid=0EM2J000003A7Tq" width="638"></img>

Customer is trying to upload the cert on vRIOT but it is failing with error "please provide valid certificate"

2022-06-30T19:43:09-0700 2022-07-05T14:00:10-0700 https://support.ruckuswireless.com/articles/000003447 2019-07-07T21:39:55-0700 monthly 0.8 admin,premium knowledge_article_2278 knowledge_article_2278 2014-09-25T10:34:53-0700 000003447 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SmartCell Gateway SCG/vSCG: How to configure DHCP Option 43 on Mikrotik 1. Convert the IP address to Hex using this tool (http://shimi.net/services/opt43/). For example: 192.168.69.69 (selecting "Ruckus Wireless (SCG)" will translate to 3139322e3136382e36392e3639 (hex) <div> option 43 static prefix for vendor Ruckus Wireless (SCG): 06 (hex)</div> <div> </div> <div>Concatenated IP string is: 192.168.69.69 (length: 13/0x0d chars) </div> <div>Which translates to... 3139322e3136382e36392e3639 (hex) </div> <div> </div> <div>Resulting IOS command would therefore be:</div> <div>option 43 hex 060d3139322e3136382e36392e3639</div> <div> On a Mikrotik router, do the following: <div>MikroTik ROS v6.18 </div> <div>IP>DHCP Server>Options: </div> <div>Add Option> </div> <div>Name: "option43" </div> <div>Code: 43 </div> <div>Value: 0x060d3139322e3136382e36392e3639</div> </div> Done!

Mikrotik: How to configure DHCP Option 43 on Mikrotik

2019-07-07T21:39:55-0700 2022-07-05T06:19:53-0700 https://support.ruckuswireless.com/articles/000008829 2022-06-29T17:24:17-0700 monthly 0.8 admin,premium knowledge_article_4848 knowledge_article_4848 2019-01-31T23:56:44-0800 000008829 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation;Troubleshooting Configuration, Firmware, Installation, Troubleshooting, SmartCell Gateway AP not connecting to SZ100/vSZ-E even after upgrading to right firmware? Starting in 3.5 SZ100/vSZ-E, "Default zone" was introduced and manually upgrade to the correct firmware is needed for the "Default zone" (it is different than "staging zone" which does not have firmware to configure). Multi-Zone Support in SZ100/vSZ-E Prior to 3.5, SCG200 and vSZ-H had a system hierarchy with domains, subdomains, and zones. In 3.5, we’re introducing zones to the SZ100 and vSZ-E platforms. Zones allow administrators to segment the network into distinct operational groups. This allows for separation of profiles like WLANs and policies. Admins can also upgrade AP zones independently from the controller software and utilize AP releases going back N-2 releases. Zones can operate in different firmware versions and with different country codes. steps in upgrading default zone: 1. go to access point tab 2.just select the default zone, then go to 'More' option and select Change AP firmware (attached file for picture) <img alt="User-added image" height="351" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Ydg1&feoid=00N50000002Cf3M&refid=0EM2J000000m7SD" width="500"></img>

AP not connecting to SZ100/vSZ-E even after upgrading to right firmware?

2022-06-29T17:24:17-0700 2022-06-30T12:00:12-0700 https://support.ruckuswireless.com/articles/000003275 2021-05-06T00:08:42-0700 monthly 0.8 admin,premium knowledge_article_2213 knowledge_article_2213 2014-08-07T16:28:41-0700 000003275 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Installation;Troubleshooting;Known issues and workarounds Performance, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway What could cause my network to become un-usable for an hour or so each day or APs lose heartbeats? Drivers on the Intel I217 LM nic adapter need to be updated to latest level. ie. Installed updated driver for HP web site for EliteOne 800, dated 14/01/2014, version 12.10.30.X

Wireless network becomes unusable and AP's lose heartbeats due to IPv6 multicast listener reports

2021-05-06T00:08:42-0700 2022-06-30T09:14:04-0700 https://support.ruckuswireless.com/articles/000003399 2022-06-17T16:00:28-0700 monthly 0.8 admin,premium knowledge_article_4845 knowledge_article_4845 2014-09-18T17:47:36-0700 000003399 Validated (External) Premium Unleashed;Zonedirector;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, Unleashed, ZoneDirector What are the Gmail SMTP configuration to use with Zone Director and Unelasehed platforms? Gmail SMTP configuration example <pre class="ckeditor_codeblock" style="margin-left: 40px;"> Gmail SMTP serveraddress:smtp.gmail.com Gmail SMTP user name: Your full Gmail address (e.g. example@gmail.com) Gmail SMTP password: Your Gmail password Gmail SMTP port (TLS): 587 or 465 Gmail SMTP TLS/SSL required: yes</pre> Email Server Configuration Example <div> <div style="margin-left: 40px;"><img alt="User-added image" height="207" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000YdeZ&feoid=00N50000002Cf3M&refid=0EM50000000LYgz" width="500"></img></div> <div style="margin-left: 40px;">** As of 5/30/2022 Google "allow less secure App have been deprecated". Please use App passwords to generate the SMTP authentication password.</div> To configure APP password <pre class="ckeditor_codeblock" style="margin-left: 40px;"> 1. Go to https://myaccount.google.com/security 2. Scroll down to Signing in to Google 3. Ensure 2-step verification is “On” 4. If two step verification is not “On” we will not be able to setup App passwords 5. Click App Passwords 6. Gooogle prompts to enter your account password 7. Select Mail > Select Other (Custom) > Enter a name for the custom device > click Generate 8. A custom 16 character password is generated for use with the unleashed AP gmail smtp auth password</pre> Other considerations <div style="margin-left: 40px;">It is also possible that Gmail blocked sign-in attempts made through the controller. In such case, Google will send an email to your Gmail account. Please check your email (subject will be something like "Suspicious sign in prevented") and enable access from "Less secure apps" as the email indicates. You may get a text message as well if you have registered your phone number and verified it with Google. In general, ensure DNS server IP is configured on the controller so SMTP hostname can be resolved. Ensure outgoing SMTP requests from the controller aren't blocked although it will be very uncommon.</div> </div>

Gmail SMTP auth configuration for use with Zone Director and Unleashed platforms

2022-06-17T16:00:28-0700 2022-06-24T02:00:10-0700 https://support.ruckuswireless.com/articles/000001845 2021-07-27T01:48:01-0700 monthly 0.8 admin,premium knowledge_article_1746 knowledge_article_1746 2013-03-15T09:28:33-0700 000001845 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware Firmware, ZoneDirector What is the recommended firmware and required path to upgrade the ZD to latest version? Recommended firmware for ZD Models : We can find the recommended firmware for any ZD Model on our Ruckus Support site. - Start by logging into <a href="https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com</a> - Click PRODUCTS, and choose ZoneDirector (ZD) for ZD1200 or ZD300 or EOL Ruckus Products (for ZD1000/1100/5000 respectively) - Choose your ZoneDirector product. On the ZD Product page, is a Recommended Firmware field, with recommended FW version for that ZD model. - Click on Documents tab, to find Release Notes for the ZD version recommended. - Click on Downloads tab, to find ZD Software Release image recommended. > Download Release Notes and read them - confirm all currently connected AP models are still supported, Download firmware image and plan ZD upgrade. Refer to the following upgrade paths for Zone Director from any lower version to the latest/finally available version. Upgrade Path for ZD1200 / ZD3000 : ZD Model : ZD1200 Upgrade Path: 9.9.0.0.212 >> 9.10.0.0.218 >> 9.13.3.0.164 >> 10.1.2.0.210 >>10.2.1.0.75>>10.3.1.0.45>>10.4.0.0.98>>10.4.1.0.272 ZD Model : ZD3000 Upgrade Path: 8.1.1.0.12 >> 8.2.2.07 >> 9.1.2.0.8 >> 9.3.4.0.15 >> 9.4.3.0.22 >> 9.5.3.0.44 >> 9.6.2.0.13 >> 9.8.2.0.15 >> 9.9.0.0.212 >> 9.10.0.0.218 >> 9.13.3.0.164 >> 10.1.2.0.210 >> 10.2.1.0.75 Upgrade Path for ZD1000 / ZD1100 / ZD5000 : ZD Model : ZD1000 Upgrade Path: 3.0.5.0.160 >> 6.0.3.0.19 >> 7.1.0.0.63 >> 8.2.2.0.7 >> 9.1.2.0.8 >> 9.3.4.0.17 or 9.3.4.0.21 (9.3 MR4 Refresh2 for ZD1000) Note: 9.3.4.0.21 is the last planned release for ZD1000. ZD Model : ZD1100 Upgrade Path: 9.1.2.0.8 >> 9.3.4.0.15 >> 9.4.3.0.22 >> 9.5.3.0.44 >> 9.6.2.0.13 >> 9.8.2.0.15 >> 9.9.0.0.212 >> 9.10.0.0.218 >> 9.10.2.0.73 (9.10 MR2 Refresh5 for ZD1100) ZD Model : ZD5000 Upgrade Path: 9.3.4.0.15 >> 9.4.3.0.22 >> 9.5.3.0.44 >> 9.6.2.0.13 >> 9.8.2.0.15 >> 9.9.0.0.212 >> 9.10.0.0.218 >> 9.13.3.0.164 >> 10.0.1.0.83 (10.0 MR1 Refresh4 for ZD5000) Note: If you do not have a valid Support Entitlement, you may not be able to download firmware or to upgrade the controller. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

Would like to know the Firmware Upgrade path for ZoneDirector to the latest version.

2021-07-27T01:48:01-0700 2022-06-23T03:15:36-0700 https://support.ruckuswireless.com/articles/000004760 2015-06-24T11:39:57-0700 monthly 0.8 admin,premium knowledge_article_1969 knowledge_article_1969 2015-06-24T11:39:57-0700 000004760 Validated (External) Premium Virtual smartcell gateway Known issues and workarounds Known Issues and Workarounds, virtual SmartCell Gateway Can we use LDAP/Active directory as authentication server for Administrative login of vSCG We can use only Radius and Tacacs as authentication servers to authenticate the administrators on vSCG server. <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 1286px; font-size: 12px;"><tbody><tr><td colspan="1" rowspan="1" style=""> <div class="sfdc_richtext" id="j_id0:j_id8:j_id9:j_id253:j_id255:7:j_id256:j_id257j_id0:j_id8:j_id9:j_id253:j_id255:7:j_id256:j_id257_00N50000002Cf3M_div">LDAP and AD server is not yet supported in vSCG 3.0.3 firmware version.</div> </td></tr></tbody></table>

2015-06-24T11:39:57-0700 2022-06-16T07:34:24-0700 https://support.ruckuswireless.com/articles/000012265 2022-06-13T22:42:44-0700 monthly 0.8 admin,premium knowledge_article_4843 knowledge_article_4843 2022-06-13T22:42:44-0700 000012265 Validated (External) Premium Unleashed;Zoneflex indoor;Zoneflex outdoor;Mediaflex;Smartcell ap;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;MediaFlex 2501;MediaFlex 2900;MediaFlex 2811;MediaFlex 5811;MediaFlex 7811;MediaFlex 7211 Performance;Known issues and workarounds Performance, Known Issues and Workarounds, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor, MediaFlex, SmartCell AP Why the access point sends 'eth1!88bc' as port descrition in LLDP information? Any tentative fix for this behavior is unknown. There is no resolution and the behavior should be accepted per design.

Access Points with 2 ethernet ports will send 'eth1!88bc' as the port description in LLDP information

2022-06-13T22:42:44-0700 2022-06-14T12:00:10-0700 https://support.ruckuswireless.com/articles/000004106 2020-09-23T11:50:53-0700 monthly 0.8 admin,premium knowledge_article_4416 knowledge_article_4416 2015-03-01T18:48:28-0800 000004106 Validated (External) Premium Scg200;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Installation;System network management Configuration, Installation, System Network Management, SCG200, virtual SmartCell Gateway, SZ100 What are the scalability and specifications for Ruckus vSZ? Please find below table to Scalability and Specs <table border="0" cellpadding="0" cellspacing="0" width="919"><tbody><tr height="44"><td colspan="1" rowspan="2" height="132" width="134">Table</td><td colspan="1" rowspan="2" width="117">Object Hierarchy Level</td><td colspan="1" rowspan="1" width="64">Max entries</td><td colspan="1" rowspan="1" width="239">Max entries</td><td colspan="1" rowspan="2" width="365">Comment</td></tr><tr height="88"><td colspan="1" rowspan="1" height="88" width="64">SCG 200/VSCG Carrier</td><td colspan="1" rowspan="1" width="239">SZ100/VSCG enterprise</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="134">Partner Domain</td><td colspan="1" rowspan="1" width="117">System</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239">-</td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="22"><td colspan="1" rowspan="2" height="44" width="134">Domain</td><td colspan="1" rowspan="2" width="117">System/Domain</td><td colspan="1" rowspan="2" width="64">2048</td><td colspan="1" rowspan="2" width="239">1</td><td colspan="1" rowspan="1" width="365">Carrier : 2048</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Enterprise : 1, Only default domain</td></tr><tr height="22"><td colspan="1" rowspan="2" height="66" width="134">Zones under a domain</td><td colspan="1" rowspan="2" width="117">System/Domain</td><td colspan="1" rowspan="2" width="64">2048</td><td colspan="1" rowspan="2" width="239">1024</td><td colspan="1" rowspan="1" width="365">Carrier : 2048</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="365">Enterprise : 1024 since 3.5, but only default zone exists prior to 3.5</td></tr><tr height="22"><td colspan="1" rowspan="2" height="44" width="134">MVNO</td><td colspan="1" rowspan="2" width="117">System/Domain</td><td colspan="1" rowspan="2" width="64">16</td><td colspan="1" rowspan="2" width="239">1</td><td colspan="1" rowspan="1" width="365">Carrier : 16 MVNO per system/cluster</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Enterprise : 1, only super tenant</td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919"> </td></tr><tr height="66"><td colspan="1" rowspan="2" height="110" width="134">Zone</td><td colspan="1" rowspan="2" width="117">System/Domain</td><td colspan="1" rowspan="2" width="64">10000</td><td colspan="1" rowspan="2" width="239">1024</td><td colspan="1" rowspan="1" width="365">Carrier : 10000, Number of Zones per system/cluster, including staging zone, if not count staging 9999</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="365">Enterprise : 1024 since 3.5, but only default zone exists prior to 3.5</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Admin Roles per Domain</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64">2048</td><td colspan="1" rowspan="1" width="239">2048</td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Local Administrators</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64">20000</td><td colspan="1" rowspan="1" width="239">20000</td><td colspan="1" rowspan="1" width="365">Not tested</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">AP Registration Rules</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64">2,047</td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Application Rules per Policy</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64">128</td><td colspan="1" rowspan="1" width="239">128</td><td colspan="1" rowspan="1" width="365">per zone</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">SCI Instances</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">NonProxyAAA Profiles</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64">32</td><td colspan="1" rowspan="1" width="239">32</td><td colspan="1" rowspan="1" width="365">SCG-200 and SZ-100 : Tested with 32 Radius Profile</td></tr><tr height="66"><td colspan="1" rowspan="1" height="66" width="134">NonProxy Accounting Profiles</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64">32</td><td colspan="1" rowspan="1" width="239">32</td><td colspan="1" rowspan="1" width="365">SCG-200 and SZ-100 : Tested with 32 Accounting Profile</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">ProxyAAA Profiles</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">RealmBased ProxyAAA</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">32</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">32 Authentication Services - Tested</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Proxy Accounting Profile</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="134">Maps</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="110"><td colspan="1" rowspan="3" height="154" width="134">Hotspot Profile</td><td colspan="1" rowspan="3" width="117">Zone</td><td colspan="1" rowspan="3" width="64">32</td><td colspan="1" rowspan="3" width="239">32</td><td colspan="1" rowspan="1" width="365">Number of HS profiles per zone; Although only up to 6 WISPr supported on AP end, the excessive won't be pushed to AP, the associated WLAN is provisioned as OPEN on AP. The side effect is considered limitation to the current system.</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Carrier : Per Zone</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Enterprise : 32 N.T</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="134">WeChat Profiles</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">User Roles</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">L3/4 Rules per UTP</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64">128</td><td colspan="1" rowspan="1" width="239">128</td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">URL Filtering Profiles</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="66"><td colspan="1" rowspan="1" height="66" width="134">Blacklist URLs per URL Filtering Policy</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="66"><td colspan="1" rowspan="1" height="66" width="134">Whitelist URLs per URL Filtering Policy</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="134">OS Policies</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64">1000</td><td colspan="1" rowspan="1" width="239">1000</td><td colspan="1" rowspan="1" width="365">Global</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">VLANs Per VLAN Pool</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64">16</td><td colspan="1" rowspan="1" width="239">16</td><td colspan="1" rowspan="1" width="365">Tested with 16 VLAN Tag</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Precedence Policies</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="22"><td colspan="1" rowspan="3" height="66" width="134">L2 Access Control</td><td colspan="1" rowspan="3" width="117">Zone</td><td colspan="1" rowspan="3" width="64">1000</td><td colspan="1" rowspan="3" width="239">1000</td><td colspan="1" rowspan="1" width="365">Global</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">number of profile: 32</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">number of the rules in one profile: 128</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">MAC Addresses Per L2 ACL</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64">128</td><td colspan="1" rowspan="1" width="239">128</td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Bonjour Gateway Rules per Policy</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Fencing Rules per Policy</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="66"><td colspan="1" rowspan="1" height="66" width="134">Wired Devices per Fenced Service per AP</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="132"><td colspan="1" rowspan="1" height="132" width="134">Custom mDNS Strings per Fencing Service (5.0 feature)</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64">3</td><td colspan="1" rowspan="1" width="239">3</td><td colspan="1" rowspan="1" width="365">This feature allows the admin to specify a new mDNS string to use for a Bonjour service that is predefined in our system. A use case is that AppleTV adds some new service string and thus fencing doesn't work. Administrators can then just add the new string to existing rules.</td></tr><tr height="66"><td colspan="1" rowspan="1" height="66" width="134">WIPS Rogue Classification Policies</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="66"><td colspan="1" rowspan="1" height="66" width="134">Rogue Classification Rules per Policy</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="747"><td colspan="1" rowspan="2" height="791" width="134">Dynamic PSKs (DPSK) - Bound</td><td colspan="1" rowspan="2" width="117">Zone</td><td colspan="1" rowspan="1" width="64">50,000 (system)</td><td colspan="1" rowspan="1" width="239">25,000 (system)</td><td colspan="1" rowspan="2" width="365">Bound DPSK = A DPSK that is tied to a specific MAC address. This makes DPSK lookup much more efficient. Bound DPSKs are stored on the SZ/SCG. The last-used 1,000 DPSKs are cached on the AP for quick retrieval and survivable functionality.</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="64">25,000 (zone)</td><td colspan="1" rowspan="1" width="239">25,000 (zone)</td></tr><tr height="66"><td colspan="1" rowspan="4" height="176" width="134">Dynamic PSKs (DPSK) - Unbound</td><td colspan="1" rowspan="4" width="117">Zone</td><td colspan="1" rowspan="4" width="64">500</td><td colspan="1" rowspan="4" width="239">500</td><td colspan="1" rowspan="1" width="365">Unbound DPSK = DPSK has been created, but is not yet bound to a specific MAC address. Unbound DPSKs are stored on the AP.</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">In 3.5, 256 max unbound DPSKs per zone.</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="365">In 3.6, unbound DPSK pool is shared with group DPSK pool, up to a max of 320 total per zone.</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="365">In 5.1, unbound DPSK pool is shared with group DPSK pool, it increases to 500 per zone.</td></tr><tr height="44"><td colspan="1" rowspan="4" height="154" width="134">Dynamic PSKs (Group)</td><td colspan="1" rowspan="4" width="117">Zone</td><td colspan="1" rowspan="4" width="64">500</td><td colspan="1" rowspan="4" width="239">500</td><td colspan="1" rowspan="1" width="365">Group DPSK = DPSK can be shared by many devices.</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">In 3.5, 64 max group DPSKs per zone.</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="365">In 3.6, group DPSK pool is shared with unbound DPSK pool, up to a max of 320 total per zone</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="365">In 5.1, unbound DPSK pool is shared with group DPSK pool, it increases to 500 per zone.</td></tr><tr height="66"><td colspan="1" rowspan="1" height="66" width="134">Bound Dynamic PSKs Cached on APs</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64">1,000</td><td colspan="1" rowspan="1" width="239">1,000</td><td colspan="1" rowspan="1" width="365">In SZ/SCG architecture, APs store the last-used DPSKs so the user can still authenticate if SZ is unreachable.</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Ethernet Port Profiles</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">DSCP (DiffServ) profile</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64">32</td><td colspan="1" rowspan="1" width="239">32</td><td colspan="1" rowspan="1" width="365">Tested with 32 DiffServ Profile</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">SNMPv2 Agent</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">SNMPv3 Agent</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">vSZ-D Zone Affinity Rules</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">CALEA UE MAC Entries</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="134">DHCP Pools (AP)</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64">8</td><td colspan="1" rowspan="1" width="239">8</td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">DHCP Profiles (vSZ-D)</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64">10,000</td><td colspan="1" rowspan="1" width="239">10,000</td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">DHCP Option43 Space (vSZ-D)</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="66"><td colspan="1" rowspan="1" height="66" width="134">DHCP Option43 Suboptions(vSZ-D)</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="88"><td colspan="1" rowspan="1" height="88" width="134">DHCP Profile Hosts (Reservations) (vSZ-D)</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">NAT Profiles (vSZ-D)</td><td colspan="1" rowspan="1" width="117">System/Domain</td><td colspan="1" rowspan="1" width="64"> </td><td colspan="1" rowspan="1" width="239"> </td><td colspan="1" rowspan="1" width="365"> </td></tr><tr height="88"><td colspan="1" rowspan="1" height="88" width="134">* Radius in a Zone</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">32 * 10000 = 320000</td><td colspan="1" rowspan="1" width="239">32 * 1024 = 32768</td><td colspan="1" rowspan="1" width="365">Per Zone: 32</td></tr><tr height="88"><td colspan="1" rowspan="1" height="88" width="134">* Accounting in a Zone</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">32 * 10000 = 320000</td><td colspan="1" rowspan="1" width="239">32 * 1024 = 32768</td><td colspan="1" rowspan="1" width="365">Per Zone: 32</td></tr><tr height="88"><td colspan="1" rowspan="1" height="88" width="134">WLAN Groups</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64">2048 * 10000 = 20480000</td><td colspan="1" rowspan="1" width="239">2048 * 1024 = 2097152</td><td colspan="1" rowspan="1" width="365">Per Zone: 2048</td></tr><tr height="88"><td colspan="1" rowspan="1" height="88" width="134">AP Groups</td><td colspan="1" rowspan="1" width="117">Zone</td><td colspan="1" rowspan="1" width="64">513 * 10000 = 513000</td><td colspan="1" rowspan="1" width="239">513 * 1024 = 525312</td><td colspan="1" rowspan="1" width="365">Per Zone: 513 (including a hidden default ap-group), defined in APGroupService.UPPER_APGROUP_LIMIT_PER_ZONE</td></tr><tr height="22"><td colspan="1" rowspan="2" height="44" width="134">* WLANs</td><td colspan="1" rowspan="2" width="117">Zone</td><td colspan="1" rowspan="2" width="64">65534 / 2048 </td><td colspan="1" rowspan="2" width="239">2048</td><td colspan="1" rowspan="1" width="365">Carrier : Global/Per Zone: 2048</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Enterprise : 2048</td></tr><tr height="22"><td colspan="1" rowspan="2" height="44" width="134">Guest Access</td><td colspan="1" rowspan="2" width="117">Zone</td><td colspan="1" rowspan="2" width="64">10000 / 32</td><td colspan="1" rowspan="2" width="239">2048 / 32</td><td colspan="1" rowspan="1" width="365">Carrier : Global/Per Zone: 32</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Enterprise 32</td></tr><tr height="22"><td colspan="1" rowspan="2" height="44" width="134">Web Authentication</td><td colspan="1" rowspan="2" width="117">Zone</td><td colspan="1" rowspan="2" width="64">10000 / 32</td><td colspan="1" rowspan="2" width="239">2048 / 32</td><td colspan="1" rowspan="1" width="365">Carrier :Global/Per Zone: 32</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Enterprise : 32</td></tr><tr height="22"><td colspan="1" rowspan="2" height="44" width="134">* Bonjour gateway policy</td><td colspan="1" rowspan="2" width="117">Zone</td><td colspan="1" rowspan="2" width="64">32 * 10000 = 320000</td><td colspan="1" rowspan="2" width="239">32</td><td colspan="1" rowspan="1" width="365">Carrier : Per Zone: 32</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Enterprise : 32</td></tr><tr height="110"><td colspan="1" rowspan="3" height="154" width="134">* Hotspot Profile</td><td colspan="1" rowspan="3" width="117"> </td><td colspan="1" rowspan="3" width="64">32 * 10000 = 320000</td><td colspan="1" rowspan="3" width="239">32</td><td colspan="1" rowspan="1" width="365">Number of HS profiles per zone; Although only up to 6 WISPr supported on AP end, the excessive won't be pushed to AP, the associated WLAN is provisioned as OPEN on AP. The side effect is considered limitation to the current system.</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Carrier : Per Zone: 32</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Enterprise : 32</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Hotspot profile - Walled garden</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">128</td><td colspan="1" rowspan="1" width="239">128</td><td colspan="1" rowspan="1" width="365">Per hotspot profile</td></tr><tr height="22"><td colspan="1" rowspan="3" height="66" width="134">Hotspot 2.0 op</td><td colspan="1" rowspan="3" width="117"> </td><td colspan="1" rowspan="3" width="64">32 * 10000 = 320000</td><td colspan="1" rowspan="3" width="239">32</td><td colspan="1" rowspan="1" width="365">Number of HS 2.0 operator profiles per zone.</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Carrier : Per Zone: 32</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Enterprise : 32</td></tr><tr height="22"><td colspan="1" rowspan="3" height="66" width="134">Hotspot 2.0 sp</td><td colspan="1" rowspan="3" width="117"> </td><td colspan="1" rowspan="3" width="64">32 * 10000 = 320000</td><td colspan="1" rowspan="3" width="239">32</td><td colspan="1" rowspan="1" width="365">Number of HS 2.0 service profiles per zone.</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Carrier : Per Zone: 32</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Enterprise : 32</td></tr><tr height="22"><td colspan="1" rowspan="2" height="44" width="134">Wlan Scheduler</td><td colspan="1" rowspan="2" width="117"> </td><td colspan="1" rowspan="2" width="64">10000 / 32</td><td colspan="1" rowspan="2" width="239">2048 / 32</td><td colspan="1" rowspan="1" width="365">Carrier : Global/Per Zone:32</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="365">Enterprise : 32</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Event Threshold</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">100 / 100</td><td colspan="1" rowspan="1" width="239">100/100</td><td colspan="1" rowspan="1" width="365">Global</td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919"> </td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919">TTG+PDG Forwarding Profile</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">APN Table</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">32</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">Max number of APN’s per TTG+PDG profile, route type can be GTPv1, GTPv2, PDG</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Realm to Default APN</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">32</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">Max Realm to default APN configuration</td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919">Authentication Profile</td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919">Accounting Profile</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Number of Node Affinity Profile</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">128</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">Max node affinity profile per SCG cluster.</td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919">GGSN Services</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="134">GGSN Services</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">1</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">One global GGSN Service</td></tr><tr height="88"><td colspan="1" rowspan="1" height="88" width="134">Domain Name Table</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">32</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">Domain name and IP address of GGSN /PGW, Static APN resolution. 32 number as d-balde supports max 32 TTG CN tunnels, (GGSN and/or PGW)</td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919">CGF Services</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="134">CGF Services</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">32</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">Max CGF services</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="134">CGF Servers</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">10</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">Max 10 CGF servers per CGF service (Pool)</td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919">HLR Services</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="134">HLR Services</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">20</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">Max HLR services</td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919">Mixed mode forwarding profile</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">APN Table</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">32</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">Max number of APN’s per mixed profile, route types Bridge, L3oGRE</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">Realm to Default APN</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">32</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">Max Realm to default APN configuration</td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919">3rd Party AP</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">AN Q-in-Q VLAN Tags</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">64</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">S-VLAN range, C-VLAN range</td></tr><tr height="45"><td colspan="1" rowspan="1" height="45" width="134">AP’s IP Address Range</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">64</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">Max number of IP range, 3rd Party AP’s IP range configuration</td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919">Control Blade</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="134">static route</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">64</td><td colspan="1" rowspan="1" width="239">64</td><td colspan="1" rowspan="1" width="365">Maximum allowable for each blade</td></tr><tr height="88"><td colspan="1" rowspan="1" height="88" width="134">virtual network interface (user defined interface)</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">17</td><td colspan="1" rowspan="1" width="239">17</td><td colspan="1" rowspan="1" width="365">Maximum allowable for each blade with one as hotspot service UDI, the other 16 is VNI</td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919">DSCP</td></tr><tr height="44"><td colspan="1" rowspan="1" height="44" width="134">DSCP Profile</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">10000 / 32</td><td colspan="1" rowspan="1" width="239">2048 / 32</td><td colspan="1" rowspan="1" width="365">Maximum allowable per zone: 32</td></tr><tr height="22"><td colspan="5" rowspan="1" height="22" width="919">Third Party WLAN</td></tr><tr height="22"><td colspan="1" rowspan="1" height="22" width="134">ThirdPartyWlan</td><td colspan="1" rowspan="1" width="117"> </td><td colspan="1" rowspan="1" width="64">32</td><td colspan="1" rowspan="1" width="239">0</td><td colspan="1" rowspan="1" width="365">Maximum allowable per zone: 32</td></tr></tbody></table>

Scalability and specifications for vSCG / SCG - Carrier and enterprise edition.

2020-09-23T11:50:53-0700 2022-06-06T14:44:06-0700 https://support.ruckuswireless.com/articles/000011482 2021-03-18T01:27:45-0700 monthly 0.8 admin,premium knowledge_article_4610 knowledge_article_4610 2021-03-18T01:27:45-0700 000011482 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Security Configuration, Security, Cloudpath How to disable TLS 1.0/1.1 on CloudPath 1. Login to the CloudPath GUI 2. Go to Administration Tab 3. Click System Services 4. Edit the Web Server (using the pencil icon on the left hand corner) as shown below: <img alt="User-added image" height="209" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3sP&feoid=00N50000002Cf3M&refid=0EM2J00000245Gq" width="500"></img> 5. Click on "Modern Clients Only" (As shown below): <img alt="User-added image" height="207" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3sP&feoid=00N50000002Cf3M&refid=0EM2J00000245H0" width="500"></img> 6. Click Save. Note: As of yet we do not support TLS Ver. 1.3 on CloudPath

By default CloudPath uses TLS 1.0/1.1, we can disable it, to use TLS 1.2

2021-03-18T01:27:45-0700 2022-06-06T13:06:38-0700 https://support.ruckuswireless.com/articles/000009727 2022-06-03T09:17:47-0700 monthly 0.8 admin,premium knowledge_article_4836 knowledge_article_4836 2019-09-06T00:57:00-0700 000009727 Validated (External) Premium Virtual smartcell gateway Configuration;Installation Configuration, Installation, virtual SmartCell Gateway How can I check the actual RADIUS authentication Server assigned to multiple WLAN's/SSID's. Using API calls the same steps can be done, working from the AP Zone, WLAN, Authentication profile and then finally the RADIUS server configured. This process can be scripted to gather the data automatically. (note - API scripting is beyond the scope of Ruckus Networks support): <h2>Reference: SmartZone 3.6.2 (MR2) Public API Reference Guide (vSZ-H)</h2> https://support.ruckuswireless.com/documents/2429-smartzone-3-6-2-mr2-public-api-reference-guide-vsz-h In each case the "ID" field is needed in the subsequent command to reference the particular Zone, WLAN, Authentication Profile and then Authentication Server profile: Note:(customer details replaced with xxxx: Login: <a href="https://66.61.206.202:8443/wsg/api/public/v6_1/session" style="color: blue; text-decoration: underline;" target="_blank">https://xxx.xxx.xxx.xxx:8443/wsg/api/public/v6_1/session</a> { "username": "admin", "password": "xxxxxxxxxxx" } Verify Session: <a href="https://66.61.206.202:8443/wsg/api/public/v6_1/session" style="color: blue; text-decoration: underline;" target="_blank">https://xxx.xxx.xxx.xxxx:8443/wsg/api/public/v6_1/session</a> {"cpId":"c3f35171-9acc-49c1-9c69-fde7ccc750c6","domainId":"8b2081d5-9662-40d9-a3db-2a3cf4dde3f7","adminRoleId":"69962d35-9447-41a1-aff5-facf1e85c674","mvnoId":"839f87c6-d116-497e-afce-aa8157abd30c","adminId":"92cc1b65-c3cd-4f26-8c9b-3e7b055c7c25","clientIp":"216.234.144.41","apiVersions":["NONE","v1_0","v2_0","v2_1","v2_2","v3_0","v3_1","v4_0","v5_0","v5_1","v6_0","v6_1"],"timeZoneUtcOffset":240} Get list of AP Zones <a href="https://66.61.206.202:8443/wsg/api/public/v6_1/rkszones" style="color: blue; text-decoration: underline;" target="_blank">https://xxx.xxx.xxx.xxx:8443/wsg/api/public/v6_1/rkszones</a> <pre> {"totalCount":15,"hasMore":false,"firstIndex":0,"list":[{"id":"b4187899-38ae-4ace-8e40-0bc444455156","name":"Staging Zone"},{"id":"34707878-69fb-4a8d-a6c4-b3b426758f6b","name":"xx xx Resort"},{"id":"f7a0a968-7632-4959-926e-0fdfb51a6981","name":"xx Apparel - xxxx"},{"id":"95bb83fe-2b93-4c3d-8d90-a1ef3a2cb811","name":"xxxxxx Village"},{"id":"d855bb84-e108-4e27-8fba-47adbc900a76","name":"xxxxxxx Commons"},{"id":"d4fd1be6-2e92-4dd0-a4d7-28f8e449e249","name":"xxxxx Trails"},{"id":"76974947-2c6a-467a-9952-190503ccbf07","name":"xxxxxxxxxxxxL"},{"id":xxxxxxxxxxxxx , FL"},{"id":"d97ac6c5-5dfc-4962-862c-c5b6f34ef939","name":"43 ABS/Building 315"},{"id":"43a62b68-457f-4c81-a5de-366fed55e838","name":"Spencer Gifts Warehouse"},{"id":"bd207f69-9dbf-40b9-bc9d-cc923cb78723","name":"xxxxxxx Apartments"},{"id":"cbfb5406-795f-429a-9500-dce261382e55","name":"xxxxxxx"},{"id":"5a9fc0e5-6d60-4846-90aa-ad4630760c5d","name":"City xxxxxxxxxx"},{"id":"91bac095-4c87-4551-8166-b1feacfa909e","name":"xxxxxxxxxxxx"}]}</pre> Get list of WLAN's for Zone: <a href="https://66.61.206.202:8443/wsg/api/public/v6_1/rkszones/bd207f69-9dbf-40b9-bc9d-cc923cb78723/wlans" style="color: blue; text-decoration: underline;" target="_blank">https://xxx.xxx.xxx.xxx:8443/wsg/api/public/v6_1/rkszones/bd207f69-9dbf-40b9-bc9d-cc923cb78723/wlans</a> <pre> {"totalCount":2,"hasMore":false,"firstIndex":0,"list":[{"id":"590","mvnoId":"839f87c6-d116-497e-afce-aa8157abd30c","zoneId":"bd207f69-9dbf-40b9-bc9d-cc923cb78723","name":"xxxxx_Guest","ssid":"xxxx_Guest"},{"id":"588","mvnoId":"839f87c6-d116-497e-afce-aa8157abd30c","zoneId":"bd207f69-9dbf-40b9-bc9d-cc923cb78723","name":"xxxxx_Resident","ssid":"xxxxx_Resident"}]} Get Specific WLAN details: <a href="https://66.61.206.202:8443/wsg/api/public/v6_1/rkszones/bd207f69-9dbf-40b9-bc9d-cc923cb78723/wlans/588" style="color: blue; text-decoration: underline;" target="_blank">https://xxx.xxx.xxx.xxx:8443/wsg/api/public/v6_1/rkszones/bd207f69-9dbf-40b9-bc9d-cc923cb78723/wlans/588</a> </pre> <pre> {"id":"588","zoneId":"bd207f69-9dbf-40b9-bc9d-cc923cb78723","name":"xxxxxx_Resident","ssid":"xxxxxy_Resident","hessid":"","description":"Resident SSID","type":"Standard_Mac","bypassCNA":null,"accessTunnelType":"APLBO","coreTunnelProfile":null,"encryption":{"method":"WPA2","algorithm":"AES","mfp":"disabled","passphrase":"xxxxxxxxxxx","keyIndex":null,"keyInHex":null,"support80211rEnabled":false,"mobilityDomainId":null},"authServiceOrProfile":{"id":"16888160-b78c-11e9-8659-525400f54316","name":"xxxxxAuthProfile","throughController":true,"locationDeliveryEnabled":false,"realmBasedAuth":false,"authenticationOption":null},"operatorRealm":null,"macAuth":{"customizedPassword":"","macAuthMacFormat":"Default"},"accountingServiceOrProfile":{"id":"353ebfc2-b78c-11e9-8659-525400f54316","name":"xxxxxAcctProfile","throughController":true,"realmBasedAcct":false,"interimUpdateMin":5,"accountingDelayEnabled":false},"radiusOptions":{"nasIdType":"Customized","customizedNasId":"xxxxxx","nasRequestTimeoutSec":5,"nasMaxRetry":2,"nasReconnectPrimaryMin":5,"calledStaIdType":"WLAN_BSSID","nasIpType":"management","nasIpUserDefined":"","singleSessionIdAcctEnabled":false},"portalServiceProfile":null,"hotspot20Profile":null,"defaultUserTrafficProfile":{"id":"11a2e171-b798-11e9-8659-525400f54316","name":"100x100"},"l2ACL":null,"devicePolicy":null,"vlan":{"accessVlan":50,"aaaVlanOverride":true,"coreQinQEnabled":null,"coreSVlan":null,"vlanPooling":null},"schedule":{"id":null,"name":null,"type":"AlwaysOn"},"advancedOptions":{"clientIsolationEnabled":false,"clientIsolationWhitelist":null,"priority":"High","hideSsidEnabled":false,"clientLoadBalancingEnabled":false,"proxyARPEnabled":false,"dgafEnabled":null,"maxClientsPerRadio":100,"support80211dEnabled":true,"support80211kEnabled":true,"forceClientDHCPTimeoutSec":0,"dhcpOption82Enabled":false,"dhcp82Format":null,"unauthClientStatsEnabled":false,"clientIdleTimeoutSec":120,"clientFingerprintingEnabled":true,"ofdmOnlyEnabled":true,"bssMinRateMbps":"Disable","mgmtTxRateMbps":"6 mbps","bandBalancing":"UseZoneSetting","hs20Onboarding":false,"pmkCachingEnabled":true,"okcEnabled":true,"avcEnabled":false,"urlFilteringPolicyEnabled":false,"urlFilteringPolicyId":"","uplinkEnabled":false,"uplinkRate":0.0,"downlinkEnabled":false,"downlinkRate":0.0,"ratePerSTAUplink":null,"ratePerSTADownlink":null,"dtimInterval":1,"directedThreshold":5,"flowLogEnabled":false,"hdOverheadOptimizeEnable":false,"transientClientMgmtEnable":false,"probeRssiThr":null,"joinIgnoreTimeout":null,"joinAcceptTimeout":null,"joinIgnoreThr":null},"diffServProfile":null,"qosMaps":null,"dpsk":{"dpskEnabled":false,"length":62,"dpskType":"Secure","expiration":"Unlimited","dpskFromType":"CreateTime"},"dnsServerProfile":null,"caleaEnabled":false,"dpTunnelNatEnabled":false,"dpTunnelDhcpEnabled":false,"awsExtNasIPEnable":null,"awsVenueEnable":false}</pre> <pre> Here is the auth profile extracted “authServiceOrProfile":{"id":"16888160-b78c-11e9-8659-525400f54316" </pre> List of Proxy Authentication Profiles: <a href="https://66.61.206.202:8443/wsg/api/public/v6_1/profiles/auth" style="color: blue; text-decoration: underline;" target="_blank">https://xxx.xxx.xxx.xxx:8443/wsg/api/public/v6_1/profiles/auth</a> <pre> {"totalCount":1,"hasMore":false,"firstIndex":0,"list":[{"id":"16888160-b78c-11e9-8659-525400f54316","mvnoId":"839f87c6-d116-497e-afce-aa8157abd30c","domainId":"8b2081d5-9662-40d9-a3db-2a3cf4dde3f7","name":"xxxxAuthProfile","description":"xxxxAuthProfile","gppSuppportEnabled":false,"aaaSuppportEnabled":false,"h20SuppportEnabled":false,"ttgCommonSetting":null,"realmMappings":[{"id":"fd37f1f1-b78b-11e9-8659-525400f54316","name":"xxxxx-Radius","realm":"No Match","serviceType":"RADIUS","authorizationMethod":"NonGPPCallFlow","dynamicVlanId":null,"hostedAaaEnabled":false},{"id":"fd37f1f1-b78b-11e9-8659-525400f54316","name":"xxxxxx-Radius","realm":"Unspecified","serviceType":"RADIUS","authorizationMethod":"NonGPPCallFlow","dynamicVlanId":null,"hostedAaaEnabled":false}],"creatorUsername":"admin","creatorId":"92cc1b65-c3cd-4f26-8c9b-3e7b055c7c25","modifiedDateTime":1565014791286,"modifierUsername":"admin","createDateTime":1565014791286,"modifierId":"92cc1b65-c3cd-4f26-8c9b-3e7b055c7c25"}],"extra":null}</pre> Specific Authenticaiton Profile: <a href="https://66.61.206.202:8443/wsg/api/public/v6_1/profiles/auth/16888160-b78c-11e9-8659-525400f54316" style="color: blue; text-decoration: underline;" target="_blank">https://xxx.xxx.xxx.xxx:8443/wsg/api/public/v6_1/profiles/auth/16888160-b78c-11e9-8659-525400f54316</a> <pre> {"id":"16888160-b78c-11e9-8659-525400f54316","mvnoId":"839f87c6-d116-497e-afce-aa8157abd30c","domainId":"8b2081d5-9662-40d9-a3db-2a3cf4dde3f7","name":"xxxxxxAuthProfile","description":"xxxxxxAuthProfile","gppSuppportEnabled":false,"aaaSuppportEnabled":false,"h20SuppportEnabled":false,"ttgCommonSetting":null,"realmMappings":[{"id":"fd37f1f1-b78b-11e9-8659-525400f54316","name":"ElevenOS-Radius","realm":"No Match","serviceType":"RADIUS","authorizationMethod":"NonGPPCallFlow","dynamicVlanId":null,"hostedAaaEnabled":false},{"id":"fd37f1f1-b78b-11e9-8659-525400f54316","name":"xxxxxxx-Radius","realm":"Unspecified","serviceType":"RADIUS","authorizationMethod":"NonGPPCallFlow","dynamicVlanId":null,"hostedAaaEnabled":false}],"creatorUsername":"admin","creatorId":"92cc1b65-c3cd-4f26-8c9b-3e7b055c7c25","modifiedDateTime":1565014791286,"modifierUsername":"admin","createDateTime":1565014791286,"modifierId":"92cc1b65-c3cd-4f26-8c9b-3e7b055c7c25"}</pre> List of all defined RADIUS servers: <a href="https://66.61.206.202:8443/wsg/api/public/v6_1/services/auth/radius" style="color: blue; text-decoration: underline;" target="_blank">https://xxx.xxx.xxx.xxx:8443/wsg/api/public/v6_1/services/auth/radius</a> <pre> {"totalCount":2,"hasMore":false,"firstIndex":0,"list":[{"mvnoId":"839f87c6-d116-497e-afce-aa8157abd30c","domainId":"8b2081d5-9662-40d9-a3db-2a3cf4dde3f7","mappings":[],"id":"f0c5e8f1-b78b-11e9-8659-525400f54316","name":"xxxxxx-Disconnect","friendlyName":"xxxxxxxx-Disconnect","description":"xxxxx-Disconnect","protocol":"RADIUS","type":"RADIUS","locationDeliveryEnabled":false,"primary":{"ip":"yyy.yyy.yyy.yyy","port":3799,"sharedSecret":"xxxxxxRules"},"secondary":{"ip":"qqq.qqq.qqq.qqq","port":3799,"sharedSecret":"xxxxxxRules","autoFallbackDisable":false},"healthCheckPolicy":{"responseWindow":20,"reviveInterval":120,"zombiePeriod":40,"responseFail":false},"rateLimiting":{"maxOutstandingRequestsPerServer":0,"threshold":0,"sanityTimer":10},"creatorUsername":"admin","creatorId":"92cc1b65-c3cd-4f26-8c9b-3e7b055c7c25","modifiedDateTime":1565014727935,"modifierUsername":"admin","createDateTime":1565014727935,"modifierId":"92cc1b65-c3cd-4f26-8c9b-3e7b055c7c25"},{"mvnoId":"839f87c6-d116-497e-afce-aa8157abd30c","domainId":"8b2081d5-9662-40d9-a3db-2a3cf4dde3f7","mappings":[],"id":"fd37f1f1-b78b-11e9-8659-525400f54316","name":"xxxxxxx-Radius","friendlyName":"xxxxxx-Radius","description":"xxxxxx-Radius","protocol":"RADIUS","type":"RADIUS","locationDeliveryEnabled":false,"primary":{"ip":"xxx.xxx.xxx.xxxx","port":1812,"sharedSecret":"ElevenRules"},"secondary":null,"healthCheckPolicy":{"responseWindow":20,"reviveInterval":120,"zombiePeriod":40,"responseFail":false},"rateLimiting":{"maxOutstandingRequestsPerServer":0,"threshold":0,"sanityTimer":10},"creatorUsername":"admin","creatorId":"92cc1b65-c3cd-4f26-8c9b-3e7b055c7c25","modifiedDateTime":1565014748815,"modifierUsername":"admin","createDateTime":1565014748815,"modifierId":"92cc1b65-c3cd-4f26-8c9b-3e7b055c7c25"}],"extra":null}</pre> Specific RADIUS server details (and final answer) <a href="https://66.61.206.202:8443/wsg/api/public/v6_1/services/auth/radius/fd37f1f1-b78b-11e9-8659-525400f54316" style="color: blue; text-decoration: underline;" target="_blank">https://66.61.206.202:8443/wsg/api/public/v6_1/services/auth/radius/fd37f1f1-b78b-11e9-8659-525400f54316</a> <pre> {"mvnoId":"839f87c6-d116-497e-afce-aa8157abd30c","domainId":"8b2081d5-9662-40d9-a3db-2a3cf4dde3f7","mappings":[],"id":"fd37f1f1-b78b-11e9-8659-525400f54316","name":"xxxxxxx-Radius","friendlyName":"xxxxx-Radius","description":"xxxxxx-Radius","protocol":"RADIUS","type":"RADIUS","locationDeliveryEnabled":false,"primary":{"ip":"xxx.xxx.xxx.xxx","port":1812,"sharedSecret":"pppppppppp"},"secondary":null,"healthCheckPolicy":{"responseWindow":20,"reviveInterval":120,"zombiePeriod":40,"responseFail":false},"rateLimiting":{"maxOutstandingRequestsPerServer":0,"threshold":0,"sanityTimer":10},"creatorUsername":"admin","creatorId":"92cc1b65-c3cd-4f26-8c9b-3e7b055c7c25","modifiedDateTime":1565014748815,"modifierUsername":"admin","createDateTime":1565014748815,"modifierId":"92cc1b65-c3cd-4f26-8c9b-3e7b055c7c25"}</pre> Note: An API script will need to extract the ID fields starting at AP Zone, then WLAN, then RADIUS Authentication Profiles and finally RADIUS authentication (or accounting) server, inserting these into the next level API call.

How to determine the actual RADIUS authentication IP assigned to specific WLAN'sSSID for clusters with 1000's of WLAN's/SSID's across 1000's of AP Zones

2022-06-03T09:17:47-0700 2022-06-05T20:00:09-0700 https://support.ruckuswireless.com/articles/000012246 2022-05-27T04:24:43-0700 monthly 0.8 admin,premium knowledge_article_4833 knowledge_article_4833 2022-05-27T04:24:43-0700 000012246 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Performance;Configuration Performance, Configuration, SmartCell Insight Why is my hadoop going down frequently ? We can Enable Secondary NameNode on SCI. Secondary NameNode periodically applies edits log records to FsImage file and refreshes the edits log and sends this updated FsImage file to NameNode so that NameNode doesn’t need to re-apply the EditLog records during its start up process. Thus Secondary NameNode makes NameNode start up process fast 1. Edit the .env file on the master node and add a new environment variable in the /.env file only on the master node: SECONDARY_NN_ENABLE=true 2. Recreate docker containers only on the master node: sudo docker-compose up -d hdfs-namenode 3. Disable data on the imply node so drop the imply data container on the master node: sudo docker stop imply-data Note : Though it is recommended only if SCI is a big cluster with 1 master node and 5 data nodes (or greater) but in case customer is facing regular issue with Hadoop (edit files) you can enable below on smaller setup too. :

Customer is having issue related to HDFS edit files frequently even after increasing heap size and hadoop going down

2022-05-27T04:24:43-0700 2022-06-01T02:00:11-0700 https://support.ruckuswireless.com/articles/000006310 2022-05-10T14:53:33-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4832 knowledge_article_4832 2017-03-22T14:51:18-0700 000006310 Validated (External) Public Ruckus cloud wifi Firmware;Installation;Known issues and workarounds Firmware, Installation, Known Issues and Workarounds, Ruckus Cloud WiFi Do we have Serial Numbers for ZoneFlex APs that ship with Ruckus Cloud management capability firmware? ZoneFlex AP Starting Serial Numbers that support Ruckus Cloud Connectivity Ruckus Cloud supports ZoneFlex 11AC access points as described on this page: https://www.commscope.com/cloud-supported-network-devices Not all ZoneFlex APs support Ruckus Cloud management, from factory. To determine if the ZoneFlex 11AC APs you purchased (shipped from our distributor or channel partner), please refer to the table below. The last column refers to the serial # imprinted on the AP’s back label as well as on the outside shipping box. All Ruckus AP serial #s start with 4 digits that refer to week# and year# of manufacture. So an AP with starting serial # of 5016 means, Week50 of 2016. Note: This table below does NOT apply to current Unleashed APs (SKUs starting with 9U1). Only Unleashed 200.5 and earlier APs checked for Ruckus Cloud management, irrespective of their manufacturing date. ZoneFlex AP models supported in Cloud, and their starting manufacturing serial # <img alt="User-added image" height="257" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Ydb1&feoid=00N50000002Cf3M&refid=0EM2J0000039NBu" width="500"></img> Notes: - These APs may contain the 104.x.y Solo AP firmware image from factory, which support Ruckus Cloud discovery and connectivity. Newer 114.0.y Solo AP firmware is now recommended for Ruckus Cloud AP connectivity. - It is possible that a serial # newer than the date above may not connect to Ruckus Cloud successfully. These could be for various reasons. E.g. o The AP has previously connected a Ruckus Controller (ZD or SZ) and so, it’s firmware image has been re-flashed by the on-prem controller previously. Factory resetting the AP will not alter the firmware image back to Solo AP image. To recover such an AP to connect to Cloud, you would need to connect to the AP manually, download the latest 104.x.y / 114.0+ firmware image from Ruckus Support site and re-image the AP. - Above models manufactured before those dates need to be firmware upgraded to version 104.x.y or 110.x.y (or newer) before connecting to Cloud. Visit Ruckus Support site to download latest image. - If you currently have a ZoneDirector or SmartZone controller on-site, please disable automatic AP approval addition option on the controller, prior to connecting a new AP to the Cloud. - If you intend to migrate existing controller-managed ZoneFlex APs to Cloud, please contact your Ruckus Partner. Update: R700 AP model is no longer supported on the Ruckus Cloud

Ruckus Cloud WiFi supports ZoneFlex 802.11ac Access Points, but not all ZoneFlex APs support Ruckus Cloud management straight from the factory. The Table included in this article identifies starting Serial Numbers of 802.11ac APs that have firmware allowing Ruckus Cloud management from the factory.

2022-05-10T14:53:33-0700 2022-05-27T06:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA250000000LbT5CAK?attachment_index=0 2022-05-27T06:00:10-0700 monthly admin,premium,warranty,guest knowledge_article_4832 knowledge_article_4832_attachment_1 ZoneFlex_AP_Models_For_Cloud-v2.pdf 483268.0 application/pdf https://support.ruckuswireless.com/articles/000012025 2022-01-06T06:19:02-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4796 knowledge_article_4796 2021-12-17T10:58:45-0800 000012025 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Security;Known issues and workarounds Security, Known Issues and Workarounds, SmartCell Gateway How to download and implement patch for vSZ CVE-2021-44228 log4j2 ? Please refer to following steps to apply KSP for 5.x and above: Note: The downloaded file will be in zip format. Please make sure to unzip the downloaded file first. The resultant file after unzipping should end with .ksp. <ul><li>On macOS the native built-in archive utility by default will hierarchically extract the zipped patch/ksp into 3 files (digital_sig.bin, signing_cert.pem and the *.ksp file) and the KSP would not be applied correctly on the controller (display invalid file). You can either set the MACOS 'archive utility' preferences to turn off 'keep expanding if possible' flag or run unzip from the shell. After a correct unzip, a single *.ksp file should result and this can be successfully uploaded into the controller.</li></ul> Step 1: Cluster Backup is always required before apply any KSP. 1. Navigate to Administration >> Backup and Restore 2. Under "Cluster" tab, click "Back up Entire Cluster" and Select Yes 3. Once the backup is taken successfully, proceed to Step 2 Step 2: Upload the script to the v/SZ node from GUI: <ol><li>Diagnostics >> Scripts >> Patch/Diagnostics Scripts (For 5.0+)</li><li>Monitor >> Troubleshooting & Diagnostics >> Scripts >> Patch/Diagnostics Scripts (For 6.0)</li><li>Click on the diagnostic scripts tab from the left-hand menu</li><li>Click the browse button under Upload diagnostic script to vSZ , select the KSP file attached, and upload it.</li></ol> Upon successful upload, the script ("script name ") will be visible in the section below the "upload" section. Step 3: Execute the script on the vSZ node's CLI: 1. Connect to the SCG CLI, enter the "enable" and later "patches" mode. Below is an example of the script to execute on 5.2(Please check the correct KSP before applying it as per your code) Ruckus> en Password: ******** Ruckus# patches Ruckus(patches)# apply ER10935_fix_log4j_856364 Start Patching the System... INFO : Using a default root directory : /tmp/tmp.HPCRanSP8i /opt/ruckuswireless/wsg/apps/lib/log4j-core-2.11.1.jar exists. Replace this file. /opt/ruckuswireless/wsg/apps/lib/log4j-core-2.8.2.jar exists. Replace this file. /opt/ruckuswireless/3rdparty/elasticsearch-5.4.2/lib/log4j-core-2.8.2.jar exists. Replace this file. Done. Please restart services to make the changes take effect. Ruckus(patches)# exit Ruckus# reload NOTE : The ksp needs to be applied to all nodes in a cluster and requires a service restart for successful execution. Please do a "reload" not a "service restart" Filenames: 1. ER10935_fix_log4j_856364.ksp <<<<< For 5.2 and later versions up till 6.0 release 2. ER10935_fix_log4j_before_5_2_856366.ksp <<<< For code prior to 5.2 (5.0, 5.1 releases)

v/SZ patch and steps to implement for CVE-2021-44228 log4j2

2022-01-06T06:19:02-0800 2022-05-25T13:07:37-0700 https://support.ruckuswireless.com/articles/000008880 2020-09-01T21:03:46-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4380 knowledge_article_4380 2019-03-13T06:33:42-0700 000008880 Validated (External) Public Unleashed;Zonedirector;Zoneflex indoor;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, Unleashed, ZoneDirector, ZoneFlex Indoor, SmartCell Gateway, virtual SmartCell Gateway Why 5G beacon is not broadcasting? The customer needs to change the AP from a 20MHz channel width, to 40, 80 or 160MHz. Alternatively, the SZ can be patched using a KSP in ER-6969.

5G radio is not broadcasting and the customer will see the error message on AP supportinfo

2020-09-01T21:03:46-0700 2022-05-19T06:35:40-0700 https://support.ruckuswireless.com/articles/000006515 2019-07-11T15:13:38-0700 monthly 0.8 admin,premium knowledge_article_3823 knowledge_article_3823 2017-12-11T15:13:28-0800 000006515 Validated (External) Premium Ruckus icx switches;Icx 6430;Icx 6450;Icx 6610;Icx 6650;Ruckus ICX 6430 and 6450 Campus Switches;Ruckus ICX 6610 Campus Switches;Brocade ICX 6650 Campus Switches Firmware Firmware, Ruckus ICX Switches, ICX 6430, ICX 6450, ICX 6610, ICX 6650 How to upgrade ICX switches with manifest file ? <ol><li>Download the latest target path code suggestions for your ICX switch</li><li>Create a subfolder on your TFTP or SCP root folder.</li><li>Unzip all the files into this new subfolder</li><li>Open the ICX switch or stack console</li><li>Start the upgrade with the ICX "copy" CLI command as seen in TFTP method example below <pre class="ckeditor_codeblock"> # copy tftp system-manifest 192.168.11.99 FI08080t_Manifest.txt all-images-secondary # boot sys secondary # reload </pre> </li><li>Verify the new firmware is operational</li><li>Commit the flash image to primary via the following ICX CLI method below <pre class="ckeditor_codeblock"> # copy flash flash primar</pre> </li><li>For full details of the upgrade, please refer to the FastIron Ethernet Switch Software Upgrade Guide</li><li>For video instructions on how to upgrade via manifest file click <a href="https://www.youtube.com/watch?v=826V5IFnw0A&feature=youtu.be" target="_blank">here</a></li></ol> NOTE: <ul><li>Manifest method copies boot, image in one command. </li><li>PoE firmware is a separate process for ICX switches loaded with 8.0.70 or older version </li><li>PoE firmware is upgraded automatically with ICX switches loaded with 8.0.70 or higher version</li><li>The manifest file upgrade process does not support downloading boot images in a mixed stack consisting of different ICX models</li></ul>

ICX firmware version 8.0.00a or higher supports upgrade via manifest file. This article explains how one can upgrade the ICX switches easily with manifest file.

2019-07-11T15:13:38-0700 2022-05-13T06:11:48-0700 https://support.ruckuswireless.com/articles/000010136 2020-04-10T14:33:12-0700 monthly 0.8 admin,premium knowledge_article_4094 knowledge_article_4094 2020-02-25T20:04:37-0800 000010136 Validated (External) Premium Unleashed;Zonedirector;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Unleashed, ZoneDirector Why unable to enable 802.11r on SSID if WPA3 encryption is selected? Confirmation from the internal team: Currently the 802.11r is not supported with WPA3 because the Driver is not ready yet to support the 802.11r. Also, the clients were not ready\available for WPA3 to do any kind of testing. However, this feature might be considered in the future releases. Some additional information as below: <a href="https://wlan1nde.wordpress.com/2018/09/14/wpa3-improving-your-wlan-security/" style="color: #0563c1; text-decoration: underline;" target="_blank" title="Link httpswlan1ndewordpresscom20180914wpa3-improving-your-wlan-security">https://wlan1nde.wordpress.com/2018/09/14/wpa3-improving-your-wlan-security/</a> <a href="https://wificoops.com/2019/07/28/wi-fi-security-enhancements-part-1-wpa3-personal-sae/" style="color: #0563c1; text-decoration: underline;" target="_blank">https://wificoops.com/2019/07/28/wi-fi-security-enhancements-part-1-wpa3-personal-sae/</a>

This article will explain the reason why 802.11r is not available on the WPA3.

2020-04-10T14:33:12-0700 2022-05-02T16:59:42-0700 https://support.ruckuswireless.com/articles/000005476 2020-08-13T06:53:19-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2261 knowledge_article_2261 2016-01-27T12:11:14-0800 000005476 Validated (External) Public Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway How do I enable/disable LEDs of vSZ managed APs? There are two locations where you can disable/enable LEDs of APs of a vSCG/SZ controller. You can disable/enable LEDs for an AP Zone per model of that Zone or you make the change AP specific. For AP Zone model-specific: - Go to Access Points > AP Zones, then choose the Zone. - Go to the AP Model Specific Configuration, select an AP Model - Then on the Status LEDs either disable or enable, to disable or enable LEDs For AP specific: - Go to Access Points tab and locate the AP mac that you want to enable/disable LED - Click on Model Specific Options, select Override zone configuration - Then select to disable or enable LED. Exception: If you have an SCG200 or vSCG/SZc and the AP is in a staging zone, you will not be able to make this change while the AP is in the staging zone.

LEDs are turned off but there are a couple of ways to enable/disable lights on the vSZ controlled APs.

2020-08-13T06:53:19-0700 2022-04-28T14:25:57-0700 https://support.ruckuswireless.com/articles/000012233 2022-04-18T12:56:39-0700 monthly 0.8 admin knowledge_article_4830 knowledge_article_4830 2022-04-18T12:56:39-0700 000012233 Validated (External) Internal Unleashed;Zonedirector;Smartcell gateway;Cloud services;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, Unleashed, ZoneDirector, SmartCell Gateway, Cloud Services Why Windows 11,10 and 7 laptops not able to see WLAN's for Ruckus AP's? <ul><li>Disable 802.11ax on the AP </li></ul> or <ul><li>Upgrade driver of the laptop affected to the following version as suggested by Intel KB: </li></ul> <h1>Systems Using Intel® Wireless Adapters Supporting 802.11ac Not Displaying Wi-Fi 6 (802.11ax) Networks in Scan List of Available Networks</h1> <a id="linkToPrintArticle" target="_blank" title=""></a> Documentation Content TypeCompatibility Article ID000054799 Last Reviewed04/15/2022 Depending on the Wi-Fi driver version used, Intel® Wireless Adapters supporting 802.11ac may not show Wi-Fi 6 (802.11ax) networks in their scan lists, and as a result, might not be able to connect to Wi-Fi 6 (802.11ax) capable wireless routers and access points, even at 802.11ac speeds. Intel recommends using the latest driver version (<a href="https://www.intel.com/content/www/us/en/support/articles/000005634.html" target="_blank">Download the latest Wi-Fi driver</a>) for your Intel® Wireless Adapter since issues get resolved and new functionality gets added to newer driver versions. Intel has included a fix for this particular issue in the following Wi-Fi driver versions: <table><tbody><tr><td colspan="1" rowspan="1">Driver versions for Windows 10</td><td colspan="1" rowspan="1">Supported Adapters</td></tr><tr><td colspan="1" rowspan="1">20.70.0.5 and newer</td><td colspan="1" rowspan="1"> Intel® Wireless-AC 9560 Intel® Wireless-AC 9462 Intel® Wireless-AC 9461 Intel® Wireless-AC 9260 Intel® Dual Band Wireless-AC 8265 Intel® Dual Band Wireless-AC 8260 </td></tr><tr><td colspan="1" rowspan="1">19.51.14.1 and newer</td><td colspan="1" rowspan="1">Intel® Dual Band Wireless-AC 3168 Intel® Wireless 7265 Family (Rev.D) Intel® Dual Band Wireless-AC 3165</td></tr><tr><td colspan="1" rowspan="1">18.33.13.4 and newer1</td><td colspan="1" rowspan="1"> Intel® Wireless 7265 Family (Rev.C) Intel® Wireless 7260 Family Intel® Dual Band Wireless-AC 3160 </td></tr></tbody></table> Reference: https://www.intel.com/content/www/us/en/support/articles/000054799/wireless.html

On Ruckus 802.11ax AP's intel WLAN cards are unable to see the SSID.

2022-04-18T12:56:39-0700 2022-04-21T14:00:08-0700 https://support.ruckuswireless.com/articles/000003459 2021-04-12T11:21:02-0700 monthly 0.8 admin,premium knowledge_article_4648 knowledge_article_4648 2014-11-13T14:46:45-0800 000003459 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway How do you generate a CSR and install the certificate on vSCG? Use the following steps to generate and install a Web Server Certificate: 1. Generating CSR <div style="margin-left: 40px;">a. Browse to: Configuration>Management Web Certificate and click the button to "Generate CSR"</div> <div style="margin-left: 40px;">b. Fill in the necessary information (the ones with * are mandatory)</div> <div style="margin-left: 40px;">c. Click on the "Generate" button. <img alt="User-added image" height="375" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M41l&feoid=00N50000002Cf3M&refid=0EM50000000LZCb" width="500"></img></div> 2. Sending the CSR to a Certificate Authority <div style="margin-left: 40px;"> a. Find the file call "myreq.zip" b. Extract the files, one has a CSR and one has a KEY extension. c. Use text editor to edit the CSR file and paste the entire content to the CA to be used to generate the Server certificate. d. Obtain the Server certificate and the entire Chain of trust from the CA <img alt="User-added image" height="342" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M41l&feoid=00N50000002Cf3M&refid=0EM50000000LZCg" width="500"></img></div> 3. Importing the Server Certificate: This section will vary depending on the CA and how many links there are in the chain of trusts. <div style="margin-left: 40px;">a. Upload the Server Certificate. b. Upload all the intermediate Certificates c. Upload the Root d. When you finish uploading all the required certificates, click Skip. The Import Private Key section appears. e. Import the Private key, called "external.key". This was included in the original package "myreq.zip" f. When prompted to verify if "you sure you want to apply SSL certificate to vSCG?", click Yes.</div> <div style="margin-left: 40px;"><img alt="User-added image" height="378" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M41l&feoid=00N50000002Cf3M&refid=0EM50000000LZCl" width="500"></img></div> If controller is running on 3.5 and above, refer below screenshot. <img alt="Cert import on 3.5 and above" height="254" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M41l&feoid=00N50000002Cf3M&refid=0EM2J000000m25L" width="500"></img>

You can install 3rd party certificates to prevent SSL warning on WebUI access.

2021-04-12T11:21:02-0700 2022-04-19T09:24:23-0700 https://support.ruckuswireless.com/articles/000003220 2019-06-09T19:14:13-0700 monthly 0.8 admin,premium knowledge_article_1214 knowledge_article_1214 2014-08-11T17:23:27-0700 000003220 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to decrease or increase transmit power on 2.4GHz / 5GHz radio of an AP ? <div style="text-align: center;">Transmit power configuration settings on Access Point</div> Standalone Access Points :- Access point :: Configure >> Radio 2.4G / Radio 5G >>Common : Advance Settings >> Transmit Power <img alt="User-added image" height="241" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Scb&feoid=00N50000002Cf3M&refid=0EM50000000LXcD" width="500"></img> ZoneDirector managed Access Points :- On specific Access point: ZoneDirector :: Configure >> Access Points >> Click on "edit" on specific Access Point using its MAC address >> Under Radio B/G/N (2.4GHz) / Radio A/N (5GHz) >> Tx Power : "Tick" Override Group Configuration <img alt="User-added image" height="312" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Scb&feoid=00N50000002Cf3M&refid=0EM50000000LXcS" width="500"></img> On Access Point Group: ZoneDirector :: Configure >> Access Points >> Access Point Groups >> Edit "System Default" Group >> Radio Settings >> Tx Power. <img alt="User-added image" height="437" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Scb&feoid=00N50000002Cf3M&refid=0EM50000000LXcX" width="500"></img> Note : 1. By default Tx Power is set to "Auto" 2. Tx Power can be set from Full to Min (-1dB, -2dB, -3dB(1/2), -4dB, -5dB, -6dB(1/4), -7dB, -8dB, -9dB(1/8), -10dB) 3. When Tx power is set to "Full", the actual transmit power will be defined based on the Country code on Access Point / ZoneDirector. <div id="cke_pastebin" style="width: 1px; height: 1px;"> </div>

Configuration of transmit power on access points with respect to radios

2019-06-09T19:14:13-0700 2022-04-18T19:56:03-0700 https://support.ruckuswireless.com/articles/000002637 2014-08-26T14:11:14-0700 monthly 0.8 admin,premium knowledge_article_1245 knowledge_article_1245 2014-02-13T14:35:16-0800 000002637 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Installation;Troubleshooting Performance, Installation, Troubleshooting, ZoneDirector How to find the Current SmartRoam factor on WLAN Roaming is purely a client decision. The client is responsible for deciding it needs to roam, and then detecting, evaluating, and roaming to an alternative AP. WLAN standards bodies (such as the IEEE) and industry bodies (such as the Wi-Fi Alliance) do not specify when a client should roam, or how the client determines to which alternative AP it should roam. Each vendor's roaming algorithms are proprietary and are not generally published. For these type of clients, it is obvious to look towards infrastructure for help. In recent firmware (9.5 and above), Ruckus has added support to disconnect a client if its signal falls below user definable threshold. This feature is called SmartRoam. With this feature there will be an explicit disassociate message to kick-out the client. You can determine the current WLAN SmartRoam settings from ZD CLI or the diag.txt of ZD debug info. SSH into the Zone Director with admin credentials and execute the following commands ruckus> enable ruckus# config You have all rights in this mode. ruckus(config)# show wlan Example Output : Once executed the above command(show WLAN) 1: NAME = Ruckus_Test Tx. Rate of Management Frame(2.4GHz) = 2.0Mbps Beacon Interval = 100ms SSID = Guest_Prov Description = Type = Guest Access Authentication = open Encryption = none Web Authentication = Enabled Grace Period: Status = Disabled Authentication Server = Guest Accounts Called-Station-Id type = wlan-bssid Tunnel Mode = Disabled Background Scanning = Enabled Max. Clients = 100 Isolation per AP = Disabled Isolation across AP = Disabled Zero-IT Activation = Disabled Priority = High Load Balancing = Enabled Rate Limiting Uplink = Disabled Rate Limiting Downlink = Disabled Auto-Proxy configuration: Status = Disabled Inactivity Timeout: Status = Enabled Timeout = 5 Minutes VLAN-ID = 1 Dynamic VLAN = Disabled Closed System = Disabled OFDM-Only State = Disabled Multicast Filter State = Disabled 802.11d State = Enabled Force DHCP State = Disabled Force DHCP Timeout = 10 DHCP Option82 State = Disabled Ignore unauthorized client statistic = Disabled STA Info Extraction State = Enabled BSS Minrate = Disabled Call Admission Control State = Disabled PMK Cache Timeout= 720 minutes PMK Cache for Reconnect= Enabled NAS-ID Type= wlan-bssid Roaming Acct-Interim-Update= Disabled PAP Message Authenticator = Enabled Send EAP-Failure = Disabled L2/MAC = No ACLS L3/L4/IP Address = Guest L3/L4/IPv6 Address = Guest Precedence = Default Proxy ARP = Disabled Device Policy = No ACLS SmartRoam = Enabled Roam-factor = 5 White List = No ACLS Look for information as SmartRoam which would let you know the status with Roam factor number like the highlighted in above output. The number that you could select for SmartRoam factor is 1-10 <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PM7a&feoid=00N50000002Cf3M&refid=0EM50000000LOTv"></img>

Information to determine the current SmartRoam factor on a WLAN

2014-08-26T14:11:14-0700 2022-04-13T20:01:15-0700 https://support.ruckuswireless.com/articles/000001715 2015-06-25T00:09:58-0700 monthly 0.8 admin,premium knowledge_article_1973 knowledge_article_1973 2013-03-01T09:25:12-0800 000001715 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Ad-hoc network detection Lets name the clients connected to ZD as laptop A and a client connecting to laptop A wirelessly using hotspot service or in ad-hoc network as laptop B. ZD ------------------> laptop A -------------------------------> laptop B using hotspot or ad-hoc For reference, laptop A can run application like virtual router or any other which turn the laptop into hotspot. So laptop A can allow other wireless clients to connect to it and access the network without any authentication mechanism because laptop A and B or any other clients work on separate SSID. Ideally malicious users or someone just intending to extend the wireless connection does things like this. It is mostly observed in colleges or school or places where they buy internet access for one machine and then let other people to use the connection for free. Make sure that rogue device detection is turned on for ZD to detect such a set up. Go in configure -> WIPS -> enable rogue device detection. When laptop A connects, it comes in monitor -> currently active clients. After, once the laptop A configures the hotspot or ad-hoc bridge network and broadcast another SSID which is not managed by ZD. ZD detects laptop A as rogue clients and is also seen in monitor -> rogue devices. Ruckus ZD will never come to know about the active connection between laptop A and B. Hence it cannot block or deny the laptop B to use the network directly. Summary, ZD will detect the rogue clients which broadcast different SSID and allow connection to it but never block or mitigate the connection.

Is Ruckus ZD able to detect ad-hoc connection or any hotspot service initiated by the wireless client?

2015-06-25T00:09:58-0700 2022-04-11T08:09:38-0700 https://support.ruckuswireless.com/articles/000006143 2020-08-13T06:10:09-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2441 knowledge_article_2441 2016-11-08T13:33:21-0800 000006143 Validated (External) Public Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway Can I refresh AP Certificates in my Legacy version Zones? 1. Use the following matrix to determine the required KSP (1, 2 or 3) for the affected SmartZone Legacy zone : <table border="0" cellpadding="0" cellspacing="0" width="412"><tbody><tr height="20"><td colspan="1" rowspan="1" height="20" width="110"> </td><td colspan="3" rowspan="1" style="text-align: center;" width="210">Cluster</td><td colspan="1" rowspan="1" width="92"> </td></tr><tr height="20"><td colspan="1" rowspan="1" height="20">Legacy Zone</td><td colspan="1" rowspan="1" style="text-align: center;">3.1.x</td><td colspan="1" rowspan="1" style="text-align: center;">3.2.x</td><td colspan="1" rowspan="1" style="text-align: center;">3.4.x</td><td colspan="1" rowspan="1">Upgrades to</td></tr><tr height="20"><td colspan="1" rowspan="1" height="20">3.0.4 and below</td><td colspan="1" rowspan="1" style="text-align: center;">1</td><td colspan="1" rowspan="1" style="text-align: center;">1</td><td colspan="1" rowspan="1" style="text-align: center;">1</td><td colspan="1" rowspan="1" style="text-align: center;">3.0.5</td></tr><tr height="20"><td colspan="1" rowspan="1" height="20">3.1.0 - 3.1.1</td><td colspan="1" rowspan="1" style="text-align: center;">2</td><td colspan="1" rowspan="1" style="text-align: center;">2</td><td colspan="1" rowspan="1" style="text-align: center;">2</td><td colspan="1" rowspan="1" style="text-align: center;">3.1.2</td></tr><tr height="20"><td colspan="1" rowspan="1" height="20">3.2.0</td><td colspan="1" rowspan="1" style="text-align: center;">x</td><td colspan="1" rowspan="1" style="text-align: center;">x</td><td colspan="1" rowspan="1" style="text-align: center;">3</td><td colspan="1" rowspan="1" style="text-align: center;">3.2.1</td></tr><tr height="20"><td colspan="1" rowspan="1" height="20"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td></tr><tr height="21"><td colspan="5" rowspan="1" height="21">1. KSP of 3.0.5 AP firmware for 3.0.5/3.1.x/3.2.x cluster <a href="https://support.ruckuswireless.com/software/1084-smartzone-3-0-5-ap-device-certificate-script-for-3-0-5-3-1-x-3-2-x-legacy-zones" target="_blank">(AP_KSP_all_platforms_3_0_5_0_8.ksp)</a></td></tr><tr height="21"><td colspan="5" rowspan="1" height="21">2. KSP of 3.1.2 AP firmware for 3.1.x/3.2.x/3.4.x cluster <a href="https://support.ruckuswireless.com/software/1085-smartzone-3-1-2-ap-device-certificate-script-for-3-1-x-3-2-x-3-4-x-legacy-zones" target="_blank">(AP_KSP_all_platforms_3_1_2_0_150.ksp)</a></td></tr><tr height="21"><td colspan="5" rowspan="1" height="21">3. KSP of 3.2.1 AP firmware for 3.2.x/3.4.x cluster <a href="https://support.ruckuswireless.com/admin/softwares/1086-smartzone-3-2-1-ap-device-certificate-script-for-3-2-x-3-4-x-legacy-zones" target="_blank">(AP_KSP_all_platforms_3_2_1_0_695.ksp)</a></td></tr></tbody></table> 2. Apply the KSP patch as per the instructions in this KBA : <a href="https://support.ruckuswireless.com/answers/000004058" target="_blank">https://support.ruckuswireless.com/answers/000004058</a> 3. The Web server process of the controller will reboot briefly interrupting connection to the UI interface. 4. APs in the affected Legacy Zone should now be detected and appear as available for cert refresh in the UI under Administration - AP Certificate Replacement. See this KBA for details: <a href="https://support.ruckuswireless.com/answers/000005390" target="_blank">https://support.ruckuswireless.com/answers/000005390</a>

Updating AP Device Certificates in SmartZone Legacy Zones

2020-08-13T06:10:09-0700 2022-04-11T07:37:15-0700 https://support.ruckuswireless.com/articles/000009826 2021-06-28T10:18:44-0700 monthly 0.8 admin,premium knowledge_article_3960 knowledge_article_3960 2019-09-27T10:55:16-0700 000009826 Validated (External) Premium Ruckus icx switches Performance;Firmware Performance, Firmware, Ruckus ICX Switches What steps need to be followed to perform Manifest upgrade on an ICX stack from 8030x to 8090x? To upgrade a stack from 8030x to 8090x using Manifest method, follow the below series of steps, going thru 08.0.80e as an interim step : 1.Copy 8080e Non-UFIimage Manifest file on the system running 8030x. Moving to 8080e is recommended as mandatory per Engineering . copy tftp system-manifest x.x.x.x FI08080e_Manifest.txt all-images-primary 2. Reboot the Stack and make sure all the unit in stack has the image that is upgraded with . 3.Next, copy 8090x UFI image on the system running 8080e copy tftp flash x.x.x.x SPR08090bufi.bin primary 4.Reboot the stack. 5.Copy 8090xUFI image in secondary flash. Note: Interim step to move to 8080e is Mandatory per recommendation from Engineering. These steps are not required on a standalone system. This recommendation has been also updated on the 8090 Upgrade guide .

Upgrade thru 08.0.80e when attempting to upgrade from 08.0.30 to 08.0.90 release.

2021-06-28T10:18:44-0700 2022-03-29T17:36:47-0700 https://support.ruckuswireless.com/articles/000001670 2020-08-18T03:43:29-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4359 knowledge_article_4359 2013-02-20T10:27:56-0800 000001670 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Configuration;Installation Configuration, Installation, ZoneFlex Indoor, ZoneFlex Outdoor Is it possible to take a backup of standalone AP configuration ? No it is not possible to take a backup of standalone AP configuration today. You can gather configuration information and use it to configure a new/factory defaulted AP though. SSH to an AP and you can determine which WLANs are in use, and details about them. In this example, I have one open auth WLAN on 2.4GHz, and one open and one WPA2-PSK WLAN on 5GHz of my dual-band 7962 model AP, with no VLANs assigned. rkscli: get boarddata # optional, displays AP model and s/n info name: zf7962 magic: 35333131 cksum: a47 rev: 5.3 Serial#: 180901007787 Customer ID: 4bss Model: zf7962 rkscli: get version Ruckus 7962 Multimedia Hotzone Wireless AP Version 8.2.1.0.21 rkscli: get device-name device name : ‘mb7962-AP’ rkscli: get ipaddr wan IP Address Configuration Type: static, IP: 192.168.65.15 Netmask 255.255.255.0 Gateway 192.168.65.1 rkscli: get vlan ----------------------------------------------------------------------------------- Network 0: (Management) VID 1 Services: StaticIP Eth Port (no tag): 0,1 Wireless (no tag): - wlan0 (mb7962-bgn) - wlan1 (Wireless 2) - wlan2 (Wireless 3) - wlan3 (Wireless 4) - wlan4 (Wireless 5) - wlan5 (Wireless 6) - wlan6 (Wireless 7) - wlan7 (Wireless 8) - wlan8 (mb7962-an) - wlan9 (mb7962-an2) - wlan10 (Wireless 11) - wlan11 (Wireless 12) - wlan12 (Wireless 13) - wlan13 (Wireless 14) - wlan14 (Wireless 15) - wlan15 (Wireless 16) ----------------------------------------------------------------------------------- OK rkscli: get wlanlist # Note which wlanX have status of ‘up’, and run cmds below on them only. name status type wlanID radioID bssid ----------------------------------------------------------- svcp up AP wlan0 0 00:24:82:3d:35:98 home down AP wlan1 0 00:00:00:00:00:00 rcks down AP wlan2 0 00:00:00:00:00:00 mdfx down AP wlan3 0 00:00:00:00:00:00 wlan4 down AP wlan4 0 00:00:00:00:00:00 wlan5 down AP wlan5 0 00:00:00:00:00:00 wlan6 down AP wlan6 0 00:00:00:00:00:00 wlan7 down AP wlan7 0 00:00:00:00:00:00 wlan8 up AP wlan8 1 00:24:82:3d:35:9c wlan9 up AP wlan9 1 00:24:82:7d:35:9c wlan10 down AP wlan10 1 00:00:00:00:00:00 wlan11 down AP wlan11 1 00:00:00:00:00:00 wlan12 down AP wlan12 1 00:00:00:00:00:00 wlan13 down AP wlan13 1 00:00:00:00:00:00 wlan14 down AP wlan14 1 00:00:00:00:00:00 wlan15 down AP wlan15 1 00:00:00:00:00:00 OK rkscli: rkscli: rkscli: get ssid wlan0 wlan0 SSID: mb7962-bgn OK rkscli: get encryption wlan0 SSID : mb7962-bgn Net Security : Open (plain-text) Authentication : Open Encryption : disabled OK rkscli: get passphrase wlan0 bad key:wlans/wlan0/wlan-wpa-passphrase rkscli: get dvlan wlan0 wlan0 Dynamic-VLAN Mode: Disabled OK rkscli: rkscli: get ssid wlan8 wlan8 SSID: mb7962an OK rkscli: get encryption wlan8 SSID : mb7962an Net Security : Open (plain-text) Authentication : Open Encryption : disabled OK rkscli: get passphrase wlan8 bad key:wlans/wlan8/wlan-wpa-passphrase rkscli: get dvlan wlan8 wlan8 Dynamic-VLAN Mode: Disabled OK rkscli: rkscli: get ssid wlan9 wlan9 SSID: mb7962an2 OK rkscli: get encryption wlan9 SSID : mb7962an2 Net Security : WPA Protocol Version : WPA2 Authentication : Open Cipher Algorithm : AES-CCMP WPA PassPhrase : 1234567890 OK rkscli: get passphrase wlan9 wlan9 WPA PassPhrase (10): 1234567890 OK rkscli: get dvlan wlan9 wlan9 Dynamic-VLAN Mode: Disabled OK rkscli: exit Quit: OK <div id="cke_pastebin" style="width: 1px; height: 1px;"> </div>

How to gather the backup from a standalone AP

2020-08-18T03:43:29-0700 2022-03-24T23:24:54-0700 https://support.ruckuswireless.com/articles/000009311 2022-03-16T15:11:22-0700 monthly 0.8 admin,premium knowledge_article_4822 knowledge_article_4822 2019-05-28T21:22:52-0700 000009311 Validated (External) Premium Sz300;Ruckus icx switches;Virtual smartcell gateway;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Performance;Configuration;Installation Performance, Configuration, Installation, SZ300, Ruckus ICX Switches, virtual SmartCell Gateway Preparing ICX Devices to be Managed by SmartZone? Preparing ICX Devices to be Managed by SmartZone ICX devices running either router or switch images can be managed by SmartZone. The following items are required to manage ICX devices: <ul><li>The ICX switch must be running FastIron software version 08.0.80 or higher. SmartZone release 5.1.1 requires FastIron software version 08.0.90 or higher for ICX configuration management.</li><li>Smartzone's IP address should be reachable by the ICX device through the Management interface or through router interfaces.</li><li>The ICX device must be made aware of the configured SmartZone IP address in one of two ways: – configuring the DHCP server to use DHCP option 43 – issuing the following command at the global configuration level:</li></ul> ICX(conf)# sz active-list < SmartZone_Control_IP_Address > <ul><li>On some ICX 7250, ICX 7450, or ICX 7750 devices, self-signed certificates are used. SmartZone honors these certificates when the following option is configured on the SmartZone console: non-tpm-switch-cert-validate as shown in the following examples<img alt="User-added image" height="104" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096xG&feoid=00N50000002Cf3M&refid=0EM2J000000qNbY" width="500"></img></li></ul> Enabling an ICX Device to be Managed by SmartZone There are several ways to make an ICX device aware of the SmartZone's IP address. <ul><li> Use switch registrar discovery.</li><li> Use DHCP option 43.</li><li> Configure the ICX device manually using FastIron ICX commands.</li></ul>

Preparing ICX Devices to be Managed by SmartZone

2022-03-16T15:11:22-0700 2022-03-22T20:34:34-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000000OLoSAM?attachment_index=0 2022-03-22T20:34:34-0700 monthly admin,premium knowledge_article_4822 knowledge_article_4822_attachment_1 SZ300- vSZ-H-5.1.1-AdminGuide.pdf 15989871.0 application/pdf https://support.ruckuswireless.com/articles/000006082 2022-03-18T13:26:31-0700 monthly 0.8 admin,premium knowledge_article_2577 knowledge_article_2577 2016-10-05T10:38:33-0700 000006082 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Installation;Troubleshooting;Known issues and workarounds;Support license activation Configuration, Installation, Troubleshooting, Known Issues and Workarounds, Support License Activation, SmartCell Insight How can I try to troubleshoot problems with SmartCell Insight (SCI)? This article contains troubleshooting tips for SmartCell Insight (SCI). The FAQs in this article are broken into the following sections: - Installation FAQ: troubleshooting tips for issues during the installation process - Application FAQ: troubleshooting tips for issues related to the SCI application - Upgrade/Licensing FAQ: troubleshooting tips for issues related to licensing - Migration FAQ: questions related to migration from SCI 1.4 to SCI 2.x If you cannot find your answers here, please contact Support and include the following information: - The SCI Version - A description of the problem. - Logs. Installation FAQs Issue: I am having trouble installing SCI 2.x. Resolution: Few things to check: - Check minimum hardware requirements for the node. Ensure you have the minimum vCPU, RAM Storage specified in the install guide. - Ensure you have 2 HDDs -Check all ports are opened. -Above information can all be found in installation guide Issue: How to SSH into SCI - User name: "rsa" and Password: <Node token> ssh rsa@[IP address] Issue: My VM failed to boot up Resolution: SSH into SCI VM and copy out logs from cluster manager using the below command and provide allout.txt to Tech Support. sudo docker logs rsa-cluster-manager-setup > allout.txt 2>&1 Issue: I get the following error when setting up a Master node through the Web interface "We're sorry, but something went wrong. If you are the application owner, please check logs for more information" . Resolution: This could happen for various reasons. One of the known reasons is that this happens because DHCP provides both IPv4 & IPv6 infomration and SCI is not able to resolve IPv6 information. As mentioned in the install guide, SCI does not support IPv6. If that doesn't fix the problem, please SSH into SCI VM and copy out logs from cluster manager using the below command and send allout.txt to Tech Support sudo docker logs rsa-cluster-manager-setup > allout.txt 2>&1 Issue: How to gracefully reboot the SCI VM. SSH into SCI and use "sudo reboot". Application FAQs Q: I am using SCI 2.0. I have enough number of AP licenses. But when I try to login, SCI is showing "AP Licenses exceeded" error, and doesn't allow me to login. Why? A: This is because of a bug in SCI 2.0. It was fixed in SCI 2.0.1 An upgrade to the latest version of SCI should fix the problem. Q: SCI was working fine. Then suddenly, one day it stopped collecting data. In the HDFS stderr, I see something about corrupted/missing blocks. What happened? A: Most likely, you used the VMWare Power Off functionality when SCI was in the middle of processing, which caused the system to abruptly exit without giving SCI a chance to exit gracefully. HDFS would have gone into Safe mode. Please do not power-off the VM. Please use a "sudo reboot" if you absolutely need to restart the VM. Q: Ok, what do I do now? A: Please follow instructions in the FAQ regarding HDFS safe mode. Q: After I got HDFS out of safe node, SCI is still not showing data. A. Possibly, because SCI was in the middle of processing when it was shut down abruptly, HDFS blocks got corrupted. If yes, your data is most likely lost. We can attempt to fix the corrupted blocks, but most likely that will not work. You can verify if there are corrupted blocks by going to Admin > Diagnostics > HDFS, and looking at the block Q: How can I find out if my HDFS is in safe-mode? A: Go to Admin > Diagnostics > HDFS . Under "Summary" section, if it shows "Safemode is on", that means your HDFS is in safe mode. Q: My HDFS has gone into safe-mode. How do I bring it out of safe mode? A: In the master node, execute the following commands via CLI. You can log into the master node with the following credentials: Username: "rsa" and Password: <Node token> sudo docker exec hdfs-namenode hdfs dfsadmin -safemode leave Q: Does SCI support KVM? I have a customer that wants to run SCI 2.0.1. on KVM. Is this supported ? or do we only support the vmware on the support portal ? A: KVM support has been added since SCI 2.2. Q: In the Status & Updates page, I see that the Node state is "red" and I see a message "Unable to reach rsa-cluster-manager". What is going on? A: Please check if you are able to reach the following URL via your browser: https://[SCI-IP-Address]:53000/api/v1/clusters . If you cannot, then it is quite likely that you need to add this port as an exception in your browser. Q: I set up everything, but SCI is not showing any data. Why? A: This could be for a variety of reasons. Please check the following: Are the controllers configured correctly? -For SZ 3.4 and above, please log into the controller and confirm that the controller name under Configuration > SCI Settings is the same as the one given in the Controller entry in SCI. ? - Verify that the user credentials for SZ given in the SCI have access to "Restful API" and "SCI Restful API" (Check article no. 6257) - From the SCI master node VM, verify if you can telnet to the SZ If you are not able to telnet, check your firewall and network settings - Verify the APs are configured to send data to controller for SCI reporting. To verify this in the SZ CLI, check "showrunning common-settings ap-sci ". If it is "disabled", follow the following command to enable SCI reporting: SZ> ap-sci enable Confirm SCI interaction is enabled: For SCG-200: show running zone-global ap-sci For SZ-100 (as of 3.0): show running common-settings ap-sci - Is the server time configured correctly? Please verity that the NTP is configured correctly on the server. You can follow instructions in the Installation Guide. [Applicable to versions < SCI 2.1.1] - Does the AP Descpription have a valid value? Login to the SZ and verity that the AP description has a valid entry. - Are all the ports specified in the Install Guide opened? Q: I cannot find a resolution using the troubleshooting tips above. What do I do now? A: You can contact Tech Support with the following information: -SCI Version -Spark logs: Go to Admin > Diagnostics. Click on Spark Master. This will give you access to the Spark logs. Q: I don't see any Application(AVC) data coming in. Why? A: There are a few things to check here: -For SZ 3.4 and above, please log into the controller and ensure that "Enable SCI reporting" checkbox is checked. -For SZ versions below SZ 3.4 the above has to be done via command line. Please refer the SZ manual for the command. -In Admin > Diagnostics section, click on Spark UI. Search for "ReceiveGPB$", and ensure that the "STATE" column shows "Running" -Please note that no AVC data is available for ZDs. Q:I would like to understand how to diagnose issues with SCI. Where do I start? A: You can start by going to the Admin > Diagnostics section. You will find 3 entries there -Spark UI -HDFS -Druid Druid Coordinator Druid overlord Spark UI: Clicking on this will take you to the Spark master information page. This page gives you an overview of the Spark Master, as well as access to status/logs of the various Spark jobs. -You can look at "Completed Drivers" table. and click on the "Worker" to drill down. It will take you to the Spark worker page, which will have a list of "Finished Executors" and "Finished Drivers". Both of these sections have tables with "Logs" field that contains stdout and stderr. You can find the driver you are interested in (perhps based on a time stamp) and take a look at the stdout and stderr logs. -You can also look at the "Completed Applications" and see if the "State" field. If state shows "FINISHED", all's good. If state shows "FAILED", click on the Application name link (which is the first col), which will take you to the Spark worker page. In that page, you can click on "stdout" and "stderr" to see what the logs show. -If your AVC data is not coming in, please verify that the "ReceiveGPB$" is in "RUNNING" state. HDFS: This page gives you details regarding the HDFS. Like whether Safe Mode is on, the amount of DFS used etc. You canclick on "Utitlies" > Logs to view the HDFS related logs. Druid: Druid Coordinator: Druid Overlord Upgrade/Licensing FAQs Q: My customer is not able to upgrade, though he downloaded a support license from the support site and tried to upload it into SCI. A: When the customer downloads the support file from the support site, he has to finish his upgrade WITHIN 24 hrs, as the downloaded file is valid only for 24hrs Q: My customer has SCI support license, but he is not able to upgrade. Why? A: Apart from the SCI support license, the customer also needs to have AP Support Licenses in order to be able to upgrade. Please verify your customer has AP Support licenses. Q: My customer wants to upgrade during the trial period. But he needs to get the support license. Why? A: We have removed the support license check for upgrades during trial period as of SCI version 2.2. Q: What happens after the trial expires? A: The user will still be able to login to SCI, but he can access only the license page. View SCI License types and what's needed to successfully deploy and use SCI <a href="https://support.ruckuswireless.com/documents/1235-smartcell-insight-sci-licensing-guide" target="_blank">HERE</a>. https://support.ruckuswireless.com/documents/1235-smartcell-insight-sci-licensing-guide <ul></ul> Q: What domains does the customer need to whitelist in order to enable in-place upgrades? A: The cloiud upgrades are enabled thru amazonaws, so the customer will have to whitelist the following domains: s3-us-west-2.amazonaws.com 484213038011.dkr.ecr.us-west-2.amazonaws.com Q: My customer is unable to upgrade because Support licence check is failing. A: Support license check has been removed as of SCI v2.3. For prior versions, you can run the following two commands. After the second command is finished, click on 'Upgrade' button in the Admin > Settings page in the WebUI to complete upgrade. <pre> sudo docker exec rsa-cluster-manager sed -i "s/def support_status$/def support_status; :valid; end; def old_support_status/" components/rsa_cluster_manager-core/lib/rsa_cluster_manager/core/license.rb sudo docker restart rsa-cluster-manager </pre> Proceed to WebUI and click button to update. Q: My customer just upgraded from SCI 2.1.1 to SCI 2.2. The WebUI is not showing anything. What is the problem? A: This is a known issue when customers upgrade from 2.1.1 to 2.2. Please run the commands on below (on each of your nodes) to recover from this: <ul><li class="p1">sudo cp /docker-compose.yml.old /docker-compose.yml</li><li class="p1"> sudo cp /.env.old /.env </li><li> sudo cp /storage/consul/config/consul.json.old /storage/consul/config/consul.json </li><li class="p1">sudo docker-compose up -d consul</li><li class="p1">sudo docker run -e NODE_ID=$(cat /.node_id) --net=host --rm <a class="external-link" href="http://484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-cluster-manager:v2.2.0" target="_blank">484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-cluster-manager:v2.2.0</a> bin/rake rsa_cluster_manager:generate_config_files</li><li class="p1">sudo service docker-compose stop</li><li class="p1">sudo service docker-compose start</li></ul> Migration FAQs <a href="https://support.ruckuswireless.com/documents/1100-smartcell-insight-sci-1-x-to-2-x-migration-notice" target="_blank">https://support.ruckuswireless.com/documents/1100-smartcell-insight-sci-1-x-to-2-x-migration-notice</a> Q: My customer has an earlier version of SCI 2.x, but has been unable to upgrade because SCI is not connected to the Internet. Can he migrat data by backing it up? A: SCI has built in support for local upgrade (without Internet) since SCI 2.2. The customer can do a fresh install of SCI 2.2 or later, and locally upgrade after. If the customer needs to copy data from the earlier version of SCI 2.x, please contact Tech Support for assistance (***). Q: My customer wants to mighrat data from SCI 1.4, but does not ahve resources to run 1.4 and 2.2 simultaneously. Can he migrate data by backing it up? A: If the customer wants to migrate data, it would be best if they setup SCI 2.2 separately. We do not recommend bringing down SCI 1.4 instance before the migration is complete. That said, if the customer does not have the resources, and there is no other option and he must use SCI 1.4 resources for 2.x, we recommend following the following steps: <ul><li> <ul style="list-style-type: circle;"><li>Upgrade SCI 1.x to SCI 1.4 </li><li>Copy the data out of SCI 1.x following instructions from the Migration Instructions in the Release notes.</li><li>Once the data is copied, take a snapshot of the SCI 1.4 VM.</li><li>Remove SCI 1.4</li><li>Install SCI 2.2</li><li>Run the migration steps given in the Migration instructions in the Release notes.</li></ul> </li></ul>

This article contains SmartCell Insight (SCI) troubleshooting tips for Installation, Application, Upgrade/Licensing.

2022-03-18T13:26:31-0700 2022-03-22T00:00:11-0700 https://support.ruckuswireless.com/articles/000012147 2022-03-18T13:49:21-0700 monthly 0.8 admin,premium knowledge_article_4818 knowledge_article_4818 2022-03-11T16:46:45-0800 000012147 Validated (External) Premium Vriot;Smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, vRIoT, SmartCell Gateway Why are Assa Abloy Locks are getting disconnected from the IOT Gateway/AP after the AP reboot/Power Cycle We worked with the engineering and isolated that this issue is related to the IOT AP behavioral changes with the new firmware upgrade, 5.2.2.x. Engineering have changed this behavior of re-writing the RPM key upon AP reboot. This fix is delivered as a new AP Patch version 5.2.2.0.2016. This patch can be downloaded from the Ruckus Support Portal using following link it is ONLY for the IOT Customers with Zigbee Devices: https://support.ruckuswireless.com/software/3350-smartzone-ap-patch2-only-for-iot-platform-5-2-2-gd-refresh For customers with v/SZ 6.0, we need to upgrade the v/SZ to 6.1 and compatible IOT 2.0 Firmware Release of the IOT controller. 2.0 Release of IOT is planned for March 25th 2022.

This Article explains a software behavioral change that resulted into IOT Devices disconnect with the IOT Gateway/AP after the AP power cycle

2022-03-18T13:49:21-0700 2022-03-22T00:00:10-0700 https://support.ruckuswireless.com/articles/000012136 2022-03-04T11:03:46-0800 monthly 0.8 admin,premium knowledge_article_4816 knowledge_article_4816 2022-03-04T11:03:46-0800 000012136 Validated (External) Premium T750;Smartcell gateway;RUCKUS T750;RUCKUS T750SE;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, T750, SmartCell Gateway How to enable T750 PoE OUT using a Ruckus 60W power injector When using Ruckus 60W Power Injector on VSZ running SW5.2.X, the T750 config for PoE Operating Mode must be changed from "Auto" to "802.3bt/Class7" first before toggling the PoE OUT Port from Off to On. <img alt="User-added image" height="240" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096vo&feoid=00N50000002Cf3M&refid=0EM2J000003Xi5x" width="500"></img>

Unable to set the PoE OUT on T750 using Ruckus 60W Power Injector

2022-03-04T11:03:46-0800 2022-03-12T00:00:12-0800 https://support.ruckuswireless.com/articles/000012138 2022-03-04T14:52:28-0800 monthly 0.8 admin,premium knowledge_article_4817 knowledge_article_4817 2022-03-04T14:52:28-0800 000012138 Validated (External) Premium Mobile apps;RUCKUS One Mobile Apps;Ruckus Cloud Mobile Apps Configuration;Troubleshooting Configuration, Troubleshooting, Mobile Apps How to use MacBook as Aircapture in Multiple Channels In MacBook, you can download the Apps called Airtool. Airtool allows you to perform frame captures using your Mac’s built-in Wi-Fi adapter. The Airtool allow you to configure single channel or ALL Channel on 5GHz or 2.4GHz. <img alt="User-added image" height="754" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096vy&feoid=00N50000002Cf3M&refid=0EM2J000003XiU9" width="500"></img>

We need a device to use for Aircapture as the client roam between APs

2022-03-04T14:52:28-0800 2022-03-12T00:00:11-0800 https://support.ruckuswireless.com/articles/000010122 2022-03-03T18:21:10-0800 monthly 0.8 admin,premium knowledge_article_4069 knowledge_article_4069 2020-02-18T15:20:46-0800 000010122 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway Do we have a compiled list of carriers and EPDG information for Wi-Fi Calling in SmartZone? There are a series of them listed in the manuals for Smartzone. vtc.epdg.att.ericsson.net 129.192.165.10 ATT East Coast cnc.epdg.att.erricson.net 129.192.166.10 ATT West Coast 233.sub-141-207-229.myvzw.com 141.207.229.233 Verizon ss.epdg.epc.geo.mnc260.mcc310.pub.3gppnetwork.org 208.54.37.80 TMobile primgw.vowifi2.spcsdns.net 68.31.26.2 Sprint epdg.epc.mnc006.mcc454.pub.3gppnetwork.org 180.219.134.17 SmarTone epdg.epc.mnc001.mcc505.pub.3gppnetwork.org 149.135.136.48 Telestra Mobile epdg.epc.mnc002.mcc505.pub.3gppnetwork.org 210.49.47.193 SingTel Optus epdg.epc.mnc720.mcc302.pub.3gppnetwork.org 209.148.157.48 Rogers epdg.ims.mnc005.mcc724.pub.3gppnetwork.org 200.169.116.51 Claro Brasil fn-epdg.epc.att-idns.net 107.225.251.51 FirstNet If you don’t find the one you are looking for but have a phone and know your operator supports it, start a Wireshark capture on or behind the AP and then activate Wi-Fi calling on the device. You will capture the FQDN that the device is looking for and can use that for your profile.

This is a current (for post date) list of FQDN and IP information for ePDG carriers.

2022-03-03T18:21:10-0800 2022-03-04T12:00:09-0800 https://support.ruckuswireless.com/articles/000008580 2021-04-25T12:39:03-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3453 knowledge_article_3453 2018-11-12T04:36:37-0800 000008580 Validated (External) Public Icx 7250;Ruckus support services;Ruckus ICX 7250 Campus Switches Support license activation;Registration Support License Activation, Registration, ICX 7250, Ruckus Support Services What are the steps to activate ICX 7250 POD license? The steps to activate the 2x10G and 8X10G POD license are the same. The activation codes for Ruckus ICX 7250 2x10G POD start with DVV and for 8x10G POD start with DVW. These are node-locked licenses, which means that when activated, the licenses get associated with a switch serial number. Requirements to activate ICX 7250 2x10G POD licenses : <ol><li> Valid license activation code in the format DVV-11111111-ABC-BCA-EYZ </li><li> The serial number of the ICX 7250 switch for which the license is for </li></ol> Requirements to activate ICX 7250 8x10G POD licenses <ol><li> Valid license activation code in the format DVW-11111111-ABC-BCA-EYZ </li><li> The serial number of the ICX 7250 switch which already has an active 2x10G POD license on it. We can verify the license status on the switch at https://support.ruckuswireless.com/asset/xxxxxxxxxx (xxxxx to be replaced by the serial number of the switch) </li></ol> STEP 1. The entire license code (eg DVV-11111111-ABC-BCA-EYZ) has to be entered in the <a href="https://support.ruckuswireless.com/code_registration" target="_blank">activation page</a> and then click on the Validate button <img alt="Activation Page 2x10G POD" height="299" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M46R&feoid=00N50000002Cf3M&refid=0EM2J000000luCJ" width="500"></img> STEP 2. The next page displays the type of license processed under the order. Review the code and click on the checkbox to Accept & Condition. Then process to click on the Activate Purchase button and map the ICX 7250 2x10G POD ( or 8X10G POD) license to the switch serial number <img alt="2x10G Agreement" height="402" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M46R&feoid=00N50000002Cf3M&refid=0EM2J000000luCT" width="500"></img> STEP 3. Enter the serial number of ICX 7250 switch for which the 2x10G POD (or the 8x10G POD) license is to be generated and click on Validate Serial Number button <img alt="Enter serial number 2x10G" height="418" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M46R&feoid=00N50000002Cf3M&refid=0EM2J000000luCY" width="500"></img> STEP 4. Verify and Confirm the Serial Number of the switch, the Activation code, and the License Type. Once confirmed, click on Bind License to Device button Note: It will take a few minutes for the license server to map the activation code to the serial number and load the next page <img alt="ICX 7250 2x10G POD Confirm SN" height="484" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M46R&feoid=00N50000002Cf3M&refid=0EM2J000000luHO" width="500"></img> STEP 5. The page which confirms the 2x10G POD (or 8X10G POD) successful license activation is opened, along with the link to download the license file (XML for 0.8.07 or lower and CoE for 08.0.8 or higher). <img alt="ICX 7250 2x10G POD mapped edit" height="400" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M46R&feoid=00N50000002Cf3M&refid=0EM2J000000luHd" width="500"></img> IMPORTANT: The POD licenses are always available for download from the Ruckus Support portal. Please use the link: https://support.ruckuswireless.com/asset/xxxxxxxxxx (xxxxx to be replaced by the Serial number of the switch)

Article has got steps to activate POD licenses

2021-04-25T12:39:03-0700 2022-03-02T16:38:42-0800 https://support.ruckuswireless.com/articles/000001866 2020-08-18T07:52:16-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_494 knowledge_article_494 2013-03-22T12:14:14-0700 000001866 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Configuration;Installation;System network management Configuration, Installation, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor What is the path to upgrade a Standalone AP from early code? Topic: What is the path to upgrade a Standalone AP from early code? APs can upgrade/downgrade between any version, only ZDs have to follow an upgrade path due to memory structure or internal data architecture changes. Newer AP standalone code, under Maintenance::Upgrade page, now has a “Local” method, in addition to FTP, TFTP which allows you to browse to the file on your PC/laptop. We are now providing all standalone AP firmware on our Support site. If you have an older version of firmware that doesn’t have the Local upgrade method option, you can make an image control file, if you know how they’re constructed. What is their construction you ask? As follows… C:\Users\michael.brado>cd c:\tftp-root\code c:\TFTP-Root\Code>dir *7982*.* Volume in drive C is OS Volume Serial Number is E290-F83B Directory of c:\TFTP-Root\Code 04/19/2012 07:35 PM 6,762,496 7982_9.4.0.0.103.Bl7 05/21/2012 03:44 PM 6,766,592 7982_9.4.0.0.109.Bl7 05/28/2012 01:54 AM 6,766,592 7982_9.4.0.0.110.Bl7 10/18/2012 11:36 PM 6,778,880 7982_9.4.2.0.29.bl7 10/23/2012 08:23 PM 7,688,192 7982_9.5.0.0.124.Bl7 11/28/2012 10:49 PM 7,753,728 ZF7982_9.6.0.0.19.Bl7 05/30/2012 02:37 PM 58 zf7982_940_cntrl.rcks 7 File(s) 42,516,538 bytes 0 Dir(s) 67,645,575,168 bytes free c:\TFTP-Root\Code> c:\TFTP-Root\Code>more zf7982_940_cntrl.rcks [rcks_fw.main] 0.0.0.0 7982_9.4.0.0.110.Bl7 6766592 c:\TFTP-Root\Code> I’ve attached an example of ‘zf7980_940_cntrl.rcks’ which is printed out above. The image control file specifies the Filename of the AP firmware, and its Byte Count information. We use the middle digits to match the version and maintenance release, so ‘_940_’ refers to version 9.4.0.x.x, and ‘_943_’ would be used with a 9.4.3.0.12 image, if you follow the pattern (naming convention). With a firmware image and matching image control file in a directory of your choosing (ie. c:\tftp-root\code), you can use your favorite TFTP application (ie. TFTPd32), pointed to this code/image control file directory, with the TFTP option under Maintenance::Upgrade. <a href="http://tftpd32.jounin.net/tftpd32_download.html" target="_blank">http://tftpd32.jounin.net/tftpd32_download.html</a> Enter your PC’s IP address for the Firmware Server, with ‘zf7982_940_cntrl.rcks’ image control file, to upgrade manually. [ image: DOS window, ipconfig output ] [ image: TFTPd32 window, with Directory and Server IP info ] [ image: AP Maintenance::Upgrade page with TFTP method, PC IP address, image control filename ] Follow the upgrade, with a reboot, from Maintenance::Reboot/Reset page, to complete the manual upgrade procedure.

Explain how to upgrade/downgrade Standalone APs

2020-08-18T07:52:16-0700 2022-02-22T14:44:33-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PDTYCA4?attachment_index=0 2022-02-22T14:44:33-0800 monthly admin,premium,warranty,guest knowledge_article_494 knowledge_article_494_attachment_1 Standalone-AP-Upgrade.docx 102419.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000011894 2022-02-16T09:17:35-0800 monthly 0.8 admin,premium knowledge_article_4781 knowledge_article_4781 2021-09-15T19:47:15-0700 000011894 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector Why my ZD1200 is stuck in the setup Wizard loop? Why is ZD1200 stuck at "uploading" status after uploading the firmware file? <ul><li>We isolated that the problem was related to browser compatibility where using both Chrome and Microsoft Edge Browsers appeared to have issues with loading all Tabs of the ZD appropriately. Both Chrome and Edge are using Chromium Version 93. Using Firefox version 92.0 resolved this issue. There are additional browser compatibility enhancements done by the engineering in latest ZD 10.5.0.0.190 Release. If your ZD and AP environment supports this version of ZD, please upgrade the ZD.</li></ul>

This article explains multiple issues seen with ZD 1. ZD1200 is stuck in the setup Wizard loop or many of its Tabs do no show up 2. ZD1200 is stuck in firmware upgrade page with the status saying "Uploading"

2022-02-16T09:17:35-0800 2022-02-22T00:00:10-0800 https://support.ruckuswireless.com/articles/000010114 2020-04-01T11:39:23-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4066 knowledge_article_4066 2020-02-07T11:01:43-0800 000010114 Validated (External) Public Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Installation;Known issues and workarounds Firmware, Installation, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway What can cause certain models of AP to become unresponsive after upgrade to SZ 5.2.0.0.685 and subsequent reboot? Refer to TSB 2020-002 attached below. After controller upgrade to 5.2, apply AP patch <a href="https://support.ruckuswireless.com/software/2462-smartzone-ap-patch-prior-to-moving-802-11ac-wave1-aps-to-5-2-ga-refresh-sz300-sz-100-vsz" target="_blank">scg-ap-5.2.0.0.5030.patch</a> from KBA-10275 found Here, before moving 802.11ac Wave1 model APs to 5.2 zone.

A problem has been discovered for certain models of AP that are upgraded to SZ 5.2.0.0.685, causing them to become unresponsive after reboot.

2020-04-01T11:39:23-0700 2022-02-09T03:47:43-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000004zjTSAQ?attachment_index=0 2022-02-09T03:47:43-0800 monthly admin,premium,warranty,guest knowledge_article_4066 knowledge_article_4066_attachment_1 TSB-2020002-Wave1AP-SZ52.pdf 230653.0 application/pdf https://support.ruckuswireless.com/articles/000006245 2021-03-09T06:10:59-0800 monthly 0.8 admin,premium knowledge_article_4569 knowledge_article_4569 2017-02-26T22:38:24-0800 000006245 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, Unleashed Why is the power LED blinking green on unleashed? Upgrading to the latest Firmware 200.3.9.13.228, has fixed the issue.

PWR LED on the Master AP (AP-R710) blinks (Green) continuously in the Unleashed Network (Firmware 200.2.9.13.186).

2021-03-09T06:10:59-0800 2022-02-09T01:14:25-0800 https://support.ruckuswireless.com/articles/000011502 2021-04-01T18:33:58-0700 monthly 0.8 admin,premium knowledge_article_4632 knowledge_article_4632 2021-04-01T18:33:58-0700 000011502 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) System network management System Network Management, SmartCell Gateway What is Airtime Utilization Detail in SmartZone UI and how to understand this information graph? What can we learn from this graph: Network Overhead - Allows the admin to view the ratio of transmitted and received data vs management, which tells the admin how much overhead is on the network. Impact of Neighbors - Allows the admin to view the airtime impact of managed neighbors that are operating on the same or overlapping channels. This also allows the admin to evaluate the channel selection system. Impact of Rogues - Allows the admin to view the airtime impact from non-managed rogue APs. Uplink / Downlink Ratios - Allows the admin to easily visualize the uplink and downlink airtime ratios, which can be cross-referenced with traffic ratios to evaluate the efficiency of up/downlinks. Impact of Non-Wi-Fi Interference - Allows the admin to view the airtime impact of non-Wi-Fi interference sources. An easy way for our customers/partners/SE’s to understand Airtime Utilization. There are some “limitations”: 1. Only supported on ac wave 2 aps 2. 1 AP at a time 3. 1-hour time frame (aggregated) 4. Need to select 2.4 or 5 GHz 5. Export is capable but displays as “Chart Title” 6. SmartZone version 3.6.1 and up Limitations: Airtime details is only available for AC wave 2 AP

Airtime details report from controller GUI

2021-04-01T18:33:58-0700 2022-02-08T11:58:22-0800 https://support.ruckuswireless.com/articles/000012079 2022-02-03T11:06:53-0800 monthly 0.8 admin,premium knowledge_article_4808 knowledge_article_4808 2022-02-03T11:06:53-0800 000012079 Validated (External) Premium Ruckus analytics;Virtual smartcell gateway Configuration;Troubleshooting;Registration Configuration, Troubleshooting, Registration, Ruckus Analytics, virtual SmartCell Gateway Why are my VSZ stays RED even after I allow ruckus.cloud FQDN in my FW For US Ruckus Analytics, You will need to open up 3 endpoints in the firewall => For US <ul><li><a href="https://ruckus.cloud" style="color: #0563c1; text-decoration: underline;" target="_blank" title="https://ruckus.cloud">https://ruckus.cloud</a> (34.102.183.44) is used for the administration portal of Ruckus Cloud. The IP for this service is anycast and globally load balanced for performance. Data processing and compute is done in US.</li><li><a href="https://messagehub.analytics.ruckus.cloud" style="color: #0563c1; text-decoration: underline;" target="_blank" title="https://messagehub.analytics.ruckus.cloud">https://messagehub.analytics.ruckus.cloud</a> (34.69.139.151) is used by the SZ to send analytics data to the cloud. This is hosted in US.</li><li><a href="https://serviceloc.ruckuswireless.com/" style="color: #0563c1; text-decoration: underline;" target="_blank" title="https://serviceloc.ruckuswireless.com">https://serviceloc.ruckuswireless.com</a> (23.236.63.97) is used by the SZ to determine the correct endpoints to connect to. This is hosted in the United States. No analytical data will flow to this endpoint but connectivity is required for service discovery.</li></ul>

How to create FW rule to allow RA successfully onboard VSZ

2022-02-03T11:06:53-0800 2022-02-05T00:00:09-0800 https://support.ruckuswireless.com/articles/000001791 2021-05-03T01:23:04-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_500 knowledge_article_500 2013-03-19T11:26:29-0700 000001791 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why I am unable to view tab/contents of Ruckus ZD devices in Internet Explore 9 Fix for Compatibility issue with IE9: The Compatibility View issue with Internet Explore 9 has been fixed in 9.5 firmware and the browser is supported from this version. Note: Before upgrading the unit to 9.5 please check the release notes of 9.5 and follow the upgrade path. We recommend to use Google Chrome browsers.

If unable to view tab/contents of Ruckus devices in Internet Explore 9 this is a Compatibility View issue

2021-05-03T01:23:04-0700 2022-02-02T01:46:14-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PDMXCA4?attachment_index=0 2022-02-02T01:46:14-0800 monthly admin,premium,warranty,guest knowledge_article_500 knowledge_article_500_attachment_1 Compatibility_View Setting.jpg 143384.0 image/jpeg https://support.ruckuswireless.com/articles/000005239 2015-10-28T16:23:07-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2192 knowledge_article_2192 2015-10-28T16:23:07-0700 000005239 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Installation;Troubleshooting;Known issues and workarounds Configuration, Firmware, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector How do I install the certificate I was provided? To import a certificate into your web browser: For Firefox: Windows: open Tools -> Options -> Advanced -> Encryption -> View Certificates For Windows IE: open Tools -> Internet Options -> Content -> Certificates click import and enter the filename (cert.p12) For Chrome: <a href="http://s.omni.teonite.com/kb/importing_pkcs12.html" target="_blank">http://s.omni.teonite.com/kb/importing_pkcs12.html</a> And you need the password for the private key.

Here are the steps necessary to import a certificate into FireFox, Internet Explorer, or Chrome browsers.

2015-10-28T16:23:07-0700 2022-02-02T01:46:14-0800 https://support.ruckuswireless.com/articles/000012044 2022-01-24T23:54:07-0800 monthly 0.8 admin,premium knowledge_article_4802 knowledge_article_4802 2022-01-24T23:54:07-0800 000012044 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Known issues and workarounds Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Why do I not see the wired menu to manage the switches? To resolve the issue you will need to access the vSZ-H controller via ssh or console and run the reindex command. Login to the controller. enable debug vSZ(debug)#reindex-elasticsearch-all This will take a few minutes. When this is finished, logout the webgui user and login back in. The wired menu should be visible again.

The wired menu is gone, so no way to configure the switches, while they are online on the controller.

2022-01-24T23:54:07-0800 2022-01-26T00:00:11-0800 https://support.ruckuswireless.com/articles/000012035 2022-01-12T01:08:06-0800 monthly 0.8 admin,premium knowledge_article_4801 knowledge_article_4801 2022-01-12T01:08:06-0800 000012035 Validated (External) Premium R610;H510;R510;T710;T310c;T310d;T310n;T310s;T610;R710;Ruckus R610;Ruckus H510;Ruckus R510;Ruckus T710;Ruckus T710s;Ruckus T310c;Ruckus T310d;Ruckus T310n;Ruckus T310s;Ruckus T610;Ruckus R710 Configuration;Installation Configuration, Installation, R610, H510, R510, T710, T310c, T310d, T310n, T310s, T610, R710 Does the AP CLI command "dfs-high-density wifi1" survive an AP upgrade? We have tested by upgrading the AP firmware from 5.2.2 to 5.2.2P1 to 6.1 and the dfs-high-density setting was still part of the configuration of the AP. So the setting survives an AP firmware upgrade.

Will the configuration setting dfs-high-density still be there after a firmware upgrade?

2022-01-12T01:08:06-0800 2022-01-25T00:00:14-0800 https://support.ruckuswireless.com/articles/000009865 2020-08-14T16:42:34-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3966 knowledge_article_3966 2019-10-22T00:53:31-0700 000009865 Validated (External) Public Ruckus cloud lte Firmware;Installation;Troubleshooting;Known issues and workarounds Firmware, Installation, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud LTE Why do I get login page error when trying to log in to https://t2.lte-cloud.ruckuswireless.com/? The correct way to log in to LTE cloud should be https://lte-cloud.ruckuswireless.com and not t2.lte-cloud.ruckuswireless.com. The correct way to log in is not pod dependent and should always be used by customer. After logging in, it will redirect to t3.lte-ruckuswireless.com for our current 19.01 SW version. Ruckus recommends always using lte-cloud.ruckuswireless.com as the log in to your LTE account.

https://t2.lte-cloud.ruckuswireless.com/ no longer active after 19.01 upgrade

2020-08-14T16:42:34-0700 2022-01-16T13:55:38-0800 https://support.ruckuswireless.com/articles/000003331 2021-03-09T06:48:48-0800 monthly 0.8 admin,premium knowledge_article_4567 knowledge_article_4567 2014-08-26T11:34:05-0700 000003331 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Why does my AP show up as rejected in the webgui? If not enough licenses, add new licenses to resolve the issue.

Why does my AP show up as rejected in the webgui?

2021-03-09T06:48:48-0800 2022-01-13T20:22:55-0800 https://support.ruckuswireless.com/articles/000009649 2022-01-07T06:55:21-0800 monthly 0.8 admin knowledge_article_4035 knowledge_article_4035 2019-07-29T12:26:47-0700 000009649 Validated (External) Internal Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway How to read CCM configuration files in SZ? Knowledge files: - In 5.0 they are in human-readable format, available in shell path: /data/ng/ccm/knowledge/ You can find folders for the different modules that can be navigated to find the different indexes. - Starting in 5.2 they are included into Redis database, decoded using them same embedded tool in SZ as Config GPB. Config GPB: Files can be decoded using an embedded tool in SZ: LAB-SZ-01# debug LAB-SZ-01(debug)# debug-tools [Change to system] Welcome to Debug CLI Framework! (debug tool-set) system $ use sz [Change to sz] (debug tool-set) sz $ ccm-cli !!! Setting Redis Port as 16380 !!! {:pool {}, :spec {:uri redis://localhost:16380}} !!! Added /opt/ruckuswireless/wsg/apps/lib/scg-protobuf-5.2.0-SNAPSHOT.jar to classpath #CCM Folder: /data/ng/ccm #WHERE_AM_I: [] #WHATS_INSIDE: | :idx | :content | |------+-----------| | 1 | config | | 2 | knowledge | Commands available: CCM-CLI# ? help [? h] Show help. Display a help text that lists all available commands including further detailed information about these commands. into Into Dive into deeper level of CCM Config folder print [p] Print Print GPB content quit [q] Quit the CLI. Terminate and close the command line interface. refer-to [r] Refer to Refer to a specific GPB path show [s] Show Show what's around top [t] Top Goto top-level of CCM Config folder up [u] Up Go up one level from current position where [w] Where Show current position Example to show the content for a specific AP: CCM-CLI# into 1 #WHERE_AM_I: [config] #WHATS_INSIDE: | :idx | :content | |------+--------------------------------------| | 1 | Ap | | 2 | ApGroup | .... CCM-CLI# into Ap #WHERE_AM_I: [Ap] #WHATS_INSIDE: | :idx | :content | |------+-------------------| | 1 | 18:7C:0B:13:4D:B0 | | 2 | 18:7C:0B:22:CF:10 | | 3 | 18:7C:0B:22:E8:50 | | 4 | 18:7C:0B:22:EC:F0 | .... CCM-CLI# into 134 #WHERE_AM_I: [config Ap 94:BF:C4:35:55:40] #WHATS_INSIDE: | :idx | :content | |------+---------------| | 1 | 1589556086095 | | 2 | 1597363204254 | CCM-CLI# print 2 #GPB_CLASS: com.ruckuswireless.scg.protobuf.ccm.Ap$CcmAp id: "94:BF:C4:35:55:40" device_name: "AP-609" common { country_code: "GB" } radio24g { radio { wlan_service_enabled: false } } radio5g { radio { wlan_service_enabled: false } } model { name: "H510" model_specific_ethernet_port_settings { ethernet_port_profile_id: 1 untag_id: 190 vlan_members: "190" state: 1 override_vlan_enabled: true } model_specific_ethernet_port_settings { ethernet_port_profile_id: 1 untag_id: 190 vlan_members: "190" state: 1 override_vlan_enabled: true } model_specific_ethernet_port_settings { ethernet_port_profile_id: 1 untag_id: 190 vlan_members: "190" state: 1 override_vlan_enabled: true } model_specific_ethernet_port_settings { ethernet_port_profile_id: 1 untag_id: 190 vlan_members: "190" state: 1 override_vlan_enabled: true } model_specific_ethernet_port_settings { ethernet_port_profile_id: 0 untag_id: 1 vlan_members: "1-4094" state: 1 override_vlan_enabled: false } model_specific_radio_settings { radio_type: _24G } model_specific_radio_settings { radio_type: _5G } model_specific_lldp_settings { lldp_enabled: true lldp_mgmt_enabled: true lldp_ad_interval: 30 lldp_hold_time: 120 } usb_power_enabled: true model_specific_poe_mode_settings { } led_status_enabled: true model_specific_cellular_settings { } model_specific_lacp_settings { } } ipv4_settings { method: KEEP_AP_SETTINGS } ipv6_settings { } ap_certificate { } bonjour_gateway { enabled: false policy_id: "" } status { external_ip: "172.16.1.165" }

Process for reading CCM configuration files in SZ

2022-01-07T06:55:21-0800 2022-01-12T12:00:14-0800 https://support.ruckuswireless.com/articles/000011919 2022-01-06T06:21:57-0800 monthly 0.8 admin,premium knowledge_article_4797 knowledge_article_4797 2021-10-06T19:11:23-0700 000011919 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Configuration;Firmware Configuration, Firmware, SmartCell Gateway, SmartCell AP How can I create an AP Zone running 3.4 AP code on a newly created 3.6 Cluster so AP's migrated from 3.2 clusters can get upgraded to 3.6 Create a 3.4 AP zone in 3.6.2 Clusters to easily upgrade AP's running 3.2 Unsigned Code to 3.4 Intermediate Signed code which will then allow those AP's to be moved to Fully Signed 3.6 AP zones. SZ 3.6.2 clusters permit uploading 3.4.2 AP patch and create a new Zone latest 3.4 AP patch - scg-ap-3.4.2.0-911.patch https://support.ruckuswireless.com/software/2433-smartzone-ap-patch-for-post-3-4-2-patch-4-scg200-sz-100-vsz Upload 3.4.2 AP image file from Administration::Uploade::AP image: <img alt="User-added image" height="198" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096os&feoid=00N50000002Cf3M&refid=0EM2J0000021Bj5" width="500"></img> Note - GUI will reload after AP image is uploaded Uploaded patch files (does not match selected version above) <img alt="User-added image" height="104" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096os&feoid=00N50000002Cf3M&refid=0EM2J0000021Biq" width="500"></img> Create a new AP Zone using 3.4.2 image (note sample not same as shown above) <img alt="User-added image" height="388" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096os&feoid=00N50000002Cf3M&refid=0EM2J0000021BmT" width="500"></img> Note - only new Zone can be created with older uploaded versions. Existing Zones can only be downgraded to older versions if SZ had been upgraded from that zone and that zone had previously been set to the older version. AP's can be sent either by RND direction, registration rules or manually to this intermediate 3.4 AP Zone which will upgrade 3.2 AP UI code to 3.4 ISI code. Once the AP has upgraded (both images should get upgraded) then the AP can be moved to the final 3.6.2 service Zone to run latest version of code.

Upload 3.4 AP image file on 3.6 SZ-H cluster allows creating new zone running 3.4 AP code to allow AP's running 3.2 Unsigned firmware images to be upgraded to Intermediate Signed Image to allow moving to 3.6 Fully Signed Image

2022-01-06T06:21:57-0800 2022-01-07T12:00:11-0800 https://support.ruckuswireless.com/articles/000002907 2014-04-18T16:11:16-0700 monthly 0.8 admin,premium knowledge_article_918 knowledge_article_918 2014-04-18T16:11:16-0700 000002907 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector Restore Configuration Zone Director has three options to restore the configuration, go to Administer > Back up under Restore Configuration click on Choose File button and it would show the below snippet : <img alt="Zone Director Restore" height="224" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PJYm&feoid=00N50000002Cf3M&refid=0EM50000000LSoi" width="538"></img> Below is the options and their usage: * Restore everything Select this option if you want the device to use all the settings configured in the backup file (including the IP address, wireless settings, access control lists, AP and WLAN group configurations, etc.). NOTE: If you use the Restore everything option to restore settings from one Zone Director unit to another, note that wireless clients reporting to the AP managed by the first Zone Director unit will need to go through Zero-IT activation again to obtain new client certificates. Zero-IT activation is enabled by default, therefore no manual configuration is required from you. * Restore everything, except system name and IP address settings (for failover deployment at the same site): Select this option if you are deploying a second Zone Director for fail-over purposes. * Restore only WLAN settings, access control list, roles, and users (use this as a template for different sites): Select this option if you want to use the backup file as a configuration template. Click on "Restore" button the Zone Director will start restoring the backup file. During this process, Zone Director would reboot itself so configuration could take effect. Once done you could login and check your configuration

Configuration Restore Options on Zone Director

2014-04-18T16:11:16-0700 2022-01-05T23:14:57-0800 https://support.ruckuswireless.com/articles/000001655 2020-05-06T16:38:25-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4176 knowledge_article_4176 2013-02-14T17:54:29-0800 000001655 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance Performance, ZoneDirector What is meant by RF-pollution and how can i monitor it in my environment <div style="font-size: 16px;"> RF Pollution measures the level of RF contention and interference AP's experience due to wifi and non-wifi devices. We can only show a value for RF Pollution (and capacity, for that matter) after the AP sends sufficient downlink traffic to provide an estimate (if the AP does not try to use the channel, we don’t know how congested it might be). We prefer to use this RF Pollution terminology as PHY errors and CRC errors can be very misleading metrics because there is no standard way for the chipset to report them. Different chipsets can report these errors in different ways and certain types of noise can even mask these errors entirely. RF pollution is a more stable metric that will never produce misleading results.</div> <div style="font-size: 16px;">in most normal environments the RF Pollution index will average between 10 and 100. Higher values are indicative of a noisier environment. As a rough estimation. 10 = Definitely Good 100 =Not unexpected in 2.4, potentially suspicious in 5GHz 500 =Definitely Bad How do we Monitor </div> <div style="font-size: 16px;">The Zone Director displays a graphical view of AP performance and RF environment statistics this can be seen on the Monitor>Access Points GUI page. Three Performance analysis graphs plot the capacity, throughput, associated clients and RF contention in the channel as a function of time. Limitations: (1) The capacity curve is updated only when the AP transmits more than 1000 packets, each containing at least 1024 bytes of data, within a one-minute measurement interval. Limitations (2) The Other APs curve counts managed APs plus unmanaged BSSIDs, many of which may emanate from the same unmanaged AP. The RF Pollution graph plots a proprietary metric describing the impediment due to other RF signals competing for use of the channel over time. <img alt="User-added image" height="437" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxLi&feoid=00N50000002Cf3M&refid=0EM50000000LVdJ" width="500"></img> </div> <div style="font-size: 16px;"> </div> <div style="font-size: 16px;">You can refer to the RF Pollution display as a measure of channel congestion. to periods of poor performance to see whether RF congestion is the problem. You can also observe whether dips in throughput correspond to wireless channel congestion versus factors unrelated to wireless performance, such as a slow server or heavily loaded laptop.</div>

"RF pollution" What is it and how can i measure it

2020-05-06T16:38:25-0700 2022-01-04T16:28:45-0800 https://support.ruckuswireless.com/articles/000009814 2019-09-30T09:45:05-0700 monthly 0.8 admin,premium knowledge_article_3942 knowledge_article_3942 2019-09-30T09:38:42-0700 000009814 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration Performance, Configuration, SmartCell Gateway, virtual SmartCell Gateway How to increase memory resources of vSZ-instance on Hyper-V platform Please refer to the below steps to increase Hard-disk , Memory and RAM of existing vSZ-instance hosted on the Hyper-V platform. In our lab environment, we have increased Hard-disk size to 100 GB and same steps would be followed for other values to be increased as per customer's requirements. Note: Please perform this testing in downtime after collecting the vSZ cluster backup and vSZ-instance snapshot logs. Step-1: Highlight and "Turn-off" the running vSZ-instance. <img alt="User-added image" height="453" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDM6" width="801"></img> Step-2: Select the "Setting" option as highlighted. <img alt="User-added image" height="359" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDMB" width="765"></img> Step-3: We can change one of the highlighted parameter at once. <img alt="User-added image" height="398" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDMG" width="678"></img> Step-4: Highlighted option to increase the "RAM" values. <img alt="User-added image" height="472" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDML" width="698"></img> Step-5: Highlighted option to increase "CPU" core numbers <img alt="User-added image" height="514" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDMQ" width="649"></img> Step-6: Highlighted option to increase the "Hard-disk" size and click in "EDIT" tab. <img alt="User-added image" height="504" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDMV" width="663"></img> Step-7: Click on "Next" as a next process. <img alt="User-added image" height="454" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDMa" width="615"></img> Step-8: Click on "expand" and then next. <img alt="User-added image" height="483" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDMf" width="753"></img> Step-9: Put the size that you want to expand to hard drive, in this case we select 100 and click next. <img alt="User-added image" height="442" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDMk" width="701"></img> Step-10: See the summary details and click finish. <img alt="User-added image" height="521" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDMp" width="743"></img> Step-11: Disk size will expand and it can take 30 to 60 minutes. <img alt="User-added image" height="445" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDMu" width="671"></img> Step-12: You are returned back to the screen, click apply. <img alt="User-added image" height="513" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDMz" width="677"></img> Step-13: Now "start" the vSZ-instance that was off for this activity. <img alt="User-added image" height="436" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDN4" width="672"></img> Step-14: We can see the new memory running as shown below. <img alt="User-added image" height="464" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDN9" width="664"></img> Step-15: Select the vSZ-instance and click "settings" option <img alt="User-added image" height="419" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDNE" width="750"></img> Step-16: Check the increased RAM values as shown below. <img alt="User-added image" height="412" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDNJ" width="752"></img> Step-17: Check the increased CPU core values as shown below. <img alt="User-added image" height="445" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDNO" width="724"></img> Step-18: Click on the "Inspect" tab to verify the current "Hard disk" value <img alt="User-added image" height="426" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDNT" width="686"></img> Step-19: Screenshot to check the running Hyper-V running version. <img alt="User-added image" height="400" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005429&feoid=00N50000002Cf3M&refid=0EM2J000000vDNY" width="693"></img>

Sharing screenshot steps to increase the memory resources of vSZ-instance on Hyper-V

2019-09-30T09:45:05-0700 2021-12-29T19:41:40-0800 https://support.ruckuswireless.com/articles/000012015 2021-12-20T06:37:54-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4788 knowledge_article_4788 2021-12-14T09:15:13-0800 000012015 Validated (External) Public Smartcell insight;SmartCell Insight (SCI) Performance;Known issues and workarounds Performance, Known Issues and Workarounds, SmartCell Insight What is the affect of [CVE-2021-44228] Apache Log4j2 RCE on the SCI ? Pre check: Master Node: 1. sudo docker cp imply-master:/root/imply/dist/druid/lib/log4j-core-2.5.jar . 2. zipinfo log4j-core-2.5.jar | grep JndiLookup.class Data Node: 1. sudo docker cp imply-data:/root/imply/dist/druid/lib/log4j-core-2.5.jar . 2. zipinfo log4j-core-2.5.jar | grep JndiLookup.class Note: we are expecting JndiLookup.class Sample Result: <img alt="User-added image" height="37" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096mr&feoid=00N50000002Cf3M&refid=0EM2J000003WZ4J" width="500"></img> Please execute below commands to fix log4j security vulnerability on customer setup (druid). On SCI master node: <pre style="margin-left: 40px;"> 1. sudo docker cp imply-master:/root/imply/dist/druid/lib/log4j-core-2.5.jar . 2. sudo zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class 3. sudo docker cp log4j-core-2.5.jar imply-master:/root/imply/dist/druid/lib/ 4. sudo docker commit imply-master $(sudo docker ps --format "{{.Image}}" --filter name=imply-master) 5. sudo docker-compose up -d imply-master imply-query imply-data</pre> On SCI data node: <pre style="margin-left: 40px;"> 1. sudo docker cp imply-data:/root/imply/dist/druid/lib/log4j-core-2.5.jar . 2. sudo zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class 3. sudo docker cp log4j-core-2.5.jar imply-data:/root/imply/dist/druid/lib/ 4. sudo docker commit imply-data $(sudo docker ps --format "{{.Image}}" --filter name=imply-data) 5. sudo docker-compose up -d imply-data</pre> Sample Result: <img alt="User-added image" height="109" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096mr&feoid=00N50000002Cf3M&refid=0EM2J000003WZ4T" width="500"></img> Post Check: Master Node: 1. sudo docker cp imply-master:/root/imply/dist/druid/lib/log4j-core-2.5.jar . 2. zipinfo log4j-core-2.5.jar | grep JndiLookup.class Data Node: 1. sudo docker cp imply-data:/root/imply/dist/druid/lib/log4j-core-2.5.jar . 2. zipinfo log4j-core-2.5.jar | grep JndiLookup.class Note: we are expecting no JndiLookup.class Sample Result: <img alt="User-added image" height="32" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096mr&feoid=00N50000002Cf3M&refid=0EM2J000003WZ4O" width="500"></img> NOTE: If you have upgrade druid value before (300GB - default value), please contact TSE to assist you to upgrade back again to desired value but if you are using the 300GB. It will be still 300GB.

Impact and steps to mitigate the impact of [CVE-2021-44228] Apache Log4j2 RCE on SCI

2021-12-20T06:37:54-0800 2021-12-22T10:59:41-0800 https://support.ruckuswireless.com/articles/000007790 2021-04-07T09:17:27-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3306 knowledge_article_3306 2018-05-01T15:03:11-0700 000007790 Validated (External) Public Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway Why I am getting NET::ERR_CERT_SYMANTEC_LEGACY or MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONTRAINT_FAILED even when my controller has a CA signed certificate? <h2>What to do when your site uses a legacy Symantec certificate?</h2> We strongly advise to check if your site uses one of these certificates. If your site uses a certificate like this we recommend to contact your hosting provider so they can fix it by updating the certificate.

Getting certificate error even when CA signed certificate imported to ZD/SZ

2021-04-07T09:17:27-0700 2021-12-21T23:13:06-0800 https://support.ruckuswireless.com/articles/000009519 2021-12-21T01:57:31-0800 monthly 0.8 admin,premium knowledge_article_4786 knowledge_article_4786 2019-07-17T09:01:18-0700 000009519 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Cloudpath How to recover the GUI admin password for Cloudpath Cloudpath UI recovery. -- Login to the cloudpath console via SSH using port 8022. -- Enter the username as cpn_service and password for the console. Following command can be used from Cloudpath console to recover Cloudpath GUI. #support activate-ui-recovery -- This password would be valid for one time only for the next 5 mins. -- The above command helps recover the admin account. -- The above command also gives the opportunity to create a new CA-Admin (this in a situation when the CA-Admin left the company without sharing the CA-Admin credentials). Hence once you login with the recovery password, you will have an option to create a new CA-Admin.

If the Admin account or CA-Admin account is locked (or not known) the command helps reset the Admin password and gives the option to create a new CA-Admin account. In a given situation when the CA-Admin left the company and no one else has the credential this commands helps create a new CA-Admin account upon recovery.

2021-12-21T01:57:31-0800 2021-12-21T15:16:37-0800 https://support.ruckuswireless.com/articles/000006183 2016-12-07T14:24:59-0800 monthly 0.8 admin,premium knowledge_article_2511 knowledge_article_2511 2016-12-07T14:24:59-0800 000006183 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Security Configuration, Security, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Can I configure AAA proxy-mode for 802.1x WLAN in vSZ? Follow the below path to configure AAA-proxy for an 802.1x WLAN in vSZ-H. <img alt="User-added image" height="242" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Lj8o&feoid=00N50000002Cf3M&refid=0EM50000000aVVH" style="width: 738px; height: 360px;" width="500"></img>

You can configure AAA proxy-mode for 802.1x WLANs in vSZ (SCG/SZ100).

2016-12-07T14:24:59-0800 2021-12-14T00:12:14-0800 https://support.ruckuswireless.com/articles/000006039 2021-04-06T10:07:48-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4634 knowledge_article_4634 2016-09-18T15:19:32-0700 000006039 Validated (External) Public Ruckus cloud wifi Configuration;System network management;Troubleshooting;Known issues and workarounds Configuration, System Network Management, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi What IP addresses need to be open in my Firewall or Content Filter for Ruckus Cloud Wi-Fi communication ? We recommend you to update any firewall and content filter rules in place to allow communication between the APs and the Controllers Go to http://docs.ruckuswireless.com/kb/#/en-US/home/2/6/23?topic=kidH17_43394_c1 For a list of ports that need to be opened traffic from your AP subnets to reach to “any” IP address or at a minimum allow communication to the two IPs shown here or AP firmware upgrades will fail and a WLAN service interruption may occur : <ul><li>104.198.72.242</li><li>130.211.153.86</li><li>35.184.32.147</li><li>104.155.135.184</li><li>104.197.4.226</li><li>104.197.140.215</li></ul>

Ruckus Cloud Wi-Fi Cloud Firewall Requirements

2021-04-06T10:07:48-0700 2021-12-02T13:55:36-0800 https://support.ruckuswireless.com/articles/000011854 2021-08-09T07:19:37-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4737 knowledge_article_4737 2021-08-09T07:19:37-0700 000011854 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Unleashed Why I am unable to import Elliptic Curve signature format CA signed certificate on Unleashed? As of writhing this article (August 2021) Elliptic Curve signature (EC) CA certificates are not supported on Unleashed. Only RSA certificate is supported, use the same on Unleashed.

Article explains about EC signature format CA certificate support on Unleashed.

2021-08-09T07:19:37-0700 2021-11-26T15:59:51-0800 https://support.ruckuswireless.com/articles/000002896 2020-08-18T04:28:03-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4346 knowledge_article_4346 2014-04-07T06:32:31-0700 000002896 Validated (External) Public Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Configuration;Installation;Troubleshooting Performance, Configuration, Installation, Troubleshooting, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway What are some of the best practices for VoIP deployments using Ruckus Wireless devices? <div>Here are some of the recommended configurations to consider that are specific to ZD and APs </div> <div>1. Dedicated SSID for voice clients. Use a dedicated VLAN as well.</div> <div>2. Tunnel traffic to ZD</div> <div>3. Enable Call Admission Control (CAC)</div> <div>4. DTIM value of 2 (this will ensure decent battery life without compromising call quality)</div> <div>5. Enable OFDM-only</div> <div>6. BSS minrate of 5.5 Mbps</div> <div>7. Use particular channels only (e.g.: channels 1, 6, and 11 only)</div> <div>8. Enable 802.11d</div> <div>9. Increase background scan-interval to a higher value - 5 or 10 minutes</div> <div>10. See if ChannelFly is appropriate for your environment. If this doesn't suit, switch to background scanning and increase the scan interval to a higher value as mentioned above.</div> <div>11. Disable mesh</div> <div>12. Avoid any additional load on the APs</div> <div>13. Enable RTS/CTS</div> <div>14. Eliminate rogue APs and mobile hotspots</div> <div> Please note that not all these settings may be appropriate for your deployment and VoIP handset you are using. Use only the ones that are recommended by your VoIP handset maker.</div> <div> </div> <div>Here are some of the configuration settings to consider that are specific to a VoIP handset: </div> <div>1. Enable voice DSCP marking</div> <div>2. Operate at max transmit power</div> <div>3. Prefer 5 GHz frequency mode if available. This might require more number of APs. So site survey is the key.</div> <div>4. Disable DHCP request on roaming if there is a single VLAN for all voice clients</div> <div>5. Control roaming if the device permits fine tuning 6. QoS preference. Some handset makers recommend using Continuously Awake Mode (CAM). Some may recommend legacy power save. Find the latest VoIP design best practices for SmartZone 3.6+ at <a href="https://support.ruckuswireless.com/documents/2339-smartzone-voice-over-ip-voip-best-practices-design-guide" target="_blank">This Link</a>.</div>

This article lists some of the configuration changes that can be made on the ZD/APs as well as on the VoIP handsets to ensure best call quality.

2020-08-18T04:28:03-0700 2021-11-23T14:16:08-0800 https://support.ruckuswireless.com/articles/000009490 2019-06-28T01:35:01-0700 monthly 0.8 admin,premium knowledge_article_3800 knowledge_article_3800 2019-06-28T01:35:01-0700 000009490 Validated (External) Premium Ruckus icx switches Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches Why does the ICX switch not show up in the webgui of vSZ/SZ? For 7250/7450/7750 there is a workaround as solution, but for the other models 7150/7850 you need to RMA.

ICX switch doesn't show up in the webgui of vSZ/SZ. The reason is that the certificate on the switch is corrupted.

2019-06-28T01:35:01-0700 2021-11-17T07:04:13-0800 https://support.ruckuswireless.com/articles/000011377 2021-02-16T14:08:51-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4504 knowledge_article_4504 2021-02-16T14:07:01-0800 000011377 Validated (External) Public Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Cloudpath Is there an issue with android phones running on version 11 in downloading the CA certificates from cloudpath?

Android 11 mobile devices having issues enrolling onto a secure Network

2021-02-16T14:08:51-0800 2021-11-16T14:01:30-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000GvjdSAC?attachment_index=0 2021-11-16T14:01:30-0800 monthly admin,premium,warranty,guest knowledge_article_4504 knowledge_article_4504_attachment_1 Android 11 workaround document.docx 944486.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000009128 2021-05-03T00:35:02-0700 monthly 0.8 admin,premium knowledge_article_3672 knowledge_article_3672 2019-04-25T06:42:33-0700 000009128 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How to configure LDAP based web authentication on ZoneDirector? First of all we need to setup the Windows Server. We assume that the Active Directory and NPS Service is already installed and running on the Windows Server. Launch the Server Manager application. In the Navigation pane on the right, navigate down to the Active Directory and computers from ensure that Users are available under AD (Active Directory) and assigned to a group by right clicking on the user and navigating to properties. <img alt="AD User Config" height="712" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Ad&feoid=00N50000002Cf3M&refid=0EM2J000000qEGG" width="1094"></img> Configure the Radius Client: -Add in a new Radius Client. Path > Radius Clients and Servers >> Radius Clients >> Right click and select new. -Give a friendly name, IP address and shared secret. Keep a note of this shared secret as it would be needed to enter in the ZD Radius configuration. <img alt="NPS" height="868" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Ad&feoid=00N50000002Cf3M&refid=0EM2J000000qEGQ" width="994"></img> Next step in LDAP configuration is finding Admin and Base DN. Follow below steps to find Admin and Base DN information: Step 1 – Start the ldp.exe tool on the Windows Server. Start > Run > ldp.exe Step 2 – Connect & Configure > Connection > Connect > Enter Domain Controller IP/name > Port 389 <img alt="User-added image" height="198" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Ad&feoid=00N50000002Cf3M&refid=0EM2J000000qEGV" width="500"></img> Step 3 – Connect and then BIND Bind logon Box Bind as currently logged on user or login with domain credentials (typically Administration credentials) Ldp will report the bind as “authenticated” <img alt="User-added image" height="326" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Ad&feoid=00N50000002Cf3M&refid=0EM2J000000qEGa" width="500"></img> Step4: Browse > Search and Search for Administrator. At this step note the Base DN. From the search result, look for Administrator and copy the DN information. This is the Admin DN to use. <img alt="User-added image" height="237" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Ad&feoid=00N50000002Cf3M&refid=0EM2J000000qEGf" width="937"></img> Next step is to configure ZoneDirector. This procedure consists of creating a AAA entry for the LDAP server and a Web-Auth based WLAN. To create an AAA LDAP entry, Log on to the ZoneDirector’s Web UI, Go to Services and Profile->AAA Servers, Click Create Button and enter the information for the LDAP server. Required information includes: • Server name • Type (LDAP) • IP Address of LDAP server • Port number (389 by default) • Base DN • Admin DN • Shared Secret – the secret you entered previously on LDAP Server for the ZoneDirector • Base DN (Logon Name) <img alt="ZD LDAP" height="722" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Ad&feoid=00N50000002Cf3M&refid=0EM2J000000qEGp" width="998"></img> Run a AAA test to ensure that LDAP server allows ZD to authenticate. <img alt="AAA" height="151" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Ad&feoid=00N50000002Cf3M&refid=0EM2J000000qEGz" width="817"></img> Next create a WLAN with Web Authentication using LDAP. For that, Navigate to Wireless LANs, create a new WLAN and enable Web Authentication. Choose Authentication Server as LDAP and Save configuration. <img alt="User-added image" height="807" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Ad&feoid=00N50000002Cf3M&refid=0EM2J000000qEH9" width="1021"></img> The WLAN is now ready for Web Authentication using LDAP Server. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

This article explains how to configure ZoneDirector and LDAP server for Web Authentication

2021-05-03T00:35:02-0700 2021-10-25T15:51:03-0700 https://support.ruckuswireless.com/articles/000007658 2018-02-13T13:32:06-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_3273 knowledge_article_3273 2018-02-13T13:31:15-0800 000007658 Validated (External) Public Ruckus cloud;Unleashed;Zonedirector;Smartcell gateway;Virtual smartcell gateway;Sz100;RUCKUS Cloud;Ruckus Cloud Mobile Apps;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Ruckus Cloud, Unleashed, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Why my clients on two different WLAN running on two different VLAN are not able to see each other in Apple classroom service? Cannot be resolved from Ruckus side as not supported by Apple.

Apple classroom service is not supported on multi VLAN environment yet

2018-02-13T13:32:06-0800 2021-10-20T04:09:16-0700 https://support.ruckuswireless.com/articles/000004312 2021-05-06T01:21:11-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2641 knowledge_article_2641 2017-07-17T11:26:17-0700 000004312 Validated (External) Public Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor Why I am seeing two similar WLAN's(SSIDs) broadcast in same location and how to identify which AP is broadcasting it? Using inSSIDer(or similar utility) installed on a Laptop, we got the BSSID for the two SSIDs. A BSSID is a unique identifier which is derived from the AP's MAC address by incrementing the last number under the last octet of the AP's MAC address. For Example If the AP's physical MAC address is 8c:0c:90:1f:a9:30 The BSSID would be 8c:0c:90:1f:a9:3X. Where X could be any hexadecimal number. We subsequently looked for the first 5 octet of the BSSID under Monitoring>Access Point and we found the AP which was broadcasting one of the BSSIDs. We confirmed from the AP configuration that same AP was broadcasting the duplicate WLAN. We removed the duplicate WLAN from the WLAN Group and subsequently duplicate SSID disappeared.

Why I am seeing two similar WLAN's broadcast in same location and how to identify which AP is broadcasting it?

2021-05-06T01:21:11-0700 2021-10-19T09:33:21-0700 https://support.ruckuswireless.com/articles/000004208 2021-04-07T01:59:33-0700 monthly 0.8 admin,premium knowledge_article_1644 knowledge_article_1644 2015-03-17T15:06:48-0700 000004208 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;System network management;Troubleshooting Installation, System Network Management, Troubleshooting, ZoneDirector How to hard reset ZD1200 to factory default settings? ZD1200 Hard Reset procedure : - 1. On the front panel of the ZoneDirector 1200 there is a F/D pinhole. 2. Insert a paper clip in the F/D hole and press for at least 15-20 seconds. After the reset is complete, the Status LED blinks red, then blinks green, indicating that the system is in factory default state. Default IP of ZoneDirector is 192.168.0.2 After you complete the Set up Wizard, the Status LED will be steady green.

How to hard reset the ZoneDirector 1200 to factory defaults

2021-04-07T01:59:33-0700 2021-10-19T07:25:39-0700 https://support.ruckuswireless.com/articles/000004726 2019-07-07T20:15:20-0700 monthly 0.8 admin,premium knowledge_article_1957 knowledge_article_1957 2015-06-19T02:01:15-0700 000004726 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What can cause a 404 not found error in a Hotspot implementation? Below are couple of things to check when you see page not found error message in a browser when logging into a Hotspot network: 1. Login URL should be directly accessible even from an unauthorized wireless station. If the page opens fine when directly accessed but it doesn't come up when going through the auto redirect, cross-check if the login URL is correctly typed into the Hotspot configuration or not. 2. Once the user submits login credentials via the login page, captive portal server submits them to the ZoneDirector through the client device. ZoneDirector will in turn forward them to the authentication server for verification. So it really requires communication between the client device and the ZoneDirector.

This article explains some of the reasons for 404 not found error message when hotspot is implemented.

2019-07-07T20:15:20-0700 2021-10-18T02:07:23-0700 https://support.ruckuswireless.com/articles/000003269 2017-06-19T13:48:44-0700 monthly 0.8 admin,premium knowledge_article_1230 knowledge_article_1230 2014-08-06T08:16:50-0700 000003269 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What is the Encrypted Tunnel speed/capacity (in Mbps) between AP WLANs & ZoneDirectors? <div style="color: rgb(33, 33, 33); font-size: 15px; background-color: rgb(255, 255, 255);">The Encrypted and Un-Encrypted Tunnel speed (in Mbps) between ZoneDirector and AP are as follows: For ZD1100 Non-encrypted/bi-direction : ~300 Mbps. Encrypted/bi-direction: ~62Mbps For ZD1200 Non-encrypted/bi-direction: ~847 Mbps Encrypted/bi-direction: ~209 Mbps</div> <div> For ZD3000 Non-encrypted/bi-direction: ~900 Mbps Encrypted/bi-direction: ~580 Mbps For ZD5000 Non-encrypted/bi-direction: ~957 Mbps Encrypted/bi-direction: ~957 Mbps </div>

Maximum bandwidth capacity (in Mbps) for the encrypted tunnels from AP to each ZD model.

2017-06-19T13:48:44-0700 2021-10-14T12:03:25-0700 https://support.ruckuswireless.com/articles/000011912 2021-10-01T09:55:02-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4782 knowledge_article_4782 2021-10-01T09:55:02-0700 000011912 Validated (External) Public Ruckus network director rnd Configuration Configuration, Ruckus Network Director RND How to Configure Time Zone on Ruckus Network Director Configure the time zone change pertinent to local time zone where the RND instance resides. For example: The time zone for the following RND instance resides in Colorado; therefore, the time zone is configured for UTC -7 <img alt="User-added image" height="193" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096av&feoid=00N50000002Cf3M&refid=0EM2J00000216Ue" width="500"></img> Once the proper time one setting is selected, click on UPDATE to save changes. Next, SSH to the RND instance(s) and configure the time zone setting pertinent to where the RND resides [root@RND_3042_Alpha ~]# timedatectl set-timezone America/Denver [root@RND_3042_Alpha ~]# timedatectl Local time: Tue 2021-09-21 11:37:02 MDT Universal time: Tue 2021-09-21 17:37:02 UTC RTC time: Tue 2021-09-21 17:37:03 Time zone: America/Denver (MDT, -0600) NTP enabled: n/a NTP synchronized: no RTC in local TZ: no DST active: yes Last DST change: DST began at Sun 2021-03-14 01:59:59 MST Sun 2021-03-14 03:00:00 MDT Next DST change: DST ends (the clock jumps one hour backwards) at Sun 2021-11-07 01:59:59 MDT Sun 2021-11-07 01:00:00 MST [root@RND_3042_Alpha ~]# If you are unsure of the time zone syntax, issue the command timedatectl list-timezones. Keep in mind that the list of time zones is quite extensive as there are 425 possible selections. Therefore, utilize the grep command with the country or city to narrow down the selection list. See below example. <img alt="User-added image" height="1242" src="https://ruckuswireless--c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096av&feoid=00N50000002Cf3M&refid=0EM2J00000216Y2" width="500"></img> [root@ruckusnetworkdirector ~]# timedatectl list-timezones | wc -l 425 [root@ruckusnetworkdirector ~]# [root@ruckusnetworkdirector ~]# timedatectl list-timezones | grep -i denver America/Denver [root@ruckusnetworkdirector ~]# [root@RND_3042_Alpha ~]# timedatectl set-timezone America/Denver

Configuring time zone settings on Ruckus Network Director (RND)

2021-10-01T09:55:02-0700 2021-10-03T09:46:37-0700 https://support.ruckuswireless.com/articles/000006623 2018-01-03T10:16:26-0800 monthly 0.8 admin,premium knowledge_article_2805 knowledge_article_2805 2017-12-12T16:04:09-0800 000006623 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, ICX 7250, ICX 7450, ICX 7750 What are the cables needed for ICX7250, ICX7450, ICX7750 Console Access? ICX7250, ICX7450, ICX7750 devicse utilize a Mini-USB serial port for console access. <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxqJ&feoid=00N50000002Cf3M&refid=0EM50000000X6yV"></img> <ol style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Ethernet management port: 10/100/1000 Mbps RJ-45.</li><li>File transfer: USB port (Standard-A plug)</li><li>Console management: Mini-USB serial port (Mini-B plug).</li></ol> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">The first connection needed will be the Mini-USB to RJ-45 console cable: <img alt="User-added image" height="325" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxqJ&feoid=00N50000002Cf3M&refid=0EM50000000X6ya" width="500"></img> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">The RJ-45 console port should be connected to a RJ-45 to DB9 adaptor: <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"><img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxqJ&feoid=00N50000002Cf3M&refid=0EM50000000X6yf"></img> <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxqJ&feoid=00N50000002Cf3M&refid=0EM50000000X6yk"></img> Then use a DB9 to USB cable in order to access the Brocade Switch using a regular USB port from the computer: <img alt="User-added image" height="252" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxqJ&feoid=00N50000002Cf3M&refid=0EM50000000X6yp" width="500"></img> All connections together: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxqJ&feoid=00N50000002Cf3M&refid=0EM50000000X6yu"></img> Using those connections, you should be able to identify the COM port used on the computer in order to access the device: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxqJ&feoid=00N50000002Cf3M&refid=0EM50000000X6yz"></img> You may use different connections depending of the computer ports, but if there is no console or DB9 port on the computer usually we need to access the device via USB.

Description of the different cables needed in order to access via console the ICX7250, ICX7450, ICX7750 devices using a USB port

2018-01-03T10:16:26-0800 2021-10-01T10:13:15-0700 https://support.ruckuswireless.com/articles/000008853 2019-04-17T17:03:38-0700 monthly 0.8 admin,premium knowledge_article_3660 knowledge_article_3660 2019-03-05T11:09:03-0800 000008853 Validated (External) Premium Ruckus icx switches Firmware Firmware, Ruckus ICX Switches How to Load code from Boot menu (Emergency Code Download) ? Commands - printenv, setenv ipaddr, setenv gatewayip, setenv netmask, saveenv, setenv image_name, update_primary, boot_primary, show flash, copy flash flash secondary. (Must have management port connect to TOR) 1. Reboot, and enter boot monitor mode by pressing "b". 2. Enter printenv command to display info: ICX64XX-boot> printenv baudrate=9600 uboot=/foundry/FGS/bootcode/kxz07400.bin ver=07.4.00T310 (Mar 1 2012 - 11:28:23) 3. Set IP address of the TFTP SERVER(10.26.140.0): ICX64XX-boot> setenv serverip 10.176.4.25 ICX64XX-boot> setenv serverip 10.120.21.36 ICX64XX-boot> setenv serverip 10.176.195.0 4. Set IP Address, Gateway, netmask and SAVE: ICX64XX-boot> setenv ipaddr 10.176.195.232 ICX64XX-boot> setenv gatewayip 10.176.192.1 ICX64XX-boot> setenv netmask 255.255.240.0 ICX64XX-boot> saveenv ICX64XX-boot> setenv ipaddr 10.176.193.133 ICX64XX-boot> setenv gatewayip 10.176.208.1 ICX64XX-boot> setenv netmask 255.255.252.0 ICX64XX-boot> saveenv 5. Enter printenv command to display updated info: ICX64XX-boot> printenv baudrate=9600 ipaddr=10.26.141.126 gatewayip=10.26.128.1 netmask=255.255.128.0 serverip=10.26.140.0 uboot=/foundry/FGS/bootcode/kxz07400.bin ver=07.4.00T310 (Mar 1 2012 - 11:28:23) 6. Ping to TFTP server from device to verify connection: ICX64XX-boot> ping 10.26.140.0 ethPortNo = 0 Using egiga0 device host 10.26.140.0 is alive 7. Use setenv image_name command to copy the image file from TFTP server to device: If you need to navigate around our TFTP server to find the path the login is below: 10.176.195.0 Administrator/CodeRepo1 ICX64XX-boot> setenv image_name /ironware/FastIron/08000/08000a/ICX64xx/Images/ICX64S08000a.bin 8. Use update_primary to update the primary flash with the new image: ICX64XX-boot> update_primary ethPortNo = 0 Using egiga0 device TFTP from server 10.26.141.0; our IP address is 10.26.141.126 Download Filename 'ICX64S08000a.bin'. Load address: 0x3000000 Download to address: 0x3000000 Loading: %################################################################# (Truncated) done Bytes transferred = 10360844 (9e180c hex) prot off f8100000 f907ffff ................................................................................ (Truncated) Un-Protected 248 sectors erase f8100000 f907ffff ................................................. (Truncated) Erased 248 sectors copying image to flash, it will take sometime... sflash write 3000000 100000 f80000 TFTP to Flash Done. 9. Use boot_primary to load the image from primary flash: ICX64XX-boot> boot_primary Booting image from Primary ## Booting image at 00007fc0 ... Created: 2012-03-02 20:38:52 UTC Data Size: 10360268 Bytes = 9.9 MB Load Address: 00008000 Entry Point: 00008000 Verifying Checksum ... OK OK Starting kernel in BE mode ... Uncompressing Image............................................................. ................................................................................ ........................................... done, booting the kernel. Config partition mounted. 10. Use show flash to check if the image has successfully loaded to primary flash. 11. Use copy flash flash secondary to copy image from primary to secondary flash 12. Assign an IP address to in monitor mode. MP-1 Monitor> ip address 10.26.141.23 IP address = 10.26.141.23 MP-1 Monitor> ip default-gateway 10.26.128.1 13. Copy the image from the TFTP server using the following command: If you need to navigate around our TFTP server to find the path the login is below: 10.26.140.0 Administrator/CodeRepo1 MP-1 Monitor> copy tftp flash 10.26.140.0 /ironware/xmr06000a.bin primary 14. Reload the device using the following command. MP-1 Monitor> reset Are you sure? (enter 'y' or 'n'): y ..MP. Enter 'a' to stop at memory test Enter 'b' to stop at boot monitor ..BOOT INFO: load monitor from code flash, cksum = 79ca monitor 0x80000100 DMAC0 Link is up BOOT INFO: verify flash files - max_code_flash_blocks[126]............... read_startup_config INFO: 4-slot backplane is detected. g_bp_board_class_val = 134, g_max_slave_slot = 4, g_max_snm_slot = 3,g_max_power = 3

Loading code from Boot menu ICX 6430, ICX 6450, ICX 6650, ICX 7450, ICX 7750, and FSX

2019-04-17T17:03:38-0700 2021-09-21T07:20:57-0700 https://support.ruckuswireless.com/articles/000001923 2021-04-09T02:27:30-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4645 knowledge_article_4645 2013-04-03T17:37:15-0700 000001923 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What EAP methods are supported by ZoneDirector 802.1x? Q: Do we have a list of EAP methods that have been validated on our system (AP + ZD)? A: EAP-TLS, EAP-TTLS, EAP-PEAP, EAP-SIM have all been tested before. EAP-LEAP (Cisco’s proprietary) does not work.

What EAP methods are supported by ZoneDirector 802.1x?

2021-04-09T02:27:30-0700 2021-09-17T19:16:34-0700 https://support.ruckuswireless.com/articles/000005630 2020-06-26T15:26:28-0700 monthly 0.8 admin,premium knowledge_article_4270 knowledge_article_4270 2016-03-28T10:08:52-0700 000005630 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Security;Known issues and workarounds Security, Known Issues and Workarounds, virtual SmartCell Gateway, SZ100 Why are IoS devices failing to connect? The Resolution is to extend the default EAP timeout values by AP CLI command, for the 802.1x WLAN, ie wlan4. rkscli: set cryptodef wlan4 wpa eap supptimeout 10 rkscli: set encryption wlan4 update rkscli: set cryptodef wlan36 wpa eap supptimeout 10 rkscli: set encryption wlan36 update When we increase the supplicant timeout to 10 seconds or more it fixed the issue. Increase the timeout as required.

Under SmartZone, iOS devices were timing out in EAP authentication, required extended default values.

2020-06-26T15:26:28-0700 2021-09-16T16:26:18-0700 https://support.ruckuswireless.com/articles/000008090 2021-05-03T00:07:17-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3332 knowledge_article_3332 2018-08-10T09:18:42-0700 000008090 Validated (External) Public Sz300;Scg200;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SZ300, SCG200, SZ100 SZ: Dashboard cannot load Google map correctly - Google Map API key How to get Google Map API key You can enable google bill with your credit card to get Google Map API key as link below, https://cloud.google.com/maps-platform/#get-started You will get free $200 each month and can set usage limit to protect against unexpected increases. How To change Google Map API key in SZ3.6.x You can change API key via WebUI, click option in the map and select Google Map API key tab and select "Use the key below to display Google Map then paste your key and Apply. <img alt="User-added image" height="457" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4AE&feoid=00N50000002Cf3M&refid=0EM50000000lZHw" width="500"></img> “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

SZ3.6.x SZ dashboard cannot load Google map correctly without customer CC info.

2021-05-03T00:07:17-0700 2021-09-16T10:30:12-0700 https://support.ruckuswireless.com/articles/000011885 2021-09-14T10:18:42-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4778 knowledge_article_4778 2021-09-14T10:18:42-0700 000011885 Validated (External) Public Ruckus icx switches;Brocade eos products;Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Knowledge base Knowledge Base, Ruckus ICX Switches, Brocade EOS Products, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor <div style="margin-left: 20px; text-align: left;"> All coverage calculations are based on the driving distance in miles/kms without crossing a country border or the use of a ferry service. Due to local restrictions, Brazil and India coverage areas are restricted to parts delivery within the same state as the SSL is located in. Hardware coverage for Brazil and India is restricted to products which Network Edge has not announced an EOL date. The attached spreadsheet provides us the driving distance limit from the FSL to customers within the same state. Anything beyond the mentioned kms it will be considered as ODA. </div>

What is ODA?

2021-09-14T10:18:42-0700 2021-09-14T12:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000008odpSAA?attachment_index=0 2021-09-14T12:00:08-0700 monthly admin,premium,warranty,guest knowledge_article_4778 knowledge_article_4778_attachment_1 Coverage Spreadsheet.xlsx 20303.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000009014 2020-03-09T10:18:11-0700 monthly 0.8 admin,premium knowledge_article_4079 knowledge_article_4079 2019-04-03T20:03:53-0700 000009014 Validated (External) Premium Sz300;Scg200;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Troubleshooting Troubleshooting, SZ300, SCG200, SZ100 Why is smart monitor configuration disabling the WLANs? Smart Monitor feature is going to check AP’s uplink connectivity periodically and turn off the WLANs according to the connection status. Smart Monitor will use arping as checking method. AP will check the connectivity with default gateway which is fetched from routing table automatically. According to the result, Smart Monitor will make the decision to turn on/off the WLANs. The smart monitor is configured under the zone and also could be overridden on AP basis. <img alt="User-added image" height="178" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054er&feoid=00N50000002Cf3M&refid=0EM2J000000q8wG" width="500"></img> Debugging: - get smart-mon - Check the smart monitor stats on the AP to validate if there are proper responses. <img alt="User-added image" height="200" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054er&feoid=00N50000002Cf3M&refid=0EM2J000000q8wL" width="500"></img> - Do a continuous arping to the default gateway from the shell of the AP to validate if getting a proper response and also if there are any delays. <img alt="User-added image" height="358" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054er&feoid=00N50000002Cf3M&refid=0EM2J000000q8wQ" width="500"></img> - Check the support info file of the AP or the live smart monitor logs under logread -f | grep "smart Monitor" on the shell of the AP.

Debugging smart monitor configuration on the controller.

2020-03-09T10:18:11-0700 2021-09-14T11:12:34-0700 https://support.ruckuswireless.com/articles/000002012 2020-08-10T02:07:31-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_335 knowledge_article_335 2013-05-08T16:53:32-0700 000002012 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why my PoE device doesn't power up through the PoE Out port of an AP? 7025, 7055, 7762 and 7782 model APs come with PoE out feature. You should be able to connect something like an IP camera OR a 3G smart cell radio to these APs as long as they are PoE capable. Here are few things to check if the device doesn't power up via the PoE OUT port: 1. Check if the device is 802.3af PoE standards compliant 2. Check if the PoE out feature is enabled through the AP GUI - under Device Configuration (OR through the ZD GUI if the AP is ZD controlled) 3. To be able to power up an external device, AP should be drawing enough power. Check if the AP is connected to a 802.3at (NOT 802.3af) compliant switch. Also check how much power it is drawing from the PoE switch. Otherwise AP should be powered up using the Ruckus 60W PoE injector that can be ordered separately. If you have exhausted all the above options, you may also want to try replacing the unit with a different unit.

PoE out troubleshooting steps

2020-08-10T02:07:31-0700 2021-09-09T09:47:43-0700 https://support.ruckuswireless.com/articles/000010276 2020-03-26T01:34:07-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4106 knowledge_article_4106 2020-03-26T01:34:07-0700 000010276 Validated (External) Public Smartcell insight;SmartCell Insight (SCI) Performance;Configuration;Installation;Known issues and workarounds Performance, Configuration, Installation, Known Issues and Workarounds, SmartCell Insight Can we change the timezone on the SCI system wide to receive the reports in local timezone? According to the SCI installation guide, we don't recommend changing the timezone of SCI from UTC to any local timezone. Please do not change the timezone on the SCI VMs. SCI expects the VM to keep UTC time. Changing to a timezone other than UTC on the SCI VM can cause SCI to stop working. As an analytics system, SCI must make sure that all its statistics are reported with the correct time. Therefore, you must ensure that NTP servers are reachable by all elements of the ecosystem: APs, SZ's, ZoneDirectors, and SCI. Since customer wanted to receive the reports in his local timezone, we suggested him to use Data Explorer, create any reports in network or airtime utilization cubes, set the local timezone and then schedule reports (Check below screenshot from my lab SCI setup). We should then receive the reports in local timezone. <img height="319" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054lT&feoid=00N50000002Cf3M&refid=0EM2J000000weod" width="734"></img>

SCI by default expects the VM to keep UTC timezone. One of our BullDog customers wanted to change the timezone on the SCI to receive the reports in his local timezone.

2020-03-26T01:34:07-0700 2021-09-08T17:20:31-0700 https://support.ruckuswireless.com/articles/000011875 2021-09-07T06:05:54-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4762 knowledge_article_4762 2021-09-07T06:05:54-0700 000011875 Validated (External) Public Ruckus icx switches;Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Knowledge base Knowledge Base, Ruckus ICX Switches, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Latin American Countries Argentina, Bolivia, Colombia, Ecuador, French Guiana (department of France), Guyana, Paraguay, Peru, Uruguay, Venezuela Wired – Advance Replacement <ul><li>IOR/EOR auto notification to customers.</li><li>Customer needs to accept/reject.</li><li>If accepted, replacement processed from USA/Louisville.</li><li>Customer must return the defective to USA/Louisville.</li><li style="">Cost of defective return to be borne by customer.</li></ul> Wireless – Advance Replacement <ul><li>Replacements are Shipped NBD, from USA/Louisville warehouse.</li><li>Customers must return the defective to USA/Louisville. </li><li style="">Cost of defective return to be borne by RKUS.</li></ul> Wireless – Return to Factory <ul><li>Defective return instructions are auto sent to customers asking to return the defectives to USA/Louisville.</li><li>COD for low value products are sometimes exceptionally approved by CSM’s, SSL’s Accounts Team & RMA OD.</li><li style="">Replacements will be shipped from USA/Louisville warehouse within 15 business days after receipt of defectives.</li></ul> Brazil & Chile Wired – Advance Replacement <ul><li>Replacement fulfilled from in-country warehouse Sao Paulo & Santiago respectively and Delivered NBD.</li><li>Customer returns the defective to Sao Paulo (Brazil) & Santiago (Chile) warehouse, respectively.</li><li style="">RKUS will bear the return cost.</li></ul> Wireless – Advance Replacement <ul><li>Brazil -- Replacement fulfilled from in-country warehouse Sao Paulo and Shipped NBD.</li><li>Chile -- Replacements fulfilled from USA/Louisville & Shipped NBD.</li><li>Customer returns the defective to Sao Paulo & USA/Louisville warehouse, respectively.</li><li style="">RKUS will bear the return cost.</li></ul> Wireless – Return to Factory <ul><li>Defective return instructions are sent to Brazil & Chile customers to return the defectives to Sao Palo & USA/Louisville warehouse respectively.</li><li style="">Replacements will be shipped from Sao Paulo for Brazil & USA/Louisville warehouse for Chile within 15 business days after receipt of defectives.</li></ul> <div style="">Note: Attached the IOR sample email template.</div>

How to process replacements for Latin American Countries

2021-09-07T06:05:54-0700 2021-09-07T12:00:11-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000008odLSAQ?attachment_index=0 2021-09-07T12:00:11-0700 monthly admin,premium,warranty,guest knowledge_article_4762 knowledge_article_4762_attachment_1 IOR Sample Template msg.docx 119770.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000011874 2021-09-07T06:05:55-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4761 knowledge_article_4761 2021-09-07T06:05:55-0700 000011874 Validated (External) Public Ruckus icx switches;Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Knowledge base Knowledge Base, Ruckus ICX Switches, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Central American Countries Belize, Costa Rica, El Salvador, Guatemala, Honduras, Nicaragua, Panama. Wired – Advance Replacement <ul><li>IOR/EOR auto notification to customers.</li><li>Customer needs to accept/reject.</li><li>If accepted, replacement processed from USA/Louisville.</li><li>Customer must return the defective to USA/Louisville.</li><li>Cost of defective return to be borne by customer.</li></ul> Wireless Advance Replacement <ul><li>Replacements are Shipped NBD, from USA/Louisville warehouse.</li><li>Customers must return the defective to USA/Louisville. </li><li style="">Cost of defective return to be borne by RKUS.</li></ul> Return to Factory <ul><li style="margin-left: 8px;">Defective return instructions are auto sent to customers asking to return the defectives to USA/Louisville.</li><li style="margin-left: 8px;">COD for low value products are sometimes exceptionally approved by CSM’s, SSL’s Accounts Team & RMA OD</li><li style="margin-left: 8px;">Replacements will be shipped from USA/Louisville warehouse within 15 business days after receipt of defectives</li></ul> Mexico Wired – Advance Replacement <ul><li>Replacement fulfilled from in-country warehouse Mexico City.</li><li>Replacements are Delivered NBD.</li><li>Defectives will be picked-up from customers.</li><li>Ruckus will bear the pick-up charges.</li></ul> Wireless – Advance Replacement <ul><li>Replacement fulfilled from in-country warehouse Mexico City.</li><li>Replacements are Shipped NBD.</li><li>Defectives will be picked-up from customers. </li><li style="">Ruckus will bear the pick-up charges.</li></ul> Wireless – Return to Factory <ul><li>Defective return instructions are auto sent to customers asking to return the defectives to Mexico City.</li><li>Return cost to be borne by the customers.</li><li style="">Replacements will be shipped from Mexico City within 15 business days after receipt of defectives.</li></ul> <div style="">Note: I've attached the IOR sample email template.</div>

How to process replacements for Central American Countries?

2021-09-07T06:05:55-0700 2021-09-07T12:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000008odGSAQ?attachment_index=0 2021-09-07T12:00:08-0700 monthly admin,premium,warranty,guest knowledge_article_4761 knowledge_article_4761_attachment_1 IOR Sample Template msg.docx 119770.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000001449 2021-05-25T08:52:07-0700 monthly 0.8 admin,premium knowledge_article_1009 knowledge_article_1009 2013-01-18T16:15:30-0800 000001449 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How to upgrade the ZoneDirector firmware from CLI using TFTP or FTP? fw_upgrade is the command used to upgrade / downgrade the firmware on the ZD from CLI, in Debug mode. The ZD firmware should be located in the TFTP/FTP root directory of the server used or you have to define the complete file path. SSH/console login to the ZoneDirector to access its command line interface and execute the following set of commands: ruckus> en ruckus# ruckus# debug ruckus(debug)# fw_upgrade -p <protocol> -s <server ip address> -n <image file name> Example: Using TFTP ruckus(debug)# fw_upgrade -p tftp -s 192.168.2.1 -n zd3k_9.4.0.0.110.ap_9.4.0.0.110.img Using FTP ruckus(debug)# fw_upgrade -p ftp -s username:password@192.168.2.1 -n zd3k_10.0.1.0.146.ap_10.0.1.0.146.img Note: TFTP/FTP server application IP address must be reachable from the ZD network. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

This article explains the command required for upgrading the ZoneDirector firmware from the command line interface and when no internet access is available.

2021-05-25T08:52:07-0700 2021-09-06T11:50:00-0700 https://support.ruckuswireless.com/articles/000011876 2021-09-02T14:55:15-0700 monthly 0.8 admin,premium knowledge_article_4760 knowledge_article_4760 2021-09-02T14:55:15-0700 000011876 Validated (External) Premium Ruckus icx switches Configuration;Firmware;System network management;Troubleshooting Configuration, Firmware, System Network Management, Troubleshooting, Ruckus ICX Switches TSB 2021-005 – FastIron 08.0.90m Switch Image – Management access issues (DEFECT # FI-247944) A software fix will be available soon.

This technical support bulletin describes a condition resulting from upgrading the software on an ICX switch to RUCKUS FastIron Software version 08.0.90m Switching image. The FastIron 08.0.90m Routing image is not affected

2021-09-02T14:55:15-0700 2021-09-02T18:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000008odQSAQ?attachment_index=0 2021-09-02T18:00:08-0700 monthly admin,premium knowledge_article_4760 knowledge_article_4760_attachment_1 TSB-2021-005 - FI 08.0.90m Switching.pdf 169565.0 application/pdf https://support.ruckuswireless.com/articles/000001668 2020-08-18T03:52:42-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4349 knowledge_article_4349 2013-02-24T19:44:18-0800 000001668 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How client fingerprinting happens? What is client fingerprinting? Client fingerprinting is a feature effective from 9.4 firmware, it’s a technique used by ZoneDirector which attempts to identify client devices by their Operating System, device type and Host Name, if available. This makes identifying client devices easier in the Dashboard, Client Monitor and Client Details screens as shown below. <img alt="User-added image" height="130" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxqx&feoid=00N50000002Cf3M&refid=0EM50000000LFyQ" width="500"></img> How client fingerprinting happens? The zone director captures the clients OS when client sends a DHCP request through the access points. The client finger printing can be enabled by clicking it in the advanced WLAN option. <img alt="User-added image" height="311" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxqx&feoid=00N50000002Cf3M&refid=0EM50000000LFyV" width="500"></img> How is the OS information captured? The AP records the OS information from the client by capturing the DHCP request packet, the OS information is found in the DHCP option 60 if present and parameter order list in Option 55. Some DHCP request will have DHCP Option 60 and some do not, but all will have Option 55. If DHCP Option 60 is present we use that information along with the parameter list in Option 55 to identify the OS type a closer look into the DHCP packet reveals the following: Packet capture of DHCP request, the client used in this capture is windows XP: <img alt="User-added image" height="373" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxqx&feoid=00N50000002Cf3M&refid=0EM50000000LRKr" width="500"></img> This capture show Option 60: Vendor class identifier = "MSFT 5.0" Option 55 Parameter order: 1,15,3,6,44,46,47,31,33,249,43 IF Option 55 had the following parameter order instead: 1,15,3,6,44,46,47,31,33,43 (Note parameter 249 is not present) This client would have been identified as a "Windows 2000"

How does client fingerprinting work on ZD controllers.

2020-08-18T03:52:42-0700 2021-09-01T23:22:46-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PCzsCAG?attachment_index=0 2021-09-01T23:22:46-0700 monthly admin,premium,warranty,guest knowledge_article_4349 knowledge_article_4349_attachment_1 Client fingerprinting.docx 218118.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000011870 2021-08-30T16:18:26-0700 monthly 0.8 admin,premium knowledge_article_4758 knowledge_article_4758 2021-08-30T16:18:26-0700 000011870 Validated (External) Premium Sz300;Virtual smartcell gateway;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Configuration Configuration, SZ300, virtual SmartCell Gateway How to increase the max number of Hotspot 2.0 profile on a Smart Zone controller ? <ul><li>Hotspot 2.0 profile limitation was increased in version 5.2.2 patch 1 to 10,000</li><li>Please upgrade Smartzone to version 5.2.2 patch 1 release </li></ul>

In certain use case scenario the hotspot 2.0 profile limit of 3000 may be reached. This article will share the options available for users of Smart Zone controller to overcome this issue.

2021-08-30T16:18:26-0700 2021-08-30T18:00:08-0700 https://support.ruckuswireless.com/articles/000001541 2021-08-26T02:17:19-0700 monthly 0.8 admin,premium knowledge_article_4757 knowledge_article_4757 2013-01-24T16:46:02-0800 000001541 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector This seems to be Management access control issue, Is there any IP address configured under Management ACL in Zone Director. If added then you will be able to login only from that IP address or from that subnet. If you know which IP address was set as management ACL, please configure that IP address on the laptop to gain access to ZD and reconfigure the Management ACL. This is available in Configure-->system->Management Access Control (9.x release) or System-->System Setting-->Management Access Control (10.x release ) page. Through CLI: ruckus> enable ruckus# config ruckus(config)# show mgmt-acl --> from there you can find list of acls ruckus(config)# system ruckus(config-sys)# no mgmt-acl {acl name} In case, if you do not know the IP address, kindly follow the below procedure after gaining access to ZD through console(attached is the doc for using console): Please login: admin Password: Welcome to the Ruckus Wireless ZoneDirector 1100 Command Line Interface ruckus> en ruckus# config ruckus(config)# system ruckus(config-sys)# mgmt-acl sample --> 'sample' is the name of the mgmt-acl The management ACL 'sample' has been created. To save the Management ACL, type 'end' or 'exit'. ruckus(config-mgmt-acl)# restrict-type subnet ip-subnet 192.168.2.100 255.255.255.0 The command was executed successfully. To save the changes, type 'end' or 'exit'. ruckus(config-mgmt-acl)# end The management ACL 'sample' has been updated and saved. Your changes have been saved. Once you run the above command then exit from CLI using 'quit' and then configure your laptop with the IP address 192.168.2.100/255.255.255.0 and login to the ZD using its IP address (192.168.2.251) and edit the management acl as per your requirement. You should be able to gain access to ZD after this.

Unable to access ZD GUI . Error seen as https://<ZD_IPADDR>/_.html.

2021-08-26T02:17:19-0700 2021-08-26T06:00:17-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PCfiCAG?attachment_index=0 2021-08-26T06:00:17-0700 monthly admin,premium knowledge_article_4757 knowledge_article_4757_attachment_1 Console.pdf 110755.0 application/pdf https://support.ruckuswireless.com/articles/000001363 2021-08-26T02:17:37-0700 monthly 0.8 admin,premium knowledge_article_4756 knowledge_article_4756 2013-01-14T06:00:39-0800 000001363 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Why did my working AP lose contact with the ZD? If a customer reports that the AP lost contact with the ZD all of the sudden and is able to reach the AP from the LAN, and even rebooting the AP does not help One thing is to check the ZD status from the AP support info file and check the below information. ### ZoneDirector Status ### AP: ac:67:06:35:76:a0 / 10.13.213.33 Name : RuckusAP Tunnel/Sec Mode : L3 / Undecided State : SULKING Mesh Role : Undefined Timer : Silent, expires in 15 secs HW/SW Version : 11.0.0.0 / 9.0.0.3.75 Model/Serial Num : zf2741 / 171055001078 ZoneDirector Addr : Unknown reboot reason : user reboot reboot details : cli reboot fragment by MTU : no (mtu length 0) tx message count : 72 rx message count : 0 tx packet count : 72 rx packet count : 0 tx fragment count : 0 rx fragment count : 0 retry fail count : 0 If we see the ZD address as unknown then somehow the AP lost the ZD IP address, check with the customer whether they are able to ping AP from the ZD and ZD from AP, IF both are responding to ICMP ,the customer should run the below commands: set director ip <IP address> <IP address> If SR setup, include second ZD <IP address> After running above command reboot the AP by issuing a 'reboot' command from CLI. Once the AP is up we can run the 'get director' command and check whether AP has the ZD IP address or not. Please refer to the attached support info files.

I have a working AP which lost contact with the ZD

2021-08-26T02:17:37-0700 2021-08-26T06:00:16-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PCRRCA4?attachment_index=0 2021-08-26T06:00:16-0700 monthly admin,premium knowledge_article_4756 knowledge_article_4756_attachment_1 10.13.213.32.txt 94684.0 text/plain https://support.ruckuswireless.com/articles/000001482 2021-08-26T02:17:53-0700 monthly 0.8 admin,premium knowledge_article_4755 knowledge_article_4755 2013-01-23T07:38:50-0800 000001482 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Why are clients being prompted for authentication again when they re-join the wireless network after some time interval? Inactivity Timer is the time the device is not seen on the network before it is considered gone and removed from association tables. Grace Period is the time after getting removed from association timer that the client can rejoin without having to do L2/L4 authentication. The grace period will not start counting until after the inactivity timer – so total time would be Inactivity Timer + Grace Period minutes without having to re-authenticate. To override default 30 minute session timeout, the Grace Period and Inactivity Timeout values under the WLAN/Advanced Options can be used to extend sleeping client re-connection. For Guest Wlan or Web authentication Wlan, Inactivity timeout and Grace period can be set on WLAN. Options are found on ZD GUI>>Configure >>WLAN>>WLAN edit>>Advanced options (9.x) or Wireless Lans>>WLAN edit>>Advanced options (10.x) Inactivity time out can be set to 500 minutes max. Grace period can have maximum value of 144000 mins. For Hotspot (Wispr Wlan), Inactivity timeout can still be set on Wlan advanced options, But Grace Period need to be configured at hotspot profile. Options can be found on Configure >> Hotspot Services >>Edit>> Grace Period (9.x) or Services & Profiles>>Hotspot Services>>Edit>>Grace Period (10.x) Grace period in hotspot service can have maximum value of 14400 mins Note: Clients will continue to show as Authenticated once they are connected back within the Grace period. <div> </div>

Clients are being prompted to re-enter guest pass (for Guest WLAN) or username/password (Hotspot or Captive portal) when they return to the wireless network after some interval

2021-08-26T02:17:53-0700 2021-08-26T06:00:14-0700 https://support.ruckuswireless.com/articles/000002607 2021-08-26T02:18:42-0700 monthly 0.8 admin,premium knowledge_article_4753 knowledge_article_4753 2014-02-07T16:07:04-0800 000002607 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;System network management;Troubleshooting Performance, System Network Management, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor How do I gather a Wireshark packet capture through Ruckus AP? For controller managed APs, there is local mode and there is streaming mode. In local mode, one can only save 2M of data at a time and the file can be saved when one stops the capture, not much use for 2M. Streaming mode, it sends a continuous stream to a program like Wireshark continuously. Streaming mode is the best option for packet capture. <div style="text-align: center;">ZoneDirector</div> Local Mode: <div style="margin-left: 40px;">1. Go to ZD GUI> Administer> Diagnostics > Packet Capture and Choose 2.4 GHz or 5 GHz radio (you can only capture packets on one radio at a time). </div> <div style="margin-left: 40px;">2. Select one or more APs from the list and click Add to Capture APs. The APs you selected are moved from the Currently Managed APs table on the left side to the new Capture APs table on the right.</div> <div style="margin-left: 80px;"><img alt="User-added image" height="112" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096Vg&feoid=00N50000002Cf3M&refid=0EM50000000LQd4" width="500"></img></div> <div style="margin-left: 40px;"> </div> <div style="margin-left: 40px;">3. Select Local Mode to save the packet capture to a local file.</div> <div style="margin-left: 80px;"><img alt="User-added image" height="128" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096Vg&feoid=00N50000002Cf3M&refid=0EM50000000LdDV" width="500"></img> </div> <div style="margin-left: 40px;">4. Click Start to begin capturing packets. Click Stop to end the capture, and click Save to save the packet capture to a local file. 5. Extract the pcap file(s) from the pcap.zip file and open it in Wireshark or other packet analyzers. </div> Streaming Mode, using Wireshark: <div style="margin-left: 40px;">1. Choose 2.4 GHz or 5 GHz radio. 2. Select the AP you want to view and click Add to Capture APs. 3. Select Streaming Mode and click Start. 4. Launch Wireshark. 5. Go to Capture Options. 6. Under Capture: Interface, select Remote. A Remote Interface dialog appears. 7. In Host, enter the IP address of the AP you want to view. Leave the Port field empty and click OK. </div> <div style="margin-left: 80px;"><img alt="User-added image" height="479" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096Vg&feoid=00N50000002Cf3M&refid=0EM50000000LQdJ" width="500"></img></div> <div style="margin-left: 40px;">8. The remote host interface list on the right updates. Select wifi0 from the list if you are streaming on the 2.4 GHz radio, or select wifi1 if streaming on the 5 GHz radio. Note: In SW version 9.10 or below for ZD, 3.0 or below for SCG/SZ, APs use wlan100 for 2.4GHz and wlan101 for 5GHz radio interface. Note: In SW version 9.7 and below, APs use wlan50 for 2.4GHz and wlan51 for 5GHz radio interface. Note: for 11ax AP, please use wlan100 for 2.4GHz and wlan101 for 5GHz radio 9. Click Start, Wireshark displays the packet stream in a new window.</div> <div style="margin-left: 40px;"> Note: We recommend streaming mode over local mode as local mode limits the data to 2MB as that's the data allocated from AP memory. In streaming mode, there's no limit and the data can be set with different buffer sizes where you can choose the file sizes and the number of files to buffer.</div> <div> </div> <div style="text-align: center;">vSmartZone/SmartZone</div> Local Mode: <div> </div> <div style="margin-left: 40px;">1. Go to vSZ/SZ GUI > Access Points > Select any AP and click on More > Packet Capture 2. Select 'Save to File' option for local mode. 3. Select the radio as per your requirement. 'Wired' option is for the AP's ethernet port capture. </div> <div style="margin-left: 80px;"><img alt="User-added image" height="219" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096Vg&feoid=00N50000002Cf3M&refid=0EM2J000000unln" width="500"></img> </div> <div style="margin-left: 40px;">4. Click Start to begin capturing packets. Click Stop to end the capture, and click Save to save the packet capture to a local file. 5. Extract the pcap file(s) from the pcap.zip file and open it in Wireshark or other packet analyzers.</div> <div style="margin-left: 80px;"> </div> Streaming Mode procedure, using Wireshark: <div style="margin-left: 40px;">1. Go to vSZ/SZ GUI > Access Points > Select any AP and click on More > Packet Capture. 2. Set the Capture Mode to 'Stream To Wireshark' 3. Choose the radio and click Start. </div> <div style="margin-left: 80px;"><img alt="User-added image" height="235" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000096Vg&feoid=00N50000002Cf3M&refid=0EM2J000000unqd" width="500"></img> </div> <div style="margin-left: 40px;">4. Launch Wireshark. 5. Go to Capture Options. 6. Under Capture: Interface, select Remote. A Remote Interface dialog appears. 7. In Host, enter the IP address of the AP you want to view. Leave the Port field empty and click OK. 8. The remote host interface list on the right updates. Select wifi0 from the list if you are streaming on the 2.4 GHz radio, or select wifi1 if streaming on the 5 GHz radio. 9. Click Start, Wireshark displays the packet stream in a new window.</div> <div style="text-align: center;"> Unleashed</div> On Unleashed APs, there is no option on the GUI to collect the OTA captures. However, we can collect them from the CLI. Commands for Unleashed Master AP : <div style="margin-left: 40px;">ruckus# ap-mode ruckus(ap-mode)# get wlanlist // To know the wlan interfaces ruckus(ap-mode)# set capture <wlan-interface> stream // To start the streaming</div> Commands for Unleashed member APs: This is the same as the standalone APs as mentioned below. <div style="text-align: center;"> Standalone AP Packet capture</div> Local Mode: <div style="margin-left: 40px;">Capture locally, zipped and sent wherever - ZD3K, ZD1100, not ZD1K and AP 7000 ( memory restricted) – Wireless interfaces on. All APs try to save 1 – 2Meg files which round-robin (TCP dump) write over. Setup Wireshark to receive the standalone AP stream, like it’s done for ZD managed APs in the section above.</div> Commands: <div style="margin-left: 40px;">To configure packet capture from a standalone AP, SSH to the AP and login, execute commands from CLI.</div> <ul><li style="margin-left: 40px;">To Know the WLAN Interface and associated WLAN status: get wlanlist</li><li style="margin-left: 40px;">To start the capture: set capture <wlan interface> stream </li><li style="margin-left: 40px;">To Stop the capture: set capture <wlan interface> idle</li></ul> Example : <div style="margin-left: 40px;">rkscli: set capture wlan100 stream Capturing in 20MHz channel BW OK rkscli: get capture wlan100 state Wlan100: Packet Capture state: stream-nobeacon-nocontrol-nopromiscuous OK</div>

Describes the configuration necessary to use a Ruckus AP to gather wireless traces.

2021-08-26T02:18:42-0700 2021-08-26T06:00:11-0700 https://support.ruckuswireless.com/articles/000011851 2021-08-03T05:16:34-0700 monthly 0.8 admin,premium knowledge_article_4731 knowledge_article_4731 2021-08-03T05:16:34-0700 000011851 Validated (External) Premium R710;Ruckus R710 Installation;Troubleshooting Installation, Troubleshooting, R710 How do I factory reset R710 Access Point? Pressing, and then quickly releasing this internal button reboots the AP. Pressing and holding it for six seconds resets the AP to factory default settings. Note: Resetting the AP to factory default settings erases all settings that you configured previously.

How do I use the reset button to factory reset the R710

2021-08-03T05:16:34-0700 2021-08-24T09:07:14-0700 https://support.ruckuswireless.com/articles/000010802 2021-08-20T07:54:47-0700 monthly 0.8 admin,premium knowledge_article_4750 knowledge_article_4750 2020-08-10T04:26:24-0700 000010802 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway Is SSO (single sign on) login supported in VSZ/SZ SZ does not support single sign on (SSO) for SZ login. Currently, admin credentials and radius/ldap based authentication only supported.

How to configure SSO login on the VSZ/SZ.

2021-08-20T07:54:47-0700 2021-08-20T12:00:13-0700 https://support.ruckuswireless.com/articles/000011865 2021-08-20T10:03:33-0700 monthly 0.8 admin,premium knowledge_article_4747 knowledge_article_4747 2021-08-20T10:02:08-0700 000011865 Validated (External) Premium Ruckus network director rnd;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Network Director RND, SmartCell Gateway I am no longer able to use API query listSize=10K after upgrading my VSZ to SW6.0 Design intent. Started with SW6.0 the API query listSize limit in placed to 1K. If the list being queried has more than 1K, use pagination.

Failure return when querying 10K listSize using API on SW6.0

2021-08-20T10:03:33-0700 2021-08-20T12:00:08-0700 https://support.ruckuswireless.com/articles/000002370 2021-07-12T04:23:01-0700 monthly 0.8 admin,premium knowledge_article_624 knowledge_article_624 2013-11-22T14:01:12-0800 000002370 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Installation Performance, Configuration, Installation, ZoneDirector Why are the APs stuck in provisioning state? The default MTU value is 1500 Bytes. Reduce the MTU size on the ZD for effective communication between AP and ZD typically between 1100 to 1300 bytes when the APs are deployed in a remote location. <div style="font-family: Arial; font-size: 13px;">For example: If the IPSEC VPN tunnel size is 1300 bytes then reduce the tunnel MTU size to 1200 bytes on the ZD GUI. </div> <div style="font-family: Arial; font-size: 13px;"> </div> <div style="font-family: Arial; font-size: 13px;">The MTU size on the ZD can be configured as follows: </div> <ul><li style="font-family: Arial; font-size: 13px;">For ZD running on old version:</li></ul> <div style="font-family: Arial; font-size: 13px; margin-left: 80px;">Login to the ZD GUI, Go to Configure tab >> Access Points >> Under Access Point Policies >> Tunnel MTU </div> <ul><li style="font-family: Arial; font-size: 13px;">For ZD running on the latest version:</li></ul> <div style="font-family: Arial; font-size: 13px; margin-left: 80px;">Login to the ZD GUI, Go to System tab >> AP General Settings >> Access Point Policies >> Tunnel MTU </div> <div style="font-family: Arial; font-size: 13px;"> </div> <div style="font-family: Arial; font-size: 13px; margin-left: 120px;"><img alt="User-added image" height="214" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4U4&feoid=00N50000002Cf3M&refid=0EM2J000001CHTI" width="500"></img></div>

APs Stuck in Provisioning state showing "Configuration Response Loss" error

2021-07-12T04:23:01-0700 2021-08-16T23:24:33-0700 https://support.ruckuswireless.com/articles/000007319 2021-08-04T06:26:26-0700 monthly 0.8 admin,premium knowledge_article_2937 knowledge_article_2937 2017-12-12T14:36:02-0800 000007319 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration Configuration, ICX 7250, ICX 7450, ICX 7750 How to Configure Simple Network Management Protocol (SNMP) Recommendations for K-12 SNMP Deployment SNMPv2c is deployed in the K-12 network. The required configuration follows. Configuring SNMP on ICX Switches for Brocade Network Advisor Accessibility ! SNMPv2c Configuration: ! Restrict which SNMP host can access the switch; multiple SNMP hosts can be configured. DO-DIST-301(config)# snmp-client 172.25.10.161 ! Configure the SNMP community. DO-DIST-301(config)# snmp-server community private rw ! Configure the SNMP trap receiver. DO-DIST-301(config)# snmp-server host 172.25.10.161 version v2c ! By default, SNMP traps are enabled. If a trap is disabled, the admin can re-enable it (e.g., an OSPF trap). DO-DIST-301(config)# snmp-server enable traps ospf ! Show command to verify the enabled SNMP traps. DO-DIST-301# show snmp server Status: Enabled Contact: Location: Community (ro): public Community (rw): brocade, private Max Ifindex per module: 64 Traps Cold start: Enable Link up: Enable Link down: Enable Authentication: Enable Power supply failure: Enable Fan failure: Enable Fan speed change: Enable Module inserted: Enable Module removed: Enable Redundant module state change: Enable Temperature warning: Enable STP new root: Enable STP topology change: Enable MAC notification: Enable MAC-AUTH notification: Enable OSPF: Enable BGP: Enable ISIS: Enable VRRP: Enable VSRP: Enable MRP: Enable UDLD: Enable VRF: Enable link-oam: Enable cfm: Enable Total Trap-Receiver Entries: 2 Trap-Receiver IP-Address Version Port-Number Comm-or-Security 1 10.20.33.161 v2c 162 $U1U9ciFvbg== 2 172.25.10.161 v2c 162 $U2kyXj1k

How to Configure Simple Network Management Protocol (SNMP)

2021-08-04T06:26:26-0700 2021-08-10T14:51:08-0700 https://support.ruckuswireless.com/articles/000001343 2021-08-09T07:49:36-0700 monthly 0.8 admin,premium knowledge_article_253 knowledge_article_253 2013-01-10T23:17:58-0800 000001343 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to troubleshoot Zone Director and Access Point Connectivity Issues? Zone Director and Access Point Connectivity Issues Step 1: Connect a client to an Access Point managed by a Zone Director. Step 2: Please open a command prompt/window on this client and ping 127.0.0.1. This is a loopback address. A successful ping indicates that the IP stack is considered to be initialized. A failed ping indicates that there is an IP stack failure and need to reinstall TCP/IP on the host. <img alt="User-added image" height="222" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4d6&feoid=00N50000002Cf3M&refid=0EM50000000LEjK" width="500"></img> Step 3: From the command prompt, ping the IP address of a local host, another client that is connected under the same Access Point managed by the Zone Director. If this ping is successful your network interface card (NIC) is working. A failed ping indicates that there is an issue with the NIC. A successful ping does not mean that a cable is plugged into the NIC, only that the IP protocol stack on the host can communicate to the NIC (via the LAN driver). Example: C:\>ping 172.16.10.1 Pinging 172.16.10.1 with 32 bytes of data: Reply from 172.16.10.1: bytes = 43 time<1ms TTL = 128 Reply from 172.16.10.1: bytes = 43 time<1ms TTL = 128 Reply from 172.16.10.1: bytes = 43 time<1ms TTL = 128 Reply from 172.16.10.1: bytes = 43 time<1ms TTL = 128 Step 4: From the command prompt, ping the default gateway (router). You can find the router’s IP address by typing in ipconfig. It will list the default gateway’s IP address. A successful ping means that the NIC is plugged into the network and can communicate on the local network. If it fails, you have a local physical network problem that could be anywhere from the NIC to the router. <img alt="User-added image" height="630" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4d6&feoid=00N50000002Cf3M&refid=0EM50000000LEjP" width="500"></img> Then ping default gateway: <img alt="User-added image" height="248" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4d6&feoid=00N50000002Cf3M&refid=0EM50000000LEjU" width="500"></img> Step 5: If the previous steps are all working, then try pinging a remote server. A successful ping means that you know that you have IP communication between the local host and the remote server. You know that the remote physical network is working. Example: C:\>ping 172.16.20.2 Pinging 172.16.20.2 with 32 bytes of data: Reply from 172.16.20.2: bytes=32 time<1ms TTL=128 Reply from 172.16.20.2: bytes=32 time<1ms TTL=128 Reply from 172.16.20.2: bytes=32 time<1ms TTL=128 Reply from 172.16.20.2: bytes=32 time<1ms TTL=128 Ping statistics for 172.16.20.2:............ Step 6: Note down the areas where steps 2 to 5 failed. If you still can’t communicate with the server and zone director after these previous steps are successful, there is probably some type of name resolution problem and you need to check your Domain Name System (DNS) settings. If the ping to the remote server fails, then you know you have some type of remote physical network problem and need to go to the server and work through steps 1 through 3 until you find the issue. Step 7: Check if there is a VLAN in the way. Virtual LAN’s are created by a switch to separate traffic from clients. The Zone Director acts only as a layer 2 switch because the two ports on the ZD are bridged. It doesn’t create VLANS but can apply VLAN tags to an SSID which will direct traffic from clients associated with specific WLANS/SSID’s to certain VLANs. There could be connectivity issues from an AP to the ZD if the AP is on a separate VLAN than the Zone Director. In order to check if there is a VLAN in the way, check the VLAN tags. A: Log into the WEB UI of the Zone Director. If you forgot how, please go here: https://support.ruckuswireless.com/answers/000001341 B: Click on the Configure tab up top and the WLAN tab on the left <img alt="User-added image" height="390" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4d6&feoid=00N50000002Cf3M&refid=0EM50000000LEjZ" width="500"></img> C: Click on edit, for each of the WLAN's to check each ones VLAN settings. Then click Advanced Options. <img alt="User-added image" height="474" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4d6&feoid=00N50000002Cf3M&refid=0EM50000000LEje" width="500"></img> D: Click on VLAN tags <img alt="User-added image" height="399" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4d6&feoid=00N50000002Cf3M&refid=0EM50000000LEjj" width="500"></img> Make sure that the Access Point that is associated with a certain SSID/WLAN or WLAN group is not tagged under a different VLAN than the Zone Director. Step 8: If the previous steps didn't solve the problem. Don't worry, the support team at Ruckus Wireless will fix the problem, however, they need support info. To collect the support info. Click on the Administer tab up top and the Diagnostics tab on the left. <img alt="User-added image" height="487" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4d6&feoid=00N50000002Cf3M&refid=0EM50000000LEjo" width="500"></img> Click on Save Debug Info, and Save System Log. Save these as files on your local computer so when you create a case at support.ruckuswireless.com you or email the support team at support@ruckuswireless.com, you can add these files as attachments to either.

These are preliminary troubleshooting steps for customers with ZD to AP connectivity issues. The last step is to save the support info on the Zone Director before contacting technical support at Ruckus Wireless.

2021-08-09T07:49:36-0700 2021-08-09T12:00:13-0700 https://support.ruckuswireless.com/articles/000001481 2021-08-09T07:54:13-0700 monthly 0.8 admin,premium knowledge_article_4643 knowledge_article_4643 2013-01-22T14:07:09-0800 000001481 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ZoneDirector How to recover a ZoneDirector from rescue mode? The ZD will respond to the default IP with a rescue page that allows users to format the USB drive and install a new image directly from the administrator's computer 1. Open ZoneDirector GUI using default IP 192.168.0.2 and ensure that the computer connected to ZD is in the same subnet as well 2. The following options “Perform FDISK” and “Perform Reboot” can be found on the page <img alt="User-added image" height="344" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4dB&feoid=00N50000002Cf3M&refid=0EM50000000LFJI" width="500"></img> 3. First, try to recover the ZD using “Perform Reboot” option, as this will preserve the existing configuration on the ZD. Click “Perform Reboot” after reboot and it will redirect to the ZD login page, if this does not work, follow the below steps 4. Click “Perform FDISK” to reformat/clear the USB contents which will erase all the configuration on ZD Successful FDISK displays message as “FDISK complete” <img alt="User-added image" height="385" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4dB&feoid=00N50000002Cf3M&refid=0EM50000000LFJN" width="500"></img> 5. Install/upgrade firmware on ZD using “Perform Upgrade” **Any 9.5 or 9.6 image file can be used to upgrade Once the upgrade is complete, the ZD reboots and navigates to the Setup wizard where the necessary configurations can be made

The following article explains how to recover a ZoneDirector1100 when it does not boot up and ends up in rescue mode

2021-08-09T07:54:13-0700 2021-08-09T12:00:11-0700 https://support.ruckuswireless.com/articles/000001837 2021-08-09T07:56:25-0700 monthly 0.8 admin,premium knowledge_article_3471 knowledge_article_3471 2013-03-15T11:58:51-0700 000001837 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Installation Performance, Configuration, Installation, ZoneDirector How to create a CSR and install a Certificate on ZD? First of all please note that a CSR can be created from ZD or an External device like a Server or a Firewall etc If the CSR is created from an External device for Wild Card Certificate purpose then you also need to take the Private key from that device and import it on the ZD when installing the Certificate on ZD. However, if you would like to create the CSR from ZD then you need to remember following things: 1) Most Public Certificate Authorities (CA) use 2048 Key length so when creating the CSR you first need to create a Private key of 2048 Key length because by default ZD has 1024 Key length selected. A Private Key of 2048 Length can be created from ZD WebUI, Configure :: Certificate:: Re-generate private key of a specific key length. 2) Once you create the Private Key from Step 1 then after that create the CSR by following below procedure. However, please note that generating a Private key more than once may lead to Key mismatch unless the CSR and Private Key are mapped(matched) to each other. So if by mistake you generate the Private Key second time then you need to create the CSR again. After the Step 1 go ahead and create the CSR from ZD WebUI. Go to Configure :: Certificate :: Generate a Request :: Apply <img alt="User-added image" height="187" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4dG&feoid=00N50000002Cf3M&refid=0EM50000000LfyT" width="748"></img> The CSR will get downloaded from ZD on to your computer. - Provide the same CSR to a Public CA and get it signed. - The CA Signed Certificate will be emailed to you (not an attachment) so you need to copy the content of Certificate (if any) and save it in .txt file. - Import the CA signed certificate into the ZD. Go to :: Configure :: Certificate :: Import Signed Certificate :: Choose File <img alt="User-added image" height="67" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4dG&feoid=00N50000002Cf3M&refid=0EM50000000LfyY" width="729"></img> - The ZD will now ask for the Private Key if the CSR was created from an External device otherwise if the CSR was created from ZD then the ZD will recognize and take it. If at this point you see a Private key mismatch error then you either do not have a matching Certificate for the Private key of ZD (when CSR is created from ZD) or you need to import the Private key of the External device from where the CSR was generated in case of a Wild Card Certificate. - If the certificate is a chain, you also need any intermediate certificates. ZD only supports .PEM format of Certificate so you need to ask the CA to generate the Certificate in .PEM format. However if the Certificate is not in .PEM format then you can follow below KBA to change the format: https://support.ruckuswireless.com/answers/000004299 Fully Qualified Domain Name used for the certificate will then be used for all Web pages like Captive Portal, Zero IT Activation page, Guest Access etc. NOTE: Creating a new Private Key and uploading a Certificate on ZD causes ZD to reboot.

Installing SSL Certificate on ZD.

2021-08-09T07:56:25-0700 2021-08-09T12:00:09-0700 https://support.ruckuswireless.com/articles/000006483 2021-03-09T01:24:34-0800 monthly 0.8 admin,premium knowledge_article_4563 knowledge_article_4563 2017-10-26T07:17:18-0700 000006483 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How many WLAN can be broadcast on the 11ac wave 2 ap model This is a design intent

Max amount of WLAN's that can be used on an AP controlled by ZD.

2021-03-09T01:24:34-0800 2021-08-09T11:42:21-0700 https://support.ruckuswireless.com/articles/000007588 2018-01-24T09:46:45-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_3257 knowledge_article_3257 2018-01-24T09:46:45-0800 000007588 Validated (External) Public Zoneflex indoor;Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration Configuration, ZoneFlex Indoor, virtual SmartCell Gateway, SZ100 How to configure POE operation mode for AP's from SZ/vSZ CLI? SZ/vSZ allows us to configure model specific POE operation mode. This configuration is applied to all AP's of selected model within that zone. Steps: Login SZ CLI and configure poe-operating-mode using following steps: SZ(config)# domain <domain name> SZ(config-domain)# zone <zone name> SZ(config-domain-zone)# ap-model <Type AP Model name> SZ(config-domain-zone-ap-model)# poe-operating-mode <mode> 802.3af 802.3af 802.3at 802.3at 802.3at+ 802.3at+ auto auto <mode> PoE mode SZ(config-domain-zone-ap-model)# poe-operating-mode 802.3at For vSZ, use below steps: vSZE(config)# zone "Default Zone" vSZE(config-zone)# ap-model R720 vSZE(config-zone-ap-model)# poe-operating-mode 802.3af 802.3af 802.3at 802.3at 802.3at+ 802.3at+ auto auto <mode> PoE mode vSZE(config-zone-ap-model)# poe-operating-mode 802.3at

This article explains steps on how to configure POE operation mode for AP's from SZ/vSZ CLI

2018-01-24T09:46:45-0800 2021-08-05T12:57:35-0700 https://support.ruckuswireless.com/articles/000003377 2021-08-05T00:05:34-0700 monthly 0.8 admin,premium knowledge_article_2184 knowledge_article_2184 2014-09-17T13:43:39-0700 000003377 Validated (External) Premium Sz144;Sz300;Zoneflex indoor;Zoneflex outdoor;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Firmware;Installation Firmware, Installation, SZ144, SZ300, ZoneFlex Indoor, ZoneFlex Outdoor, SCG200, virtual SmartCell Gateway, SZ100 How to update ZD mode AP firmware to support vSCG or vSZ using LWAPP2SCG Use the following steps to have the vSCG/vSZ automatically upgrade your ZD-mode APs to a vSCG/vSZ-mode AP. Step 1: Preparing the vSCG to accept and convert ZD mode AP. 1. SSH into your vSCG/vSZ <div style="margin-left: 40px;"> <div> </div> </div> 2. Get into the configuration context and enter the LWAPP2SCG config mode command. <div style="margin-left: 40px;"> <div>Sid-3rd-vSCG# config</div> <div>Sid-3rd-vSCG(config)# lwapp2scg</div> <div> </div> </div> 3. Set the Policy to allow the vSCG to upgrade all APs, or only upgrade specific APs by mac. <div style="margin-left: 40px;"> Sid-3rd-vSCG(config-lwapp2scg)# policy accept-all </div> 4. Exit the configuration context and save the change. <div style="margin-left: 40px;"> <div>Sid-3rd-vSCG(config-lwapp2scg)# end</div> <div>Do you want to update this context configuration (or input 'no' to cancel)? [yes/no] yes</div> <div> </div> <div>Sid-3rd-vSCG# </div> </div> 5. Confirm LWAPP2SCG configuration. Sid-3rd-vSCG# show run lwapp2scg Step 2: Directing you ZD-mode AP to connect to the vSCG's/vSZ's Control IP. 1. SSH into the AP 2. Issue the same "set director ip" command, but point it to the vSCG's Control IP. <div style="margin-left: 40px;"> rkscli: set director ip 10.9.101.5</div> 3. Reboot the AP and it will connect to the vSCG/vSZ and upgrade it's firmware. <div style="margin-left: 40px;"> rkscli: reboot</div> Step 3: Direct your vSZ/SCG-mode AP to your vSCG's/vSZ's Control IP. 1. Once the AP has finished upgrading and rebooting from (Step 2) SSH into the AP 2. Issue a "set scg ip" command to point it to the vSCG's/vSZ's Control IP. This is because when the AP was converted from ZD-mode AP to vSZ/vSCG-mode AP, it took on the vSCG/vSZ mode AP's Factory Default setting, meaning no known vSCG/vSZ IP. <div style="margin-left: 40px;"> rkscli: set scg ip 10.9.101.5</div> NOTE 1: If the vSCG/vSZ was deployed with only 1 Interface (recommended) then the Control, Management and Cluster IP are all the same. NOTE 2: It is very important [required] to factory default the AP after every conversion process, form ZD to SCG/vSZ or converting a SCG/vSZ AP to ZD mode AP. NOTE 3: Any AP having 1xx.0.0.0 software like 104.x.x.x or 110.x.x.x has both ZD and vSZ client in it, and you should NOT use LWAPP2SCG

vSCG can convert ZD managed APs using LWAPP2SCG

2021-08-05T00:05:34-0700 2021-08-05T06:00:23-0700 https://support.ruckuswireless.com/articles/000001597 2021-08-05T00:08:44-0700 monthly 0.8 admin,premium knowledge_article_4736 knowledge_article_4736 2013-02-08T07:06:58-0800 000001597 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What to look for in the AP support info if client performance is subpar? 1. Please try to find out if there are any WiFi or non-WiFi (Ex: microwave ovens, cordless phone, baby monitor) devices around the APs. If you find any devices then try to turn OFF or move them away from the APs and see if it makes any difference or not. <div>2. The other options are to manually configure this radio to channel 1, 6 or 11 – let it run and see if the Phy errors are better. </div> <div>To change the channel, please visit the the ZD GUI-->Configure-->Access Point and click on the Edit button of the MAC address of the AP on which you need change the channel. You can also consider using ChannelFly as it scans each allowed channel to achieve best possible performance.</div> <div> </div> <div>3. The last option is to reposition the AP away from noise.</div> <pre style=""> </pre>

This article discusses how to analyze the AP support info for possible RF impact on client connectivity.

2021-08-05T00:08:44-0700 2021-08-05T06:00:21-0700 https://support.ruckuswireless.com/articles/000002325 2021-08-05T00:15:06-0700 monthly 0.8 admin,premium knowledge_article_4735 knowledge_article_4735 2013-10-29T20:58:27-0700 000002325 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector Can ZD configuration files be copied to other model ZoneDirectors? Follow recommended configuration migration rules. 1. The basic rule has is that you can upload the configuration from a “smaller” ZD into a larger one – ZD1100 into ZD1200, ZD1100/ZD1200 into ZD3000 or ZD5000, ZD3000 into ZD5000 … this permits all configured devices space to be configured. 2. The upload configuration has the same rules as the firmware upgrade – the new larger ZD must be running the same version of code (this is best) or a newer version that permits direct upgrade as listed in the upgrade rules in the release notes. 3. The N to 1 “cheap” redundancy system also permits adding AP configurations from “smaller” ZD’s to an existing configuration of a larger ZD by uploading the config file from the configure::Access Points page. This merges the ap-list.xml with the new ZD. This is covered in the N + 1 configuration guide: ² The licensed APs number is only for the connected APs. ² ZD3000 only supports 3000 AP entries including the connected and disconnected APs. ² ZD5000 only supports 6000 AP entries including the connected and disconnected APs.

Can ZD configuration files be copied to other model ZoneDirectors?

2021-08-05T00:15:06-0700 2021-08-05T06:00:20-0700 https://support.ruckuswireless.com/articles/000001935 2021-08-05T00:20:16-0700 monthly 0.8 admin,premium knowledge_article_932 knowledge_article_932 2013-06-02T19:24:21-0700 000001935 Validated (External) Premium Zoneflex 7731 Configuration;System network management Configuration, System Network Management, ZoneFlex 7731 What are the best common practices involved while deploying point to point wireless bridges? Please refer to the attached document which details some of the best practices employed for wireless point to point bridge deployments.

The attached document to the article details some of the best practices employed for wireless point to point bridge deployments.

2021-08-05T00:20:16-0700 2021-08-05T06:00:18-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDatCAG?attachment_index=0 2021-08-05T06:00:18-0700 monthly admin,premium knowledge_article_932 knowledge_article_932_attachment_1 Point-Point+Bridge+Best+Practices.pdf 1055578.0 application/pdf https://support.ruckuswireless.com/articles/000002109 2021-08-05T00:30:57-0700 monthly 0.8 admin,premium knowledge_article_1504 knowledge_article_1504 2013-06-17T11:37:44-0700 000002109 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Security;Troubleshooting Configuration, Installation, Security, Troubleshooting, ZoneDirector How do I configure NPS RADIUS Server with AD and the Ruckus equipment? Review the attached document for these areas of interest: The document is broken into the following main categories: 1. Introduction and key concepts 2. Install NPS 3. Configure NPS 4. Configure ZoneDirector “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

Technical Note on configuring Active Directory and NPS. Explains Ruckus perspective fully and a run-down of certificate, NPS install, configuration of Radius Clients, NPS policies, NPS for user roles.

2021-08-05T00:30:57-0700 2021-08-05T06:00:15-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDpjCAG?attachment_index=0 2021-08-05T06:00:15-0700 monthly admin,premium knowledge_article_1504 knowledge_article_1504_attachment_1 RTN_Configuring_AD_and_NPS_v1.4.pdf 1849489.0 application/pdf https://support.ruckuswireless.com/articles/000001657 2021-08-05T00:33:45-0700 monthly 0.8 admin,premium knowledge_article_2100 knowledge_article_2100 2013-02-15T12:57:49-0800 000001657 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can I adjust WLAN data rates? Two ZoneDirector CLI configure commands ‘bss-minrate’ and ‘ofdm-only’ can be applied to WLANs to effect the minimum data rate that APs send management frames, such as beacons and responses to client probe requests. By increasing the default bss-minrate, clients must be closer to an AP in order to use the higher data rates, and thus will be more likely to roam when an AP with better signal strength is seen. The two commands ‘bss-minrate’ and ‘ofdm-only’ commands are not mutually exclusive. You can apply a BSS minrate to a WLAN in Mixed mode (802.11b/g/n) or in OFDM-Only (802.11g/n) mode. Setting ‘ofdm-only’ on a WLAN will increase the bss-minrate to 6mbps. 1. BSS-minrate BSS-MinRate allows you to set the minimum data rate that management frames are sent out. The mgmt-tx-rate will be set to the same as bss-minrate. By default, Ruckus APs reply to 1mb probe requests with 2mb probe responses. Allowed BSS Minrates (for Mixed mode) are 1, 2, 5.5, 12, 24 (Mbps). ruckus(config-wlan)# no ofdm-only The mgmt-tx-rate will be set to the same value as bss-minrate due to ofdm-only change. The command was executed successfully. To save the changes, type 'end' or 'exit'. ruckus(config-wlan)# bss-minrate 6 The minimum transmission rate of the WLAN in the BSS should be like 1, 2, 5.5, 12, 24 (Mbps). ruckus(config-wlan)# ruckus(config-wlan)# end The WLAN service 'mixed-mode' has been updated and saved. Your changes have been saved. ruckus(config)# 2. OFDM-only OFDM-Only will remove 802.11b data rates (1, 2, 5.5, 11mbps) completely. By using OFDM-only feature, only clients that supports OFDM data rates will be allowed to connect. Beacons and other management and broadcast/multicast frames will be sent at 6 Mbps data rate. Allowed BSS Minrates for OFDM-Only mode are 6, 12, 24 (Mbps) ruckus(config-wlan)# ofdm-only The mgmt-tx-rate will be set to 6Mbps due to ofdm-only enable. The command was executed successfully. To save the changes, type 'end' or 'exit'. ruckus(config-wlan)# ruckus(config-wlan)# bss-minrate 11 The minimum transmission rate of the WLAN in the BSS should be like 1, 2, 5.5, 12, 24 (Mbps). ruckus(config-wlan)# ruckus(config-wlan)# end The WLAN service ‘OFDM-Only’ has been updated and saved. Your changes have been saved. ruckus(config)# ---------- Note: You can increase bss-minrate to 12 or 24 mbps on an OFDM-Only WLAN whose clients still appear to be “sticky” instead of the default 6 mbps, to force the client to roam while still being able to communicate at 12/24 mbps. ---------- 6/1/16, Addendum: When enabling spectralink compatibility either in the AP Group Config or AP Configuration, the bss-minrate is increased from a default 2 at the WLAN to 5.5Mbps.

The 'bss-minrate' command allows admins to change the minimum management data rate of a WLAN.

2021-08-05T00:33:45-0700 2021-08-05T06:00:13-0700 https://support.ruckuswireless.com/articles/000001846 2021-08-05T00:42:26-0700 monthly 0.8 admin,premium knowledge_article_4734 knowledge_article_4734 2013-03-15T09:23:03-0700 000001846 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor AP ZD connectivity problems - Checked the status of APs in the ZD under monitor -> APs, It shows the status as disconnected. - Checked the ping connectivity and got the ping response. - Checked the AP information and found the APs are still in 9.4.0.0.110 version. - Rebooted the AP but still the same Issue. - Make one AP to factory default settings and connect It back to the network. - Now APs provisioned the configuration from the ZD, upgraded to 9.5.0.0.156 version and show the status as connected.

After upgrade of ZD SW some APs continue to show disconnected state on ZD, while the APs appear to be getting an IP address from DHCP server

2021-08-05T00:42:26-0700 2021-08-05T06:00:12-0700 https://support.ruckuswireless.com/articles/000001989 2021-08-05T00:45:21-0700 monthly 0.8 admin,premium knowledge_article_4417 knowledge_article_4417 2013-04-27T06:59:02-0700 000001989 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How can I configure dynamic VLANs with the ZoneDirector or How can I configure more than one VLAN per SSID? See the attached Tech Note for detailed configuration guidelines. PCAP attached for working MAC Auth + Dynamic VLAN.

This document provides an overview of how to configure a RADIUS server to return a dynamic VLAN attribute. It also includes the complimentary steps required to use this information on a ZoneDirector. Step-by-step procedures for installation, configuration and testing are demonstrated. Some knowledge of RADIUS is recommended.

2021-08-05T00:45:21-0700 2021-08-05T06:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDfFCAW?attachment_index=0 2021-08-05T06:00:10-0700 monthly admin,premium knowledge_article_4417 knowledge_article_4417_attachment_1 RTN_Configuring_Dynamic_VLANs_v1.2.pdf 1737396.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000PDfFCAW?attachment_index=1 2021-08-05T06:00:10-0700 monthly admin,premium knowledge_article_4417 knowledge_article_4417_attachment_1 MAC Auth + Dynamic VLAN.pcap 408.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000001869 2021-08-05T00:58:32-0700 monthly 0.8 admin,premium knowledge_article_262 knowledge_article_262 2013-03-22T12:10:34-0700 000001869 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance Performance, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why are clients getting low throughput when connected to an SSID in 2.4 Ghz radio -Run a speed test by connecting a device to the wired network -Connect a wireless client to SSID and Run the Speed test -See if you are getting more than 50% throughput compared to wired network -If the throughput is very less,then -Check support info file from that particular AP and see if there is phy errors and busy packets on 2.4Ghz radio and 5Ghz. -If you see lot of Phy errors and busy intervals in 2.4 Ghz radio -Configured a test SSID in 5Ghz radio and connect a client see if you are getting a good throughput for clients connected to 5Ghz radio. -Try relocate the AP where there is no non Wifi interference causing devices are located -Manually select a non overlapping channel(1,6,11) in 2.4 Ghz radio and see if you are getting good throughput

ZD manage AP but customer connecting to particular AP getting low through put

2021-08-05T00:58:32-0700 2021-08-05T06:00:08-0700 https://support.ruckuswireless.com/articles/000009131 2019-05-13T15:05:39-0700 monthly 0.8 admin,premium knowledge_article_3698 knowledge_article_3698 2019-05-02T07:12:43-0700 000009131 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath How to Pin certificate on Cloudpath under AD/LDAP configuration --> This issue occurs when the AD Server that Cloudpath is authenticating to via LDAP changes its certificate (renewed or reissued). It presents as a authentication failure to user during the workflow. --> In this issue we will have to reset the certificate and pin the certificate on the Cloudpath AD configuration. Cloudpath needs to pin the new cert for trust purposes. The Steps to pin the certificate under AD configuration : Configuration -> Authentication Servers <img alt="User-added image" height="357" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SDl&feoid=00N50000002Cf3M&refid=0EM2J000000qEf6" width="894"></img> Click on Reset Trusted Server and then click on save. <img alt="User-added image" height="489" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SDl&feoid=00N50000002Cf3M&refid=0EM2J000000qEfB" width="890"></img> Once this is done it will take you to the next page where we can pin the certificate. The Cloudpath will do a query to the AD server on port 443 to get the certificate. Please make sure their is communication. <img alt="User-added image" height="406" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SDl&feoid=00N50000002Cf3M&refid=0EM2J000000qEfG" width="888"></img> This will pin the new cert so that Cloudpath will trust the AD server again via LDAP and authentications to AD will work in the workflow

This article explains on how to pin certificate on Cloudpath under AD/LDAP configuration

2019-05-13T15:05:39-0700 2021-08-04T12:56:25-0700 https://support.ruckuswireless.com/articles/000001561 2021-08-04T06:23:14-0700 monthly 0.8 admin,premium knowledge_article_1701 knowledge_article_1701 2013-01-29T13:50:15-0800 000001561 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How do I import a wild card certificate on my ZoneDirectors? <div> To accomplish the Wild-Card Installation on Zone-Director 1. Make sure you have certificate(s) in ".cer" format with "base-64" encoding and also make sure that you have complete chain of certificates (Wildcard >> intermediate >> root) along with private key in ".key" format. Note: If you have certificate in ".pfx" format, please use OpenSSL or any other third party application to extract the certificate and key from ".pfx" to ".cer" and ".key" formats. 2. Once you have all above contains ready, Import the wildcard cert into the ZD. For 9.x firmwares: go to ZD Web GUI >> Configure >> Certificate >> Import Signed Certificate For 10.1.x firmwares: go to ZD Web GUI >> Administer >> Certificate >> Import Signed Certificate</div> <div> 3. The ZD will prompt for the private key as the ZD will sense that the certs private key and the private key the ZD has are different. </div> <div>4. Once the private key is imported the ZD will prompt for the cert again as it will sense that the cert it has and the private key it has doesn't match </div> <div>5. Once import the cert again, this time the cert's private key and the private key which the ZD has are same so ZD imports the cert, but figures out that the cert is wildcard so prompts for the hostname. 6. Choose the hostname and make sure you create an entry on your DNS for ZD's IP address with new FQDN created for ZD. </div> <div>7. Now continue installing intermediate and then root certificate. 8. Once chain is completed, select restart ZD, ZD will come up this time with certificate installed on it.</div> <div> </div> <div>At this point the ZD will use that cert for all further SSL connections and the web auth and guest pass redirects will use the FQDN in the URL. Wildcard Certificates In Smart Redundancy With Captive Portals. In order to prevent redirect loops when deploying SSL certificates in a Smart Redundant configuration with Guest Access, Web Portal and Hotspot captive portals, use the following wildcard certificate procedure: 1. Purchase or generate a self-signed wildcard certificate such as GoDaddy.Pem and install it on both ZoneDirectors in the Smart redundant pair. 2. In DNS, add 3 host/IP entries similar to the following management.GoDaddy.com; 192.168.0.100: This is the FQDN you wish to use for reaching the shared virtual management interface and is mapped to its configured IP address. primary-zd.GoDaddy.com; 192.168.0.98: This is the FQDN for the primary ZD controller and its physical IP address. backup-zd.GoDaddy.com; 192.168.0.99: This is the FQDN for the backup ZD controller and its physical IP address. When you import the wildcard certificate into the ZoneDirectors you will be prompted to enter the host name – make sure you use the same host name as you will advertise in DNS or that ZoneDirector (the default is the same configured ZoneDirector name) </div>

Import SSL Wild Card certificates on standalone Zone-Director and Zone-Directors in redundant configuration

2021-08-04T06:23:14-0700 2021-08-04T12:00:19-0700 https://support.ruckuswireless.com/articles/000001236 2021-08-04T06:33:05-0700 monthly 0.8 admin,premium knowledge_article_1811 knowledge_article_1811 2012-03-21T12:01:27-0700 000001236 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration Performance, Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How do Ruckus Zone Flex Access Points handle Multicast traffic and how do I modify the behavior? There are three mechanisms that Ruckus employs to help multicast applications work better. 1. Directed Multicast uses IGMP snoop to determine which devices are requesting access to a multicast session and then implements a multicast to unicast conversion, since Multicast implies multiple users receiving the same packets simultaneously and since WiFi clients can each be receiving at different Data Rates based on statistical success. 2. Multicast packets are traditionally sent at the broadcast, multicast, frame header - lowest common denominator rate – for 802.11bgn that is 1Mbps. 3. Directed multicast will send each client that subscribes to a multicast session an individual copy of each multicast packet sent as an 802.11 unicast at the highest speed that particular client can receive. Instead of having one 1Mbps packet sent to several clients you get several unicast packets (that also get acknowledged) sent at 54Mbps to 300Mbps (for 802.11na). There is a threshold (that can be sent) above which the number of simultaneous viewers of the same multicast diminishes the efficacy of this process. To learn which clients desire access to the multicast the Ruckus Access Points do IGMP snooping and create a table of client join and leave messages. Directed Multicast, IGMP snoop and IGMP queries are enabled in each logical interface – Ethernet, and WLAN/SSID – the settings can be verified in the Access Point support info file: Here is an example: Ruckus Wireless SmartMedia QOS info for wlan interface QOS Configuration options: Classification: Enabled UDP Heuristics: Enabled TOS Classification: Enabled Dot1p Classification: Enabled Dot1p Classification VIDs: Dot1p Marking VIDs: VID VO Classification: VID VI Classification: VID BE Classification: VID BK Classification: Directed Multicast: Enabled IGMP Snooping Mode: Enabled MLD Snooping Mode: Disabled Filters: IP/UDP Ucast(Disabled) IP Bcast(Disabled) non-IP(Disabled) It is useful often to disable IGMP snooping on the Ethernet ports– this is good as learning the same multicast request from a wired client can disconnect the wireless clients. Directed Multicast is not needed on these interfaces either. The set_qos wlan <wlan-name> directed-mcast disable is a global option run from the Zone Director CLI that will disable directed multicast for the particular WLAN/SSID and is enforced on all APs when they get provisioned by the Zone Director. First access the ZD via SSH, find the WLAN that you want to disable directed multicast from, then load the WLAN, and finally disable directed multicast/snooping for that WLAN: ruckus> en ruckus# config ruckus(config)# show wlan WLAN Service: ID: 1: NAME = hotspot Tx. Rate of Management Frame(2.4GHz) = 2.0Mbps Tx. Rate of Management Frame(5GHz) = 6.0Mbps Beacon Interval = 100ms ruckus(config)# wlan hotspot The WLAN service 'hotspot' has been loaded. To save the WLAN service, type 'end' or 'exit'. ruckus(config-wlan)# no qos directed-multicast ruckus(config-wlan)# no qos igmp-snooping ruckus(config-wlan)# end <---- make sure to say end to save the settings. qos directed-multicast - Enables QoS for directed multicast traffic. no qos directed-multicast - Disables QoS for directed multicast traffic. You can enable/disable IGMP snooping per WLAN/SSID using qos igmp-snooping Enables QoS for IGMP snooping traffic. qos igmp-snooping Enables QoS for IGMP snooping traffic. no qos igmp-snooping Disables QoS IGMP snooping traffic. The Ethernet settings can only be configured using AP CLI commands – but you can run AP CLI commands to all AP’s that are connected using the remote_ap_cli command from the debug mode: ruckus# debug ruckus(debug)# ruckus(debug)# remote_ap_cli -A "set qos eth0 directed mutlicast disable" ruckus(debug)# remote_ap_cli -A "set qos eth0 igmp disable" ruckus(debug)# remote_ap_cli -A "set qos eth0 igmp-query disable" set qos <ifname> directed multicast [enable|disable] -- Sets the state of egress packet processing for the specified interface set qos <ifname> igmp [enable|disable] -- Sets the state of IGMP Snooping for the specified interface set qos igmp_query [v2|v3] [enable|disable] -- Sets IGMP General Query version for IGMP General Query Mechanism There are two Ethernet interfaces – eth0 and eth1 and these commands can be run on either. To diagnose problems with mutlicast communication to wireless clients always start with the default settings and save the supportinfo.txt file from the AP after testing but with the client still connected. You can check the status of multicast stations by searching for the Multicast address and client MAC address in the current IGMP group membership table and Update History found towards the beginning of the support info file: example: Current IGMP Group membership (9 groups) at time 169037083 Group MAC(I/F) Version Report-time Packets Octets 224.0.0.2 00235482A014(wlan15/0) 2 168993873 0 0 C0C1C0539199(wlan15/0) 2 168996534 0 0 001C1035535A(wlan15/0) 2 168990257 0 0 C0C1C02ED9A6(wlan15/0) 2 168736356 0 0 687F74A1989F(wlan15/0) 2 168990335 0 0 00219B1C26BB(wlan8/0) 2 168988576 0 0 Update history cur(19) as of time 169037084 Time Protocol Reason MAC(I/F) Group 0 168990257 IGMP STA Updat 001C1035535A(wlan15) 224.0.0.2 1 168990335 IGMP STA Updat 687F74A1989F(wlan15) 224.0.0.2 2 168990733 IGMP STA Updat 30469A272781(wlan15) 239.255.67.250 3 168990980 IGMP STA Join 78E4007D5F5D(wlan15) 224.0.0.253 4 168991080 IGMP STA Updat 00195B0C1A29(wlan15) 239.255.255.251 5 168992479 IGMP STA Updat 70F1A167B4AF(wlan15) 224.0.0.253 6 168993873 IGMP STA Updat 00235482A014(wlan15) 224.0.0.2 7 168994918 IGMP STA Updat 0019D2D097F2(wlan15) 234.21.81.1 8 168995401 IGMP STA Updat C0C1C032F72B(wlan15) 224.0.2.47 9 168996534 IGMP STA Updat C0C1C0539199(wlan15) 224.0.0.2 10 168998487 IGMP STA Updat 70F1A167B4AF(wlan15) 224.0.0.253 11 168998896 IGMP STA Updat 0025D307B5AB(wlan15) 224.0.0.253 12 169001993 IGMP STA STALE C0C1C032F72B(N/A) All Groups 13 169001993 IGMP STA STALE 001D7EF10D74(N/A) All Groups 14 169001993 IGMP STA STALE 002618A3C547(N/A) All Groups 15 169001993 IGMP STA STALE 001D7E9A57FD(N/A) All Groups 16 169001993 IGMP STA STALE 001DE074A78B(N/A) All Groups

Description of how Ruckus Access Points handle Multicast Traffic

2021-08-04T06:33:05-0700 2021-08-04T12:00:16-0700 https://support.ruckuswireless.com/articles/000001424 2021-08-04T06:35:09-0700 monthly 0.8 admin,premium knowledge_article_4733 knowledge_article_4733 2013-01-17T17:29:39-0800 000001424 Validated (External) Premium Zoneflex indoor Performance;Installation;Known issues and workarounds Performance, Installation, Known Issues and Workarounds, ZoneFlex Indoor What are PoE switches compatible with ZF7982 802.11af/at specifications? <div class="page"> <div class="layoutArea"> <div class="column"> Description <div class="page" title="Page 1"> <div class="layoutArea"> <div class="column"> When ZoneFlex 7982 AP’s are plugged in to adjacent ports on certain PoE switch models, some AP’s fail to power up. Ruckus has investigated the issue in depth and believes this not to be a ZoneFlex7982 product problem, but rather a common design flaw found among several models of PoE switch. A common design practice in multiport PoE switches is to use components which group some of the Ethernet circuitry for multiple ports together – e.g. 1 component serves 2 or 4 adjacent ports. If these components are not configured properly, they can introduce “illegal” circuit paths (DC current paths) from one port to another, which can be problematic if there is an AP on both ports since it interferes with APs’ PoE circuits. Ruckus has found this to be a common cause of ZoneFlex 7982 failures on several different PoE switches. Some devices are more sensitive than others to this switch design. Ruckus has reproduced the problem with switches known to have this design issue with Ruckus and non-Ruckus APs. The problem has also been reproduced on both 802.3af and 802.3at switches which exhibit the issue. The problem does not exist with switches which are properly DC-isolated. </div> </div> </div> <div class="page" title="Page 2"> <div class="layoutArea"> <div class="column"> 7982 / PoE Switch Interoperability Ruckus has performed interoperability testing with several PoE switch models and the 7982, the results of which are summarized in the table below. This list will be updated as Ruckus completes additional interoperability testing. </div> </div> <div class="layoutArea"> <div class="column"> PoE Switch List (as of this notice) </div> </div> <div class="section"> <div class="layoutArea"> <div class="column"> The following PoE switches have been found to reliably power up multiple 7982's occupying adjacent ports. The absence of a switch model from this list does not imply interoperability issues – it more thanlikelymeansRuckushasnottestedthatmodel. PleasecontactRuckusSupportwithany questions regarding PoE switch models which are not on this list. <ul style="list-style-type: none;"><li> ? Alcatel Lucent OS6850-48P </li><li> ? Juniper 4200EX-48P </li><li> ? HP 3500yl-48G/J8693A </li><li> ? HP V1910-24G-PoE </li><li> ? Cisco 3560v2 PoE 24 </li><li> ? Cisco 2960S-48FPS-L </li><li> ? Zyxel GS2200-8HP </li><li> ? Zyxel GS2200-24P </li><li> ? Zyxel GS1910-24HP </li><li> ? D-Link DGS-1500-28P </li><li> ? D-Link DGS-1210-10P </li><li> ? D-Link DGS-1210-28P </li><li> ? D-Link DGS-3120-24PC/S </li></ul> </div> </div> </div> <div class="layoutArea"> <div class="column"> Issue: Some PoE switches only power a limited number of 7982’s because they reserve 30 Watts per AP and quickly run out of power budget allocation Description The 7982 advertises itself as a Class 4 PoE device (as do other enterprise class 3-stream APs), which is compatible with 802.3af and 802.3at switches. 802.3af switches re-classify a device with this behavior as 802.3af Class 0 (15.4W), and the vast majority of 802.3at switches classify it as 802.3at Type 1 (15.4W). This implementation is intentional as it maintains compatibility with both 802.3af and 802.3at switches, and allows the 7982 to support full 802.3at power (>15.4W with a future firmware upgrade to support LLDP, if required). Some 802.3at switches will reserve 30W for a Class 4 device by default, and will only power as many devices as their power budget divided by 30W will allow. If a 7982 is plugged in to one of these switches which has already allocated its power budget, that 7982 may be denied power, or another device may be powered down to accommodate the new AP. </div> </div> </div> </div> </div> </div>

Ruckus Wireless is aware that when multiple ZoneFlex 7982 AP’s are connected to certain PoE switches, some AP’s fail to power up. Ruckus has investigated the issue in depth and believes this not to be a ZoneFlex7982 product problem, but rather a common design flaw found among several models of PoE switch.

2021-08-04T06:35:09-0700 2021-08-04T12:00:15-0700 https://support.ruckuswireless.com/articles/000002137 2021-08-04T06:38:02-0700 monthly 0.8 admin,premium knowledge_article_507 knowledge_article_507 2013-07-01T17:06:25-0700 000002137 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, ZoneDirector How to configure VLAN for WLAN on port based vlan switch configuration? There are many instances where VLANs will be configured across their switch which entirely depends on their network setup requirements. One such instance is where port-based vlan configuration is implemented in General mode. This is usually done for changing the default vlan information on the respective port(other than default vlan '1'). In General, if a VLAN is tagged, then the respective VLAN tagging is required at WLAN configuration on the Zonedirector(Configure-->WLAN, edit ->Advanced settings). Suppose, if a switch port is configured with a different pvid(port based vlan id) in general mode. This will modify the default/untag vlan information on this switch port which in turn no tagging is required across the WLAN configuration on the Zonedirector. Because, the 802.1q tagging will not be applied on this wlan traffic which will directly passed on to the corresponding pvid. Please look at the below example which shows the port configuration on the Dell Powerconnect switch to which an AP is connected: interface ethernet 1/g16 classofservice trust ip-dscp description 'Ruckus - IT' switchport mode general switchport general pvid 11 switchport general allowed vlan add 10-12 switchport general allowed vlan add 13 tagged - If a wireless client want to acquire an IP address and work on a vlan 11 which is the default vlan, then the tagging is not required across the WLAN. We can leave it as default Access vlan id '1' . All packets will be expected to pass the traffic on vlan 11 on default. - However, if you would like to have a wireless client to work on vlan 13 then tagging is required at WLAN configuration. Otherwise, packet will be forwarded to the default vlan 11.

Configuring VLANs for wireless traffic.

2021-08-04T06:38:02-0700 2021-08-04T12:00:13-0700 https://support.ruckuswireless.com/articles/000004018 2021-08-04T06:41:31-0700 monthly 0.8 admin,premium knowledge_article_2664 knowledge_article_2664 2015-02-03T14:48:11-0800 000004018 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation Configuration, Firmware, Installation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway What is the minimum firmware version required to manage our 802.11ac//802.11ax APs across controller platforms Rule#1: Refer to the controller platform firmware version Release Notes to confirm supported AP models. Here are the first version of controller platform firmware that supported each of our new 802.11ac model APs. AP Model _______ ZD ______ SZ _______ vSZ ______ SZ100 E510: ________ 10.1.1 __ 3.6.1.0.227 __ 3.6.1.0.227 __ 3.6.1.0.227 R300: __________ 9.7 ______ 2.5.1 _______ 2.5 ________ 3.0.3 R310: ______ 9.12.0.101____ 3.4 _________ 3.4 ________ 3.4 R320: _____ 10.2.1.0.75 __ 5.1.0.0.916 __ 5.1.0.0.916 __ 5.1.0.0.916 R700: __________ 9.8 ______ 2.1 ________ 2.5 ________ 3.0.3 R710: __________ 9.12 ______ 3.1.1 ______ 3.1.1 _______ 3.1.1 R720: _____ 9.12.3.0.75 __ 3.5.1.0.296 __ 3.5.1.0.296 __ 3.5.1.0.296 R730: _____10.1.2.0.120 __ 3.6.2.0.509 __ 3.6.2.0.509 __ 3.6.2.0.509 R750: _____10.3.0.0.362 __ 5.1.1.0. 598 __ 5.1.1.0. 598 __ 5.1.1.0. 598 (AP patch 5.1.1.0.2150 ) R500: __________ 9.8.1 _______ 2.5.1 ______ 3.0.3 _______ 3.0.3 R510: __________ 9.13 __ 3.4.1.0.208 __ 3.4.1.0.208 __ 3.4.1.0.208 R600: __________ 9.8.1 _____ 2.5.1 ______ 3.0.3 _______ 3.0.3 R610: ________ 9.13.2 ___ 3.4.2.0.152 __ 3.4.2.0.152 __ 3.4.2.0.152 R650:_____ 10.4.0.0.69 __ 5.2.0.0.699 __ 5.2.0.0.699 __ 5.2.0.0.699 H500: __________ 9.10 ______ 3.1 _______ 3.0.3 _______ 3.1 H510: _________ 9.13.1 _____3.4 ________ 3.4 ________ 3.4 H320: ________ 9.12.3.0.75 __ 3.6 _______ 3.6 _________ 3.6 C500: __________ N.A. ______ 3.1.1 ______ 3.1.1 _______ 3.1.1 T300: __________ 9.8.1 _____ 2.5.1 ______ 3.0.3 _______ 3.0.3 T300e: _________ 9.9 _______ 2.6 _______ 3.0.3 _______ 3.0.3 T301n: _________ 9.8.1 _____ 2.5.1 ______ 3.0.3 _______ 3.0.3 T301s: _________ 9.8.1 _____ 2.5.1 ______ 3.0.3 _______ 3.0.3 T310: _______ 10.1.1.0.42 ____ 5.1 _______ 5.1 _________ 5.1 T610: _____ 9.13.3.0.22 __ 3.4.2.0.169 __ 3.4.2.0.169 __ 3.4.2.0.169 T710 __________ 9.13 _____ 3.4.0 ______ 3.4.0 _____ 3.4.0 T750: _____ 10.4.0.0.69 __ 5.2.0.0.699 __ 5.2.0.0.699 __ 5.2.0.0.699 M510 _________ TBD ______ 5.0.0 ______ 5.0.0 ______ 5.0.0 T710 __________ 9.13 _____ 3.4.0 ______ 3.4.0 _____ 3.4.0 Starting Jan 1, 2015 the default base image that ships on Ruckus APs will be 100.x "Solo AP" firmware, capable of discovering ZD or SZ Ruckus controller.

Minimum firmware versions required to manage our 802.11ac/802.11ax APs across controller platforms

2021-08-04T06:41:31-0700 2021-08-04T12:00:11-0700 https://support.ruckuswireless.com/articles/000011852 2021-08-04T07:26:48-0700 monthly 0.8 admin,premium knowledge_article_4732 knowledge_article_4732 2021-08-04T07:26:17-0700 000011852 Validated (External) Premium R550;RUCKUS R550 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, R550 Why is the AP unable to establish SSH tunnel to the controller? Upgrade the AP to 114.0.0.5585 or set the AP to IPV4 mode only or use DHCP. How to set and verify AP in IPV4 Mode Only. #rkscli: set ipmode wan ipv4 OK #rkscli: get ipmode wan IP Mode: ipv4 OK

APs using SW version 114.0.0.1432 with static IP configured unable to establish SSH tunnel to the VSZ

2021-08-04T07:26:48-0700 2021-08-04T12:00:07-0700 https://support.ruckuswireless.com/articles/000001658 2021-08-02T00:48:26-0700 monthly 0.8 admin,premium knowledge_article_4672 knowledge_article_4672 2013-02-15T19:15:43-0800 000001658 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What does "heartbeat lost" message indicate? ZoneDirector (ZD) and connected Access Points (AP) expect heartbeat (echo) requests or responses in 40 and 30 seconds respectively. If not ZD and AP would consider the heartbeat is lost. ZD side a. After 2 consecutive (80 seconds) heartbeat losses, ZD raises a "heartbeat lost" alert and deletes the AP. b. After another 20 minutes, if the AP does not discover and join ZD, ZD raises "Lost contact to AP" alert. AP side c. After a heartbeat lost (30 seconds), AP sends 12 consecutive heartbeat requests every 5 seconds (total 60 seconds). If it still does not hear a response from ZD, AP enters Sole Run state and starts to send discovery request. d. In Sole Run state, AP sends out discovery request every 5 seconds for 15 minutes. After receiving no responses, AP will reboot and leave a reboot reason viewable in support text stating "cannot discover ZD in 180 attempts".

2021-08-02T00:48:26-0700 2021-08-02T06:00:08-0700 https://support.ruckuswireless.com/articles/000001888 2021-08-01T19:29:50-0700 monthly 0.8 admin,premium knowledge_article_344 knowledge_article_344 2013-05-29T11:57:16-0700 000001888 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to configure the Smart Redundancy across the ZoneDirectors See the attached document for more details on: Enable Smart Redundancy Forcing Failover to the Backup ZoneDirector Enabling an Additional Management Interface

ZoneDirector’s Smart Redundancy feature allows two ZoneDirectors to be configured as a redundant pair.

2021-08-01T19:29:50-0700 2021-08-02T00:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDX1CAO?attachment_index=0 2021-08-02T00:00:10-0700 monthly admin,premium knowledge_article_344 knowledge_article_344_attachment_1 Smart Redundancy Configuration.pdf 2191176.0 application/pdf https://support.ruckuswireless.com/articles/000004138 2021-08-01T22:28:31-0700 monthly 0.8 admin,premium knowledge_article_2120 knowledge_article_2120 2015-03-05T10:57:39-0800 000004138 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 How do I disable Ruckus Directed Multicast and Directed Broadcast features on SZ controlled Access Points? Directed Multicast is enabled or disabled per WLAN so first you need to determine which wlan interface to run the command. You cannot use AP scripts for 'get' commands so I would test directly on one AP at first via SSH using the CLI commands or remote ap-cli from the SCG CLI, then create the AP script to do it to all AP’s in a Zone. Run 'get wlanlist' to verify the wlanX interface name required to be changed. Directed Multicast (for IGMP subscription based unicast conversion) is a 'qos' command: set qos <ifname> directed multicast {enable|disable} -- Sets the state of egress packet processing for the specified interface Directed Broadcast is unicast conversion for all broadcast and well known multicast addresses: set directed-thr : set directed-thr <wlan name> <new threshold> -- Set the upper limit on Directed Broadcast processing (0 == disable) The settings can be verified by downloading the support info file or using get qos commands per interface: rkscli: get qos wlan0 Ruckus Wireless SmartMedia QOS A suggested script looks like this ====================================================================================== #define AP FW version fw_version=2.5.0.1.174 - this version MUST match with your AP firmware version #define Model class model=all # Sets octet count for Heuristic-based classification set qos wlan0 directed multicast disable - these can be any available AP CLI set commands set directed-thr 0 ====================================================================================== To load the script: <ul><li> Administration and AP CLI Scripts</li><li> Select the AP Zone that you want to apply the script. Note: if you have vSZ-e, then the script will apply to ALL registered AP</li><li> Upload the attached AP CLI Scripts</li><li> Click the Execute tab, then click the Refresh tab</li></ul> DONE….. Another Example, SZ 3.2 ----------------------------------------- fw_version=3.2.0.0.790 model=all # disable Directed Multicast set qos wlan0 directed multicast disable set qos wlan1 directed multicast disable set qos wlan2 directed multicast disable set qos wlan32 directed multicast disable set qos wlan33 directed multicast disable set qos wlan34 directed multicast disable # disable directed threshold set directed-thr wlan0 0 0 set directed-thr wlan1 0 0 set directed-thr wlan2 0 0 set directed-thr wlan32 0 0 set directed-thr wlan33 0 0 set directed-thr wlan34 0 0 ----------------------------------------- Note: Because SZ does not have a 'remote_ap_cli all' command, Admin would need scripts to loop through every desired Zone, then within each Zone to loop through every AP, and then loop through every Eth port...

Disabling Directed Multicast and Broadcast in SCG/vSCG controlled APs

2021-08-01T22:28:31-0700 2021-08-02T00:00:08-0700 https://support.ruckuswireless.com/articles/000001428 2021-07-27T00:43:13-0700 monthly 0.8 admin,premium knowledge_article_2521 knowledge_article_2521 2013-01-18T09:07:56-0800 000001428 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why can't I connect an AP to ZD across a network? Once the dropping point of the LWAPP packet is determined using the troubleshooting steps above take the appropriate action: <ol><li>If no LWAPP is see at the Switch port the AP is connected to, it might be a bad AP, or is in a bad state, RMA if re-setting the AP to factory default does not help.</li><li>If the LWAPP packet is dropped at the firewall/router, open port 12222 and 12223? These ports are LWAPP ports, ensure that these ports are open.</li><li>If the LWAPP packet is send entering it's Switch port but the upstream port does not check with the switch security setting or call your switch vendor and explain/show that the packet from one port is not making it out the other.</li></ol>

Symptoms: * AP has a valid IP * AP can ping the ZD * ZD does not register any of the AP's attempt to connect

2021-07-27T00:43:13-0700 2021-07-27T06:00:13-0700 https://support.ruckuswireless.com/articles/000001380 2021-07-27T01:29:42-0700 monthly 0.8 admin,premium knowledge_article_4729 knowledge_article_4729 2013-01-16T07:54:13-0800 000001380 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector What is the reason for high CPU utilization on Controller? Below are the steps how to make CPU utilization low on the controller: >Disable the Real time monitoring. >Disable all the Debug components. >Disable WLAN tunnel mode. >Lower SNMP polling frequency. >Remove DHCP server functionality on the ZD. >Avoid configuration changes to the ZD during peak usage. >Operate on a standard maintenance release. >Raise FM inform and performance monitoring intervals. If the above changes still doesn't help, you can do few steps further: >Lower background scanning interval. This will lower amount of data ZD has to process. >Raise inactivity timeout value on most used SSIDs if not on all SSIDs.

This article explains what causes high CPU utilization or stuck state on a ZD.

2021-07-27T01:29:42-0700 2021-07-27T06:00:10-0700 https://support.ruckuswireless.com/articles/000002549 2020-08-18T03:51:50-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4352 knowledge_article_4352 2014-01-26T01:22:52-0800 000002549 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Installation;Troubleshooting;Known issues and workarounds Performance, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor As this issue is due to License of Zone Director, purchasing additional licenses should fix the issue.

Access Point got disconnected on the ZD and shows message as "Connection request from AP[RuckusAP6] refused; AP limit reached"

2020-08-18T03:51:50-0700 2021-07-27T03:04:37-0700 https://support.ruckuswireless.com/articles/000001654 2021-07-25T07:00:03-0700 monthly 0.8 admin,premium knowledge_article_2145 knowledge_article_2145 2013-02-19T16:18:18-0800 000001654 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector Regarding the error message that shows up on the RADIUS server, An Access-Request message was received from RADIUS client 172.18.0.4 with a message authenticator attribute that is not valid. We need to cross check whether the shared secret mentioned while configuring the Radius client in the network policy server and the shared secret mentioned at the AAA server configuration in the Zone director is same or not. Please find the below information which helps to understand about the Message Authenticator attribute. Message Authenticator attribute When you configure IAS for a RADIUS client, you configure the IP address of the client. If an incoming RADIUS Access-Request message does not originate from at least one of the IP addresses of configured clients, IAS automatically discards the message, providing protection for an IAS server. However, source IP addresses can be spoofed (substituted with other IP addresses). To provide protection from spoofed Access-Request messages and RADIUS message tampering, each RADIUS message can be additionally protected with the RADIUS Message Authenticator attribute, which is described in RFC 2869, "RADIUS Extensions." The RADIUS Message Authenticator attribute is a Message Digest 5 (MD5) hash of the entire RADIUS message. The shared secret is used as the key. If the RADIUS Message Authenticator attribute is present, it is verified. If it fails verification, the RADIUS message is discarded. If the client settings require the Message Authenticator attribute and it is not present, the RADIUS message is discarded.

Issue with RADIUS authentication. One of the controllers will authenticate to RADIUS server, but the other will not. Have verified that the passwords match on the RADIUS server and the controller. Have tried breaking the smart redundancy between the controllers and resetting the problem controller, but it still won't work with the RADIUS server. error message that shows up on the RADIUS server. An Access-Request message was received from RADIUS client 172.18.0.4 with a message authenticator attribute that is not valid.

2021-07-25T07:00:03-0700 2021-07-25T12:00:09-0700 https://support.ruckuswireless.com/articles/000011819 2021-07-23T12:34:55-0700 monthly 0.8 admin,premium knowledge_article_4727 knowledge_article_4727 2021-07-23T12:31:57-0700 000011819 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway Is it possible to assign a Zone to a customer with their own login and have no access to other Zone using SmartZone-144? No, SZ-144 doesn't have Multi-Domain function as such, the MSP functionality is disable.

Does the SmartZone-144 controller have a MSP Domain function

2021-07-23T12:34:55-0700 2021-07-23T18:00:10-0700 https://support.ruckuswireless.com/articles/000011820 2021-07-23T12:37:06-0700 monthly 0.8 admin,premium knowledge_article_4726 knowledge_article_4726 2021-07-23T12:33:46-0700 000011820 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway Why am I not able to access the WEB UI using my newly created MSP user profile? To access the WEB UI using MSP user profile, the @domain-name has to be added from the Login page. The user login is CASE sensitive so it has to be entered exactly the Domain name <img alt="User-added image" height="355" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4YV&feoid=00N50000002Cf3M&refid=0EM2J0000025l7k" width="500"></img> Successful login will show only the MSP account i.e. Domain, Staging Zone, WLAN and etc. <img alt="User-added image" height="224" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4YV&feoid=00N50000002Cf3M&refid=0EM2J0000025l7z" width="500"></img>

How to create and access MSP domain

2021-07-23T12:37:06-0700 2021-07-23T18:00:08-0700 https://support.ruckuswireless.com/articles/000003402 2021-07-22T07:04:45-0700 monthly 0.8 admin,premium knowledge_article_1279 knowledge_article_1279 2014-09-16T13:13:36-0700 000003402 Validated (External) Premium Ruckus cloud wifi;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation;Troubleshooting;Known issues and workarounds Configuration, Firmware, Installation, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi, SmartCell Gateway What ports/protocols need to be open to permit AP to SCG200/SZ100/vSZ-E/vSZ-H communication, and if including NAT? Ruckus Support Portal, Downloads (vSCG) page: <a href="https://support.ruckuswireless.com/documents/513-vscg-version-2-5-administrator-guide" target="_blank">https://support.ruckuswireless.com/documents/513-vscg-version-2-5-administrator-guide</a> vSCG v2.5 Admin Guide, page 334-335, Firewall Ports. <img alt="vSCG Admin UG page 334" height="514" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Xm&feoid=00N50000002Cf3M&refid=0EM50000000LYhx" width="500"></img> Note: The bottom three ports (data plane) are not needed for vSCG, and only needed for SCG 2.1 and earlier. <img alt="vSCG Admin UG page 335" height="514" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Xm&feoid=00N50000002Cf3M&refid=0EM50000000LYi2" width="500"></img> Here is the info we got from QA. 3. Port forward vSCG necessary ports. UDP:12223,123,161; TCP:21,22,91,443,8080,8443,8090,8099,8100,8111,9997,9998,9080,9443,16384-65000 UDP- 12223: ZD AP using LWAPP join 123: AP sync ntp with SCG 161: SNMP query TCP- 21 : ZD AP fw update via FTP 22 : SCG AP communicated with SCG 91 : SCG AP fw update via HTTP 443 : Let SCG AP get SSH private key 8080 : SCG setup wizard GUI 8443 : SCG GUI 8090, 8099, 8100, 8111, 9997, 9998 : For WISPr 9080, 9443 : For Northbound API (NBI) 16384-65000: For ZD AP fw update via FTP Note: If the SZ controller is the Ruckus Cloud, be sure no webfilter blocking access to <a href="http://ruckuswireless.com" target="_blank">ruckuswireless.com</a>. See also: SZ 3.6.1 Admin Guide: http://docs.ruckuswireless.com/smartzone/3.6.1/sz300-vszh-scg200-administrator-guide/GUID-078C00BE-7543-4439-9326-F6509EA404A0.html

What ports/protocols need to be open to permit AP to SmartZone controller communication, and if including NAT?

2021-07-22T07:04:45-0700 2021-07-22T12:00:11-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PHSKCA4?attachment_index=0 2021-07-22T12:00:11-0700 monthly admin,premium knowledge_article_1279 knowledge_article_1279_attachment_1 SmartZone_FW_Ports_Config_Guide-v3.pdf 3784164.0 application/pdf https://support.ruckuswireless.com/articles/000004185 2021-07-22T07:06:30-0700 monthly 0.8 admin,premium knowledge_article_3539 knowledge_article_3539 2015-03-13T12:45:03-0700 000004185 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Troubleshooting;Known issues and workarounds Performance, Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What considerations are necessary with 64mb APs in current firmware? Disabling non important services and reducing the number and type of WLAN serviced is recommended. See the attached 64mb AP Performance Considerations document for further details.

Early models of Ruckus APs have 64mb RAM that may limit performance running 9.8+ firmware

2021-07-22T07:06:30-0700 2021-07-22T12:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PIL0CAO?attachment_index=0 2021-07-22T12:00:09-0700 monthly admin,premium knowledge_article_3539 knowledge_article_3539_attachment_1 64MB_AP_Perf_Considerations_v1.pdf 425370.0 application/pdf https://support.ruckuswireless.com/articles/000006329 2019-10-16T14:22:04-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2611 knowledge_article_2611 2017-05-08T16:06:16-0700 000006329 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;Configuration;Installation;Troubleshooting;Known issues and workarounds Performance, Configuration, Installation, Troubleshooting, Known Issues and Workarounds, Unleashed Why does the Unleashed AP get into founding unleashed network state/loop? Unleashed APs have to be able to reach the configured Default Gateway IP to work properly.

Trying to set up unleashed network and every time after the initial configuration from the set up wizard is performed the AP goes into - founding unleashed network state.

2019-10-16T14:22:04-0700 2021-07-22T02:12:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000LbV1CAK?attachment_index=0 2021-07-22T02:12:08-0700 monthly admin,premium,warranty,guest knowledge_article_2611 knowledge_article_2611_attachment_1 Unleashed founding issue.JPG 51009.0 image/jpeg https://support.ruckuswireless.com/articles/000011817 2021-07-21T08:55:41-0700 monthly 0.8 admin,premium knowledge_article_4723 knowledge_article_4723 2021-07-21T08:32:50-0700 000011817 Validated (External) Premium Spot lbs;Spot;Virtual smartcell gateway;Ruckus SPoT;Calibrator App for SPoT;vSPoT Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, SPoT LBS, SPoT, virtual SmartCell Gateway Why the APs that are connected to the vSPoT LBS server showing status as RED <ul><li>We reset the password for the venue "dit-msk-vspot-01" on the vSPOT and adjusted it back on the controller under Location Services Venue settings for "dit-msk-vspot-01" :</li></ul> <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4XX&feoid=00N50000002Cf3M&refid=0EM2J0000025iSV"></img> <ul><li>After reset, now the mosquitto.conf settings, now it shows 'dit-msk-vspot-01' and AP shows as Green on vSOT:</li></ul> # ================================================================= # Bridges # ================================================================= connection msk-vspot address 176.213.134.109:8883 topic 3.0/LOC/msk-vspot/LS/# in topic 3.0/LOC/msk-vspot/+/MGR out bridge_tls_version tlsv1 bridge_identity msk-vspot bridge_psk 6C62737673706F74 connection dit-msk-vspot-02 address 176.213.134.108:8883 topic 3.0/LOC/dit-msk-vspot-02/LS/# in topic 3.0/LOC/dit-msk-vspot-02/+/MGR out bridge_tls_version tlsv1 bridge_identity dit-msk-vspot-02 bridge_psk 73437431763937536161623935463372616F364E4B6261386364684F43563467 connection dit-msk-vspot-01 address 176.213.134.106:8883 topic 3.0/LOC/dit-msk-vspot-01/LS/# in topic 3.0/LOC/dit-msk-vspot-01/+/MGR out bridge_tls_version tlsv1 bridge_identity dit-msk-vspot-01 bridge_psk 5169636B3376755A544C4D4A79624B626F7551344A66684E365941743062626E

Article explains how to fix AP on vSPOT shows as red due to incorrect PSK identity.

2021-07-21T08:55:41-0700 2021-07-21T12:00:08-0700 https://support.ruckuswireless.com/articles/000005106 2021-01-13T09:47:41-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_2173 knowledge_article_2173 2015-09-10T10:53:42-0700 000005106 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Installation Configuration, Installation, Unleashed What Videos, Online Help, Training are available to explain facets of the Unleashed AP product offering? Ruckus Wireless has announced a controller-less up to 128 AP solution for small and mid-sized businesses called Unleashed: <a href="http://www.ruckuswireless.com/press/releases/20151006-ruckus-wireless-simplifies-wi-fi-small-business-launches-new-controller-less" target="_blank">http://www.ruckuswireless.com/press/releases/20151006-ruckus-wireless-simplifies-wi-fi-small-business-launches-new-controller-less</a> Below: Links to “Ruckus Wireless Unleashed Controller-less online course” videos and Online Help guide. <ol><li>Product Overview</li></ol> <a href="https://ruckus-training.s3.amazonaws.com/Unleashed/1_Unleashed_Controllerless_Product_Overveiw_v10.mp4" target="_blank">https://ruckus-training.s3.amazonaws.com/Unleashed/1_Unleashed_Controllerless_Product_Overveiw_v10.mp4</a> <ol><li>*Installing Unleashed Network with Master AP</li></ol> <a href="https://ruckus-training.s3.amazonaws.com/Unleashed/2_Installing_an_Unleashed_Network_with_the_Master_AP_V4_Build_608.mp4" target="_blank">https://ruckus-training.s3.amazonaws.com/Unleashed/2_Installing_an_Unleashed_Network_with_the_Master_AP_V4_Build_608.mp4</a> <ol><li>Unleashed Dashboard Overview</li></ol> <a href="https://ruckus-training.s3.amazonaws.com/Unleashed/3_Unleashed_Dashboard_Overview_v2.mp4" target="_blank">https://ruckus-training.s3.amazonaws.com/Unleashed/3_Unleashed_Dashboard_Overview_v2.mp4</a> 4. System and Admin Overview <a href="https://ruckus-training.s3.amazonaws.com/Unleashed/4_Unleashd_System_Admin_Dashboard_Overview_v2.mp4" target="_blank">https://ruckus-training.s3.amazonaws.com/Unleashed/4_Unleashd_System_Admin_Dashboard_Overview_v2.mp4</a> 5. Monitoring Clients (No changes – good with original) <a href="https://ruckus-training.s3.amazonaws.com/Unleashed/5_Monitoring_Clients_v1.mp4" target="_blank">https://ruckus-training.s3.amazonaws.com/Unleashed/5_Monitoring_Clients_v1.mp4</a> 6. Monitoring Unleashed Access Points <a href="https://ruckus-training.s3.amazonaws.com/Unleashed/6_Monitoring_APs_v2.mp4" target="_blank">https://ruckus-training.s3.amazonaws.com/Unleashed/6_Monitoring_APs_v2.mp4</a> 7. Editing Existing WLANs <a href="https://ruckus-training.s3.amazonaws.com/Unleashed/7_Editing_an_Esiting_WLAN_V3.mp4" target="_blank">https://ruckus-training.s3.amazonaws.com/Unleashed/7_Editing_an_Esiting_WLAN_V3.mp4</a> 8. Editing AP configurations <a href="https://ruckus-training.s3.amazonaws.com/Unleashed/8_Editing_Access_Point_Configurations_v2.mp4" target="_blank">https://ruckus-training.s3.amazonaws.com/Unleashed/8_Editing_Access_Point_Configurations_v2.mp4</a> 9. Creating a standard WLAN <a href="https://ruckus-training.s3.amazonaws.com/Unleashed/9_Creating_a_Standard_WLAN_V2.mp4" target="_blank">https://ruckus-training.s3.amazonaws.com/Unleashed/9_Creating_a_Standard_WLAN_V2.mp4</a> 10. Creating a Guest Network WLAN <a href="https://ruckus-training.s3.amazonaws.com/Unleashed/10_Creating_A_Guest_WLAN_V1.mp4" target="_blank">https://ruckus-training.s3.amazonaws.com/Unleashed/10_Creating_A_Guest_WLAN_V1.mp4</a> 11. System Administrations <a href="https://ruckus-training.s3.amazonaws.com/Unleashed/12_System_Administration_v2.mp4" target="_blank">https://ruckus-training.s3.amazonaws.com/Unleashed/12_System_Administration_v2.mp4</a> 12. Enhanced Services <a href="https://ruckus-training.s3.amazonaws.com/Unleashed/13_Enhanced_Services_v2.mp4" target="_blank">https://ruckus-training.s3.amazonaws.com/Unleashed/13_Enhanced_Services_v2.mp4</a> -- Ruckus Wireless Unleashed Online Help is available at this URL: <a href="https://docs.ruckuswireless.com/unleashed/200.6/index.html" target="_blank">https://docs.ruckuswireless.com/unleashed/200.6/index.html</a> Link to Ruckus Wireless Unleashed Product page on Support: <a href="https://support.ruckuswireless.com/product_families/19-unleashed" target="_blank">https://support.ruckuswireless.com/product_families/19-unleashed</a> Sign-up for Ruckus Wireless Unleashed Online Training, available at this URL: <a href="https://training.ruckuswireless.com/enrol/index.php?id=1044" target="_blank">https://training.ruckuswireless.com/enrol/index.php?id=1044</a>

This is a set of Ruckus Training videos regarding facets of the Unleashed controller-less AP product offering. Ruckus Wireless Unleashed Online Help is available from the provided URL.

2021-01-13T09:47:41-0800 2021-07-21T02:14:39-0700 https://support.ruckuswireless.com/articles/000010677 2020-06-30T01:23:18-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4278 knowledge_article_4278 2020-06-30T01:23:18-0700 000010677 Validated (External) Public Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Troubleshooting;Support license activation;Registration Troubleshooting, Support License Activation, Registration, Cloudpath License consumption by the devices over onboarding portal Active User An active user is one who is actively connected to the network. If a license is tied to a user that has gone through the onboarding portal, they are able to use multiple devices and still count as 1 user, using one of your licenses. However, if a device is not tied to a user thru the onboarding portal, like a guest user, then that is a single license and each device they add will count against your purchased user license count. Cloudpath is licensed per user. Internal and guest users count for as long as their credentials are active on the system. An active user/individual can connect multiple devices to the network, and they still only count as one user. Devices that are not associated with a specific person, but a guest user. also count as a user, if they are managed through directory services. Your IT team has the visibility into what devices are on the network and the ability to associate every device with a user—and can block/revoke access at any time for any given user. Guest User A guest user is considered an active user. Certificates, Mac Reg and DPSK fall under the term “guest user.” If you are using MAC registration for guest or IoT devices, That could be accounting for overage on user licenses. A user (authenticated by AD, or other authentication source) may have any number of enrollments tied to it, as the enrollment record establishes if it is "tied" to a user by the workflow. In a guest or IoT scenario, there is no "user" to tie the enrollment to, so each of those devices counts as a "license" while the mac registration is active. When a mac registration expires, it should clean up or revert the "license" the next time the script runs (nightly). When issuing a guest "pass" you should consider the length of time that pass is good for and set an expiration date that is timely to avoid these guest passes adding to your user count when they are no longer needing/using that pass. Similar for FTE students and staff, having them expire in a timely manner allows for another user to log in and manages your active users in a more efficient manner. User count can and will fluctuate and you should be licensed to cover those fluctuations to remain in compliance. If you are on the latest release, you should be getting a ribbon that shows if you are going over that user count. You can at any time adjust those users to a count that matches your actual usage by adding additional users to your account. I would suggest to monitor the average usage over a couple of weeks period, and adjust the subscription to cover that many licenses.

Cloudpath License usage with Active users and Guest users

2020-06-30T01:23:18-0700 2021-07-20T06:44:51-0700 https://support.ruckuswireless.com/articles/000001571 2021-07-20T00:45:13-0700 monthly 0.8 admin,premium knowledge_article_1037 knowledge_article_1037 2013-02-01T11:08:17-0800 000001571 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to place ZD and AP in VLAN Environment To move the controllers and APs to a different VLAN, we can configure the switch ports as access on those VLANs. For example, if the AP and ZD has to be on VLAN 20, configure the uplink port of these devices access on VLAN 20. If we have to manage these devices on a tagged/management VLAN, first connect the ZD and all the APs on an access VLAN and make sure the APs have joined the ZD. We can check the APs status under Monitor > Access Points on ZD GUI. Once the APs connect to the ZD and download the configuration, follow the below steps below : <ul><li>Under Configure > Access Points go to Access Point Policies, select Management VLAN and configure the desired VLAN ID. When applied all the APs will get disconnected.</li><li>Under Configure > System, go to Device IP Settings and change ACCESS VLAN* to the desired VLAN and Apply.</li><li>Once the management VLAN is configured, the ZD and the APs would look for the tagged VLAN on the ports.</li><li>Connect the ZD to a trunk port with VLAN 1 untagged and the configured VLAN as tagged.</li><li>Connect APs to trunk ports in which VLAN 1 is untagged and AP management VLAN and client VLANs as tagged.</li><li>Now the APs will join back to ZD and will show connected.</li></ul> NOTE: Make sure there is Inter VLAN routing enabled between the VLANs, if we are accessing the ZD or the APs from other VLANs

Placing ZD and APs in VLAN Environment

2021-07-20T00:45:13-0700 2021-07-20T06:00:10-0700 https://support.ruckuswireless.com/articles/000001847 2021-07-20T01:03:28-0700 monthly 0.8 admin,premium knowledge_article_1776 knowledge_article_1776 2013-03-19T11:27:19-0700 000001847 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor How to configure MAC authentication using radius server? Review the attached document for the below configuration details: Microsoft IAS setup Configuring the RADIUS server Configure the policy Configure IAS clients Configuring users Modify the password policy Manually update Group Policy Add the new MAC user Create a new group for the user

How to configure MAC authentication with RADIUS

2021-07-20T01:03:28-0700 2021-07-20T06:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDRDCA4?attachment_index=0 2021-07-20T06:00:08-0700 monthly admin,premium knowledge_article_1776 knowledge_article_1776_attachment_1 RADIUS+MAC auth.doc 2160868.0 application/msword https://support.ruckuswireless.com/articles/000005490 2021-07-18T09:40:59-0700 monthly 0.8 admin,premium knowledge_article_4343 knowledge_article_4343 2016-02-07T20:11:55-0800 000005490 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware;Installation;Troubleshooting Configuration, Firmware, Installation, Troubleshooting, Unleashed Why can't I upgrade Unleashed AP firmware? Configured DNS Server on the Master AP and then AP was able to upgrade.

Unable to upgrade Unleashed AP. Getting error message ''Failed to download the image upgrade information. The server is not reachable or the file does not exist.''

2021-07-18T09:40:59-0700 2021-07-18T12:00:09-0700 https://support.ruckuswireless.com/articles/000011785 2021-07-15T11:30:41-0700 monthly 0.8 admin,premium knowledge_article_4722 knowledge_article_4722 2021-07-15T10:37:03-0700 000011785 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Installation Installation, SmartCell Insight Why are the new Data nodes not coming on line and joining the newly created Master node. While checking logs it was noticed that the customer had changed the node name/hostname after initial 2 Data nodes were brought up. Changing the hostname will break operation and should never be done. Hostname can be changed during install from TUI screen where connection is configured pg. 19 of 5.5.3 install guide: <a href="https://docs.commscope.com/bundle/sci-5.5-install-guide/page/GUID-E1E98885-EB95-4BE4-A214-0C553461F003-homepage.html" style="color: blue; text-decoration: underline;" target="_blank">https://docs.commscope.com/bundle/sci-5.5-install-guide/page/GUID-E1E98885-EB95-4BE4-A214-0C553461F003-homepage.html</a> <a href="https://support.ruckuswireless.com/documents/3582-smartcell-insight-sci-version-5-5-3-ga-installation-guide" style="color: blue; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/documents/3582-smartcell-insight-sci-version-5-5-3-ga-installation-guide</a> <img alt="User-added image" height="445" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4WA&feoid=00N50000002Cf3M&refid=0EM2J0000025eCF" width="500"></img> It can be changed back to default using standard UNIX tool nmtui <img alt="User-added image" height="214" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4WA&feoid=00N50000002Cf3M&refid=0EM2J0000025eDl" width="605"></img> <img alt="User-added image" height="321" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4WA&feoid=00N50000002Cf3M&refid=0EM2J0000025eE0" width="612"></img> Option 2, also via SCI shell, you can also change it by editing the “hostname” file via “sudo vi /etc/hostname”… see below… <img alt="User-added image" height="85" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4WA&feoid=00N50000002Cf3M&refid=0EM2J0000025eEF" width="579"></img> <img alt="User-added image" height="63" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4WA&feoid=00N50000002Cf3M&refid=0EM2J0000025eEK" width="614"></img> SCI uses docker architecture and changes not defined explicitly in installation guide or by support should never be done, in this case Hostname must be left default. IP address cannot be changed after installation and operation as it is hardcoded into the data base.

During set up of a new SCI cluster the Data nodes were not coming online and only consul docker was active.

2021-07-15T11:30:41-0700 2021-07-15T12:00:08-0700 https://support.ruckuswireless.com/articles/000011778 2021-07-13T14:01:15-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4720 knowledge_article_4720 2021-07-13T13:48:22-0700 000011778 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway Where I can delete L2 ACL in 5.2.2 To check/delete/create/modify L2 Access Control on 5.1.2 AP Zone, please check Access Points>>AP Zone>>Services.

Where I can delete L2 ACL in a zone with 3.6 firmware when the controller is working 5.2.2

2021-07-13T14:01:15-0700 2021-07-13T18:00:09-0700 https://support.ruckuswireless.com/articles/000008996 2021-07-12T22:28:23-0700 monthly 0.8 admin,premium knowledge_article_3643 knowledge_article_3643 2019-04-01T11:37:40-0700 000008996 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Installation Configuration, Firmware, Installation, ZoneDirector What are the best practices for upgrading the ZD? These are recommended Best Practices for ZoneDirector Upgrades: - Read the target version Release Notes carefully before upgrading the ZD and check for AP compatibility, bug fixes, supported upgrade paths, etc., - Take a ZD Backup of the configuration before every upgrade while you are following the upgrade path. In case of failure you may use the backup file(s) to recover the configuration(s). - Follow the recommended upgrade path (See Release Notes and Upgrade Guides). - We recommend to use Apple Safari or Windows Firefox / IE / Edge browsers for configuring Ruckus Devices and for Ruckus firmware downloads (Chrome can add a .gz extension to download filenames). - Upgrade must be performed locally. Avoid Remote Upgrades. - All connected APs will be upgraded after the ZD, including remote location APs, so plan the downtime accordingly. - If you are upgrading to 9.9.x and later firmware, then it is mandatory to upload the Support entitlement file. To download and upload the same, follow the below: > Go to https://support.ruckuswireless.com/entitlement_file > Paste the ZoneDirector's serial number for which you want to download the entitlement and click submit > Now go to ZoneDirector web GUI >> Administer >> Support >> Choose file >> Upload the entitlement file > Proceed with the ZD upgrade now. - Make sure that ZD has FTP service enabled so that APs can download the firmware from the ZD automatically. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

This articles gives you information about the best practices for the ZoneDirector firmware upgrades.

2021-07-12T22:28:23-0700 2021-07-13T00:00:17-0700 https://support.ruckuswireless.com/articles/000001660 2021-07-12T09:29:15-0700 monthly 0.8 admin,premium knowledge_article_1253 knowledge_article_1253 2013-02-19T16:16:35-0800 000001660 Validated (External) Premium Sz144;Sz300;Unleashed;Zonedirector;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ144, SZ300, Unleashed, ZoneDirector, SCG200, virtual SmartCell Gateway, SZ100 After enabling ChannelFly, I see some clients disconnect - why? Disable ChannelFly on ZD or SZ and check whether it makes any difference or not. This is just to make sure whether the problem is due to channel fly or not. After disabling the ChannelFly check whether the same client connectivity problem happens or not. If it is confirmed that the issue is due to ChannelFly then find the details below. <div>ChannelFly will use 802.11h CSA (Channel Switch Announcements) messages for channel change notifications. If you have clients that do not support CSA 802.11h, ChannelFly may cause significant connectivity issues during the initial capacity assessment stage. </div> <div> </div> <div>You can enable/disable ChannelFly per band. If you have 2.4 GHz clients that do not support CSA 802.11h, Ruckus recommends disabling ChannelFly for 2.4 GHz but leaving it enabled for the 5 GHz band if you are using SZ release prior to 5.2.1. For ZD or SZ releases prior to 5.2.1, please note that when you first enable ChannelFly it may take some time for the AP to assess the various channels so the AP may change channel more often than usual and as mentioned above if clients do not support 802.11h CSA, they will "lose" network connection until it re-scans and finds the network on a new channel and again if the this is the first time ChannelFly is enabled the AP may change its channel again just after the client finds the network. Depending on the environment it can take quite some time for the AP to build up and good understanding of the environment, it can be minutes to hours before the network is stabilized. If you know your RF environment this is not necessary, but if you do not this will save you the trouble of setting an AP on a channel, assessing it manually over a long period of time and user complaints as you "test" each channel out. Considerable number of customers have reported disconnection issues on Ubuntu laptops when ChannelFly triggered channel changes. This is something to note as the Ubuntu OS doesn't seem to understand the Channel Switch Announcements (CSAs). The only way to restore the connection on such laptops is via the reboot which is a bit extreme. So this is something to consider when using ChannelFly. With SZ 5.2.1 a major design change was done to ChannelFly. This includes a new Channel Change Frequency (CCF) and full optimization period settings that can help to mitigate greatly client disconnection issues caused by this algorithm. Please refer to SZ Admin guide for more details about them and how they are configured. </div>

Seeing client disconnects after enabling ChannelFly

2021-07-12T09:29:15-0700 2021-07-12T12:00:07-0700 https://support.ruckuswireless.com/articles/000011776 2021-07-09T06:46:44-0700 monthly 0.8 admin,premium knowledge_article_4717 knowledge_article_4717 2021-07-09T06:44:42-0700 000011776 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, SmartCell Gateway Is there an issue adding additional nodes to an existing Active-Active Redundancy implementation? No issue in adding additional Node to an existing Active-Active Redundancy. In Active-Active redundancy, one cluster can have 2-nodes cluster, and the other can have 3-nodes or 4-nodes cluster. The only caveat would be that in Active-Active cluster redundancy, ensure each cluster can handle the number of failover APs in case when the other active cluster goes down.

Adding new nodes to existing clusters on Active-Active Redundancy

2021-07-09T06:46:44-0700 2021-07-09T12:00:08-0700 https://support.ruckuswireless.com/articles/000008406 2021-06-28T16:13:21-0700 monthly 0.8 admin,premium knowledge_article_3809 knowledge_article_3809 2018-10-17T07:18:53-0700 000008406 Validated (External) Premium I100;Vriot;Zoneflex indoor;Zoneflex outdoor Configuration;Firmware;Installation Configuration, Firmware, Installation, I100, vRIoT, ZoneFlex Indoor, ZoneFlex Outdoor What all Ruckus AP supports IoT Gateway Module. Ruckus IoT Gateway Modules are Radio or Radio-and-Sensor devices that connect to a Ruckus IoT-Ready AP to enable endpoint connectivity based on standards such as Bluetooth Low-Energy (BLE), ZigBee and LoRa. The IoT module available as of today is I100. Following are the list of AP's which accommodate IoT Gateway Modules I100 and respective vSZ/SZ release which supports these AP's: <img alt="User-added image" height="264" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4R5&feoid=00N50000002Cf3M&refid=0EM2J0000025Nma" width="722"></img> R750, R650,R550,T750, H550 and T350D have Embedded IOT Suite and can also support external IOT dongles.

This Article provides the list of AP's which support IoT Gateway Module.

2021-06-28T16:13:21-0700 2021-07-09T00:00:39-0700 https://support.ruckuswireless.com/articles/000006596 2021-06-29T00:58:22-0700 monthly 0.8 admin,premium knowledge_article_3096 knowledge_article_3096 2017-12-12T14:27:14-0800 000006596 Validated (External) Premium Ruckus icx switches Configuration;Installation Configuration, Installation, Ruckus ICX Switches What to consider when stacking ICX 7000 series ? <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div">Stack Configuration Methods 1 Connect the devices using the stacking ports and stack cabling. Power on the unit. 2. Connect your console to the intended active controller. The unit through which you run secure setup becomes the active controller by default. 3. Issue the stack enable command on the intended active controller. SCH-ACCESS-101(config)# stack enable Enable stacking. This unit actively participates in stacking SCH-ACCESS-101(config)# exit 4. Using the stack secure-setup command [This is another method] SCH-ACCESS-101# stack secure-setup SCH-ACCESS-101# Discovering the stack topology... Current Discovered Topology - RING Available UPSTREAM units Hop(s) Id Type Mac Address 1 2 ICX7450-24P cc4e.248a.7890 Available DOWNSTREAM units Hop(s) Id Type Mac Address 1 2 ICX7450-24P cc4e.248a.7890 No new units found... Selected Topology: Active Id Type Mac Address 1 ICX7450-24P cc4e.248a.7200 Selected UPSTREAM units Hop(s) Id Type Mac Address 1 2 ICX7450-24P cc4e.248a.7890 Selected DOWNSTREAM units Hop(s) Id Type Mac Address 1 2 ICX7450-24P cc4e.248a.7890 Do you accept the topology (RING) (y/n)?: y 5. Enter y to accept the topology. You should see output similar to the following. Selected Topology: Active Id Type MAC Address 1 ICX7450-24P cc4e.248a.7200 Selected UPSTREAM units Hop(s) Id Type MAC Address 1 2 ICX7450-24P cc4e.248a.7890 Selected DOWNSTREAM units Hop(s) Id Type MAC Address 1 2 ICX7450-24P cc4e.248a.7890 Do you accept the unit ids (y/n)?: y 6. To accept the unit ID assignments, enter y. 7. If you accept the unit IDs, the stack is formed. SCH-ACCESS-101# show stack T=2d19h17m13.8: alone: standalone, D: dynamic cfg, S: static ID Type Role Mac Address Pri State Comment 1 S ICX7450-24P active cc4e.248a.7200 0 local Ready 2 S ICX7450-24P standby cc4e.248a.7890 0 remote Ready active standby +---+ +---+ -2/3| 1 |2/1--2/1| 2 |2/3- | +---+ +---+ | | | |------------------------| Standby u2 - Learn other units for 28 sec, protocols may not be ready in 42 s. Current stack management MAC is cc4e.248a.7200 </div>

Stacking provides the ability to operate multiple devices logically as a single device.

2021-06-29T00:58:22-0700 2021-07-09T00:00:35-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tvr6CAC?attachment_index=0 2021-07-09T00:00:35-0700 monthly admin,premium knowledge_article_3096 knowledge_article_3096_attachment_1 ka25B000000CdFdQAK_Attachment__c.pdf 2328011.0 application/pdf https://support.ruckuswireless.com/articles/000011762 2021-07-01T20:17:43-0700 monthly 0.8 admin,premium knowledge_article_4713 knowledge_article_4713 2021-07-01T20:17:43-0700 000011762 Validated (External) Premium Spot lbs;Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SPoT LBS, SPoT Why does SPoTCalibration fails on Android and iOS App This error is caused due to the MAC Randomization feature on Android and iOS devices. If the MAC randomization is ON in either the iOS or Android Device then Calibration won't work because LBS server needs the MAC of the device correctly reported to calibrate. To Disable MAC Randomization on Android: <ul><li>Open the Settings app</li><li>Select Network and Internet</li><li>Select WiFi</li><li>Connect to the Wireless network</li><li>Tap the gear icon next to the current connection</li><li>Select Advanced</li><li>Select Privacy</li><li>Select "Use device MAC"</li></ul> On an iPhone: <ul><li>Ensure your device is connected to a Wi--Fi Network</li><li>Open the "Settings app", then tap "Wi-Fi"</li><li>Tap the "information button"</li><li>Tap on the "Use private Address" toggle to turn it off</li></ul> Once we disable the MAC Randomization the Calibration will work normal on Both Android and iOS device: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Ps&feoid=00N50000002Cf3M&refid=0EM2J0000025I7B"></img>

This article explains why spot calibration fails on the SPoT App

2021-07-01T20:17:43-0700 2021-07-09T00:00:32-0700 https://support.ruckuswireless.com/articles/000001138 2021-07-05T03:09:10-0700 monthly 0.8 admin,premium knowledge_article_4049 knowledge_article_4049 2012-03-21T11:59:52-0700 000001138 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector 802.1x EAP Authentication - Zone Director Topic: 802.1x authentication with Windows 2003 Server Contents: <ul><li>Introduction</li><li>802.1x Overivew</li><li>Prerequisites</li><li>Windows 2003 server configuration</li><li>Zone Director Configuration</li><li>Windows XP wireless client configuration</li><li>Troubleshooting steps. </li></ul> Introduction: This document describes how to configure Windows RADIUS server and Zone Director to authenticate Wireless client using 802.1x EAP authentication. 802.1x Overview It is a port access protocol for protecting networks via authentication. As a result, this type of authentication method is extremely useful in the Wi-Fi environment due to the nature of the medium. If a Wi-Fi user is authenticated via 802.1x for network access, a virtual port is opened on the access point allowing for communication. If not successfully authorized, a virtual port is not made available and communications are blocked. There are three basic pieces to 802.1x authentication: <ol><li>Supplicant - a software client running on the Wi-Fi workstation</li><li>Authenticator - the Zone Director / Wi-Fi access point</li><li>Authentication Server - a authentication database, usually a radius server such as Cisco* ACS*, Funk Steel-Belted RADIUS*, or Microsoft* IAS*</li></ol> Extensible Authentication Protocol (EAP) is used to pass the authentication information between the supplicant (the Wi-Fi workstation) and the authentication server (Microsoft IAS or other). The actual authentication is defined and handled by the EAP type. The ZD acting as authenticator is only a proxy to allow the supplicant and the authentication server to communicate. Some of the most commonly deployed EAP authentication types include EAP-MD-5, EAP-TLS, EAP-PEAP, and EAP-TTLS In this document our focus will be PEAP method. PEAP (Protected Extensible Authentication Protocol) provides a method to transport securely authentication data, including legacy password-based protocols, via 802.11 Wi-Fi networks. PEAP accomplishes this by using tunneling between PEAP clients and an authentication server. Like the competing standard Tunneled Transport Layer Security (TTLS), PEAP authenticates Wi-Fi LAN clients using only server-side certificates, thus simplifying the implementation and administration of a secure Wi-Fi LAN. Microsoft, Cisco and RSA Security developed PEAP. Prerequisites: Requirements Ensure that you meet these requirements before you attempt this configuration: Zone Direction running 9.x version Access Point managed by ZD ZD can reach RADIUS server Windows 2003 server – AD and IAS service Configuration: Windows 2003 : Active Directory (AD) Users and Computers: Open Active Directory, right click on the Users and create a new user. <img alt="User-added image" height="348" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L96K" width="500"></img> <img alt="User-added image" height="348" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L96P" width="500"></img> In the User properties, select “Dialin” and select “Allow Access”. <img alt="User-added image" height="350" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L96U" width="500"></img> Add ZoneDirector as a RADIUS client: In the 802.1x environment, the client AAA traffic goes to ZoneDirector until the client is authenticated. The client login credentials will go from AP to the ZoneDirector and the ZoneDirector (Authenticator) submits these credentials to the IAS (Authentication Server) on client’s behalf. From the Start menu go to All Programs :: Control Panel :: Administrative Tools :: Internet Authentication Service. From the left hand side navigation, right click on the RADIUS clients and select “New RADIUS Client” In the dialog box type a friendly name for the ZoneDirector and type the IP address of the ZoneDirector. Choose “RADIUS Standard” for the Client-Vendor and type a shared secret. Please note this secret as you have to use the same information on the ZoneDirector. <img alt="User-added image" height="405" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L96Z" width="500"></img> <img alt="User-added image" height="349" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L96e" width="500"></img> <img alt="User-added image" height="387" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L96j" width="500"></img> Remote Access Policies: Choose “Remote Access Policies” from the left hand side and remove existing policies. Right click and select “New Remote Access Policy” then click on the Next button. Give a name such as “Authenticate Wireless Users” Click Next and choose “Wireless” for the “Access Method”. Add the users group that will be using the 802.1x authentication. I added “Domain Users” group to this list. Click on the Next button and choose “PEAP” for the authentication method. For PEAP authentication it is mandatory to install CA certificate on the RADIUS server. The related article can be found in <a href="http://technet.microsoft.com/en-us/library/dd314152%28WS.10%29.aspx" target="_blank">http://technet.microsoft.com/en-us/library/dd314152(WS.10).aspx</a> Without CA certificate, PEAP authentication will fail. <img alt="User-added image" height="384" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L96o" width="500"></img> <img alt="User-added image" height="384" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L96t" width="500"></img> <img alt="User-added image" height="317" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L96y" width="500"></img> <img alt="User-added image" height="385" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L973" width="500"></img> Once the Policy is created, Edit the profile and go to “Authentication Tab”. Select EAP method as MS-CHAP and MS-CHAP V2. Choose Unencrypted authentication (PAP,SPAP) to test authentication from ZD -> Configure > AAA Server Page -> Test Authentication Settings. <img alt="User-added image" height="457" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L978" width="500"></img> <img alt="User-added image" height="454" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L97D" width="500"></img> Register IAS to AD: After Configuring AD and IAS please Register IAS to AD as follows <img alt="User-added image" height="203" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L97I" width="500"></img> Right click on IAS and click the Register Server in Active Directory. ZoneDirector configuration: Now you are ready to create this server as one of the RADIUS servers on the ZoneDirector. Log into the ZoneDirector and go to Configure :: Authentication Servers page and create a new entry for the IAS configured above. Here are my settings: Name=Dell 2003 IP Address=192.168.2.222 Port=1812 Shared secret=same as the secret used in “Configure ZoneDirector as a RADIUS client” section. Create a new WLAN to allow wireless clients access the network using 802.1x. My settings are shown in the screenshot below – <img alt="User-added image" height="442" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L97N" width="500"></img> Test the User from the Zone Director :: Go to Configure> AAA Servers >Create new Server and test the User authentication with the Authentication server. <img alt="User-added image" height="196" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L97S" width="500"></img> Radius Event Viewer log: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L97X"></img> <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L97c"></img> Client Association with the 802.1x Authentication: This particular WLAN should be seen in the air as long as the SSID is not hidden. To connect to it, right click on the wireless network from “Network Connections” and choose Properties. Click on the “Wireless Networks” tab and add the above SSID to the list. Change the Network Authentication and Data encryption settings according to WLAN settings. Click on the “Authentication” tab and choose PEAP as the EAP type, click on the Properties button right next to it. Uncheck validate server certificate. By default it will use the currently logged in user’s login credentials. If you don’t want that click on the “Configure” button and uncheck the box. <img alt="User-added image" height="279" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4S8&feoid=00N50000002Cf3M&refid=0EM50000000L97h" width="500"></img> Save the settings. When prompted enter the user credentials to log into the network. Common Trouble shooting steps taken when failed authentication :: <ol><li>Make sure the Dial-in access is allowed. This setting can be changed by going to “Active Directory Users and Computers”. Right click on the user account and choose Properties. There you will see Dial-in tab.</li><li>Go to the “Event Viewer” on the Windows machine running IAS to see success/failure login messages with the Reason-code.</li></ol>

802.1x EAP Authentication - Zone Director

2021-07-05T03:09:10-0700 2021-07-09T00:00:29-0700 https://support.ruckuswireless.com/articles/000001255 2021-07-05T03:15:46-0700 monthly 0.8 admin,premium knowledge_article_5 knowledge_article_5 2012-03-21T12:01:35-0700 000001255 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;System network management Configuration, Installation, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to assign an AP to register to a specific ZoneDirector? There are several different ways to make sure an Access Point connects to a specific ZoneDirector. The key point is that the Access Point discovers and requests to join a ZoneDirector, so the methods depend on the design of your network and controlling the ZoneDirector discovery protocols. If the Access Points are in the same subnet, they will do a Layer 2 LWAPP discovery, and automatically find all ZoneDirectors in the same subnet. The ZoneDirector has an auto allow feature that when enabled will automatically respond back to the Access Point with the number of open licenses for AP’s that are available. If multiple ZoneDirectors are on the same subnet with auto allow (configured on the Configure --> Access Point page) respond, the Access Point will choose to join the ZoneDirector with the most available leases. This system will balance the AP’s across the ZoneDirectors. If you want to specify which Access Point goes to which ZoneDirector, you can disable “auto-allow” and manually allow the Access Points one by one in the ZoneDirector Monitor Access Point Screen. If an Access Point has joined a ZoneDirector and you no longer want it controlled by that ZoneDirector, you can connect to the Access Points GUI directly (browse to the AP IP address, login is the same as the controlling ZoneDirector) and reset it to factory defaults. Alternately, you can also login to the AP using a SSH session and run "set factory" command followed by the "reboot" command. Then you must delete the AP configuration from the ZoneDirector before the AP reboots. You can manually configure each Access Point with a static primary and secondary ZoneDirector IP using the AP CLI command: set director ip primaryip secondaryip . This disables the layer 2 LWAPP discovery and forces the AP to first the primary, and if listed to the secondary if the primary is not available. If you have enough licenses on each ZoneDirector you could use this to set up some AP to one ZD, some to the other as primary, flipping the secondary’s as redundant. For Access Points connected to the ZoneDirector via Layer 3, or from other subnets, there are four methods of provisioning the Access Point for Layer 3 discovery and connectivity. The simplest method is to first connect the Access Points to the ZoneDirector via Layer 2, so that they learn the ZoneDirector's IP address. They can join via auto-allow or manual allow as set up above. Starting in version 8.1 you can also define a primary and secondary ZoneDirector to be provisioned into an Access Point once it joins and gets provisioned. But if you are manually load sharing between ZD’s, this feature will not work as once an Access Point connects to a secondary ZoneDirector, it will learn the new settings from that ZoneDirector which if now set as the primary in this configuration it will stick with this until it becomes unavailable. This will end up with all Access Points on one ZoneDirector until it becomes unavailable. The second automatic way to teach an Access Point how to discover the ZoneDirector is by configuring the DHCP server that provides management IP addresses to the Access Points with DHCP option 43, this teaches the Access point a primary and optionally a secondary IP address. You can use this to set all Access Points in a given Subnet to the same primary ZoneDirector, and have access to a redundant ZoneDirector if available with enough licenses. The last automatic method is to use DNS, which also requires the AP to get an IP from DHCP which includes the local domain name. The AP will then do a DNS lookup for zonedirector.localdomain.lan Finally, for Layer 3 operation, manually configuring each AP with the correct ZD address using the CLI is the only way to configure an AP already installed in a different subnet, and once configured manually, disables the automatic methods above including Layer 2 LWAPP discovery. This is the surest way to direct Access Points to a specific ZoneDirector.

This article discusses various methods to register an AP with the ZoneDirector.

2021-07-05T03:15:46-0700 2021-07-09T00:00:27-0700 https://support.ruckuswireless.com/articles/000001374 2021-07-05T03:24:05-0700 monthly 0.8 admin,premium knowledge_article_1819 knowledge_article_1819 2013-01-16T07:58:07-0800 000001374 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Installation;Troubleshooting Firmware, Installation, Troubleshooting, ZoneDirector How to upgrade ZDs which are in Smart Redundancy? If you have two ZoneDirectors in a Smart Redundancy configuration, the procedure is similar. Note however, that the active and standby ZoneDirectors will reverse roles during an upgrade. To upgrade both ZoneDirectors in a Smart Redundancy configuration 1. Log in to the active ZoneDirector or the shared Management Interface. 2. Go to Administer > Upgrade. 3. Under the Software Upgrade section, click Browse. The Browse dialog box appears. 4. Browse to the location where you saved the upgrade package, and then click Open. 5. When the upgrade file name appears in the text field, the Browse button becomes the Upgrade button. 6. Click Upgrade. The backup ZoneDirector is upgraded first. 7. When the backup ZoneDirector upgrade is complete, the backup ZoneDirector reboots and becomes active (begins accepting AP requests), while the original active ZoneDirector enters backup state and begins its own upgrade process. 8. All APs are now associated to the original backup ZoneDirector (which is now the active ZoneDirector), and begin upgrading AP firmware to the new version. 9. Each AP reboots after upgrading. Note: Do not attempt to manually upgrade the standby ZoneDirector first, followed by the active unit. If you do this, some configuration options may get lost during the upgrade process. Be sure to begin the upgrade process from either the active ZoneDirector’s Web interface or the shared Management interface. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

Firmware upgrade in ZD smart redundancy setup

2021-07-05T03:24:05-0700 2021-07-09T00:00:24-0700 https://support.ruckuswireless.com/articles/000001479 2021-07-05T04:24:25-0700 monthly 0.8 admin,premium knowledge_article_451 knowledge_article_451 2013-01-22T13:45:28-0800 000001479 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor How to configure local subnet on standalone AP? This feature is supported on 9.3.0.0.87 and above This document depicts connecting a Ruckus AP, from default configuration, and the steps needed to connect to your internet LAN/ISP connection. With this newer version of code, we now have the option of configuring more than 2 subnets, depending on the Ruckus APs. The below example is being done with a ZF-7363. The AP when it’s first turned on, it has a factory default IP address of 192.168.0.1 with username/password, respectively, of super/sp-admin. The steps recommended for configuration are in the following sequential order: - Define local subnet parameters (from GUI, Configuration / Local Subnets) - Define 2.4 and 5GHz radio parameters (Configuration / Radio 2.4GHz & 5GHz) - Define Ethernet Port parameters (Configuration / Ethernet Ports) Step 1, Defining Local Subnet Parameters <img alt="User-added image" height="386" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SS&feoid=00N50000002Cf3M&refid=0EM50000000LFIy" width="500"></img> Above, the local IP Address is left intact and a local subnet is created, starting with 192.168.40.2, which will be used for DHCP assignments. The DHCP scope is of 50 addresses. Step 2, Defining Wireless Parameters Radio 2.4G parameters are common parameters to the 2.4GHz wireless interface. Next, we’ve statically configured Channel 1 as it’s the optimal channel in the environment that the AP is in: <img alt="User-added image" height="386" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SS&feoid=00N50000002Cf3M&refid=0EM50000000LFJ3" width="500"></img> The next thing is configure is the Wireless 1 Tab, 2.4GHz SSID #1. Here I’ve enabled it and labeled it. The most important parameters to note here is Packet Forward and Local Subnet parameters. In the below scenario, we’re configuring our 2.4GHz Wireless 1 network to use Local Subnet NAT using Local Subnet 1 previously defined: <img alt="User-added image" height="386" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SS&feoid=00N50000002Cf3M&refid=0EM50000000LFJ8" width="500"></img> One would then do the same procedure for the 5GHz portion of the Ruckus AP if 5GHz band is available. Step 3, Defining Ethernet Port Parameters In this scenario, we only care about connecting the WLAN clients to the internet and using the AP ports for internet access as well. Here we are defining port 1 and port 2 for local Ethernet address where clients will be dynamically assigned an address if one connects to port 1 and port 2. We’re configuring Port 3 as the only WAN port where one will connect to the ISP or LAN port: <img alt="User-added image" height="386" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SS&feoid=00N50000002Cf3M&refid=0EM50000000LFJD" width="500"></img>

This article explains how to configure local subnet on standalone AP

2021-07-05T04:24:25-0700 2021-07-09T00:00:22-0700 https://support.ruckuswireless.com/articles/000001150 2021-07-05T04:31:13-0700 monthly 0.8 admin,premium knowledge_article_43 knowledge_article_43 2012-03-21T12:00:13-0700 000001150 Validated (External) Premium Zoneflex 7731 Firmware Firmware, ZoneFlex 7731 Product(s): ZF-7731 Topic: Firmware (SW) Upgrade of the ZF-7731 To download the latest SW, go to the appropriate ZF Outdoor Products section from our Ruckus Technical Support website, <a href="http://support.ruckuswireless.com/products/20-zoneflex-7731" target="_blank">http://support.ruckuswireless.com/products/20-zoneflex-7731</a> To perform an upgrade for the ZF-7731, there are four possible options: <ol><li>TFTP - requires TFTP server with local/remote connection to the 7731 via a laptop/computer.</li><li>FTP – upgrade done through the internet.</li><li>Web – upgrade done through the internet or a locally reachable WEB server.</li><li>Local – requires local/remote connection to the 7731 via a laptop/computer.</li></ol> Preliminary troubleshooting if upgrading through the internet: For options 2 and 3, upgrading through internet, make sure that your 7731 has internet connectivity prior to doing the upgrade through both upgrade methods and that the 7731 has gotten an IP address from your DHCP server. DCHP check would be the first thing to do. In the next screen capture, Configuration / Bridge under Ethernet settings, we’ve configured the 7731 to get a DHCP assignation from the network just by selecting DHCP for IP Setting. This is on by default and so connecting the 7731 to your network with a local DHCP server will automatically look for the DHCP server, reboot may be required for 7731 to cycle through and look for DHCP server: <img alt="User-added image" height="386" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SX&feoid=00N50000002Cf3M&refid=0EM50000000L98X" width="500"></img> You can confirm that you have internet access by navigating to the 7731’s Administration / Diagnostics and inputting an internet address like <a href="http://www.yahoo.com/" target="_blank">www.yahoo.com</a> in the ping section. If the ping replies back then you’ve got internet connectivity: <img alt="User-added image" height="386" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SX&feoid=00N50000002Cf3M&refid=0EM50000000L99O" width="500"></img> If you do not get a ping response from <a href="http://www.yahoo.com/" target="_blank">www.yahoo.com</a> but you do get a ping response from 98.137.149.56 then your DNS server might not be configured correctly. Before an upgrade, keep in mind that you have a remote location and a local location. It’s always recommended to first upgrade the remote location and do the local upgrade last. It’s always recommended to set aside a service window as there will be downtime for the described upgrades. Local Upgrade: The easiest upgrade is the local upgrade. You simply download the SW image that you will like to load into your PC/laptop and then point to that file from the Local upgrade option within the 7731 URL. You can download the 7731 image from <a href="http://support.ruckuswireless.com/" target="_blank">http://support.ruckuswireless.com</a> , keep in mind that this site requires a technical support contract and registration to download SW. Contact <a href="mailto:support@ruckuswireless.com" target="_blank">support@ruckuswireless.com</a> if download issues arise. Here’s the Local upgrade screen, pointing locally to the upgrade file: <img alt="User-added image" height="347" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SX&feoid=00N50000002Cf3M&refid=0EM50000000L990" width="500"></img> TFTP Upgrade: TFTP upgrade is also a local upgrade in a sense that the 7731 does not go to the internet to do the upgrade, the upgrade is done from a local computer. You will need the SW image, image control file in the same folder as the SW image, and a TFTP server. The TFTP server that we use in this example can be downloaded from <a href="http://tftpd32.jounin.net/tftpd32_download.html" target="_blank">http://tftpd32.jounin.net/tftpd32_download.html</a> The image control file is a simple file that calls to the SW image i.e. zf7731_920_cntrl.rcks. Please ask support at <a href="mailto:support@ruckuswireless.com" target="_blank">support@ruckuswireless.com</a> if you require this image. Here I’ve pointed my TFTPd32 server to the location where I’ve placed the SW image: <img alt="User-added image" height="296" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SX&feoid=00N50000002Cf3M&refid=0EM50000000L99T" width="500"></img> My next step is to make sure that I can ping the TFTP server location from the 7731 Diagnostics: <img alt="User-added image" height="191" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SX&feoid=00N50000002Cf3M&refid=0EM50000000L97s" width="500"></img> And finally, go to the upgrade tab, TFTP method, and make sure that the following parameters are filled: <img alt="User-added image" height="245" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SX&feoid=00N50000002Cf3M&refid=0EM50000000L99Y" width="500"></img> FTP Upgrade: The FTP upgrade is done through the internet and references the Ruckus FTP server. FTP upgrade requires the below parameters to be filled exact for the upgrade to for example 9.2.0.0.139: <img alt="User-added image" height="272" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SX&feoid=00N50000002Cf3M&refid=0EM50000000L99d" width="500"></img> After the upgrade, the 7731 will reboot and will show the new SW version in the Status / Bridge page: <img alt="User-added image" height="264" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SX&feoid=00N50000002Cf3M&refid=0EM50000000L99i" width="500"></img> Web Upgrade: This is usually the least used option for upgrade as it requires a web server to perform the upgrade i.e. Apache WEBS, etc. For the Web Upgrade, the following link needs to be copied into the Web Options URL for the upgrade to 9.2.0.0.139: <a href="http://fwupdate1.ruckuswireless.com/zf7731_920_cntrl.rcks" target="_blank">http://fwupdate1.ruckuswireless.com/zf7731_920_cntrl.rcks</a> <img alt="User-added image" height="192" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4SX&feoid=00N50000002Cf3M&refid=0EM50000000L99n" width="500"></img>

Firmware (SW) Upgrade process of ZF7731

2021-07-05T04:31:13-0700 2021-07-09T00:00:21-0700 https://support.ruckuswireless.com/articles/000009611 2021-07-08T17:55:01-0700 monthly 0.8 admin,premium knowledge_article_3857 knowledge_article_3857 2019-07-21T22:22:39-0700 000009611 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;System network management;Troubleshooting Installation, System Network Management, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor My APs won't connect to my ZD. How do I rule-out or confirm network-based issues? Using the above steps should help to identify where the issue lies. Some of the more common reasons for failed communications between AP and ZD are: <div style="margin-left: 40px;"> - Insufficient AP licenses - AP certificates are expired - AP models no longer supported by ZD software version</div> Other Knowledge Base articles exist to troubleshoot these issues.

How to identify AP to Zone Director communication issues and verify if the issue is caused by external network

2021-07-08T17:55:01-0700 2021-07-09T00:00:14-0700 https://support.ruckuswireless.com/articles/000003403 2021-07-08T18:01:00-0700 monthly 0.8 admin,premium knowledge_article_1723 knowledge_article_1723 2014-09-16T19:17:43-0700 000003403 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway How to add new Access Point to vSCG or SCG? Below are steps to connect an AP to a vSCG, 1. Using DHCP option 43. *… or DNS resolution of “zonedirector” (if APs have LWAPP fw initially), or “RuckusController” (CAPs count), pointed to the real IP(s) of the SCG/vSCG Control-Plane interface(s). 2. Manually configure the vSCG control interface IP address at the AP CLI interface with below command. "set scg ip <vSCG-Control-IP>" ( Access Point should be on SCG firmware) If the Access Point is running on Zone Director firmware then use the command "set director ip <vSCG-Control-IP>" Once the Access Point comes up on the vSCG and upgrades the firmware to SCG firmware, enter the CLI command "set scg ip <vSCG-Control-IP>" Note: By default the LWAPP2SCG script present in the SCG will be having "Deny all" access list for all the ZoneDirector access Point's that are discovering it. You can either set an "Allow all" policy or manually allow few Access Points by modifying the access list. The following CLI commands are helpful to allow all policy, # configure # lwapp2scg # policy accept-all If the vSCG is behind the firewall following Ports need to be opened. UDP- 12223: ZD AP using LWAPP join 123: AP sync ntp with SCG 161: SNMP query TCP- 21 : ZD AP fw update via FTP 22 : SCG AP communicated with SCG 91 : SCG AP fw update via HTTP 443 : Let SCG AP get SSH private key 8080 : SCG setup wizard GUI 8443 : SCG GUI 8090, 8099, 8100, 8111, 9997, 9998 : For WISPr 9080, 9443 : For Northbound API (NBI) 16384-65000: For ZD AP fw update via FTP Note: If the SZ controller is the Ruckus Cloud, be sure no webfilter blocking access to <a href="http://ruckuswireless.com" target="_blank">ruckuswireless.com</a>. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

Adding new access point to vSCG (or SCG)

2021-07-08T18:01:00-0700 2021-07-09T00:00:10-0700 https://support.ruckuswireless.com/articles/000010263 2021-05-28T11:25:49-0700 monthly 0.8 admin,premium knowledge_article_4103 knowledge_article_4103 2020-03-24T02:03:32-0700 000010263 Validated (External) Premium I100;Vriot Configuration;Firmware;Installation Configuration, Firmware, Installation, I100, vRIoT What is the compatible firmware of Assa Abloy Door locks for the vRIOT Following is the list of Assa Abloy door lock firmware versions which is compatible with respective vRIoT firmware. <table class="Table" height="271" style="margin-left: 0px;" width="751"><tbody><tr style="height: 15.15pt;"><td colspan="1" rowspan="1">ZigBee Firmware Version</td><td colspan="1" rowspan="1">Lock Version</td><td colspan="1" rowspan="1">BLE version</td><td colspan="1" rowspan="1">Visionline Version</td><td colspan="1" rowspan="1">vRIoT Version</td></tr><tr style="height: 15.15pt;"><td colspan="1" rowspan="1">3.0.60.0</td><td colspan="1" rowspan="1">3.17.36.1</td><td colspan="1" rowspan="1">11.16</td><td colspan="1" rowspan="1">1.26.0.13</td><td colspan="1" rowspan="1">1.3, 1.4, & 1.5</td></tr><tr style="height: 15.15pt;"><td colspan="1" rowspan="1">3.0.58.0</td><td colspan="1" rowspan="1">3.17.36.1</td><td colspan="1" rowspan="1">11.16</td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1">Not Supported</td></tr><tr style="height: 15.15pt;"><td colspan="1" rowspan="1">3.1.62.1</td><td colspan="1" rowspan="1">3.17.37.21</td><td colspan="1" rowspan="1">11.16</td><td colspan="1" rowspan="1">1.26.0.13</td><td colspan="1" rowspan="1">1.3, 1.4, & 1.5</td></tr><tr style="height: 15.15pt;"><td colspan="1" rowspan="1">3.1.61.3</td><td colspan="1" rowspan="1">3.17.36.1</td><td colspan="1" rowspan="1">11.16</td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1">Not Supported</td></tr><tr style="height: 15.15pt;"><td colspan="1" rowspan="1">3.1.62.1</td><td colspan="1" rowspan="1">3.17.37.5</td><td colspan="1" rowspan="1">11.19</td><td colspan="1" rowspan="1">1.26.0.13</td><td colspan="1" rowspan="1">1.5, 1.6, 1.7, 1.8</td></tr></tbody></table>

This Article provided the firmware compatibility matrix between the Assa Abloy Door lock and vRIOT version.

2021-05-28T11:25:49-0700 2021-06-29T06:03:36-0700 https://support.ruckuswireless.com/articles/000004575 2016-09-21T09:40:30-0700 monthly 0.8 admin,premium knowledge_article_1927 knowledge_article_1927 2015-05-18T10:11:07-0700 000004575 Validated (External) Premium Zonedirector;Smartcell insight;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Insight (SCI) Configuration Configuration, ZoneDirector, SmartCell Insight Where do I find information for configuring SCI with ZoneDirector APs Find SCI Installation Guide, User Guide, and latest version Release Notes under Support Documentation. See how to add ZoneDirectors under the Managing Controllers section of the SCI User Guide. <a href="https://support.ruckuswireless.com/documents?filter=54#documents" target="_blank">SCI Support Site Documentation</a>

Looking for documentation describing how to connect a ZD to a SCI - the process, the ports to open, and release compatibility.

2016-09-21T09:40:30-0700 2021-06-23T14:04:52-0700 https://support.ruckuswireless.com/articles/000011769 2021-06-22T08:49:59-0700 monthly 0.8 admin,premium knowledge_article_4708 knowledge_article_4708 2021-06-22T08:28:17-0700 000011769 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) System network management System Network Management, SmartCell Gateway integrate FortiNAC with vSZ Follow the attached PDF for instruction on how to Integrate FortiNac with vSZ.

Article provide guide for FortiNac integration with RUCKUS SmartZone

2021-06-22T08:49:59-0700 2021-06-22T12:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000LsMwSAK?attachment_index=0 2021-06-22T12:00:08-0700 monthly admin,premium knowledge_article_4708 knowledge_article_4708_attachment_1 FortiNAC_Ruckus_vSZ.pdf 889105.0 application/pdf https://support.ruckuswireless.com/articles/000002357 2021-05-27T01:38:41-0700 monthly 0.8 admin,premium knowledge_article_2509 knowledge_article_2509 2013-11-21T12:33:57-0800 000002357 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway How to set up a Management VLAN on AP from CLI? New APs ship with standalone 100.x.x.x.x base image firmware. They can operate either in a standalone mode or can be converted into a controller managed setup. Their firmware will change to 3.x/5.x if they join an SZ-100/vSZ (or) vSCG, SCG-200 OR 9.x if they join a ZD instead. We can change the AP management VLAN from the controller GUI or from the AP CLI. The procedure follows below. Please note that you can use the same procedure on a controller managed AP if you want to override the global managed VLAN ID mentioned just above. If you are using this override, please use "Keep AP's setting" at the AP level so the global VLAN ID setting won't override it. In case of a standalone AP: Under the "Internet" configuration page, specify the "Management VLAN" ID to use (no need to run any commands if you choose not to). Please ensure the switch port where the AP is connected to is also set as a trunk port to carry the corresponding traffic. Otherwise, the AP will be stranded and you need to factory reset the AP to regain access. In case of a controller managed AP: This can be done in two different ways if this is desired. 1. SSH to the AP and use the below command to set a management VLAN on it. <ul><li style="margin-left: 40px;">rkscli: set ipaddr wan vlan <VLAN_ID> <ip address of ap> <subnet mask> <default gateway></li></ul> Example: rkscli: set ipaddr wan vlan 3 <ip address of ap> <subnet mask> <default gateway> After a reboot, all management traffic coming out of this AP will be tagged with the VLAN ID specified in the above command. As you see, this needs to be done by going into each AP CLI if this is what you want. Other drawback includes, first you need to connect to an access port, run this command, and move it to a trunk port (unless that trunk port's native VLAN is 1). ** The same steps can be used to configure different management VLANs for different APs as well, when there is proper inter-VLAN routing between these management VLANs for the APs to reach the ZD/SCG/vSCG/vSZ/SZ100. 2. By setting switch port's native VLAN to the desired VLAN. A. By default, APs management traffic goes out as untagged with ID 1. Switch port's native VLAN doesn't need to match this. B. For example, if you set a switch port to use native VLAN 200 all the management traffic from the AP will be tagged with 200 and sent upstream. This may be the easiest option.

This article explains procedure on setting up a management VLAN at the AP level. This can be on standalone AP or a controller managed AP.

2021-05-27T01:38:41-0700 2021-06-17T12:00:58-0700 https://support.ruckuswireless.com/articles/000001524 2021-05-27T18:13:44-0700 monthly 0.8 admin,premium knowledge_article_4707 knowledge_article_4707 2013-02-24T19:45:11-0800 000001524 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP What is Isolated Mesh, what's an Island SSID, and when is it seen? An Isolated Mesh state implies that your AP is having problems reconnecting to the mesh network. If there is temporary RF interference such that the APs cannot maintain 25+ RSSI to stay connected, or newly introduced obstructions, this could cause an Isolated Mesh AP. Island WLAN is activated when, <ol><li>AP is in factory default. AP will disable Island WLAN when it is configured through CLI, WebUI, ZD, SZ, etc.</li><li>AP is not in factory default, but cannot get response from unicast ARPing GW and controller (ZD/SZ). AP will disable Island WLAN after getting response from these ARPing.</li></ol> Things to check: 1) Be sure that the mesh SSID and passphrase configured on the AP are correct, 2) and if Uplink Selection is set to Manual, that the desired AP is not Off or Unavailable for it to connect to. 3) If possible try performing a Mesh AP power cycle to let the APs find each other. Recovering an Isolated Mesh AP When a Mesh AP becomes isolated, it begins broadcasting a recovery SSID (named "island-<last 6 digits of AP's MAC address>"), which you can use to connect directly to the AP and make configuration changes. Note that this SSID is not bridged to the local network for security reasons. To perform these procedures, you will need: <ul><li>A notebook computer with wireless capability. If you are running Windows XP on the computer, make sure that either the WPA2 patch or Service Pack 3 is installed.</li><li>The current ZoneDirector mesh configuration (steps for obtaining this information are provided below).</li><li>An SSH client, such as PuTTY or OpenSSH.</li><li>A text editor such as Notepad.</li></ul> <h2>Step 1: Obtain the Mesh SSID and Passphrase</h2> <ol><li class="p"> On the ZoneDirector Web interface, click the Configure tab, and then click Mesh on the menu. </li><li class="p"> Under Mesh Settings, copy the contents of the Mesh Name and Mesh Passphrase fields into a text editor. </li></ol> <h2>Step 2: Ensure that the AP's Mesh Mode is set to Auto</h2> <ol><li class="p"> Go to Configure > Access Points and click the Edit link next to the AP you want to recover. </li><li class="p"> Under Advanced Options > Mesh Mode, select Auto and click OK. </li></ol> <h2>Step 3: Locate the AP's Mesh Recovery SSID</h2> <ol><li class="p"> In your notebook's wireless connection list, locate the Mesh recovery SSID. The SSID will be named "island-xxxxxx" (where xxxxxx is the last 6 digits of the AP's MAC address). </li><li class="p"> Connect to this WLAN using WPA and the passphrase ruckus-<admin password>. (The admin password is the same as that used to log into ZoneDirector). </li><li class="p"> You can now access the AP's Web interface by entering the AP's recovery IP address 169.254.1.1 in the browser. </li></ol> Note that because the AP is still in ZoneDirector-managed state, you can not make configuration changes via the Web interface. Therefore you will need to proceed to the next step and connect to the AP's CLI to make changes. <h2>Step 4: Connect to the AP and update its Mesh settings</h2> <ol><li> Launch your SSH client and enter the IP address 169.254.1.1. </li><li> Log into the AP via SSH using the same user name and password that you use to log into the ZoneDirector Web interface. </li><li> Enter the command set meshcfg ssid <current_ssid>, where current_ssid is the SSID that the mesh network is currently using. </li><li> Enter the command set meshcfg passphrase <current_passphrase>, where current_passphrase is the passphrase that the mesh network is currently using. </li></ol> <ol start="5"><li> Enter the command set mesh auto. </li><li> If there are multiple ZoneDirectors on the network, you may need to specify which ZoneDirector the AP should connect to, using the command set director ip <ZoneDirector’s IP address>. </li><li> If a management VLAN is used for ZoneDirector-AP management traffic, enter the following command: set ipaddr wan vlan <vlan ID>. </li><li> Enter the command reboot to restart the AP with the new configuration changes. </li><li> Close the SSH client. </li></ol> You have completed recovering the Isolated Mesh AP. You should be able to manage this AP again shortly. Please wait at least 15 minutes (to allow the mesh network to stabilize), and then try managing this AP again via ZoneDirector/SmartZone controller. <ol></ol>

What are conditions that can cause a Mesh AP (or factory default) to advertise Island SSID.

2021-05-27T18:13:44-0700 2021-06-17T12:00:56-0700 https://support.ruckuswireless.com/articles/000005001 2021-05-27T18:24:30-0700 monthly 0.8 admin,premium knowledge_article_3719 knowledge_article_3719 2015-08-09T20:06:16-0700 000005001 Validated (External) Premium Virtual smartcell gateway Installation Installation, virtual SmartCell Gateway How to confirm the successful installation of the vSCG/vSZ? After completing the installation of the vSCG instance using the .ova file or .qcow file, we need to run through the setup process as indicated in the corresponding Administrative guide and Getting started guide. Once the above is completed, we will be able to access the web interface and the CLI of the vSCG. However, that doesn't confirm the successful installation of the vSCG. We need to navigate to Administration --> Upgrade --> System Upgrade History and check if we have an entry for "fresh installation" in the history. <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4JL&feoid=00N50000002Cf3M&refid=0EM50000000LpOB"></img> Pre 3.4.2 UI <img alt="User-added image" height="239" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4JL&feoid=00N50000002Cf3M&refid=0EM2J00000250xE" width="500"></img> 5.0 UI <img alt="6.0 UI" height="145" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4JL&feoid=00N50000002Cf3M&refid=0EM2J00000250x9" width="500"></img> 6.0 UI If the entry is missing then we can consider that the installation is not complete and suggest for a complete re-installation, after making sure that the required number of hardware allocation is made as per the "Getting started guide" for the vSCG. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

This article explains how to confirm the successful installation of the vSCG/vSZ.

2021-05-27T18:24:30-0700 2021-06-17T12:00:55-0700 https://support.ruckuswireless.com/articles/000011695 2021-05-30T23:06:45-0700 monthly 0.8 admin,premium knowledge_article_4706 knowledge_article_4706 2021-05-30T23:06:45-0700 000011695 Validated (External) Premium Virtual smartcell gateway Configuration;Troubleshooting Configuration, Troubleshooting, virtual SmartCell Gateway Why am I not able to ping my VSZs in the same VPC network? In GCP, we support STATIC for single Node but to form a cluster or ping other VSZ in the same VPC, VSZ Interface has to be set to DHCP. After setting the VSZ to DHCP, VSZ able to ping other VSZ in the same VPC and able to form Cluster as well.

Information on Google Cloud vSZ and cluster formation.

2021-05-30T23:06:45-0700 2021-06-17T12:00:51-0700 https://support.ruckuswireless.com/articles/000001455 2021-05-30T23:10:05-0700 monthly 0.8 admin,premium knowledge_article_1703 knowledge_article_1703 2013-01-18T15:37:16-0800 000001455 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration Performance, Configuration, ZoneDirector How does Rate Limiting work? The ZD sends a traffic shaper command to the AP to set the limit. The AP monitors the client’s throughput and if it exceeds the set threshold, the AP uses buffers and packet drops to keep the rate at the set limit. If the client traffic starts to exceed the limit, the AP starts buffering data to that client and sends it out less frequently. If there is more data then can fit in the buffer the AP will drop packets and rely on higher applications to resend the packet.

Rate limiting packet shaper uses buffers and packet drops to maintain maximum client data rates on a per-WLAN basis.

2021-05-30T23:10:05-0700 2021-06-17T12:00:50-0700 https://support.ruckuswireless.com/articles/000007414 2021-06-02T05:39:40-0700 monthly 0.8 admin,premium knowledge_article_2747 knowledge_article_2747 2017-12-12T16:13:31-0800 000007414 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What are the files collected when supportsave is run. SUPPORT SAVE FILES Obtaining support save from FI device Supportsave has all the relevant commands that are useful for understanding the state of the FI device. Following command can be used to tftp the support-save files to a remote PC. • supportsave all <tftp-server-ip-address> <tftp_server's_ relative_path_name> If a device has spontaneously reloaded, file starting with ss_core alone will be of use for understanding the state of the device at the time of reboot. If ss_core file is of interest, then it can be collected with the following command: • supportsave core <tftp-server-ip-address> <tftp_server's_ relative_path_name> Description of files collected with supportsave command List of files that are collected by support-save and its purpose is as follows • ss_bootmsg The bootmsg file has the boot up details from startup to the initialization of device and ports, which was created at the time of current boot. This information is used to check the status of device at the time of boot-up. • ss_chksm This file contains checksum value which can be used to validate integrity of downloaded supportsave files. • ss_core.cksum This file contains core file’s checksum value which can be used to validate integrity of downloaded core files. • ss_core The core file that can be used with GDB for debugging the reboot. • ss_corecollection_script.log This file has log that was displayed while collecting the core file. • ss_dmesg.txt This is the file which was created during core dump. It has similar copy of information available in bootmsg, but the information is gathered during core dump and not at the time of boot-up. Command to execute the core dump: dm core dump DECIMAL • ss_kern_reboot This file has been created when sys_reboot_hndlr was hit due to device has become down and move to disable state. It also has the same info as bootmsg and also includes the reboot reason and the stack calls of system reboot. • ss_os_crash This file includes the os crash information details to find the process/task which Causes the crash • ss_pid-log.txt This file has proc details of crashed thread/process, /proc/PID/maps - describes a region of contiguous virtual memory in a process or thread. /proc/PID/smaps file- provides very detailed information about a processes memory consumption. It particularly includes a way to estimate the effect of copy-on-write. • ss_proc_op_core.log This file has the content of the proc file /proc/interrupts /proc/interrupts - contains information about the interrupts in use and how many times processor has been interrupted • ss_sys This file will help to understand the configuration of the device. This has the following command outputs: dm history show version show running show interface brief show statistics show log show default values dm save_area show tech show logging show configuration de show cpu show mac-address stat dm hwinfo • ss_plat This file will have the command output that would be useful from Platform perspective • ss_l2 This file has Layer 2 command outputs. The output of the following commands will be present in the file. Show vlans show vlans brief show span show 802-1w show 802-1w detail show link-keepalive show lag show protected-link-group show inline power show qos-profiles all show qos-tos show metro show default values dm vlan_debug show statistics brief dm dump-hw-table 1 dm dump-hw-table 2 dm dump-hw-table 3 de show process cpu show cpu show ip multicast vlan show ip multicast group show ip multicast mcache show ip multicast traffic show ip multicast resource show ip multicast error show ip multicast pimsm-snooping show ipv6 multicast group show ipv6 multicast mcache show ipv6 multicast resource show ipv6 multicast traffic show ipv6 multicast vlan show ipv6 multicast pimsm-snooping • ss_l3 This file has Layer 3 command output. The output of the following commands will be present in the file. show arp show statistics tunnel show lag show ip interface show ip vrrp brief show ip vrrp stat show ip vrrp statistics show ip route show ip route bgp show ip route ospf show ip route rip show ip route static show ip route direct show ip route summary show ip static-arp show statistics show ip ospf config show ip ospf show ip ospf interface show ip ospf neighbor show ip ospf routes show ip ospf redistribute route show ip ospf database link-state show ip ospf database grace-link-state show ip ospf database external-link-state show ip ospf debug memory show ip ospf debug graceful-restart show ip ospf debug opaque-link show ip ospf resource show ip ospf trap show ip ospf virtual-links show ip ospf virtual-neighbor show ip rip show ip rip interface show ip rip route show ip tunnel config show statistics tunnel show ip tunnel traffic dm stk acl stat global dm stk acl hitless stat global dm stk acl hitless stat perdev • ss_infra This file has Infra commands output. The command output will be present. show stack show version show flash show module show media show interface brief show interface show tech-support show config show run show chassis show statistics show log dm hwinfo dm mport-stats dm save dm history

A quick guide to understand the supportsave files

2021-06-02T05:39:40-0700 2021-06-17T12:00:48-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4fCAC?attachment_index=0 2021-06-17T12:00:48-0700 monthly admin,premium knowledge_article_2747 knowledge_article_2747_attachment_1 ka25B000000CcL3QAK_Attachment__c.pdf 5256085.0 application/pdf https://support.ruckuswireless.com/articles/000005359 2021-06-02T09:53:44-0700 monthly 0.8 admin,premium knowledge_article_2237 knowledge_article_2237 2015-12-16T15:03:31-0800 000005359 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Security Configuration, Installation, Security, SmartCell Gateway Can I configure Full Client Isolation in SCG / SZ-100 / vSZ after version 3.1.1? Full Wireless Client Isolation is a new feature in SCG 3.1.1 code. The big difference with the ZD version (added in 9.7) is that the SCG AP will sniff the DHCP packets and automatically use the default gateway MAC to create the White list. The disadvantages of this are: 1. Static clients will not provide this information so it will not work 2. Inability to white list other devices on the same L2 network You can manually create a CIWL (Client Isolation White List) in the AP directly using the AP CLI command: set ciwl wlanX <ip> <mac> <vlan> Additional caveats: <ul><li style="color: #1F497D;"> The L2 network will break down if auto-whitelist learn the spoofed gateway IP/MAC </li><li style="color: #1F497D;"> AP can NOT learn whitelist information if admin enable it after a while when isolation disabled and no DHCP is sent after enabled ,except we de-associate all stations </li><li style="color: #1F497D;"> IPv6 is NOT supported </li><li style="color: #1F497D;"> AP can NOT learn whitelist when a UE roam from AP to another AP if no other UE DHCP packet is sent </li><li style="color: #1F497D;"> AP can NOT learn whitelist when a UE roam from AP to another AP if no other UE DHCP packet is sent </li><li style="color: #1F497D;"> If user configured walled garden in WISPR WLAN, user cann’t access them after authorized when they are in the same subnet with UE </li><li style="color: #1F497D;"> If UE are all static DHCP configured under a subnet/vlan, user can NOT access network if AP learn whitelist </li><li style="color: #1F497D;"> Can NOT learn First-hop redundancy protocols (except HSRPv2) inbound gateway </li><li style="color: #1F497D;"> workaround to address it: </li></ul> a. Add HSRP anti-spoof ,drop HSRP packet come from wireless interface . c. enable l2 unicast bypass via set ci-bypass <wlan name> {enable|disable} get ci-bypass <wlan name> d. After enabled unicast bypass , drop if dst mac does not lies in whitelist outbound. e. Pass l2 unicast inbound f . For b/multicast ,subject to src mac check inbound. So b/multicast can not reach to UE. One method to address this : <ul><li style="color: #1F497D;"> Push whitelist manually via “set ciwl wlanX add <IPADDR> <MAC> vlan <ID>” via remote ci </li><li style="color: #1F497D;"> All non-tunnel WLAN(except standard WLAN) is enabled by default but can be disable </li><li style="color: #1F497D;"> All tunnel WLAN is enabled by default and grey out ,could not be disabled </li></ul>

Configuring Full Client Isolation in SCG/SZ/vSZ after version 3.1.1 (below version 5.0)

2021-06-02T09:53:44-0700 2021-06-17T12:00:43-0700 https://support.ruckuswireless.com/articles/000006902 2021-06-03T03:31:18-0700 monthly 0.8 admin,premium knowledge_article_2913 knowledge_article_2913 2017-12-12T15:03:19-0800 000006902 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches How to troubleshoot fiber link Input / CRC / physical layer errors on an ICX switch CRC Troubleshooting For each link that sees CRC errors, document the devices and ports involved and follow each step listed below, including which step corrected the problem. Also, document the frequency of the CRC errors incrementing in relation to the number of packets received, capture ‘show statistics ethernet x/y/z’ a couple of times to see if/when the CRC errors increment. Interface CRC/InErrors Pre-requisite: a. Verify if the optics are “Brocade certified” and are matching on both sides (SR-SR, LR-LR etc) b. Verify if the distance is within specs for the optic. c. Check if the optic is properly recognized by using "show media eth x/y" d. Just before connecting the links, clean/reclean the fiber and then connect the fiber link into the ports, A and B e. Check if the link light is up on both sides of the link. f. Verify “Normal” operation under "show optic <slot number>”. Specifically, verify that there are no alarms. g. Connect a scope to verify the power levels of the link, for each side of the link If CRC errors are seen in interface statistics: a. If the CRC errors are found to be incrementing on the port b. Clean the fiber end on both sides of the link If CRCs stop, issue is dirty fiber c. Spray air or use optic cleaning swabs to optic to clean the optic and reconnect the fiber If CRCs stop, issue is dirty optics d. If CRC errors continue, reseat the optic and reconnect the link on one side If CRCs stop, issue is with seating of this optic e. If CRC errors continue, reseat the optic and reconnect the link on the other side If CRCs stop, issue is with seating of this optic f. Take one side fiber strand (do not move optic) and plug into *known good port and optic (A-C) See if problem continues, if so move to step (g) If CRC errors stop, issue is with optic or port that is no longer used (portB) So replace optic on (portB) with known good optic and return fiber stand to this (portB) if errors stop, it was an optic issue, if not possible port issue g. If CRC errors continue after moving fiber strand from (portB) to (portC), issue is either (portA’s) optic, port or the issue is the fiber strand h. Now move other end (portA) to a *known good port and optic for other end of the link (portD), See if problem continues, if so move to step (i) If CRC errors stop, issue was with the optic or port (portA) Replace optic in (portA) with known good optic and return fiber stand to this (portA) if errors stop it was an optic issue, if not possible port issue i. Replace fiber strand If errors stop, issue is with fiber strand j. Return these new optics in ports (C) and (D) to the original ports (A) and (B) and connect the new fiber strand and verify the original ports (A) and (B) are clean of CRC errors. k. Put original optics back in port (A) and port (B) and still confirm link is clean of any errors. *A known good port/optic is another port and optic that has a link that is proven not to see any CRC errors when connected and link is up.

How to troubleshoot fiber link Input / CRC / physical layer errors on an ICX switch

2021-06-03T03:31:18-0700 2021-06-17T12:00:38-0700 https://support.ruckuswireless.com/articles/000009250 2021-06-14T08:23:35-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4703 knowledge_article_4703 2019-05-17T03:28:56-0700 000009250 Validated (External) Public Smartcell insight;SmartCell Insight (SCI) Configuration;Installation;System network management;Troubleshooting Configuration, Installation, System Network Management, Troubleshooting, SmartCell Insight How to install SCI on Hyper -V using .gz file? How to resolve "the disk image file is corrupted" error while loading the .gz file? We need to follow the below steps from SCI installation guide to install the SCI on Hyper-V. 1. Download the Hyper-V image from the Ruckus support website. (Below is the link) <a href="https://support.ruckuswireless.com/software?filter=54#firmwares" target="_blank">https://support.ruckuswireless.com/software?filter=54#firmwares</a> 2. Log in to the windows machine and enable the Hyper-V feature on the Windows server 3. Enabling this feature will require your server to be restarted. Restart the server, then proceed with the remaining steps. 4. Create a virtual switch from the Virtual Switch Manager by selecting New virtual network switch under the Actions sidebar. a) Choose an Internal switch. b) You can name the internal switch "local" or any other desired name. This name will be used to attach the virtual switch to the virtual machine. 5. On your Windows machine, go to the Network and Sharing Center, then allow the network created above to have access to the default network by following these steps: a) Locate the default network that has internet connectivity. Click on that network to invoke a pop-up window. b) On the pop-up window, click the Properties button to bring up a second pop-up window. c) On the second pop-up window, select the Sharing tab. d) Select the first checkbox to allow this network to be shared. e) Select the local network from the drop down. This is the same network that you created above for the internal switch. f) Close the two pop-up windows. 6. Create a new hard disk drive with the required specifications that are listed in Minimum Hardware Requirements on page 7 in the attached installation guide, including: • Hard disk 1 (Root volume): 80 GB • Hard disk 2 (Data volume): 500 GB 7. Open the application called Hyper-V Manager. 8. Create a VM (master is 8 CPUs and 32 GB RAM; data is 4 CPUs and 20 GB RAM) from the Actions sidebar, under New > Virtual Machine. a) Attach the Virtual Network Switch to the VM. b) The root and data volumes need to be set up as the first and second SCSI devices, respectively, on the first SCSI controller of the VM to be detected. 9. Set network firewall rules to ensure that the VM instance has access to the required inbound and outbound ports. 10. Click on the newly created VM, and click on the Start button under the Actions sidebar. 11. Once the VM launches, proceed with the setup. The moment you set up the partition, you will be selecting the .vhd file. The Disk space are 80 GB and 500GB. The data will be saved under 500 GB memory and 80 GB is for Application. However, if you get error "The disk image file is corrupted" error while loading the extracted .gz file, then please make sure to follow the below steps: Step 1: Extract the .gz SCI installation file. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4O6&feoid=00N50000002Cf3M&refid=0EM2J000000qJ20"></img> Step 2: Extracted file is without extension. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4O6&feoid=00N50000002Cf3M&refid=0EM2J000000qJ1g"></img> Step 3: Add the extension to the extracted file as .tar and then extract it. (if not, use 7zip to extract) <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4O6&feoid=00N50000002Cf3M&refid=0EM2J000000qJ1l"></img> <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4O6&feoid=00N50000002Cf3M&refid=0EM2J000000qJ1q"></img> Step 4: Once extracted, we will get the .vhdx files for Hyper-V platform. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4O6&feoid=00N50000002Cf3M&refid=0EM2J000000qJ25"></img> Step 5: Use this file to load on the Hyper-V.

This article will provide steps to install the SCI on Hypre-V as well as resolving "the disk image file is corrupted" error while loading the .gz file.

2021-06-14T08:23:35-0700 2021-06-17T12:00:37-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000000OIVSA2?attachment_index=0 2021-06-17T12:00:37-0700 monthly admin,premium,warranty,guest knowledge_article_4703 knowledge_article_4703_attachment_1 sci-5.2.1 install-guide-rev-20190211.pdf 2533154.0 application/pdf https://support.ruckuswireless.com/articles/000011726 2021-06-04T14:07:12-0700 monthly 0.8 admin,premium knowledge_article_4702 knowledge_article_4702 2021-06-04T14:02:52-0700 000011726 Validated (External) Premium Ruckus network director rnd Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Network Director RND Why am I not able to Add AP registration rule after Creating Zone via API? When a VSZ Zone is created, the SZ/RND sync will take place. The auto sync happen every 15mins, this is by design intent. It's not every second since it will create stress on SZ side for continuously responding to API call from RND & vice versa. So to avoid the ERROR, Create a Zone wait for 15 minutes then create AP Registration Rule.

Why am I not able to Add AP registration rule after Creating Zone via API?

2021-06-04T14:07:12-0700 2021-06-17T12:00:35-0700 https://support.ruckuswireless.com/articles/000011729 2021-06-07T12:53:27-0700 monthly 0.8 admin,premium knowledge_article_4700 knowledge_article_4700 2021-06-07T12:53:27-0700 000011729 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What does this AP syslog message indicate: kern.warn kernel: [12284473.307591] FWLOG: [90305131] vap-0 AP PS: AID=4332928 select next response The above line indicates the Station has not accessed the AP for a specific time(30 second), and AP will force to treat the station as "awake" mode, and send the packets to the station. This is Atheros FW debug information sent in the middle of TX VI packet to Power saving clients. It is likely to be seen, when a Power Save client is on a video call. Onsite ZD: This message was printed out by Atheros FW for debug information. Typical trigger is that UE goes to Power Saving mode during some video streams are still forwarding by AP and AP keeps data in buffer. After UE comes back from PS mode, AP will send data out to UE. It is just informational message and harmless.

Log message "kern.warn kernel: [12284473.307591] FWLOG: [90305131] vap-0 AP PS: AID=4332928 select next response" indicates AP radio unable to send data when client is in power save mode

2021-06-07T12:53:27-0700 2021-06-17T12:00:32-0700 https://support.ruckuswireless.com/articles/000004666 2021-06-07T22:36:37-0700 monthly 0.8 admin,premium knowledge_article_3677 knowledge_article_3677 2015-06-08T16:30:11-0700 000004666 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance Performance, ZoneFlex Indoor, ZoneFlex Outdoor Where can I find the number of supported clients by auth type on Ruckus APs? This is the radio chip limited maximum number of clients by encryption type for reference: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4MP&feoid=00N50000002Cf3M&refid=0EM50000000LlVs"></img> and our new model APs: R300 - max users per AP: 250 - max TKIP users: 26 - max AES users: 100 - dual Radio: YES R500/R600/H500 - max users per AP: up to 500 on 2.4g, up to 180 on 5g - max users per Radio: up to 500 on 2.4g, up to 180 on 5g - max TKIP users per Radio: up to 26 on 2.4g, up to 180 on 5g - max AES users per Radio: up to 128 on 2.4g, up to 180 on 5g - dual Radio: YES T300/T300e/T301n/T301s - max users per AP: up to 500 on 2.4g, up to 180 on 5g - max users per Radio: up to 500 on 2.4g, up to 180 on 5g - max TKIP users per Radio: 28 per radio, 56 per AP - max AES users per Radio: up to 128 on 2.4g, up to 180 on 5g R-710- Maximum Users per AP: 512 - Max user per Radio: Up to 256 with TKIP and 256 with AES. R600- Maximum users per AP upto 500 on 2.4 HGz, upto 180 on 5GHz - max TKIP users per Radio: 26 per radio/2.4 GHz and 180/5GHZ -max AES users per Radio: up to 128 on 2.4g, up to 180 on 5g R700- Maximum users per AP upto 512 on 2.4 HGz, upto 96 on 5GHz - max TKIP users per Radio: 26 per radio/2.4 GHz and 96/5GHZ - max AES users per Radio: up to 128 on 2.4g, up to 96 on 5g <img alt="User-added image" height="452" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4MP&feoid=00N50000002Cf3M&refid=0EM50000000DhAm" width="500"></img> Technical Specifications: Max Clients per Radio by Auth Type Note: "<100 per AP", means up to 100 clients per AP; "<27 / 2.4G" means up to 27 clients on the 2.4GHz radio, etc. Encryption = None TKIP AES Max Users/Radio Max Users/Radio Max Users/Radio Max Users/AP Concurrent VoIP clients R310 <100 per AP <27 / 2.4G, 100 / 5G <100 per AP 100 < 30 R320 R510 <512 per AP <256 / 2.4G, 256 / 5G <512 per AP 512 < 30 M510 <512 per AP <256 / 2.4G, 256 / 5G <512 per AP 512 < 30 R610 <512 per AP <256 / 2.4G, 256 / 5G <512 per AP 512 < 30 R720 <512 per AP <512 per AP <256 / 2.4G, 256 / 5G 512 < 30 R730 <1024 per AP <512 / 2.4G, 512 / 5G <1024 per AP 1024 < 60

Ruckus AP models have different levels of maximum client support, based on authentication methods.

2021-06-07T22:36:37-0700 2021-06-17T12:00:30-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PIwlCAG?attachment_index=0 2021-06-17T12:00:30-0700 monthly admin,premium knowledge_article_3677 knowledge_article_3677_attachment_1 ProductMatrix-vs-03-2019.xlsx 1082194.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000005989 2021-06-07T22:47:43-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2400 knowledge_article_2400 2016-08-09T16:10:49-0700 000005989 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway Why APs unable to fail to join vSZ from remote location over WAN? We ruled out that it could be the global firewall configuration or an uplink ACL on the switch denying FTP ingress/egress. To isolate the switch issue, we bypass the switch and connected AP directly to the Linksys Router. Moment we connected the AP it joined the vSZ in few minutes. Subsequently, all AP’s joined to the vSZ from this site. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

Why APs unable to fail to join vSZ from remote location

2021-06-07T22:47:43-0700 2021-06-17T12:00:27-0700 https://support.ruckuswireless.com/articles/000006355 2021-06-07T22:56:09-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2608 knowledge_article_2608 2017-05-02T15:09:32-0700 000006355 Validated (External) Public Ruckus cloud wifi Configuration;Installation;Security;Troubleshooting;Known issues and workarounds Configuration, Installation, Security, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi Why can't my clients get to the internet with a client isolation enabled WLAN? For client isolation, the gateway informs the AP of the dns/dhcp so that those addresses are allowed through the gateway in/out. If client isolation is enabled in the cloud solution, there's no ACL option currently available in 17.01. If packets are arriving to the AP other than gateway, then CI is applied and blocks any other IP addresses in the same subnet same VLAN as AP/gateway. There could be instances where firewalls send the packets to the AP instead of the gateway. If MPLS is enabled, then the packets could be coming from various different locations and the packets will be dropped as they're not coming back from gateway IP. The current fix/work-around for this scenario is to add the IP/MAC in a whitelist from the AP ethernet interface to the WLAN. From the AP CLI: rkscli: set manual-whitelist wlan34 add 172.16.108.x c0:c0:c0:18:9e:42 1 {where 172.16.108.x IP and c0:c0:c0:18:9e:42 MAC is the firewall that we are letting through, and 1 is exception} For cloud APs w/ 17.01 SW, Ruckus CS Engineers can access AP CLI.

When client isolation is enabled, the client is gets an IP address but is not able to get to the internet

2021-06-07T22:56:09-0700 2021-06-17T12:00:24-0700 https://support.ruckuswireless.com/articles/000004754 2021-06-08T00:01:06-0700 monthly 0.8 admin,premium knowledge_article_3331 knowledge_article_3331 2015-06-23T04:17:45-0700 000004754 Validated (External) Premium Zonedirector 1000;Zonedirector 1100;Zonedirector 3000;Zonedirector 5000;Scg200;Virtual smartcell gateway;Sz100;Zonedirector 1200;ZoneDirector 1000;ZoneDirector 1100;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D);ZoneDirector 1200 Configuration;Installation Configuration, Installation, ZoneDirector 1000, ZoneDirector 1100, ZoneDirector 3000, ZoneDirector 5000, SCG200, virtual SmartCell Gateway, SZ100, ZoneDirector 1200 How to configure option 43 (subcode 03 and 06) on Fortigate ? Option 43 is used to provide an access point with the IP address of the controller. With Fortigate the format is the following: Sub class | length in ASCII | IP address converted to hex. Example – ip address 192.168.1.100 will be : 1. Convert the IP address to Hex using this tool (http://shimi.net/services/opt43/). For ZD (subcode 03) Option 43 subcode 03 03 13 3139322e3136382e312e313030 The complete command will be: set option1 43 '03133139322e3136382e312e313030' For SZ (subcode 06) Option 43 subcode 06 06 13 3139322e3136382e312e313030 The complete command will be: set option1 43 '06133139322e3136382e312e313030'

Steps to configure option 43 on a Fortigate device.

2021-06-08T00:01:06-0700 2021-06-17T12:00:23-0700 https://support.ruckuswireless.com/articles/000004766 2021-06-08T00:03:55-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2461 knowledge_article_2461 2015-07-01T04:39:57-0700 000004766 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector What do I need to setup to make ZD/SZ operate with the Bradford Network Sentry? Here are the steps required for the NAC setup using Bradford Network Sentry: 1. Determine two VLANs to use - one for the production and other for the isolation. 2. Configure two SSIDs and associate each of them to above VLANs. 3. Production SSID should be setup as a 802.1x based network with Sentry providing the authentication service. Make sure DVLAN option is enabled under the Advanced Options. 4. Isolation SSID can be any type. VLAN should be isolation VLAN that you have determined in step 1. Make sure this SSID isn't made available on the network at all by disabling it from the WLAN group. 5. Setup SNMPv3 agent to interoperate with the Sentry. On the Bradford side: 1. Setup a new domain. 2. Add ZD to this domain. Match SNMP settings and RADIUS shared secret settings. 3. Specify the isolation VLAN that was determined above for user registration. Detailed instructions can be found in the attached PDF document.

This article explains configuration required on the ZD and Bradford side to isolate unauthenticated user's traffic and pointing it back to production network after a successful authentication.

2021-06-08T00:03:55-0700 2021-06-17T12:00:21-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PJ4QCAW?attachment_index=0 2021-06-17T12:00:21-0700 monthly admin,premium,warranty,guest knowledge_article_2461 knowledge_article_2461_attachment_1 Ruckus-ZD-SZ-Bradford Interop.pdf 2959703.0 application/pdf https://support.ruckuswireless.com/articles/000004893 2021-06-08T00:06:09-0700 monthly 0.8 admin,premium knowledge_article_2519 knowledge_article_2519 2015-07-17T09:40:47-0700 000004893 Validated (External) Premium Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway Can I find AP capacity, Authentication and Feature / Function differences between ZD (9.13) and SZ (3.4) controllers? Comparing ZoneDirector and SmartZone advanced Features and Specs, ie. <table border="1" cellpadding="0" cellspacing="0" height="160" width="660"><tbody><tr><td colspan="1" rowspan="1">Category</td><td colspan="1" rowspan="1">Feature</td><td colspan="1" rowspan="1">ZD</td><td colspan="1" rowspan="1">SCG-200</td><td colspan="1" rowspan="1">vSZ-H</td><td colspan="1" rowspan="1">vSZ-E</td><td colspan="1" rowspan="1">SmartZone 100</td></tr><tr><td colspan="1" rowspan="1">Authentication</td><td colspan="1" rowspan="1">D-PSK</td><td colspan="1" rowspan="1">Yes</td><td colspan="1" rowspan="1">3.4</td><td colspan="1" rowspan="1">3.4</td><td colspan="1" rowspan="1">3.4</td><td colspan="1" rowspan="1">3.4</td></tr><tr><td colspan="1" rowspan="1">Authentication</td><td colspan="1" rowspan="1">Zero-IT</td><td colspan="1" rowspan="1">Yes</td><td colspan="1" rowspan="1">Cloudpath req'd</td><td colspan="1" rowspan="1">Cloudpath req'd</td><td colspan="1" rowspan="1">Cloudpath req'd</td><td colspan="1" rowspan="1">Cloudpath req'd</td></tr><tr><td colspan="1" rowspan="1">Authentication</td><td colspan="1" rowspan="1">WISPr</td><td colspan="1" rowspan="1">Yes</td><td colspan="1" rowspan="1">Yes</td><td colspan="1" rowspan="1">Yes</td><td colspan="1" rowspan="1">Yes</td><td colspan="1" rowspan="1">Yes</td></tr></tbody></table> and <table border="1" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">Category</td><td colspan="1" rowspan="1">Feature</td><td colspan="1" rowspan="1">ZD</td><td colspan="1" rowspan="1">SCG-200</td><td colspan="1" rowspan="1">vSZ-H</td><td colspan="1" rowspan="1">vSZ-E</td><td colspan="1" rowspan="1">SmartZone 100</td></tr><tr><td colspan="1" rowspan="1">Specs</td><td colspan="1" rowspan="1">Scale - Number of APs (Single/Cluster)</td><td colspan="1" rowspan="1">1K</td><td colspan="1" rowspan="1">10K/30K</td><td colspan="1" rowspan="1">10K/30K</td><td colspan="1" rowspan="1">1,024/3,000</td><td colspan="1" rowspan="1">1,024/3,000</td></tr></tbody></table> See attached file for further comparison of ZoneDirector / ZoneFlex Feature descriptions and capabilities.

Product AP capacity / authentication / feature / function differences between ZoneDirector (9.13) and SmartZone (3.4) controller platforms.

2021-06-08T00:06:09-0700 2021-06-17T12:00:19-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PJG2CAO?attachment_index=0 2021-06-17T12:00:19-0700 monthly admin,premium knowledge_article_2519 knowledge_article_2519_attachment_1 SZ_vs_ZD_June2016.pdf 350789.0 application/pdf https://support.ruckuswireless.com/articles/000004919 2021-06-08T00:10:31-0700 monthly 0.8 admin,premium knowledge_article_2151 knowledge_article_2151 2015-07-22T17:11:16-0700 000004919 Validated (External) Premium Zoneflex 7731;P300;Ruckus P300 Performance;Firmware;Known issues and workarounds Performance, Firmware, Known Issues and Workarounds, ZoneFlex 7731, P300 What should I know about the P300 802.11ac outdoor PtMtP Bridges? <a href="https://support.ruckuswireless.com/documents/813-zoneflex-p300-release-100-1-0-9-43-frequently-asked-questions" target="_blank">https://support.ruckuswireless.com/documents/813-zoneflex-p300-release-100-1-0-9-43-frequently-asked-questions</a> Q: Can DC power directly be used without the DC POE Injector? A: P300 only supports PoE and does not support DC power. Q: What is Point to Multi-Point Line-of-Sight? A: Max link distance between P-t-P is 12km with internal antennas. Q: How many non-root bridge devices can the P300 support? A: Up to 10 non-root bridges are supported. Q: What is the horizontal and vertical beamwidth of internal antenna? A: 30x30 degrees. Q: P300 only comes in 5GHz? A: P300 only operates in 5GHz band. Q: Is there any license fee per year or something for the radio? A: There is no license fee for the radio. Q: What is Multipoint max client support? A: P300 is purely a bridge device and does not support clients Q: For P to MtP, is there a timeslot or sync mechanism between nodes to ensure guaranteed throughput? A: P300 does not support TDMA Q: Beside price what is the competitive edge of this product over market competitors of similar products by other vendors? A: Best in class long range performance, patented Ruckus RF techniques such as PD-MRC, dedicated radar pre-scan which does not impact WLAN performance, supports multiple non root bridges and ability to choose external antennas for additional range to name a few. Q: Are there plans for a Wave 2 outdoor point to point? A: Not at this time due to limited benefits of Wave 2 for bridging applications. Q: Does P300 come with POE injector? A: POE injector is optional accessory; refer to datasheet for ordering information. <a href="http://www.ruckuswireless.com/products/access-points/zoneflex-outdoor/zoneflex-p300" target="_blank">http://www.ruckuswireless.com/products/access-points/zoneflex-outdoor/zoneflex-p300</a> Q: Will there be a trade-up program for outdoor APs? A: Not at this time, subject to change. Q: Does P300 run BeamFlex? A: No, P300 uses internal directional antenna with 2 feeds. Q: Are the external antennas used on P300 the same ones used with 7731? A: Yes. Q: Can the P300 bridge with 7731s? A: No, P300 is using Mesh as its connectivity mechanism, which is different than 7731. Q: If deployment already has P2P pair of 7731 and want to extend to P2MP, can P300 be used as third unit? A: P300 cannot be used with 7731 because the connectivity code is different. Q: Is the 8 km range with integrated antenna or external antenna? A: Internal antennas. Q: Can P300 be monitored via ZD/SZ? A: Currently P300 can be managed standalone or FlexMaster. There are plans to support SZ in 2016, however this is subject to change. Q: Will P300 support lower 5GHz band? 5.1/5.2? A: Yes, for US. Q: How does the P300 handle interference between units and other AP’s in the vicinity? A: P300 benefits from Ruckus RF technologies such as ChannelFly and narrow beamwidth antennas that help to mitigate interference. Refer to user guide for recommended installation techniques. <a href="https://support.ruckuswireless.com/software?filter=80#documents" target="_blank">https://support.ruckuswireless.com/software?filter=80#documents</a> Q: What is the effective range on P300 point to multi point bridges and do they have full VLAN support? A: This depends on the throughput requirement. Links can be made out to 10+ km for some rates. P300 is a tunneling device, which is capable of passing through VLAN tagging, but does not support VLANs itself. Q: Is there a VAR NFR P300 SKU? A: NFR kits will be managed through channel programs. Q: Does the P300 in P to MP configuration reserve bandwidth in a fix value? A: There are no capacity limits per link. Q: How does P300 handle radar detection/DFS? A: P300 has an integrated radio that is dedicated for scanning radar events on affected channels. This Radar Avoidance Pre Scan (RAPS) feature, allows the P300 to check DFS channels for radar events before moving to them and without impact to WLAN performance. Q: At what distances do the speed start to drop? A: Refer to RvR plot in VAR briefing slides Q: What speeds can you reach with an over 7-mile point-to-point environment?? A: Outdoor range testing is highly subjective to the environment. Refer to VAR briefing slides for reference. Q: Is there an antenna add-on to allow the P300 to have omnidirectional coverage or do you use multiple units? A: Ruckus offers omnidirectional 5GHz antennas that could be used, however this is not the recommended use case. Q: Does P300 support 3 and 6 GHz? A: No Q: Will the P300 replace the 7731? A: There are no plans to EOL 7731 at this time. Q: Will we have 3x3:3 outdoor AP? Currently there is 7782, 3x3 11n outdoor AP. Q: How many subscribers can be connected to this AP? A: P300 is a bridge product. It can connect with other P300s but not client devices. Q: Does P300 support PoE 802.1 af or at? A: P300 supports 802.3af. Q: What external antenna connectors does it use? RP-SMA? A: N-type connectors. Q: How does the P300 handle interference when using 80Mhz channels? A: Channel fly and dynamic channel change enabling fall back from 80 MHz down to 40 or 20Mhz depending on the interference scenario. Q: Can two different Antennas (120 and 90 Degree Antennas) be used simultaneously at the base station side? A: Yes, as long as they are positioned correctly. Q: For carrier deploying Small Cell can the P300 efficiently support 64 byte small packets for VoLTE and 3G/3G+ voice support? A: Yes, P300 supports 64 byte packets for the applications mentioned above. Q: Can the T301 or 7762 connect to P300? A: P300 can connect to T301 or 7762 with PoE injectors or through switch. Q: How many external antennas can I connect? For P to MP, do they all have to be within 30 degrees? A: P300 supports two external antennas. There is no restriction of 30 degrees for external antennas. Q: How much separation is required if multiple P300s are mounted on one site or tower? A: Ruckus recommends one-meter separation between two P300 mounted on the same pole, refer to user guide for more details. <a href="https://support.ruckuswireless.com/software?filter=80#documents" target="_blank">https://support.ruckuswireless.com/software?filter=80#documents</a> Q: Is it possible to connect a PoE switch to a P300 and branch off that? A: Yes as long as PoE switch meets 802.3af? Q: What advantage does PD-MRC bring for bridges? A: There are 2 transmit/receive radio chains. Chain 0 is wired to vertically polarized antenna and chain 1 is wired to a horizontally polarized antenna. There will be better RX/TX gain at both ends for point-to-point links. Q: If external 3rd party antennas are installed is PD-MRC disabled? A: If external antennas are dual polarized, then PD-MRC will work. Q: Which Code base will P300 run? A: 100.1.x, refer to release notes for more details. <a href="https://support.ruckuswireless.com/software?filter=80#documents" target="_blank">https://support.ruckuswireless.com/software?filter=80#documents</a>

FAQ: Many new features and capabilities are built into the P300 802.11ac PtMtP Bridges.

2021-06-08T00:10:31-0700 2021-06-17T12:00:18-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PJJGCA4?attachment_index=0 2021-06-17T12:00:18-0700 monthly admin,premium knowledge_article_2151 knowledge_article_2151_attachment_1 P300-7731-Comparison.pptx 429049.0 application/vnd.openxmlformats-officedocument.presentationml.presentation https://support.ruckuswireless.com/articles/000011728 2021-06-08T06:25:29-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4699 knowledge_article_4699 2021-06-08T06:22:21-0700 000011728 Validated (External) Public Sz144;Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, SZ144, SZ300, SCG200, virtual SmartCell Gateway, SZ100 Why do I get an error when trying to upload KSP file? When logging in as a super user, we can see now the new tab there referencing Patch/Diagnostics Scripts <img alt="User-added image" height="150" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4NI&feoid=00N50000002Cf3M&refid=0EM2J00000256ld" width="500"></img> When uploading the KSP from this tab, the error is not coming any more.

When uploading a KSP file to vSZ, customer was getting an error

2021-06-08T06:25:29-0700 2021-06-17T12:00:15-0700 https://support.ruckuswireless.com/articles/000011731 2021-06-10T23:13:24-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4698 knowledge_article_4698 2021-06-10T23:13:24-0700 000011731 Validated (External) Public Sz144;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 100-D (SZ100-D) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SZ144, virtual SmartCell Gateway, SZ100 How can I delete the mac address from an L2 access control list?

There are multiple mac addresses added to an L2 Access Control list. Customer is unable to delete the mac address.

2021-06-10T23:13:24-0700 2021-06-17T12:00:13-0700 https://support.ruckuswireless.com/articles/000001870 2020-08-18T08:28:39-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4367 knowledge_article_4367 2013-03-22T12:08:08-0700 000001870 Validated (External) Public Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector, ZoneFlex Indoor How to get the list of APs connected to the ZD in a text or .csv file ? There are 2 ways to do this. 1) We could download it using the export to CSV option on under the AP list. <img alt="User-added image" height="192" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxnZ&feoid=00N50000002Cf3M&refid=0EM2J000001CIXz" width="500"></img> 2) We could also do this from the ZD for registration purpose by following the steps below: <ul><li>Login to ZD GUI, go to Administrator > Registration </li><li>Give all the details and click "Apply"</li><li>This will create a *.csv file with all the APs connected and the ZD/s connected. </li><li>It will list the Serial Number and the corresponding model number with the corresponding MAC address. </li></ul> We could also get the details from the debug file of the ZD. The AP list is available under tmp> diag > unzip "db" > writable > etc > airespider - ap-list.xml

List of connected APs with serial number; Model number; MAC Address ; Description ( AP Name )

2020-08-18T08:28:39-0700 2021-06-01T02:37:11-0700 https://support.ruckuswireless.com/articles/000009319 2019-07-17T17:07:00-0700 monthly 0.8 admin,premium knowledge_article_3842 knowledge_article_3842 2019-05-31T06:42:49-0700 000009319 Validated (External) Premium R730;Ruckus R730 Installation;Known issues and workarounds Installation, Known Issues and Workarounds, R730 Does the R730 support 802.3bt (high power)? Currently the R730 does not support 802.3bt. The R730 only supports 802.3at and 802.3at+ 802.3at+ is an overdrive version of at which can go up to 40W instead of the 30W for 802.3at. 802.3at+ is available on the Ruckus ICX switches.

Information regarding the R730 and the PoE to use to have the full advantage of the 802.11ax specs.

2019-07-17T17:07:00-0700 2021-05-26T00:15:16-0700 https://support.ruckuswireless.com/articles/000010448 2020-04-30T05:44:08-0700 monthly 0.8 admin,premium knowledge_article_4161 knowledge_article_4161 2020-04-30T05:44:08-0700 000010448 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway How to narrow down the search process in the LDAP server using search filter <ul><li>We can use the "Search filter" in the LDAP configuration to narrow the search process</li><li>By default the "Search filter" is configured with "(objectClass=*)"</li><li>We can modify "Search filter" based on the memberof attribute such that only IT group users will authenticate</li><li>The updated "Search filter" is "(objectClass=*)(memberof=CN=IT,CN=Users,DC=rana,DC=local)"</li></ul> <div style="margin-left: 80px;"><img alt="User-added image" height="260" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxG9&feoid=00N50000002Cf3M&refid=0EM2J000001SWot" width="609"></img> </div> <div style="margin-left: 120px;"> Staff Student </div> <div style="margin-left: 40px;"><img alt="User-added image" height="240" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxG9&feoid=00N50000002Cf3M&refid=0EM2J000001SWoF" width="289"></img> <img alt="User-added image" height="241" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxG9&feoid=00N50000002Cf3M&refid=0EM2J000001SWoK" width="294"></img> IT <img alt="User-added image" height="241" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxG9&feoid=00N50000002Cf3M&refid=0EM2J000001SWoP" width="296"></img></div>

This article explain how to narrow down the search process in the LDAP server using search filter

2020-04-30T05:44:08-0700 2021-05-19T16:35:26-0700 https://support.ruckuswireless.com/articles/000002744 2021-05-19T04:38:36-0700 monthly 0.8 admin,premium knowledge_article_3426 knowledge_article_3426 2014-03-14T15:50:23-0700 000002744 Validated (External) Premium Zonedirector;Ruckus support services;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Support license activation;Registration Performance, Support License Activation, Registration, ZoneDirector, Ruckus Support Services What is Support Entitlement for ZoneDirectors? Q. What is a Support Entitlement for ZoneDirectors? The Support Entitlement requirement/feature was introduced for ZoneDirectors from 9.8 release. The feature requires a support file to be uploaded on the controller. Without the active support on the controller, the ZoneDirector and the connected AP's can no longer go further 9.9 firmware version. Q. How do I get the Support Entitlement file? When a support contract is processed for a ZoneDirector, an activation code (starts with SUP) is generated. This code is sent via email to contacts mentioned by the re-seller, VAR or the Distributor while placing the order with Ruckus. The code should be activated on the <a href="https://support.ruckuswireless.com/code_registration" target="_blank">Ruckus Support portal</a>. Once the support is activated, the server takes about 24 hours to generate the latest support file (.SPT). After the 24 hours, you can <a href="https://support.ruckuswireless.com/articles/000003546" target="_blank">download the support file</a> Q. Alternate method to update the Support Entitlement on the ZoneDirector. The ZoneDirector has Check Entitlement button on the GUI under Administration -> Support. This can be clicked for the ZoneDirector to connect with Ruckus entitlement server and to retrieve the latest entitlement file. NOTE: This will only work if the controller is connected to the internet and firewall is not blocking the ZoneDirector from connecting to the Ruckus entitlement server. Q. Why do we need an active Support Entitlement updated on the ZoneDirector? Having an active Support Entitlement on the ZoneDirector ensures that you can upgrade the firmware of the ZoneDirector controller and the connected AP`s to the latest version. Q. Will my network be affected if there is no active Support Entitlement? No, the wireless network will function fine without an active support entitlement on the ZoneDirector. But, the controller and the connected AP`s will not be able to upgrade their firmware. Also, an entitlement warning banner will be present in the GUI of the ZoneDirector. If the ZoneDirector does not have active support and the controller is to be RMA-ed, it will only be eligible for RTF (Return to Factory) RMA. Which means that the replacement unit is shipped out from a Ruckus facility within 15 business days of the receipt of the defective product at a Ruckus facility. NOTE: Need Information on warranty terms, please refer <a href="https://support.ruckuswireless.com/programs" target="_blank">Ruckus Warranty & Support</a>

Explanation about Support Entitlement for ZoneDirectors

2021-05-19T04:38:36-0700 2021-05-19T06:00:19-0700 https://support.ruckuswireless.com/articles/000003865 2021-05-19T04:40:16-0700 monthly 0.8 admin,premium knowledge_article_2098 knowledge_article_2098 2015-01-08T09:18:45-0800 000003865 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Firmware;Installation;Support license activation Configuration, Firmware, Installation, Support License Activation, SmartCell Insight How do I install a license on SCI SmartCell Insight? The instructions for installing SCI licenses can be found in the SmartCell Insight Version 1.2 User Guide on page 110 https://support.ruckuswireless.com/documents/624-smartcell-insight-version-1-2-user-guide There are two types of licenses: 1. AP licenses which are uploaded from the SCI monitor/diagnostic WEB page (SCI IP without any ports specified). AP Licenses Must be created with the same name used for the Pentaho license as shown in the SCI Monitor WEB-UI under system setup: <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4HA&feoid=00N50000002Cf3M&refid=0EM50000000LpLl"></img> 2. BI license is a right to use license enabling the pentaho data base reporting tool. This license is usually installed when the SCI is originally installed but if you had only a temp version you can upload the permanent version from the SCI linux shell as root. The details for this are found in the installation guide SmartCell Insight Version 1.2 Installation Guide https://support.ruckuswireless.com/documents/623-smartcell-insight-version-1-2-installation-guide pg. 63 Copy the file (using SCP) to the root login directory. run: yum -y install [license-package-filename.rpm].

Installing a permanent pentaho license on SmartCell Insight

2021-05-19T04:40:16-0700 2021-05-19T06:00:18-0700 https://support.ruckuswireless.com/articles/000003154 2021-05-19T04:55:01-0700 monthly 0.8 admin,premium knowledge_article_1144 knowledge_article_1144 2014-06-19T01:52:54-0700 000003154 Validated (External) Premium Zoneplanner;ZonePlanner Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ZonePlanner How to restore a valid ZonePlanner License when it is shown as invalid? To correct this issue - A customer can request a MAC reset via NetAlly My Account Here are the steps: 1) Sign in to your My Account account on the NetAlly Webpage, using the web link: <a href="https://airmagnet.flukenetworks.com/my_airmagnet/" target="_blank">https://airmagnet.netally.com/my_airmagnet/</a> OR From the Sign In option, click on My Account under the NetAlly homepage https://airmagnet.netally.com/my_airmagnet/public/index.php <img alt="User-added image" height="252" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4HU&feoid=00N50000002Cf3M&refid=0EM2J0000024sM5" width="500"></img> 2) Click on the MAC Address Reset button <img alt="User-added image" height="286" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4HU&feoid=00N50000002Cf3M&refid=0EM2J0000024sMA" width="500"></img> 3) Please input the Serial Number, which requires a MAC reset, and all the additional information requested below to successfully reset the MAC address <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4HU&feoid=00N50000002Cf3M&refid=0EM2J0000024sMF" width="500"></img> 4) Hit I AGREE and 5) Select the appropriate reason for MAC address Reset and choose one of the two options below - a. Activate AirMagnet License during software installation (Recommended) – This option will clear out the existing MAC address from AirMagnet’s licensing server. You will be able to use AirMagnet license update tool from the Programs menu to re-download a new license b. Manually download AirMagnet license – When this option is selected, you are required to provide the new MAC address that you would like to associate the AirMagnet software to. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4HU&feoid=00N50000002Cf3M&refid=0EM50000000LVog"></img> NOTE : In order to get a MAC reset, a customer must have a valid support contract and have MAC resets available for the license with Fluke Airmagnet = (the limit is 3). Questions on this process are best directed to Fluke Airmagnet support.

Ruckus ZonePlanner is tied to a license file that is controlled and distributed by a third party, Fluke-Air Magnet. Sometimes license file issues with the installation and the MAC used, can cause Zone Planner to fail to operate. In that situation , these are steps on how to correct a ZonePlanner license file issuem, when the support contract is valid.

2021-05-19T04:55:01-0700 2021-05-19T06:00:09-0700 https://support.ruckuswireless.com/articles/000011683 2021-05-17T13:06:07-0700 monthly 0.8 admin,premium knowledge_article_4691 knowledge_article_4691 2021-05-17T13:06:07-0700 000011683 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;System network management Configuration, System Network Management, Unleashed How to setup Admin authentication against Windows 2012 R2 Server Active Director Step 1: Create an AD server authentication under Master AP UI --> Services --> AAA servers --> Create under Authentication Servers --> Select Active Directory and input the details: <img alt="User-added image" height="230" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GR&feoid=00N50000002Cf3M&refid=0EM2J0000024prF" width="500"></img> Step 2: Create a dummy Role on the Unleashed Master AP : <img alt="User-added image" height="208" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GR&feoid=00N50000002Cf3M&refid=0EM2J0000024prK" width="500"></img> Step 3: Create an Admin User part of the Admin group: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GR&feoid=00N50000002Cf3M&refid=0EM2J0000024prU" width="500"></img> <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GR&feoid=00N50000002Cf3M&refid=0EM2J0000024pre" width="500"></img> Step 4: Perform a Test against the AD authentication: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GR&feoid=00N50000002Cf3M&refid=0EM2J0000024pro" width="500"></img> Step 5: Map the AD server created for the Radius Admin authentication: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GR&feoid=00N50000002Cf3M&refid=0EM2J0000024prt" width="500"></img> Step 6 : Test the Admin User Login: <img alt="User-added image" height="226" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GR&feoid=00N50000002Cf3M&refid=0EM2J0000024ps3" width="500"></img> <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GR&feoid=00N50000002Cf3M&refid=0EM2J0000024ps8" width="500"></img>

2021-05-17T13:06:07-0700 2021-05-17T18:00:09-0700 https://support.ruckuswireless.com/articles/000011681 2021-05-17T02:26:42-0700 monthly 0.8 admin,premium knowledge_article_4690 knowledge_article_4690 2021-05-17T02:26:42-0700 000011681 Validated (External) Premium Sz144;Virtual smartcell gateway;SmartZone 144-Dataplane (SZ144-D) Installation;Security Installation, Security, SZ144, virtual SmartCell Gateway Why I cannot add a new node to an existing SZ144 single node cluster A fix will be implemented in the next release of code - 5.2.2 patch 1 and 6.1 A patch for existing firmware using KSP process would not be applicable as the new node is not operational and KSP cannot be installed.

A new node failed to join an existing cluster, stopping at 80% and displaying certificate error

2021-05-17T02:26:42-0700 2021-05-17T06:00:11-0700 https://support.ruckuswireless.com/articles/000011564 2021-05-17T03:57:57-0700 monthly 0.8 admin,premium knowledge_article_4689 knowledge_article_4689 2021-05-17T03:57:57-0700 000011564 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath Can we restrict number of User Cert to be issued? 1. Modify the WorkFlow and Add the User restriction just below the AD Authentication: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M43I&feoid=00N50000002Cf3M&refid=0EM2J0000024pk4" width="500"></img> 2. Add : Ask the User about concurrent certificates : <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M43I&feoid=00N50000002Cf3M&refid=0EM2J0000024pkJ" width="500"></img> 3. Create a New standard template: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M43I&feoid=00N50000002Cf3M&refid=0EM2J0000024pks" width="500"></img> 4. Give a name and restrict the Max allowed Certificate and click Save : <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M43I&feoid=00N50000002Cf3M&refid=0EM2J0000024pmA" width="500"></img> 5. Republish the WorkFlow: <img alt="User-added image" height="226" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M43I&feoid=00N50000002Cf3M&refid=0EM2J0000024pmF" width="500"></img> 6. Display Warning message will appear as shown below: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M43I&feoid=00N50000002Cf3M&refid=0EM2J0000024pmK" width="500"></img>

By default for a certificate based authentication, user can register their multiple devices (certificate will be issued for these devices) when connecting to the Wifi network, we can limit the users devices by restricting number of certs to be issued.

2021-05-17T03:57:57-0700 2021-05-17T06:00:10-0700 https://support.ruckuswireless.com/articles/000011682 2021-05-17T03:58:47-0700 monthly 0.8 admin,premium knowledge_article_4688 knowledge_article_4688 2021-05-17T03:58:47-0700 000011682 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;System network management Configuration, System Network Management, Unleashed How to configure AAA Admin user for Unleashed Network Step 1: Add AAA server under Master AP WebUI --> Services --> AAA servers --> Authentication Servers --> Create --> Add the server details --> OK <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024pnN" width="500"></img> Step 2: Add the Radius client onto the Radius server: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024pnS" width="500"></img> <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024pnc" width="500"></img> Step 3: Create the Connection Request Policy: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024pnh" width="500"></img> <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024pnm" width="500"></img> <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024pnr" width="500"></img> Step 4: Create a Network Policies <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024poB" width="500"></img> <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024poL" width="500"></img> <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024poQ" width="500"></img> <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024poV" width="500"></img> <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024poa" width="500"></img> Step 5: Add User/Admin group on the AD server: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024pop" width="500"></img> Step 6: Map the user to the Admin Domain: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024pou" width="500"></img> Step 7: Create a dummy Role on the Master AP: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024poz" width="500"></img> NOTE: The Group Attribute Value name should match the Attribute Value in the VSA under the Network Policy (step 4). Step 8: Perform the AAA Test from Unleashed Master AP: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024pp9" width="500"></img> Step 9: Map the Radius Server for Admin Authentication: <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024ppE" width="500"></img> Step 10: Login with the Radius Admin User <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024pq2" width="500"></img> <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4GM&feoid=00N50000002Cf3M&refid=0EM2J0000024pq7" width="500"></img>

Steps to configure AAA Admin user authentication for the Unleashed Master AP

2021-05-17T03:58:47-0700 2021-05-17T06:00:08-0700 https://support.ruckuswireless.com/articles/000004630 2021-05-06T01:16:58-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1908 knowledge_article_1908 2015-06-01T16:54:16-0700 000004630 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Troubleshooting Firmware, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why are APs disconnected from ZD1100 after upgrade failure? The messages at the ZD from the APs were the following for all of the APs: [ZF-7982] AP not supported; connection refused. When we reloaded SW version 9.7.1.0.32, the ZD was able to load the SW and all of the APs reconnected. If the message "AP not supported; connection refused" appears after an upgrade, reload SW version prior to the upgrade. Assuming the APs were connected prior to the upgrade.

Attempted an upgrade of a ZD1100 from 9.7.1 to 9.8.2 and the upgrade failed. After the attempt the ZD responded but all APs were disconnected.

2021-05-06T01:16:58-0700 2021-05-13T15:02:00-0700 https://support.ruckuswireless.com/articles/000003575 2020-09-20T22:47:56-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1907 knowledge_article_1907 2014-10-30T13:29:19-0700 000003575 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to look at packets per second and protocol hierarchy in packet capture? There are instances where we need to analyze the packets per second at an AP mirrored wire interface so that we can take a look at how many packets per second and/or the protocol percentage of the traffic passing that the AP sees. Once you have a Wireshark capture of the AP, from a mirrored port on the switch, click on the Statistics / Summary: <img alt="User-added image" height="438" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyBq&feoid=00N50000002Cf3M&refid=0EM50000000LaDG" width="500"></img> We see a total of 506,060 packets between a 710 second period. 712 packets/sec is an OK number. When we see above 6k packets/sec is when we need to stop and look at the size of the packets and analyze as packet sizes. Above 6k is a somewhat high number if the packet size is big. From Statistics / Protocol Hierarchy: <img alt="User-added image" height="270" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyBq&feoid=00N50000002Cf3M&refid=0EM50000000LaDL" width="500"></img> We see that IPv6 traffic is not high relative to the percent of total packets. We see that IPv4 TCP and UDP take the majority of the percent of total packets, UDP taking 81% of total traffic. Prior to the capture, make sure that the switch port and that the AP are resolving at 1000 BT for numbers to be valid.

When doing a wireshark analysis, take a look at the packets per second, ipv6 count, and the protocol hierarchy to get idea of traffic type percentages.

2020-09-20T22:47:56-0700 2021-05-10T23:55:38-0700 https://support.ruckuswireless.com/articles/000006316 2019-09-04T23:15:53-0700 monthly 0.8 admin,premium knowledge_article_3923 knowledge_article_3923 2017-04-12T17:04:25-0700 000006316 Validated (External) Premium Virtual smartcell gateway Installation Installation, virtual SmartCell Gateway How to install vSZ on Amazon Web Service? Refer the attached word document for the steps to vSZ installation on Amazon Web Service (AWS). “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

This article provides information on how to install a vSZ on AWS.

2019-09-04T23:15:53-0700 2021-05-10T09:30:32-0700 http://support.ruckuswireless.com/article_attachments/kA250000000LbTjCAK?attachment_index=0 2021-05-10T09:30:32-0700 monthly admin,premium knowledge_article_3923 knowledge_article_3923_attachment_1 vSZ installation on AWS.docx 926917.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000002692 2020-08-12T03:41:22-0700 monthly 0.8 admin,premium knowledge_article_3892 knowledge_article_3892 2014-02-21T15:59:37-0800 000002692 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can I encourage a client to roam? If the client near to AP2 is still connected to AP1 and the signal the AP sees the client is less than 50%, the client should have roamed and it did not, this is probably because the client is till able to "hear" AP1's beacon and its roaming threshold has not been reached yet, so it stays with the farther away AP and communicates at a low rate.

Client appears to be connected to an AP at low signal rate even though it is physically closer to another AP with the same WLAN

2020-08-12T03:41:22-0700 2021-05-07T14:20:28-0700 https://support.ruckuswireless.com/articles/000003050 2021-05-06T00:01:00-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4683 knowledge_article_4683 2014-05-18T22:16:53-0700 000003050 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector What do I need to configure on the ZD to let users on the TACACS+ server login? TACACS+ servers are typically used to provide centralized authentication service to login to various network devices. They could be Cisco network devices such as routers, and controllers or any non-Cisco devices such as Ruckus ZoneDirector. The key is to configure user database on the TACACS+ server and point the network device to this server for logging into the network device. Please follow the setup process as described below: A. Create a local user accounts and group accounts as described below (exact setup will depend on the TACAC+ server's vendor. It is better to consult their documentation. Some of them may provide GUI based setup as well with easy to follow instructions.) ###################### # CONFIGURE GROUP ###################### # Network Administrator group group = netadmin { # netadmin group for super admin access default service = permit service = zd-login { priv-lvl = 15 } } # Regular user group group = regularusers { # regular users will be added to this group default service = permit service = zd-login { priv-lvl = 1 } } ###################### # CONFIGURE USERS ###################### # Netadmin users # Note that there is no password entry # TACACS+ daemon will query the /etc/passwd file for this user user = spope { member = netadmin } # Users with limited privileges user = jkeith { member = regularusers login = cleartext "securepassword123" } ---------- Notes: i. Privilege level of 15 gives the user super admin privileges. Other privilege levels will limit the logged user to monitor privileges. ii. If the password is not defined for any user those user's credentials will be verified looking inside the /etc/passwd file as the comment above mentioned iii. Above group/user setup goes into a file called /etc/tac-plus/tacacs.conf. Again exact location of such file and configuration will depend on the specific TACACS+ server model. iv. Above "service" parameter is set to zd-login. Please make a note of it. We will visit this in step C below. v. Above snippet is taken from "Network Administrators Survival Guide" published by Cisco Press. ---------- B. Define a "key" which will be shared by TACAC+ server and the network device such as Ruckus ZoneDirector. This will be used by this server and the ZD to encrypt the communication between them. ####################### # CONFIGURE ENCYPTION KEY key = VerYs3cr3taqskey ####################### C. Now go to the ZD and setup a new AAA server entry under the "AAA Servers" configuration page. Here you need to specify the following parameters: i. TACACS+ server's IP ii. Port # iii. Shared secret - this is the key defined on the TACACS+ server side as explained on step B above. iv. TACACS+ Service - this should match the "service" parameter defined in step A below. D. Once the TACACS+ server is defined, you can test it using the "Test Authentication Settings" section on the same ZD page. E. Now point ZD login users to the TACACS+ server, you have to go to Administer --> Preferences page and select "Authenticate with Auth Server" radio button. Choose the TACACS+ server define in Step C from the dropdown. You can leave "Fallback to admin name/password if failed" option checked for a fallback mechanism in case the TACACS+ server is not reachable.

This article discusses the setup involved in using TACACS+ server in the backend in order to login to the ZD.

2021-05-06T00:01:00-0700 2021-05-06T06:00:27-0700 https://support.ruckuswireless.com/articles/000004181 2021-05-06T00:11:00-0700 monthly 0.8 admin,premium knowledge_article_3512 knowledge_article_3512 2015-03-17T04:14:59-0700 000004181 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Firmware;System network management Configuration, Firmware, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor Why is a stand alone smartcell AP broadcasting island-nnnnnn ssid? In these use cases, the term “client” can be a wireless device operated by human operators, or software applications. Situation A. Provision fresh out-of-the-box Standalone AP <ol><li>Factory default AP broadcasts island-xxxxxx/EAP-TLS. ( configWLAN )</li><li>Client obtains Ruckus signed certificate from Ruckus Support.</li><li>Client associates and authenticates with AP by exchanging its own certificate and AP's certificate.</li><li>Client set its local IP to 169.254.1.10 (or something like it).</li><li>Client enters credential to access AP CLI.</li><li>Client query AP's model and fw version.</li><li>Optionally, client requests fw upgrade. AP will upgrade, reboot, and start from step 1.</li><li>Client uses CLI to configure AP.</li><li>Optionally, client uses CLI to turns off config-wlan explicitly or reboot AP.</li><li>In next reboot, AP boots up and realizes it is already provisioned. AP will not bring up the config-wlan.</li></ol> Situation B. Provision fresh out-of-the-box AP for controller management <ol><li>Client uses CLI to configure controller IP and mesh settings.</li><li>AP tries to join controller.</li><li>When AP finds and joins controller, AP will turn off config-wlan.</li><li>In next reboot, AP realizes it is already provisioned and will not bring up config-wlan.</li></ol>

When I powered up my new Ruckus AP out of the box it is broadcasting an "island-nnnnnn" SSID, which is not normally seen on a stand alone AP. Is this normal?

2021-05-06T00:11:00-0700 2021-05-06T06:00:20-0700 https://support.ruckuswireless.com/articles/000003602 2021-05-06T00:52:44-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4681 knowledge_article_4681 2014-11-06T05:09:57-0800 000003602 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector When will a Root AP transition into Mesh AP and vice versa? Mesh enabled Ruckus APs continuously check network reachability via their Ethernet interface. This is done through sending a unicast ARP message at 1 second interval to the gateway and ZoneDirector (it alternates between ZD and the gateway for every second). If a response is received, it will tell the AP that it has network connection via its Ethernet interface. A mesh enabled AP can stay as Root as long as this is true. If there is no response for 30 seconds at a stretch, the Root AP will try to become either a Mesh AP or a eMesh AP. First it checks if there are any other APs on the same Ethernet (L2) segment. If there are, APs will negotiate to reach consensus. Whoever has the best wireless uplink will become a Mesh AP while rest become eMesh APs. If there are no other APs on the L2 segment, the AP will connect to the best AP to become a Mesh AP. While acting as a Mesh AP, the AP continues to check network reachability via its Ethernet interface using unicast ARPs to the gateway and the ZD. If there is a response, it will bring down the wireless interface and will become a Root AP again.

This article talks about when a RAP will transition into a MAP and vice versa.

2021-05-06T00:52:44-0700 2021-05-06T06:00:15-0700 https://support.ruckuswireless.com/articles/000002705 2021-05-05T01:33:17-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4679 knowledge_article_4679 2014-02-26T09:30:54-0800 000002705 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why can't any new client connect while the existing clients don't seem to have any issues? After raising the MAC address limitation or disabling such setting will remove all obstacles in getting new clients connected and APs stay connected to the ZD.

Some network switches offer MAC limitation per port. Once this limit has reached it will start dropping traffic for new connections. This can have severe impact on clients as well as on AP connectivity.

2021-05-05T01:33:17-0700 2021-05-05T06:00:12-0700 https://support.ruckuswireless.com/articles/000002889 2021-05-05T01:35:32-0700 monthly 0.8 admin,premium knowledge_article_889 knowledge_article_889 2014-04-03T09:25:48-0700 000002889 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor What is the command for performing the factory reset of an standalone AP? The following command executed at Command line interface will reset the Access point to its factory default settings. Please SSH login to the Access point and execute the below command:- rkscli:set factory Factory defaults will take effect after reboot OK NOTE:- The above command will be applicable for all our AP's as long as you have ssh access to the AP CLI.

2021-05-05T01:35:32-0700 2021-05-05T06:00:10-0700 https://support.ruckuswireless.com/articles/000002761 2021-05-05T01:37:07-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2536 knowledge_article_2536 2014-03-07T00:27:45-0800 000002761 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, ZoneDirector Why does the SMS not reach the intended phone number when I send the guest pass code? You need this information along with the "From Phone Number" to configure Twilio account on the ZD. These settings can be found under the ZD's System section to input the above data. Please also ensure ZD's System configuration page contains at least one DNS server entry. Once this is setup, generated guest passes should be textable to a user's phone number. For Clickatell below information is required (Get this info from Clickatell account) Username: Password: APP ID: First you may want to test this with a known good phone number. If you are still having issues here are few things to check: 1. Make sure the receiver is not registered under the Do Not Call registry. 2. Make sure the account holder (configured under the Twilio section on the ZD) hasn't exceeded his quota of SMS per that day. These limitations may be enforced by the Twilio or the phone provider itself. 3. Check the Twilio account validity.

Possible causes behind SMS send failures when a guest pass is texted to a visitor.

2021-05-05T01:37:07-0700 2021-05-05T06:00:07-0700 https://support.ruckuswireless.com/articles/000011650 2021-05-04T12:05:43-0700 monthly 0.8 admin,premium knowledge_article_4677 knowledge_article_4677 2021-05-04T12:05:43-0700 000011650 Validated (External) Premium Vriot Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, vRIoT Why vRIOT upgrade throws an Error "Script did not return True. Exiting" ? This exception is thrown when vRIOT is allocated HDD resourced more than recommended. We have strict instructions in all our Release notes starting 1.5 Release stating HDD must be fixed 20GB: <img alt="User-added image" height="130" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Cj&feoid=00N50000002Cf3M&refid=0EM2J0000024hI5" width="742"></img> The HDD size need to be corrected, however it is a very complicated process when it comes to reducing HDD than increasing it. We would get following error while decreasing the size on the VMware: <img alt="User-added image" height="190" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Cj&feoid=00N50000002Cf3M&refid=0EM2J0000024hIP" width="500"></img> The HDD shrinking for a VM requires expertise on editing *.vmdk. Example: https://www.vmware.com/support/ws5/doc/ws_disk_shrink.html https://kb.vmware.com/s/article/1002019 An alternative mechanism is to take config backup of existing vRIOT instance, install a fresh instance of vRIOT of the same version as the config backup and allocate recommended HDD/CPU/memory resources. Once the new instance is up, we can shutdown existing instance to avoid any conflicts. We can then upload the configuration backup to it and upgrade the vRIOT to the desired version firmware.

This article explains why we get an error "Script did not return True. Exiting" while vRIOT firmware upgrade

2021-05-04T12:05:43-0700 2021-05-04T18:00:07-0700 https://support.ruckuswireless.com/articles/000007506 2018-01-29T14:24:02-0800 monthly 0.8 admin,premium knowledge_article_3268 knowledge_article_3268 2018-01-29T14:24:02-0800 000007506 Validated (External) Premium Icx 6450;Icx 6610;Icx 6650;Icx 7250;Ruckus ICX 6610 Campus Switches;Brocade ICX 6650 Campus Switches;Ruckus ICX 7250 Campus Switches Configuration Configuration, ICX 6450, ICX 6610, ICX 6650, ICX 7250 How to configure PoD on an interface? Configuring PoD on an interface is supported on the ICX 6610, ICX 6450, ICX 6650, and ICX 7250 ports when upgrading to 10 Gbps port speed. To upgrade the ports from 1 Gbps to 10 Gbps port speed, perform the following steps. 1. Download the PoD license to the device. Using TFTP to copy a license file on FCX and ICX devices You can copy a license file from the active unit to all other member units without having to physically disable the stack to install a license for each unit. To copy a license file from the active unit to all other member units in the system, enter a command such as the following at the privileged EXEC level of the CLI. device# copy tftp license 10.120.54.185 FCX_ADV_LIC_PERP.xml unit 2 Syntax: copy tftp license [ IP_address | ipv6_address ] license_filename_on_host unit unit_id The IP_address variable is the address of the IPv4 TFTP server. The ipv6_address variable is the address of the IPv6 TFTP server. The license_filename_on_host variable is the file name of the license file. The unit unit_id parameter specifies a unit for which you want to add a software license file. The unit_id variable can be from 1 through 8. If you attempt to download the same license twice on the device, the following error message is displayed on the console. Can't add the license string - 93 (DUPLICATE_LICENSE) 2. Insert the 10 Gbps optic transceiver. 3. Enter the speed-duplex 10g-full command on a single, multiple, or interface range on the ICX 6610 and ICX 7250 devices only. The following example output is from an ICX 6610 device. device(config)# interface ethernet 1/3/1 device(config-if-e10000-1/3/1)# speed-duplex 10g-full ---------- Note: For ICX 6450 devices, you do not need to enter the speed-duplex 10g-full command. Ports 2 and 4 are UP after you insert the 10 Gbps optic transceiver. Note: For ICX 6650 devices, you do not need to enter the speed-duplex 10g-full command. For more information on PoD licensing for the ICX 6650 devices, refer to Ports on Demand licensing on the ICX 6650 on page 45. ---------- 4. Enter the write memory command to save the configuration. The ports are automatically configured to 10 Gbps speed Syntax: no speed-duplex [ 10g-full | 1000-full-master ] The 10g-full parameter allows you to enable the port speed to 10 Gbps speed. The 1000-full-master parameter allows you to enable the port speed to 1 Gbps speed. On the ICX 6610 and ICX 7250 devices, if you enable the port to 10 Gbps port speed, and then issue the no speed-duplex command, the port continues to run at 10 Gbps speed. Upon bootup, the port reverts to 1 Gbps speed.

How to configure PoD on an interface?

2018-01-29T14:24:02-0800 2021-05-04T06:29:04-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6QCAS?attachment_index=0 2021-05-04T06:29:04-0700 monthly admin,premium knowledge_article_3268 knowledge_article_3268_attachment_1 ka25B000000CbQhQAK_Attachment__c.pdf 1002175.0 application/pdf https://support.ruckuswireless.com/articles/000002324 2021-05-04T01:58:32-0700 monthly 0.8 admin,premium knowledge_article_3730 knowledge_article_3730 2013-11-05T17:07:56-0800 000002324 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to make a single AP/AP group broadcast a specific SSID/WLAN? By default adding any WLAN on the ZD will map it to Default WLAN group and will be applied to AP group that has Default WLAN group assigned To achieve the requirement, we have to create new WLAN group and AP group and map them to broadcast desired WLANs to desired APs/AP group. <ol><li>Create a WLAN first (If not already created).</li><li>Skip step-1 if WLAN is already created in past and proceed to step-3.</li><li>Create a new WLAN group, refer below to create new WLAN group on different ZD firmware versions:</li></ol> <div>ZD running on 10.0 or below (including 9.x): Go to Configure >> WLANs >> Scroll page and find WLAN Groups >> Click on create new >> Fill out the new WLAN group information >> Choose desired WLANs which you want to broadcast to specific AP or a AP Group >> Save setting by clicking on OK</div> ZD running on 10.1 or higher: <div>Go to Wireless LANs >> from left size pan, click on "+" sign and create new WLAN group >> Fill out the new WLAN group information >> Choose desired WLANs which you want to broadcast to specific AP or a AP Group >> Save setting by clicking on OK. <img alt="CreateWLANGroup on 10.1 or above" height="277" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Bq&feoid=00N50000002Cf3M&refid=0EM2J000000m2SF" width="500"></img> 4. Now create an AP Group to add desired APs for a group setting mapping (Skip if you already created one or want to apply WLAN group created in step-3 to Default AP group or to a specific AP directly). ZD running on 10.0 or below (including 9.x): Go to Configure >> Access Point >> Scroll down and find "Access point group" >> Click on create >> Fill out the new AP group information and select/add desired AP(s) to this Group >> override system default WLAN group and select the WLAN group created earlier, choose it from drop down window for 2.4 G or 5 G or for both radio.</div> ZD running on 10.1 or higher: Access Point >> from left size pan, click on "+" sign and create new AP group >> Fill out the new AP group information and select/add desired AP(s) to this Group >> override system default "WLAN group" setting and select the WLAN group created earlier (or desired WLAN group), choose it from drop down window for 2.4 G or 5 G or for both radio >> Click OK. <img alt="CreateAPgroup 10.1 and above" height="301" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4Bq&feoid=00N50000002Cf3M&refid=0EM2J000000m2SK" width="500"></img> Note: - By editing an specific AP's WLAN Group settings, you can directly map a WLAN group by override it's default setting. - You can also override configuration without creating a new AP group, if you want to apply it only to a specific AP default AP group.

Making a single AP or a AP Group broadcast a specific/Multiple SSID

2021-05-04T01:58:32-0700 2021-05-04T06:00:16-0700 https://support.ruckuswireless.com/articles/000006425 2021-05-04T02:37:35-0700 monthly 0.8 admin,premium knowledge_article_2655 knowledge_article_2655 2017-08-23T13:57:22-0700 000006425 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector What could cause ZD 10.0 Google Maps API error: MissingKeyMapError? Assuming there is no network connection issue, it looks like the Google Map server is rejecting the request and we may not be able to learn the exact reason. We have discovered the solution is for customers to apply for either a Google Map API key or a Bing Map API key of their own, and use it instead. <img alt="User-added image" height="349" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4C0&feoid=00N50000002Cf3M&refid=0EM50000000BkxX" width="630"></img> If you are unable to see this configuration icon and if the map load failed, you can change the map setting under Configuration -> System page, like this: <img alt="User-added image" height="123" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4C0&feoid=00N50000002Cf3M&refid=0EM50000000Bkxm" width="628"></img> We have heard that a requested Google Map API key resolved the issue. Resolution #2 : Upgrade to ZD 10.2.0.0.189 (or later), with Admin ability to hide map in the dashboard. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

A bug has been filed against ZD 10.0 for Google Maps API error: MissingKeyMapError in any browser, loading customer Google/Bing API key is the solution.

2021-05-04T02:37:35-0700 2021-05-04T06:00:13-0700 https://support.ruckuswireless.com/articles/000002678 2021-05-04T02:39:35-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4676 knowledge_article_4676 2014-02-19T15:58:35-0800 000002678 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector After upgrade unable to access GUI with message as "Error: 404 -- Not Found"

ZD GUI gives a 404 message.

2021-05-04T02:39:35-0700 2021-05-04T06:00:11-0700 https://support.ruckuswireless.com/articles/000008153 2021-05-03T00:09:25-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3328 knowledge_article_3328 2018-08-10T09:08:51-0700 000008153 Validated (External) Public T710;Ruckus T710;Ruckus T710s Known issues and workarounds Known Issues and Workarounds, T710 Accessory Guide incorrectly indicated wrong mounting bracket as suitable for T710 and T710s CORRECTIVE ACTION Replace the 902-0182-0003 bracket with the 902-0125-0000 bracket for T710 installed in the field

An Accessory Guide (version 16-12-A) incorrectly indicated SKU# 902-0182-0003 mounting bracket as suitable for T710 and T710s. The correct mounting bracket should be SKU# 902-0125-0000

2021-05-03T00:09:25-0700 2021-05-03T06:00:41-0700 https://support.ruckuswireless.com/articles/000009645 2021-05-03T00:11:37-0700 monthly 0.8 admin,premium knowledge_article_3894 knowledge_article_3894 2019-07-26T13:11:49-0700 000009645 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway How to setup a 802.1x WLAN with Dynamic VLAN on the vSmartZone-HighScale? <div>vSZ Configuration</div> AAA server Configuration: <ul><li>Login to the vSZ and navigate to Service & Profiles > Authentication > Proxy (SZ authenticator)</li><li>Select the Domain or AP Zone and click on Create to add the server details.</li></ul> <div style="margin-left: 80px;"><img alt="User-added image" height="277" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4AO&feoid=00N50000002Cf3M&refid=0EM2J000000uoKE" width="500"></img></div> <div style="margin-left: 40px;"> </div> <div>Realm Based Proxy configuration:</div> <ul><li>Login to the vSZ and navigate to Service & Profiles > Authentication > Realm Based Proxy</li><li>Select the Domain or AP Zone and click on Create and name it. </li><li>Under Realm Based Authentication Service, click on Create and add the realm details. realm name should be your Active Directory Domain name.</li></ul> <div style="margin-left: 80px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4AO&feoid=00N50000002Cf3M&refid=0EM2J000000uoKT"></img></div> <div style="margin-left: 80px;"><img alt="User-added image" height="383" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4AO&feoid=00N50000002Cf3M&refid=0EM2J000000uoLC" width="500"></img> </div> <div>WLAN Configuration:</div> <ul><li>Select the WLAN Authentication Method as Standard- 802.1x EAP</li></ul> <div style="margin-left: 80px;"><img alt="User-added image" height="247" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4AO&feoid=00N50000002Cf3M&refid=0EM2J000000uoMe" width="500"></img></div> <ul><li>Under Authentication Service, turn on the proxy option to use the controller as a proxy for user authentication</li></ul> <div style="margin-left: 80px;"><img alt="User-added image" height="350" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4AO&feoid=00N50000002Cf3M&refid=0EM2J000000uoNN" width="500"></img></div> <div> </div> <ul><li>Radius options are set to the default configuration. You can modify as per your requirement.</li><li>Under Advanced Options > Access VLAN, keep it as default VLAN and turn on the 'Dynamic VLAN' option for the radius server to return the VLAN based on the client username.</li></ul> <div style="margin-left: 80px;"> <img alt="User-added image" height="308" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4AO&feoid=00N50000002Cf3M&refid=0EM2J000000uoNS" width="500"></img></div> <div> Radius Server Configuration:</div> <ul><li>On the NPS server, add the vSZ controller IP address as the Radius client.</li><li>All the other configurations like Connection Request Policy creation, Network Policy creation, and Dynamic VLAN attributes are mentioned in article#000001989</li></ul>

This article provides information on how to setup a 802.1x EAP WLAN with Dynamic VLAN on the vSZ-HighScale

2021-05-03T00:11:37-0700 2021-05-03T06:00:39-0700 https://support.ruckuswireless.com/articles/000002496 2021-05-03T00:45:22-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_691 knowledge_article_691 2014-01-09T08:32:57-0800 000002496 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector Why do I need a CA certificate on NPS/Win2008 RADIUS server? Documents to explain the purpose of a CA certificate on NPS and how to install one. Deploy a CA and NPS Server Certificate: <a href="http://technet.microsoft.com/en-us/library/cc730811.aspx" target="_blank">http://technet.microsoft.com/en-us/library/cc730811.aspx</a> Certificates and NPS: <a href="http://technet.microsoft.com/en-us/library/cc772401%28v=ws.10%29.aspx" target="_blank">http://technet.microsoft.com/en-us/library/cc772401%28v=ws.10%29.aspx</a> NPS Server Certificate – CA Installation: <a href="http://technet.microsoft.com/en-us/library/cc771431.aspx" target="_blank">http://technet.microsoft.com/en-us/library/cc771431.aspx</a> Entrust – How is the Server Certificate installed on MS-NPS on Win2008 server? <a href="http://www.entrust.net/knowledge-base/technote.cfm?tn=8747" target="_blank">http://www.entrust.net/knowledge-base/technote.cfm?tn=8747</a>

Steps to install CA certificate on NPS/Win2008 server for RADIUS

2021-05-03T00:45:22-0700 2021-05-03T06:00:33-0700 https://support.ruckuswireless.com/articles/000006480 2021-05-03T01:20:41-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2675 knowledge_article_2675 2017-10-20T14:10:42-0700 000006480 Validated (External) Public Zoneflex 7731 Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, ZoneFlex 7731 7731 PtP Bridge - How to set Static Channel If you have been instructed to "lock down" the 7731 point to point bridge frequency channel, you can view the current channel in use, and configure the bridge to stay on this channel. Figure 1: Status::Wireless Current channel in use is Channel 100, and the 7731 is currently set for SmartSelect channel algorithm. <img alt="User-added image" height="434" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4An&feoid=00N50000002Cf3M&refid=0EM50000000VsBa" width="607"></img> Figure 2: Configuration :: Wireless :: Root Bridge Use the Channel drop-down list to find the Channel 100 currently in use and click on it. This will keep the Root Bridge AP setting on Channel 100. (SmartSelect is default). <img alt="User-added image" height="436" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M4An&feoid=00N50000002Cf3M&refid=0EM50000000VsBk" width="609"></img>

Some environments require that PtP bridges not change channel, you can specify a static channel thru AP GUI.

2021-05-03T01:20:41-0700 2021-05-03T06:00:31-0700 https://support.ruckuswireless.com/articles/000004767 2021-05-03T01:25:22-0700 monthly 0.8 admin,premium knowledge_article_1990 knowledge_article_1990 2015-07-01T04:54:53-0700 000004767 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Firmware;Installation;Troubleshooting Firmware, Installation, Troubleshooting, virtual SmartCell Gateway, SZ100 "Error: Upload image failed: Reason unsupported version" while upgrading SZ100 We mentioned that SZ based image should start with "SCGE". We subsequently downloaded the correct file ""scge-installer_3.1.0.0.249.ximg" and upgrade was successful. Important Note: After you obtain the firmware upgrade file, do not modify the firmware file name. The file name should be scge-installer_3.1.0.0.249.ximg. (The same rule applies reversely) Follow release notes for best practices and upgrade instructions.

"Error: Upload image failed: Reason unsupported version" while upgrading SZ100

2021-05-03T01:25:22-0700 2021-05-03T06:00:27-0700 https://support.ruckuswireless.com/articles/000006303 2021-05-03T01:50:49-0700 monthly 0.8 admin,premium knowledge_article_3275 knowledge_article_3275 2017-03-20T10:00:47-0700 000006303 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Known issues and workarounds Performance, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Any known reason for R500 APs port flapping on Cisco Switch? The "energy-efficient ethernet" feature was causing the issue. Applying the command "no power efficient-ethernet" to the ports having the issue resolved it. Reference: <a href="https://bst.cloudapps.cisco.com/bugsearch/bug/CSCus35889/?referring_site=bugquickviewclick" style="color: rgb(75, 118, 196); font-size: 14px; font-style: normal; font-weight: normal; text-decoration: underline; white-space: normal;" target="_blank" title="Link https//bstcloudappsciscocom/bugsearch/bug/CSCus35889/referring_sitebugquickviewclick">https://bst.cloudapps.cisco.com/bugsearch/bug/CSCus35889/?referring_site=bugquickviewclick</a> <a href="https://quickview.cloudapps.cisco.com/quickview/bug/CSCus35889" style="color: rgb(75, 118, 196); font-size: 14px; font-style: normal; font-weight: normal; text-decoration: underline; white-space: normal;" target="_blank" title="Link: https://quickview.cloudapps.cisco.com/quickview/bug/CSCus35889">https://quickview.cloudapps.cisco.com/quickview/bug/CSCus35889</a> -- "EEE" on 2960X and PD device causing intermittent link flapCSCus35889 Symptom: Dec 30 03:34:54: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/26, changed state to down Dec 30 03:35:04: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/26, changed state to up Dec 30 03:49:50: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/26, changed state to down Dec 30 03:50:00: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/26, changed state to up Line protocol flapping, some times with link up/down also, which would cause PDs like AP disconnected/reboot. Conditions: When "Energy-Efficient Ethernet" feature enabled on both Catalyst 2960X switchport and on the PDs. Affected images: c2960x-universalk9-mz.152-2.E.bin c2960x-universalk9-mz.150-2.EX5 Workaround: Disable Energy-Efficient Ethernet (EEE) by below CLI command: 2960X(config-if)# no power efficient-ethernet ---------------------------- We faced same problem but our PoE switch is Cisco small business SG300-28PP. "no eee enabled" on switch port solved ports flapping.

Cisco "Energy-Efficient Ethernet" feature on Catalyst 2960X switches can cause port flapping.

2021-05-03T01:50:49-0700 2021-05-03T06:00:26-0700 https://support.ruckuswireless.com/articles/000004586 2021-05-03T02:01:04-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3783 knowledge_article_3783 2015-09-08T15:20:14-0700 000004586 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector What are some of the reasons for User disconnected by admin message? These are the likely reasons: 1] Someone who logged in as administrator went to the wireless clients list and kicked them off. 2] The modifications to the WLAN could trigger this message, such as encryption. 3] If the smartroam is enabled under a WLAN, there will be an explicit disconnect event under the ZD logs. 4] Any changes to a WLAN would kick off all the connected clients and you will get to see these messages under events.

Explanation on “User [<>] disconnected by admin from WLAN [<>]” messages and under what scenarios ZD will trigger this message.

2021-05-03T02:01:04-0700 2021-05-03T06:00:24-0700 https://support.ruckuswireless.com/articles/000005266 2021-05-03T04:56:36-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2371 knowledge_article_2371 2015-11-03T17:31:49-0800 000005266 Validated (External) Public P300;Ruckus P300 Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, P300 Why aren't my P300 bridges connecting? A couple of options for solutions: 1). Leave the GW address in the NRB blank. or 2). Break the wired loop (somewhere) from NRB back to the GW. The idea here is that the NRB looks for the Gateway through the wire and through the wireless and if it finds the GW through the wire and through the wireless a loop can be created and thus it shuts down the wireless. It is recommended to place the Root Bridge where the POP resides (closest to the Internet).

Non-Root bridge will drop wireless if it sees an alternative (ie Wired) path to default GW.

2021-05-03T04:56:36-0700 2021-05-03T06:00:13-0700 https://support.ruckuswireless.com/articles/000004555 2021-05-03T04:58:58-0700 monthly 0.8 admin,premium knowledge_article_1857 knowledge_article_1857 2015-05-13T15:52:00-0700 000004555 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Firmware Configuration, Firmware, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP How can I manage my APs for Standalone, ZD, or vSCG/SCG/SZ management? All currently shipping Access Points are delivered with 100.x "base image" firmware for Standalone use, and will connect to ZoneDirectors or vSCG/SCG/SZ100 model controllers, and upload compatible firmware from them. This is a collection of Knowledge Base Articles regarding AP firmware and mode of use, and how to re-configure APs that have firmware incompatible with their intended purpose. Articles announcing the 100.x base image (KBA-3880), <a href="https://support.ruckuswireless.com/answers/000003880" target="_blank">https://support.ruckuswireless.com/answers/000003880</a> How to register APs to vSCG/SCG (KBA-3403) <a href="https://support.ruckuswireless.com/answers/000003403" target="_blank">https://support.ruckuswireless.com/answers/000003403</a> How to register APs to ZDs (KBA-1255) <a href="https://support.ruckuswireless.com/answers/000001255" target="_blank">https://support.ruckuswireless.com/answers/000001255</a> How to convert ZD APs to vSCG (KBA-3377), https://support.ruckuswireless.com/answers/000003377 How to convert vSCG/SCG APs to Standalone or ZD managed (KBA-4554): https://support.ruckuswireless.com/answers/000004554 Content of KBA-4554: You can change the firmware running on a vSCG/SCG managed AP to run Standalone Base image. You can direct a Standalone AP on base image to connect to a ZoneDirector. 1. Remove vSCG/SCG managed AP from network. 2. Perform hardware factory default on AP (ip = 192.168.0.1) 3. Connect PC on 192.168.0.x (not .1), open AP WebUI (super/sp-admin) 4. From Maintenance/Upgrade, load a 100.x AP base image 5. Reboot AP. For APs to be used in Standalone mode ---- How to configure management VLAN on Standalone AP: https://support.ruckuswireless.com/answers/000002706 If co-locating Standalone AP in a ZD managed network: https://support.ruckuswireless.com/answers/000001959 For ZD management after base image installed ---- Registering an AP with ZoneDirector: https://support.ruckuswireless.com/answers/000001255 Registering an AP to a ZD's particular management VLAN: https://support.ruckuswireless.com/answers/000002256

This is a collection of articles on how to configure Access Points for any use.

2021-05-03T04:58:58-0700 2021-05-03T06:00:11-0700 https://support.ruckuswireless.com/articles/000001611 2021-03-18T20:36:50-0700 monthly 0.8 admin,premium knowledge_article_4615 knowledge_article_4615 2013-02-24T19:44:51-0800 000001611 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Where to check the User login related logs on AAA server (Windows) Find the details below. <div>We can find the logs for all users in the below place on the Windows AAA server. Login to the Windows server.</div> <div> </div> <div>Navigate to Administrative Tools ==> Event viewer ==> Security. The log will be as follows when you have configured only Active Directory Authentication, <div>Successful Network Logon:</div> <div> User Name: vinguy51</div> <div> Domain: PAX</div> <div> Logon ID: (0x0,0x6B6FD4)</div> <div> Logon Type: 3</div> <div> Logon Process: Advapi </div> <div> Authentication Package: Negotiate</div> <div> Workstation Name: PAXTERRA-RRJN8K</div> <div> Logon GUID: -</div> <div> Caller User Name: PAXTERRA-RRJN8K$</div> <div> Caller Domain: PAX</div> <div> Caller Logon ID: (0x0,0x3E7)</div> <div> Caller Process ID: 404</div> <div> Transited Services: -</div> <div> Source Network Address: 192.168.20.70</div> <div> Source Port: 53457 The log will be as follows when you have configured Active Directory Authentication + Radius. <div>User vinguy51 was denied access.</div> <div> Fully-Qualified-User-Name = pax.ruckuswireless.com/Users/vinodh</div> <div> NAS-IP-Address = 192.168.15.70</div> <div> NAS-Identifier = </div> <div> Called-Station-Identifier = <not present> </div> <div> Calling-Station-Identifier = <not present> </div> <div> Client-Friendly-Name = ZD</div> <div> Client-IP-Address = 192.168.15.70</div> <div> NAS-Port-Type = Wireless - IEEE 802.11</div> <div> NAS-Port = <not present> </div> <div> Proxy-Policy-Name = Use Windows authentication for all users</div> <div> Authentication-Provider = Windows </div> <div> Authentication-Server = <undetermined> </div> <div> Policy-Name = ZD policy</div> <div> Authentication-Type = PAP</div> <div> EAP-Type = <undetermined> </div> <div> Reason-Code = 66</div> <div> Reason = The user attempted to use an authentication method that is not enabled on the matching remote access policy. </div> </div> <div> </div> </div>

User login realted logs on Windows Radius Server

2021-03-18T20:36:50-0700 2021-04-30T18:47:15-0700 https://support.ruckuswireless.com/articles/000011646 2021-04-30T11:18:09-0700 monthly 0.8 admin,premium knowledge_article_4671 knowledge_article_4671 2021-04-30T07:50:28-0700 000011646 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Firmware Configuration, Firmware, SmartCell Insight How to upgrade SCI using CLI? Below are the steps to upgrade SCI using CLI. <h2>Prerequisite:</h2> <h3>Step-1</h3> <ul><li>Download the local update software package from the Ruckus Wireless support web site.</li><li>Make sure SCI has enough HDD space available for the upgrade. Minimum of 500 GB HDD allocated and should have atleast 30-40% of free space on the root directory.</li><li>To verify, run the command on SCI master node CLI "df -h". <ul><li>Example output: rsa@master-48e515fd ~ $ df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/sysvg-lv_root 20G 2.0G 19G 10% / devtmpfs 16G 0 16G 0% /dev tmpfs 16G 0 16G 0% /dev/shm tmpfs 16G 1.3G 15G 8% /run tmpfs 16G 0 16G 0% /sys/fs/cgroup /dev/sda1 509M 139M 371M 28% /boot /dev/mapper/storage_grp-storage_vol 1.0T 741G 284G 73% /storage tmpfs 3.2G 0 3.2G 0% /run/user/1000 rsa@master-48e515fd ~ $</li></ul> </li><li>Make sure to create VM snapshot, in case of any failure during or after the upgrade.</li><li>WinSCP software to copy the file from local system to SCI upgrade directory.</li></ul> <h2>Upgrade:</h2> <h3>Step-2</h3> <ol><li>Open WinSCP on local system and choose the SCP protocol for the new connection.</li><li>Type user name as "rsa'</li><li>Type password as token ID. <ul><li>You can get the token ID from SCI GUI >> Admin >> Status and update page. Refer the article <a href="https://support.ruckuswireless.com/articles/000006064" target="_blank">000006064</a>.</li><li>or You can find it by accessing VM console of SCI master node. It will show you the node IP and token ID.</li><li><img alt="User-added image" height="174" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M49u&feoid=00N50000002Cf3M&refid=0EM2J0000024e9Z" width="500"></img></li></ul> </li><li>Click on "Login" <ul><li><img alt="User-added image" height="338" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M49u&feoid=00N50000002Cf3M&refid=0EM2J0000024e8N" width="500"></img></li></ul> </li><li>Once connection is successful, find the below directory in SCP GUI and then move the local upgrade file from your system to SCI. <ul><li> /storage/updates</li></ul> </li><li>Once file transfer is done, login into the SCI master node CLI. Refer the article <a href="https://support.ruckuswireless.com/articles/000006064" target="_blank">000006064</a></li><li>Run the following command to start upgrade. <ul><li>sudo docker exec -it rsa-cluster-manager bin/rake rsa_cluster_manager:software_update:from_package[rsa-v5-4-2-update-01e3k6h4co.tar]</li><li>Note: In the above command "rsa-v5-4-2-update-01e3k6h4co.tar" is the file local upgrade package filename. So make sure you use the correct file name, depending upon the downloaded file from support site.</li></ul> </li><li>It will take up-to 30 minutes for the upgrade to complete, don't run any other commands while upgrade is in progress.</li></ol> <h2>Verify:</h2> <ol><li>Run "sudo docker ps" on master node CLI and verify the docker's version.</li></ol> root@master-b2539239:~# sudo docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES a8c583b7231f 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-hadoop:v5.4.2 "./run.sh namenode" About a minute ago Restarting (1) 6 seconds ago hdfs-namenode 9bf91f14f819 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa:v5.4.2 "/run.sh slave" 6 days ago Up 53 seconds rsa-slave dff05729217f 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa:v5.4.2 "/run.sh master" 6 days ago Up 5 seconds rsa-master If upgrade got stuck or showing any error, please reachout to support for further troubleshooting. Note: Restore VM snapshot if cannot wait to fix the issue by contacting RUCKUS support.

Article explains step by step procedure how to upgrade SCI using CLI

2021-04-30T11:18:09-0700 2021-04-30T12:00:07-0700 https://support.ruckuswireless.com/articles/000005613 2021-04-28T14:58:28-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3291 knowledge_article_3291 2016-03-18T13:28:59-0700 000005613 Validated (External) Public Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Performance;Configuration Performance, Configuration, virtual SmartCell Gateway, SZ100 What is the maximum Rate Limiting configurable on vSZ/SZ? In v/SZ 3.4 and above the Maximum configurable Uplink/Downlink Rate Limiting supported is 200Mbps. Any release earlier than 3.4 have Rate Limiting support of 20Mbps.

What is the maximum Rate Limiting configurable on vSZ/SZ

2021-04-28T14:58:28-0700 2021-04-28T18:00:15-0700 https://support.ruckuswireless.com/articles/000008826 2021-04-28T15:12:06-0700 monthly 0.8 admin,premium knowledge_article_3621 knowledge_article_3621 2019-01-31T09:34:37-0800 000008826 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, SmartCell AP How do I move Access Points to a different SZ cluster or to a changed node IP addreess To Move an AP to a different SZ cluster or to a changed SZ IP you must first issue the following command to force the AP to clear an internal list of controller IP's set scg init - This command will clear the Cluster IP list (C-list) and reboot AP. After AP has rebooted then you should be able to configure the AP for SZ discovery using set scg ip <sz_control_ip> The AP can also use DHCP option 43 or DNS discovery to find the IP of a SZ. While issuing set scg ip command should disable automatic DHCP option 43 or DNS discovery a race condition can occur if the DHCP option 43 or DNS points to the old controller. <div style="margin-left: 40px;">To solve this issue - run the set scg ip <sz_control_ip> immediately after issuing the set scg init command (before AP reboots). This should configure the AP before it reboots and try's the automatic discovery mechanisms.</div> <div> SZ discovery is done to only one IP in a multi-node cluster. Which node is used is not important as long as it is a correct and reachable control IP address. Once the AP discovers the SZ node, is approved (in staging zone or by moving it to a service zone) the AP will be provisioned with a list of all control IP's in a multinode cluster. The list is sent in a psudo random order which should help distribute AP's across multiple nodes. To verify the controller list, how it was discovered and the present status of the AP to SZ control use the get scg command rkscli: get scg ------ SCG Information ------ SCG Service is enabled. AP is managed by SCG. State: CONNECTED Server List: 104.222.16.11,104.222.16.10,104.222.16.13,104.222.16.12,2605:ad80:1f:cf70::11,2605:ad80:1f:cf70::10,2605:ad80:1f:cf70::13,2605:ad80:1f:cf70::12 SSH tunnel connected to 104.222.16.10 Failover List: Not found Failover Max Retry: 2 DHCP Opt43 Code: 6 Server List from DHCP (Opt43/Opt52): 104.222.16.10 SCG default URL: RuckusController SCG config|heartbeat intervals: 300|30 SCG gwloss|serverloss timeouts: 1800|7200 </div>

Command needed to move a Smart Zone AP to a new cluster or new (changed) SZ IP address

2021-04-28T15:12:06-0700 2021-04-28T18:00:12-0700 https://support.ruckuswireless.com/articles/000008579 2021-04-28T09:40:45-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3452 knowledge_article_3452 2018-11-12T04:44:02-0800 000008579 Validated (External) Public Icx 7250;Ruckus ICX 7250 Campus Switches Website services;Support license activation;Registration Website Services, Support License Activation, Registration, ICX 7250 What are the steps to activate ICX 7250 PREM license? ICX 7250 PREM license activation code starts with DVX (eg DVX-11111111-ABC-BCA-EYZ). Once the activation is completed, the license code gets mapped to the End-user account (unique Ruckus numeric ID for the account) under which the order was activated. The license code is activated in the <a href="https://support.ruckuswireless.com/" target="_blank">Ruckus Support</a> portal. The steps to activate the code are: STEP 1. The entire license code (eg DVX-11111111-ABC-BCA-EYZ) has to be entered in the <a href="https://support.ruckuswireless.com/code_registration" target="_blank">activation page</a> and click on the "Validate" button <img alt="Activation Page" height="304" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M48X&feoid=00N50000002Cf3M&refid=0EM2J000000luBk" width="500"></img> STEP 2. The next page displays the type of license processed under the order. Review the code and click on the checkbox to Accept Terms & Condition. Then click on Activate Purchase button to generate the ICX 7250 PREM license <img alt="Agreement Page" height="402" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M48X&feoid=00N50000002Cf3M&refid=0EM2J000000luC4" width="500"></img> STEP 3. On the page that appears next, we get two links. <ol><li> Link to download the XML file required to enable PREM license feature on ICX 7250 running <a href="http://docs.ruckuswireless.com/fastiron/08.0.70/fastiron-08070-licenseguide/GUID-89C81B48-CB5C-4464-B18F-45570670C725.html" target="_blank">08.0.7 or lower</a> </li><li> CoE (Certificate of Entitlement) authorization for the customer to enable PREM license feature on ICX 7250 running <a href="http://docs.ruckuswireless.com/fastiron/08.0.70/fastiron-08070-licenseguide/GUID-F0E4098E-FF98-4AF1-84F1-603A52BBC3B8.html" target="_blank">08.0.8 or higher</a> <img alt="ICX 7250 PREM license download" height="320" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M48X&feoid=00N50000002Cf3M&refid=0EM2J000000luC9" width="500"></img> </li></ol> Q. How can I download the PREM license at a later time? A. The activated licenses are also available under <a href="https://support.ruckuswireless.com/license_upgrades" target="_blank">Download License</a> link in the Ruckus Support portal homepage.?????

Article has got steps to activate PREM licenses on ICX switch

2021-04-28T09:40:45-0700 2021-04-28T12:00:07-0700 https://support.ruckuswireless.com/articles/000011632 2021-04-27T06:44:45-0700 monthly 0.8 admin,premium knowledge_article_4665 knowledge_article_4665 2021-04-27T06:44:45-0700 000011632 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security Configuration, Security, SmartCell Gateway Is it possible to disable weak cipher TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 on SmartZone? As per RUCKUS security team, there isn’t a way to disable specific ciphers in SZ today (as of April 2021). Although AES128 is not as strong as AES256 (and likewise for SHA256/SHA384), both AES128 and SHA256 are still FIPS approved crypto functions.

Article explains about weak ciphers on SmartZone and whether it can be disable or not

2021-04-27T06:44:45-0700 2021-04-27T12:00:08-0700 https://support.ruckuswireless.com/articles/000005316 2021-04-26T16:09:43-0700 monthly 0.8 admin,premium knowledge_article_3829 knowledge_article_3829 2015-11-25T11:19:14-0800 000005316 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, virtual SmartCell Gateway, SZ100 What is the process to upgrade a vSZ/SZ Cluster? Prerequisites: <div style="margin-left: 40px;"> - Check the release notes for the supported AP models list and make sure that all your APs are supported in the new release. - Check the Upgrade path. - Take the cluster and configuration backup files from the existing vSZ and save them to your local PC. - Hardware resources requirement might vary in the newer releases because of the new features. So, confirm the resources. - Active support contract is needed to perform an upgrade.</div> Upgrade Procedure: <div style="margin-left: 40px;">- vSZ/SZ cluster upgrade is quite similar to single node vSZ/SZ upgrade. - Upgrade can be initiated from the Leader node. It will upgrade the follower node first, then it upgrades itself. - Once the vSZs are upgraded, you have to manually upgrade the AP zones to upgrade the APs. - During the cluster upgrade process, the AP should still function as normal except for the Tunnel WLANs as clients will not be able to pass the traffic through the controllers.</div> Note: The whole vSZ cluster upgrade process takes between 1 to 2 hours depending on the network bandwidth and the amount of the APs connected to them. Note: If there are any vDPs connected to the vSZs, first vSZ upgrade should be performed and then the vDPs can be upgraded.

This article describes the process followed when upgrading a cluster of SZ/vSZ controllers.

2021-04-26T16:09:43-0700 2021-04-26T18:00:08-0700 https://support.ruckuswireless.com/articles/000006105 2021-04-25T12:25:12-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3377 knowledge_article_3377 2016-10-25T16:39:05-0700 000006105 Validated (External) Public Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Known issues and workarounds;Support license activation;Registration Known Issues and Workarounds, Support License Activation, Registration, SPoT How do I find/generate the vSPoT serial number? Follow the below steps in order to find or generate the SN of vSPoT. <ol><li> Login to the vSPoT UI <img alt="1" height="280" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M46C&feoid=00N50000002Cf3M&refid=0EM50000000Z5Ia" width="500"></img> </li><li> ? Go to Settings -> License -> Upload License <img alt="2" height="239" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M46C&feoid=00N50000002Cf3M&refid=0EM50000000Z5If" width="500"></img> </li><li> There you find the SN of your virtual machine </li><li> ??If you do not find the SN, click on Upload Smart License and then Generate Serial Number to obtain one <img alt="3" height="203" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M46C&feoid=00N50000002Cf3M&refid=0EM50000000Z5Ik" width="500"></img> <img alt="4" height="204" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M46C&feoid=00N50000002Cf3M&refid=0EM50000000Z5Ip" width="500"></img> </li><li> And you should now have the SN generated on the UI </li></ol>

The article has got information about finding vSPOT SN from the WebUI

2021-04-25T12:25:12-0700 2021-04-25T18:00:13-0700 https://support.ruckuswireless.com/articles/000011605 2021-04-23T04:48:01-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4662 knowledge_article_4662 2021-04-23T04:48:01-0700 000011605 Validated (External) Public Sz144;Sz300;Ruckus icx switches;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, SZ144, SZ300, Ruckus ICX Switches, virtual SmartCell Gateway, SZ100 why switch groups are not in the GUI anymore? Re-config and save the user again. Do following steps, administration -- > admins and roles -> select the "super admin" row (the row with user "super") and config -- > do not change anything and keep clicking on next and then save the config. After this issue is solved.

Customer was upgrading one of the AP zones and after doing that they realized that the Switch group was not appearing on GUI. The only switch they have was there though but not assigned to any groups.

2021-04-23T04:48:01-0700 2021-04-23T06:00:08-0700 https://support.ruckuswireless.com/articles/000009354 2021-04-19T22:55:04-0700 monthly 0.8 admin,premium knowledge_article_4661 knowledge_article_4661 2019-06-11T04:35:29-0700 000009354 Validated (External) Premium Ruckus icx switches Firmware;Installation Firmware, Installation, Ruckus ICX Switches What is error Code type 64, while upgrading the UFI file? Upgrade to version FI 08.0.80f or FI 08.0.90x using regular image file. Then it will be possible to do upgrade using UFI. Its mandatory to use FI 08.0.80f when upgrading from a lower release (say FI 08.0.30) to mitigate a known defect. http://docs.ruckuswireless.com/fastiron/08.0.80/fastiron-08080-upgradeguide/GUID-F316021A-1F55-4DAC-947A-CCEF8C157593.html

Error Code 64 explained

2021-04-19T22:55:04-0700 2021-04-20T00:00:09-0700 https://support.ruckuswireless.com/articles/000009301 2021-04-19T23:25:05-0700 monthly 0.8 admin,premium knowledge_article_3723 knowledge_article_3723 2019-05-24T10:40:08-0700 000009301 Validated (External) Premium Icx 7850;Icx 7250;Icx 7750;RUCKUS ICX 7850 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7750 Campus Switches Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ICX 7850, ICX 7250, ICX 7750 Does the 10G-SFPP-TX-A Tranceiver consume significantly more power than typcial 10G SFPP? No code fix, From FI 08.0.90c and above, Improved 'warning' about power consumption will be offered when 10G-SFPP-TX-A is plugged in, directing the user to read the relevant sections of the documentation. For each 10G-SFPP-TX-A installed, another SFP+ slot MUST be left empty. For example, if you are using four 10G-SFPP-TX-A, you must leave four SFP+ ports empty. Table 1 <table border="0" cellpadding="0" cellspacing="0" style="width: 587px;" width="587"><tbody><tr style="height: 70px;"><td colspan="1" rowspan="1" style="width: 185px; height: 70px;">ICX Model</td><td colspan="1" rowspan="1" style="width: 192px; height: 70px;">10G-SFPP-TX-A Installed location</td><td colspan="1" rowspan="1" style="width: 210px; height: 70px;">For each 10G-SFPP-TX-A inserted, this many SFP ports must remain unused.</td></tr><tr style="height: 21px;"><td colspan="1" rowspan="1" style="width: 185px; height: 21px;">ICX7250-24/24P/48/48P</td><td colspan="1" rowspan="1" style="width: 192px; height: 21px;">Built-In SFP+ ports 1/2/1 to 1/2/8</td><td colspan="1" rowspan="1" style="width: 210px; height: 21px;">1</td></tr><tr style="height: 21px;"><td colspan="1" rowspan="2" style="width: 185px; height: 21px;">ICX 7750-48F</td><td colspan="1" rowspan="1" style="width: 192px; height: 21px;">Port Group #1 1/1/1 to 1/1/32</td><td colspan="1" rowspan="1" style="width: 210px; height: 21px;">1</td></tr><tr style="height: 21px;"><td colspan="1" rowspan="1" style="width: 192px; height: 21px;">Port Group ~2 1/1/33 to 1/1/48</td><td colspan="1" rowspan="1" style="width: 210px; height: 21px;">1</td></tr><tr style="height: 21px;"><td colspan="1" rowspan="1" style="width: 185px; height: 21px;">ICX 7850-48F/-48FS </td><td colspan="1" rowspan="1" style="width: 192px; height: 21px;">Built-In SFP+ ports 1/1/1 to 1/1/48</td><td colspan="1" rowspan="1" style="width: 210px; height: 21px;">1</td></tr></tbody></table>

This bulletin provides guidelines for deploying 10G-SFPP-TX-A within the power capabilities of the supported ICX switches.

2021-04-19T23:25:05-0700 2021-04-20T00:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000000OLKSA2?attachment_index=0 2021-04-20T00:00:07-0700 monthly admin,premium knowledge_article_3723 knowledge_article_3723_attachment_1 TSB Copper Transceiver 2019-002-E.pdf 189852.0 application/pdf https://support.ruckuswireless.com/articles/000010544 2021-04-19T13:12:23-0700 monthly 0.8 admin,premium knowledge_article_4660 knowledge_article_4660 2020-05-27T17:38:56-0700 000010544 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway Are there any reasons Catalina MacOS users could see issues over Ruckus APs? <pre> It is recommended that Macbook users use 10.15.6 who wish to use Catalina OS.</pre> If Smart-roam feature is enabled the disable it. That has helped one our customers. If one needs it, consider using Smart-roam with low roam factor of 1 or 2 rather than 5, for example. Ensure AP are placed in the network based on the results from site survey. Please note that MacOS: Big Sur beta version 3.0 has fixed few issues that would make roaming more smoother. These will be available in official version of Big Sur which is expected to be released at end of August 2020 or early part of September; however that may change.

It is recommended that Macbook users use 10.15.4 who wish to use Catalina OS.

2021-04-19T13:12:23-0700 2021-04-19T18:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000PiZCSA0?attachment_index=0 2021-04-19T18:00:09-0700 monthly admin,premium knowledge_article_4660 knowledge_article_4660_attachment_1 Catalina-MacOS-information.txt 1889.0 text/plain https://support.ruckuswireless.com/articles/000011566 2021-04-19T08:37:52-0700 monthly 0.8 admin,premium knowledge_article_4659 knowledge_article_4659 2021-04-19T08:37:52-0700 000011566 Validated (External) Premium Ruckus cloud wifi Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi What if customer wants to set 150 Mbps per client bandwidth limitation This is a design intent. Feature Request FR-5005 is opened. Commscope-RUCKUS Local System Engineer to be contacted for follow up.

The customer environment require 150mbps per client Bandwidth limitation in RUCKUS Cloud

2021-04-19T08:37:52-0700 2021-04-19T12:00:08-0700 https://support.ruckuswireless.com/articles/000006881 2021-04-15T11:41:30-0700 monthly 0.8 admin,premium knowledge_article_3192 knowledge_article_3192 2017-12-12T13:15:41-0800 000006881 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure SSH? Enabling Secure Shell Access (SSH) ---------- Notes: Requires username/passwords to be created. ---------- Configuration Example: crypto key generate rsa user jdoe privi 0 password p@ssw0rd aaa authentication login default local Optional: As an optional step, and in order to increase security, add an access group to the SSH configuration to allow connections only from allowed IP's. ssh access-group 10 ip ssh idle-time 20 (config)#show ip ssh conf SSH server : Enabled SSH port : tcp\22 Host Key : DSA 1024, RSA 2048 Encryption : aes256-cbc, aes192-cbc, aes128-cbc, aes256-ctr, aes192-ctr, aes128-ctr, 3des-cbc Permit empty password : No Authentication methods : Password, Public-key, Interactive Authentication retries : 3 Login timeout (seconds) : 120 Idle timeout (minutes) : 20 Strict management VRF : Disabled SCP : Enabled SSH IPv4 clients : All SSH IPv6 clients : All SSH IPv4 access-group : 10 SSH IPv6 access-group : SSH Client Keys : Client Rekey : 0 Minute, 0 KB Server Rekey : 0 Minute, 0 KB ICX7750-48F Router(config)# Also, You can watch the YouTube video from our BROCADE CAMPUS FEATURE EXPLAINER SERIES - Configuring SSH on a Ruckus ICX https://youtu.be/F1_tLiGEGAQ

How to configure SSH on ICX switch

2021-04-15T11:41:30-0700 2021-04-15T12:00:09-0700 https://support.ruckuswireless.com/articles/000006007 2021-04-13T04:44:52-0700 monthly 0.8 admin,premium knowledge_article_2409 knowledge_article_2409 2016-08-19T14:23:01-0700 000006007 Validated (External) Premium Ruckus icx switches;R710;Ruckus R710 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Ruckus ICX Switches, R710 Is there an interoperability guide between Ruckus ICX switches and R710 (ACw2) APs? Adding config changes which is not covered in the attached pdf. 1) 'Primary port' command depreciated from FI 8061 2) 'deploy' is obselete from 8061 as well. A sample lag config will look like this in FI 08090 lag core dynamic id 200 ports ethe 1/2/1 ethe 1/2/2 ethe 1/2/3 3) Poe is enabled by default from FI 08.0.70 use 'no inline power' & 'write mem' to disable See attached Ruckus AP + ICX Interop guide.pdf for more info.

Configuration guide for LACP on Ruckus ICX7450 switch for R710 (ACw2) model APs.

2021-04-13T04:44:52-0700 2021-04-13T06:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PbDbCAK?attachment_index=0 2021-04-13T06:00:08-0700 monthly admin,premium knowledge_article_2409 knowledge_article_2409_attachment_1 Ruckus+Brocade Interop-Final.pdf 1300991.0 application/pdf https://support.ruckuswireless.com/articles/000011560 2021-04-12T19:53:46-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4649 knowledge_article_4649 2021-04-12T19:53:46-0700 000011560 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway Is it a software defect that tunnel MTU size was smaller than previous release? Tunnel MTU size calculation was changed after R5.1.1. The following is tunnel MTU size when the interface MTU size is 1500. <table style="width: 659px;" width="657"><colgroup><col style="width: 185pt;" width="246"></col><col style="width: 116pt;" width="154"></col><col style="width: 193pt;" width="257"></col></colgroup><tbody><tr><td colspan="1" rowspan="1" class="xl65" style="height: 25px; width: 246px; white-space: normal; background-color: #f4f5f7;">Tunnel type (IPv4)</td><td colspan="1" rowspan="1" class="xl66" style="width: 154px; text-align: center; white-space: normal; background-color: #f4f5f7;">R5.1 – GRE MTU</td><td colspan="1" rowspan="1" class="xl66" style="width: 257px; text-align: center; white-space: normal; background-color: #f4f5f7;">R.5.1.1 – GRE MTU</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="height: 25px; width: 246px; white-space: normal; background-color: #f4f5f7;">eth_ipv4_rksgre</td><td colspan="1" rowspan="1" class="xl68" style="width: 154px; text-align: center; white-space: normal; background-color: #f4f5f7;">1450</td><td colspan="1" rowspan="1" class="xl68" style="width: 257px; text-align: center; white-space: normal; background-color: #f4f5f7;">1446</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="height: 25px; width: 246px; white-space: normal; background-color: #f4f5f7;">eth_ipv4_rksgre + Encryption</td><td colspan="1" rowspan="1" class="xl68" style="width: 154px; text-align: center; white-space: normal; background-color: #f4f5f7;">1440</td><td colspan="1" rowspan="1" class="xl68" style="width: 257px; text-align: center; white-space: normal; background-color: #f4f5f7;">1440</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="height: 25px; width: 246px; white-space: normal; background-color: #f4f5f7;">eth_ipv4_udp_rksgre</td><td colspan="1" rowspan="1" class="xl68" style="width: 154px; text-align: center; white-space: normal; background-color: #f4f5f7;">1442</td><td colspan="1" rowspan="1" class="xl68" style="width: 257px; text-align: center; white-space: normal; background-color: #f4f5f7;">1438</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="height: 25px; width: 246px; white-space: normal; background-color: #f4f5f7;">eth_ipv4_udp_rksgre +Encryption</td><td colspan="1" rowspan="1" class="xl68" style="width: 154px; text-align: center; white-space: normal; background-color: #f4f5f7;">1440</td><td colspan="1" rowspan="1" class="xl68" style="width: 257px; text-align: center; white-space: normal; background-color: #f4f5f7;">1424</td></tr></tbody></table> AP side has one more check when sending MTU size to DP. AP has a check and maximum size will be 1440, so actual tunnel MTU size will be 1440 even if AP CLI output shows 1446 for eth_ipv4/rksgre. --- rkscli: get mtu gre1 gre1 MTU: 1446 Ok --- <table style="width: 659px;" width="657"><colgroup><col style="width: 185pt;" width="246"></col><col style="width: 116pt;" width="154"></col><col style="width: 193pt;" width="257"></col></colgroup><tbody><tr><td colspan="1" rowspan="1" class="xl65" style="height: 25px; width: 246px; white-space: normal; background-color: #f4f5f7;">Tunnel type (IPv4)</td><td colspan="1" rowspan="1" class="xl66" style="width: 154px; text-align: center; white-space: normal; background-color: #f4f5f7;">R5.1 – GRE MTU</td><td colspan="1" rowspan="1" class="xl66" style="width: 257px; text-align: center; white-space: normal; background-color: #f4f5f7;">R.5.1.1 – GRE MTU</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="height: 25px; width: 246px; white-space: normal; background-color: #f4f5f7;">eth_ipv4_rksgre</td><td colspan="1" rowspan="1" class="xl68" style="width: 154px; text-align: center; white-space: normal; background-color: #f4f5f7;">1450</td><td colspan="1" rowspan="1" class="xl68" style="width: 257px; text-align: center; white-space: normal; background-color: #f4f5f7;">1440</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="height: 25px; width: 246px; white-space: normal; background-color: #f4f5f7;">eth_ipv4_rksgre + Encryption</td><td colspan="1" rowspan="1" class="xl68" style="width: 154px; text-align: center; white-space: normal; background-color: #f4f5f7;">1440</td><td colspan="1" rowspan="1" class="xl68" style="width: 257px; text-align: center; white-space: normal; background-color: #f4f5f7;">1440</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="height: 25px; width: 246px; white-space: normal; background-color: #f4f5f7;">eth_ipv4_udp_rksgre</td><td colspan="1" rowspan="1" class="xl68" style="width: 154px; text-align: center; white-space: normal; background-color: #f4f5f7;">1442</td><td colspan="1" rowspan="1" class="xl68" style="width: 257px; text-align: center; white-space: normal; background-color: #f4f5f7;">1438</td></tr><tr><td colspan="1" rowspan="1" class="xl67" style="height: 25px; width: 246px; white-space: normal; background-color: #f4f5f7;">eth_ipv4_udp_rksgre +Encryption</td><td colspan="1" rowspan="1" class="xl68" style="width: 154px; text-align: center; white-space: normal; background-color: #f4f5f7;">1440</td><td colspan="1" rowspan="1" class="xl68" style="width: 257px; text-align: center; white-space: normal; background-color: #f4f5f7;">1424</td></tr></tbody></table>

After upgrading SZ to R5.2.1, tunnel MTU size became smaller than R3.6.2.

2021-04-12T19:53:46-0700 2021-04-13T00:00:07-0700 https://support.ruckuswireless.com/articles/000006392 2020-05-17T12:59:37-0700 monthly 0.8 admin,premium knowledge_article_4197 knowledge_article_4197 2017-06-12T15:01:52-0700 000006392 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway Why can't / shouldn't customers use 10.254.x.x or 10.255.x.x subnets if using vSZ or SZ controllers? 10.254.1.x/24 subnet address is used for internal communication between the SZ control plane and the data plane. And that includes the vSZ/vDP, SZ-100, SZ300 and SCG200. This subnet is configurable from the CLI. If the customer has a conflict with 10.254.1.x/24, the simplest way is to configure a different subnet for our use. However, after 3.6 version we came up with a fix to change the internal subnet. Here are the commands vsze-57# show internal-subnet Internal Subnet Prefix: 10.254.1 vsze-57# config vsze-57(config)# ip internal-subnet 31.0.0 This command will reboot internal interfaces, data planes and SMF service. Do you want to continue (or input 'no' to cancel)? [yes/no] yes Let the process finish and check if the subnet got changed vsze-57# show internal-subnet Internal Subnet Prefix: 31.0.0 After this, change the IP address of the interface from the web UI which will work as expected. The 10.255.x.x/16 subnet is between the SZ-Dataplane and the AP. This is also configurable since 3.6: vSZ-H-34# show running-config ap-internal-subnet Tunnel Internal Subnet: 10.255.0.0 vSZ-H-34# conf vSZ-H-34(config)# ap-internal-subnet <ip> Internal Subnet (10.X.0.0)

SZ uses reserved IP subnets 10.254.1.0/24 and/or 10.255.0.0/16 which can cause problems for Customers who use these subnets.

2020-05-17T12:59:37-0700 2021-04-11T14:14:10-0700 https://support.ruckuswireless.com/articles/000002434 2021-04-09T02:31:35-0700 monthly 0.8 admin,premium knowledge_article_2041 knowledge_article_2041 2014-03-28T03:07:01-0700 000002434 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector Can we create batch_dpsk CSV file including DPSKs in it and then upload it to ZD? No, the DPSK mechanism automatically creates a unique pre-shared key (PSK) for each user (MAC) when he/she activates the WLAN access the first time. So we cannot create batch_dpsk including DPSK Keys and transfer it to a ZD. These are the parameters that we need to upload batch_dpsk in .CSV format. <pre style=""> #User Name (Must) #Mac Address (Empty implies dynamic binding) #Vlan ID</pre> As you can see DPSK is not one among them. After uploading a CSV file that includes above data, ZD generated DPSKs can be downloaded by clicking on the "To download the generated DPSK record, click here” link. These DPSKs are generated based on the passphrase inside the "Target WLAN" which is used as a seed. This should explain lack of custom passphrase support in Zero-IT.

Customer wants to create batch_dpsk CSV file including DPSK and then upload it to the ZD.

2021-04-09T02:31:35-0700 2021-04-09T06:00:09-0700 https://support.ruckuswireless.com/articles/000006906 2017-12-12T15:03:21-0800 monthly 0.8 admin,premium knowledge_article_2912 knowledge_article_2912 2017-12-12T15:03:21-0800 000006906 Validated (External) Premium Ruckus icx switches;Fastiron ws series;Fastiron cx series;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration Configuration, Ruckus ICX Switches, FastIron WS Series, FastIron CX Series How to reset a device to factory defaults? You will need a console connection to the device and good code on the device. The default settings and configuration will be restored by following these steps: 1. Reset the device. 2. Hit the 'b' key when you see a message similar to this: Enter 'b' to stop at boot monitor. 3. Enter the following commands: use default-config boot system flash primary The device will not have any configuration loaded. By doing a write mem a base configuration will be saved.

How to reset a device to factory defaults?

2017-12-12T15:03:21-0800 2021-04-09T03:09:24-0700 https://support.ruckuswireless.com/articles/000001136 2021-04-08T00:30:15-0700 monthly 0.8 admin,premium knowledge_article_4641 knowledge_article_4641 2012-03-21T11:59:52-0700 000001136 Validated (External) Premium Zoneflex 7731 Configuration Configuration, ZoneFlex 7731 How do I do an Initial Configuration of the 7731 link using Auto Provisioning In order to do the initial configuration of the 7731 using Auto-provisioning you can use this simple process. This does not go into details of doing any advanced configurations. We highly recommend doing this initial configuration in the confines of a room where both devices are easily accessible so that you know the link is functional , is connecting over L1/2. If you have the devices close to each other, make sure that they point away from each other so that the signal is not saturated or the devices can “hear” each other. If you point the integrated antennas towards each other, at extremely close proximity (i.e. within a room), the 7731s will not be able to link up with each other as the signal will be saturated. There are three ways to get a 7731 link initially configured out of the box: <ol><li>Through the manual provisioning wizard.</li><li>Manual configuration.</li><li>Through Auto provision, by inter-connecting the 7731s via an Ethernet cable</li></ol> This document explains the Auto Provision of a 7731 link with an Ethernet cable. Below is an initial configuration turn up description, configuring the 7731 out of the box, and finally setting frequency channel and distance. The default IP addresses of the 7731s when shipped are 192.168.2.1 (Root Bridge = RB) and 192.168.2.254 (non-Root Bridge = NRB). When a device is factory defaulted, be it a RB or NRB, it defaults to 192.168.2.1. The 7731 by default is shipped defaulted and thus both 7731s when first received will most likely have the 192.168.2.1. You can factory default the 7731 through its’ GUI or through the Reset button. The Reset button needs to be held in, with a pin or paperclip end, between 8-12 seconds for the 7731 to factory default. Access the device via its’ 192.168.2.1 through any GUI. You will have to accept the risks initially so that the GUI will take you to the Add the Exception tab, it’s the Ruckus SSL certificate process: <img alt="User-added image" height="266" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gybt&feoid=00N50000002Cf3M&refid=0EM50000000L97T" width="500"></img> Click on Add Exception tab and then click on the Confirm Security Exception: <img alt="User-added image" height="281" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gybt&feoid=00N50000002Cf3M&refid=0EM50000000L97r" width="500"></img>

Auto Configuration-of-the-ZF-7731

2021-04-08T00:30:15-0700 2021-04-08T06:00:22-0700 https://support.ruckuswireless.com/articles/000001156 2021-04-08T00:32:25-0700 monthly 0.8 admin,premium knowledge_article_422 knowledge_article_422 2012-03-21T12:00:21-0700 000001156 Validated (External) Premium Zoneflex 7025 Configuration;Installation Configuration, Installation, ZoneFlex 7025 How to configure the ZF7025 as Stand Alone AP Product: AP ZF7025 Topic: Installation/Configuration Installing the ZF7025 Before starting with the installation, make sure that you have the following items that are required for the installation ready: ? A computer with a Web browser ? Two CAT5 Ethernet cables ? An IEEE 802.3af/at-compliant PoE switch or PoE injector and power adapter Step 1: Prepare the Administrative Computer The administrative computer is the computer that you will be using to access the device’s Web interface. NOTE: These procedures assume that you know how to statically configure an IP address on the admin computer. Configure your computer’s IP address, Subnet Mask, Gateway, and DNS Server: IP address 192.168.0.22 (or any address in the 192.168.0.xx range, with the exception of 192.168.0.1, which is the default IP address of the AP). Subnet mask 255.255.255.0 Default gateway 192.168.0.1 Preferred DNS server 192.168.0.1 Step 2: Connect the Device to a Power Source and the Admin Computer 1. Connect the AP to an 802.3af or 802.3at compliant PoE injector or PoE switch. 2. Take one of the CAT5 Ethernet cables. Connect one end of the Ethernet cable to the Ethernet port on your computer, and then connect the other end to the 10/100 DATA IN port on the PoE injector. 3. Take the other Ethernet cable. Connect one end to the PoE OUT port on the PoE injector, and then connect the other end to the PoE In LAN 5/Uplink port on the rear of the device (see Figure 1 below). <img alt="User-added image" height="428" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3zk&feoid=00N50000002Cf3M&refid=0EM50000000L9Ab" width="500"></img> Step 3: Log In to the Device 1. On your computer, open a Web browser window. 2. In the address or location bar, enter 192.168.0.1. 3. When the login screen appears, type super as the user name and sp-admin as the password. Figure 2. Web interface login page: <img alt="User-added image" height="286" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3zk&feoid=00N50000002Cf3M&refid=0EM50000000L9Ag" width="500"></img> 4. Click the Login button. The Status: Device page appears. 5. Continue to “Step 4: Configure the Wireless Settings”. Step 4: Configure the Wireless Settings To complete this step, you will need to configure the settings on the Common tab and at least one Wireless # tab. These are the essential wireless settings that will enable wireless devices on the network to associate with the Access Point. For your reference, the default wireless settings on the Access Point are listed below. Default Wireless Settings: Setting Default Value SSID (network name) Wireless 1 to Wireless 8 (8 WLANs) Encryption (security) Disabled on all WLANs Default management IP address 192.168.0.1 Configure Common Wireless Settings: <ol><li>On the left menu of the Web interface, click Configuration > Wireless. The Configuration :: Wireless :: Common page appears.</li><li>Verify that the common wireless settings are configured as shown below.</li></ol> <img alt="User-added image" height="260" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3zk&feoid=00N50000002Cf3M&refid=0EM50000000L9Al" width="500"></img> 3. If you made any changes to the Common tab, click Update Settings. 4. Continue to Configure Wireless Settings below. Configure Wireless Settings 1. Click one of the Wireless # tabs. 2. In Wireless Availability, click Enabled. 3. In Broadcast SSID, click Enabled. 4. Clear the SSID box, and then type a unique and descriptive name that you want to call this wireless network. For example, you can type Ruckus Wireless AP. This SSID is the name that will help users identify this wireless network in their wireless network connection application. NOTE: You may also configure other wireless settings on this and other Wireless # tabs (in addition to the settings described above), although it is not necessary for completing the Access Point installation. 5. Click Update Settings. You have completed configuring the basic wireless settings of the Access Point.

How to configure the ZF7025 as Stand Alone AP

2021-04-08T00:32:25-0700 2021-04-08T06:00:20-0700 https://support.ruckuswireless.com/articles/000001210 2021-04-08T00:34:46-0700 monthly 0.8 admin,premium knowledge_article_3330 knowledge_article_3330 2012-03-21T12:01:04-0700 000001210 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector How can I turn on the UPnP service on my Windows system? Universal Plug and Play (UPnP) is a set of networking protocols that permits networked devices, such as personal computers, printers, Internet gateways, Wi-Fi access points and mobile devices to seamlessly discover each other's presence on the network and establish functional network services for data sharing, communications, and entertainment. Follow below steps to enable UPnP service on Windows. Windows 7, 8, and 10 1. Open the Control Panel. 2. Click Network and Internet 3. Click Network and Sharing Center. 4. Click on Change advanced sharing settings. 5. In the Network Discovery section, select the option for Turn on network discovery and click the Save changes button. 6. UPnP will now automatically start when you turn on your computer. Windows XP 1. Open up the Network Connections window - You can do this by going to Start > Run, type ncpa.cpl in the text field, then press the Enter key. 2. Check if your Internet Gateway device is displayed. 3. Click the link for My Network Places in the Network Connections window (left pane, Other Places section). Check to see if your UPnP client (ZoneDirector) is displayed. If these devices are not displayed, you need to make sure the correct components are installed in Windows XP. To check this, go to Start, Run, type appwiz.cpl in the text field, and press the Enter key. In the Add or Remove Programs window, click on the Add/Remove Windows Components link in the left pane. In the Windows Components Wizard window, scroll down until you find Networking Services. Select this in the list and click the Details button. Make sure the Internet Gateway Device Discovery and Control Client and UPnP User Interface options are checked and click the OK button. Back on the Windows Components Wizard window, click the Next button and follow the directions to install the new components. <img alt="User-added image" height="286" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3zp&feoid=00N50000002Cf3M&refid=0EM50000000lZ7I" width="500"></img> Now, you can start the UPnP service to enable it. To do this, go to Start, Run, type services.msc in the text field, and press the Enter key. Find the SSDP Discovery Service option and double-click it with your mouse. In the window that opens, on the General tab, select Automatic in the Startup type drop-down list and click the OK button. UPnP will now automatically start when you turn on your computer. Note that PC be on the same IP subnet of the Ruckus ZoneDirector for UPnP device discovery.

Ruckus ZoneDirector controllers have universal plug-n-play (UPnP) agents that permit a Windows Network Connections to recognize the ZoneDirectors' IP address(es). To discover ZoneDirector on layer 2 network, Windows must support UPnP device discovery.

2021-04-08T00:34:46-0700 2021-04-08T06:00:19-0700 https://support.ruckuswireless.com/articles/000002301 2021-04-08T03:50:59-0700 monthly 0.8 admin,premium knowledge_article_583 knowledge_article_583 2013-10-17T16:34:04-0700 000002301 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation Configuration, Installation, ZoneFlex Indoor, ZoneFlex Outdoor Do Ruckus APs not support Passive PoE? Ruckus APs do not support Passive PoE as it is a Non 802.3 af/at compliant technology. The Ruckus APs will power up using only 802.3 af/at compliant PoE Switches.

Ruckus AP's and Passive PoE

2021-04-08T03:50:59-0700 2021-04-08T06:00:15-0700 https://support.ruckuswireless.com/articles/000004257 2021-04-08T03:54:17-0700 monthly 0.8 admin,premium knowledge_article_1695 knowledge_article_1695 2015-03-27T14:16:02-0700 000004257 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway How do we change interface and DNS IP of vSCG? The interface config and DNS can be modified on vSCG by following below path: 1. Log into vSCG's web interface. 2. Go to "Configuration" TAB. 3. Click on "Cluster Plane" on the right hand side panel. 4. Click on the existing control plane in the cluster which will bring control plane network settings. 5. Under "Physical Interface" tab, you can see the option to change/modify interfaces and DNS address. <img alt="User-added image" height="271" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M409&feoid=00N50000002Cf3M&refid=0EM50000000Lgj5" width="500"></img> 6. Make the changes and click apply to save.

Following article explains the steps on how to change the interface IP and DNS on vSCG

2021-04-08T03:54:17-0700 2021-04-08T06:00:14-0700 https://support.ruckuswireless.com/articles/000002506 2021-04-08T05:12:30-0700 monthly 0.8 admin,premium knowledge_article_2196 knowledge_article_2196 2014-01-15T09:58:19-0800 000002506 Validated (External) Premium Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) System network management System Network Management, ZoneDirector, SmartCell Gateway How does ZD/SZ employ GRE? GRE is an (unencrypted ) tunneling protocol that encapsulates data across a network. It can be run on L2 or L3 networks. There are two main ways to set it up: hard tunnels and soft. A hard tunnel is statically configured between two physical ports on the network - that means it's up to the network to set up the tunnel rather than the endpoints (i.e. a ZD or SCG). A soft GRE is one where the tunnel is not statically configured. It is dynamic which helps in cases of network changes (re-routing, etc.). This type of tunneling is often set up and torn down by the endpoints (although the switches in the network in between might do it). The ZD does not support soft GRE tunnels. The SCG does support L2 soft GRE, as L3 soft GRE support was added in 2.1. And to Clarify – We use proprietary Ruckus GRE between our APs and the SCG only. GRE is an IP protocol, in RuckusGRE, the "GRE" is encapsulated by UDP so as to allow NAT traversal (not possible with GRE). We also support Soft-GRE to allow the users data plane to be forwarded to a 3rd party gateway such as the ALU 7750. We have two options for support of Soft-GRE in the SCG: <ol style="list-style-type: upper-alpha;"><li>Where user data is tunnelled from the AP to the SCG we can forward the user data north bound in a Soft-GRE tunnel from the SCG to a 3rd Party Gateway e.g. ALU 7750. nb SCG still used for control plane.</li></ol> e.g. AP---Ruckus GRE ---> SZ ---- Soft GRE ----> 7750 <ol style="list-style-type: upper-alpha;"><li>SCG allows the AP to build a Soft-GRE tunnel directly to a 3rd party gateway e.g. ALU 7750</li></ol> e.g. AP ----Soft-GRE--- -> 7750 Option A is available in SCG 2.1 and option B will be available in SZ 2.5+ (there is also a special 1.1.2 skew with option B for PoC) In SZ we use a proprietary L2 o GRE tunnel from the AP’s to the Data Plane. And we do support encryption on our RuckusGRE tunnels - ala DTLS.

How does ZD/SCG employ GRE?

2021-04-08T05:12:30-0700 2021-04-08T06:00:12-0700 https://support.ruckuswireless.com/articles/000003639 2021-04-08T05:24:07-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1428 knowledge_article_1428 2014-11-14T04:28:29-0800 000003639 Validated (External) Public Zonedirector;Zoneflex 2942;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Firmware;Known issues and workarounds Performance, Firmware, Known Issues and Workarounds, ZoneDirector, ZoneFlex 2942 What can I do ensure reliable wireless service out of ZF2741 and ZF2942 APs? These models are already unsupported from ZoneDirector firmware version 9.8.x and above. These models were supported from almost the beginning of ZoneDirector release to the enterprise market. If you would like to continue to operate on some of the more recent firmware versions such as 9.4.x, 9.5.x, 9.6.x, and 9.7.x ..

This article explains what should be done to ensure reliable support out of ZF2741 and ZF2942 model APs which are old by now.

2021-04-08T05:24:07-0700 2021-04-08T06:00:10-0700 https://support.ruckuswireless.com/articles/000002722 2021-04-08T05:25:37-0700 monthly 0.8 admin,premium knowledge_article_756 knowledge_article_756 2014-02-27T07:59:20-0800 000002722 Validated (External) Premium Zonedirector 3000;ZoneDirector 3000 Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, ZoneDirector 3000 How to hardreset ZD3000 to factory default settings ? <div>Hard Reset procedure : - </div> <div> </div> <div>1. On the front panel of the ZoneDirector you have a F/D hole.</div> <div>2. Insert a paper clip in the F/D hole and press for at least 10 seconds.</div> <div> </div> <div>After the reset is complete, the Status LED blinks red, then blinks green, indicating that the system is in factory default state. Default IP of ZoneDirector is 192.168.0.2 After you complete the Setup Wizard, the Status LED will be steady green.</div>

Resetting ZD3000 to factory default settings

2021-04-08T05:25:37-0700 2021-04-08T06:00:08-0700 https://support.ruckuswireless.com/articles/000002483 2021-04-07T19:07:53-0700 monthly 0.8 admin,premium knowledge_article_1827 knowledge_article_1827 2014-01-09T08:34:58-0800 000002483 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to execute CLI commands on connected APs from the ZD ? Administrators can use ZoneDirector debug mode, to issue AP CLI commands to currently connected Access Points. <div>ruckus> enable</div> <div>ruckus# debug</div> <div>You have all rights in this mode.</div> <div>ruckus(debug)#</div> These commands can be used to modify parameters on one or all currently connected APs. The command, "remote_ap_cli", is issued with this syntax and parameter values/purpose: remote_ap_cli [-q] {-a ap_mac | -A } "cmd arg1 arg2 .." -q ----- Do not display results <div> -a ----- Specify AP by MAC address</div> <div> ap_mac ----- The AP’s MAC address</div> <div> -A ----- All connected APs</div> <div> cmd ----- AP CLI command</div> <div> arg ----- AP CLI command argument Example : remote_ap_cli –A “set dtim-period wlan2 1” <div>remote_ap_cli –A “set qos wlan2 directed multicast disable”</div> <div>remote_ap_cli –A “set qos eth0 directed multicast disable”</div> <div>remote_ap_cli –A “set qos eth1 directed multicast disable” Note: - Commands are flexible for individual AP configuration level (-a <mac>) for testing/evaluating features. - Globally issued (-A) commands only affect currently connected APs, new APs added to the network or that were not currently powered on will not be configured. Recommendation: - Those commands that can be configured on WLANs, will be persistent, provisioned on all APs when they join, reboot, connect after factory default, etc. </div> </div>

Admins can issue AP CLI commands to display or make settings on connected APs, from ZD debug mode.

2021-04-07T19:07:53-0700 2021-04-08T00:00:08-0700 https://support.ruckuswireless.com/articles/000002667 2021-04-07T14:01:47-0700 monthly 0.8 admin,premium knowledge_article_1724 knowledge_article_1724 2014-02-18T13:30:07-0800 000002667 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, SmartCell Gateway, SmartCell AP How do I direct Access Points to join specific Zones in an SmartZone or SCG Cluster In the SmartZone or SCG the AP's can be directly assigned to Zones (not domains). This is done using the Zone Registration Rule function, found under Configuration::AP Zones > Registration Rules You can create automated rules based on an GPS coordinates IP subnet or IP address range that will automatically put the AP's into the specified zone when it first (newly) joins the SCG cluster. This only works for AP's that have not previously joined the SCG. On 3.4.x and older versions: <img alt="Configure::AP Zones > Registration Rules" height="280" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3zB&feoid=00N50000002Cf3M&refid=0EM50000000LQvD" width="500"></img> But you can also create a "Provisioning Tag" using the same screen to manually push AP's into a specific Zone during manual SCG discovery provisioning on the AP: <img alt="Creating a new Provisioning Tag" height="280" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3zB&feoid=00N50000002Cf3M&refid=0EM50000000LQvI" width="500"></img> On 3.5.x to 5.2.2 version: <img alt="User-added image" height="255" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3zB&feoid=00N50000002Cf3M&refid=0EM2J0000024MaL" width="500"></img> After you have created provisioning tag in the Registration Rules you can manually move the AP into that Zone by configuring the provisioning tag from the AP CLI. You should do this BEFORE setting the SCG IP address. rkscli: set provisioning-tag Miami OK rkscli: get provisioning-tag current provisioning tag: Miami. OK Then you can use the: set scg ip xxx.xxx.xxx.xxx to push the AP into the correct cluster. Ruckus has also developed a script that can be used to import a CSV file listing the AP's to be added by MAC and then specifying: deviceName deviceLocation deviceDescription deviceIpSetting deviceIp deviceIpMask deviceIpGateway Zone gps_lat gps_long Not all field need to be used - the MAC is the distinguishing required filed and of course the Zone to put the AP into a particular zone. This Script is version dependent. Please contactRuckus Support to get the version specific script, instructions on how to execute the script and examples of the csv file.

Using Registration Rules and Provisioning Tags to connect newly joined Access Points to specific Zones in an SmartZone or SCG cluster

2021-04-07T14:01:47-0700 2021-04-07T18:00:11-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PEn1CAG?attachment_index=0 2021-04-07T18:00:11-0700 monthly admin,premium knowledge_article_1724 knowledge_article_1724_attachment_1 Pre-Provisioning-AP-List.csv 505.0 text/csv https://support.ruckuswireless.com/articles/000009145 2021-04-07T17:59:54-0700 monthly 0.8 admin,premium knowledge_article_3735 knowledge_article_3735 2019-04-29T02:38:18-0700 000009145 Validated (External) Premium Ruckus icx switches;Unleashed;Zonedirector;Smartcell gateway;Smartcell ap;Smartcell insight;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) Troubleshooting Troubleshooting, Ruckus ICX Switches, Unleashed, ZoneDirector, SmartCell Gateway, SmartCell AP, SmartCell Insight What information can I pro-actively provide to Ruckus Support, to help with understanding my issue more efficiently? To aid Ruckus Support in quickly and efficiently understanding your issue and to begin the process of problem-diagnosis, the following information can be shared/uploaded to a new case proactively. In many cases it will preclude any requirement for Support to ask for this data in subsequent case messages and will likely save time. In all cases, providing the product model name and serial number are essential to correctly triage the case correctly. The following sections detail the basics desired by Support, for each product: SmartZone Controllers - vSZ / SCG / SZ-300 / SZ-100 1. Version - e.g. 3.5.1.0.297 2. Number of nodes in the cluster 3. Data Planes used? [Yes/No] 4. Hypervisor platform - e.g. VMware / KVM 5. Diagnostics Snapshot from each node (obtained via web interface): <div style="margin-left: 40px;"> Diagnostics > Application Logs > Select Control Plane > Download Snapshot Logs (repeat this step for each node in cluster)</div> 6. Resource plan of the VM nodes - e.g. no. of CPUs, RAM, HDD size 7. AP support info (if AP related issue) <div style="margin-left: 40px;"> </div> ZoneDirector 1. Version - e.g. 10.1.2.0.210 2. Smart Redundancy configured - yes/no 3. Provide diagnostics snapshot using the ZD web interface: <div style="margin-left: 40px;">a. Troubleshooting > Diagnostics > click Save Debug Info b. Troubleshooting > Diagnostics > click Save System Log</div> ICX Switches 1. Hardware models in user 2. Number of switches/routers affected by issue 3. The output of the following commands: <div style="margin-left: 40px;">a. show version b. show tech-support</div> Unleashed or standalone AP 1. Unleashed version in use - e.g. 200.7.10.102.64 2. AP model types deployed and number in network 3. For SOLO AP, provide an AP support log as follows: <div style="margin-left: 40px;">a. Login to AP. Type: b. support c. support show d. Copy output to clipboard and save to a .txt file. Upload to case.</div> <div style="margin-left: 40px;"> </div> SCI 1. Version - e.g. 5.2.1 or 5.1.3 2. Number of nodes in the cluster - e.g. 1 Master Node, 3 Data Nodes 3. SCI serial number 4. Confirm the following information using the SCI web interface web-pages: <div style="margin-left: 40px;">a. Admin > Settings: Provide the 'Last Seen' time for the (ZD/SZ) controllers b. Admin > Status & Update: Whether all nodes are showing 'green' status light to indicate they are online and connected to the SCI cluster c. Admin > Status & Update > Notifications: Any urgent messages displayed d. Admin > Diagnostics > Spark Master: The page loads, and under 'Running Applications' > 'Name' column, 'ReceiveGPB$' is listed e. Admin > Diagnostics > HDFS: Under 'Summary', Safe Mode = Off. (If Safe Mode = On, data ingestion has halted). f. Admin > Diagnostics > Druid Coordinator: does the page load without error? [Yes/No] g. Admin > Diagnostics > Druid Overlord: does the page load without error? [Yes/No]</div>

A guide to diagnostic information that can be provided to speed-up problem analysis/diagnosis

2021-04-07T17:59:54-0700 2021-04-07T18:00:09-0700 https://support.ruckuswireless.com/articles/000001170 2021-04-07T09:37:07-0700 monthly 0.8 admin,premium knowledge_article_413 knowledge_article_413 2012-03-21T12:00:29-0700 000001170 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management;Troubleshooting System Network Management, Troubleshooting, ZoneDirector How to retrieve debug file from ZD via CLI? There are times when admins may need to gather Debug Info file from your ZD when they do not have access to the ZD’s Web Interface. You can do this through the CLI. You will need to configure a TFTP server. There are plenty of free ones available for download on the Internet. You will also need an SSH client such as Putty. <ol><li>Start TFTP Server and note the IP address of server. </li><li>Open an SSH Session to the ZD and login with admin username/password.</li><li>Once logged in, go to “enable” mode. Do so by typing “enable” at the prompt and pressing Enter.</li></ol> <div style="margin-left: 40px;">ruckus> enable </div> <div><img alt="User-added image" height="314" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3yw&feoid=00N50000002Cf3M&refid=0EM50000000L9BZ" width="500"></img> 4. Once in enable mode, go to debug. Type “debug” and press Enter <div style="margin-left: 40px;"> ruckus# debug </div> <div><img alt="User-added image" height="314" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3yw&feoid=00N50000002Cf3M&refid=0EM50000000L9Be" width="500"></img> <div>5. From debug run the following command: </div> <div style="margin-left: 40px;">ruckus(debug)# save_debug_info <ip address of tftp server> debuginfo.dbg </div> <div><img alt="User-added image" height="314" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3yw&feoid=00N50000002Cf3M&refid=0EM50000000L9Bj" width="500"></img> 6. The ZD will create and move the ZD debug file to the root directory of tftp server, where it will have the filename 'debuginfo.dbg'. <img alt="User-added image" height="314" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3yw&feoid=00N50000002Cf3M&refid=0EM50000000L9Bo" width="500"></img></div> Note: You may name the output file any name you wish.</div> </div>

This article details the process of retrieving the debug log information from the Zonedirector's command line interface.

2021-04-07T09:37:07-0700 2021-04-07T12:00:13-0700 https://support.ruckuswireless.com/articles/000009168 2021-04-07T02:02:39-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3702 knowledge_article_3702 2019-05-15T00:46:20-0700 000009168 Validated (External) Public Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Why we can't move mesh enabled AP to different Zone? We first, suggest resetting the AP and moving it to different zone. If AP count is less and AP are reachable to target zone mesh SSID, try for the work around provided.

If you are trying to move the mesh enabled AP from one zone to the other zone, it would reflect with the below error. Unable to move the APs to a different AP zone. Reason: AP xxx cannot be moved because it is mesh-enabled with ssid Mesh-yyy."

2021-04-07T02:02:39-0700 2021-04-07T06:00:30-0700 https://support.ruckuswireless.com/articles/000001345 2021-04-07T02:24:35-0700 monthly 0.8 admin,premium knowledge_article_2538 knowledge_article_2538 2013-01-02T13:57:23-0800 000001345 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor What is the .bl7 file extension for ZoneFlex updates? This is a proprietary binary format used by Ruckus Wireless. Do not try to uncompress or otherwise change the file extension as this will prevent the file from being used for the upgrade.

When I go to download a firmware update for my ZoneFlex access point, I see the file ending in .bl7. What sort of format is that?

2021-04-07T02:24:35-0700 2021-04-07T06:00:25-0700 https://support.ruckuswireless.com/articles/000001194 2021-04-07T02:34:37-0700 monthly 0.8 admin,premium knowledge_article_4638 knowledge_article_4638 2012-03-21T12:00:50-0700 000001194 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to direct syslog messages to an external syslog server? ZoneDirector by default saves syslog messages internally. But it has limited memory space and it doesn't hold the old messages if the ZoneDirector is rebooted. In addition, ZD managed APs have same limitations and they don't direct their syslog messages to the ZD. As an alternative, an external syslog server can be used to direct messages from ZD as well as from managed APs. It will collect syslog messages and won't be limited by storage space and system reboots. To specify an external syslog server in the ZD, go to the "Log Settings" section on the Configure --> System page. Enable reporting to a remote syslog server and specify its IP address. From this point on this syslog server will show the messages. Couple of important points: 1. It is important to set the event log level to "Show more" so the messages won't be limited to only warning and critical events. 2. If you are interested only in the ZD side events keep the "Inherit remote syslog server for APs" unchecked. Otherwise leave it checked. 3. Choose the appropriate time zone under the "System Time" to have syslog messages time stamped correctly.

This article explains how to point ZD to send syslog messages to an external syslog server.

2021-04-07T02:34:37-0700 2021-04-07T06:00:24-0700 https://support.ruckuswireless.com/articles/000005712 2021-04-07T02:53:30-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3341 knowledge_article_3341 2016-05-18T14:09:19-0700 000005712 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, Unleashed How to download support info file from Unleashed devices? - Login to Master AP - Click Access Points on left to display connected APs. - Click selected AP from those on left side. - Click "Show System Overview Info" to display AP details - Find "Save Logs" download. Please find the screenshot below; <img alt="User-added image" height="248" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3yD&feoid=00N50000002Cf3M&refid=0EM50000000DwqS" width="500"></img>

Unleashed member AP not joining the Unleashed Master AP - How to download Support info file.

2021-04-07T02:53:30-0700 2021-04-07T06:00:21-0700 https://support.ruckuswireless.com/articles/000002029 2021-04-07T03:41:03-0700 monthly 0.8 admin,premium knowledge_article_529 knowledge_article_529 2013-08-02T05:51:49-0700 000002029 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Why am I unable to upgrade the Standaloe AP? Try changing the Firmware Server to 204.42.138.144 or 204.2.106.105 under Maintenance > Upgrade. Then try the upgrade the standalone Access Point. again.

Unable to upgrade the standalone, unable to ping the Firmware Server 'fwupdate1.ruckuswireless.com'

2021-04-07T03:41:03-0700 2021-04-07T06:00:17-0700 https://support.ruckuswireless.com/articles/000005053 2021-04-07T04:54:05-0700 monthly 0.8 admin,premium knowledge_article_4622 knowledge_article_4622 2015-08-21T07:23:31-0700 000005053 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor Why Zebra GX420T printers fail to connect to the WLAN with WPA2/WPA(Mixed/AES) but works with OPEN and WEP? While going through the captures to compare what is received during the KEY handshake, we found a mismatch in the 802.1x versions for the keys send by the AP and the client. The AP sends its KEY1 with Version: 802.1X-2004 however the response we get as KEY2 from client has Version: 802.1X-2001. KEY1: 802.1X Authentication Version: 802.1X-2004 (2)<<<<<<<<< Type: Key (3) Length: 95 Key Descriptor Type: EAPOL RSN Key (2) KEY2: 802.1X Authentication Version: 802.1X-2001 (1)<<<<<<<<<< Type: Key (3) Length: 117 Key Descriptor Type: EAPOL RSN Key (2) Customer had another Motorola AP in their network and to ensure these Zebra Printers connect fine with WPA/WPA2 encryption, we requested customer to test these units with Motorola. We experienced same connectivity problem when we used Zebra Printers with Motorola. We further created hotspot on a mobile with WPA/WPA2 encryption and tried connecting these Zebra Printers to it and had same problem. Since these devices did not connect other vendor AP’s we requested customer to contact Zebra Support and check whether there is a problem with the device drivers. Finally, it was found that the utility used to configure these devices was buggy and was not pushing valid config to them. The issue was resolved by configuring these units with a different utility downloadable at <a href="https://www.zebra.com/us/en/products/software/barcode-printers/zebralink/zebranet-bridge-enterprise.html" target="_blank">https://www.zebra.com/us/en/products/software/barcode-printers/zebralink/zebranet-bridge-enterprise.html</a>.

Zebra GX420T printers fail to connect to the WLAN with WPA2/WPA(Mixed/AES) but works with OPEN and WEP?

2021-04-07T04:54:05-0700 2021-04-07T06:00:14-0700 https://support.ruckuswireless.com/articles/000002316 2021-04-07T04:56:21-0700 monthly 0.8 admin,premium knowledge_article_2228 knowledge_article_2228 2013-10-25T16:13:04-0700 000002316 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Security;System network management Security, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor Can I recover the admin password for a standalone access point? <ul><li>User has lost or forgotten the login credentials for managing the access point (AP)</li><li>Default login is not working</li><li>Hard-reset of the access point is required.</li><li>At that point, default credentials will work. </li></ul> If the administrator login credentials are not modified, then we can login to an Access Point with its default login credentials. username: super password: sp-admin Once these login credentials are customized and if in some way login credentials are lost, then the only way to re-gain access to a standalone Access Points' web user interface or Command line interface, is by performing a hard reset(factory default) on it and login with above default credentials. NOTE: Hard-reset for access points may be different. Typically press the recessed Hard Reset button for 10-12 seconds before release. Outdoor access point ZF-7762 has a different reset procedure.I have attached it to the article.

User has lost or forgotten the login credentials for managing the access point (AP) Default login is not working Hard-reset of the access point is required. At that point, default credentials will work.

2021-04-07T04:56:21-0700 2021-04-07T06:00:12-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PEISCA4?attachment_index=0 2021-04-07T06:00:12-0700 monthly admin,premium knowledge_article_2228 knowledge_article_2228_attachment_1 How to Reset 7762.pdf 62246.0 application/pdf https://support.ruckuswireless.com/articles/000011506 2021-04-06T06:34:12-0700 monthly 0.8 admin,premium knowledge_article_4637 knowledge_article_4637 2021-04-06T06:34:12-0700 000011506 Validated (External) Premium Ruckus cloud wifi Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi What is the limitation on number of APs that can provisioned using CSV file in RUCKUS Cloud? Current limit to import APs via csv file is 50.

Customer wants to provision bulk APs to the cloud using CSV file

2021-04-06T06:34:12-0700 2021-04-06T12:00:14-0700 https://support.ruckuswireless.com/articles/000011507 2021-04-06T06:35:37-0700 monthly 0.8 admin,premium knowledge_article_4636 knowledge_article_4636 2021-04-06T06:35:37-0700 000011507 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway Why Glover Tester Devices failed to connect to the Ruckus AP's /WLAN after Migration from Cisco to Ruckus R750 AP's. We then involved the Glove Tester Vendor who confirmed the PSK configured on Ruckus WLAN was not the same hard-coded on the Glove Testers. Once we corrected the PSK, the Glove Testers connected fine. We reverted the OFDM Data rates and re-enable 11ax Mode on Ruckus AP's and the Glove Testers remain connected. Glove Testers are un-managed Passive Devices and need their Vendor (MK) to hard-code the configuration in the beginning. Customers do not have access to these devices or could check its configuration apart from referring to the final sign-off manuals from the vendor. We need customers to ensure they have matched the configuration on Ruckus WLANs for these type of devices to connect and this is not limited to Glove Testers, it apples to any such device which requires static provisioning ex :Printers, Scan guns, etc.

This article explains a situation where clients were unable to connect to the Ruckus APs/SSID after migration from a different Vendor to Ruckus Wireless.

2021-04-06T06:35:37-0700 2021-04-06T12:00:12-0700 https://support.ruckuswireless.com/articles/000009367 2021-04-06T10:06:13-0700 monthly 0.8 admin,premium knowledge_article_4635 knowledge_article_4635 2019-06-07T09:45:10-0700 000009367 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, SmartCell Gateway What happens with historical AP Health/Traffic information when AP is moved to another zone? In WebUI, when a zone is selected, the information that will be displayed is limited to what events/traffic related to that zone. So this is working as expected. However, it is also possible to view previous information (combining statistics from multiple zones): For that in Access Point view, do not select any specific zone (instead select top-level 'System' domain) <img alt="User-added image" height="267" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Py3f&feoid=00N50000002Cf3M&refid=0EM2J000000qQR2" width="731"></img> And look for the AP. Select it and in Health/Traffic tabs you will be able to see all the information (from previous and current zone): <img alt="User-added image" height="324" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Py3f&feoid=00N50000002Cf3M&refid=0EM2J000000qQR7" width="1010"></img>

Explanation about AP health/traffic WebUI information when an AP is moved to a different zone

2021-04-06T10:06:13-0700 2021-04-06T12:00:11-0700 https://support.ruckuswireless.com/articles/000011499 2021-04-01T07:57:25-0700 monthly 0.8 admin,premium knowledge_article_4631 knowledge_article_4631 2021-04-01T07:57:25-0700 000011499 Validated (External) Premium Ruckus cloud wifi Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi Why in Ruckus Cloud we are getting an error while creating Guest pass for a guest with already expired pass? It is design intent.

Ruckus Cloud - Guest Pass Creation for an expired guest

2021-04-01T07:57:25-0700 2021-04-01T12:00:10-0700 https://support.ruckuswireless.com/articles/000011503 2021-04-01T08:12:09-0700 monthly 0.8 admin,premium knowledge_article_4630 knowledge_article_4630 2021-04-01T08:12:09-0700 000011503 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Gateway Do customer need the certificate to Pass for Extended Key Usage of server certificate is not "TLS Web Server Authentication"? This validation has been added as part of our security checks/features to comply with FIPS/CC that Commscope-RUCKUS are doing with US Government. This should only be for user reference, not affecting how it works. Please ignore the above message on the validation and go ahead and import it. If you choose to apply it to on Web, AP portal and Hotspot, it will take around 20-25 minutes for few of the services to restart.

Customer is trying to validate a certificate signed by a public ca and runs into an error "FAIL: Extended Key Usage of server certificate is not "TLS Web Server Authentication"

2021-04-01T08:12:09-0700 2021-04-01T12:00:08-0700 https://support.ruckuswireless.com/articles/000002922 2021-03-30T02:47:25-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4629 knowledge_article_4629 2014-08-06T01:16:49-0700 000002922 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector Where should I start when running Vocera products over a Ruckus Wireless Network

Compilation of current best practice guides from Ruckus and Vocera.

2021-03-30T02:47:25-0700 2021-03-30T06:00:09-0700 https://support.ruckuswireless.com/articles/000003759 2021-03-26T14:44:32-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4627 knowledge_article_4627 2014-12-08T00:59:32-0800 000003759 Validated (External) Public Sz300;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ300, virtual SmartCell Gateway, SZ100 How to download Access Point support info file from vSZ/SZ? We can only download connected Access Points support info file from vSZ/Z. Procedure to download Access Point support info file from vSZ/SZ. Login to vSZ/SZ, navigate to Access Points >> Access Points >> Select the zone > Select the AP > More > Download Support Log . <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054IR&feoid=00N50000002Cf3M&refid=0EM2J000000vg84"></img> If the Access Point is disconnected from vSZ/SZ or if you are unable to download Access Point support info file for vSZ/SZ we can directly download it from Access Point GUI. Login to the access point>>Maintenance>>Support>>select transfer method: "Save to Local Computer" and click Download: supportinfo.txt

Procedure to download AP support info from vSCG

2021-03-26T14:44:32-0700 2021-03-26T18:00:12-0700 https://support.ruckuswireless.com/articles/000004740 2021-03-26T15:24:07-0700 monthly 0.8 admin,premium knowledge_article_4626 knowledge_article_4626 2015-06-19T01:40:19-0700 000004740 Validated (External) Premium Spot lbs Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, SPoT LBS How do I add additional venues to my vSPoT instance? From vSPoT 2.0 version Multi-venue support is available in single vSPoT instance/server.

Multi-venue support in single vSPoT instance/server.

2021-03-26T15:24:07-0700 2021-03-26T18:00:10-0700 https://support.ruckuswireless.com/articles/000011497 2021-03-26T08:31:59-0700 monthly 0.8 admin,premium knowledge_article_4624 knowledge_article_4624 2021-03-26T08:31:59-0700 000011497 Validated (External) Premium Ruckus network director rnd;Sz300;Scg200;Virtual smartcell gateway;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200) Configuration Configuration, Ruckus Network Director RND, SZ300, SCG200, virtual SmartCell Gateway Can I remove a SZ cluster from Ruckus Network Director without adversly affecting the SZ cluster itself? For the purposes of this KBA, we will be using an example cluster which is vSZ Cluster 4 (3.6.2) as seen in Figure 1 below highlighted in orange Figure 1 <img alt="User-added image" height="258" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3uf&feoid=00N50000002Cf3M&refid=0EM2J0000024Cuo" width="1173"></img> Figure 2 below confirms the AP records for cluster vSZ Cluster 4 (3.6.2). Again, highlighted in orange Figure2 <img alt="User-added image" height="416" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3uf&feoid=00N50000002Cf3M&refid=0EM2J0000024Cuy" width="1172"></img> One final confirmation, Figure 3 below, from the SZ controller showing the APs Online and managed by the controller Figure 3 <img alt="User-added image" height="563" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3uf&feoid=00N50000002Cf3M&refid=0EM2J0000024CvD" width="1179"></img> Removing Cluster from Ruckus Network Director (RND) <ol><li style="margin-left: 32px;">Reference figure 4 below and begin by navigating to Inventory </li><li style="margin-left: 32px;">Select the Clusters tab</li><li style="margin-left: 32px;">Select the cluster to be removed via the checkbox</li><li style="margin-left: 32px;">Select the <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3uf&feoid=00N50000002Cf3M&refid=0EM2J0000024CvI" style="width: 26px; height: 28px;"></img> Delete Cluster icon and you will receive a Delete Cluster confirmation dialogue box as shown in Figure 5</li><li style="margin-left: 32px;">Reference figure 5 below… Check the Delete Aps box so that all AP records are removed from RND</li><li style="margin-left: 32px;">Select the Yes! Delete button to delete both the Cluster and AP records from RND. <ol style="list-style-type: lower-alpha;"><li style="margin-left: 8px;">Please Note… You cannot remove the cluster without first removing the AP records for that cluster.</li></ol> </li></ol> Figure 4 <img alt="User-added image" height="261" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3uf&feoid=00N50000002Cf3M&refid=0EM2J0000024Cvm" width="1179"></img> Figure 5 <img alt="User-added image" height="437" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3uf&feoid=00N50000002Cf3M&refid=0EM2J0000024Cw1" width="1178"></img> Reference Figures 6 and 7 below… You have now successfully removed the cluster and AP records for the selected cluster on RND Figure 6 <img alt="User-added image" height="218" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3uf&feoid=00N50000002Cf3M&refid=0EM2J0000024Cw6" width="1180"></img> Figure 7 <img alt="User-added image" height="419" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3uf&feoid=00N50000002Cf3M&refid=0EM2J0000024CwG" width="1179"></img> Lastly, reference Figure 8 below, confirmation of the APs on the SZ cluster are still Online and managed by the SZ cluster with no adverse affects Figure 8 <img alt="User-added image" height="551" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3uf&feoid=00N50000002Cf3M&refid=0EM2J0000024CwV" width="1140"></img>

How to remove a SZ cluster and access points from RND without affecting the management or registration state of the APs on the SZ cluster

2021-03-26T08:31:59-0700 2021-03-26T12:00:09-0700 https://support.ruckuswireless.com/articles/000001713 2019-06-11T16:31:56-0700 monthly 0.8 admin,premium knowledge_article_244 knowledge_article_244 2013-03-01T09:21:35-0800 000001713 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Troubleshooting steps for RADIUS or AD based issues. Details as follows, <ol><li> Make sure that the ZD is able to reach the Radius or AD server. You can test with pinging the AD or Radius server IP address from the ZD. </li><li> Use the Test Authentication settings in the ZD to make sure that the User name and password which we are using is correct. The result will show Success or Failed. </li><li> Test Authentication option can be found under ZD GUI, configure ==> AAA Servers. </li><li> Also check the Event Viewer ==> System. Here we will get the logs for the user which we are trying to login from the wireless client. </li><li> In the meantime also make sure about the configurations which have done on both ZD and AD or Radius server side. </li><li> Check whether the proper AAA server name is mapped to the SSID configuration on the ZD or not. </li><li> After connecting the wireless client to the specific SSID, Check whether the wireless client is getting the IP address from the proper DHCP pool or not. If the wireless client gets the IP from the proper DHCP pool then there will not be any communication based issues. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.” </li></ol>

How to troubleshoot 802.1x RADIUS authentication on ZD.

2019-06-11T16:31:56-0700 2021-03-26T11:46:45-0700 https://support.ruckuswireless.com/articles/000004433 2021-03-25T15:40:23-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4620 knowledge_article_4620 2015-04-23T14:03:30-0700 000004433 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management;Troubleshooting System Network Management, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can I find a MIB reference guide for SNMP w/ ZD running 9.8 SW or how do I enterpret each MIB? The SNMP reference guide, where the SNMP MIBs are interpreted, can be found referencing the Ruckus support portal: https://support.ruckuswireless.com/software?filter=14#documents The MIB list is modified from SW version to SW version so the list would vary. Make sure that you download the appropriate SNMP reference doc or the one pertaining to the ZD version that you're currently running. Attached you will find an example of a MIB reference document referencing SW version 9.8.

MIB reference request. This can be found in the customer web portal or through this note.

2021-03-25T15:40:23-0700 2021-03-25T18:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PIczCAG?attachment_index=0 2021-03-25T18:00:10-0700 monthly admin,premium,warranty,guest knowledge_article_4620 knowledge_article_4620_attachment_1 ZD_9.8_SNMP_Ref_Guide (1).pdf 319592.0 application/pdf https://support.ruckuswireless.com/articles/000011490 2021-03-25T01:14:00-0700 monthly 0.8 admin,premium knowledge_article_4618 knowledge_article_4618 2021-03-25T01:14:00-0700 000011490 Validated (External) Premium Vsz dataplane Configuration;Troubleshooting Configuration, Troubleshooting, vSZ Dataplane Why vDP fails intermittently but recovers and functions as expected? <ul><li>vDP will have one management IP</li><li>vDP can have one or two data IP; either single interface or access-core-separation</li><li>Management IP and Data IPs need to have their own IP addresses in separate subnets</li><li>vDP management IP and single interface data IP - 2 subnets</li><li>vDP management IP and access-core-separation data IP - 3 subnets</li><li>vDP management IP and data IP addresses are configured during vDP setup process</li><li>vDP management IP address can be modified only through CLI</li><li>vDP data IP addresses can be modified through GUI</li><li>When GUI comes up, under vDP > configure > network > Interface mode, three options are seen; single interface, access and core interfaces and keep original configuration</li></ul> <div style="margin-left: 80px;"><img alt="User-added image" height="160" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3tS&feoid=00N50000002Cf3M&refid=0EM2J00000247yB" width="500"></img></div> <ul><li>Default setting is "keep original configuration" which will retain the management ip address and data ip address configurations done during setup</li><li>If those configurations required override, then "single interface" or "access and core interfaces" can be selected and configured according to the customer requirements</li><li>Once overwritten, IP addresses configured during vDP setup process are complete lost</li></ul> RESOLUTION: <ul><li>Despite the configuration discrepancy as shown below, customer's requirement was single interface for Data IP</li></ul> <div style="margin-left: 80px;"><img alt="User-added image" height="234" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3tS&feoid=00N50000002Cf3M&refid=0EM2J00000247yG" width="500"></img></div> <ul><li>Customer might have accidentally changed it, but did not reveal that</li><li>Transferred Data IP address from "Access and core interfaces" to "Single interface" with ip address configured under access as the only data ip address</li></ul>

vDP failing intermittently which might auto recover anywhere between an hour to 12 hours. Manual reboot will bring up the vDP

2021-03-25T01:14:00-0700 2021-03-25T06:00:09-0700 https://support.ruckuswireless.com/articles/000005869 2021-03-19T00:51:54-0700 monthly 0.8 admin,premium knowledge_article_4616 knowledge_article_4616 2016-06-27T07:02:26-0700 000005869 Validated (External) Premium Sz144;Sz300;Scg200;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Troubleshooting Troubleshooting, SZ144, SZ300, SCG200, SZ100 Why Mesh enabled AP not able to move from one zone to other? - The controller would not allow us to move a root AP from a mesh-enabled zone to another zone. - In that case, as a workaround, we can log in to the AP CLI (SSH) and execute "set state wlan62 down", which will disable the Mesh in the Root Access point. - In the case of multiple AP's, an AP CLI Script can be applied on vSZ. We will have to create the AP CLI Script in a plain *.txt format as mentioned below. fw_version=<AP_Firmware_Version> model=all set state wlan62 down - Upload the script on the vSZ GUI - Administer' tab > Diagnostics > AP_CLI Script. - Once the script is successfully applied, we can move the AP to the other zone.

Not able to move the Mesh enabled AP from one zone to other zone. Error reported 'AP enabled with Mesh SSID'.

2021-03-19T00:51:54-0700 2021-03-19T06:00:08-0700 https://support.ruckuswireless.com/articles/000001605 2021-03-18T23:50:47-0700 monthly 0.8 admin,premium knowledge_article_4614 knowledge_article_4614 2013-02-24T19:44:51-0800 000001605 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How to implement client isolation for Hotspot WLAN in ZD - When we select WLAN type as "Hotspot Service (WISPr)", the parameter wireless isolation disappears from the WLAN configuration page. - If you would like to implement client isolation for a Hotspot WLAN, we will have to configure it on the Hotspot profile. - We would see the option when we navigate to Services & Profiles > Hotspot services > Profile > Authentication. <img alt="User-added image" height="256" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3t8&feoid=00N50000002Cf3M&refid=0EM2J000002470V" width="500"></img>

2021-03-18T23:50:47-0700 2021-03-19T00:00:08-0700 https://support.ruckuswireless.com/articles/000006014 2021-03-18T17:34:06-0700 monthly 0.8 admin,premium knowledge_article_4613 knowledge_article_4613 2016-08-25T15:55:37-0700 000006014 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, virtual SmartCell Gateway, SZ100 How to authenticate the users using Open Directory LDAP service in SZ and vSZ? In SZ's AAA configuration, make sure to add 'cn=users', for 'Admin domain name' as mentioned in the below snapshot. <img alt="User-added image" height="136" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3sj&feoid=00N50000002Cf3M&refid=0EM50000000MnmW" width="500"></img> <img alt="User-added image" height="212" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3sj&feoid=00N50000002Cf3M&refid=0EM50000000Mnml" width="500"></img>

Setting up AAA server as LDAP using Open Directory in SZ and vSZ.

2021-03-18T17:34:06-0700 2021-03-18T18:00:10-0700 https://support.ruckuswireless.com/articles/000006356 2021-03-18T17:48:05-0700 monthly 0.8 admin,premium knowledge_article_4612 knowledge_article_4612 2017-05-02T22:10:00-0700 000006356 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How can we change Web authentication logo? Upload the customized logo on ZD at the below location : ZD GUI >> Wireless LAN >> Web Portal

Customer wanted to change captive portal/Web authentication logo on ZD.

2021-03-18T17:48:05-0700 2021-03-18T18:00:08-0700 https://support.ruckuswireless.com/articles/000007744 2018-05-03T11:24:13-0700 monthly 0.8 admin,premium knowledge_article_3307 knowledge_article_3307 2018-05-02T15:13:14-0700 000007744 Validated (External) Premium Ruckus icx switches Configuration;Security Configuration, Security, Ruckus ICX Switches What will happen when authentication is Rejected by RADIUS or Timeout (with logs and pcap)? 1) When RADIUS reject the user/mac: When the MAC authentication is rejected from RADIUS, that MAC will not be authenticated, and it is put into Restricted VLAN (if the Restricted VLAN has been configured) . Then this MAC will try to re-authenticate every 60 seconds, this is by default. As you can see from the switch log below: 01 days 07h30m49s:N:DOT1X: Port 1/1/2 Mac 50cd.22b2.a511 - MAC authentication failed for MAC 50cd.22b2.a511 as RADIUS server rejected 01 days 07h29m49s:N:DOT1X: Port 1/1/2 Mac 50cd.22b2.a511 - MAC authentication failed for MAC 50cd.22b2.a511 as RADIUS server rejected 01 days 07h28m49s:N:DOT1X: Port 1/1/2 Mac 50cd.22b2.a511 - MAC authentication failed for MAC 50cd.22b2.a511 as RADIUS server rejected 01 days 07h27m49s:N:DOT1X: Port 1/1/2 Mac 50cd.22b2.a511 - MAC authentication failed for MAC 50cd.22b2.a511 as RADIUS server rejected 01 days 07h26m49s:N:DOT1X: Port 1/1/2 Mac 50cd.22b2.a511 - MAC authentication failed for MAC 50cd.22b2.a511 as RADIUS server rejected 01 days 07h25m49s:N:DOT1X: Port 1/1/2 Mac 50cd.22b2.a511 - MAC authentication failed for MAC 50cd.22b2.a511 as RADIUS server rejected 01 days 07h24m49s:N:DOT1X: Port 1/1/2 Mac 50cd.22b2.a511 - MAC authentication failed for MAC 50cd.22b2.a511 as RADIUS server rejected 01 days 07h23m49s:A:MAC Authentication failed for [50cd.22b2.a511 ] on port 1/1/2 (Invalid User) 01 days 07h23m49s:N:MACAUTH: Port 1/1/2 Mac 50cd.22b2.a511 - is moved to Restricted VLAN 01 days 07h23m49s:N:DOT1X: Port 1/1/2 Mac 50cd.22b2.a511 - MAC authentication failed for MAC 50cd.22b2.a511 as RADIUS server rejected 01 days 07h22m51s:I:DOT1X: Port 1/1/2 - mac 50cd.22b2.a511 AuthControlledPortStatus change: unauthorized FCX648SHPOE-ADV Router(config)#sho mac-auth sess all ---------------------------------------------------------------------------- Port MAC IP Vlan Auth ACL Age Addr Addr State ---------------------------------------------------------------------------- 1/1/2 50cd.22b2.a511 N/A 102 No none Ena à not authenticated and put in vlan 102 (102 is restricted vlan) 2) When there is no reply from the RADIUS (the authentication timeout): Every time the re-authentication occurs, the switch sends the access request to the RADIUS and the RADIUS replies with Accept or Reject. However, if the RADIUS does not reply, the switch will try 3 times to authenticate, and if the RADIUS still does not reply, then the switch will timeout the request and put that user/mac into the Critical VLAN - if it was configured. If Critical VLAN is not configured but you have “authentication timeout-action success” configured on the interface, then switch will authenticate that user and put it in the default VLAN. As you can see below from the switch syslog: 01 days 08h50m41s:N:MAC Authentication succeeded for [50cd.22b2.a511 ] on port 1/1/2 01 days 08h50m41s:N:MAC Authentication RADIUS timeout for 50cd.22b2.a511 on port 1/1/2 FCX648SHPOE-ADV Router(config)#sho mac-auth sess all ---------------------------------------------------------------------------- Port MAC IP Vlan Auth ACL Age Addr Addr State ---------------------------------------------------------------------------- 1/1/2 50cd.22b2.a511 N/A 2 Yes none Ena ß Authenticated and put in Vlan 2 (vlan 2 is the default vlan) 3) Changing the re-authentication period to avoid re-authentication every 60 seconds for rejected/timeout MAC: You can change the re-authentication period on the interface by using the following command: FCX648SHPOE-ADV Router(config-if-e1000-1/1/2)# authentication reauth-timeout X For example if you change the reauth-timeout to 300 sec ( min) the re-authentication will happened every 5 min, as you can see below : 01 days 08h09m15s:N:DOT1X: Port 1/1/2 Mac 50cd.22b2.a511 - MAC authentication failed for MAC 50cd.22b2.a511 as RADIUS server rejected 01 days 08h04m15s:N:DOT1X: Port 1/1/2 Mac 50cd.22b2.a511 - MAC authentication failed for MAC 50cd.22b2.a511 as RADIUS server rejected 01 days 07h59m15s:A:MAC Authentication failed for [50cd.22b2.a511 ] on port 1/1/2 (Invalid User) 01 days 07h59m15s:N:MACAUTH: Port 1/1/2 Mac 50cd.22b2.a511 - is moved to Restricted VLAN 01 days 07h59m15s:N:DOT1X: Port 1/1/2 Mac 50cd.22b2.a511 - MAC authentication failed for MAC 50cd.22b2.a511 as RADIUS server rejected

This article describes User authentication, based on RADIUS server communications.

2018-05-03T11:24:13-0700 2021-03-18T07:37:25-0700 http://support.ruckuswireless.com/article_attachments/kA250000000fxTsCAI?attachment_index=0 2021-03-18T07:37:25-0700 monthly admin,premium knowledge_article_3307 knowledge_article_3307_attachment_1 Authentication Rejected or Timeout.pdf 399605.0 application/pdf https://support.ruckuswireless.com/articles/000011481 2021-03-18T01:26:16-0700 monthly 0.8 admin,premium knowledge_article_4611 knowledge_article_4611 2021-03-18T01:26:16-0700 000011481 Validated (External) Premium Sz144;Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SZ144, SZ300, SCG200, virtual SmartCell Gateway, SZ100 How to Disable WLAN-service in SZ Managed APs? We do not have option to disable WLAN service in the AP itself but from SZ command line we can. login as: admin Pre-authentication banner message from server: | ################################ | # Welcome to vSZ # | ################################ End of banner message from server admin@10.177.89.232's password: Last successful login: 2021-03-17 13:03:06 Last successful login from: 10.45.179.61 Failed login attempts since last successful login: 0 Account privilege changes: No Please wait. CLI initializing... Welcome to the Ruckus Virtual SmartZone - High Scale Command Line Interface Version: 5.2.1.0.515 vSZ-H-232> enable Password: ******** vSZ-H-232# config vSZ-H-232(config)# ap 70:CA:97:02:46:D0 vSZ-H-232(config-ap)# no radio 5g wlan-service Do you want to continue to delete (or input 'no' to cancel)? [yes/no] yes Successful operation

Commands to disable WLAN-service in SZ managed APs

2021-03-18T01:26:16-0700 2021-03-18T06:00:09-0700 https://support.ruckuswireless.com/articles/000011480 2021-03-17T02:02:17-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4609 knowledge_article_4609 2021-03-17T02:01:39-0700 000011480 Validated (External) Public Vsz dataplane Known issues and workarounds Known Issues and Workarounds, vSZ Dataplane Is vDP feature changed for handling Don't Fragment packets? As Release note of R5.1.1 explains in "Changed Behavior", an enhancement is added. Before this enhancement, vDP will drop packets with DF flag enabled. After this enhancement, vDP will send ICMP type-3/code-4 packets to a sender so that a sender can reduce packet size or disable DF flag.

vDP R3.6 dropped packets with DF flag enabled, but vDP R5.2.2 did not drop with DF flag enabled

2021-03-17T02:02:17-0700 2021-03-17T06:00:08-0700 https://support.ruckuswireless.com/articles/000007764 2021-03-16T06:44:24-0700 monthly 0.8 admin,premium knowledge_article_4608 knowledge_article_4608 2018-08-29T11:08:35-0700 000007764 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches Neighbor configuration of AS4s To enable AS4s for a neighbor, use the capability and as4 keywords with the neighbor command in the BGP4 configuration context, as the following example for IP address 1.1.1.1 illustrates. device(config-bgp)# neighbor 1.1.1.1 capability as4 enable Syntax: [no] neighbor IPaddress capability as4 enable | disable The no form of the neighbor command with the capability and as4 keywords deletes the neighbor-enable for AS4s. The consequences of using the enable or disable keywords are reflected in the output of the show running configuration command. However, if the neighbor configuration omits an explicit AS4 argument, the show running configuration output will not contain AS4 information. Specifying the local AS number The local autonomous system number (ASN) identifies the autonomous system where the BGP4 device resides. Normally, AS4s are sent only to a device, peer group, or neighbor that is similarly configured for AS4s. Typically, if you try to set up a connection from an AS4-enabled device to a device that processes only two-byte ASNs, the connection fails to come up unless you specify the reserved ASN 23456 as the local ASN to send to the far-end device. To set the local autonomous system number, enter commands such as the following. device(config)# router bgp BGP4: Please configure 'local-as' parameter in order to enable BGP4. device(config-bgp)# local-as 100000 device(config-bgp)# write memory Syntax: [no] local-as num The num parameter specifies a local ASN in the range 1 - 4294967295. No default exists for num . ASNs 64512 - 65534 are the well known private BGP4 autonomous system numbers and are not advertised to the Internet community.

Customer is unable to establish BPG peering when they use an autonomous system greater than 65535

2021-03-16T06:44:24-0700 2021-03-16T12:00:12-0700 http://support.ruckuswireless.com/article_attachments/kA250000000fxWXCAY?attachment_index=0 2021-03-16T12:00:12-0700 monthly admin,premium knowledge_article_4608 knowledge_article_4608_attachment_1 fastiron-08030mb-l3guide.pdf 4686329.0 application/pdf https://support.ruckuswireless.com/articles/000011460 2021-03-16T08:11:17-0700 monthly 0.8 admin,premium knowledge_article_4606 knowledge_article_4606 2021-03-16T08:11:17-0700 000011460 Validated (External) Premium Ruckus cloud wifi Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi How many DPSKs are supported in RUCKUS Cloud per Tenant/account Total limit is 10,000 DPSK per Tenant. This is across all Venues, WLANs, users, etc. These 10,000 can be of group, bound, unbound, etc. Any mix/match variety, just limited to a total of 10,000. The 5,000 limit is only for automatic generation of the DPSKs. We have a scaling limitation for the code however you could do 2 batches of 5,000.

This article briefs about total number DPSKs supported in RUCKUS Cloud

2021-03-16T08:11:17-0700 2021-03-16T12:00:08-0700 https://support.ruckuswireless.com/articles/000004477 2021-03-15T07:18:37-0700 monthly 0.8 admin,premium knowledge_article_4605 knowledge_article_4605 2015-05-01T14:14:57-0700 000004477 Validated (External) Premium Zoneflex indoor System network management;Troubleshooting System Network Management, Troubleshooting, ZoneFlex Indoor Can both the ethernet ports of the AP be connected to the network simultaneously? Both the Ethernet ports on the AP are bridged internally. So, it is recommended not to use both the ports at the same time. Each physical port has a unique MAC (eth0, eth1) but the AP responds using it's logical bridge port (br0). So the AP's IP address (and source MAC address) is shared among the two physical ports of ZD. We do NOT offer any specific binding on the physical interface. The interface used by outgoing traffic is decided by the bridge (MAC address) table content. So, all AP’s outgoing traffic is sent to its (software) bridge first. From there, it decides which physical interface the traffic should be put on based on the destined MAC address Make sure only one port of Access Point is connected to the Switch. Usually, using both Ethernet ports on a Access Point is only permitted if there is no possible path between the ports, if both connections are completely isolated. It is generally discouraged as no real increase in throughput will be achieved.

Connecting both the Ethernet ports of the AP to switch increases the broadcast storm in the switched network.

2021-03-15T07:18:37-0700 2021-03-15T12:00:14-0700 https://support.ruckuswireless.com/articles/000006288 2021-03-15T07:23:05-0700 monthly 0.8 admin,premium knowledge_article_4604 knowledge_article_4604 2017-03-02T19:45:49-0800 000006288 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to configure Guestpass self service with Sponsor Approval ZD1200 Configure the Guest Pass Self-Service as demonstrated over the remote session using 3 steps : -Configure Email server. -Configure Guest service (Enabling guestpass self service with Sponsor Approval) -Configure Guest WLAN and map the configured guest service to the WLAN.

Guestpass self service information for ZD.

2021-03-15T07:23:05-0700 2021-03-15T12:00:13-0700 https://support.ruckuswireless.com/articles/000006218 2021-03-15T07:27:19-0700 monthly 0.8 admin,premium knowledge_article_4603 knowledge_article_4603 2017-02-06T18:25:58-0800 000006218 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 L3-roaming-Ruckus and customer-has-different-subnets-which-are-different-IP-pool-on-each-floor Combining all the IP subnets or else assigning IP address to clients from one single subnet will resolve the issue.

L3 roaming information on Ruckus controllers

2021-03-15T07:27:19-0700 2021-03-15T12:00:11-0700 https://support.ruckuswireless.com/articles/000007707 2021-03-15T07:37:12-0700 monthly 0.8 admin,premium knowledge_article_4602 knowledge_article_4602 2018-10-04T05:46:50-0700 000007707 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches Understanding Bgp fast external fallover mechanism: BGP4 devices rely on KEEPALIVE and UPDATE messages from neighbors to signify that the neighbors are alive. For BGP4 neighbors that are two or more hops away, such messages are the only indication that the BGP4 protocol has concerning the alive state of the neighbors. As a result, if a neighbor becomes non-operational, the device waits until the Hold Time expires or the TCP connection fails before concluding that the neighbor is not operational and closing its BGP4 session and TCP connection with the neighbor. The device waits for the Hold Time to expire before ending the connection to a directly-attached BGP4 neighbor that becomes nonoperational. This command helps to terminate and reset external BGP (EBGP) sessions of a directly adjacent peer if the link to the peer goes down, without waiting for the timer, set by the BGP timers command, to expire. This can improve BGP conversion time, but can also lead to instability in the BGP routing table as a result of a flapping interface. NOTE The fast external failover feature applies only to directly attached EBGP neighbors. The feature does not apply to IBGP neighbors. Examples The following example configures the device to reset the session if a link to an eBGP peer goes down. device# configure terminal device(config)# router bgp device(config-bgp-router)# fast-external-fallover BFD is the other option, however there are some limitations to it on FI platform.

The significance of BGP-fast-external-fallover

2021-03-15T07:37:12-0700 2021-03-15T12:00:09-0700 https://support.ruckuswireless.com/articles/000011342 2021-03-15T08:09:53-0700 monthly 0.8 admin,premium knowledge_article_4600 knowledge_article_4600 2021-03-15T00:55:36-0700 000011342 Validated (External) Premium Icx 7650;RUCKUS ICX 7650 Campus Switches Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ICX 7650 How to change operation speed between 100-Gbps and 40-Gbps on ICX7650 rear-module 3 and how to use it as data or stacking port. -To change the operation mode, use the "rear-module" command to change the speed, then "write mem" and reload. ICX7650-48F Router(config)#rear-module stack-40g set ICX-7650 rear module as 40G stack ports uplink-100g set ICX-7650 rear module as 100G uplink ports uplink-40g set ICX-7650 rear module as 40G uplink ports The following information pertains to Module 3 (rear module) of the Ruckus ICX 7650 switch: • Supports 4 x 40-Gbps stacking or 2 x 100-Gbps stacking (the default). • Supports 2 x 100-Gbps data uplink or 4 x 40-Gbps data uplink in stand-alone mode (Note: The ICX7650-48P supports only 2 x 40-Gbps rear-facing data uplink). • Port speeds can be changed to 40-Gbps or 100-Gbps by using the rear-module command. • ICX 7650 devices can operate in a stack only when Module 3 is in Stacking mode. • Stacking is not available when Module 3 is configured in Uplink mode. For more information, refer to the “ICX 7650 Rear-module Options” topic in the Ruckus FastIron Stacking Configuration Guide. • When Module 3 stacking ports operate in Uplink mode, Module 2 is disabled and no configurations are allowed for Module 2 ports. Ruckus FastIron Stacking Configuration Guide: https://docs.commscope.com/bundle/fastiron-08095-switchstackingguide/page/GUID-90DA84DE-B194-4C2C-AA5B-F04618C57AC4.html

Using ICX7650 rear module (module 3) as stacking port or uplink data port

2021-03-15T08:09:53-0700 2021-03-15T12:00:07-0700 https://support.ruckuswireless.com/articles/000011457 2021-03-15T00:49:55-0700 monthly 0.8 admin,premium knowledge_article_4601 knowledge_article_4601 2021-03-15T00:49:55-0700 000011457 Validated (External) Premium Spot lbs;Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Troubleshooting Troubleshooting, SPoT LBS, SPoT Why does the calibration SPOT APP Android doesn't work? Choose a valid operating system or a valid SmartPhone <img alt="Supported devices" height="197" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3mv&feoid=00N50000002Cf3M&refid=0EM2J00000241Ol" width="500"></img> A second alternative is to use an iPhone and download the calibration app from the Apple iTunes store.

The SPOT calibration process APP is giving a connection error.

2021-03-15T00:49:55-0700 2021-03-15T06:00:21-0700 https://support.ruckuswireless.com/articles/000006277 2021-03-15T01:00:32-0700 monthly 0.8 admin,premium knowledge_article_4599 knowledge_article_4599 2017-02-20T00:06:39-0800 000006277 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Troubleshooting Installation, Troubleshooting, ZoneDirector Why are AP's not joining the ZoneDirector? Thus the issue was resolved by changing the cable connecting the AP.

Why are AP's not joining the ZoneDirector?

2021-03-15T01:00:32-0700 2021-03-15T06:00:18-0700 https://support.ruckuswireless.com/articles/000001386 2021-03-15T01:02:43-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4598 knowledge_article_4598 2013-01-16T07:52:30-0800 000001386 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How can I restrict the number of clients connecting to a WLAN in a ZD managed network? It is possible to restrict the number of clients connecting to each WLAN by using the Max clients option in WLAN – advanced options. The number specified is for each radio. You can enable this option by going to configure --> Wlans --> Advanced options <img alt="User-added image" height="212" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3oX&feoid=00N50000002Cf3M&refid=0EM50000000LF9r" width="500"></img>

How can I restrict the number of clients connecting to a WLAN in a ZD managed network?

2021-03-15T01:02:43-0700 2021-03-15T06:00:16-0700 https://support.ruckuswireless.com/articles/000004903 2021-03-15T03:08:32-0700 monthly 0.8 admin,premium knowledge_article_4597 knowledge_article_4597 2015-07-20T09:09:05-0700 000004903 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Troubleshooting Installation, Troubleshooting, ZoneDirector Does ZoneDirector support third partry LWAPP Access Points ? Ruckus ZD cannot support third party AP's as it use proprietary mechanism to allow AP's to Join. When an AP try to Join ZD it sends following information to the ZD using Discovery message "Type, Version, Model, Radio, MAC, IP". These values are used to check interoperability of the AP with the ZD. If these parameters do no satisfy the Join conditions, AP would fail to Join the ZD. Similarly Ruckus AP's cannot join any third party Controllers.

Query on interoperability between ZD and third Party AP's

2021-03-15T03:08:32-0700 2021-03-15T06:00:15-0700 https://support.ruckuswireless.com/articles/000006368 2021-03-15T03:17:11-0700 monthly 0.8 admin,premium knowledge_article_4596 knowledge_article_4596 2017-05-09T07:29:31-0700 000006368 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway Radius set up on vSCG running on 3.5 for different group attribute

Radius set up on vSCG running on 3.5 for different group attribute

2021-03-15T03:17:11-0700 2021-03-15T06:00:13-0700 https://support.ruckuswireless.com/articles/000004975 2021-03-15T03:24:40-0700 monthly 0.8 admin,premium knowledge_article_4595 knowledge_article_4595 2015-08-04T21:50:27-0700 000004975 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector How to set max client per vap from controller? AP have the ability to limit max client per vap, which is a wlan on a raido of ap. 1. use command remote_ap_cli on ZD to get wlanlist on each AP. For example, now we get wlan "New Name" on ap 2c:e6:cc:35:e4:00's name is wlan2. ruckus(debug)# remote_ap_cli -A "get wlanlist" ---- Command 'rkscli -c "get wlanlist "' executed at 2c:e6:cc:35:e4:00 name status type wlanID radioID bssid ssid -------------------------------------------------------------------------------------------------- wlan0 up AP wlan0 0 2c:e6:cc:35:e4:08 6YXP-1k2-fbwifi-test wlan1 up AP wlan1 0 2c:e6:cc:75:e4:08 6YXP-1k2-wpa2 wlan2 up AP wlan2 0 2c:e6:cc:b5:e4:08 New Name 2. use remote_ap_cli to set max_aid for a wlan on all of the AP, for example, when set max_aid of wlan2 to 1, AP only allow 1 client to associate with that vap, for the second client, will deny. ruckus(debug)# remote_ap_cli -A "set max-aid wlan2 1" ---- Command 'rkscli -c "set max-aid wlan2 1 "' executed at 2c:e6:cc:35:e4:00 OK ---- Command Execution Summary: success: 1 failure: 0 total: 1 remote_ap_cli "-A" ""set" "max-aid" "wlan2" "1"" but to use the remote_ap_cli with option -A we must pay attention as it will set it to all of the AP online Should you require to configure per AP basis, the use option -a Command as below: remote_ap_cli -a <mac address of AP> "set max-aid wlan2 1"

How to set max client per vap from controller

2021-03-15T03:24:40-0700 2021-03-15T06:00:11-0700 https://support.ruckuswireless.com/articles/000001630 2021-03-15T05:52:18-0700 monthly 0.8 admin,premium knowledge_article_4593 knowledge_article_4593 2013-02-24T19:44:40-0800 000001630 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector DPSK not working with Windows 8 and MAC OS 10.6 and above Suggested to upgrade the firmware to 9.5.0.0.156 or later which makes Zero-IT compatible with Windows 8 and MAC OS 10.6 or later and several other operating systems.

DPSK not working with Windows 8 and MAC OS 10.6 and above

2021-03-15T05:52:18-0700 2021-03-15T06:00:07-0700 https://support.ruckuswireless.com/articles/000004539 2021-03-14T12:03:49-0700 monthly 0.8 admin,premium knowledge_article_4592 knowledge_article_4592 2015-05-12T11:40:24-0700 000004539 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector How to map a particular SSID to a selected Access Points on a ZoneDirector? Creating a WLAN Group. 1. Go to Configure > WLANs. 2. In the WLAN Groups section, click Create New. The Create New form appears. 3. In Name, type a descriptive name that you want to assign to this WLAN group. For example, if this WLAN will contain WLANs that are designated for guest users, you can name this as Guest WLAN Group. 4. In Description (optional), type some notes or comments about this group. 5. Under Group Settings, select the check boxes for the WLANs that you want to be part of this WLAN group. 6. In the VLAN override settings, choose whether to override the VLAN configured for each member WLAN. Available options include: • No Change: Click this option if you want the WLAN to keep the same VLAN tag (default: 1). • Tag: Click this option to override the VLAN configured for the WLAN service. 7. Click OK. The Create New form disappears and the WLAN group that you created appears in the table under WLAN Groups. You may now assign this WLAN group to an AP. Assigning a WLAN Group to an AP. 1. Go to Configure > Access Points. 2. In the list of access points, find the MAC address of the AP that you want to assign to a WLAN group, and then click Edit. 3. In WLAN Group, click Override Group Config and select the WLAN group to which you want to assign the AP. Each AP (or radio, on dual radio APs) can only be a member of a single WLAN group. 4. Click OK to save your changes. Creating new AP Group and assigning a WLAN Group to an AP Group. 1. Go to Configure > Access Points. 2. In the Access Point Groups section, click the Create New button. The Create New form appears. 3. Enter a Name and optionally a Description for the new AP group. 4. Modify WLAN Group settings, specify which WLAN group this AP group belongs to. 5. In Members, select the AP (or APs) that you want to move to another AP group, select the target AP group from the menu, and click the Move to button. (To select all APs in the group, click the check box at the top of the column) 6. Click OK to save your changes. Firmware version 9.9.0 User guide link mentioned below. Please refer unit '4' for more information. https://support.ruckuswireless.com/documents/572-zonedirector-9-9-user-guide/download

Map an SSID to selected Access Point on a ZoneDirector.

2021-03-14T12:03:49-0700 2021-03-14T18:00:10-0700 https://support.ruckuswireless.com/articles/000001849 2021-03-14T12:09:47-0700 monthly 0.8 admin,premium knowledge_article_4591 knowledge_article_4591 2013-03-19T11:27:39-0700 000001849 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration Configuration, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway What is Load Balancing? Load Balancing Enabling load balancing can improve WLAN performance by helping to spread the client load between nearby access points so that one AP does not get overloaded while another sits idle. The load balancing feature can be controlled from within the controller's web interface to balance the number of clients per radio on adjacent APs. "Adjacent APs" are determined by controller at startup by measuring the RSSI during channel scans. After startup,the controller uses subsequent scans to update the list of adjacent radios periodically and when a new AP sends its first scan report. When an AP leaves, controller immediately updates the list of adjacent radios and refreshes the client limits at each affected AP. Once controller is aware of which APs are adjacent to each other, it begins managing the client load by sending desired client limits to the APs. These limits are "soft values" that can be exceeded in several scenarios, including: (1) when a client's signal is so weak that it may not be able to support a link with another AP, and (2) when a client's signal is so strong that it really belongs on this AP. The APs maintain these desired client limits and enforce them once they reach the limits by withholding probe responses and authentication responses on any radio that has reached its limit. Key points on load balancing: These rules apply only to client devices; the AP always responds to another AP that is attempting to set up or maintain a mesh network. -> Load balancing does not disassociate clients already connected. -> Load balancing takes action before a client association request, reducing the chance of client misbehavior. -> The process does not require any time-critical interaction between APs and controller. -> Provides control of adjacent AP distance with safeguards against abandoning clients. -> Can be disabled on a per-WLAN basis; for instance, in a voice WLAN, load balancing may not be desired due to voice roaming considerations. -> Background scanning must be enabled for load balancing to work. -> The client decides at the end.

Customer wants to know about Load Balancing.

2021-03-14T12:09:47-0700 2021-03-14T18:00:07-0700 https://support.ruckuswireless.com/articles/000005808 2021-03-14T11:49:25-0700 monthly 0.8 admin,premium knowledge_article_4590 knowledge_article_4590 2016-06-02T05:26:42-0700 000005808 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Configuration;Firmware;Installation;Troubleshooting;Known issues and workarounds Configuration, Firmware, Installation, Troubleshooting, Known Issues and Workarounds, SZ100 Is DHCP Relay feature available in SZ-100 No resolution, as it is design intent.

DHCP Relay feature is removed from SZ-100 starting firmware release 3.2.1 and above

2021-03-14T11:49:25-0700 2021-03-14T12:00:11-0700 https://support.ruckuswireless.com/articles/000002963 2021-03-14T11:55:49-0700 monthly 0.8 admin,premium knowledge_article_4589 knowledge_article_4589 2014-04-25T07:40:47-0700 000002963 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Known issues and workarounds Performance, Known Issues and Workarounds, ZoneDirector What does the Zone Director Performance Graph of Other AP actually represent? It shows the number of AP’s detected via background scanning that do not have the Ruckus IE and are not part of this ZD. From the Fucntional Spec. · Other APs (num_neighbors + num_rogues) Other APs: As we will re-use these codes of background scan. It is necessary that background scan is enabled. The number of other APs is updated by scanning interval. In default, the background scanning runs a scan on each radio every 20 seconds. If there are 13 channels, it will take 13*20=260secs to update the number of other APs. It isn’t possible 60secs. If the feature of background scanning is disabled, other APs will not be showed here.

What does the Zone Director Performance Graph of Other AP actually represent?

2021-03-14T11:55:49-0700 2021-03-14T12:00:09-0700 https://support.ruckuswireless.com/articles/000006011 2020-09-20T22:45:38-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2411 knowledge_article_2411 2016-08-22T17:13:55-0700 000006011 Validated (External) Public Zonedirector;Zoneflex outdoor;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Outdoor, virtual SmartCell Gateway What are the general recommendations for outdoor AP installations when it comes to surge protection? It is recommended for AP outdoor installation to protect the AP as well as the indoor equipment electrical surges. Surges that can reach the internal equipment from the outside, or least common, surges that may originate from inside that may reach the AP. Though one may not be able to fully protect the building/installation site from a full-on/direct lightning strike, there are preventative measures that one can take to protect your indoor/outdoor equipment from indirect lightning hits. These are the recommendations for protection from electrical surges: 1. Surge protection is to be installed at the entrance of the building to protect indoor equipment 2. There surge protector should be grounded a. the ground should be common to all indoor and outdoor equipment i.e. switches / routers / AP / controller / surge protector, etc. b. besides the ground being common, the ground potential should be close to 0 c. it is recommended that an electrician has identified and checked the ground points of your network grounding elements 3. Here is a surge arrestor that we have used in the past for protecting the entrance of the building, Transtector = http://www.transtector.com/products/data-line-surge-protection/1101-959 4. The outdoor AP equipment should be protected with an outdoor surge arrestor as well if the AP does not have an embedded surge protector Here is visual of a typical installation: <img alt="User-added image" height="267" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyBl&feoid=00N50000002Cf3M&refid=0EM50000000MivY" width="500"></img> Also: - notice the drip loop at the entrance of the building. - there should also be a drip loop immediately at the ethernet entrance to the outdoor AP. - the 18awg grounding wire at the grounding pt of the AP

General view of outdoor installation dictates proper grounding, lightning arrestors and surge protectors

2020-09-20T22:45:38-0700 2021-03-12T18:08:31-0800 https://support.ruckuswireless.com/articles/000002294 2021-03-12T07:18:50-0800 monthly 0.8 admin,premium knowledge_article_4588 knowledge_article_4588 2013-10-15T07:15:01-0700 000002294 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector If I have a Device Access Policy for denying all Android devices then how can I permit the access of some designated Androids devices? <div>Device Access Policy takes precedence when compared to the Layer 2 ACLs. So if you have a SSID configured to deny a certain OS type using "Device Access Policy" and also have a "Layer 2 ACL" configured to allow few designated devices running that OS then Device Access Policy will take precedence. Hence, all the devices on that specific OS type will be denied.</div>

What takes Precendence device access policy or Layer 2 ACL?

2021-03-12T07:18:50-0800 2021-03-12T12:00:11-0800 https://support.ruckuswireless.com/articles/000002267 2021-03-12T07:25:51-0800 monthly 0.8 admin,premium knowledge_article_4587 knowledge_article_4587 2013-10-07T16:49:34-0700 000002267 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector How to login to ZD with by using active directory credentials First we need to need to create a AAA server by registering the active directory server with the ZD Login to ZD-->Configure-->AAA server-->Create new After creating the AAA server we need to map to Administator/password. Administrator-->Preferences-->Administrator/password-->Authenticate with Auth server. NOTE:This will allow all Active directory users under Domain users group to access the ZD.

Description on how to let users that need to login to the ZD authenticate via the Active Directory

2021-03-12T07:25:51-0800 2021-03-12T12:00:09-0800 https://support.ruckuswireless.com/articles/000006257 2021-03-11T00:08:08-0800 monthly 0.8 admin,premium knowledge_article_4586 knowledge_article_4586 2017-02-08T11:11:32-0800 000006257 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Insight Why SCI is not polling any data from vSZ even after adding the vSZ information in the SCI Verify that the user credentials for SZ given in the SCI have access to "Restful API" and "SCI Restful API" <img alt="User-added image" height="286" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3mR&feoid=00N50000002Cf3M&refid=0EM50000000g3SC" width="500"></img> <img alt="User-added image" height="121" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3mR&feoid=00N50000002Cf3M&refid=0EM50000000g3SH" width="500"></img>

2021-03-11T00:08:08-0800 2021-03-11T06:00:09-0800 https://support.ruckuswireless.com/articles/000001429 2021-03-11T00:36:23-0800 monthly 0.8 admin,premium knowledge_article_4585 knowledge_article_4585 2013-01-18T09:06:23-0800 000001429 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What are the recommended configuration settings in ZD for VOIP devices? It is recommended to turn Tunnel mode on for SSID/WLAN dedicated to VoIP clients. All client traffic that connects to that SSID will be sent through a proprietary LWAPP tunnel (L3 type) to the Zone Director, egressing on the VLAN/Subnet where the Zone Director is connected. Make sure that Ethernet port the ZD is connected to is setup properly, most likely it will need to be setup as a trunk port with VLAN tag for the VOIP WLAN/SSID, so that the VoIP traffic will egress and is tagged at the Zone Director port can reach the DHCP and other network resources. If possible use static IP on the client. Using tunnel mode puts a bigger load on the Zone Director CPU and should only be used when there is no other option. This is ideal for low bandwidth but low latency application such as VoIP and scanners that requires consistent network flow. By tunneling these traffic the bridging table does not need to be update every time a client roams from one AP to another, reducing the re-connection time. NOTE: Tunnel mode does not permit using Bandwidth control. When tunnel mode is enabled on a WLAN, multicast video packets are blocked on that WLAN. Multicast voice packets, however, are allowed. Below is procedure to configure it Go to WLAN under 'Configure' and under then ' Advanced Options ' look for "Tunnel Mode" , check the option and you had configured it You can use this WLAN for the VoIP phones. More information can be found in Zone Director's user guide.

What is the recommended ZD configuration when using VOIP devices?

2021-03-11T00:36:23-0800 2021-03-11T06:00:07-0800 https://support.ruckuswireless.com/articles/000006274 2021-03-10T18:30:30-0800 monthly 0.8 admin,premium knowledge_article_4583 knowledge_article_4583 2017-02-16T06:20:20-0800 000006274 Validated (External) Premium Ruckus icx switches System network management System Network Management, Ruckus ICX Switches Could I know the MAC addresses of my devices using only their serial numbers We do not have that information. We cannot find out a MAC address using a serial number

2021-03-10T18:30:30-0800 2021-03-11T00:00:18-0800 https://support.ruckuswireless.com/articles/000007889 2021-03-10T18:37:26-0800 monthly 0.8 admin,premium knowledge_article_4582 knowledge_article_4582 2018-06-05T12:54:53-0700 000007889 Validated (External) Premium Icx 7450;RUCKUS ICX 7450 Campus Switches Configuration Configuration, ICX 7450 Can ICX switch pass VTP traffic? This is expected behaviors on Brocade as we don't' support VTP, so we just drop the vtp bpdu similar for a Cisco switch with no VTP configured, it will just drop the frame as well. VTP is a proprietary protocol of Cisco, and will work only with Cisco devices. Our solution for that is GVRP, and is standard

Customer is connecting a couple of Cisco switches to our ICX 7450. VTP traffic is being blocked.

2021-03-10T18:37:26-0800 2021-03-11T00:00:16-0800 https://support.ruckuswireless.com/articles/000004557 2021-03-10T19:02:38-0800 monthly 0.8 admin,premium knowledge_article_4581 knowledge_article_4581 2015-05-13T18:31:23-0700 000004557 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway How to set Static route for SCG Defining a Static Route in Control Plane We can add a new static route in any of the Management, Control and the Cluster interfaces as below. Configuration-> Cluster Planes-> Control Planes-> choose the planes of the cluster-> static routes-> create new-> put the network address/subnet mask/gateway/interface/metric into the check box->save-> apply <img alt="User-added image" height="286" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3m2&feoid=00N50000002Cf3M&refid=0EM50000000Ljjm" width="500"></img> Defining a static route in Data Plane We can define a static route in Data Plane as below: Configuration-> Cluster Planes-> Data Planes-> choose the planes of the cluster-> static routes-> create new-> put the network address/subnet mask/gateway into the check box->save-> apply <img alt="User-added image" height="287" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3m2&feoid=00N50000002Cf3M&refid=0EM50000000Ljjr" width="500"></img>

Ruckus SmartCell Gateway has both Data plane and control plane for routing configuration. This will tell how to set route in both control and Data plane

2021-03-10T19:02:38-0800 2021-03-11T00:00:13-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PIoICAW?attachment_index=0 2021-03-11T00:00:13-0800 monthly admin,premium knowledge_article_4581 knowledge_article_4581_attachment_1 KBA_Static.docx 751324.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000003848 2021-03-10T22:58:58-0800 monthly 0.8 admin,premium knowledge_article_4580 knowledge_article_4580 2015-01-06T15:12:46-0800 000003848 Validated (External) Premium Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SPoT Why are my APs have disconnected from SPoT server?

SPoT: APs have disconnected from SPoT

2021-03-10T22:58:58-0800 2021-03-11T00:00:12-0800 https://support.ruckuswireless.com/articles/000006468 2021-03-10T23:08:11-0800 monthly 0.8 admin,premium knowledge_article_4579 knowledge_article_4579 2017-10-09T06:04:59-0700 000006468 Validated (External) Premium Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds Solarwinds not collecting SNMP traffic from SZ-100 controller, how to proceed? In this scenario your only option would be to create a Universal device poller for the OID, this has to be done manually and then assigned (this the customer needs to do in the SolarWinds) Refer below link for details on how to create a Universal Device Poller on SolarWinds. https://support.solarwinds.com/Success_Center/Network_Performance_Monitor_(NPM)/Create_a_Universal_Device_Poller_(UnDP)

Solarwinds not collecting SNMP traffic from SZ-100 controller, how to proceed

2021-03-10T23:08:11-0800 2021-03-11T00:00:10-0800 https://support.ruckuswireless.com/articles/000007901 2021-03-10T23:48:26-0800 monthly 0.8 admin,premium knowledge_article_4578 knowledge_article_4578 2018-06-07T16:56:05-0700 000007901 Validated (External) Premium Smartcell gateway;Zonedirector 5000;SmartCell Gateway 200 (SCG200);ZoneDirector 5000 Configuration;Installation Configuration, Installation, SmartCell Gateway, ZoneDirector 5000 What Ethernet SFP Optics are compatible with Ruckus ZD, SmartZone, ICX switches, and AP products? Ruckus QA has tested and verified compatibility with the Ethernet Tranceivers listed in the product data sheets, for Ruckus ICX switches and AP products: https://ruckus-www.s3.amazonaws.com/pdf/datasheets/ds-ethernet-optics-family.pdf --------------------------- For SmartZone, Ruckus QA has tested and verified compatibility with 1/10G SFP+ SR Transceiver, part number = 902-0190-0000 or 902-0190-0001. Product Datasheets include the part number for this accessory. Ie, by clicking Home>>Products>>System Management and Control>>SmartZone>>SmartZone 300 from the Corp pages to get to the product page. <a href="https://www.ruckuswireless.com/products/system-management-control/smartzone/smartzone-300" target="_blank">https://www.ruckuswireless.com/products/system-management-control/smartzone/smartzone-300</a> Under the SZ-300 image is a box for Datasheet. It has one part number for 1/10G SFP+ SR Transceiver = 902-0190-0001. <img alt="User-added image" height="360" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3lO&feoid=00N50000002Cf3M&refid=0EM50000000lK47" style="height: 559px; width: 655px;" width="500"></img> Under the SCG200 datasheet, this part is 902-0190-0000. <img alt="User-added image" height="361" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3lO&feoid=00N50000002Cf3M&refid=0EM50000000lK4C" style="height: 479px; width: 654px;" width="500"></img> And the same for SZ-100, its 902-0190-0000 <img alt="User-added image" height="203" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3lO&feoid=00N50000002Cf3M&refid=0EM50000000lK4H" style="height: 330px; width: 645px;" width="500"></img>

Only the 1/10G SFP+ SR Transceiver on Ruckus price sheet has been tested by our QA on Ruckus SZ appliances. Only the 100Mbe / 1GigE / 10GigE / 40GigE / 100GigE tranceivers on Ruckus price sheet have been tested on ICX switches and AP products.

2021-03-10T23:48:26-0800 2021-03-11T00:00:08-0800 https://support.ruckuswireless.com/articles/000001855 2021-03-10T07:48:36-0800 monthly 0.8 admin,premium knowledge_article_4577 knowledge_article_4577 2013-03-19T11:27:39-0700 000001855 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Mediaflex;Smartcell gateway;Smartcell ap;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;MediaFlex 2501;MediaFlex 2900;MediaFlex 2811;MediaFlex 5811;MediaFlex 7811;MediaFlex 7211;SmartCell Gateway 200 (SCG200) Performance Performance, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, MediaFlex, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway How does Speed-Flex verify wireless client speed and packet handling and Access Point to Controller throughput. Functional Information for SpeedFlex: SpeedFlex sends multiple bursts of UDP packets to the target (in your case this is an AP). Let us say "X" is the number of packets sent in each burst. For each of these bursts, receiver measures: a. Number of packets received (let us call this "R"); b. Amount of time it took to receive the packet burst. These two values will be used to compute the data rate and packet loss. For example, loss percentage (L) can be calculated over a period of time using (L/X)*100% By default, ZAP sends out 50 UDP packets in each burst. Possible troubleshooting when the test result show high packet loss between ZD/AP: > It is quite possible that the receiver is not capable of handling such bursts resulting in a packet loss. > Check the port config for the switch where AP or ZD connects and make sure they are kept in full duplex mode. > Run the test for multiple times to understand if the issue was abrupt due to switch issue. In case of issue persist; check the switch CPU utilization, firmware upgrade etc to ensure the switch is healthy and free of problem. > To take narrow dip, run TCP test like continuous ping from wired the PC behind AP to ZD. If you see no packet drop, then check the few things on switch port where AP and ZD connects: - ACL which can restrict the packet burst size - check the port buffer size and increase if possible We run Speed Flex between AP/ZD to check the wired connection and you may run any other test for the same purpose.

When you run a speed flex between ZD/AP; and you encounter any drop in packets. This details will give you a start to look at the problem.

2021-03-10T07:48:36-0800 2021-03-10T18:00:08-0800 https://support.ruckuswireless.com/articles/000004597 2021-03-10T02:13:33-0800 monthly 0.8 admin,premium knowledge_article_4575 knowledge_article_4575 2015-05-23T04:19:21-0700 000004597 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;Troubleshooting Installation, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway What is the possible output from the following OID RUCKUS-ROOT-MIB::ruckusObjects.3.2.1.1.2.2.1.16 The possible values for that OID "RUCKUS-ROOT-MIB::ruckusObjects.3.2.1.1.2.2.1.16" are "Discovery", "Connect" ,"Rebooting", "Disconnect" and "Provisioned?". The full list of SNMP & MIB definitions can be found at https://jira-wiki.ruckuswireless.com/display/Gen/SCG+SNMP+MIB+Definition

2021-03-10T02:13:33-0800 2021-03-10T06:00:12-0800 https://support.ruckuswireless.com/articles/000003448 2021-03-10T02:40:29-0800 monthly 0.8 admin,premium knowledge_article_4574 knowledge_article_4574 2014-09-25T10:58:35-0700 000003448 Validated (External) Premium Virtual smartcell gateway Performance;Configuration;Installation;Troubleshooting Performance, Configuration, Installation, Troubleshooting, virtual SmartCell Gateway Are the vSZ backup configuration reverse compatible between 3-interface to a single interface and vice versa? Are the vSZ backup configuration reverse compatible between 3-interface to a single interface and vice versa? The answer is no. This is also not a supported way of restoring the configuration. However, the vSZ allows you to proceed without any warning. Some random issues have occurred from testing such as kernel panic, low memory and etc. Please reset the vSZ to factory default and start the configuration from the ground up.

Are the vSZ backup configuration reverse compatible between 3-interface to a single interface and vice versa?

2021-03-10T02:40:29-0800 2021-03-10T06:00:10-0800 https://support.ruckuswireless.com/articles/000004171 2021-03-10T02:44:37-0800 monthly 0.8 admin,premium knowledge_article_4573 knowledge_article_4573 2015-03-12T10:22:51-0700 000004171 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;System network management;Troubleshooting Performance, System Network Management, Troubleshooting, ZoneDirector Why my ZD dashboard widget do not show the configured AP groups? Possibly during the importing process of the .bak file, a MAC address from one of the AP group return with 00:00:00:00:00:00 entry which lead to the problem. By deleting this MAC entry, resolved this issue.

2021-03-10T02:44:37-0800 2021-03-10T06:00:07-0800 https://support.ruckuswireless.com/articles/000002198 2021-03-09T23:29:27-0800 monthly 0.8 admin,premium knowledge_article_4572 knowledge_article_4572 2013-08-20T18:03:41-0700 000002198 Validated (External) Premium Zonedirector;Zoneflex 7962;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, ZoneDirector, ZoneFlex 7962 Why wont my chromebook work on a 7762 The fix has been applied to 9.6.1.0.15

Chromebooks wont associate to 7762 when 2.4 and 5 Ghz radios are enabled

2021-03-09T23:29:27-0800 2021-03-10T00:00:12-0800 https://support.ruckuswireless.com/articles/000006346 2021-03-09T23:33:24-0800 monthly 0.8 admin,premium knowledge_article_4571 knowledge_article_4571 2017-04-20T08:03:38-0700 000006346 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Troubleshooting Performance, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor Mesh nodes don't see each other, only see root node why? You can eliminate Hidden nodes by running a command on each AP that is NOT seen by other in its Tree (a Mesh Tree are all AP’s connected to the same ROOT and on the same channel sharing bandwidth of that channel). This command can be run on each AP’s CLI: set rts-thr wlan15 100 This sets the RTS threshold to 100 for the MESH uplink interface. All packets sent by a MESH AP greater then 100 will fist send an RTS to the ROOT, who sends a CTS to the other MESH AP’s reserving the media for the communication. The fine-tooning way to fix this is only to turn it on on the AP’s that are not being seen by all the others. Alternativly we can turn it on for all MESH AP’s regardless by running the universal command from the Zone Director CLI: Welcome to the Ruckus Wireless ZoneDirector 1000 Command Line Interface ruckus> en ruckus# debug ruckus(debug)# remote_ap_cli -A "set rts-thr wlan15 100" ---- Command 'rkscli -c "set rts-thr wlan15 100 "' executed at 04:4f:aa:35:4c:60 ---- Command 'rkscli -c "set rts-thr wlan15 100 "' executed at 74:91:1a:26:8a:60 ---- Command Execution Summary: success: 2 failure: 0 total: 2 remote_ap_cli -A "set rts-thr wlan15 100" ruckus(debug)# remote_ap_cli -A "get rts-thr wlan15" ---- Command 'rkscli -c "get rts-thr wlan15 "' executed at 04:4f:aa:35:4c:60 wlan15 RTS Threshold: 100 Bytes ---- Command 'rkscli -c "get rts-thr wlan15 "' executed at 74:91:1a:26:8a:60 wlan15 RTS Threshold: 100 Bytes ---- Command Execution Summary: success: 2 failure: 0 total: 2 remote_ap_cli -A "get rts-thr wlan15" ruckus(debug)#

Mesh nodes don't see each other, only see root node why?

2021-03-09T23:33:24-0800 2021-03-10T00:00:10-0800 https://support.ruckuswireless.com/articles/000003357 2021-03-09T23:35:45-0800 monthly 0.8 admin,premium knowledge_article_4570 knowledge_article_4570 2014-09-04T14:03:52-0700 000003357 Validated (External) Premium Virtual smartcell gateway Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, virtual SmartCell Gateway How to increase RAM on VM Guest OS vSCG instance You can increase the RAM of the VM Guest OS by Powering OFF your instance then go to Edit Settings. If this is a live deployment keep in mind that it will possibly drop existing APs and Clients. Power OFF Guest OS <img alt="User-added image" height="266" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3ka&feoid=00N50000002Cf3M&refid=0EM50000000LYPA" width="500"></img> Edit settings for Guest OS <img alt="User-added image" height="267" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3ka&feoid=00N50000002Cf3M&refid=0EM50000000LYPF" width="500"></img>

How to increase RAM on VM Guest OS vSCG instance

2021-03-09T23:35:45-0800 2021-03-10T00:00:08-0800 https://support.ruckuswireless.com/articles/000006390 2021-03-09T06:22:44-0800 monthly 0.8 admin,premium knowledge_article_4568 knowledge_article_4568 2017-06-09T06:35:54-0700 000006390 Validated (External) Premium Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SPoT Why am I not able to login to the webgui of vSPOT After 3.3 firmware release for vSPOT, Admin dashboard web application is secured with HTTPS using self-signed SSL certificate. Also, Admin dashboard URL access port is changed from 8443 to standard HTTPS port 443. Asked customer to connect to correct port which resolve the issue. https://support.ruckuswireless.com/documents/1287-spot-4-3-0-mr3-and-vspot-3-3-0-release-notesEnhancements

Unable to login to the webgui of the vSPOT

2021-03-09T06:22:44-0800 2021-03-09T12:00:17-0800 https://support.ruckuswireless.com/articles/000001486 2021-03-09T06:50:48-0800 monthly 0.8 admin,premium knowledge_article_4566 knowledge_article_4566 2013-01-22T13:40:37-0800 000001486 Validated (External) Premium Flexmaster umm Configuration Configuration, FlexMaster UMM How to point the AP to FlexMaster? 1. Go to Administration > Management. 2. Under TR-069/SNMP Management Choice, click Auto. 3. In FlexMaster Server URL, type the URL of the FlexMaster server. 4. Toggle the Contact FlexMaster every drop-down list to select how frequently the device will check the FlexMaster server for any pending configuration changes available for that ZoneFlex unit. On the FlexMaster side, this field is referred to as the Periodic Inform Interval. 5. Click Update Settings to save your changes. After the AP registers with FlexMaster, this Administration > Management page will show the communication status between the AP and FlexMaster. Note: Your ZoneFlex device is required to “call home” to register with your FlexMaster; FlexMaster does not initiate initial contact. To register successfully with FlexMaster, your ZoneFlex device must know the FlexMaster server’s URL, thus entered on the device. You will need TCP ports 80 and 443 between APs and FlexMaster when traversing Layer 3/firewall boundaries.

How to get the AP to contact FlexMaster.

2021-03-09T06:50:48-0800 2021-03-09T12:00:13-0800 https://support.ruckuswireless.com/articles/000003765 2021-03-09T07:01:36-0800 monthly 0.8 admin knowledge_article_4565 knowledge_article_4565 2015-05-14T23:37:05-0700 000003765 Validated (External) Internal Zoneflex indoor;Zoneflex outdoor Troubleshooting Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor How can I verify from AP it can connect to the SCG/vSZ/SZ See the troubleshooting part for information.

Commands for verifying CP and DP connections from APs via the SCG/vSZ/SZ CLI. This method will work regardless of AP reach-ability via SSH.

2021-03-09T07:01:36-0800 2021-03-09T12:00:11-0800 https://support.ruckuswireless.com/articles/000002311 2021-03-09T09:46:03-0800 monthly 0.8 admin,premium knowledge_article_4564 knowledge_article_4564 2013-10-22T17:11:50-0700 000002311 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Why clients need to reauthenticate even after having high grace period set in the ZD? <div> <div>Clients are sending Deauth/Disassociate Frames to the APs is why they would be asked to reauthenticate often even when the Grace Period is set very high. There can be various reasons for the clients sending a Deauth/Dissociation to the AP so the APs will ask them to reauthenticate. See below, client with MAC address: 54:26:96:3a:55:ed is ending Deauth frame to the AP.</div> </div> <div> </div> <div>Oct 10 18:35:28 NYC-WAP-1 daemon.warn Eved:</div> <div>STA-DISASSOC-REASON,nimac=54:26:96:3a:55:ed,func=ieee80211_input,line=1690,hint=received</div> <div>IEEE80211_FC0_SUBTYPE_DEAUTH,rx_rssi=25,ack_rssi=0,reason=0,freq=5785,chan=157,stats=(1,157,2,326)</div> <div> </div> <div>Oct 10 18:55:33 NYC-WAP-1 daemon.warn Eved:</div> <div>STA-DISASSOC-REASON,nimac=54:26:96:3a:55:ed,func=ieee80211_input,line=1690,hint=received</div> <div>IEEE80211_FC0_SUBTYPE_DEAUTH,rx_rssi=25,ack_rssi=0,reason=0,freq=5785,chan=157,stats=(2,292,2,326) You may increase the "Inactivity Timeout" to the maximum (500) and that might help. However, increasing Inactivity Timeout will not prevent clients from being asked to reauthenticate if they are sending Deauthentication frames to APs.</div>

2021-03-09T09:46:03-0800 2021-03-09T12:00:09-0800 https://support.ruckuswireless.com/articles/000001722 2021-03-09T01:34:02-0800 monthly 0.8 admin,premium knowledge_article_4562 knowledge_article_4562 2013-03-04T14:29:07-0800 000001722 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector How to make sure the clients connecting through 802.1x EAP uses only the MSCHAPV2 authentication method? In order to make sure the connecting client uses only MSCHAPv2 for authentication, make sure you select only the MSCHAPV2 option in radius policies in server. Please Note: if the connecting client is not compatible with MSCHAPv2 then it will not get authenticated

How to make sure the clients connecting through 802.1x EAP use only the MSCHAPV2 authentication method, What configurations need to be done ?

2021-03-09T01:34:02-0800 2021-03-09T06:00:29-0800 https://support.ruckuswireless.com/articles/000004982 2021-03-09T01:39:30-0800 monthly 0.8 admin,premium knowledge_article_4561 knowledge_article_4561 2015-08-20T03:21:30-0700 000004982 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, SmartCell Gateway Why I am getting error "Maximal CLI connection count (2) is reached"? The controller cannot allow more than two simultaneous SSH connections. When we attempt third connection it gives an error "Maximal CLI connection count (2) is reached". <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3iP&feoid=00N50000002Cf3M&refid=0EM50000000LpzM"></img> This is design intent.

Why I am getting error "Maximal CLI connection count (2) is reached"?

2021-03-09T01:39:30-0800 2021-03-09T06:00:27-0800 https://support.ruckuswireless.com/articles/000001385 2021-03-09T02:08:00-0800 monthly 0.8 admin,premium knowledge_article_4560 knowledge_article_4560 2013-01-16T07:52:50-0800 000001385 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector Can I assign a public IP address for the ZD to access it over the internet If you are going to access the ZD from internet then you can assign a public IP address as management interface IP address but you will need to put a firewall in front of the ZoneDirector as it doesn't have one build in. The other option is to give the ZD a private IP address and then map this to IP to public IP on your router/firewall. If you are going to access the ZD's internally then only private IP can be used.

Can I assign a public IP address for the ZD to access it over the internet ?

2021-03-09T02:08:00-0800 2021-03-09T06:00:26-0800 https://support.ruckuswireless.com/articles/000003641 2021-03-09T03:09:03-0800 monthly 0.8 admin,premium knowledge_article_4559 knowledge_article_4559 2015-05-12T19:30:55-0700 000003641 Validated (External) Premium Scg200;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting Performance, Troubleshooting, SCG200, virtual SmartCell Gateway Alarm and Event numbers overlap. Trap flow has changed between versions 2.1 to 2.5. in 2.1. The trap flow is event->alarm->trap. So we use alarm code as the code ID in 2.5. The flow is changed to event->trap, Se we use event code as the code ID

2021-03-09T03:09:03-0800 2021-03-09T06:00:24-0800 https://support.ruckuswireless.com/articles/000004527 2021-03-09T03:14:35-0800 monthly 0.8 admin,premium knowledge_article_4558 knowledge_article_4558 2015-05-07T10:14:50-0700 000004527 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation Configuration, Firmware, Installation, SmartCell Gateway, virtual SmartCell Gateway What is the difference between KVM qcow2, ova and ximg image for vSZ and SZ platform >> .ova image is for creating a new vSZ-H or vSZ-E or vSZ-D instance within vmWare. >> KVM qcow2 image is for creating vSZ-H or vSZ-E or vSZ-D instance on Linux systems using KVM. >> .ximg is for updating an existing vSZ-H, or vSZ-E, or vSZ-D, or SZ100 / SZ144 / SZ300 instance.

What are the differences between qcow2, ova and ximg files on the support site.

2021-03-09T03:14:35-0800 2021-03-09T06:00:23-0800 https://support.ruckuswireless.com/articles/000001687 2021-03-09T04:17:52-0800 monthly 0.8 admin,premium knowledge_article_4556 knowledge_article_4556 2013-02-28T17:21:05-0800 000001687 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Why an AP chooses the same bad channel when background scanning is enabled ChannelFly and Smart select: ChannelFly will analyse all the channels and there is no rule that it has to select only the non-overlapping channels in 2.4 Ghz (1,6 or 11). It will scan all the channel and select any of the available channels (1-14) depending on the country code. Channelfly will also detect non-wifi interference. It works based on the best percentage of acks it receives on a particular channel. Some benefits: • Leverages patented principles from BeamFlex™ to learn and select the best RF channel • Uses live channel activity to learn what channels will yield the most throughput • Assesses true channel capacity, not subjective noise and traffic measurements • Evaluates all channels: 2.4 GHz access and 5 GHz backhaul • Smooth client transitions using 802.11h • System constantly determines proper channel; no configuration or monitoring necessary • Fast reaction (in seconds) to significant drop in throughput • Significant capacity improvement observed in congested environments(25 -100%) Example: If there is more interference (either from wifi or non-wifi) we see packets drop and we see more retries. We retry the packets only when we do not receive ACKs. So it sends some amount of the packets on all the channels and check what the retransmit rate and ACKs. Smart Select Or Background scanning: Smart select will only select the non-overlapping channels (1,6 or 11). It takes channel decision based on the becaons it receives from the other APs, as the non-wifi devices cannot send the beacons so it will not detect the non-wifi interference.

Explaining on why AP will use all channels when background scanning is enabled.

2021-03-09T04:17:52-0800 2021-03-09T06:00:19-0800 https://support.ruckuswireless.com/articles/000001602 2021-03-09T04:35:50-0800 monthly 0.8 admin,premium knowledge_article_4555 knowledge_article_4555 2013-02-24T19:45:00-0800 000001602 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why is the AP stuck in provisioning loop? The AP's in the remote location were stuck in a Provisioning Loop, there were provisioning and disconnecting repeatedly. Customer Network Setup: -- The ZD is at Site A and had AP's connected to it locally (same site) . The ZD and AP's were on Management VLAN 36 , they were all connected and working as expected. -- The Site B office is on a different subnet and has a Management VLAN 41. The sites were connected using VPN . -- Connectivity present between the Site A and Site B, both sites are pingable from each other. -- Individual DHCP servers at both locations with Option 43 enabled. Looking through the ZD noticed that under AP's Global Settings, the AP's Management VLAN ID was set as 36. The issue with this is when the AP's at the remote site connect and the ZD provisions them, the same information is pushed into them causing the ZD to disconnect repeatedly. Changed the AP Management VLAN ID to " KEEP AP"s SETTINGS". We select this setting to keep the AP's already connected at the local site (SITE A) to retain their previous settings. Delete the remote AP's information from the ZD and perform a Factory Default on the units. Connect the AP to an access port for VLAN 41, the AP will be able to receive the IP address of the ZD from the DHCP server using Option 43, will provision and connect. Now we will have to place the AP under Management VLAN 41 and also allow other VLAN's to pass through. For this , SSH into the AP and set the management VLAN using the command - set mgmt-vlan <vlan-id> . You have to reboot the AP once this is done, a physical reboot is recommended. Once the AP reboot's connect the device to TRUNK PORT with VLAN 41 TAGGED. This will place the AP's in Mgmt VLAN 41, and also allow the other allowed VLAN traffic. All the best!

Connecting an AP from a remote location and placing the AP on a different Management VLAN than what the ZD is on. The AP discovers the ZD and is stuck in a provisioning loop.

2021-03-09T04:35:50-0800 2021-03-09T06:00:17-0800 https://support.ruckuswireless.com/articles/000004973 2021-03-09T05:06:19-0800 monthly 0.8 admin,premium knowledge_article_4554 knowledge_article_4554 2015-08-04T12:44:40-0700 000004973 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Security;Known issues and workarounds Configuration, Installation, Security, Known Issues and Workarounds, ZoneDirector Why do I get the error "you entered an invalid csr please try again" when I copy the CSR generated by the the ZD Change the key size on the ZD to 2048 from 1024. <img alt="User-added image" height="281" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3jD&feoid=00N50000002Cf3M&refid=0EM50000000LpBM" width="500"></img> Warning: The ZoneDirector will be rebooted after re-generating a new private key ! Once the Zone Director reboots you can generate the CSR file and upload it to the public CA website. This time it will be generated with key size of 2048 instead of 1024.

When uploading the CSR file generated from the ZD on to public CA websites like GoDaddy.com, you get this error which says the CSR file is invalid

2021-03-09T05:06:19-0800 2021-03-09T06:00:15-0800 https://support.ruckuswireless.com/articles/000003706 2021-03-09T05:10:43-0800 monthly 0.8 admin,premium knowledge_article_4553 knowledge_article_4553 2014-11-24T06:46:48-0800 000003706 Validated (External) Premium Scg200;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SCG200 How do I reset an SCG-200 to factory defaults Option 1 – SCG CLI Command SSH or use console into SCG, and issue the set-factory command Note: there is a console connection in front and in back. This is a single console connection with two physical ports only one can be used at a time. <img alt="User-added image" height="309" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3jI&feoid=00N50000002Cf3M&refid=0EM50000000LbS8" width="500"></img> Option 2 – Press NMI Button If cannot login into SCG via SSH or console, use the following steps: <div style="margin-left: .38in; text-align: left;">1)push the front panel NMI button.(L) </div> <div style="margin-left: .38in; text-align: left;">2)wait for reboot</div> <div style="margin-left: .38in; text-align: left;">3)use default username/password to login (admin/admin) then re-run the setup wizard. </div> Note: Optionally, you may need to remove front panel cover to reach NMI button <img alt="SCG-200 Factory Default using nmi button on front bezel." src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3jI&feoid=00N50000002Cf3M&refid=0EM50000000LbS3"></img>

Resetting SCG-200 appliance to Factory Defaults

2021-03-09T05:10:43-0800 2021-03-09T06:00:14-0800 https://support.ruckuswireless.com/articles/000004141 2021-03-09T05:26:26-0800 monthly 0.8 admin,premium knowledge_article_4552 knowledge_article_4552 2015-03-06T11:49:00-0800 000004141 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor How to run AP CLI commands from SCG/vSZ/SZ1xx/SZ300 running Smartzone OS? SCG – AP CLI SCRIPT Creation and Exection Today, the Ruckus APCLI supports a number of configuration options but they are not managed by the SCG AP configuration infrastructure. This procedure provides a way for the customer to load a script containing a list of APCLI "set" (configuration) commands for an AP-zone and have them apply automatically for every AP in that zone. ACS saves customer the overhead of applying the configurations manually via remote CLI as they replace APs and/or deploy additional APs in an AP-zone. The scripts file including management file as below: <h3>1.1.1 AP Firmware Version</h3> AP Firmware Version=x.x.x.x.x where x is an integer. This field must be defined and permits only APs with firmware version >= defined script AP Firmware Version to execute the script. This helps avoid script/syntax errors when the APCLI changes as the AP-Zone upgrades from one AP Firmware version to another. <h3>1.1.2 Per-AP Model Command Sections</h3> Model=model_A apcli_command1 apcli_command2 ... Model=model_B apcli_command1 apcli_command2 .... The script provides a way to specify different sets of APCLI commands for different AP models. For Phase 1, we just support Model=ALL only. For Model=ALL, all AP models will execute the commands in the section. The command only supports independent command not interactive command. In the other hand this design doesn’t concern the command how to execute in AP or the command set function. The script writer needs to consider it. Example: #define AP FW version -- this should match the AP version of that zone fw_version=1.1.1.0.74 #define Model class, at present we only support model=all model=all # Actual AP CLI command goes here, single line for single command set scg config interval 300 set scg status interval 300 How to upload and execute: From Administration::AP CLI Scripts <img alt="User-added image" height="202" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3jN&feoid=00N50000002Cf3M&refid=0EM50000000Lfhh" width="500"></img> Select the Zone to apply the Script <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3jN&feoid=00N50000002Cf3M&refid=0EM50000000Lfhm"></img> Browse in local computer for script and upload <img alt="User-added image" height="96" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3jN&feoid=00N50000002Cf3M&refid=0EM50000000Lfhr" width="500"></img> Upload successful <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3jN&feoid=00N50000002Cf3M&refid=0EM50000000Lfhw"></img> Click on Execute Script to execute <img alt="User-added image" height="106" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3jN&feoid=00N50000002Cf3M&refid=0EM50000000Lfi1" width="500"></img> Successful execution message <img alt="User-added image" height="106" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3jN&feoid=00N50000002Cf3M&refid=0EM50000000LfiB" width="500"></img> Verify Script execution per AP (refresh to update) <img alt="User-added image" height="57" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3jN&feoid=00N50000002Cf3M&refid=0EM50000000LfiG" width="500"></img> Sample script attached

How to run AP CLI commands from SCG/vSZ/SZ1xx/SZ300 running Smartzone OS

2021-03-09T05:26:26-0800 2021-03-09T06:00:10-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PIHrCAO?attachment_index=0 2021-03-09T06:00:10-0800 monthly admin,premium knowledge_article_4552 knowledge_article_4552_attachment_1 set_interval_debug.cli.txt 313.0 text/plain https://support.ruckuswireless.com/articles/000003951 2021-03-08T19:34:13-0800 monthly 0.8 admin,premium knowledge_article_4551 knowledge_article_4551 2015-01-23T08:48:47-0800 000003951 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to place APs on the map? After using the Configure > Maps options to import floor plan image, use the Monitor tab's Map View to distribute markers that represent the APs to the correct locations. If multiple floor plans are imported, representing multiple floors in a building(s), make sure in placing the access point markers on the correct floor plan. Follow the below procedure to place the APs on the map : > Have the list of APs handy, with MAC addresses and locations. > Go to Monitor > Map View (if it is not already in view). > Look at the upper left corner for AP marker icons. There should be one for each AP, with a tiny red question mark at the top. > Check for the MAC address notation under the marker icon, to identify a marker. > Drag each marker icon from the upper left corner into its correct location on the floor plan.

This article helps you in placing the APs on the MAP on the ZD

2021-03-08T19:34:13-0800 2021-03-09T00:00:08-0800 https://support.ruckuswireless.com/articles/000001603 2021-03-08T13:57:29-0800 monthly 0.8 admin,premium knowledge_article_4550 knowledge_article_4550 2013-02-24T19:45:00-0800 000001603 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Downloads Downloads, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to get the 9.5 User Guides of AP and ZD You can find 9.5 User Guides for AP and ZD here: https://support.ruckuswireless.com/products/14-zonedirector-3000/documents/223-zonedirector-release-9-5-user-guide https://support.ruckuswireless.com/products/38-zoneflex-7982/documents/224-zoneflex-release-9-5-indoor-ap-user-guide

Where can I find the user guide for the ZD / AP running version 9.5

2021-03-08T13:57:29-0800 2021-03-08T18:00:16-0800 https://support.ruckuswireless.com/articles/000002181 2021-03-08T16:13:53-0800 monthly 0.8 admin,premium knowledge_article_4549 knowledge_article_4549 2013-10-25T16:09:57-0700 000002181 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How to add Management Interface on a ZD? ZD allows ONE main IP address to be used. In addition, another IP address can be defined as a “management interface”, that only http, https (& SNMP etc.) traffic is allowed to pass on that interface. Especially useful in SR mode environments, a browser session to the Management Interface IP address, will always open a session with the Active ZoneDirector.

Management Interface configuration on a ZD

2021-03-08T16:13:53-0800 2021-03-08T18:00:14-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PE1fCAG?attachment_index=0 2021-03-08T18:00:14-0800 monthly admin,premium knowledge_article_4549 knowledge_article_4549_attachment_1 Additional Management Interface.pdf 31793.0 application/pdf https://support.ruckuswireless.com/articles/000002481 2021-03-08T16:35:06-0800 monthly 0.8 admin,premium knowledge_article_4548 knowledge_article_4548 2014-01-14T08:22:57-0800 000002481 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How do you enable Aeroscout RFID tag on a ZD? Please find the attached document for more details regarding Aeroscout RFID configuration and also the solution setup.

Enable Aeroscout RFID tag on a ZD

2021-03-08T16:35:06-0800 2021-03-08T18:00:11-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PEX3CAO?attachment_index=0 2021-03-08T18:00:11-0800 monthly admin,premium knowledge_article_4548 knowledge_article_4548_attachment_1 Configuring Aeroscout RFID.pdf 381693.0 application/pdf https://support.ruckuswireless.com/articles/000003246 2021-03-08T17:00:55-0800 monthly 0.8 admin,premium knowledge_article_4547 knowledge_article_4547 2014-09-04T05:12:25-0700 000003246 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, SmartCell Gateway, virtual SmartCell Gateway Client OS types are not shown in vSCG Enabled "Client Fingerprinting" feature under the WLAN Advanced section, by default this feature is disabled

The OS widget on vSCG does not show the correct device types. Android and Windows device are connected but the device type is unknown

2021-03-08T17:00:55-0800 2021-03-08T18:00:10-0800 https://support.ruckuswireless.com/articles/000011448 2021-03-08T17:10:24-0800 monthly 0.8 admin,premium knowledge_article_4546 knowledge_article_4546 2021-03-08T17:10:24-0800 000011448 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How to recover from AP config update failed due to zone location string paramter too long ? <ul><li>Update existing AP zone location name to 25 characters or less </li><li>Deploy new AP zone location name to not exceed 25 characters</li><li>AP zone location name length check have been implemented in Smart Zone version 5.2.2 or later versions</li></ul>

This article assist user to identify and recover AP config update failed due to string parameter too long

2021-03-08T17:10:24-0800 2021-03-08T18:00:08-0800 https://support.ruckuswireless.com/articles/000002307 2021-03-08T07:56:02-0800 monthly 0.8 admin,premium knowledge_article_4543 knowledge_article_4543 2013-10-25T16:13:35-0700 000002307 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector, ZoneFlex Indoor Why do we continue to get ARP Gratuitous packets? AP will send GARP to IP source and destination address 255.255.255.255 before DHCP discover broadcast, and also after DHCP offer accepted. Please noted that the GARP after DHCP offer is not it's own address but 255.255.255.255 IP broadcast address.

Why do we continue to get ARP Gratuitous packets when using the Ruckus Wireless AP? When we power off the AP, Wireshark reports no ARP Gratuitous packets,when we power on the AP ARP Gratuitous packets start again.

2021-03-08T07:56:02-0800 2021-03-08T12:00:07-0800 https://support.ruckuswireless.com/articles/000001360 2021-03-07T13:15:02-0800 monthly 0.8 admin knowledge_article_4542 knowledge_article_4542 2013-01-11T02:16:45-0800 000001360 Validated (External) Internal Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;System network management Configuration, Security, System Network Management, ZoneDirector Blocking-FTP-traffic-to-ZD 1. How to block the FTP traffic to Zonedirector ? Ans, <div style="margin-left: 40px;">You can block the FTP traffic to zonedirector by using below CLI commands,</div> <div style="margin-left: 80px;">Please login: admin Password:</div> <div style="margin-left: 80px;">Welcome to the Ruckus Wireless ZoneDirector 3000 Command Line Interface ruckus> enable ruckus# config ruckus(config)# system ruckus(config-sys)# no ftp The FTP access has been disabled.</div> <div style="margin-left: 40px;"> To enable the FTP back use the below command</div> <div style="margin-left: 80px;">ruckus(config-sys)# ftp The FTP access has been enabled.</div>

In order to block all FTP traffic to the Zonedirector we can use this CLI command on the ZD CLI.

2021-03-07T13:15:02-0800 2021-03-07T18:00:16-0800 https://support.ruckuswireless.com/articles/000001362 2021-03-07T13:18:49-0800 monthly 0.8 admin,premium knowledge_article_4541 knowledge_article_4541 2013-01-11T02:15:42-0800 000001362 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to disable igmp snooping You can disable IGMP snooping per WLAN using the following sequence of ZD CLI command: configure wlan 'name_of_wlan' no qos igmp-snooping exit exit And your change will be saved. Using the same command without 'no' you can reenable it.

How to disable IGMP snooping on a WLAN on a ZoneDirector.

2021-03-07T13:18:49-0800 2021-03-07T18:00:14-0800 https://support.ruckuswireless.com/articles/000002663 2021-03-07T13:23:13-0800 monthly 0.8 admin,premium knowledge_article_4540 knowledge_article_4540 2014-02-18T04:24:10-0800 000002663 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Troubleshooting Installation, Troubleshooting, ZoneDirector Ruckus LDAP implementation ineroperability issues Firstly with the Ruckus LDAP implementation. the user logs in with <username> and <userpassword>. We use the admin account to search the subtree of base DN with the configured search filter and the filter (keyAttribute=username) to find out the user account. 2. Use the extracted DistinguishedName and <userpassword> to authenticate to the LDAP server. For backward compatible, the admin account is not a must. But without admin account, there are known interop issues with various LDAP servers, and does not support hierarchical user accounts.

LDAP configuration now working, how to find the right domain.

2021-03-07T13:23:13-0800 2021-03-07T18:00:13-0800 https://support.ruckuswireless.com/articles/000006302 2021-03-07T13:33:20-0800 monthly 0.8 admin,premium knowledge_article_4538 knowledge_article_4538 2017-03-14T13:03:36-0700 000006302 Validated (External) Premium How to configure Guest Access Service in Unleashed 200.3 - In Unleashed 200.3, Guest Access Service needs to be configured in WLAN edit section and by choosing the Guest SSID option

Guest-Access-Service-in-Unleashed-200-3

2021-03-07T13:33:20-0800 2021-03-07T18:00:09-0800 https://support.ruckuswireless.com/articles/000005643 2021-03-07T13:35:21-0800 monthly 0.8 admin,premium knowledge_article_4537 knowledge_article_4537 2016-03-30T10:52:12-0700 000005643 Validated (External) Premium P300;Ruckus P300 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, P300 Why new P300 not connecting to existing Root Bridge? > Upgrading the Non-Root bridge firmware to same as Root bridge, resolves the issue.

New P300 wireless bridge not able to connect to Root bridge.

2021-03-07T13:35:21-0800 2021-03-07T18:00:08-0800 https://support.ruckuswireless.com/articles/000006360 2021-03-07T01:12:00-0800 monthly 0.8 admin,premium knowledge_article_4536 knowledge_article_4536 2017-05-04T00:27:43-0700 000006360 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Troubleshooting Troubleshooting, SZ100 Why Can the AP not connect to the SZ-100 Factory default the SZ-100 and reconfigure and AP's will be able to connect with SZ-100

No AP's were able to connect to SZ-100, and we found the below error on the SZ-100 "Administrator does not have privileges for AP, unable to update AP"

2021-03-07T01:12:00-0800 2021-03-07T06:00:16-0800 https://support.ruckuswireless.com/articles/000001785 2021-03-07T01:47:48-0800 monthly 0.8 admin,premium knowledge_article_4535 knowledge_article_4535 2013-03-19T11:26:29-0700 000001785 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Troubleshooting Radius user login issues on Radius server side using logs When a user tries to login using the AD credentials on the wireless client or while using the Test Authentication on the ZD which is under the Configure ==> AAA servers option, We will get a log on the Radius server side. The log will give the details of the username , Radius policies , ZD & Radius server IP address and exact description of the error if anything is wrong with the credentials. Logs can be seen in Radius server side under the Event Viewer. In Windows 2003 - Event Viewer ==> System In Windows 2008 - Event Viewer ==> Security This logs will be created instantly when the user tries to use the AD credentials on wireless client or with Test Authentication on the ZD. Example log as follows, <div>Network Policy Server discarded the request for a user.</div> <div> </div> <div>Contact the Network Policy Server administrator for more information.</div> <div> </div> <div>User:</div> <div>Security ID: GULLBERGS\ruckustest</div> <div>Account Name: gullbergs\ruckustest</div> <div>Account Domain: GULLBERGS</div> <div>Fully Qualified Account Name: gullbergs.int/Users/ruckustest</div> <div> </div> <div>Client Machine:</div> <div>Security ID: NULL SID</div> <div>Account Name: -</div> <div>Fully Qualified Account Name: -</div> <div>OS-Version: -</div> <div>Called Station Identifier: C0-8A-DE-7D-07-28:Gullbergs_Priv</div> <div>Calling Station Identifier: 00-1E-64-8D-89-4A</div> <div> </div> <div>NAS:</div> <div>NAS IPv4 Address: 10.255.8.5</div> <div>NAS IPv6 Address: -</div> <div>NAS Identifier: C0-8A-DE-7D-07-28</div> <div>NAS Port-Type: Wireless - IEEE 802.11 </div> <div>NAS Port: 36</div> <div> </div> <div>RADIUS Client:</div> <div>Client Friendly Name: se-itg-wifi-fw-01</div> <div>Client IP Address: 192.168.10.73</div> <div> </div> <div>Authentication Details:</div> <div>Proxy Policy Name: Ruckus_Wifi</div> <div>Network Policy Name: Wireless_Ruckus</div> <div>Authentication Provider: Windows </div> <div>Authentication Server: aghdc02.gullbergs.int</div> <div>Authentication Type: EAP</div> <div>EAP Type: -</div> <div>Account Session Identifier: -</div> <div>Reason Code: 1</div> <div>Reason: An internal error occurred. Check the system event log for additional information. Reason is the place where we can see the exact description of the error.</div>

2021-03-07T01:47:48-0800 2021-03-07T06:00:14-0800 https://support.ruckuswireless.com/articles/000002362 2021-03-07T02:21:13-0800 monthly 0.8 admin,premium knowledge_article_4534 knowledge_article_4534 2013-11-22T14:59:57-0800 000002362 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor SSID is not being broad casting in the network The SSID is not broadcasting in the network: -->Login to Zone director-->Go to configure-->WLANs-->Click on Edit-->Advanced Options If the Service Schedule set to always off then the SSID will not broadcast, changing it to always on resolved the issue, also make sure that the SSID is not set to hidden. <img alt="User-added image" height="316" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000M3eI&feoid=00N50000002Cf3M&refid=0EM50000000LNdz" width="500"></img>

The new SSID is not broadcasting in the network

2021-03-07T02:21:13-0800 2021-03-07T06:00:12-0800 https://support.ruckuswireless.com/articles/000002209 2021-03-07T02:24:00-0800 monthly 0.8 admin,premium knowledge_article_4533 knowledge_article_4533 2013-09-06T16:16:50-0700 000002209 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why did RADIUS authentication stop working? Troubleshooting: <ol style="background-color: rgb(255, 255, 255);"><li>Verify that EAP authentication method is enabled on the Radius Server. </li><li>Found that it was not enabled.</li><li>Tried to enable EAP authentication and got this error message: A certificate could not be found that can be used with this EAP.</li><li>Found that certificate was expired.</li></ol> Resolution: <ol style="background-color: rgb(255, 255, 255);"><li>Regenerate the certificate. (For more information on generating a certificate, please reference documentation from your Radius vendor. For example, if you are using a Microsoft Radius Server: <a href="http://technet.microsoft.com/en-us/library/dd314152%28WS.10%29.aspx" style="color: rgb(51, 52, 53);" target="_blank">http://technet.microsoft.com/en-us/library/dd314152%28WS.10%29.aspx</a>)</li><li>Re-enable EAP Authentication</li></ol>

Clients not got authenticated to the Radius Wlan suddenly. The error message {Cannot configure EAP due to certificate could not found}

2021-03-07T02:24:00-0800 2021-03-07T06:00:11-0800 https://support.ruckuswireless.com/articles/000001510 2021-03-07T02:28:05-0800 monthly 0.8 admin,premium knowledge_article_4532 knowledge_article_4532 2013-01-21T08:35:18-0800 000001510 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Mesh Compatibilty between different APs 802.11g [2.4 GHz] - 2741 can mesh with itself or 2942/2925 (any of the 3 models can mesh with either of them) 802.11n [2.4 GHz] - 7343 can mesh with 7942 (or the other way round) 802.11n [2.4 & 5 GHz] - 7363 can mesh with itself or 7762 /7962/7982 (any of the 3 models can mesh with either of them). Here, mesh links use 5 GHz radio only. 802.11ac models will mesh on 5 Ghz and from 5.x also on 2.4 Ghz. R300 / R310 / R320 no mesh support

Mesh Compatibilty between different APs

2021-03-07T02:28:05-0800 2021-03-07T06:00:09-0800 https://support.ruckuswireless.com/articles/000001757 2021-03-07T02:46:03-0800 monthly 0.8 admin,premium knowledge_article_4531 knowledge_article_4531 2013-03-05T22:12:13-0800 000001757 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Troubleshooting Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor Customer was unable to access GUI of the AP Troubleshooting steps. -Check if you can ping the IP address of the device,if yes -Check if you can SSH into the device,if yes -Check if you are getting an IP address from correct subnet of DHCP -Check if have connected two Ethernet cables from switch to AP. If all is okay, then this AP might be under control of a controller, and therefore GUI access is default disabled.

Cannot login to the webgui of the AP.

2021-03-07T02:46:03-0800 2021-03-07T06:00:07-0800 https://support.ruckuswireless.com/articles/000002373 2021-03-06T11:15:13-0800 monthly 0.8 admin,premium knowledge_article_4530 knowledge_article_4530 2014-01-20T07:31:06-0800 000002373 Validated (External) Premium Zoneflex 7762;Zoneflex 7762 s Configuration;Installation;System network management Configuration, Installation, System Network Management, ZoneFlex 7762, ZoneFlex 7762 S How many APs can be daisy chained? Ethernet cable of 100 metres( (802.3 std), from POE to first AP and another cable of 100 metres from first AP to another AP(Daisy Chain) can be installed, 2 APs maximum can be used for Daisy chaining. The ethernet ports on the 7762 are 10/100/1000 (input) and 10/100 (output) so the daisy-chained AP will be limited to 100Mb backhaul'.

How many number of APs can be daisy chained and what are the limitations.

2021-03-06T11:15:13-0800 2021-03-06T12:00:12-0800 https://support.ruckuswireless.com/articles/000001756 2021-03-06T11:20:02-0800 monthly 0.8 admin,premium knowledge_article_4529 knowledge_article_4529 2013-03-05T22:12:02-0800 000001756 Validated (External) Premium Zoneflex 7962 Troubleshooting Troubleshooting, ZoneFlex 7962 Customer has a ZF7962 AP which is not powering up by POE switch The customer was unable to power up the device using the POE switch. - check if switch is capable of proving the required power for the AP (power budget) - check if the Ethernet cable is connected to the POE port of the AP -try connecting AP to a different port of the Switch

ZF 7962 does not power up.

2021-03-06T11:20:02-0800 2021-03-06T12:00:10-0800 https://support.ruckuswireless.com/articles/000005267 2021-03-06T11:38:55-0800 monthly 0.8 admin,premium knowledge_article_4528 knowledge_article_4528 2015-11-04T04:33:25-0800 000005267 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SZ100 SZ-100, Boot failed, Boot optoins, Not booting, Wipeout option,rootfs2,rootsf3 1. Use the Wipeout option in case the SZ-100 stuck at initial bootup. 2. Please check the screenshot for the same.

How to recover SZ-100 when it failed to boot after the upgrade using the setup wizard.

2021-03-06T11:38:55-0800 2021-03-06T12:00:08-0800 http://support.ruckuswireless.com/article_attachments/kA250000000L6k1CAC?attachment_index=0 2021-03-06T12:00:08-0800 monthly admin,premium knowledge_article_4528 knowledge_article_4528_attachment_1 Screenshot_2015-11-03_15-38-31.png 10540.0 image/png https://support.ruckuswireless.com/articles/000001948 2021-03-05T15:28:19-0800 monthly 0.8 admin,premium knowledge_article_4527 knowledge_article_4527 2013-06-12T21:06:47-0700 000001948 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector What is the maximum number of entries allowed in Blocked clients list on a Zonedirector? If the customer wants to block more than 128 client devices a new L2 ACL need to be created or an authentication server will be required. It is possible, however, to move all 128 client devices from the Blocked client list to a regular L2 ACL and then add that ACL to every WLAN created on the ZD. Then it is possible to wipe out the Blocked client list and start with other 128 entries on the global L2 ACL. This way we can extend the limitation to 256 blocked clients.

This article provided the info on maximum number of entries allowed in Blocked clients list on Zonedirector

2021-03-05T15:28:19-0800 2021-03-05T18:00:08-0800 https://support.ruckuswireless.com/articles/000003645 2021-03-05T11:43:23-0800 monthly 0.8 admin,premium knowledge_article_4525 knowledge_article_4525 2014-12-11T08:50:35-0800 000003645 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, SmartCell Gateway, virtual SmartCell Gateway vSCG: How to set static IP on vSCG AP via CLI

vSCG: How to set static IP on VSCG AP via CLI

2021-03-05T11:43:23-0800 2021-03-05T12:00:10-0800 https://support.ruckuswireless.com/articles/000006309 2018-12-10T16:02:33-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_3480 knowledge_article_3480 2017-04-04T10:13:25-0700 000006309 Validated (External) Public Smartcell insight;SmartCell Insight (SCI) Installation;Troubleshooting;Known issues and workarounds;Support license activation Installation, Troubleshooting, Known Issues and Workarounds, Support License Activation, SmartCell Insight Why is my SCI not showing the Serial Number and Licenses in the WebUI? When not seeing the serial number or Licenses under the License page, there is a possibility that port 53000 TCP+UDP is blocked by the Firewall. One way to verify whether the port is opened or not is to go to the following URL with the correct SCI address: https://[SCI-IP address]:53000/api/v1/nodes?state=true. If the port is not allowed, there would be an exception such as "ERR_CONNECTION_TIMED_OUT". After allowing Port 53000 on the firewall, validate this URL again: https://[SCI-IP address]:53000/api/v1/nodes?state=true <pre> [{"id":"master-41c217b","node_type":"master","node_ip":"10.10.10.12","node_token":"441234526","state":"ok"}] If the results are like above, the Serial number would be displayed properly in the WebUI: <img alt="User-added image" height="276" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000093z9&feoid=00N50000002Cf3M&refid=0EM50000000h3v3" width="777"></img> </pre>

Explanation for why SCI Serial Number and Licenses are not visible under WebUI.

2018-12-10T16:02:33-0800 2021-03-05T00:52:02-0800 https://support.ruckuswireless.com/articles/000011447 2021-03-04T18:17:34-0800 monthly 0.8 admin,premium knowledge_article_4523 knowledge_article_4523 2021-03-04T18:16:33-0800 000011447 Validated (External) Premium Ruckus icx switches Performance;Configuration;Firmware;Installation;System network management;Troubleshooting Performance, Configuration, Firmware, Installation, System Network Management, Troubleshooting, Ruckus ICX Switches ICX 7000 Switches PoE Version Issue After Upgrade - TSB 2021-001 A software fix will be available in RUCKUS ICX FastIron 8.0.95c software release.

ICX 7000 series member unit with PoE firmware version showing 00.0.0 after upgrade to RUCKUS ICX FastIron software releases 8.0.95, 8.0.95a, or 8.0.95b (Defect # FI-223444)

2021-03-04T18:17:34-0800 2021-03-05T00:00:08-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000Ls9ESAS?attachment_index=0 2021-03-05T00:00:08-0800 monthly admin,premium knowledge_article_4523 knowledge_article_4523_attachment_1 TSB-2021-001-ICX7k-8095-Upgrade-PoE.pdf 227508.0 application/pdf https://support.ruckuswireless.com/articles/000001319 2019-06-03T03:24:54-0700 monthly 0.8 admin,premium knowledge_article_10 knowledge_article_10 2012-08-08T04:50:23-0700 000001319 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Mediaflex;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;MediaFlex 2501;MediaFlex 2900;MediaFlex 2811;MediaFlex 5811;MediaFlex 7811;MediaFlex 7211 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, MediaFlex Client running VM (Virtual Machine) is unable to get a DHCP IP address. Console into this AP using a tool like PUTTY. <ul style="list-style-type: circle;"><li>Type in the command "get qos".</li><li>From the information displayed see if the Directed DHCP feature is Enabled.(this feature is available in > 9.3.0.0.xx build)</li><li>This feature is enabled by default.</li><li>Type in the command " set qos directedDHCP disable" on the AP.</li><li>Once the command is executed, reboot the client device.</li><li> Virtual NIC should be able to get an IP address from the DHCP Server.</li></ul>

Problem where a Computer running VM (Virtual Machine) is unable to get a DHCP IP address.

2019-06-03T03:24:54-0700 2021-03-03T08:35:48-0800 https://support.ruckuswireless.com/articles/000009948 2019-11-15T02:43:09-0800 monthly 0.8 admin,premium knowledge_article_3994 knowledge_article_3994 2019-11-15T02:38:23-0800 000009948 Validated (External) Premium Zonedirector;Zoneflex indoor;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, SmartCell Gateway, virtual SmartCell Gateway Why an isolated device is frequently being deauthenticated by an access point due to excessive BAR retries? <ul><li>If issue is system wide, please do not proceed below as it could be related to RF interference</li><li>If issue is isolated to a single wireless device please suggest to power cycle the unit and/or upgrade or roll back the OS to the latest or latest known working condition respectively</li><li>Contact the respective client device vendor on next steps if issue still unresolved</li></ul>

In certain cases an isolated/single wireless client device may have difficult time joining the WLAN due to AP sending deauth and logging error message "STA kicked-out - BAR retries"

2019-11-15T02:43:09-0800 2021-02-21T22:31:52-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000004zbPSAQ?attachment_index=0 2021-02-21T22:31:52-0800 monthly admin,premium knowledge_article_3994 knowledge_article_3994_attachment_1 OTA_Pcap_Apple_Client.pcap 1845460.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000011369 2021-02-15T07:20:50-0800 monthly 0.8 admin,premium knowledge_article_4503 knowledge_article_4503 2021-02-15T07:20:50-0800 000011369 Validated (External) Premium P300;Ruckus P300 Installation;Known issues and workarounds Installation, Known Issues and Workarounds, P300 How to set a fixed channel on the P300 bridge AP ? You can set a fixed channel via the AP CLI on the AP. 1. Login to the AP CLI via ssh to the IP address of the AP. 2. use the " set channel wifi <xxx> " command where xxx is the channel in 5Ghz that you would like to use.

How to set manual a fixed channel on the P300 bridge AP

2021-02-15T07:20:50-0800 2021-02-15T12:00:08-0800 https://support.ruckuswireless.com/articles/000002685 2020-09-17T09:42:23-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4407 knowledge_article_4407 2015-04-22T13:52:24-0700 000002685 Validated (External) Public Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor Does Ruckus Access point support 802.11r (Fast Transition) when it is in standalone mode? No. It does not support 802.11r when it is in Stand-Alone Mode. 802.11r works only when the access point is managed by a controller. IEEE 802.11r is an amendment to the 802.11 standard for the deployment of IP-based telephony over 802.11-based phone devices. The IEEE 802.11r amendment is designed to increase handoff speed between access points in a wireless local area network (WLAN). IEEE 802.11r serves as a fast-roaming standard that addresses connectivity and is critical to applications that require high quality and low latency, particularly Voice over Internet Protocol (VoIP). IEEE 802.11r is also known as the fast basic service set.

APs in standalone mode do not support 802.11r (Fast Transition)

2020-09-17T09:42:23-0700 2021-02-13T12:13:36-0800 https://support.ruckuswireless.com/articles/000010525 2021-02-11T13:34:32-0800 monthly 0.8 admin,premium knowledge_article_4502 knowledge_article_4502 2020-05-26T01:38:06-0700 000010525 Validated (External) Premium Vriot;Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;System network management;Troubleshooting;Known issues and workarounds Performance, Configuration, System Network Management, Troubleshooting, Known Issues and Workarounds, vRIoT, SmartCell Gateway, virtual SmartCell Gateway Why AP's are sending excessive DNS requests for vriot.ruckuswireless.com when there is no IoT controller/module in the network <ul><li>Disable IOT on the AP and this should disable the DNS requests</li><li>Command to disable IOT:</li></ul> set iotg-enable 0 <ul><li>If there are many AP's in the network, Use AP CLI script</li><li>Attached the AP CLI script which you can load on SZ/vSZ zone level and run it.</li><li>To apply the AP CLI script, follow the below steps: 1. Go to SZ/vSZ WebUI: Administration -> Diagnostics -> AP CLI Scripts. 2 Click on 'Upload' button, browse the script file created in step-1, give this script a name and click on OK. 3. Now script will be listed in the same page, select the script which you wish to run and click on 'Execute", Choose the desired Zone and hit OK. 4. Script will run in background. To check the status, please see the History section on same page, choose the specific entry and then click on "View Execution Summery" </li></ul>

This Article explains how to stop the excessive DNS requests which is sent by AP's for vriot.ruckuswireless.com when there is no IoT devices/controller in the network

2021-02-11T13:34:32-0800 2021-02-11T18:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000PiXzSAK?attachment_index=0 2021-02-11T18:00:09-0800 monthly admin,premium knowledge_article_4502 knowledge_article_4502_attachment_1 AP CLI script.txt 61.0 text/plain https://support.ruckuswireless.com/articles/000010829 2020-09-10T14:31:50-0700 monthly 0.8 admin,premium knowledge_article_4396 knowledge_article_4396 2020-09-08T09:05:13-0700 000010829 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why clients are getting disconnected from DPSK SSID after generating DPSK keys on the vSZ <ul><li>Configure EDPSK with Cloudpath </li><li>Using Cloudpath as eDPSK server will not cause WLAN reload when creating new unbounded DPSK, because eDPSK database is on Cloudpath, unlike internal DPSK DB on controller.</li><li>eDPSK is only supported with Cloudpath (as of 5.2.1).</li></ul>

This Article explains why clients are disconnecting from DPSK SSID when we create a DPSK key on vSZ

2020-09-10T14:31:50-0700 2021-02-11T11:08:16-0800 https://support.ruckuswireless.com/articles/000003772 2019-06-30T15:41:04-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1491 knowledge_article_1491 2014-12-09T06:53:04-0800 000003772 Validated (External) Public Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting Performance, Troubleshooting, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway How can I cross-check SpeedFlex results using the freely available Iperf tool? SpeedFlex embeds ZAP performance measurement tool. ZAP is made open source and any networking vendor can embed it into their product to let their customers use it. Source code is available for a download at https://code.google.com/p/zapwireless/source/browse/ Brief description of how ZAP works internally is explained in the Quick Start Guide downloadable at https://code.google.com/p/zapwireless/downloads/list Irrespective of this non-proprietariness some customers may want to cross-check the SpeedFlex results with a 3rd party tool such as widely popular Iperf. If that is what you want, below is the way to go: 1. Download the Iperf tool from https://iperf.fr (current version is 2.0.5-3) 2. Unzip into a local folder. This folder will have iperf.exe which needs to be run from command line. 3. You need two laptops with Iperf on it. One will act as a server and other will be a client (doesn't matter which is what). 4. Connect one laptop to the wired network. 5. Connect other laptop to the wireless network (if you want to measure speed on wireless side) or to the wired network (if you want to measure speed on wire side). 6. On the server side, run "iperf.exe -s" command. The process will go into listening mode for client connections. 7. On the client side, run "iperf.exe -c <server_machine_laptop>" command. Speed test will be initiated and you will see the results after approximately 10 seconds. 8. Default test will use TCP traffic. If you would rather prefer a UDP test, please run "iperf.exe -u -s" command on the server side and "iperf.exe -u -c <server_machine_laptop>" command on the client side. All the available command options can be explored through "iperf.exe -h" command. There are several Iperf tutorials online to go deep into Iperf based testing. One such good example site is http://www.slashroot.in/iperf-how-test-network-speedperformancebandwidth

This article explains how to run Iperf if a customer would like to cross-check SpeedFlex results.

2019-06-30T15:41:04-0700 2021-02-09T08:00:15-0800 https://support.ruckuswireless.com/articles/000009674 2021-02-04T07:56:11-0800 monthly 0.8 admin,premium knowledge_article_4499 knowledge_article_4499 2019-08-06T13:37:39-0700 000009674 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;Firmware;Known issues and workarounds Performance, Configuration, Firmware, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How do we managed SMD and mDNS (ie Chromecast and Apple TV) in large scale Ruckus wireless networks? SMDs were initially only intended to be used in small networks or in homes. Recently SMDs have been being deployed in mass in Hospitality and Education networks, sometimes in the hundreds of devices on a single network. This influx of SMDs has caused an unforeseen issue with Multicast DNS (MDNS) flooding. This flooding occurs due to the nature of the SMD’s DNS traffic flow, when a Chromecast or Apple Tv device joins a network it broadcast MDNS queries to every SMD as well as the rest of the network causing a flood of DNS inquiries and results in a network slow down. This has only been seen in networks with 25 or more SMDs. Techniques described in the attached document are not an exhaustive description of all possible solutions. It focuses on CLI workaround options and software patches until the problem is resolved in further SmartZone releases. In order to successfully follow the steps in this document, the following equipment (at a minimum) is required and assumed: • Any SmartZone controller 5.0 or lower versions. • Access to CLI management of the SmartZone controller. For SmartZone versions 5.1.0 and above, do not use this document. Instead, please use Client Isolation with Whitelist to isolate SMDs between each other, and adding the gateway device to the whitelist.

How to support large scale Ruckus wireless networks supporting large number of SMD (streaming media devices) such as Chromecast and Apple TV.

2021-02-04T07:56:11-0800 2021-02-04T12:00:11-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000004zMPSAY?attachment_index=0 2021-02-04T12:00:11-0800 monthly admin,premium knowledge_article_4499 knowledge_article_4499_attachment_1 SMD_and_MDNS_Tech_Note.pdf 216773.0 application/pdf https://support.ruckuswireless.com/articles/000008710 2021-01-22T14:38:51-0800 monthly 0.8 admin,premium knowledge_article_4493 knowledge_article_4493 2018-12-19T11:24:44-0800 000008710 Validated (External) Premium Virtual smartcell gateway Troubleshooting Troubleshooting, virtual SmartCell Gateway Why is the NTP preventing my cluster to form? To resolve this issue, the IP address of the VSZ has to be added in the GCE FW. clusterl# show cluster-state Current Management Service Status : In service Current Node Status : In service Cluster Status : In service Cluster Operation : None System Mode : None Cluster Node Information ---------------------------------------------------------------- No. Name Role ----- ------------------------ ----------- 1 cluster-2 FOLLOWER 2 cluster LEADER

Unable to form a cluster in the GCE (Google Cloud Engine) platform due to NTP issue.

2021-01-22T14:38:51-0800 2021-01-22T18:00:10-0800 https://support.ruckuswireless.com/articles/000010758 2020-07-23T13:54:51-0700 monthly 0.8 admin,premium knowledge_article_4316 knowledge_article_4316 2020-07-23T13:54:51-0700 000010758 Validated (External) Premium Virtual smartcell gateway Knowledge base Knowledge Base, virtual SmartCell Gateway Why does the article ID not show? do we see it now?

Cannot see Article ID when WIRELESS or WIRED selected. The attachment name is shown with no article ID.

2020-07-23T13:54:51-0700 2021-01-20T11:01:05-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000PikeSAC?attachment_index=0 2021-01-20T11:01:05-0800 monthly admin,premium knowledge_article_4316 knowledge_article_4316_attachment_1 Approval Step screenshots.docx 248909.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000005335 2015-12-04T16:01:52-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_2229 knowledge_article_2229 2015-12-04T16:01:52-0800 000005335 Validated (External) Public P300;Ruckus P300 Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, P300 Why is there no wireless link between my P300 when setup in lab or within 10ft of each other? When setting up the P300 in the lab, it is always recommended to turn down the transmit power of the RB and NRB to Minimum. We've seen instances when the signal is at 62dB of SNR. If we turn down the power to minimum and not point the antenna beam towards each other (back to back), the link is established. This change is done at the Configure / Wireless, then Advanced Options button. Once in Advanced options click on the drop down for Power and select Minimum. Again, this is for initial setup. When the link is ready to be deployed and if the link distance is lower than 1 km, it might be a good idea to lower the power to -3 or -6dB from max power.

There's no wireless connection of the wireless link out of the box when setting the link within 10ft or in a lab environment

2015-12-04T16:01:52-0800 2021-01-16T11:04:29-0800 https://support.ruckuswireless.com/articles/000008347 2021-01-13T09:06:17-0800 monthly 0.8 admin,premium knowledge_article_3483 knowledge_article_3483 2018-10-03T12:47:53-0700 000008347 Validated (External) Premium Vsz dataplane Troubleshooting Troubleshooting, vSZ Dataplane How to perform packet capture in VDP CLI for a specific Client? Execute the following to Initiate capture from VDP CLI. VDP(debug)# diag dp_comm sysctl pkt_cap ue_mac 00:11:22:33:44:55 Set pkt_cap param done... Note: A "gen_pktA.pcap" file will be generated VDP(debug)# diag dp_comm sysctl pkt_cap disable Set pkt_cap param done... Use FTP/SFTP to download the file by executing the following: VDP(debug)# dp-packet-capture save Please select the transmission protocol(ftp or sftp):ftp Or execute save-log controller below to download the gen_pktA.pcap file from VSZ controller. VDP(debug)# save-log controller ls: cannot access /opt/ruckuswireless/wsg/core/*.core.gz: No such file or directory tar: debug_repo/var_run/acpid.socket: socket ignored tar: debug_repo/var_run/dpm_socket: socket ignored tar: debug_repo/var_run/dbus/system_bus_socket: socket ignored tar: debug_repo/var_run/syslog-ng.ctl: socket ignored tar: debug_repo/var_run/dpm_mgmt.sock: socket ignored successfully collect dataplane information in 97TV1RN5QLCA2H3VKTHS2RKHV67F0050568A0C220050568A608A_debug_support_info.tar.gz From VSZ, go to WEB UI->Diagnostics->Application Logs->DBlade and look for the 97TV1RN5QLCA2H3VKTHS2RKHV67F0050568A0C220050568A608A_debug_support_info.tar.gz that was just generated. <img alt="User-added image" height="565" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gyn6&feoid=00N50000002Cf3M&refid=0EM50000000lmiW" width="1160"></img>

It is advisable to perform packet capture on a specific client instead of using "ALL" as an option, since it will degrade the VDP performance.

2021-01-13T09:06:17-0800 2021-01-13T12:00:13-0800 https://support.ruckuswireless.com/articles/000008727 2021-01-13T09:43:10-0800 monthly 0.8 admin,premium knowledge_article_4225 knowledge_article_4225 2019-01-04T13:31:29-0800 000008727 Validated (External) Premium Unleashed;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Firmware;Installation;Security;Troubleshooting;Known issues and workarounds Firmware, Installation, Security, Troubleshooting, Known Issues and Workarounds, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor Why can I not upgrade an AP Zone from 3.2 to 3.6+ ( AP image signing - unsigned, fully signed )? There are 3 types of firmware versions: UI -Unsigned Image - original type without certificate signed ISI - Intermediate signed certificate - a bridge between UI and FSI allowing upgrade or downgrade to either. FSI - Fully Signed Certificate Note: The rules are you can only upgrade or downgrade from FSI to ISI or from UI to ISI The signed Firmware infrastructure was initially implemented in SZ version 3.4 as a 2 step process In 3.4 APs upgraded to this version will be given a ISI (Intermediate Signed Image) that should work with both pre 3.4 (3.2 and below) USI imaged (Unsigned Images) APs and be ready for FSI (Fully Signed Image) of 3.6. For compatibility 3.5 also uses ISI images. In 3.6 all APs must be installed with FSI image. Only APs running ISI images (APs with 3.4 code) can be upgraded to 3.6 AP code with the new secure image. Error 187 indicates APs are running USI, unsigned images and cannot be upgraded directly to 3.6 So – the quick “solution” – first upgrade the AP/AP Zone to 3.4 code – which should install the ISI compatible image. <img alt="Intermediate Version Upgrade" height="242" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GynQ&feoid=00N50000002Cf3M&refid=0EM2J000000m3CN" width="500"></img> The ISI image was added to standalone code 104.x; ZD 9.13..0 and Unleashed 200.2 Standalone 100.4 <a href="https://support.ruckuswireless.com/documents/1134-access-point-104-0-0-0-1347-release-notes" target="_blank">https://support.ruckuswireless.com/documents/1134-access-point-104-0-0-0-1347-release-notes</a> • AP Image Signing Improves security by requiring verification of AP firmware images to ensure the file has not been modified and that the source code executed by the system is authentic code provided by Ruckus Wireless. ZD code 9.13.0 <a href="https://ruckus-support.s3.amazonaws.com/private/documents/1104/ZD_9_13_Release_Notes_RevB_20160801.pdf?AWSAccessKeyId=AKIAJM3QLNNKLOV235TQ&Expires=1523292628&Signature=xfseqBlGvG%2BYfEl9kDsV4zACg2g%3D" target="_blank">https://ruckus-support.s3.amazonaws.com/private/documents/1104/ZD_9_13_Release_Notes_RevB_20160801.pdf?AWSAccessKeyId=AKIAJM3QLNNKLOV235TQ&Expires=1523292628&Signature=xfseqBlGvG%2BYfEl9kDsV4zACg2g%3D</a> Unleashed version 200.2 <a href="https://ruckus-support.s3.amazonaws.com/private/documents/1152/Unleashed-200_2-ReleaseNotes-RevA-20161003.pdf?AWSAccessKeyId=AKIAJM3QLNNKLOV235TQ&Expires=1523291817&Signature=7DG8HpHTSDyWb5PyeEoxc97bB9s%3D" target="_blank">https://ruckus-support.s3.amazonaws.com/private/documents/1152/Unleashed-200_2-ReleaseNotes-RevA-20161003.pdf?AWSAccessKeyId=AKIAJM3QLNNKLOV235TQ&Expires=1523291817&Signature=7DG8HpHTSDyWb5PyeEoxc97bB9s%3D</a> Additional Syslog Messages <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;"># fw show allApr 6 20:54:16 RuckusAP daemon.notice Firmware Daemon[1910]: working|looking up control server IP <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:16 RuckusAP daemon.notice Firmware Daemon[1910]: working|reading control file <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:16 RuckusAP daemon.notice Firmware Daemon[1910]: working|reading firmware file header <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:16 RuckusAP daemon.notice Firmware Daemon[1910]: failed|firmware size not as specified in control file <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.err /usr/sbin/wsgclient[2577]: multiCfgDoFwUpdate 1707 Firmware upgrade is failed! <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.err /usr/sbin/wsgclient[2577]: @@107,apFirmwareUpdateFailed,"apMac"="2C:C5:D3:22:4F:A0","configID"="aa479880-39db-11e8-8b4c-021e67c9e5a8", "fromVersion"="3.1.2.0.134", "toVersion"="3.6.1.0.237" <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP user.info syslog: Message sent.= <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.err /usr/sbin/wsgclient[2577]: configResultUpdate 443 Configuration failed! ret:-1 <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.err /usr/sbin/wsgclient[2577]: wsgListenerHandler 1023 Unknown request type! <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.err /usr/sbin/wsgclient[2577]: crSocketSend 494 errno:32 Broken pipe <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.err /usr/sbin/wsgclient[2577]: updateConfigStatus 377 Failed to send UPDATECONFIGURATIONS ret=9997 response ?^D^S^A{"protocolVersion":"0.50", "status":"0", "seqNumber":3,"configUUID":"aa479880-39db-11e8-8b4c-021e67c9e5a8"} <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.err /usr/sbin/wsgclient[2577]: crResloveAddrInfo 221 getaddrinfo returns errno:2 strerror(2):No such file or directory <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.err /usr/sbin/wsgclient[2577]: crSocketInit 256 errno:2 No such file or directory <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.err /usr/sbin/wsgclient[2577]: crInit 41 Using ip:13.56.238.211 port:443,Fail to init socket <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.err /usr/sbin/wsgclient[2577]: crInit 43 ret:9992 <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.err /usr/sbin/wsgclient[2577]: checkCert 225 CR_RetCode_OK isn't returned by crInit ret:9992 c->url is <a href="https://wsg/ap" style="background-color: transparent; color: rgb(7, 130, 193); font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: underline; white-space: normal;" target="_blank">https:///wsg/ap</a> <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.notice Firmware Daemon[1910]: working|looking up control server IP <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.notice Firmware Daemon[1910]: working|reading control file <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.notice Firmware Daemon[1910]: working|reading firmware file header <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:17 RuckusAP daemon.notice Firmware Daemon[1910]: failed|firmware size not as specified in control file <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:18 RuckusAP daemon.notice Firmware Daemon[1910]: working|looking up control server IP <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:18 RuckusAP daemon.notice Firmware Daemon[1910]: working|reading control file <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:18 RuckusAP daemon.notice Firmware Daemon[1910]: working|reading firmware file header <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:18 RuckusAP daemon.notice Firmware Daemon[1910]: failed|firmware size not as specified in control file <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:19 RuckusAP daemon.notice Firmware Daemon[1910]: working|looking up control server IP <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:19 RuckusAP daemon.notice Firmware Daemon[1910]: working|reading control file <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:19 RuckusAP daemon.notice Firmware Daemon[1910]: working|reading firmware file header <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:19 RuckusAP daemon.notice Firmware Daemon[1910]: failed|firmware size not as specified in control file <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:20 RuckusAP daemon.notice Firmware Daemon[1910]: working|looking up control server IP <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:20 RuckusAP daemon.notice Firmware Daemon[1910]: working|reading control file <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:20 RuckusAP daemon.notice Firmware Daemon[1910]: working|reading firmware file header <span style="background-color: transparent; color: rgb(0, 0, 0); font-family: lucida console; font-size: 13px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal;">Apr 6 20:54:20 RuckusAP daemon.notice Firmware Daemon[1910]: failed|firmware size not as specified in control file

Upgrade to an intermediate version of code before upgrading to the latest fully secure versions of AP code.

2021-01-13T09:43:10-0800 2021-01-13T12:00:10-0800 https://support.ruckuswireless.com/articles/000003714 2014-11-25T14:13:42-0800 monthly 0.8 admin,premium knowledge_article_1458 knowledge_article_1458 2014-11-25T14:13:42-0800 000003714 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor We can not have two IP subnets on one single VLAN,we need two VLANs for two IP subnets or we should have everything on one single subnet where there is a dhcp server configured.

New APs connecting to the network are not joining Zone Director

2014-11-25T14:13:42-0800 2021-01-13T07:31:04-0800 https://support.ruckuswireless.com/articles/000011224 2021-01-12T06:20:28-0800 monthly 0.8 admin,premium knowledge_article_4488 knowledge_article_4488 2021-01-12T06:20:28-0800 000011224 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor How to disable single WLAN in a Zone/AP Group Navigate to AP CLI and run the below command: set state wlanX down You can find the wlan interface under get wlanlist output.

This article describe the way to disable specific SSID from AP CLI

2021-01-12T06:20:28-0800 2021-01-12T12:00:06-0800 https://support.ruckuswireless.com/articles/000011246 2021-01-12T00:52:51-0800 monthly 0.8 admin,premium knowledge_article_4486 knowledge_article_4486 2021-01-12T00:52:51-0800 000011246 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How to check the status of Geo Redundancy Cluster Configuration Sync ? <ul><li>Please check Smart Zone CLI command # show cluster-state for current cluster operation status</li></ul> <pre class="ckeditor_codeblock" style="margin-left: 40px;"> VSZ01# show cluster-state Current Management Service Status : In service Current Node Status : In service Cluster Status : Maintenance Cluster Operation : ConfigurationRestore System Mode : None Cluster Node Information ---------------------------------------------------------------- No. Name Role ----- ------------------------ ----------- 1 VSZ01 LEADER 2 VSZ02 FOLLOWER</pre> <ul><li>Node service restart should be executed only when current node status and cluster operation reflect the following:</li></ul> <pre class="ckeditor_codeblock" style="margin-left: 40px;"> VSZ01# show cluster-state Current Management Service Status : In service Current Node Status : In service Cluster Status : In service Cluster Operation : None System Mode : None Cluster Node Information ---------------------------------------------------------------- No. Name Role ----- ------------------------ ----------- 1 VSZ01 LEADER 2 VSZ02 FOLLOWER</pre> <ul><li>Node CLI command # reload is also prohibited during the cluster config sync operation</li></ul> <pre class="ckeditor_codeblock" style="margin-left: 40px;"> VSZ01# reload % "configurationrestore" operation in progress, so reload system is not allowed. If it is necessary to reload system, please use "reload force", but this may impact whole service</pre> <ul><li>Consideration to provide warning for # service restart command is being evaluated in future releases</li></ul>

This article describes how to accurately view the current geo redundancy configuration sync status before performing a Smart Zone cluster node service restart.

2021-01-12T00:52:51-0800 2021-01-12T06:00:05-0800 https://support.ruckuswireless.com/articles/000008728 2021-01-11T10:16:08-0800 monthly 0.8 admin,premium knowledge_article_3642 knowledge_article_3642 2019-03-21T10:58:12-0700 000008728 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;Support license activation Installation, Support License Activation, SmartCell Gateway, virtual SmartCell Gateway How Do I Activate and Apply Ruckus Licensing on SmartZone OS? <ul><li>You will receive an email from Ruckus containing your unique activation code</li></ul> <img alt="User-added image" height="675" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gyle&feoid=00N50000002Cf3M&refid=0EM2J000000m3HI" width="500"></img> <ul><li>Please click on the activation code hyperlink within this email to be directed to our Ruckus Support Portal. You will be asked to log in to your account associated with this purchase. If you are already logged in, please make sure that you are using an account associated with this purchase.</li></ul> <img alt="User-added image" height="282" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gyle&feoid=00N50000002Cf3M&refid=0EM2J000000m3HN" width="500"></img> <ul><li>Once you are logged in, please make sure that the code displayed in the box matches the code in your email and click ‘Validate’</li></ul> <img alt="User-added image" height="281" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gyle&feoid=00N50000002Cf3M&refid=0EM2J000000m3HS" width="500"></img> <ul><li>For licenses that will be bound to a specific device, such as hardware support or right to use licenses, you will be asked to enter the serial number of the device on the following screen to bound the license to the device. All other licenses will be assigned to your license pool.</li></ul> <ul><li>Once you have activated your license, click the LiMAN button from the support homepage.</li></ul> <img alt="User-added image" height="283" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gyle&feoid=00N50000002Cf3M&refid=0EM2J000000m3HX" width="500"></img> <ul><li>You will see a list of smart devices in your account. To add or remove licenses from your pool, click the appropriate button under the actions on the right side of the row.</li></ul> <img alt="User-added image" height="282" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gyle&feoid=00N50000002Cf3M&refid=0EM2J000000m3Hc" width="500"></img> <img alt="User-added image" height="174" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gyle&feoid=00N50000002Cf3M&refid=0EM2J000000m3Hw" width="248"></img> <ul><li>You will then be able to add any number of licenses from your pool by entering the number you of licenses from each line that you wish to assign.</li></ul> <ul><li>The License Pool tab lists all of the available licenses that can be assigned to your smart devices.</li></ul> <img alt="User-added image" height="247" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gyle&feoid=00N50000002Cf3M&refid=0EM2J000000m3IB" width="500"></img> <ul><li>If you need to download the license to upload to your device manually, click the download button from the actions list.</li></ul> <img alt="User-added image" height="188" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gyle&feoid=00N50000002Cf3M&refid=0EM2J000000m3IG" width="226"></img> <ul><li>The license can be manually uploaded to the device or synced with the licensing server if the device has internet access and can access the licensing server at ruckuswirelss.flexnetoperations.com</li></ul> <ul><li>From the ‘Administration’ section of the main menu click Licensing.</li></ul> <img alt="User-added image" height="293" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gyle&feoid=00N50000002Cf3M&refid=0EM2J000000m3IL" width="147"></img> <ul><li>Then either click ‘Sync Now’ to sync with the license server, or ‘Upload’ to upload manually.</li></ul> <img alt="User-added image" height="103" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gyle&feoid=00N50000002Cf3M&refid=0EM2J000000m3IQ" width="278"></img> <ul><li>If you are uploading the license manually, please make sure that you select the correct node from the dropdown list that corresponds to the license file you are uploading.</li></ul> <ul><li>Repeat this for all nodes in the cluster.</li></ul> <img alt="User-added image" height="151" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gyle&feoid=00N50000002Cf3M&refid=0EM2J000000m3IV" width="320"></img>

How to Activate and Apply Ruckus Licensing on SmartZone OS from when the activation email is received, adding the licenses to a support account and assigning them to hardware.

2021-01-11T10:16:08-0800 2021-01-11T12:00:11-0800 https://support.ruckuswireless.com/articles/000006886 2021-01-11T10:26:38-0800 monthly 0.8 admin,premium knowledge_article_2968 knowledge_article_2968 2017-12-12T14:35:55-0800 000006886 Validated (External) Premium Ruckus icx switches Security;System network management Security, System Network Management, Ruckus ICX Switches How to recover from a lost password? Recovery from a lost password requires direct access to the serial port and a system reset. ---------- Note: You can perform this procedure only from the CLI. ---------- Follow the steps below to recover from a lost password: 1. Start a CLI session over the serial interface to the device 2. Reboot the device 3. At the initial boot prompt at system startup, enter b to enter the boot monitor mode 4. Enter no password at the prompt. (You cannot abbreviate this command.) This command will cause the device to bypass the system password check. 5. Enter boot system flash primary at the prompt. On ICX 6430 and ICX 6450 devices, enter: boot_primary. 6. After the console prompt reappears, assign a new password. You can find this information directly in the "fastiron-08030d-securityguide". Also, please watch this YouTube video from our BROCADE CAMPUS FEATURE EXPLAINER SERIES - PASSWORD RECOVERY: <a href="https://www.youtube.com/watch?v=SPj49zF1zLo&feature=youtu.be" target="_blank">https://www.youtube.com/watch?v=SPj49zF1zLo&feature=youtu.be</a>

See also YouTube link.

2021-01-11T10:26:38-0800 2021-01-11T12:00:06-0800 https://support.ruckuswireless.com/articles/000011214 2021-01-04T17:33:42-0800 monthly 0.8 admin,premium knowledge_article_4481 knowledge_article_4481 2021-01-04T17:33:42-0800 000011214 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting Performance, Troubleshooting, SmartCell Gateway What is my.ruckus and how does it work? The feature could be used to get the general details of the client and the AP. This especially helps in cases where the users are not technical and it is difficult to get the details from the controller Below are certain limitations while using the feature, - A performance degradation of around 10% is observed when the "my.ruckus" feature for LBO/Tunnel-WLAN/Non-Default-VLAN is enabled. - The "my.ruckus" configuration knob for tunneled WLAN does not support for SGRE tunnel. - The "my.ruckus" feature is mutually exclusive to Restricted AP Access (RAA) as RAA restricts reachability to AP’s management interface. - The feature is also mutually exclusive to Express WiFi(XWF). - In the case of captive portal WLANs, the "my.ruckus" ACLs are applied once the client authorizes and the captive portal ACLs are removed.

The article describes the my.ruckus feature on ruckus APs.

2021-01-04T17:33:42-0800 2021-01-04T18:00:06-0800 https://support.ruckuswireless.com/articles/000007611 2020-12-25T09:30:45-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4470 knowledge_article_4470 2018-01-18T17:03:56-0800 000007611 Validated (External) Public Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, virtual SmartCell Gateway, SZ100 Why my SNMP Trap Server is not receiving APDisconnection trap when event triggered however, if I trigger it manually from vSZ/SZ CLI, then it is received on Trap Server? Any SNMP Trap can be received by Trap server, once this it is configured from above procedure.

2020-12-25T09:30:45-0800 2020-12-25T12:00:06-0800 https://support.ruckuswireless.com/articles/000011103 2020-11-18T01:06:19-0800 monthly 0.8 admin,premium knowledge_article_4468 knowledge_article_4468 2020-11-18T01:06:19-0800 000011103 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway Why does ACS not seem to work in an R750 AP running on SZ 5.1.2 firmware? The Auto Cell Sizing option can be enabled in the AP, but in SZ code 5.1.2. this feature is not supported on R750 AP models. Support for Auto Cell Sizing in R750 APs was introduced in SZ 5.2.1.

2020-11-18T01:06:19-0800 2020-12-22T12:25:51-0800 https://support.ruckuswireless.com/articles/000011105 2020-11-18T01:10:44-0800 monthly 0.8 admin,premium knowledge_article_4466 knowledge_article_4466 2020-11-18T01:10:44-0800 000011105 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Insight The traffic volumes reported by SCI is much higher than expected, why? The fix for this issue is included in SCI 5.4.2. SCI can be upgraded, and any new data statistics figures received by SCI post-upgrade, will be correctly reflected and reported in the SCI database. Note that any of the massive volumes (PB/EX) statistics received when running 5.3.1 will not be corrected by the upgrade, as this statistical data is already within the database.

A summary of a known-issue i SCI 5.3.1, fixed in SCI 5.4.2

2020-11-18T01:10:44-0800 2020-12-22T12:25:49-0800 https://support.ruckuswireless.com/articles/000011096 2020-11-23T00:25:20-0800 monthly 0.8 admin,premium knowledge_article_4462 knowledge_article_4462 2020-11-23T00:25:20-0800 000011096 Validated (External) Premium Sz144;Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Firmware Configuration, Firmware, SZ144, SZ300, SCG200, virtual SmartCell Gateway, SZ100 Why can I not downgrade my AP zone to a particular version> There are a few reasons why an AP zone may not be downgraded to an earlier version. Most often this is caused by one of the following: - Incompatible AP models being in the zone. - AP FW not being available on that controller. - The zone was created on a newer version of FW. An AP zone may only be downgraded back to a previous version of FW that it was created on, or was previously upgraded to. For example, it is not possible to create a zone on 5.1, then downgrade it to 5.0. The zone must be created on 5.0 and then be upgraded to 5.1 for a future downgrade to be allowed.

Reasons why a AP zone cannot be downgraded to a particular version

2020-11-23T00:25:20-0800 2020-12-22T12:25:45-0800 https://support.ruckuswireless.com/articles/000011130 2020-12-02T01:22:04-0800 monthly 0.8 admin,premium knowledge_article_4458 knowledge_article_4458 2020-12-02T01:22:04-0800 000011130 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;System network management;Troubleshooting Installation, System Network Management, Troubleshooting, ZoneDirector Why is AP syslog showing truncated user.notice messages This issue should be resolved by changed the facility name to default value "Keep original" <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyeO&feoid=00N50000002Cf3M&refid=0EM2J000002Ik5k" style="width: 500px; height: 145px;"></img> The customer enabled/disabled the "reporting to remote syslog server" and apparently this stopped the AP from displaying the reported logging outputs.

After enabling external logging from Zone Director GUI AP syslog started displaying truncated user.notice messages

2020-12-02T01:22:04-0800 2020-12-22T12:25:40-0800 https://support.ruckuswireless.com/articles/000010907 2020-12-03T07:28:33-0800 monthly 0.8 admin,premium knowledge_article_4415 knowledge_article_4415 2020-09-23T00:59:35-0700 000010907 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway Why the captive portal stopped working after upgrading to 5.2? For SZ 5.2.0, the only option is to disable lighttpd on the APs. For SZ 5.2.1, APs should use AP patch 5.2.1.0.1017 available in support site for a complete fix.

Guest portal with custom captive Portal certificate on SCG stopped working after upgrading to 5.2

2020-12-03T07:28:33-0800 2020-12-22T12:25:38-0800 https://support.ruckuswireless.com/articles/000011116 2020-12-04T09:29:41-0800 monthly 0.8 admin,premium knowledge_article_4456 knowledge_article_4456 2020-12-04T09:29:41-0800 000011116 Validated (External) Premium Cloudpath;Virtual smartcell gateway;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Cloudpath, virtual SmartCell Gateway How to configure MAC authentication with Cloudpath There are two documents attached with this article.These document elaborates the MAC authentication configuration in vSZ controller and Cloudpath. <ul><li>Document 1 : MAC authentication configuration vSZ controller</li><li>Document 2 : MAC authentication configuration in Cloudpath</li></ul>

This article provides the configuration with respect to MAC authentication with Cloudpath

2020-12-04T09:29:41-0800 2020-12-22T12:25:36-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000GvYuSAK?attachment_index=0 2020-12-22T12:25:36-0800 monthly admin,premium knowledge_article_4456 knowledge_article_4456_attachment_1 MAC auth config in vSZ.pdf 388859.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA22J000000GvYuSAK?attachment_index=1 2020-12-22T12:25:36-0800 monthly admin,premium knowledge_article_4456 knowledge_article_4456_attachment_1 MAC auth config in CP.pdf 1964269.0 application/pdf https://support.ruckuswireless.com/articles/000011182 2020-12-15T07:52:42-0800 monthly 0.8 admin,premium knowledge_article_4454 knowledge_article_4454 2020-12-15T07:52:42-0800 000011182 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway Why did LWAPP2SCG fail to upgrade my AP's running 10.0.1 code Informed that ZD AP code newer then 9.12 (9.13 +) include the AP to SZ control program (wsgclient) and can directly join and upgrade to SZ firmware. This was verified using command: rkscli: get scg ------ SCG Information ------ SCG Service is enabled. AP is not managed by SCG. AP is not registered in SCG. State: DISCONNECTED Server List: Not found No SSH tunnel exists Failover List: Not found Failover Max Retry: 2 DHCP Opt43 Code: 6 Server List from DHCP (Opt43/Opt52): Not found SCG default URL: RuckusController SCG config|heartbeat intervals: 300|30 SCG gwloss|serverloss timeouts: 1800|7200 ----------------------------- OK AP can be manually moved to SZ using: set scg ip <SZ_control_ip> Or AP can be directed to SZ via DHCP option 43 with cpe subcode 06 using: https://shimi.net/services/opt43/ option 43 static prefix for vendor Ruckus Wireless (SCG): 06 (hex) IP count: 1 Concatenated IP string is: 10.9.153.12 (length: 11/0x0b chars) Which translates to... 31302e392e3135332e3132 (hex) Resulting IOS command would therefore be: option 43 hex 060b31302e392e3135332e3132 Note it is important to factory default ZD based AP's prior to or immediately after migrating to SZ otherwise some WLAN/SSID's will not be configured correctly This can be done using ZD CLI comands from debug: remote ap-cli -a f0:3e:90:0f:b0:00 "set factory" remote ap-cli -a f0:3e:90:0f:b0:00 "reboot" Or after AP's are connected to the SZ using the SZ GUI AP CLI scripts: #define AP FW version -- this should match or be older then AP version of that zone fw_version=1.1.2.0.102 #define Model class, at present we only support model=all model=all # Actual AP CLI command goes here, single line for single command set factory reboot

Zone Director AP' running 9.13 and above do not require LWAPP2SCG to Migrate to SZ

2020-12-15T07:52:42-0800 2020-12-22T12:25:33-0800 https://support.ruckuswireless.com/articles/000011104 2020-12-18T12:18:42-0800 monthly 0.8 admin,premium knowledge_article_4453 knowledge_article_4453 2020-11-16T17:24:56-0800 000011104 Validated (External) Premium Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, SPoT How do I avoid seeing the 'VALUE ILLEGAL' errors reporting bad parameters in the vSPOT image file? The issue is caused by vCentre unable to support the image. Rather than deploying the vSPoT server using the vCentre web interface, deploy the vSPoT (i.e. 'File > Deploy OVF Template') using the actual ESXi server host web interface.

This article explains why VMware throws an Error "Image: 'XX:X VALUE ILLEGAL: when deploying vSPoT

2020-12-18T12:18:42-0800 2020-12-22T12:25:32-0800 https://support.ruckuswireless.com/articles/000011199 2020-12-21T01:07:34-0800 monthly 0.8 admin,premium knowledge_article_4452 knowledge_article_4452 2020-12-21T01:07:34-0800 000011199 Validated (External) Premium Ruckus cloud wifi Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi Why the Captive portal 3rd Party (WISPr) - Other Provider Option in 20.08 was removed? It was erroneously added in 20.05 UI, however was a non-functional option. 3rd party captive portal (WISPr) "other Provider" will be added in 20.11, ETA for 20.11 is 1st quarter of 2021.

It is noticed that the OTHER PROVIDER option in the Captive Portal 3rd Party(WISPr) was there in Cloud UI 20.05 but not in 20.08

2020-12-21T01:07:34-0800 2020-12-22T12:25:31-0800 https://support.ruckuswireless.com/articles/000002191 2020-08-18T03:49:18-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4356 knowledge_article_4356 2013-08-08T12:30:32-0700 000002191 Validated (External) Public Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Installation;Known issues and workarounds Firmware, Installation, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor How to troubleshoot if you see the following error: "Model[zfxxxx] is not supported; connection request from AP refused" <ol><li>If you see the message as "Model[zfxxxx] is not supported; connection request from AP refused" check the Version from which the Access Point is supported and upgrade the Zone Director to that version.</li><li>If the AP is supported on the current firmware on the ZD and if the log is still seen in the ZD then the firmware image on the ZD might be corrupt and upgrading the ZD again to the same version using a different image file should resolve this.</li></ol>

This article explains the possible reasons for the "Model[zfxxxx] is not supported; connection request from AP refused" log that is seen under Monitor :: Events & Activities Menu.

2020-08-18T03:49:18-0700 2020-12-09T22:39:47-0800 https://support.ruckuswireless.com/articles/000003435 2019-01-27T10:23:45-0800 monthly 0.8 admin,premium knowledge_article_1313 knowledge_article_1313 2014-09-24T08:56:25-0700 000003435 Validated (External) Premium Sz300;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Scg200;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Installation Configuration, Installation, SZ300, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SCG200, virtual SmartCell Gateway, SZ100 Can we connect a Wired client to a Mesh Access point? Yes, the ethernet port of access points deployed as Mesh/ Root can be used to provide wired clients with access to the LAN in areas with weak wireless signal or to clients that do not have wireless capability.

Wired client to a Mesh Access Point

2019-01-27T10:23:45-0800 2020-12-06T12:51:00-0800 https://support.ruckuswireless.com/articles/000008888 2020-01-20T15:45:19-0800 monthly 0.8 admin,premium knowledge_article_3605 knowledge_article_3605 2019-03-08T13:46:48-0800 000008888 Validated (External) Premium Ruckus icx switches Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, Ruckus ICX Switches Is there a default password for Ruckus ICX Switches? Prior to FastIron 08.0.90 (GA) release, only Console and Telnet access was possible to a new un-configured Ruckus ICX switch. To facilitate SSH and Web access, and additionally to secure future Telnet (recommended) the following configuration is required. config t username <username> password <password> aaa authentication login default local enable super-user-password <pw> enable telnet password <pw> A new feature of FastIron 08.0.90 (GA) and later, Release Notes found <a href="https://support.ruckuswireless.com/documents/2677-ruckus-icx-fastiron-08-0-90-ga-release-notes" target="_blank">Here</a>, is a Default Username and Password. Default local Username: super Default local Password: sp-admin This now applies to all forms of access including Console, SSH, and Web2. Administrators configuring new ICX switches will be prompted to create a new password after logging in. Please Enter Login Name: super Please Enter Password: User login successful. User â€˜superâ€™ login successful with default password. Please change the password. Enter the new password for user super : Enter the reconfirm password for user super: Password modified successfully for user super Authentication is enabled in the device for Console/WEB/SSH.

Except for Console or Telnet access, prior to FI 08.0.90 admins had to enable authentication and a UserID/PW for SSH and WebUI access.

2020-01-20T15:45:19-0800 2020-11-26T02:14:50-0800 https://support.ruckuswireless.com/articles/000006295 2020-08-12T04:08:41-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3733 knowledge_article_3733 2017-03-10T14:25:38-0800 000006295 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, Unleashed Is it possible to change the Standby-Master Role of Unleashed AP? Unleashed network is designed to select the Standby-Master automatically. Hence, there is no configuration or force option to choose the Standby role AP. However CU *can* (ie for test purpose) set the role as Master or Member AP using below CLI command: rkscli: set election Usage: set election {options} -> debug <0~0x0xFFFFF> -> role <0:Member 2:Master 3:clear> If you want to fix AP election role as Member, you can input “set election role 0” If you want to set Auto AP role election, you would input “set election role 3” Default status is Auto election. Starting from 200.7 version, role change commands are different for member APs, as Preferred master option introduced on GUI, please refer below. <img alt="User-added image" height="172" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxkG&feoid=00N50000002Cf3M&refid=0EM2J000000qOaR" width="500"></img> rkscli: get version Ruckus T300 Multimedia Hotzone Wireless AP Version: 200.7.10.102.64 OK rkscli: set election Usage: set election {options} -> debug <1=ERROR 2=WARN 4=INFO 8=DEBUG -> role <0=Clear 1=Member>

Unleashed Master / Standby role assignment is dynamic, not manually configured. AP CLI feature configuration is possible

2020-08-12T04:08:41-0700 2020-11-24T10:09:20-0800 https://support.ruckuswireless.com/articles/000010563 2020-07-24T11:30:18-0700 monthly 0.8 admin,premium knowledge_article_4222 knowledge_article_4222 2020-06-05T11:49:13-0700 000010563 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, Cloudpath Why am I getting error pop up "Copy && paste URL" and unable to run the NetworkWizardLoader.exe file? The issue is permanently resolved in CP ES version 5.7.x.x though we do not have an ETA now.

Customer trying to enroll devices and enrollment works fine,they are able to download the install file. However, when running the file, they get the error: "Copy && paste the URL from the browser in to the box below". When the user does that, it brings them right back to the download page and continues the loop.

2020-07-24T11:30:18-0700 2020-11-18T19:49:21-0800 http://support.ruckuswireless.com/article_attachments/kA22J000000Pia5SAC?attachment_index=0 2020-11-18T19:49:21-0800 monthly admin,premium knowledge_article_4222 knowledge_article_4222_attachment_1 Cloud841.pdf 946940.0 application/pdf https://support.ruckuswireless.com/articles/000009889 2020-01-06T10:29:46-0800 monthly 0.8 admin,premium knowledge_article_3982 knowledge_article_3982 2019-10-24T00:46:34-0700 000009889 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration Performance, Configuration, SmartCell Gateway, virtual SmartCell Gateway How can wired client that is connected via AP Ethernet LAN be seen in the GUI monitoring? Configuration needs to be done on AP Ethernet port where wired client is connected. We need to edit AP port settings and set it to 802.1x authentication to achieve this. Edit AP config -> Model specific -> AP port settings -> create an Ethernet port profile. <img alt="User-added image" height="376" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054RJ&feoid=00N50000002Cf3M&refid=0EM2J000000vRlw" width="500"></img>

How Client that is connected via wire can be seen in the GUI monitoring.

2020-01-06T10:29:46-0800 2020-11-13T12:47:23-0800 https://support.ruckuswireless.com/articles/000004657 2017-10-23T14:38:34-0700 monthly 0.8 admin,premium knowledge_article_1924 knowledge_article_1924 2015-06-08T00:28:44-0700 000004657 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, SmartCell Gateway, virtual SmartCell Gateway, SZ100 How do import batches of access points on the SCG controller? There may be times when you wish to batch provision access point that will be placed into a specific zone. 1) First generate a template - It will need to be filled in with information such as AP MAC, Zone Name, AP Name and is done by going to Configuration>Access Points>Export>Export All Batch Provisioned APs. <img alt="User-added image" height="142" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxJL&feoid=00N50000002Cf3M&refid=0EM50000000LlKk" style="width: 754px; height: 299px;" width="500"></img> 2) Once you have your import csv file Go to Configuration>Access Points 3) Click the import>import Batch Provisioned AP’s and select your file. <img alt="User-added image" height="120" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxJL&feoid=00N50000002Cf3M&refid=0EM50000000LlKu" style="width: 931px; height: 263px;" width="500"></img> The controller displays the import results. Any errors that occur during the import process will be listed by the controller.

Import Batch Provisioning APs

2017-10-23T14:38:34-0700 2020-11-13T09:10:44-0800 https://support.ruckuswireless.com/articles/000011093 2020-11-10T08:01:23-0800 monthly 0.8 admin,premium knowledge_article_4450 knowledge_article_4450 2020-11-10T08:01:23-0800 000011093 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Performance;System network management Performance, System Network Management, SmartCell Insight Why is the total wireless traffic displaying throughput figures lower than my site router? Regarding the following SCI Dashboard table: <img alt="User-added image" height="314" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyZY&feoid=00N50000002Cf3M&refid=0EM2J000001DNFn" width="500"></img> Key points to understand: 1. SCI collects Total Wireless Traffic data every 15 minutes from the wireless controller, so the calculation is an average over that time. 2. The Rx Rate and Tx Rates are not live figures - they are aggregated throughput figures across that time period. 3. To calculate the Max, Average and Min figures, the data figures for each category are divided by the time period, rather than displaying the peak data-rate achieved in a momentary burst. 4. SCI does still provides Max / Avg / Min rates, as follows. As a simplified example, there are 3 wireless clients, with the following data rate reported for each at a given moment: client 1: 2 mbps client 2: 5.5 mbps client 3: 12 mbps The average would be calculated as (2 + 5.5 + 12) / 3 = 6.5 Mbps. Across the 15 minute period, client 1, 2 and 3 reach a maximum recorded data rate of 12Mbps each. The Max would be calculated as (12+12+12) / 3 = 12Mbps. Across the same 15 minute period, client 1, 2 and 3 may have lowest recorded data rates of 2, 5.5 and 5.5. The Min would be calculated as (2 + 5.5 + 5.5)/3 = 4.33Mbps The overall results would be displayed as: Max = 12 Mbps Avg = 6.5 Mbps Min = 4.33 Mbps Further Note: In WiFi, the nature of half-duplex communications result in a ~50% loss in achievable (advertised) throughput . The actual data rate achievable is actually the max advertised rate, divided by half (for half-duplex), and then subtracting a small percentage more to account for management traffic overhead. Therefore, what the AP is reporting on (and thus SCI) is not going to identically reflect a wired uplink rate, but rather the actual data payload over the radio.

An explanation of how the Total Wireless Traffic dashboard is calculated

2020-11-10T08:01:23-0800 2020-11-10T12:00:06-0800 https://support.ruckuswireless.com/articles/000011031 2020-10-30T03:46:02-0700 monthly 0.8 admin,premium knowledge_article_4445 knowledge_article_4445 2020-10-30T03:46:02-0700 000011031 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How do I fix config sync error: Unqualified target cluster ? Remedy one or more of the identified unqualified reason noted in root cause and printed in web-critical.log to restore geo redudancy sync process

This article outlines how to resolve Smart Zone geo redudancy sync error: Unqualified target cluster.

2020-10-30T03:46:02-0700 2020-10-30T06:00:07-0700 https://support.ruckuswireless.com/articles/000002406 2018-03-05T11:42:18-0800 monthly 0.8 admin,premium knowledge_article_1507 knowledge_article_1507 2014-01-18T07:25:04-0800 000002406 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Is it possible to customize captive portal page on the ZoneDirector? ZoneDirector does not support customization of captive portal page. HotSpot services which requires external web server can be used with any customized web page. (Document attached to the article which explains about hotspot configuration on the ZD)

Attached document explains about hotspot configuration on the ZD

2018-03-05T11:42:18-0800 2020-10-30T03:07:04-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PEQRCA4?attachment_index=0 2020-10-30T03:07:04-0700 monthly admin,premium knowledge_article_1507 knowledge_article_1507_attachment_1 appnote-wispr.pdf 3643042.0 application/pdf https://support.ruckuswireless.com/articles/000011030 2020-10-29T11:53:49-0700 monthly 0.8 admin,premium knowledge_article_4444 knowledge_article_4444 2020-10-29T11:53:49-0700 000011030 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why do we frequently see high bandwidth utilization alarm in Splunk for Smart Zone loopback interface ? Software update to Smart Zone 5.2.2 and newer release will not return SNMP interface-mib query for loopback interface

By default splunk automatically monitors Smart Zone loopback interface which will frequently cause high utilization false alarms and perception of Smart Zone as a system. Software updates in Smart Zone 5.2.2 and newer have addressed this issue.

2020-10-29T11:53:49-0700 2020-10-29T12:00:06-0700 https://support.ruckuswireless.com/articles/000003286 2020-10-23T00:50:58-0700 monthly 0.8 admin,premium knowledge_article_3545 knowledge_article_3545 2019-01-20T22:40:08-0800 000003286 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to disable Mesh functionality on a specific AP manged by the ZD using CLI commands? To disable the Mesh functionality on a specific AP follow the below commands: Login to SSH using the ZD IP address and its credentials: ruckus> en ruckus# config <div>ruckus(config)# ap <Mac address of the AP></div> <div>The AP <Mac address> has been loaded. To save the AP, type 'end' or 'exit'. </div> <div>ruckus(config-ap)# mesh mode disable </div> <div>The command was executed successfully. To save the changes, type 'end' or 'exit'. </div> <div> </div>

2020-10-23T00:50:58-0700 2020-10-23T06:00:08-0700 https://support.ruckuswireless.com/articles/000008847 2020-10-23T01:17:33-0700 monthly 0.8 admin,premium knowledge_article_3588 knowledge_article_3588 2019-02-22T15:20:34-0800 000008847 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector How can I show all available/connected APs in the MAP view? From the MAP view, APs list will show 6 APs at a time. As you move the APs into the MAP the other APs will then show up.

All connected APs are not available in the MAP view tab, until moved onto the map.

2020-10-23T01:17:33-0700 2020-10-23T06:00:06-0700 https://support.ruckuswireless.com/articles/000010337 2020-04-13T02:36:25-0700 monthly 0.8 admin,premium knowledge_article_4134 knowledge_article_4134 2020-04-13T02:36:25-0700 000010337 Validated (External) Premium Ruckus cloud lte Configuration Configuration, Ruckus Cloud LTE How can I use PTP on my LTE cloud account Set the profile of the PTP to below: Step 1: On PTP device: <div style="margin-left: 40px;">ITU-8275.2 imposes the following: PTP IP Unicast (No support for IP Multicast or L2). Similar to PTP Telecom-2008 Profile. Domain value: 44 to 63 Priority 1 and 2: 128</div> Step 2: On cloud account: <div style="margin-left: 40px;">Navigate in the Cloud to the Venue. Edit the LTE settings in the lower right hand side. In the General tab, " Manage" the timing masters. Manually add the ip address of the PTP in the External devices. </div> <div style="margin-left: 80px;"><img alt="User-added image" height="416" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054sK&feoid=00N50000002Cf3M&refid=0EM2J000001pL9e" width="500"></img></div>

Customer wants to configure PTP on LTE cloud to synchronize Master/Slave timing.

2020-04-13T02:36:25-0700 2020-10-22T08:05:56-0700 https://support.ruckuswireless.com/articles/000009453 2020-10-15T05:48:45-0700 monthly 0.8 admin,premium knowledge_article_3794 knowledge_article_3794 2019-06-24T13:03:24-0700 000009453 Validated (External) Premium Smartcell ap;Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration Configuration, SmartCell AP, virtual SmartCell Gateway, SZ100 How to enable FIPS on SZ and AP? The FIPS Publication 140-2 is a technical standard and worldwide de-facto standard for the implementation of cryptographic modules. The FIPS Publication 140-2 contains security standards developed by the United States government and the National Institute of Standards and Technology (NIST). You can configure the device to run in FIPS mode to ensure that the device is operating according to the standards stated in FIPS Publication 140-2. We can enable FIPS on the SZ and AP through CLI. Commands to enable/disable FIPS on SZ: SZ>en SZ#fips enable SZ#fips disable When FIPS mode is enabled or disabled, SZ is initiated with set-factory to clean up the configuration. Note: Do not load FIPS SmartZone on Non-FIPS SKU hardware. Do not enable/disable FIPS on any Non-FIPS purpose controller, or you will Zeroize(Brick) your system. Commands to enable/disable FIPS on AP: >set fips-mode enable >set fips-mode disable How to validate FIPS SKU from AP CLI? Execute this command: "get boarddata" from the AP CLI and check the "FIPS SKU" and "FIPS MODE" at the bottom of the output. rkscli: get boarddata name: R610 magic: 35333131 cksum: bcb rev: 5.4 Serial#: 992049000080 Customer ID: 4bss Model: R610 V54 Board Type: GD50 V54 Board Class: QCA_ARM Random#: 0000 0000 0000 0000 0000 0000 0000 0000 symimgs: yes ethport: 2 V54 MAC Address Pool: yes, size 16, base 4C:B1:CD:0D:17:50 major: 259 minor: 1 pciId: 0000 wlan0: yes 4C:B1:CD:0D:17:58 wlan1: yes 4C:B1:CD:0D:17:5C eth0: yes 4C:B1:CD:0D:17:53 eth1: yes 4C:B1:CD:0D:17:54 eth2: - 4C:B1:CD:0D:17:55 eth3: - 4C:B1:CD:0D:17:56 eth4: - 4C:B1:CD:0D:17:57 eth5: - D8:38:FC:00:00:00 uart0: yes sysled: no, gpio 0 sysled2: no, gpio 0 sysled3: no, gpio 0 sysled4: no, gpio 0 Fixed Ctry Code: yes Antenna Info: yes, value 0x00007776 usb installed: yes Local Bus: disabled factory: yes, gpio 8 serclk: internal cpufreq: calculated 0 Hz sysfreq: calculated 0 Hz memcap: disabled watchdg: enabled FIPS SKU: yes FIPS MODE: disabled The following AP models does support the FIPS. Once FIPS is enabled on AP, it goes for a reboot. - R610, R710, R720, T610, T710 & E510 FIPS-Compliant Product SKUs: - Controller Products: PF1-S124-US00 PF1-S104-US00 PF1-S300-WW10 PF1-S300-WW00 LF9-VSCG-WW00 LF9-vSZD-WW00 - AP Products: 9F1-R720-US00 9F1-R710-US00 9F1-R610-US00 9F1-T710-US01 9F1-T710-US51 9F1-T610-US01 9F1-T610-US51

This article provides information on configuring FIPS on SmartZone and AP

2020-10-15T05:48:45-0700 2020-10-15T06:00:06-0700 https://support.ruckuswireless.com/articles/000009662 2020-10-12T12:47:48-0700 monthly 0.8 admin,premium knowledge_article_4440 knowledge_article_4440 2019-08-02T00:31:29-0700 000009662 Validated (External) Premium Cloud services Configuration;Installation;Troubleshooting;Registration Configuration, Installation, Troubleshooting, Registration, Cloud Services Why is my LTE AP showing as not certified It takes about 10-15 minutes for the AP to initialize in the LTE Cloud. Once the AP has been successfully initialize in the cloud, the Save and Certify button in Edit tab will be visible. Click the button to certify the AP.

LTE AP showing as not certified

2020-10-12T12:47:48-0700 2020-10-12T18:00:14-0700 https://support.ruckuswireless.com/articles/000009772 2020-10-12T14:15:18-0700 monthly 0.8 admin,premium knowledge_article_4439 knowledge_article_4439 2019-09-06T12:14:41-0700 000009772 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Installation Installation, Unleashed How many AP's and number of clients are supported on unleashed 200.7 version? From 200.7 we have enhanced the Unleashed scale to 50 APs from 25 and upto 1,024 clients. Please find below conditions to support 50AP's and 1024 clients: 1. All APs must be wave 2 AP's. (Ex R610, R710 ...) 2. If connected APs are less than 25, if any wave 1 AP joins, the system will limit to 25 APs and 512 clients. 3. With an Unleashed network of more than 25 APs, If Wave 1 AP attempt to join, the system will reject this wave1 AP join request, the system still can support 50 APs and 1024 clients, other wave2 APs can join successfully. 4. If the number of APs are less than 25 and wave1 AP already exist in the system, the system can support only 25 APs and 512 clients.

This KB has a information about enhancements in unleashed firmware 200.7.x

2020-10-12T14:15:18-0700 2020-10-12T18:00:13-0700 https://support.ruckuswireless.com/articles/000009776 2020-10-12T14:17:50-0700 monthly 0.8 admin,premium knowledge_article_4438 knowledge_article_4438 2019-09-09T10:57:27-0700 000009776 Validated (External) Premium Virtual smartcell gateway Troubleshooting Troubleshooting, virtual SmartCell Gateway I am not able to access my VSZ using SSH in GCE but https;//ip:8443 works. Generate a public key via Putty Gen or the best way is to use the GCE SSH cloud and generate the public key from there. Copy and paste to the SSH client. Follow this KB from Google: <a href="https://cloud.google.com/compute/docs/instances/connecting-to-instance" target="_blank">https://cloud.google.com/compute/docs/instances/connecting-to-instance</a> How to use GCE SSH: <img alt="User-added image" height="215" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyPE&feoid=00N50000002Cf3M&refid=0EM2J000000v6v5" width="500"></img>

I am not able to access my VSZ using SSH in GCE but https;//ip:8443 works.

2020-10-12T14:17:50-0700 2020-10-12T18:00:12-0700 https://support.ruckuswireless.com/articles/000009798 2020-10-12T14:27:32-0700 monthly 0.8 admin,premium knowledge_article_3929 knowledge_article_3929 2019-09-12T10:18:54-0700 000009798 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Installation Installation, SmartCell Insight How to form a SCI cluster (Master and Data node) in AWS cloud platform In AWS, a VM instance dynamically provided a Public and Private IP based on your VPC (Virtual Private Cloud) IP scheme. For a SCI to form a cluster in AWS platform, the SCI requires the Private IP of the Master node not the Public IP. <img alt="User-added image" height="252" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyPi&feoid=00N50000002Cf3M&refid=0EM2J000000v98C" width="500"></img> Note: To add a VSZ in AWS SCI, you need to use the SCI Master node Public IP.

How to form a SCI cluster (Master and Data node) in AWS cloud platform

2020-10-12T14:27:32-0700 2020-10-12T18:00:11-0700 https://support.ruckuswireless.com/articles/000009804 2020-10-12T14:31:45-0700 monthly 0.8 admin,premium knowledge_article_3931 knowledge_article_3931 2019-09-13T10:40:04-0700 000009804 Validated (External) Premium Scg200;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting Performance, Troubleshooting, SCG200 What to do if I get alarm Fan Redundancy Error on my SCG200? The alarm Fan Redundancy Error was coming on the SCG200. From the "Alarm and Event Reference Guide for SmartZone" doc of SCG200 available on Ruckus Support: Alarm ipmiFanStatus Alarm Type ipmiFanStatus Alarm Code 912 Severity Major Aggregation Policy From the event code 912 an alarm is raised for every event. A single event triggers a single alarm. Auto Clearance The alarm code is auto cleared with the event code 937. Attribute "id"="x", "status"="xxxxx", "nodeMac"="xx:xx:xx:xx:xx:xx" Displayed on the web interface Fan module [{id}] [{status}] on control plane [{nodeMac}] Description This alarm is triggered when the control plane’s fan module shows the status as not working. Recommended Actions Replace the fan module. This alarm comes when there is some problem with a fan module of the control plane. When this alarm comes, Fan Status LED will go Amber/Red, <img alt="User-added image" height="285" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyPx&feoid=00N50000002Cf3M&refid=0EM2J000000v9gT" width="500"></img> This alarm is cleared with alarm code 937: Event ipmiREFanStatus Event Type ipmiREFanStatus Event Code 937 Severity Informational Attribute "id"="x", "status"="xxxxx", "nodeMac"="xx:xx:xx:xx:xx:xx" Displayed on the web interface Fan module [{id}] [{status}] on control plane [{nodeMac}]. Description This event occurs when the fan module comes back to normal status. Sometimes the fan come back to normal status by itself of after a reboot of the unit. If alarm is still there a RMA will be needed.

Explanation of the alarm Fan Redundancy Error.

2020-10-12T14:31:45-0700 2020-10-12T18:00:10-0700 https://support.ruckuswireless.com/articles/000009809 2020-10-12T14:38:17-0700 monthly 0.8 admin,premium knowledge_article_3934 knowledge_article_3934 2019-09-17T14:34:09-0700 000009809 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Gateway Why are my predefined 30 characters DPSK having 31 or 32 length? Use ONLY Microsoft Excel to open the DPSK CSV file which is recommended and supported.

Customer is generating multiple DPSKs in the vSZ, some of these generated DPSKs are longer than predefined 30 characters (31 or 32) and hence these generated keys are not usable.

2020-10-12T14:38:17-0700 2020-10-12T18:00:09-0700 https://support.ruckuswireless.com/articles/000009801 2020-10-12T15:10:45-0700 monthly 0.8 admin,premium knowledge_article_3971 knowledge_article_3971 2019-09-13T10:31:39-0700 000009801 Validated (External) Premium Ruckus support services Troubleshooting Troubleshooting, Ruckus Support Services How to join WebEx to provide access to devices in a customer environment so that Ruckus TAC can remotely troubleshoot issues? Please refer to the Word Document attached. This document is aimed at providing the customer, a step-by-step instructions (with pics) and also, some additional information about WebEx. In other words, the word document can be treated as a complete guide to using the WebEx application.

To help a customer join a remote session with Ruckus TAC to troubleshoot issues remotely using the Cisco WebEx application.

2020-10-12T15:10:45-0700 2020-10-12T18:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zSSSAY?attachment_index=0 2020-10-12T18:00:08-0700 monthly admin,premium knowledge_article_3971 knowledge_article_3971_attachment_1 WebEx.docx 10818785.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000009672 2020-10-12T15:41:06-0700 monthly 0.8 admin,premium knowledge_article_3990 knowledge_article_3990 2019-08-02T01:49:36-0700 000009672 Validated (External) Premium Sz300;Ruckus icx switches;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Known issues and workarounds Known Issues and Workarounds, SZ300, Ruckus ICX Switches, virtual SmartCell Gateway, SZ100 Why is the 'SwitchOffline' SNMP trap missing key event data? The feature will be improved in 5.2, including more key data into the SNMP trap for 'switch offline' event.

The 'SwitchOffline' SNMP trap does not provide the data points usually seen in a trap. It is not directly comparable to the event trap information sent for an 'APdisconnect' event.

2020-10-12T15:41:06-0700 2020-10-12T18:00:07-0700 https://support.ruckuswireless.com/articles/000009679 2020-10-12T16:15:36-0700 monthly 0.8 admin,premium knowledge_article_3974 knowledge_article_3974 2019-08-06T19:13:22-0700 000009679 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Security Security, SmartCell Gateway, virtual SmartCell Gateway Which release updates the latest dropbear version? Release 5.1.x has been updated with dropbear v2018.76 version. # rkscli -c "get version" Ruckus R710 Multimedia Hotzone Wireless AP Version: 5.1.1.0.624 OK # /usr/sbin/dropbear -V Dropbear v2018.76 For customers staying in 3.6 firmware, fix has been backported on Release 3.6.2 Patch 2 with Dropbear v2018.76

This article explains on update of dropbear version in new release 3.6.2

2020-10-12T16:15:36-0700 2020-10-12T18:00:06-0700 https://support.ruckuswireless.com/articles/000007894 2018-06-07T16:04:18-0700 monthly 0.8 admin,premium knowledge_article_3319 knowledge_article_3319 2018-06-07T16:04:18-0700 000007894 Validated (External) Premium Ruckus icx switches Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, Ruckus ICX Switches Are there issues with Pre-standard PoE phones on ICX switches? <a name="_MailEndCompose">Yes, I have had both of these phones operational on all 6K and 7250/7450 switches without any problem.</a> Just use the "legacy-inline-power" to ensure it’s supported. Also, I haven’t tried this with 8.0.7, but all of the Configuration Guides still show full support for Legacy power.

Use the 'legacy-inline-power' command on ICX switches to be sure of Pre-standard PoE phone compatibility

2018-06-07T16:04:18-0700 2020-10-12T07:24:37-0700 https://support.ruckuswireless.com/articles/000006239 2019-12-11T03:02:18-0800 monthly 0.8 admin,premium knowledge_article_4016 knowledge_article_4016 2017-02-06T16:23:20-0800 000006239 Validated (External) Premium Scg200;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration Configuration, SCG200, virtual SmartCell Gateway, SZ100 How to retrieve the Cluster Backup from SZ using FTP ? IMPORTANT NOTE: When the cluster backup process runs, each node in the cluster creates its' own cluster backup file. You will need all of the files in order to build a copy of the cluster within your lab. Meaning you will need to transfer the cluster backup file off each node. E.g a 2-node cluster will require you to transfer the file from both nodes, 3-node cluster means you get all 3 cluster backup files, 4-node cluster, 4 cluster backup files. 1. You can create the cluster backup using either the SZ GUI, or else from command-line. In command-line you can specify whether you want specific types of backup, or the entire backup. See the SZ Admin Guide for details of what each back type contains. Ruckus Support will always require the whole backup, which means you just specific 'backup' with no additional options: <div style="margin-left: 40px;">Smartzone# backup config Backup configuration network Backup network configuration schedule Schedule configuration backup <cr> Backup whole cluster system</div> Run the whole cluster backup with the following commands: <div style="margin-left: 40px;">enable backup yes</div> Below is a detailed example: <div>Smartzone# backup Please note that event, alarm and statistic data will be deleted from the backup file after 7 days. Do you want to backup whole system (or input 'no' to cancel)? [yes/no] yes Starting to backup whole system... Successful operation</div> 2. Once complete, view the backup created: <div style="margin-left: 40px;">Smartzone# show backup No. Created on Patch Version File Size ----- ----------------------------- ----------------------------- ----------------------------- 1 2018-04-24 18:15:16 GMT 3.4.1.0.208 15.5GB 2 2018-08-29 19:49:29 GMT 3.4.2.0.217 60.1GB</div> 3. Now transfer the backup using FTP or TFTP using these commands: <div style="margin-left: 40px;"> copy backup ftp://username:password@<ftp server IP>/ Example below: SZ100-103# copy backup ftp://tac:tac@1.1.1.1/ Please note that event, alarm and statistic data will not be saved in the exported backup file. No. Created on Patch Version File Size ----- ----------------------------- ----------------------------- ----------------------------- 1 2019-12-11 07:31:19 GMT 5.1.2.0.302 1.4GB 2 2019-12-11 07:37:48 GMT 5.1.2.0.302 785.1MB Please choose a backup to send to remote FTP server or 'No' to cancel: 1 Starting to copy the chosen backup to remote FTP server... Starting to encrypt backup file... tar: ./e6288156-7f0b-4e23-abd3-59f26e9ddf61/cb/db/data/wsg/ap/wsg-ap.wsg_ap_mobilityZoneUUID-jb-2-CRC.db: file changed as we read it Starting to generate checksum for backup file... </div> 4. Repeat step 2 to get the backup file from any remaining nodes in the cluster.

Step-through guide to obtaining the cluster backup

2019-12-11T03:02:18-0800 2020-10-12T07:19:49-0700 https://support.ruckuswireless.com/articles/000010908 2020-10-09T03:48:52-0700 monthly 0.8 admin,premium knowledge_article_4433 knowledge_article_4433 2020-10-09T03:48:52-0700 000010908 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;System network management Configuration, System Network Management, Cloudpath How to check node availability from the Load-Balancer in Active-Active setup -- Login to the CloudPath CLI (SSH): curl https://<cloudpathhostname>/ admin/pingnode where, cloudpathhostname is the fully qualified domain name of a node in the cluster. Examples shown below: <img alt="User-added image" height="293" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyDD&feoid=00N50000002Cf3M&refid=0EM2J000001Cx2a" width="500"></img> <img alt="User-added image" height="222" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyDD&feoid=00N50000002Cf3M&refid=0EM2J000001Cx2f" width="500"></img> Result: The HTTP return should be a "Success" message, and the HTTP status code should be 200

One can check the availability of each node in the cluster from the Load-Balancer

2020-10-09T03:48:52-0700 2020-10-09T06:00:06-0700 https://support.ruckuswireless.com/articles/000010929 2020-10-07T00:27:06-0700 monthly 0.8 admin,premium knowledge_article_4431 knowledge_article_4431 2020-10-07T00:27:06-0700 000010929 Validated (External) Premium Unleashed;Mobile apps;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;RUCKUS One Mobile Apps;Ruckus Cloud Mobile Apps Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Unleashed, Mobile Apps How to restore the Mobile App when there is no access The options provided before on the Troubleshooting Steps should fix the issue

Steps to follow in case the Mobile App is not working (unleashed)

2020-10-07T00:27:06-0700 2020-10-07T06:00:06-0700 https://support.ruckuswireless.com/articles/000009478 2020-10-06T13:56:32-0700 monthly 0.8 admin,premium knowledge_article_3863 knowledge_article_3863 2019-06-25T15:04:10-0700 000009478 Validated (External) Premium Virtual smartcell gateway Configuration;Troubleshooting Configuration, Troubleshooting, virtual SmartCell Gateway Why does the AP command "set arc wlanx enable" return as disable without any error? Use the WEB UI to enable/disable the ARC

The AP command "set arc wlanx enable" return as disable without any error

2020-10-06T13:56:32-0700 2020-10-06T18:00:07-0700 https://support.ruckuswireless.com/articles/000010950 2020-10-06T10:01:21-0700 monthly 0.8 admin,premium knowledge_article_4430 knowledge_article_4430 2020-10-06T10:01:21-0700 000010950 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Can I upgrade AP Zone template firmware? Once created, a Zone template firmware cannot be changed and this is as per current system design, as of 5.2.1 version.

Article explains the AP Zone template limitation, regarding its AP firmware.

2020-10-06T10:01:21-0700 2020-10-06T12:00:07-0700 https://support.ruckuswireless.com/articles/000010914 2020-10-06T11:45:29-0700 monthly 0.8 admin,premium knowledge_article_4429 knowledge_article_4429 2020-10-02T00:14:46-0700 000010914 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, Unleashed What is the correct path to upgrade unleashed access points from 200.3 to 2007 or later versions? Follow the below path to upgrade, if Unleashed running on 200.3 or older version. R600_200.3.9.13.228 > R600_200.5.10.0.235 > R600_200.7.10.202.118 >> and higher

Article explains a problem seen when upgrading Unleashed from 200.3, directly to 200.7 or higher, and it's solution.

2020-10-06T11:45:29-0700 2020-10-06T12:00:06-0700 https://support.ruckuswireless.com/articles/000009522 2020-10-02T10:09:12-0700 monthly 0.8 admin,premium knowledge_article_3855 knowledge_article_3855 2019-07-15T06:56:43-0700 000009522 Validated (External) Premium Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Known issues and workarounds Known Issues and Workarounds, SZ300, SCG200, virtual SmartCell Gateway, SZ100 Why does it take a long time for the wireless client authentication error to go away after a SCG200 cluster reload ? <ul><li>Allow time for the radius proxy wlan configuration to finish loading</li><li>Use the guideline of 4 seconds per WLAN configured</li><li>If curious on which wlanconfig radius proxy is processing, please enable radius proxy debug in the V/SCG200 GUI and review the radiusd.log</li></ul> <pre class="ckeditor_codeblock"> [Mon Jul 01 2019 17:25:23:049][controller][RADIUS][DBG][TID=1457748704][rtconfig.c:5269] Number of wlanConfig received is:(1576) [Mon Jul 01 2019 17:25:26:955][controller][RADIUS][DBG][TID=1457748704][rtconfig.c:5269] Number of wlanConfig received is:(1577) [Mon Jul 01 2019 17:25:30:820][controller][RADIUS][DBG][TID=1457748704][rtconfig.c:5269] Number of wlanConfig received is:(1578) [Mon Jul 01 2019 17:25:34:646][controller][RADIUS][DBG][TID=1457748704][rtconfig.c:5269] Number of wlanConfig received is:(1579) [Mon Jul 01 2019 17:25:38:496][controller][RADIUS][DBG][TID=1457748704][rtconfig.c:5269] Number of wlanConfig received is:(1580) *** Radius proxy will finish loading the config when the number of wlanconfig received equals the number of WLAN configured in the V/SZ/SCG200 cluster.</pre>

In cases where there are high number of WLANs with radius proxy configured on the SCG200, the wireless client will be denied access until all of the radius proxy wlan config is loaded.

2020-10-02T10:09:12-0700 2020-10-02T12:00:07-0700 https://support.ruckuswireless.com/articles/000009498 2020-10-02T10:44:03-0700 monthly 0.8 admin,premium knowledge_article_3853 knowledge_article_3853 2019-07-15T06:55:32-0700 000009498 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why Chinese ssid name in redirect message in SCG/SZ wispr wlan is not readable? Fix is available in SZ 3.4.2 patch 4-3.4.2.0.245, 3.6 and later release. Customers can upgrade to the above release to fix the problem.

Chinese SSID name appeared in portal redirect message is encoded with utf-8 and can't be decoded to proper Chinese characters in wispr wlan in 3.5 and befoe release

2020-10-02T10:44:03-0700 2020-10-02T12:00:06-0700 https://support.ruckuswireless.com/articles/000010925 2020-09-30T00:18:51-0700 monthly 0.8 admin,premium knowledge_article_4425 knowledge_article_4425 2020-09-30T00:18:51-0700 000010925 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway How to change the IP address of a VSZH with Single Interface configuration A VSZH with a single interface configuration, the control-cluster-management are bundled. Execute the following to change the IP address for a single interface configuration: ruckus> en ruckus# config ruckus(config)# interface control-cluster-management ruckus(config-if)# ip address<IP address> <subnet mask> <gateway> Done

How to change the IP address of a VSZH with Single Interface configuration

2020-09-30T00:18:51-0700 2020-09-30T06:00:08-0700 https://support.ruckuswireless.com/articles/000010927 2020-09-30T00:21:09-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4424 knowledge_article_4424 2020-09-30T00:21:09-0700 000010927 Validated (External) Public Sz300;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, SZ300 How to get SNMP MIB from DP of SZ-300 Dataplane of SZ-300 does not support SNMP MIB. The control of DP's data interface is taken by DPDK. It means that we can't access the interface in SZ-300.

The customer wants to monitor DP interface of SZ-300 by SNMP MIB.

2020-09-30T00:21:09-0700 2020-09-30T06:00:07-0700 https://support.ruckuswireless.com/articles/000009197 2020-09-29T12:00:06-0700 monthly 0.8 admin,premium knowledge_article_3808 knowledge_article_3808 2019-05-28T22:16:16-0700 000009197 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway What does the msgdist.log error "RMSL_SocketAccept error as Too many open files fd" mean, and how do I fix it? If the error message is found repeatedly through msgdist.log, open a case with Customer Support and report ER-6869. Customer Support will be able to restart the affected service and normal client connectivity will resume.

Describes a known bug in SZ 3.4 and 3.5, how to identify and fix it

2020-09-29T12:00:06-0700 2020-09-29T18:00:07-0700 https://support.ruckuswireless.com/articles/000009313 2020-09-29T11:54:00-0700 monthly 0.8 admin,premium knowledge_article_3825 knowledge_article_3825 2019-06-06T06:58:21-0700 000009313 Validated (External) Premium Smartcell insight;Virtual smartcell gateway;SmartCell Insight (SCI) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SmartCell Insight, virtual SmartCell Gateway What is the parse error when trying to point the vSZ to VerneMQ MQTT broker It's not a supported MQTT broker platform.

Encountering an error when trying to point the vSZ to VerneMQ MQTT broker

2020-09-29T11:54:00-0700 2020-09-29T12:00:06-0700 https://support.ruckuswireless.com/articles/000001181 2016-05-31T17:28:00-0700 monthly 0.8 admin,premium knowledge_article_2332 knowledge_article_2332 2012-03-21T12:00:40-0700 000001181 Validated (External) Premium Zoneflex indoor Performance;Configuration;Installation;System network management;Troubleshooting Performance, Configuration, Installation, System Network Management, Troubleshooting, ZoneFlex Indoor Verifying QoS information in standalone AP <h1>Product: AP 7363</h1> <h1>Objective</h1> Verify QoS configuration in standalone AP and review which queues are used for the traffic of a particular STA. <h1>Interrogation methods</h1> The information used throughout this note can be obtained from the AP in two ways: <ul><li>Support info downloaded through WebUI: In Maintenance::Support info menu:</li></ul> <img alt="User-added image" height="487" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNtl&feoid=00N50000002Cf3M&refid=0EM50000000L9I6" width="500"></img> <ul><li>SSH connection to AP and executing the corresponding commands.</li></ul> <h1>Global QoS configuration</h1> Global QoS configuration can be found in support info file looking for ‘### Global QOS ###’, or in SSH connection executing the command ‘get qos’. The results are similar and like the one below: <img alt="User-added image" height="42" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNtl&feoid=00N50000002Cf3M&refid=0EM50000000L9IB" width="500"></img> <img alt="User-added image" height="249" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNtl&feoid=00N50000002Cf3M&refid=0EM50000000L9IG" width="500"></img> Where you can verify the different global values regarding IGMP, QoS values for classification and marking, and the heuristics value to identify VoIP and Video traffic not properly marked. <h1>Per-interface QoS configuration</h1> Per-interface QoS configuration can be found in support info file looking for ‘### Interface QOS ###’ and then identifying the values for each interface, or in SSH connection executing the command ‘get qos interface-name’. The results are similar and like the one below: <img alt="User-added image" height="256" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNtl&feoid=00N50000002Cf3M&refid=0EM50000000L9IL" width="500"></img> <img alt="User-added image" height="97" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNtl&feoid=00N50000002Cf3M&refid=0EM50000000L9IQ" width="500"></img> <h1>Per-STA QoS information</h1> Per-STA QoS information can be found in support info file looking for ‘--- MQ Stats ---’ and then identifying the STA using its MAC address, or in SSH connection executing the command ‘get mqstats interface-name MAC-address’. The results are similar and like the one below: <img alt="User-added image" height="81" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNtl&feoid=00N50000002Cf3M&refid=0EM50000000L9IV" width="500"></img> The values for each queue are: Qued: Number of packets currently in this queue. Overflw: Number of packets dropped from tail of queue due to the queue being full (max limit for this packet class). Enq: Number of packets inserted to this media queue for the first time. Deq: Number of packets transmitted or de-queued from the head of the queue (include retries). Reenq: Number of packets re-queued to the head of the queue (due to retries). Deact: Number of times this queue was deactivated from the scheduler due to being empty. XRetries: Number of packets dropped due to excessive number of retries. XTlimits: Number of packets dropped due to exceeding the packet holding time. So it is possible to verify which queues are used to forward the traffic to this STA. As these values are incremented in real time, the interrogation done through SSH can show how the current traffic is being handled, confirming if it goes to the expected queue.

Verifying QoS information in standalone AP

2016-05-31T17:28:00-0700 2020-09-29T07:59:32-0700 https://support.ruckuswireless.com/articles/000010918 2020-09-28T02:24:02-0700 monthly 0.8 admin,premium knowledge_article_4422 knowledge_article_4422 2020-09-28T02:17:12-0700 000010918 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed How to save the configuration on Unleashed which can be restored when the Ap is reset Save one special config, which can be restored when the AP is reset. Once you have saved the configuration, you can go ahead and reset the Ap. When the AP comes up, It will have the last saved configuration. CLI command: ruckus(debug)# save-config-as-default The current configuration will be saved and will be restored when set-factory, are you sure(y/n): The configuration is saved successfully. ruckus(debug)# show save-config-as-default Save-config-as-default= enable: true, Thu Jul 9 10:48:35 2020 To remove the configuration. ruckus(debug)# no save-config-as-default The saved configuration will be deleted, are you sure(y/n): The configuration is deleted successfully.

How to save the configuration on Unleashed 200.9 which can be restored when the Ap is reset. This configuration will not be removed from Ap.

2020-09-28T02:24:02-0700 2020-09-28T06:00:06-0700 https://support.ruckuswireless.com/articles/000004256 2015-11-16T12:57:42-0800 monthly 0.8 admin,premium knowledge_article_2210 knowledge_article_2210 2015-03-25T11:56:15-0700 000004256 Validated (External) Premium Scg 200 Configuration Configuration, SCG 200 SCG: Is it possible to create a WLAN in a Zone with a WLAN template? It is currently not possible to create a new WLAN in a Zone with the WebUI WLAN template. The WLAN template can only be used to overwrite an existing WLAN entry in a Zone.

SCG: Is it possible to create a WLAN in a Zone with a WLAN template

2015-11-16T12:57:42-0800 2020-09-27T17:57:42-0700 https://support.ruckuswireless.com/articles/000010910 2020-09-25T09:51:16-0700 monthly 0.8 admin,premium knowledge_article_4421 knowledge_article_4421 2020-09-25T09:51:16-0700 000010910 Validated (External) Premium Ruckus cloud wifi Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, Ruckus Cloud WiFi Why I am not able to login to Cloud Mobile App? Customer's Ruckus Cloud account is on 20.0x version and when he is logging into the mobile app. he is getting the below error. <div style="margin-left: 40px;"><img alt="error" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyDS&feoid=00N50000002Cf3M&refid=0EM2J000001CjNn"></img></div> There are two different cloud mobile apps. One is for 18.0x version and the other is for 20.0x version of the cloud. In this case, Ruckus Cloud is running on 20.05 version but the customer has installed the 18.0x version mobile app. After installing the correct version mobile app, the customer can log in to the mobile app. For the Ruckus Cloud account on 18.x, Cloud App is: Ruckus Cloud (Black Background ) <img alt="Version 18.x" height="151" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyDS&feoid=00N50000002Cf3M&refid=0EM2J000001CjMf" width="500"></img> For Ruckus Cloud account on 20.x, Cloud App is: RUCKUS Cloud by CommScope (Orange Background) <img alt="Version 20.x" height="131" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyDS&feoid=00N50000002Cf3M&refid=0EM2J000001CjMk" width="500"></img>

Customer was unable to login to Cloud mobile app and gets error : "We are not able to load data for this account. Please try again later."

2020-09-25T09:51:16-0700 2020-09-25T12:00:07-0700 https://support.ruckuswireless.com/articles/000003847 2020-09-25T01:21:00-0700 monthly 0.8 admin,premium knowledge_article_4420 knowledge_article_4420 2015-01-06T04:02:40-0800 000003847 Validated (External) Premium Scg200;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SCG200, virtual SmartCell Gateway Why do Windows 7 / 8 users not get balloon for login on portal SCG Logon to the SCG as admin Go to: Configuration->SCG System On the left panel, he should find "Manage User Agent BlackList" Delete from the list the Microsoft NCSI entry. ? Reboot the windows client, as caching may prevent the client to connect after you made the changes on the SCG.

When windows 7/8 client connects to a SCG it does not get the login balloon

2020-09-25T01:21:00-0700 2020-09-25T06:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PI0HCAW?attachment_index=0 2020-09-25T06:00:06-0700 monthly admin,premium knowledge_article_4420 knowledge_article_4420_attachment_1 Windows7-8-balloon.png 29889.0 image/png https://support.ruckuswireless.com/articles/000010835 2020-09-24T07:11:29-0700 monthly 0.8 admin,premium knowledge_article_4419 knowledge_article_4419 2020-09-24T07:11:29-0700 000010835 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Configuration;Installation;Troubleshooting Performance, Configuration, Installation, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor How does MAP selects its uplink path? Mesh nodes constantly advertise potential throughput Each Mesh AP selects the best path (based on throughput/signal strength calculation) to the Root AP Uplink Path Selection <ul><li>SmartMesh optimizes path using Potential Throughput <ul><li>Each AP makes decisions maximizing its own potential throughput</li><li>Potential throughput is based on actual RSSI <ul><li>AP potential throughput is calculated continuously, by an algorithm correlating many values, mostly on RSSI from upstream AP.</li></ul> </li></ul> </li><li>Each AP advertises with every beacon: <ul><li>Its potential throughput</li><li>Its path to Root (to the wired infrastructure) <ul><li>This also helps to avoid loops</li><li>Maximum hops - 8</li></ul> </li></ul> </li><li>Topology decisions are made based on the following formula:</li></ul> 1 ------------------------------------------------------------------------------------------------------------------------- 1 1 ------------------------------------------------------- + -------------------------------------------------------------- Potential Throughput of Backhaul AP Potential Throughput to the Backhaul AP Algorithm: <ul><li>Root AP (AP-1) advertises backhaul THROUGHPUT</li><li>AP-2 derives TPUT to AP-1, associates with AP 1 and advertises AP 2 - AP-1 TPUT</li><li>AP-3 derives TPUTs to AP-1 and AP-2, determines AP-3 - AP-1 is best path, associates with AP-1 and advertises AP-3 - AP-1 TPUT</li><li>The APs continuously evaluate and re-advertise their backhaul TPUTs in real time</li><li>AP-4 derives TPUTs to AP-1, AP-2 and AP-3, determines AP-4 - AP-3 - AP-1 is best path, associates with AP-3 and advertises AP-4 - AP-3 backhaul TPUT</li></ul> <div style="text-align: center;"> AP 1 (Root AP) | / \ / \ AP 2 AP 3 / / / AP 4</div>

This article describes the process and algorithm for SmartMesh uplink path selection

2020-09-24T07:11:29-0700 2020-09-24T12:00:08-0700 https://support.ruckuswireless.com/articles/000010911 2020-09-24T07:12:14-0700 monthly 0.8 admin,premium knowledge_article_4418 knowledge_article_4418 2020-09-24T07:12:14-0700 000010911 Validated (External) Premium Sz144;Sz300;Virtual smartcell gateway;Sz100;SmartZone 144-Dataplane (SZ144-D);SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SZ144, SZ300, virtual SmartCell Gateway, SZ100 Can I change via the API the DPSK user settings? The only way around this is to delete the current DPSK user and re-create it.

Can I change via the API the DPSK user settings? Like mac address or other items?

2020-09-24T07:12:14-0700 2020-09-24T12:00:06-0700 https://support.ruckuswireless.com/articles/000002022 2020-09-23T19:29:00-0700 monthly 0.8 admin,premium knowledge_article_1751 knowledge_article_1751 2013-05-08T13:56:11-0700 000002022 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway How can I configure DHCP on a Cisco switch/router to direct APs to a ZoneDirector, SCG, or vSZ? ZoneFlex APs look for a Hex string containing sub-code 03 in Option 43 with ZD IP address(es). ie. Previous ZD managed AP that has been factory defaulted, or new AP on 100.x base image. SCG and SmartZone firmware APs look for a Hex string containing sub-code 06 in Option 43 with SCG/vSZ/SZ IP address(es). ie. Previous SCG/vSCG managed AP that has been factory defaulted, or user loaded SCG AP image. From AP base image 10.0.1.0.x, an AP will recognise both sub-types. Example Cisco DHCP scope that excludes some IPs from the range: ! ip dhcp excluded-address 30.20.0.1 30.20.0.10 ip dhcp excluded-address 30.20.0.254 ! ip dhcp pool ap-pool network 30.20.0.0 255.255.0.0 default-router 30.20.0.254 dns-server 25.0.0.1 ! option 43 ascii "30.20.0.2,21.0.10.2" option 43 hex 031133302e32302e302e322c32312e302e31302e32 ! Decimal-HEX calculator: <a href="http://shimi.net/services/opt43/index.php" target="_blank">http://shimi.net/services/opt43/index.php</a> Use Vendor dropdown to select Ruckus Wireless(ZD) for sub-code 03 Use Vendor dropdown to select Ruckus Wireless(SCG) for sub-code 06 <img alt="User-added image" height="486" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyDh&feoid=00N50000002Cf3M&refid=0EM50000000Li5g" width="500"></img> Caveat: Some DHCP servers can specify both option 03 or option 06, but others may overwrite the first with the last option specified. In this case, use DHCP option 43 sub-option 03 to direct ZD/base image APs to SZ code controller, and DNS discovery to point APs to SZ.

How can I configure DHCP on a Cisco switch/router to direct APs to a ZoneDirector, SCG, or vSZ?

2020-09-23T19:29:00-0700 2020-09-24T00:00:15-0700 https://support.ruckuswireless.com/articles/000004423 2020-09-23T23:43:02-0700 monthly 0.8 admin,premium knowledge_article_1931 knowledge_article_1931 2015-04-22T15:38:04-0700 000004423 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Why does my Standalone AP advertise an Island SSID? Island-NNNNNN is available on non-mesh or standalone APs. It comes up when <ol><li>AP in factory default.</li><li>Or, AP cannot reach its gateway.</li></ol> Island WLAN gets disabled when, <ol><li>AP is no longer in factory default.</li><li>And, AP can reach its gateway.</li></ol>

Island-NNNNNN is available on non-mesh and Standalone APs, until it can reach it's gateway.

2020-09-23T23:43:02-0700 2020-09-24T00:00:14-0700 https://support.ruckuswireless.com/articles/000004891 2020-09-23T23:51:19-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2036 knowledge_article_2036 2015-07-17T04:48:19-0700 000004891 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How do I change Called-Station-Id in the RADIUS-Request that goes out from a ZD to AAA? Sometimes you need to provide exact AP's MAC address in the RADIUS Access-Request packet. This could be to help assigning a particular VLAN or assigning access/usage rights to the user that is trying to login. You can provide AP's MAC address in two different methods: 1. Using NAS-Id 2. Using Called-Station-Id Unfortunately providing AP MAC using NAS-Id is not available as an option in ZD (whereas, SCG lets it via GUI - look under WLAN settings' RADIUS Options). So the available option is usage of Called-Station-Id instead. This can be done via ZD CLI. Here is the command sequence to follow: Please login: admin Password: Welcome to the Ruckus Wireless ZoneDirector 5000 Command Line Interface ruckus> en ruckus# conf You have all rights in this mode. ruckus(config)# wlan "test" The WLAN service 'test' has been loaded. To save the WLAN service, type 'end' or 'exit'. ruckus(config-wlan)# called-station-id-type wlan-bssid Sets Called-Station-Id to 'BSSID:SSID'. ap-mac Sets Called-Station-Id to 'APMAC:SSID'. ruckus(config-wlan)# called-station-id-type ap-mac By default wlan-bssid will be sent out to the AAA. Using the above command you can change it to "ap-mac".

This article explains the procedure on changing Called-Station-Id parameter's value in ZD environment.

2020-09-23T23:51:19-0700 2020-09-24T00:00:14-0700 https://support.ruckuswireless.com/articles/000005190 2020-09-23T19:34:57-0700 monthly 0.8 admin,premium knowledge_article_2343 knowledge_article_2343 2015-10-12T09:57:57-0700 000005190 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Firmware;Installation;Known issues and workarounds;Registration Firmware, Installation, Known Issues and Workarounds, Registration, Unleashed Is it possible to convert regular R500/R600 to Unleashed and vice versa? Ruckus ZoneFlex/SmartZone VARs/customers with R500/R600 model APs may wish to evaluate Unleashed by installing the controller-less AP firmware available on Support. It is recommended to ultimately purchase 9U1 Unleashed SKU APs, for a number of reasons: 1. They will come with latest firmware from the factory. 2. Better usability and ease of deployment (plug and play). 3. Improves customer product traceability in our systems. 4. Unleashed per-network Support licenses are not the same or transferrable to/from 901 ZoneFlex/SmartZone SKU APs.

It is possible to re-flash an existing R500/R600 AP to Unleashed for evaluation, but it's recommended to purchase Unleashed SKUs due to different support models. Re-flashed APs are not for re-sale and are not eligible for Unleashed support.

2020-09-23T19:34:57-0700 2020-09-24T00:00:13-0700 https://support.ruckuswireless.com/articles/000009520 2020-09-21T13:12:41-0700 monthly 0.8 admin,premium knowledge_article_4414 knowledge_article_4414 2019-07-05T06:55:01-0700 000009520 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed Is it possible to apply DHCP binding for a client on Unleash AP? Unleashed provides a built-in DHCP server that you can enable to assign IP addresses to devices that are connected to the Unleashed network. The internal DHCP server will only assign addresses to devices that are on its own subnet and part of the same VLAN. Once the DHCP Server is enabled, we can create a list of reserved IP addresses bound to specific MAC addresses. To create an entry, Go to System>> IP Settings>> Preserve DHCP Client IP and click on Create New, and then enter the client's MAC Address, the IP Address you want to reserve, and optionally a Description of the device. <img alt="User-added image" height="509" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyCj&feoid=00N50000002Cf3M&refid=0EM2J000000ugGg" width="976"></img> <img alt="User-added image" height="445" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyCj&feoid=00N50000002Cf3M&refid=0EM2J000000ugGl" width="977"></img> A maximum of 128 reserved IP address entries can be created.

This Article explains the procedure to assign DHCP binding to a client on Unleash Platform

2020-09-21T13:12:41-0700 2020-09-21T18:00:07-0700 https://support.ruckuswireless.com/articles/000010793 2020-09-21T07:09:53-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4413 knowledge_article_4413 2020-09-21T07:09:53-0700 000010793 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How to bring up R300 when the SZ network is upgraded to 5.x AP registration rule to provision the AP to the zone running in supported lower version

R300 does not support SZ versions 5 and above, however, we can still bring up the device with the multiversion support feature in SZ using a dedicated zone in older version

2020-09-21T07:09:53-0700 2020-09-21T12:00:06-0700 https://support.ruckuswireless.com/articles/000001742 2020-09-20T21:37:10-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4412 knowledge_article_4412 2013-03-05T22:06:33-0800 000001742 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Trouble shooting AP Sulk state problem Details as follows. The AP enters in to SULKING state when it is unable to discover the zone director. AP discovers ZD using discovery request packets. If a discovery response is not received after sending the maximum number of discovery requests, the AP enters the Sulking state Please find more details in the attached document.

2020-09-20T21:37:10-0700 2020-09-21T00:00:19-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDGACA4?attachment_index=0 2020-09-21T00:00:19-0700 monthly admin,premium,warranty,guest knowledge_article_4412 knowledge_article_4412_attachment_1 What is AP Sulk state.pdf 12061.0 application/pdf https://support.ruckuswireless.com/articles/000001943 2020-09-20T22:32:50-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1440 knowledge_article_1440 2013-04-26T18:10:52-0700 000001943 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;System network management Configuration, Installation, System Network Management, ZoneDirector How do I configure SMTP through ZD so that I get email notifications? Here is a note on how to properly setup an external SMTP account for ZD messages notifications. <ul><li>We first find out the SMTP details of the external email account.</li><li>Then we setup the ZD settings as such.</li><li>And finally do a test by clicking on the test button (if the test is successful then setup appropriate alarm events)</li></ul> Below is an example of how to use a yahoo mail account for notifications. The SMTP port is capable of allowing any of the defined SMTP ports defined. Attached you will also find other well known SMTP server port reference document. Question: What Are the Yahoo! Mail SMTP Settings? Looking for the Yahoo! Mail SMTP server settings? Answer: The <a href="http://email.about.com/od/yahoomail/fr/Yahoo-Mail-Review-Free-Email-Service.htm" target="_blank">Yahoo! Mail</a> SMTP server settings for sending mail through Yahoo! Mail from any email program are: <ul><li>Yahoo! Mail SMTP server address: smtp.mail.yahoo.com</li><li>Yahoo! Mail SMTP user name: Your full Yahoo! Mail email address (including "@yahoo.com")</li><li>Yahoo! Mail SMTP password: Your Yahoo! Mail password</li><li>Yahoo! Mail SMTP port: 465</li><li>Yahoo! Mail SMTP TLS/SSL required: yes</li></ul> Note that these settings may not work in all desktop email programs. <img alt="User-added image" height="386" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyBW&feoid=00N50000002Cf3M&refid=0EM50000000LHPh" width="500"></img> Logging in to my yahoo mail account, from yahoo email received from ZD: <a href="http://mail.yahoo.com/" target="_blank" title="Click to search for messages with same subject">[Ruckus@172.16.110.165] Alarm 'testing alarm' generated</a> <a href="http://us-mg5.mail.yahoo.com/neo/launch?.rand=4n9vj2h7hpmnc" target="_blank" title="Hide details">Hide Details</a> From <ul><li><a href="http://us-mg5.mail.yahoo.com/neo/launch?.rand=4n9vj2h7hpmnc" target="_blank" title="rflores1001@yahoo.com">Ruckus ZoneDirector</a></li></ul> To <ul><li><a href="mailto:test1001@yahoo.com" target="_blank">test1001@yahoo.com</a></li></ul> An alarm 'testing alarm' was triggered. Details: This is an alarm test.

Configuring SMTP includes yahoo SMTP port and Mail SMTP address.

2020-09-20T22:32:50-0700 2020-09-21T00:00:18-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDbXCAW?attachment_index=0 2020-09-21T00:00:18-0700 monthly admin,premium,warranty,guest knowledge_article_1440 knowledge_article_1440_attachment_1 A List of SMTP and POP3 Server.docx 95913.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000004252 2020-09-20T22:04:37-0700 monthly 0.8 admin,premium knowledge_article_1670 knowledge_article_1670 2015-03-25T06:49:29-0700 000004252 Validated (External) Premium Virtual smartcell gateway Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, virtual SmartCell Gateway Why is the vSCG appearing to block the APs with an ACL setting? Check all ACLs and open ports are verified. If this issue persists, please pull the scg diagnostics and attach. Also be aware of the Management Interface ACL selection, when enabled this changes the SSH port for security reasons. See GUI : <img alt="User-added image" height="83" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GyB2&feoid=00N50000002Cf3M&refid=0EM50000000Lgh9" width="500"></img>

I'm setting up the vSCG and starting to get the AP's connect to it. I've configured the AP (R600) to point to the vSCG but in the console of the vSCG it is saying: "model [R600] is not being upgraded with vSCG Enterprise AP firmware because of ACL setting." What am I missing.

2020-09-20T22:04:37-0700 2020-09-21T00:00:16-0700 https://support.ruckuswireless.com/articles/000004601 2020-09-18T11:00:38-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1894 knowledge_article_1894 2015-05-25T04:57:02-0700 000004601 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to expand and shrink widgets in ZD dashboard? In ZD dashboard there are a number of widgets that can be displayed. Usually these widgets are displaying some information, but it is possible to shrink them so that only the title will be displayed. This will not remove the widget. For that please click on the symbol located at the left side of it as shown here: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy9Q&feoid=00N50000002Cf3M&refid=0EM50000000LkHj"></img> Once done, the icon will be displayed a bit faded. To display all information again, you just need to click on the same location again: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy9Q&feoid=00N50000002Cf3M&refid=0EM50000000LkHo"></img>

How to expand and shrink widgets in ZD dashboard?

2020-09-18T11:00:38-0700 2020-09-18T12:00:10-0700 https://support.ruckuswireless.com/articles/000005034 2020-09-18T11:39:46-0700 monthly 0.8 admin,premium knowledge_article_4411 knowledge_article_4411 2015-08-17T18:35:37-0700 000005034 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Troubleshooting Troubleshooting, SmartCell Insight Why am I not able to open the user console of the SCI? Installed the RTU license for the SCI via the SSH session. After the installation, we were able to load the User console. The Enterprise console indicates the active subscription.

This article explains a scenario where the user console of the SCI doesn't load up and the procedure to fix it.

2020-09-18T11:39:46-0700 2020-09-18T12:00:10-0700 https://support.ruckuswireless.com/articles/000004981 2020-09-18T11:37:41-0700 monthly 0.8 admin,premium knowledge_article_4281 knowledge_article_4281 2015-08-06T10:26:37-0700 000004981 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway Will APs stop serving clients if the ZD is reset to factory? If the ZD is reset to factory defaults, APs will not stop serving clients using Open/PSK WLANs (but no new AAA/Guest Access/HotSpot clients can connect) with access to local resources, until the APs are rebooted or re-provisioned when contact with the ZD is restored.

Will APs stop serving clients if the ZD is reset to factory defaults?

2020-09-18T11:37:41-0700 2020-09-18T12:00:09-0700 https://support.ruckuswireless.com/articles/000004486 2020-09-18T09:46:56-0700 monthly 0.8 admin,premium knowledge_article_4410 knowledge_article_4410 2015-05-03T06:31:55-0700 000004486 Validated (External) Premium Spot lbs Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SPoT LBS Why the LBS status for my APs goes between red and green repeatedly? AP list contained MAC addresses of APs that don't have LBS enabled. So there is no location data coming from some of the APs in that list. This impacted status of all APs including that of the LBS enabled APs. To fix the issue, enable the LSB on the APs listed in the MAC address table or remove them from the list.

This article explains the reason for LBS status to flip-flop between red and green.

2020-09-18T09:46:56-0700 2020-09-18T12:00:08-0700 https://support.ruckuswireless.com/articles/000005088 2020-09-18T11:45:08-0700 monthly 0.8 admin,premium knowledge_article_4409 knowledge_article_4409 2015-08-31T05:19:14-0700 000005088 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why is the signal level for a mesh neighbor higher than 100% when retrieved via the public API? Issue is fixed on 3.2 and above versions.

This article explains that at times, the signal level (%) for a connected mesh neighbor will be incorrect.

2020-09-18T11:45:08-0700 2020-09-18T12:00:06-0700 https://support.ruckuswireless.com/articles/000004406 2020-09-17T07:03:17-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4408 knowledge_article_4408 2015-04-21T02:56:47-0700 000004406 Validated (External) Public Scg200;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SCG200 Where do you configure NSAPI field for GTP connections? Starting with release 2.6/3.1 we have this NSAPI value configurable in Configuration >> SCG System >> Gateway Advanced Options: <img alt="User-added image" height="355" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy88&feoid=00N50000002Cf3M&refid=0EM50000000LiHw" width="500"></img> Accepted values are from 0 to 5, with 1 as default value.

By default we use NSAPI=1 in GTP packets, but some customers want to change it because it overlaps with other deployments.

2020-09-17T07:03:17-0700 2020-09-17T12:00:08-0700 https://support.ruckuswireless.com/articles/000009031 2020-09-16T11:13:41-0700 monthly 0.8 admin,premium knowledge_article_4404 knowledge_article_4404 2019-04-10T06:22:10-0700 000009031 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway How do I approve APs when using Zero Touch mesh? When using Zero Touch mesh since 5.0, we need to approve them. Otherwise, even if the feature is enabled, they won't be able to mesh. For approving APs we need to click on: - Access Points > Mesh tab > Unapproved APs <img alt="User-added image" height="262" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy7Z&feoid=00N50000002Cf3M&refid=0EM2J000000q9Pw" width="862"></img> - Select the Pending Approval AP and click Approve - Choose the zone you want the AP be - Enter the last 4 digits of AP S/N and click Approve - AP will be allowed to join SZ after being approved <img alt="User-added image" height="481" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy7Z&feoid=00N50000002Cf3M&refid=0EM2J000000q9QB" width="870"></img>

When using Zero Touch Mesh, we need to approve APs so that this feature works.

2020-09-16T11:13:41-0700 2020-09-16T12:00:07-0700 https://support.ruckuswireless.com/articles/000007046 2020-09-15T21:50:56-0700 monthly 0.8 admin,premium knowledge_article_4299 knowledge_article_4299 2017-12-12T14:34:17-0800 000007046 Validated (External) Premium Brocade eos products Performance;System network management Performance, System Network Management, Brocade EOS Products How can I determine which switch will become active in the event of a failover <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Use the following syntax to set stack priority. From global configuration mode: <code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Brocade(config)#stack unit 1 Brocade(config-unit-1)#priority 250</code> Users should see output similar to the following: <code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Priority change needs 120 seconds to take effect. Brocade(config-unit-1)#exit</code> Afterwards, enter the same command on stack member 2, but with a lower priority, such as 200: <code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Brocade(config)#stack unit 2 Brocade(config-unit-2)#priority 200 Brocade(config-unit-2)#exit</code> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Users should see output similar to the following: <code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Download request from active unit 1 mac = 0024.3814.d080 stack done config sync Done.</code> In the example above, the priority of stack unit 1 is set higher than for stack unit 2, therefore assuming a third member of the stack is currently active and experiences an issue, then stack unit 1 with the higher priority of 250 will become the active member.

In the event of a failover in which the stack is comprised of several members,

2020-09-15T21:50:56-0700 2020-09-16T00:00:09-0700 https://support.ruckuswireless.com/articles/000003571 2020-09-15T12:14:10-0700 monthly 0.8 admin,premium knowledge_article_4403 knowledge_article_4403 2014-11-18T07:41:00-0800 000003571 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Able to see other clients on Apple finder with full client isolation This has a fix in the version 9.7.2.0.9 where the MAC users using the Apple finder will not be able to see other devices in the LAN.

The Mac users are able to see the other clients on Apple finder with full client isolation configured for the WLAN.

2020-09-15T12:14:10-0700 2020-09-15T18:00:10-0700 https://support.ruckuswireless.com/articles/000003707 2020-09-15T12:22:06-0700 monthly 0.8 admin,premium knowledge_article_4402 knowledge_article_4402 2014-12-17T14:49:27-0800 000003707 Validated (External) Premium Zonedirector;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector, ZoneFlex Outdoor Why ZF7761CM-JP Japan model access points Cable modem info is not being displayed in Zone Director? ZF7761CM-JP Japan model access points Cable modem info not being displayed in ZD When UI under Monitor > Access points > Cable modem Info. In ZF7761-CM-JP APs, AP side communicates with Cable Modem through an internal LAN interface via SNMP with a fixed community string "Public". In US/EURO ZF7761-CM AP, we have separated the SNMP community string between LAN side and WAN (CMTS) side and keep the LAN as "Public". On ZF7761CM-JP APs it is recommended not to change the community string on WAN side, which in turn changes the LAN side also resulting no communication between AP and CM. Changing the community string on WAN side will break the communication between AP and CM, this is limitation of the product ZF7761CM-JP APs.

Article explains the product limitation

2020-09-15T12:22:06-0700 2020-09-15T18:00:09-0700 https://support.ruckuswireless.com/articles/000004274 2020-09-15T12:58:35-0700 monthly 0.8 admin knowledge_article_4401 knowledge_article_4401 2015-04-10T09:02:07-0700 000004274 Validated (External) Internal Zonedirector;Flexmaster umm;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, FlexMaster UMM How do I get specific events shown in my ZD "Monitor/All evetns and activities" that are not showing in the FM events to display? <ol><li>Enable "Show more" on the ZD you want to see more events from. ***Please note, this generates a lot more traffic and logs, so be mindful of system resources.</li><li>Check to see that you are seeing the events you are trying to see in the MONITOR > ALL EVENTS/ACTIVITIES.</li><li>In the FM, go to CONFIGURE >> EVENT CONFIGURATION (under the ZoneDirector's section). See attached image.</li><li>Click on "Create a New Event Configuration" Button in the lower right side of the screen.</li><li>In the screen that pops up below this button, you can check and uncheck any events/alarms you want to add/remove from FM logging.</li><li>Once you have made your changes, save it under a new Event configuration name. Please note, it is restrictive on the types of special characters you use in the name, so keep it simple.</li><li>Once you have it saved, your new event configuration will show up in the top portion of the screen.</li><li>On the right side of the screen, click on "Assign ZDs" link in your new Event configuration, and add any ZDs to this group and save that.</li><li>From this point forward, you will be logging the new events you wanted to see at the FM.</li></ol>

I have "show more" set in my ZD, so that I can see Channel Fly events. I want to set up a report in the connected FM for just these events. I am seeing lots of these events in the ZD, but none are being shown in the FM. Is this a configuration issue in the ZD or FM?

2020-09-15T12:58:35-0700 2020-09-15T18:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PIQjCAO?attachment_index=0 2020-09-15T18:00:07-0700 monthly admin knowledge_article_4401 knowledge_article_4401_attachment_1 Event Configuration - FM.jpg 121199.0 image/jpeg https://support.ruckuswireless.com/articles/000002830 2019-06-09T14:36:59-0700 monthly 0.8 admin,premium knowledge_article_1211 knowledge_article_1211 2014-08-10T22:59:14-0700 000002830 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why is SMTP alarm test failing ? For ZoneDirector to access Internet, proper DNS server IP needs to be configured. Upon configuring the correct DNS IP, SMTP test alarm settings and test were successful. We can use Google DNS 8.8.8.8 to test this scenario if there is no dedicated DNS IP. DNS Configuration on ZoneDirector:- Navigate to ZoneDirector >> Configure >> System >> Device IP Settings >> Primary DNS Server / Secondary DNS Server <img alt="User-added image" height="222" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SbE&feoid=00N50000002Cf3M&refid=0EM50000000LXc8" width="500"></img>

SMTP alarm test on ZoneDirector fails without DNS

2019-06-09T14:36:59-0700 2020-09-15T11:18:23-0700 https://support.ruckuswireless.com/articles/000003058 2020-09-15T01:19:43-0700 monthly 0.8 admin,premium knowledge_article_1028 knowledge_article_1028 2014-05-22T16:27:27-0700 000003058 Validated (External) Premium Zoneflex indoor Installation Installation, ZoneFlex Indoor How to determine the mounting orientation for Indoor APs? <div>Determine the Optimal Mounting Location and Orientation: </div> <div>The location and orientation that you choose for the Access Point play a critical role in the performance of your wireless network. In general, Ruckus Wireless recommends installing the Access Point away from obstructions and sources of interference and ensuring that the top of the Access Point is pointing in the general direction</div> <div>of its wireless clients. </div> <div>The recommended orientation differs slightly depending on the Access Point model, the below signal orientation holds good for the following model of AP's ZoneFlex R300, 7982, 7372, 7352, 7351, 7363, 7343, 7341 and 7321, <div>ZoneFlex R300, 7982, 7372, 7352, 7351, 7363, 7343, 7341 and 7321 have a more rounded coverage area and less horizontal range (when mounted horizontally) compared to the dome-shaped ZoneFlex 2942 and 7962 APs.</div> </div> <div>ZoneFlex R300, 7982, 7372, 7352, 7351, 7363, 7343, 7341 and 7321 recommended ceiling mounting orientation, <div style="margin-left: 40px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy4f&feoid=00N50000002Cf3M&refid=0EM50000000LUU1"></img></div> <div>When wall-mounted, ZoneFlex R300, 7982, 7372, 7352, 7351, 7363, 7343, 7341 and 7321 should be staggered to maximize coverage. <div>ZoneFlex R300, 7982, 7372, 7352, 7351, 7363, 7343, 7341 and 7321 recommended wall mounting orientation, </div> </div> </div> <div style="margin-left: 40px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy4f&feoid=00N50000002Cf3M&refid=0EM50000000LUU6"></img></div> <div>ZoneFlex R300, 7982, 7372, 7352, 7351, 7363, 7343, 7341 and 7321 wall mounting in a corridor (top view) </div> <div style="margin-left: 40px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy4f&feoid=00N50000002Cf3M&refid=0EM50000000LUUB"></img></div>

This article explains the signal orientation and deployment options for most of the indoor Access points such as ZF7372, ZF7982, ZF7352, ZF7351, ZF7363, ZF7343, ZF7341, ZF7321.

2020-09-15T01:19:43-0700 2020-09-15T11:17:07-0700 https://support.ruckuswireless.com/articles/000010869 2020-09-11T20:09:20-0700 monthly 0.8 admin,premium knowledge_article_4400 knowledge_article_4400 2020-09-11T20:09:20-0700 000010869 Validated (External) Premium Ruckus diagnostic dashboard rdd Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Diagnostic Dashboard RDD No email notification received when using LDAP Authentication Depending on the LDAP server configuration, a username and a password entry from the RDD SMTP configuration tab may not require. When invoking the "Test" button and no email notification received, delete the username/password from the RDD SMTP configuration tab if there is an entry.

RDD: How to configure email notification when using LDAP authentication

2020-09-11T20:09:20-0700 2020-09-12T00:00:08-0700 https://support.ruckuswireless.com/articles/000010868 2020-09-11T20:11:28-0700 monthly 0.8 admin,premium knowledge_article_4399 knowledge_article_4399 2020-09-11T20:11:28-0700 000010868 Validated (External) Premium Ruckus diagnostic dashboard rdd Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Diagnostic Dashboard RDD Why don't I see any email notification from RDD when I click on the "Test" button from SMTP server tab? The email notification will be sent ONLY to the username that is currently login to the RDD and invoking the TEST button. Other username or other role will not received the email notification. Ensure that the username has email address configured. Important Note: Look for the email notification in the Inbox or Spam/Junk Folder <img alt="User-added image" height="244" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy3X&feoid=00N50000002Cf3M&refid=0EM2J000001CbCr" width="500"></img> <img alt="User-added image" height="244" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy3X&feoid=00N50000002Cf3M&refid=0EM2J000001CbCw" width="500"></img>

No email received when clicking on Test from SMTP server configuration tab

2020-09-11T20:11:28-0700 2020-09-12T00:00:07-0700 https://support.ruckuswireless.com/articles/000002257 2019-06-11T16:40:40-0700 monthly 0.8 admin,premium knowledge_article_579 knowledge_article_579 2013-10-07T16:50:15-0700 000002257 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How do I get AAA to work with LDAP on Novell? Customer has configured AAA Server through LDAP but the Authentication was failing on the ZD WebUI On ZD: Test under Configure :: AAA Servers was giving Failed! Invalid admin account as the Error Message. ON LDAP Server: Logs on the LDAP Server showed: Rejecting unencrypted bind on cleartext port Resolution: Please uncheck the TLS under the LDAP group to resolve this issue “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

Cannot use TLS to LDAP authentication server

2019-06-11T16:40:40-0700 2020-09-11T07:28:55-0700 https://support.ruckuswireless.com/articles/000010275 2020-04-01T11:35:13-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4114 knowledge_article_4114 2020-03-25T20:27:02-0700 000010275 Validated (External) Public Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Installation;Troubleshooting;Known issues and workarounds Firmware, Installation, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why 802.11ac Wave1 APs are stuck in upgrade loop after upgrading from 3.6.2 to 5.2 Engineering have confirmed that this issue impact all Wave1 AP's (i.e R310, R500, R600, T504, T300, T300E, T301N, T301S, FZM300, FZP300 etc.) and they have created an AP Patch: <a href="https://support.ruckuswireless.com/software/2462-smartzone-ap-patch-prior-to-moving-802-11ac-wave1-aps-to-5-2-ga-refresh-sz300-sz-100-vsz" target="_blank">scg-ap-5.2.0.0-5030.patch</a> downloadable from Ruckus Support portal. We need to apply this AP patch before we change the AP zone firmware after upgrading to 5.2 v/SZ release.

This Article explains an upgrade defect that causes R310 AP's to get stuck in firmware upgrade loop after upgrading its firmware to 5.2

2020-04-01T11:35:13-0700 2020-09-10T03:02:27-0700 https://support.ruckuswireless.com/articles/000005187 2020-09-09T07:58:44-0700 monthly 0.8 admin,premium knowledge_article_2346 knowledge_article_2346 2015-10-09T14:29:27-0700 000005187 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware Configuration, Firmware, Unleashed What is Ruckus Unleashed, Controller-less AP solution for SMBs? See attached FAQ (frequently asked question) brochure from Ruckus product marketing with answers to common/popular questions. See also the How-To Hub for Ruckus Unleashed videos, documentation, and KB articles: <a href="https://support.ruckuswireless.com/hth-unleashed" target="_blank">https://support.ruckuswireless.com/hth-unleashed</a>

Attached is an FAQ (frequently asked question) brochure related to the new Ruckus Unleashed controller-less AP network products.

2020-09-09T07:58:44-0700 2020-09-09T12:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000GorBCAS?attachment_index=0 2020-09-09T12:00:08-0700 monthly admin,premium knowledge_article_2346 knowledge_article_2346_attachment_1 Unleashed FAQ 20200904.pdf 218695.0 application/pdf https://support.ruckuswireless.com/articles/000010858 2020-09-08T05:49:59-0700 monthly 0.8 admin,premium knowledge_article_4393 knowledge_article_4393 2020-09-08T05:49:59-0700 000010858 Validated (External) Premium Sz144;SmartZone 144-Dataplane (SZ144-D) Firmware Firmware, SZ144 With what software version is the SZ144 first released? The SZ144 comes with version 5.2.1.0.515 when it is released.

With what software version is the SZ144 first released?

2020-09-08T05:49:59-0700 2020-09-08T06:00:11-0700 https://support.ruckuswireless.com/articles/000010860 2020-09-08T05:49:24-0700 monthly 0.8 admin,premium knowledge_article_4394 knowledge_article_4394 2020-09-08T05:49:24-0700 000010860 Validated (External) Premium Sz144;SmartZone 144-Dataplane (SZ144-D) Installation Installation, SZ144 How many AccessPoints and Switches does the SZ144 support? <img alt="User-added image" height="250" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy2K&feoid=00N50000002Cf3M&refid=0EM2J000001CWuP" width="500"></img>

Overview on how many AccessPoints and Switches the SZ144 support.

2020-09-08T05:49:24-0700 2020-09-08T06:00:11-0700 https://support.ruckuswireless.com/articles/000010863 2020-09-07T00:20:07-0700 monthly 0.8 admin,premium knowledge_article_4389 knowledge_article_4389 2020-09-07T00:20:07-0700 000010863 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How to setup external DPSK on zone director? As per the design, SZ uses the "external-DPSK" attribute to authenticate the client while setting up EDPSK. However, the Zone Director uses "MS-MPPE-Send-Key" and "MS-MPPE-Recv-Key" as PMK. Hence, while setting up an external DPSK WLAN on the ZD, the AAA server has to be set up to send the DPSK as "MS-MPPE-Recv-Key" to the controller. Below is a sample setup on a ZD running on the 10.4.1.0.214 version, 1) Configured an External DPSK WLAN "TestEDPSK" on the controller authenticating against an external Radius server. <img alt="User-added image" height="286" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy2e&feoid=00N50000002Cf3M&refid=0EM2J000001CXq4" width="500"></img> 2) Using "Ruckus1!" as the passphrase to connect the wireless clients. Hence, created a hex using the SSID name and the passphrase using the URL "http://jorisvr.nl/wpapsk.html". <img alt="User-added image" height="124" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy2e&feoid=00N50000002Cf3M&refid=0EM2J000001CXq9" width="500"></img> 3) Setup the user on the RADIUS server with the user name and the clear text password as the MAC address of the client. 4) Configured the hex value as the "MS-MPPE-Recv-Key" attribute on the server. <img alt="User-added image" height="40" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy2e&feoid=00N50000002Cf3M&refid=0EM2J000001CXqE" width="500"></img> 5) Connected the client and it was able to authenticate properly. Below is a snippet of the "Access-Accept" packet coming from the Radius server. <img alt="User-added image" height="133" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gy2e&feoid=00N50000002Cf3M&refid=0EM2J000001CXqJ" width="500"></img>

How to setup external DPSK on ZD and Free Radius server.

2020-09-07T00:20:07-0700 2020-09-07T06:00:07-0700 https://support.ruckuswireless.com/articles/000010862 2020-09-06T23:46:47-0700 monthly 0.8 admin,premium knowledge_article_4388 knowledge_article_4388 2020-09-06T23:46:47-0700 000010862 Validated (External) Premium Ruckus cloud wifi Known issues and workarounds Known Issues and Workarounds, Ruckus Cloud WiFi Why did the APs go down after migrating to the new cloud platform <ul><li>Configured a DHCP server in the network.</li><li>All the AP's got the IP address and were able to connect to the Cloud Account.</li></ul>

2020-09-06T23:46:47-0700 2020-09-07T00:00:07-0700 https://support.ruckuswireless.com/articles/000010804 2020-09-04T13:53:14-0700 monthly 0.8 admin,premium knowledge_article_4387 knowledge_article_4387 2020-08-16T23:24:34-0700 000010804 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Performance;Configuration;Installation;Known issues and workarounds Performance, Configuration, Installation, Known Issues and Workarounds, SmartCell Insight Is data migration plausible at all from one SCI instance to another in any VM deployment? <ul><li>Since data migration is NOT possible from one SCI to another SCI, it is recommended that the customers work with Ruckus support/SE/Sales to come up with VM specifications according to their requirements, follow Ruckus BPG on the same, get it peer reviewed prior to actual deployment so that the underlying infrastructure doesn't have to change for a long time.</li><li>This is documented as Known Issues /Limitations in the 5.4.2 Release Notes and User Guide. <div> SmartCell Insight (SCI) Version 5.4.2 (GA) Release Notes <a href="https://support.ruckuswireless.com/documents/3212" target="_blank">https://support.ruckuswireless.com/documents/3212</a> SmartCell Insight (SCI) Version 5.4.2 (GA) User Guide <a href="https://support.ruckuswireless.com/documents/3209-smartcell-insight-sci-version-5-4-2-ga-user-guide" target="_blank">https://support.ruckuswireless.com/documents/3209</a></div> </li></ul>

SCI Engineering has instructed that data migration is NOT possible from one SCI to another SCI in all flavors of VM deployments and as such advised Ruckus support should not offer such services to the customers either.

2020-09-04T13:53:14-0700 2020-09-04T18:00:06-0700 https://support.ruckuswireless.com/articles/000002187 2020-09-01T19:53:08-0700 monthly 0.8 admin,premium knowledge_article_4384 knowledge_article_4384 2013-10-11T07:48:00-0700 000002187 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, ZoneDirector Does Ruckus support MultiFactor Authentication with SecurID badge <div>Ruckus support's EAP-TTLS, which has an inner authentication, like a SecurID badge. </div> <div>Ruckus only defines the RADIUS server, that has some hook to the second authentication method server.</div> <div>SecurID badge is an example of a multifactor authentication method. </div> <div> </div> <div>http://en.wikipedia.org/wiki/Multifactor_authentication </div> <div> </div> <div>Ruckus do not support EAP-GTC, which is the other inner multifactor authentication method. </div>

This article details about Ruckus MultiFactor support using SecurID badge

2020-09-01T19:53:08-0700 2020-09-02T00:00:11-0700 https://support.ruckuswireless.com/articles/000006307 2020-09-01T20:58:09-0700 monthly 0.8 admin,premium knowledge_article_4383 knowledge_article_4383 2017-03-20T14:29:54-0700 000006307 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Performance;Troubleshooting Performance, Troubleshooting, SmartCell Insight How does SCI pull client statistics from SZ? AP reports statistics every 15 minutes to SZ. SCI then pulls data from the controller, not directly from the APs. SCI has the luxury of collecting all the data within a 15 min period before proceeding with aggregation, as such, the unique client count is calculated by taking a UNIQUE(.) function over all the client MAC within the 15 min period, to prevent any double counting.

How does SCI pull client statistics from SZ

2020-09-01T20:58:09-0700 2020-09-02T00:00:10-0700 https://support.ruckuswireless.com/articles/000006200 2020-09-01T20:59:18-0700 monthly 0.8 admin,premium knowledge_article_4382 knowledge_article_4382 2017-01-03T08:37:02-0800 000006200 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SmartCell Insight Why can't I manage my SCI via WEB UI outside from its own subnet 172.17.0.0/16? The SCI docker uses 172.17.0.0/16 and if you use this subnet for your SCI Managemet subnet,it causes conflicts, which in turn prevent WEB UI management.

Unable to manage SCI via WEB UI outside from its own subnet

2020-09-01T20:59:18-0700 2020-09-02T00:00:09-0700 https://support.ruckuswireless.com/articles/000010497 2020-09-01T14:53:02-0700 monthly 0.8 admin,premium knowledge_article_4379 knowledge_article_4379 2020-05-11T06:00:21-0700 000010497 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;System network management;Known issues and workarounds Configuration, Installation, System Network Management, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How to change cluster name of SZ/vSZ <ul><li>We can change the cluster name using CLI:</li></ul> vSZ-E-124# config vSZ-E-124(config)# cluster-name vSZ-E-124n This command will restart some services. Do you want to continue (or input 'no' to cancel)? [yes/no] <ul><li>This will restart few services and the cluster name will be changed when all the services are up</li><li>We can confirm by viewing in GUI dashboard or show cluster name from CLI</li></ul> Note: The Cluster Name only accept alphanumeric characters, hyphens (-), and underscores (_). They do not accept the space character or other special characters (for example, $, *, #, !).

This article explains how to change cluster name after installing the SZ/vSZ

2020-09-01T14:53:02-0700 2020-09-01T18:00:09-0700 https://support.ruckuswireless.com/articles/000006536 2020-09-01T17:29:10-0700 monthly 0.8 admin,premium knowledge_article_4378 knowledge_article_4378 2017-12-12T16:14:23-0800 000006536 Validated (External) Premium Brocade eos products Configuration;System network management Configuration, System Network Management, Brocade EOS Products How to enable and disable remote fault notifications? Remote Fault Notification (RFN) is only available for 1 Gbps Ethernet Fiber ports. It is not available for 10/100 ports and Gbps Ethernet Copper ports. For fiber-optic connections, you can optionally configure a transmit port to notify the receive port on the remote device whenever the transmit port becomes disabled. By default, RFN is enabled. You can configure RFN as follows: • Globally, on the entire device • On a trunk group • On an individual interface Enabling and disabling remote fault notification RFN configures the transmit port to notify the remote port whenever the fiber cable is either physically disconnected or has failed. RFN is set to auto-gig by default. To disable RFN, use the following command. device(config)# interface ethernet 1/1/1 device(config-if-e1000-1/1/1)# gig-default neg-off To re-enable RFN, use the following command. device(config)# interface ethernet 1/1/1 device(config-if-e1000-1/1/1)# gig-default auto-gig Syntax: [no] gig-default { neg-full-auto | neg-off | auto-gig } When you enable this feature, the transmit port notifies the remote port whenever the fiber cable is either physically disconnected or has failed. When this occurs and the feature is enabled, the device disables the link and turns OFF both LEDs associated with the ports.

FAQ KB Article related with remote fault notification.

2020-09-01T17:29:10-0700 2020-09-01T18:00:08-0700 https://support.ruckuswireless.com/articles/000010678 2020-09-01T17:49:51-0700 monthly 0.8 admin,premium knowledge_article_4377 knowledge_article_4377 2020-06-29T06:12:57-0700 000010678 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How to fix the inconsistent "AP connection status" on SmartZone 5.1.0 web GUI? This is a known issue and a patch (KSP) is available to fix the issue on 5.1.0.496 version. Please reach out to Ruckus support and refer this article. Support will help to provide the patch (KSP) and instruction to apply it on v/SmartZone. Since the issue is being observed only on this particular version, upgrade to the next available version (preferred 5.1.2 latest build) would also fix the issue.

This article explains the solution for the inconsistencies seen with "AP Connection status" on SmartZone 5.1.0.496 web GUI

2020-09-01T17:49:51-0700 2020-09-01T18:00:07-0700 https://support.ruckuswireless.com/articles/000003669 2020-08-25T03:26:15-0700 monthly 0.8 admin,premium knowledge_article_4374 knowledge_article_4374 2014-11-19T00:30:03-0800 000003669 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation Configuration, Installation, ZoneFlex Indoor, ZoneFlex Outdoor Why is AP port connecting at 100 Mbps and not at 1000 Mbps?? <ul><li>Ensure that the surge protector supports 1000Mbps for the AP to operate at this speed.</li><li>Ensure that the Recommended cable type is being used (CAT 5e , CAT 6)</li><li>Ensure that both the devices are set to Full duplex</li><li>Ensure that both the devices running the latest firmware version</li><li>If possible try to configure the switch port manually to operate on 1000mbps</li><li>Below are available configurable setting on the Ruckus AP <ul><li>100 - Set to fixed 100Mbps full duplex</li><li>10 - Set to fixed 10Mbps full duplex</li><li>Auto - Auto-negotiation to max bandwidth capability of the interfaces </li></ul> </li></ul> <div style="margin-left: 120px;">rkscli: set ethspeed eth0 1000 Error: parameter error Usage: set ethspeed <ifname> <connect speed> ------------------------------------------------------------- ** connect speed: ** 100 - Set to fixed 100Mbps full duplex ** 10 - Set to fixed 10Mbps full duplex ** auto - Auto-negotiation to max bandwidth capability of the interfaces (default)</div>

The AP port is connecting with 100Mbps speed only when there is auto negotiation on the switch port.

2020-08-25T03:26:15-0700 2020-08-25T06:00:07-0700 https://support.ruckuswireless.com/articles/000001979 2020-08-17T06:26:11-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_310 knowledge_article_310 2013-04-25T13:30:18-0700 000001979 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, ZoneDirector Why is ZF7372 is not connecting to a ZoneDirector running on 9.4? ZF7372 works only from 9.5 firmware. ZF7372 will not join ZD if the ZD is running with 9.4 or below firmware. Hence, ZD needs to be upgraded to firmware 9.5 or above.

This KBA provides details on the firmware requirements for ZD7372

2020-08-17T06:26:11-0700 2020-08-24T23:05:44-0700 https://support.ruckuswireless.com/articles/000007427 2017-12-12T16:13:34-0800 monthly 0.8 admin,premium knowledge_article_2732 knowledge_article_2732 2017-12-12T16:13:34-0800 000007427 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to enable or configure LLDP-MED network policy? Defining an LLDP-MED network policy An LLDP-MED network policy defines an Endpoint VLAN configuration (VLAN type and VLAN ID) and associated Layer 2 and Layer 3 priorities that apply to a specific set of applications on a port. ---------- Note: This feature applies to applications that have specific real-time network policy requirements, such as interactive voice or video services. It is not intended to run on links other than between Network Connectivity devices and Endpoints, and therefore does not advertise the multitude of network policies that frequently run on an aggregated link. ---------- To define an LLDP-MED network policy for an Endpoint, enter a command such as the following: device(config)# lldp med network-policy application voice tagged vlan 99 priority 3 dscp 22 port e 1/2/6 The network policy advertisement will appear similar to the following on the remote device, and in the CLI display output on the Brocade device (show lldp local-info ). + MED Network Policy Application Type : Voice Policy Flags : Known Policy, Tagged VLAN ID : 99 L2 Priority : 3 DSCP Value : 22 ---------- Note: Endpoints will advertise a policy as "unknown" in the show lldp neighbor detail command output, if it is a policy that is required by the Endpoint and the Endpoint has not yet received it. ---------- Reference: -fastiron-08030h-adminguide.pdf (Page 191 and 192) -Youtube video: <a href="https://www.youtube.com/watch?v=fSKG4N8rt7M&feature=youtu.be" target="_blank">https://www.youtube.com/watch?v=fSKG4N8rt7M&feature=youtu.be</a>

How to enable or configure LLDP-MED network policy?

2017-12-12T16:13:34-0800 2020-08-24T05:02:39-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4sCAC?attachment_index=0 2020-08-24T05:02:39-0700 monthly admin,premium knowledge_article_2732 knowledge_article_2732_attachment_1 ka25B000000CcHkQAK_Attachment__c.pdf 2440406.0 application/pdf https://support.ruckuswireless.com/articles/000010756 2020-08-18T16:43:23-0700 monthly 0.8 admin,premium knowledge_article_4314 knowledge_article_4314 2020-07-23T11:54:57-0700 000010756 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How to recover from Error on first time initialization process ? <ul><li>Permananet resolution to be checked into Smart Zone 5.2.2 version</li><li>Please utilize the work around method for recovery</li></ul>

There are few causes of Error on first Time Initialization process failures. This article provides work around for one case for Smart Zone deployment with only physical-dataplane appliance SZ-D.

2020-08-18T16:43:23-0700 2020-08-18T18:00:06-0700 https://support.ruckuswireless.com/articles/000005141 2020-08-18T09:06:53-0700 monthly 0.8 admin,premium knowledge_article_2167 knowledge_article_2167 2015-09-29T06:17:41-0700 000005141 Validated (External) Premium Zonedirector 3000;Zonedirector 5000;Zonedirector 1200;ZoneDirector 3000;ZoneDirector 5000;ZoneDirector 1200 Configuration Configuration, ZoneDirector 3000, ZoneDirector 5000, ZoneDirector 1200 How to create Social Media WLAN using Facebook? <div style="text-align: center;">Social Media - WLAN</div> <div style="text-align: center;">ZoneDirector – 9.12.1.0.140</div> Creating a Facebook Page using your Facebook account: URL: https://www.facebook.com/pages/create <img alt="User-added image" height="363" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxxt&feoid=00N50000002Cf3M&refid=0EM50000000HHIo" width="500"></img> <img alt="User-added image" height="355" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxxt&feoid=00N50000002Cf3M&refid=0EM50000000HHIt" width="500"></img> <img alt="User-added image" height="361" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxxt&feoid=00N50000002Cf3M&refid=0EM50000000HHIy" width="500"></img> <img alt="User-added image" height="285" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxxt&feoid=00N50000002Cf3M&refid=0EM50000000HHJ3" width="500"></img> <img alt="User-added image" height="291" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxxt&feoid=00N50000002Cf3M&refid=0EM50000000HHJ8" width="500"></img> <img alt="User-added image" height="660" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxxt&feoid=00N50000002Cf3M&refid=0EM50000000HHJD" width="500"></img> Facebook Page creation is successful!! Configuration on the ZoneDirector: Navigate to ZoneDirector >> Configure >> WLANs >> Create new In Social Media Login section choose “Facebook WiFi” and click on “Configure” <img alt="User-added image" height="453" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxxt&feoid=00N50000002Cf3M&refid=0EM50000000HHJI" width="500"></img> After Clicking on “Configure” a pop window will open. <img alt="User-added image" height="462" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxxt&feoid=00N50000002Cf3M&refid=0EM50000000HHJN" width="500"></img> Choose Facebook Page and Session Length If we want we can add Terms of Services <img alt="User-added image" height="442" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxxt&feoid=00N50000002Cf3M&refid=0EM50000000HHJS" width="500"></img> Click on Save Settings, “Okay” and close the window. <img alt="User-added image" height="466" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxxt&feoid=00N50000002Cf3M&refid=0EM50000000HHJX" width="500"></img> On the Client end: Connect to the Social Media WLAN and open a browser it will redirect to the Facebook page. Click on “Check In” to get authenticated. <img alt="User-added image" height="312" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxxt&feoid=00N50000002Cf3M&refid=0EM50000000HHJc" width="500"></img> Client status on the ZoneDirector: Authorized – Auth Method: Facebook WiFi <img alt="User-added image" height="51" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxxt&feoid=00N50000002Cf3M&refid=0EM50000000HHJh" width="500"></img>

Social Media - WLAN Configuration

2020-08-18T09:06:53-0700 2020-08-18T12:00:24-0700 https://support.ruckuswireless.com/articles/000002747 2020-08-18T09:29:59-0700 monthly 0.8 admin,premium knowledge_article_1737 knowledge_article_1737 2014-03-04T20:25:39-0800 000002747 Validated (External) Premium Zonedirector;Zoneflex indoor;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, ZoneDirector, ZoneFlex Indoor, SmartCell Gateway, virtual SmartCell Gateway What is, and how do I configure VLAN Pooling? In a single AP cluster, there can be a large number of clients in the same VLAN. This leads to a high level of broadcasts in the same subnet. To address this problem, VLAN pooling allows administrators to a deploy pool of multiple VLANs to which clients are assigned, thereby automatically segmenting large groups of clients into multiple smaller subgroups, even when connected to the same SSID. As the client device joins the WLAN, the VLAN is assigned using one of the following options: 1) MAC Hash 2) Round-Robin 3) Least-used If Wi-Fi admin chooses "MAC Hash" then when a station associates to SCG/vSCG/SZ100, a Process in the AP calculates the hash size, then matches a VLAN Id for the station. If the admin chooses “Round Robin”, Process assigns VLAN for station according to the list sequence. If the admin chooses “Least-Used”, the list should be sorted from small to large by mac_num first, then the Process chooses a Least used VLAN for the station. This can only be configured from CLI of ZD and here are the commands for the same: ruckus> en ruckus# conf You have all rights in this mode. ruckus(config)# vlan-pool Student The VLAN pool entry 'Student' has been loaded. To save the VLAN pool entry, type end, or exit. ruckus(config-vlanpool)# option <NUMBER> Enter the option type. 1 'Mac Hash', 2 'Round-Robin', 3 'Least-Used'. ruckus(config-vlanpool)# option 2 By default, MAC Hash is used as the option for the VLAN assignment unless changed. While there is no way to load balance the clients, the 3rd option seems to be the best option to achieve it. Note: There is an alternative to VLAN Pooling which is Dynamic VLAN by which clients can get an IP address from different VLANs based on User role which is defined in a Radius Server. Q: What’s the effect of using a VLAN Pool with a tunneled WLAN? A: User traffic is tagged with a VLAN of the pool based on Hash of MAC address and then traffic is encapsulated in the tunnel. Once it reaches the Data Plane then traffic is forwarded in the appropriate VLAN.

VLAN pooling is a multiple VLAN client IP addressing method.

2020-08-18T09:29:59-0700 2020-08-18T12:00:22-0700 https://support.ruckuswireless.com/articles/000001983 2020-08-18T06:57:12-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1910 knowledge_article_1910 2013-04-25T13:24:27-0700 000001983 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How can I restrict which AP's broadcast specific SSIDs? To restrict broadcasting of WLANs on specific APs we can use the WLAN groups. 1. Create WLAN group Under Configure > WLANs - WLAN Groups 2. Enter a name and select the WLANs that are required to be broadcast (if you do not need them to broadcast uncheck them) and click OK. Please note that you can only check max of 27 SSIDs under each WLAN group. 3. Go to Configure > Access Points. Edit the required AP using its MAC address. 4. Look for WLAN Group with the drop-down and you can select the WLAN group you had created and click Ok 5. If you want to assign this WLAN group to a specific AP group, you have to edit the AP group instead. The Number of WLAN groups that can be created depends on the ZoneDirector Model. <table border="1" cellspacing="0" style="color: rgb(0, 0, 0); font-size: 14px; font-style: normal; font-weight: normal; text-align: start; margin-left: 40px;" width="341"><colgroup><col style="width: 0px;"></col><col style="width: 0px;"></col></colgroup><tbody><tr><td colspan="1" rowspan="1"> ZoneDirector Model </td><td colspan="1" rowspan="1"> Max WLAN Groups </td></tr><tr><td colspan="1" rowspan="1"> ZoneDirector 1100 </td><td colspan="1" rowspan="1"> 128 </td></tr><tr><td colspan="1" rowspan="1"> ZoneDirector 3000 </td><td colspan="1" rowspan="1"> 1024 </td></tr><tr><td colspan="1" rowspan="1"> ZoneDirector 5000 </td><td colspan="1" rowspan="1"> 2048 </td></tr></tbody></table>

WLAN Groups can control what SSIDs are serviced by what APs.

2020-08-18T06:57:12-0700 2020-08-18T12:00:17-0700 https://support.ruckuswireless.com/articles/000006099 2020-08-18T07:41:55-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2431 knowledge_article_2431 2016-10-18T14:39:24-0700 000006099 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Firmware;System network management;Known issues and workarounds;Registration Configuration, Firmware, System Network Management, Known Issues and Workarounds, Registration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway How can I tell what versions need what type of Certificate Refresh processing? Refer to attached Ruckus AP Certificate Refresh Flowchart for SZ versions and how to request/refresh AP device certificates. <img alt="User-added image" height="140" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxxZ&feoid=00N50000002Cf3M&refid=0EM50000000ZAOA" width="500"></img> <img alt="User-added image" height="213" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxxZ&feoid=00N50000002Cf3M&refid=0EM50000000ZAOF" width="500"></img> <img alt="User-added image" height="204" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxxZ&feoid=00N50000002Cf3M&refid=0EM50000000ZAOK" width="500"></img> Related Article: <a href="https://support.ruckuswireless.com/answers/000005390" target="_blank">KBA-5390: FAQ - Ruckus AP Device Certificate Refresh</a>

AP Certificate Refresh Flowchart for Existing AP Installs and New AP Deployments (after Nov 27, 2016)

2020-08-18T07:41:55-0700 2020-08-18T12:00:11-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Lb61CAC?attachment_index=0 2020-08-18T12:00:11-0700 monthly admin,premium,warranty,guest knowledge_article_2431 knowledge_article_2431_attachment_1 Cert-Repl-Flowchart with SN-20161017.pdf 127250.0 application/pdf https://support.ruckuswireless.com/articles/000001556 2020-08-18T08:48:51-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_192 knowledge_article_192 2013-01-29T11:27:20-0800 000001556 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector On my Android device, I get a 404 error when trying to access the network The issue is due to the issue with the default browser present on Android. Use a different browser like Google Chrome and the provisioning file will be downloaded and installed successfully.

When the auto-provisioning file is downloaded on to the device and installed, the user gets a Access Error 404, see attached image.

2020-08-18T08:48:51-0700 2020-08-18T12:00:07-0700 https://support.ruckuswireless.com/articles/000004263 2020-08-18T03:52:01-0700 monthly 0.8 admin,premium knowledge_article_3540 knowledge_article_3540 2015-03-26T02:39:53-0700 000004263 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Troubleshooting Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor What does reason code X mean when a client device disconnects from an AP When an Access Point (AP) disconnects a UE, according to the 802.11 standard, it must provide a reason code for this event. Below is a table of the reason code numbers and their associated descriptions. <table border="1" style="width: 500px;"><tbody><tr><td colspan="1" rowspan="1">Reason Code</td><td colspan="1" rowspan="1">Description</td></tr><tr><td colspan="1" rowspan="1">0</td><td colspan="1" rowspan="1">Reserved</td></tr><tr><td colspan="1" rowspan="1">1</td><td colspan="1" rowspan="1">Unspecified Reason</td></tr><tr><td colspan="1" rowspan="1">2</td><td colspan="1" rowspan="1">Previous authentication no longer valid</td></tr><tr><td colspan="1" rowspan="1">3</td><td colspan="1" rowspan="1">Deauthenticated because sending STA is leaving (or has left) IBSS or ESS</td></tr><tr><td colspan="1" rowspan="1">4</td><td colspan="1" rowspan="1">Disassociated due to inactivity</td></tr><tr><td colspan="1" rowspan="1">5</td><td colspan="1" rowspan="1">Disassociated because AP is unable to handle all currently associated STAs</td></tr><tr><td colspan="1" rowspan="1">6</td><td colspan="1" rowspan="1">Class 2 frame received from nonauthenticated STA</td></tr><tr><td colspan="1" rowspan="1">7</td><td colspan="1" rowspan="1">Class 3 frame received from nonassociated STA</td></tr><tr><td colspan="1" rowspan="1">8</td><td colspan="1" rowspan="1">Disassociated because sending STA is leaving (or has left) BSS</td></tr><tr><td colspan="1" rowspan="1">9</td><td colspan="1" rowspan="1">STA requesting (re)association is not authenticated with responding STA</td></tr><tr><td colspan="1" rowspan="1">10</td><td colspan="1" rowspan="1">Disassociated because the information in the Power Capability element is unacceptable</td></tr><tr><td colspan="1" rowspan="1">11</td><td colspan="1" rowspan="1">Disassociated because the information in the Supported Channels element is unacceptable</td></tr><tr><td colspan="1" rowspan="1">12</td><td colspan="1" rowspan="1">Reserved</td></tr><tr><td colspan="1" rowspan="1">13</td><td colspan="1" rowspan="1">Invalid information element, i.e., an information element defined in this standard for which the content does not meet the specifications</td></tr><tr><td colspan="1" rowspan="1">14</td><td colspan="1" rowspan="1">Message integrity code (MIC) failure</td></tr><tr><td colspan="1" rowspan="1">15</td><td colspan="1" rowspan="1">4-Way Handshake timeout</td></tr><tr><td colspan="1" rowspan="1">16</td><td colspan="1" rowspan="1">Group Key Handshake timeout</td></tr><tr><td colspan="1" rowspan="1">17</td><td colspan="1" rowspan="1">Information element in 4-Way Handshake different from (Re)Association Request/Probe Response/Beacon frame</td></tr><tr><td colspan="1" rowspan="1">18</td><td colspan="1" rowspan="1">Invalid group cipher</td></tr><tr><td colspan="1" rowspan="1">19</td><td colspan="1" rowspan="1">Invalid pairwise cipher</td></tr><tr><td colspan="1" rowspan="1">20</td><td colspan="1" rowspan="1">Invalid AKMP</td></tr><tr><td colspan="1" rowspan="1">21</td><td colspan="1" rowspan="1">Unsupported RSN information element version</td></tr><tr><td colspan="1" rowspan="1">22</td><td colspan="1" rowspan="1">Invalid RSN information element capabilities</td></tr><tr><td colspan="1" rowspan="1">23</td><td colspan="1" rowspan="1">IEEE 802.1X authentication failed</td></tr><tr><td colspan="1" rowspan="1">24</td><td colspan="1" rowspan="1">Cipher suite rejected because of the security policy</td></tr><tr><td colspan="1" rowspan="1">25-31</td><td colspan="1" rowspan="1">Reserved</td></tr><tr><td colspan="1" rowspan="1">32</td><td colspan="1" rowspan="1">Disassociated for unspecified, QoS-related reason</td></tr><tr><td colspan="1" rowspan="1">33</td><td colspan="1" rowspan="1">Disassociated because QoS AP lacks sufficient bandwidth for this QoS STA</td></tr><tr><td colspan="1" rowspan="1">34</td><td colspan="1" rowspan="1">Disassociated because excessive number of frames need to be acknowledged, but are not acknowledged due to AP transmissions and/or poor channel conditions</td></tr><tr><td colspan="1" rowspan="1">35</td><td colspan="1" rowspan="1">Disassociated because STA is transmitting outside the limits of its TXOPs</td></tr><tr><td colspan="1" rowspan="1">35</td><td colspan="1" rowspan="1">Requested from peer STA as the STA is leaving the BSS (or resetting)</td></tr><tr><td colspan="1" rowspan="1">37</td><td colspan="1" rowspan="1">Requested from peer STA as it does not want to use the mechanism</td></tr><tr><td colspan="1" rowspan="1">38</td><td colspan="1" rowspan="1">Requested from peer STA as the STA received frames using the mechanism for which a setup is required</td></tr><tr><td colspan="1" rowspan="1">39</td><td colspan="1" rowspan="1">Requested from peer STA due to timeout</td></tr><tr><td colspan="1" rowspan="1">45</td><td colspan="1" rowspan="1">Peer STA does not support the requested cipher suite</td></tr><tr><td colspan="1" rowspan="1">46–65</td><td colspan="1" rowspan="1">Reserved</td></tr></tbody></table> More information on 802.11 management frames are available [<a href="https://en.wikipedia.org/wiki/IEEE_802.11" target="_blank">here</a>]. Please find attached the document for the list of 802.11 De-authentication and Disassociation Codes

This article provides insight into the reason codes for why an unsolicited notification management frame of type Disassociation, Deauthentication, DELTS, DELBA, or DLS Teardown was generated for a UE. This article lists the various reason codes along with a basic description.

2020-08-18T03:52:01-0700 2020-08-18T06:00:36-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PIPvCAO?attachment_index=0 2020-08-18T06:00:36-0700 monthly admin,premium knowledge_article_3540 knowledge_article_3540_attachment_1 802.11 Reason codes.pdf 440792.0 application/pdf https://support.ruckuswireless.com/articles/000004568 2020-08-18T03:34:26-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4366 knowledge_article_4366 2015-05-21T13:59:55-0700 000004568 Validated (External) Public Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Troubleshooting;Known issues and workarounds Performance, Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor How to disable directed multicast and igmp-snooping from ZD for 7025 / 7055 / H500 model APs See related article KBA-1236: <a href="https://support.ruckuswireless.com/answers/000001236" target="_blank">Multicast Support in Ruckus</a> Directed Multicast and IGMP Snooping commands configured on WLANs will be provisioned to APs. ZD CLI remote_ap_cli commands configuring DM and IGMP on AP Ethernet port, does not persist an AP reboot. ---- Starting in versions after 9.9.1.0.31 (not in current 9.8.2, 9.9.0, 9.10.0), ZD configure AP Groups, for zf7025 / zf7055 / H500 model APs, can configure Directed Multicast and IGMP Snooping on a per AP Group (ie hospitality APs) basis. Note: zf7025 is not supported after 9.9 H500 is not supported until 9.10 Step 1: Determine which AP LAN ports are in use. 1. Use an SSH utility and open a session to a 7025 / 7055 / H500 AP under ZD management. 2. Use ‘get wlanlist’ and ‘get eth’ commands to show active WLANs and LAN ports in use. <img alt="User-added image" height="474" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxnj&feoid=00N50000002Cf3M&refid=0EM50000000LkC5" width="500"></img> Step 2: Configure qos commands for Directed Multicast and IGMP Snooping on zf7025 / zf7055 / H500 model APs. Note: You can only issue these commands when configuring the 'System Default' AP Group. You specify the commands on a per AP model basis. 9.9.1.0.31 has the ap-group directed-mcast option for zf7025 and zf7055 model APs. SSH to the ZoneDirector, login with admin credentials, and use configuration mode. ruckus# show sysinfo System Overview: Name= Brado_5-29-15 IP Address= 10.9.51.34 MAC Address= 6C:AA:B3:3F:F6:B0 Uptime= 11m Model= ZD1200 Licensed APs= 5 Serial Number= 371406000015 Version= 9.9.1.0 build 31 ruckus# config You have all rights in this mode. ruckus(config)# ap-group System Default The AP group entry 'System Default' has been loaded. To save the AP group, type 'end' or 'exit'. ruckus(config-apgrp)# model zf7055 port-setting ruckus(config-apgrp-port)# lan 1 qos mld-snooping Enables the AP port MLD Snooping setting. igmp-snooping Enables the AP port IGMP Snooping setting. directed-mcast Enables the AP port Directed Mcast setting. ruckus(config-apgrp-port)# end ruckus(config-apgrp)# model h500 port-setting Invalid ap model ,please try zf7025,zf7055,zf7321,zf7341,zf7343,zf7352,zf7363,zf7372,zf7372-e,zf7441,zf7761cm,zf7762,zf7762-ac,zf7762-s,zf7762-s-ac,zf7762-t,zf7781-m,zf7781cm,zf7782,zf7782-e,zf7782-n,zf7782-s,zf7982,sc8800-s,sc8800-s-ac,r300,r500,r600,r700,t300,t300e,t301n,t301s instead. ruckus(config-apgrp)# model zf7025 port-setting ruckus(config-apgrp-port)# lan 1 qos mld-snooping Enables the AP port MLD Snooping setting. igmp-snooping Enables the AP port IGMP Snooping setting. directed-mcast Enables the AP port Directed Mcast setting. ruckus(config-apgrp-port)# ruckus(config-apgrp-port)# no lan 1 qos directed-mcast Setting Directed Multicast for port#(1) to 0 ruckus(config-apgrp-port)# no lan 1 qos igmp-snooping Setting IGMP Snooping for port#(1) to 0The AP group 'System Default' has been updated. ruckus(config-apgrp-port)# end ruckus(config-apgrp)# end ruckus(config)# end Your changes have been saved. ruckus# Configured this way in 9.9.1.0.31, the directed multicast/igmp snooping commands will persist after rebooting the APs. Additionally, the below commands could be executed directly on the AP; however, it would not be reboot persistent. set qos eth0 directed mutlicast disable set qos eth0 igmp disable set qos eth0 igmp-query disable

Hotels with LAN based streaming audio/video applications may require wired / wireless management of directed multicast and IGMP snooping.

2020-08-18T03:34:26-0700 2020-08-18T06:00:35-0700 https://support.ruckuswireless.com/articles/000002009 2020-08-18T04:42:41-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2003 knowledge_article_2003 2013-06-02T19:24:59-0700 000002009 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector I heard benefits of Zero-IT. How do I set it up now? Many of the small and medium businesses don't have a RADIUS server on their network. But they do want to provide best possible security to their users and protect their network from users that are not intended to have access. PSK (passphrase) based networks are relatively simple to set up yet ensure top level security to user traffic in the air medium. But by its nature, the administrator has to pass the passphrase to the users that need access to the network. At some point, it can lead to compromise of the network if it falls in the hands of the unintended users. Then the administrator will be forced to change the passphrase and provide or type in the new passphrase on all devices. This is lot of work. To help passphrase based networks, Zero-IT feature was introduced into ZD. It derives a 63-character strong passphrase called Dynamic PSK (DPSK) from a simple passphrase to each device. Here is how Zero-IT can be setup to provide a strong DPSK to each user. 1. First of all, decide on a backend user authentication system. For a lot of businesses, this will be a Microsoft Active Directory. 2. If there is no AD on the network a local user database can be used on the ZD. 3. Above need to be defined within ZD either under AAA Servers OR under Users section. 4. Create a new SSID. 5. Define the SSID type as standard and choose WPA2 for the encryption method. 6. Choose AES for the algorithm to provide robust security and type in hard to guess passphrase 7. Choose the authentication server type (whatever is concluded based off of steps 1 and 2) 8. Enable Zero-IT. And then enable DPSK. 9. Select either Secure D-PSK or Mobile Friendly D-PSK. Please also choose a key expiration type. 10. Enable the Limit D-PSK generation per user to 1-4 devices 11. Let the users connect to a wired network that has reachability to ZD. Please refer to the last point at the bottom if there is no LAN port on the client device. 12. Ask them to type in https://<zd_ip>/activate URL in a browser. The last step will give them a compatible executable file based on their OS. They need to run it to setup the necessary configuration to connect to the target wireless network. At this point they should disconnect the cable going to the wired network to be on the wireless network. Please ensure the Zero-IT SSID is enabled under the user roles (Configure --> Roles) so the connection could be successful. If the customer doesn't have an Ethernet port on their device, please refer to Onboarding Portal setup details at https://support.ruckuswireless.com/answers/000002842 With this setup, there is no need to type in the https://<zd_ip>/activate URL into the browser. Entire Zero-IT provisioning will take place in wireless.

How to setup Zero-IT with DPSK on ZD platforms

2020-08-18T04:42:41-0700 2020-08-18T06:00:10-0700 https://support.ruckuswireless.com/articles/000007036 2020-08-17T14:15:23-0700 monthly 0.8 admin,premium knowledge_article_3180 knowledge_article_3180 2017-12-12T13:15:47-0800 000007036 Validated (External) Premium Brocade eos products Configuration;System network management Configuration, System Network Management, Brocade EOS Products How to configure PPTP VPN on Windows Vista to Vyatta? <div style="text-align: justify; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Vyatta does not support Windows or the Windows client. This document is available as a example to help guide you.</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">PROCEDURE</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The steps below will help you configure PPTP client on Windows Vista to connect to the Vyatta VPN server/concentrator; We will walk you through the Windows "Network Connection Wizard" to create the VPN connection. </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Configure PPTP client on Windows Vista</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">You can use the Windows "wizard" to create the VPN connection as follows.</div> <ol style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Configure PPTP client on Windows Vista</li><li>You can use the Windows "wizard" to create the VPN connection as follows.</li><li>Go to "Network and Sharing Center" in the "Control Panel".</li><li>Click "Set up a connection or network". Choose "Connect to a workplace". Click "Next".</li><li>Click "Use my Internet connection (VPN)".</li><li>Type host name "vpn.vyatta.com" and a Destination name, e.g., "vyatta-pptp".</li><li>Type User name and Password. Click "Create".</li><li>Click "Connect".</li></ol> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Note: By default, after the VPN connection is established, a default route pointing to the VPN will be added. This means that, e.g., your Internet traffic will be routed to the VPN as well. If you do not want this (i.e., you want to keep your default route). See the ADVANCED CONFIGURATION section for details. <div>ADVANCED CONFIGURATION</div> <div>How to keep your default route:</div> <div>By default, after the VPN connection is established, a default route pointing to the VPN will be added. This means that, e.g., your Internet traffic will be routed to the VPN as well. If you do not want this (i.e., you want to keep your default route), you can modify the VPN configuration as follows.</div> <ol><li>Go to "Network Connections" in the "Control Panel".</li><li>Right-click the "vyatta-pptp" (or whatever name you specified) icon. Select "Properties".</li><li>Click "Networking" tab. Click "Internet Protocol (TCP/IP)". Click "Properties".</li><li>Click "Advanced". Uncheck "Use default gateway on remote network".</li><li>Click "OK". Click "OK". Click "OK"!</li></ol> <div>To connect, double-click the "vyatta-pptp" icon, type the user name and password, and then click "Connect". </div> <div>MORE INFORMATION</div> Point-to-point tunneling protocol; From Wikipedia, the free encyclopedia. <a href="http://en.wikipedia.org/wiki/PPTP" style="color: rgb(51, 52, 53);" target="_blank">http://en.wikipedia.org/wiki/PPTP</a> </div>

This document describes how to create a new PPTP VPN client connection in Microsoft Windows Vista to a Vyatta router.

2020-08-17T14:15:23-0700 2020-08-17T18:00:10-0700 https://support.ruckuswireless.com/articles/000006694 2020-08-17T14:25:30-0700 monthly 0.8 admin,premium knowledge_article_3042 knowledge_article_3042 2017-12-12T14:34:07-0800 000006694 Validated (External) Premium Ruckus icx switches;Brocade eos products System network management System Network Management, Ruckus ICX Switches, Brocade EOS Products BNA performance collectors threshold values lost in config Upgrade to a version of code that contains the fix by reviewing Release Note updates - currently 14.2.0.

BNA performance collectors threshold values lost in config

2020-08-17T14:25:30-0700 2020-08-17T18:00:09-0700 https://support.ruckuswireless.com/articles/000006878 2020-08-17T14:27:11-0700 monthly 0.8 admin,premium knowledge_article_3224 knowledge_article_3224 2017-12-12T13:15:41-0800 000006878 Validated (External) Premium Ruckus icx switches Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches Why are FastIron clients not including the Server Parameter List Option 67 (bootfile name) in the DHCP Requests? Upgrade to a version of code that contains the fix.

FastIron clients are not including the Server Parameter List Option 67 (bootfile name) in the DHCP Requests

2020-08-17T14:27:11-0700 2020-08-17T18:00:08-0700 https://support.ruckuswireless.com/articles/000006991 2020-08-17T15:13:36-0700 monthly 0.8 admin,premium knowledge_article_3126 knowledge_article_3126 2017-12-12T14:12:02-0800 000006991 Validated (External) Premium Icx 7250;Ruckus ICX 7250 Campus Switches Known issues and workarounds Known Issues and Workarounds, ICX 7250 Why does the front panel tab for ICX7250-48 GUI incorrectly display as 7240? This issue is fixed in software FI 08.0.30m onwards. This is a cosmetic display issue and no other functionality of the switch is impaired. <img alt="User-added image" height="124" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxv4&feoid=00N50000002Cf3M&refid=0EM50000000XGyU" width="500"></img>

Front panel tab for ICX7250-48 GUI incorrectly displays as 7240

2020-08-17T15:13:36-0700 2020-08-17T18:00:07-0700 https://support.ruckuswireless.com/articles/000002346 2020-08-17T09:18:07-0700 monthly 0.8 admin,premium knowledge_article_616 knowledge_article_616 2013-11-09T08:43:39-0800 000002346 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, ZoneDirector Why am I getting an error when I used the ZoneDirector "Check for Updates" function? This function is being deprecated. With the increasing complexity of the product line it's not possible to provide proper upgrade guidance using this tool.

Error : Unable to connect to the Ruckus Wireless Update Server. Verify that you are connected to the Internet, and then try again

2020-08-17T09:18:07-0700 2020-08-17T12:00:28-0700 https://support.ruckuswireless.com/articles/000003863 2020-08-17T09:15:44-0700 monthly 0.8 admin,premium knowledge_article_2156 knowledge_article_2156 2015-01-08T08:27:15-0800 000003863 Validated (External) Premium Zoneplanner;ZonePlanner Configuration Configuration, ZonePlanner Where can I get the antenna patterns for new R500, R600, T300 and T301 access points to add in ZonePlanner <ul><li>The attached file consists of the R500, R600, T300, and T301 APs antenna patterns.</li><li>Extract the file and copy them to the Zone planner installed folder. </li><li>If Zone Planner was installed on C drive, then ZonePlanner Antenna folder will be as mentioned below:</li></ul> <div style="margin-left: 80px;">C:\Program Files (x86)\AirMagnet Inc\AirMagnet Surveyor\Antenna </div> <ul><li>Open Zone Planner software and now we can select R500, R600, and T300/T301 AP antenna models.</li></ul>

ZonePlanner antenna patterns for new APs (R500, R600, T300 and T301)

2020-08-17T09:15:44-0700 2020-08-17T12:00:27-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PI1FCAW?attachment_index=0 2020-08-17T12:00:27-0700 monthly admin,premium knowledge_article_2156 knowledge_article_2156_attachment_1 antenna patterns.rar 95545.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000005211 2020-08-17T06:04:23-0700 monthly 0.8 admin,premium knowledge_article_4345 knowledge_article_4345 2015-11-03T15:51:21-0800 000005211 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed How to configure guest access and how to generate guest passes on unleashed AP <div style="color: rgb(0, 111, 201); font-size: 14.6667px;">Follow the below procedure to configure guest access in unleashed AP 1) Create a Guest Access Service under System&Admin> Services> Guest Access Service. </div> <div style="color: rgb(0, 111, 201); font-size: 14.6667px; margin-left: 40px;"><img alt="User-added image" height="303" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxpQ&feoid=00N50000002Cf3M&refid=0EM50000000XreS" width="500"></img></div> <div style="color: rgb(0, 111, 201); font-size: 14.6667px;"> 2) Create a WLAN with Type: "Guest Access" under Dashboard> WiFi Networks and tag the above created Guest Access Service page. </div> <div style="color: rgb(0, 111, 201); font-size: 14.6667px; margin-left: 40px;"><img alt="User-added image" height="223" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxpQ&feoid=00N50000002Cf3M&refid=0EM50000000XreN" width="500"></img></div> <div style="color: rgb(0, 111, 201); font-size: 14.6667px;"> 3) Create a Role with guest pass generation rights. This can be configured under System&Admin> System> Roles. </div> <div style="color: rgb(0, 111, 201); font-size: 14.6667px; margin-left: 40px;"><img alt="User-added image" height="213" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxpQ&feoid=00N50000002Cf3M&refid=0EM50000000XreX" width="500"></img></div> <div style="color: rgb(0, 111, 201); font-size: 14.6667px;"> 4) Create a User with above selected Role under System&Admin> System> Users. </div> <div style="color: rgb(0, 111, 201); font-size: 14.6667px; margin-left: 40px;"><img alt="User-added image" height="184" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxpQ&feoid=00N50000002Cf3M&refid=0EM50000000Xrec" width="500"></img></div> <div style="color: rgb(0, 111, 201); font-size: 14.6667px;"> Once the above configuration is done, then navigate to https://<Unleashed AP IP address>/guestpass and generate guest passes. </div> <div style="color: rgb(0, 111, 201); font-size: 14.6667px; margin-left: 40px;"><img alt="User-added image" height="230" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxpQ&feoid=00N50000002Cf3M&refid=0EM50000000Xreh" width="500"></img></div> <div style="color: rgb(0, 111, 201); font-size: 14.6667px;"> We can see the generated guest passes under System&Admin> Services> Guest Access Service> Guest Pass Generation > Generated Guest Passes.</div>

This article gives you information on how to configure guest access and how to generate guest passes on unleashed AP

2020-08-17T06:04:23-0700 2020-08-17T12:00:25-0700 https://support.ruckuswireless.com/articles/000001586 2020-08-17T06:12:28-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2439 knowledge_article_2439 2013-02-24T19:45:00-0800 000001586 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to create a CSR (Certificate Signing Request) with key length of 2048 bit ? Here is the procedure to create a CSR: 1. Check if the official CA will use 1K or 2K (1024/2048 bit key length) certificates. 2. Most of the vendors use 2K(2048) so configure ZD tool to create a new 2K(2048) private key. To generate a private key with a key length of 2048 bit, follow the below procedure. <ul><li style="margin-left: 40px;">ZD running on old version: Go to Configure >> Certificate >> Advanced options</li><li style="margin-left: 40px;">ZD running on latest versions: Go to Administer >> Certificate >> Advanced options.</li></ul> 3. Fill in the form and ensure the Name and Domain used is valid as this will be the FQDN (fully qualified domain name) used for all ZD page requests and must resolve on a local or remote DNS. Otherwise, specify SAN (Subject Alternative Name) with IP address. 4. Now go ahead and Submit (and pay) for CA signed cert - usually by copying and pasting the CSR into a web site.

This article explains the per-requisites for placing the request for CA to obtain the signed SSL certificate.

2020-08-17T06:12:28-0700 2020-08-17T12:00:24-0700 https://support.ruckuswireless.com/articles/000006393 2020-08-17T06:28:54-0700 monthly 0.8 admin,premium knowledge_article_2646 knowledge_article_2646 2017-07-20T15:22:32-0700 000006393 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Firmware;Installation Firmware, Installation, SZ100 How to upgrade SZ100 in a factory default state through Setup Wizard? We can upgrade SZ100 in the factory default state while going through the Setup Wizard. Follow below steps for the upgrade: 1. Login to the SmartZone's default IP address of 192.168.2.2 to launch the Setup Wizard. 2. At the bottom-left corner of the Setup Wizard screen, is the "Upgrade" button: <div style="margin-left: 40px;"><img alt="User-added image" height="325" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Gxpz&feoid=00N50000002Cf3M&refid=0EM500000002dOk" width="500"></img></div> 3. Select the upgrade option and choose the right firmware file and upgrade: To download firmware visit:https://support.ruckuswireless.com/software

This article explains how to upgrade SZ100 in a factory default state through Setup Wizard.

2020-08-17T06:28:54-0700 2020-08-17T12:00:19-0700 https://support.ruckuswireless.com/articles/000002799 2020-08-17T09:27:15-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1706 knowledge_article_1706 2014-03-19T08:36:01-0700 000002799 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What I need to do to ensure AP stability? Here are few things that can be done to avoid sudden AP reboots or other related stability issues: 1. Always keep AP management traffic on a separate VLAN. 2. Avoid using half duplex configuration on the switch ports. 3. If you suspect power, check the PoE switch configuration and corresponding logs. Instead if you use a power adapter, you may want to check the cabling and try a different power adapter. 4. Try to avoid tunneling of user's traffic. 5. Disable directed broadcast and multicast on the APs. 6. Avoid Bonjour Gateway functionality on an AP if it is already handling too many clients or handling too much IGMP or VoIP traffic. 7. Ensure RF is clean through proper site survey or through a RF scanner. 8. Ensure there are not many rogues or smartphone based hotspots. 9. Keep number of SSIDs to the minimum. 10. Balance clients between both bands so the clients don't overcrowd a single radio. 11. Avoid connecting too many mesh APs and multiple mesh hops. 12. Avoid operating AP outside the permissible temperature. 13. Check for bad network cabling or the cable length is too long. 14. Disable SNMP services. 15. Check if the problem is related to keeping APs on adjacent ports. If all the above is verified as good and the AP is still unstable, you may want to try replacing the AP with a known good working AP. If nothing helps, you need to contact Ruckus Support and provide firmware version details and related logs.

This article talks about what can be done to ensure AP stability.

2020-08-17T09:27:15-0700 2020-08-17T12:00:14-0700 https://support.ruckuswireless.com/articles/000003228 2020-08-17T09:32:41-0700 monthly 0.8 admin,premium knowledge_article_1740 knowledge_article_1740 2014-08-14T10:11:39-0700 000003228 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security;System network management Configuration, Security, System Network Management, SmartCell Gateway How do I configure vSCG to use Radius admin login? 1. Create different accounts on the vSCG with different access rights. <div style="margin-left: 80px;">a. Goto: Configuration>Administrator>Administrator Accounts, click on “Create New” and enter the appropriate information: Example: RadiusAdmin <img alt="User-added image" height="437" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXmw" width="500"></img> b. Goto: Configuration>Administrator>Administrator Roles, click on “Create New” and set the appropriate permission: <img alt="User-added image" height="787" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXmr" width="500"></img> c. Goto Configuration>Management Domain>Administrator and click on “Add Account & Assign Role” and select “RadiusAdmin” from previous steps under the “Account Name” and select “LimitedRole” also from previous steps in the “Role Name”: <img alt="User-added image" height="418" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXmh" width="500"></img> d. Goto: Configuration>Administrator>RADIUS Server for Administrators and create a new AAA server and “Apply” it: <img alt="User-added image" height="353" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXmc" width="500"></img> </div> 2. Create a User Group/User on AD to grant access. <div style="margin-left: 80px;">a. Open the “AD Users and Computer” and create a new Global Security and give it an appropriate name: Example: WiFi-Admin <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXmX"></img> b. Create or add a user to this new group: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXmS"></img> </div> 3. Configure NPS to allow the new Group Access: <div style="margin-left: 40px;">a. Open “Network Policy Server”, expand “Policies” and create a new Policy to allow the newly created domain Group: <img alt="User-added image" height="357" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXmN" width="500"></img> b. Edit the New Policy and go to “Settings>Vendor Specific” and click on the “Add” button: <img alt="User-added image" height="410" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXmI" width="500"></img> c. In the VSA attribute select “Custom/Vendor-Specific: Radius Standard: <img alt="User-added image" height="378" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXmD" width="500"></img> d. In the Attribute Information dialog, click on “Add”: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXm8"></img> e. In the Vendor-Specific Attribute Information dialog, enter Ruckus vendor code of 25053 and select “Yes. It conforms” and click on “Configure Attribute”: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXm3"></img> f. In the “Configure VSA (RFC Compliant)” dialog set the attribute number to 10, use a String format and provide the String value. It should match the string configured in Step 1. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXly"></img> g. Click OK and verify the new NPS policy show the correct: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXlt"></img></div> 4. To log into the SCG/vSCG with the new user use the full realm name: <div style="margin-left: 40px;"><img alt="User-added image" height="188" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXlo" width="500"></img></div> 5. Verify the admin name and role: <div style="margin-left: 40px;"><img alt="User-added image" height="56" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxrR&feoid=00N50000002Cf3M&refid=0EM50000000LXlj" width="500"></img></div>

This KBA provides details on how to configure the vSZ admin login using Radius Server.

2020-08-17T09:32:41-0700 2020-08-17T12:00:13-0700 https://support.ruckuswireless.com/articles/000003340 2020-08-17T09:37:45-0700 monthly 0.8 admin,premium knowledge_article_1252 knowledge_article_1252 2014-09-03T02:09:12-0700 000003340 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Known issues and workarounds Performance, Known Issues and Workarounds, ZoneDirector Why the SmartRedundancy pair has failed over and what can be done to avoid them in the future? Contact Ruckus TSE for a more current SW recommendation.

This article explains reasons for failover while there was no visible network communication issues and what can be done to avoid them.

2020-08-17T09:37:45-0700 2020-08-17T12:00:12-0700 https://support.ruckuswireless.com/articles/000002805 2020-08-17T09:54:21-0700 monthly 0.8 admin,premium knowledge_article_805 knowledge_article_805 2014-03-27T10:46:01-0700 000002805 Validated (External) Premium Zonedirector 1100;ZoneDirector 1100 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector 1100 Rescue Mode message as " No storage connected" Try Factory Defaulting the Zone Director and check if it could be recovered form the Rescue Mode and if still the see the message contact Ruckus to replace and update them with the screenshot and details.

This KBA provides details on what needs to be done if you cannot recover a ZD

2020-08-17T09:54:21-0700 2020-08-17T12:00:10-0700 https://support.ruckuswireless.com/articles/000004963 2020-08-17T10:01:51-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2077 knowledge_article_2077 2015-08-04T05:35:32-0700 000004963 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What changes are required on the firewall for application visibility feature to work when the APs are behind it? Application visibility feature will let admin see what applications and websites are mostly used on the wireless network. It will also let the admin see who is using them. This feature needs to be enabled at the SSID level. Once enabled, APs will send the client traffic details to the controller for every 5 minutes. The controller will accumulate this information from all APs and present it in a pie-chart format. APs use the FTP port to send this data to the controller. So the Admin has to open TCP port 21 and ports above 1024 as mentioned in the controller's user guide. Some firewalls also have Application Layer Gateway (ALG) feature enabled which lets them monitor the traffic and dynamically open/close the corresponding ports as required. This has the potential to block the AP traffic corresponding to the application recognition. If your firewall has this feature enabled by default, please disable it.

This article explains what network changes are required for application visibility to work when the APs are behind a firewall.

2020-08-17T10:01:51-0700 2020-08-17T12:00:07-0700 https://support.ruckuswireless.com/articles/000004757 2020-08-17T05:54:36-0700 monthly 0.8 admin,premium knowledge_article_2119 knowledge_article_2119 2015-06-23T12:00:28-0700 000004757 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartZone 100-D (SZ100-D) Configuration;System network management;Registration Configuration, System Network Management, Registration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway, SZ100 How do I configure my MS DHCP server to direct both ZD mode AP and RuckOS AP to the same RuckOS controller? You can use MS DHCP server Option 43 for both ZD and RuckOS mode AP by using different sub option code but using the same RuckOS controller IP. This is possible because ZD mode AP uses Sub Option code 03, but RuckOS AP use Sub Option code 06. Use the following steps to configure these option: 1. Determine the option value and option length value for each type of AP. Use this link to generate the sub option and length value: http://shimi.net/services/opt43/index.php The string length for the IP will be different base on the number of digits, including the dot between each value. This is a very important value to get and enter correctly, along with the sub option and IP. Example string length for different IP: 10.9.52.32 has a length of 10 or hex value of 0x0a 10.10.52.32 has a length of 11 or hex value of 0x0b 10.11.52.32 has a length of 11 or hex value of 0x0b 10.111.52.32 has a length of 12 or a hex value of 0x0c 192.168.100.10 has a length of 14 or a hex value of 0x0e 2. Configure the Option 43 in Windows DHCP server using the above information and an example IP of 10.9.52.32: 2.1: Enter the Sub Option and length value for the ZD mode AP (03 0A) in the Binary section <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxpG&feoid=00N50000002Cf3M&refid=0EM50000000LmSb"></img> 2.2 Enter the IP address of the RuckOS controller (10.9.52.32) in the ASCII field just after the sub option and length place holder. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxpG&feoid=00N50000002Cf3M&refid=0EM50000000LmRY"></img> 2.3 Add the sub option and length for RuckOS AP (06 0A) in the Binary section just after the IP address entered in the previous step. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxpG&feoid=00N50000002Cf3M&refid=0EM50000000LmRd"></img> 2.4 Enter the Same RuckOS controller IP (10.9.52.32) in the ASCII section again JUST after the two DOTS place holder for the sub option and length field. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxpG&feoid=00N50000002Cf3M&refid=0EM50000000LmRi"></img> 2.5 Click OK to apply the setting: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxpG&feoid=00N50000002Cf3M&refid=0EM50000000LmRn"></img> 2.6 Verify the final Option is in place: <img alt="User-added image" height="160" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxpG&feoid=00N50000002Cf3M&refid=0EM50000000LmRs" width="500"></img>

*This configuration will allow an admin to configure Option 43 to point a ZD mode AP to a RuckOS COntroller IP and also direct a RuckOS AP to the same RuckOS controller IP

2020-08-17T05:54:36-0700 2020-08-17T06:00:10-0700 https://support.ruckuswireless.com/articles/000006489 2020-08-17T05:30:38-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2683 knowledge_article_2683 2017-11-06T15:01:32-0800 000006489 Validated (External) Public Zoneflex indoor Performance;Known issues and workarounds Performance, Known Issues and Workarounds, ZoneFlex Indoor Why might R600 APs reboot when powered by PoE switch or injector? Customers should contact Ruckus Support and provide serial numbers of affected R600 model APs, to get advance replacement units.

R600 APs manufactured with S/N beginning with 2517xxxx thru 2917xxxx may exhibit Power reboot issues.

2020-08-17T05:30:38-0700 2020-08-17T06:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA250000000TvnXCAS?attachment_index=0 2020-08-17T06:00:09-0700 monthly admin,premium,warranty,guest knowledge_article_2683 knowledge_article_2683_attachment_1 R600_announcement.pdf 703737.0 application/pdf https://support.ruckuswireless.com/articles/000003271 2020-08-17T05:23:52-0700 monthly 0.8 admin knowledge_article_4342 knowledge_article_4342 2014-08-07T16:29:12-0700 000003271 Validated (External) Partner Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why aren't any of my wireless clients able to connect to the Ruckus WiFi? The issue is such that none of the clients stay connected to the Ruckus network. After further investigation, it was noticed that there is a Meraki network in the same facility using the same WLAN name. Connectivity is constant when it comes up but it mostly surfaces when there's a reboot, addition of a Ruckus AP or shutdown of any Ruckus device does the customer start seeing the connectivity problem. Meraki and Ruckus using the same unique WLAN. Here are the logs from the ZD debug client data. We see that the client connects and within milliseconds it disconnects with a repeated sqlited message repeated several times in the logs: Jul 7 09:19:20 DoubleDutchRuckus syslog: eventd_to_syslog():User[b0:34:95:48:ab:ea] joins WLAN[DD] from AP[WAP3 - Ruckus R700 East@6c:aa:b3:15:b5:e0] Jul 7 09:19:20 DoubleDutchRuckus syslog: sqlited received msg->msg_id = 2, msg->len = 264 Jul 7 09:19:20 DoubleDutchRuckus syslog: eventd_to_syslog():User[b0:34:95:48:ab:ea] disconnects from WLAN[DD] at AP[WAP3 - Ruckus R700 East@6c:aa:b3:15:b5:e0] Jul 7 09:19:20 DoubleDutchRuckus syslog: eventd_to_syslog():User[b0:34:95:48:ab:ea] leave WLAN[DD] at AP[WAP3 - Ruckus R700 East@6c:aa:b3:15:b5:e0] with Session Time[0.23 sec] RX Bytes[580] Jul 7 09:19:20 DoubleDutchRuckus syslog: sqlited received msg->msg_id = 2, msg->len = 264 Jul 7 09:19:20 DoubleDutchRuckus last message repeated 3 times Jul 7 09:19:20 DoubleDutchRuckus syslog: eventd_to_syslog():User[b0:34:95:48:ab:ea] joins WLAN[DD] from AP[WAP2 - Ruckus R700 West@6c:aa:b3:16:5b:a0] Jul 7 09:19:20 DoubleDutchRuckus syslog: sqlited received msg->msg_id = 2, msg->len = 264 Jul 7 09:19:21 DoubleDutchRuckus last message repeated 6 times Jul 7 09:19:21 DoubleDutchRuckus syslog: eventd_to_syslog():User[b0:34:95:48:ab:ea] disconnects from WLAN[DD] at AP[WAP2 - Ruckus R700 West@6c:aa:b3:16:5b:a0] Jul 7 09:19:21 DoubleDutchRuckus syslog: eventd_to_syslog():User[b0:34:95:48:ab:ea] leave WLAN[DD] at AP[WAP2 - Ruckus R700 West@6c:aa:b3:16:5b:a0] with Session Time[1.15 sec] RX Bytes[252] Jul 7 09:19:21 DoubleDutchRuckus syslog: sqlited received msg->msg_id = 2, msg->len = 264 Jul 7 09:19:21 DoubleDutchRuckus last message repeated 3 times We know that other vendor systems have the ability to block clients from connecting to other networks by doing Rogue AP attacks. There are different types of WIPS attacks that can be initiated to prevent clients from external attacks. Two of these are: DoS attack and a using Intrusion Prevention and Detection used to recognize and ultimately attack intruders. This issue was related to WIPS being enabled at the Meraki system. So the customer had two options going forward to fix this issue. 1. Keep WIPS disabled from the Meraki end. 2. Whitelist the Ruckus network, specifically the WLAN in question.

Clients are unable to connect. There are high interference numbers from a neighboring meraki system using the same WLAN name. Clients are only kicked out at the Ruckus system but not the meraki system.

2020-08-17T05:23:52-0700 2020-08-17T06:00:06-0700 https://support.ruckuswireless.com/articles/000010095 2020-01-22T15:46:13-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4056 knowledge_article_4056 2020-01-22T15:44:47-0800 000010095 Validated (External) Public Vriot Firmware;Support license activation;Registration Firmware, Support License Activation, Registration, vRIoT Where do I find the serial number of my vRIOT server for resgistration? As of IOT 1.4 release, the only way to find the serial number of vRIOT Server is via Command Line interface: Steps to find the Serial Number: Step:1 Login to the Command line interface with your credentials. Step 2: Choose Option 2 "System Details" and it will display the Serial Number of the vRIOT controller: <img alt="vRIOT SN CLI" height="314" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054Um&feoid=00N50000002Cf3M&refid=0EM2J000000w719" width="631"></img> Starting vRIOT 1.5, we will have an option in the GUI Under Admin> License to view the Serial number of the vRIOT server: <img alt="Serial UI" height="319" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054Um&feoid=00N50000002Cf3M&refid=0EM2J000000w71O" width="633"></img>

This Article explains how to find the serial number of vRIOT Server.

2020-01-22T15:46:13-0800 2020-08-16T11:27:24-0700 https://support.ruckuswireless.com/articles/000002460 2020-08-14T12:01:30-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4340 knowledge_article_4340 2013-12-26T16:13:53-0800 000002460 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector How to allow and deny services for clients according to their MAC addresses (L2 ACL) and mapping to WLAN . Layer 2 Access Control Lists (MAC ACLs) filter incoming traffic based on Layer 2 MAC header fields in the Ethernet/IEEE 802.3 frame. Below are the steps to configure L2 ACL on ZD: 1) Navigate to ZD GUI>>Configure >>Access control. For 10.1 and above release Go to Services & Profiles > Access Control 2) Under L2/MAC Access control, create a new ACL and give it a name. 3) Choose between "Only allow all stations listed below' versus "Only deny all stations listed below" based on your requirement. And then type in all MAC addresses. Please note that there is a 128 MAC address limitation per ACL. Mapping the ACL to WLAN : ZD GUI --> Configure -->WLANs --> Edit the WLAN --> Advanced Options --> Access control --> Choose the L2/MAC ACL from the dropdown (created as per the above procedure). For 10.1 and above release ZD GUI -->Wireless LANs > Edit > Advanced Options > Access Control > L2/MAC >Choose the L2/MAC ACL from the dropdown (created as per the above procedure). Important Note: Make sure that the MAC addresses are correct and be consistent with the mac nomenclature. In other words, chaging all of the mac addresses to lower case for a customer alleviated the issue. He had some mac address of clients and some with all caps, changing all to lower case fixed the issue with allowing the whitelist to work.

This article explains how to configure a MAC ACL and assig it to a specific SSID.

2020-08-14T12:01:30-0700 2020-08-14T18:00:11-0700 https://support.ruckuswireless.com/articles/000010167 2020-08-14T16:48:56-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4138 knowledge_article_4138 2020-03-02T00:07:37-0800 000010167 Validated (External) Public Ruckus cloud lte Configuration;Firmware;Troubleshooting;Known issues and workarounds;Registration Configuration, Firmware, Troubleshooting, Known Issues and Workarounds, Registration, Ruckus Cloud LTE How do I make sure that my Band 48 supported phone can connect to my Ruckus AP/CBSD? Here are a few steps taken to check whether a new Galaxy S10+, or any new smartphone, can connect to my Ruckus Q710 AP running 3.0.0 SW. 1. First thing will be to check the CBRS Alliance on whether the phone supports Band 48. This is a link to the website = https://www.cbrsalliance.org/certification. Important: Not all models work, check the model number to see if it supports CBRS band. For example, Galaxy S10 phone listed in the cbrs alliance model number is SMG975U and my test phone is P/N SM-G975U1. 2. Make sure that the phone is an unlocked version phone. CBRS supported phones purchased from phone vendors (TMobile/ATT/Verizon/etc) have the bands locked and they would have to unlock the phone to get band 48 operational. 3. Check with Ruckus Support if smartphone is supported by Ruckus AP/CBSD. The phone may have been on list of CBRS clients under the CBRS Alliance but each phone would need to be checked with Engineering,. Marketing would give the last word on whether the phone model is supported. 4. Upgrade to the latest SW version. An unlocked Galaxy S10+ out of the box will not work unless upgraded to at least the Feb. 1 2020 version. Please follow these general guidelines before purchasing your CBRS supported phone.

Though a phone is listed as Band 48 supported, not all models of that phone will work in the B48. This note is a checklist of items that need to be checked before a phone can connect to a Ruckus CBSD/AP.

2020-08-14T16:48:56-0700 2020-08-14T18:00:06-0700 https://support.ruckuswireless.com/articles/000006102 2020-08-13T06:02:14-0700 monthly 0.8 admin,premium knowledge_article_4339 knowledge_article_4339 2016-10-18T16:28:31-0700 000006102 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, Cloudpath How do I configure Apple CNA Bypbass on Aruba Controllers in Cloudpath ES? This is just informational KB

Configure Cloudpath Apple CNA Bypass on Aruba controllers

2020-08-13T06:02:14-0700 2020-08-13T12:00:12-0700 https://support.ruckuswireless.com/articles/000004971 2020-08-12T21:51:00-0700 monthly 0.8 admin,premium knowledge_article_4338 knowledge_article_4338 2015-08-04T01:11:40-0700 000004971 Validated (External) Premium Scg200;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Performance;Configuration;System network management;Troubleshooting Performance, Configuration, System Network Management, Troubleshooting, SCG200, virtual SmartCell Gateway, SZ100 How does the AP heartbeat behave in SZ controlled environments? The AP sends a heartbeat to the SZ controller, in order to tell the SZ that it is online. The default AP configuration dictates that the AP sends one heartbeat packet to SZ every 30 seconds. By default, you do not need to configure AP heartbeats as they are automatically set. The controller uses the heartbeats to generate AP connectivity-status event (log messages) and update the AP status within the GUI. The status will change in SmartZone, dependent upon the following criteria: 1. If SZ fails to receive 2 consecutive heartbeats from an AP, SZ will generate a heartbeat lost event. Default settings dictates that this happens after 60 seconds have elapsed without receiving heatbeats. 2. SZ will continue to generate heartbeat lost events up to a period of 300 seconds (5 minutes) of consecutive lost heartbeats. 3. If 300 seconds elapses without hearing a heartbeat, SZ will generate an 'apConnectionLost' event and report the AP as Offline in the GUI. This means 10 heartbeats must be missed before the AP is reported as Offline. AP heartbeats can further be adjusted in the SZ command-line. This could be beneficial in a situation such as where the APs are subjected to regular WAN network interruptions which would cause the APs to lose internet connectivity to a SZ, but may not necessarily be offline locally. The default setting of 30 seconds, is however, considered optimal heartbeat interval by Ruckus. Note, that changing the heartbeat interval is a global setting and will reconfigure the heartbeat interval on all APs managed by the SZ controller. To change the AP heartbeat interval, use the following commands in bold: <login to SZ> ruckus>enable <password> ruckus#config ruckus(config)# ap-heartbeat <seconds> <div style="margin-left: 200px;">Syntax Description This command uses the following syntax: seconds: Interval in seconds, which the AP sends the heartbeat to the controller such as: 30, 60, 150 and 300</div> ruckus(config)# end <div style="margin-left: 40px;"> </div> Example: SZ100-Node1(config)# ap-heartbeat 30 Note that the heartbeat reporting behaviour in SZ will change as follows: <img alt="User-added image" height="309" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053pj&feoid=00N50000002Cf3M&refid=0EM2J000000mBST" width="500"></img> Note that ZoneDirector manages heartbeats slightly differently. Please see other articles in the Knowledge Base for reference.

The article provides information on the AP heartbeat function within SZ

2020-08-12T21:51:00-0700 2020-08-13T00:00:06-0700 https://support.ruckuswireless.com/articles/000006846 2020-08-12T15:38:33-0700 monthly 0.8 admin,premium knowledge_article_3140 knowledge_article_3140 2017-12-12T14:11:56-0800 000006846 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches What data needs to be collected when you experience a switch down event? Notes on switch down events In cases where a user says a switch went down, crashed, locked up, etc., there are multiple symptoms we want to look for. Be sure to identify which scenario you are seeing below. If Brocade TAC (Level 2 or Level 3) becomes involved, please also try to relay this to them to help expedite things. 1) The switch software crashed and reloaded on its own. This scenario will result in crash data that we can analyze. This will show as a ‘warm start’ in the show version output (also in show tech) Data to gather: *show tech *dm save <1-4> *supportsave all <tftp-ip-addr> 2) The switch rebooted on its own, but the software itself did not crash. This scenario will likely show as a ‘cold start’ in the show version output. In this case, we are likely looking at power issues. This could be power supplies, UPSs, power capacity, power outage, etc. The user will need to assist in confirming external power is good/bad. If external power is confirmed to be good, then we could focus on the power supplies and the unit itself (in that order). Data to gather: *show tech *show chassis (confirm PSU status) *supportsave all <tftp-ip-addr> 3) The switch ‘locked up’ and stopped passing traffic. In this scenario, the user likely had to manually power cycle the switch to restore service. This issue can happen due to various things, but the most common one that is memory leaks on old (generally unsupported) code. If the user has historical SNMP data, it would be worth looking to see if the usage has risen over time. Once the switch is power cycled, we generally have a tough time identifying root cause. This scenario seems less prevalent on current code. Note: It is always good to look at the warm vs cold start to get an idea of either what happened or what actions the user may have taken. Below is a breakdown: Warm start - Seen with regular software reloads and software crashes Cold start - Seen when a power event occurred. This could be initial power up upon plugging switch in, PSU issue, or temporary power outage. ?

Data to collect when you experience a switch down event

2020-08-12T15:38:33-0700 2020-08-12T18:00:07-0700 https://support.ruckuswireless.com/articles/000006793 2020-08-12T17:06:01-0700 monthly 0.8 admin,premium knowledge_article_3020 knowledge_article_3020 2017-12-12T14:34:13-0800 000006793 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How is the openflow switch name generated for ironware? The openflow switch id is generated based on the chassis MAC of the FastIron device. Converting the MAC address from HEX into Decimal or vice versa will yield the correct value. Examples: <code style="color: black; font-size: 13px;">openflow:8398923660884705280</code> <code style="color: black; font-size: 13px;">ICX6610#show chassis | i MAC Boot Prom MAC : 748e.f891.f6a8 Management MAC: 748e.f891.f6a8 ICX6610#show openflow datapath-id Openflow datapath id 748ef891f6a80000 HEX: 748ef891f6a80000 Decimal: 8398923660884705280</code>

How is the openflow switch name generated for ironware?

2020-08-12T17:06:01-0700 2020-08-12T18:00:06-0700 https://support.ruckuswireless.com/articles/000008366 2020-06-19T13:33:56-0700 monthly 0.8 admin,premium knowledge_article_4242 knowledge_article_4242 2018-10-10T11:23:00-0700 000008366 Validated (External) Premium Smartcell gateway;Smartcell ap;Mobile apps;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200);RUCKUS One Mobile Apps;Ruckus Cloud Mobile Apps Troubleshooting Troubleshooting, SmartCell Gateway, SmartCell AP, Mobile Apps, virtual SmartCell Gateway Why is the Test Speed option disabled in SZ GUI for connected clients when WLAN is using Direct AP Soft GRE tunnels Test Speed, Speedflex, is not supported from SZ GUI for softgre tunnels, local breakout, vDP, SZ100, SZ300. It is only supported for WLAN's that use Ruckus GRE tunnels to SCG-200

Customer unable to run speedflex for connected Clients when Tunnel Type is Direct AP Softgre

2020-06-19T13:33:56-0700 2020-08-12T13:06:15-0700 http://support.ruckuswireless.com/article_attachments/kA2500000008nneCAA?attachment_index=0 2020-08-12T13:06:15-0700 monthly admin,premium knowledge_article_4242 knowledge_article_4242_attachment_1 ZAP_ALL.zip 4081085.0 application/zip https://support.ruckuswireless.com/articles/000004979 2020-08-12T03:37:18-0700 monthly 0.8 admin,premium knowledge_article_2085 knowledge_article_2085 2015-08-06T01:34:10-0700 000004979 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway What are things I need to keep in mind if I want to change control interface IP on a SmartZone controller? First of all some background: 1. APs use control interface IP of the controller to communicate with it. 2. On a single interface node, this IP will be same as the controller's management IP. On a 3-interface node, IPs will differ on control, management, and cluster interfaces. Changing control interface IP on a multi-node cluster won't be an issue since other nodes in the cluster will know the new IP. APs that are managed through previous control interface IP will pickup up the new set of controller IPs on their next configuration update interval (which is 5 minutes by default). But this will be a problem in a single node setup. APs won't be aware of new IP to communicate. A couple of solutions exist though for such a requirement. They include: 1. DHCP option 43. Customer is advised to use DHCP option 43 to provide control interface IP to the APs. This can be used to facilitate the new IP to the APs. After being disconnected from the controller for 2 hours, APs will re-DHCP and pickup the new IP through DHCP option 43. This will be used to re-establish communication with the controller. 2. Using AP CLI scripts New IP can be pushed to all live APs using the "set scg ip <new_ip_address>" command inside a AP CLI script prior to the change. AP CLI script creation and execution along with example commands is explained at https://support.ruckuswireless.com/answers/000004057

This articles explains things to keep in mind in case an admin needs to change control interface IP on a SmartZone controller.

2020-08-12T03:37:18-0700 2020-08-12T06:00:18-0700 https://support.ruckuswireless.com/articles/000010807 2020-08-12T03:45:36-0700 monthly 0.8 admin,premium knowledge_article_4337 knowledge_article_4337 2020-08-12T03:45:36-0700 000010807 Validated (External) Premium Virtual smartcell gateway Installation;System network management;Troubleshooting Installation, System Network Management, Troubleshooting, virtual SmartCell Gateway Why does the vSZ serial number change after a reboot? When the vSphere is set in HA, the UUID would change with every reboot resulting in the serial number changing. The resolution would be to set a static UUID on the VM. This has to be done by someone who has VM expertise.

The vSphere is setup as HA with multiple ESXi hosts in the cluster. When the vSZs deployed on them are rebooted, the serial number changes.

2020-08-12T03:45:36-0700 2020-08-12T06:00:16-0700 https://support.ruckuswireless.com/articles/000002093 2020-08-11T09:34:31-0700 monthly 0.8 admin,premium knowledge_article_2634 knowledge_article_2634 2013-06-10T14:49:02-0700 000002093 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Zoneplanner;ZonePlanner Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor, ZonePlanner Where can I find the latest Ruckus AP Antenna Patterns for ZonePlanner? Current Ruckus AP antenna pattern files have been created for Fluke ZonePlanner application. (...not compatible with Ekahau) Including radio frequency bands, the patterns provide both azimuth and elevation profiles. The new patterns can be found in the attached zipped folder. Note this folder is cumulative - it contains all previous patterns as well as the new ones. To use new patterns in the ZonePlanner tool, unzip the file and either replace the ZonePlanner ³Antenna² folder (\AirMagnet Inc\AirMagnet Surveyor\Antenna) with the new one, or copy selective .ant and .bmp files from the new folder to the old one. The following table summarizes the new patterns: AP Model Band 2741 2.4G 7055 2.4G 5G 7351 2.4G 5G 7372 2.4G 5G 7762 2.4G 5G 7762-AC 2.4G 5G 7762-S 2.4G 5G 7782 2.4G 5G 7782-N 2.4G 5G 7782-S 2.4G 5G 8800 2.4G 5G Onmi-Dir 2.15 dBi DP01 2.4G 5G C110 2.4G 5G 2825 2.4G 2942 2.4G 7025 2.4G 7321 2.4G 5G 7363 2.4G 5G 7962 2.4G 5G 7982 2.4G 5G 7982-E tmp H500 2.4G 5G H510 2.4G 5G H320 2.4G 5G R300 2.4G 5G R310 2.4G 5G R320 2.4G 5G R500 2.4G 5G R510 2.4G 5G R600 2.4G 5G R610 2.4G 5G R700 2.4G 5G R710 2.4G 5G R720 2.4G 5G R730 2.4G 5G T300 2.4G 5G T301n 2.4G 5G T301s 2.4G 5G T310c 2.4G 5G T310d 2.4G 5G T310s 2.4G 5G T310n 2.4G 5G T610 2.5G 5G T710 2.4G 5G T710s 2.4G 5G

Attached are the latest Ruckus Antenna Patterns for Fluke ZonePlanner application

2020-08-11T09:34:31-0700 2020-08-11T18:00:11-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDoRCAW?attachment_index=0 2020-08-11T18:00:11-0700 monthly admin,premium knowledge_article_2634 knowledge_article_2634_attachment_1 Ruckus_ZP_Antenna_Patterns_24May19.zip 1025061.0 application/zip http://support.ruckuswireless.com/article_attachments/kA250000000PDoRCAW?attachment_index=1 2020-08-11T18:00:11-0700 monthly admin,premium knowledge_article_2634 knowledge_article_2634_attachment_1 R750 Antenna Patterns.xlsx 129472.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet http://support.ruckuswireless.com/article_attachments/kA250000000PDoRCAW?attachment_index=2 2020-08-11T18:00:11-0700 monthly admin,premium knowledge_article_2634 knowledge_article_2634_attachment_1 Antenna_Patterns_H500_T300.zip 47263.0 application/zip http://support.ruckuswireless.com/article_attachments/kA250000000PDoRCAW?attachment_index=3 2020-08-11T18:00:11-0700 monthly admin,premium knowledge_article_2634 knowledge_article_2634_attachment_1 Ruckus_NewAP_Antennas_ZPlanner0813.zip 443301.0 application/zip https://support.ruckuswireless.com/articles/000002431 2019-06-11T16:29:31-0700 monthly 0.8 admin,premium knowledge_article_1976 knowledge_article_1976 2013-12-17T13:48:49-0800 000002431 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector How can I restrict access to wireless network to specific domain user groups only? Requirement:- ------------------ The requirement states that only specific user group available in the Active directory should be able to gain access to the 802.1x configured WLAN, while other user groups are blocked from associating to this configured WLAN. Configuration:- ------------------- The attached PDF document details this process in a step-by-step mode with an Example and screen-shots. This involves some additional configuration across the Radius server and the Zonedirector. This document assumes that both the radius server and zone-director authentication is in place for successfully authenticating the wireless clients. In this example, I have taken the NPS server 2008 as the reference radius server for configuring the setup. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

This article explains usage of radius attributes to allow only specific group(s) to access wireless network.

2019-06-11T16:29:31-0700 2020-08-11T13:11:19-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PESmCAO?attachment_index=0 2020-08-11T13:11:19-0700 monthly admin,premium knowledge_article_1976 knowledge_article_1976_attachment_1 Rradius attribute configuration.pdf 1561616.0 application/pdf https://support.ruckuswireless.com/articles/000010787 2020-08-10T18:11:25-0700 monthly 0.8 admin,premium knowledge_article_4326 knowledge_article_4326 2020-08-04T05:16:22-0700 000010787 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why does the location server not receive MGR topics between Smart Zone version 5.1.0 and 5.2.1 ? <ul><li>This is a known issue and will be fixed in Smart Zone 5.2.2 version</li><li>Please contact Ruckus technical support for fix in other versions of Smart Zone controller</li></ul>

Smart Zone 5.1.0 through 5.2.1 have a known issue where MQTT MGR topic is not being published. This article describes how to identify and resolve the issue.

2020-08-10T18:11:25-0700 2020-08-11T00:00:11-0700 https://support.ruckuswireless.com/articles/000010775 2020-08-10T18:13:57-0700 monthly 0.8 admin,premium knowledge_article_4321 knowledge_article_4321 2020-07-28T06:08:20-0700 000010775 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway Where do I find the MQTT ICX switch payload logs on the Smart Zone controller ? <ul><li>From Smart Zone GUI, go to Diagnostics > Application Logs > Core</li><li>Change log level from WARN to DEBUG</li><li>Wait 5 minutes</li><li>Click on # of logs to expand selection</li><li>Download switch-gpb-payload.log</li><li>Types of ICX MQTT payloads supported</li></ul> <pre class="ckeditor_codeblock" style="margin-left: 40px;"> GPB-SwitchStatus GPB-SwitchStats GPB-PortStatus GPB-PortStats GPB-SwitchUnitStatus GPB-ConnectedDevice</pre> <ul><li>switch-gpb-payload.log [GPB-PortStats] example</li></ul> <pre class="ckeditor_codeblock" style="margin-left: 40px;"> 2020-07-24 17:07:22,473 [MslMsgDispatch-STATS_HANDLER-SWITCH-25-1] [GPB-PortStats]timestamp: 1595610442469 switchSerialNum: "ABCD23456" portMac: "AA:BB:CC:DD:EE:FF" tx: 13063599742 rx: 3348428407 txRx: 16412028149 txPkt: 0 rxPkt: 0 txRate: 0 rxRate: 0 domainId: "8b2081d5-9662-40d9-a3db-2a3cf4dde3f7" switchGroupLevelOneId: "808499ed-b48c-4ba6-938e-31d70671947a" switchGroupLevelTwoId: "" switchId: "AA:BB:CC:DD:EE:FF" domainName: "Administration Domain" switchGroupLevelOneName: "My-Domain" switchUnitId: "ABCD23456"</pre>

This article describes the supported ICX switch MQTT payload and logs generated by the Smart Zone controller.

2020-08-10T18:13:57-0700 2020-08-11T00:00:09-0700 https://support.ruckuswireless.com/articles/000006626 2020-08-10T12:58:22-0700 monthly 0.8 admin,premium knowledge_article_3216 knowledge_article_3216 2017-12-12T13:15:34-0800 000006626 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches What to collect for Brocade Flow Optimizer (BFO) troubleshooting? For BFO we need the following data collected all at the same time: <ol><li>From BFO a ‘supportsave’ ideally with debugging enabled. <ol><li>Change the logging level in logback.xml to DEBUG (<a href="http://www.brocade.com/content/html/en/user-guide/flowoptimizer-1.3.0-userguide/GUID-AD7279B9-0810-431F-826B-09CF16C38582.html" target="_blank">http://www.brocade.com/content/html/en/user-guide/flowoptimizer-1.3.0-userguide/GUID-AD7279B9-0810-431F-826B-09CF16C38582.html</a>)</li><li>Generate the supportsave from the bin directory (<a href="http://www.brocade.com/content/html/en/user-guide/flowoptimizer-1.3.0-userguide/GUID-92AED9F3-4B01-46D7-8B9F-9E36FF301AA0.html" target="_blank">http://www.brocade.com/content/html/en/user-guide/flowoptimizer-1.3.0-userguide/GUID-92AED9F3-4B01-46D7-8B9F-9E36FF301AA0.html</a>)</li></ol> </li><li> From BSC a ‘support_diagnostics’ from the /opt/brocade/bsc/bin location </li><li>From ICX: <ol><li>show tech</li><li>show openflow flow</li><li>show openflow resources</li><li>show openflow</li><li>show sflow</li></ol> </li></ol> There are also some references on the various log files and error messages in the User Guide.

Brocade Flow Optimizer (BFO) is an SDN application that samples data on a switch using sFlow protocol pushes Openflow rules to the switch based on criteria you specify in the application.

2020-08-10T12:58:22-0700 2020-08-10T18:00:11-0700 https://support.ruckuswireless.com/articles/000006759 2020-08-10T13:00:47-0700 monthly 0.8 admin,premium knowledge_article_2771 knowledge_article_2771 2017-12-12T16:04:18-0800 000006759 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to determine if there is mac address movement on FESX/SX products? Using Xtrace to see MAC movement. <div>Direct output to console (default) or telnet by issuing “ptrace term” from console or telnet session: </div> <div> </div> <div>telnet@SX# ptrace term</div> <div>debug output is now sent to this terminal. telnet@SX# debug destination telnet 1 SwitchAStack# debug destination all Send debug message to all destinationT console Send debug message to console logging Default ssh Send debug message to SSH session telnet Send debug message to telnet session </div> <div>This will ensure the ptrace and xtrace output show up in your ssh/telnet session </div> <div><code style="color: black; font-size: 13px;">telnet@SX# </code><code style="color: red; font-size: 13px;">xtrace module_ids</code></div> <div><code style="color: black; font-size: 13px;"> Id Module Name</code></div> <div><code style="color: black; font-size: 13px;"> 0 Input Acl</code></div> <div><code style="color: black; font-size: 13px;"> 1 Ip Forwarding</code></div> <div><code style="color: black; font-size: 13px;"> <code style="color: red; font-size: 13px;">2 Mac Learning</code></code></div> <div><code style="color: black; font-size: 13px;"> 3 CPU Pkt Transmit</code></div> <div><code style="color: black; font-size: 13px;"> 4 CPU Pkt Receive</code></div> <div><code style="color: black; font-size: 13px;"> 5 SFlow</code></div> <div><code style="color: black; font-size: 13px;"> 6 Chassis</code></div> <div><code style="color: black; font-size: 13px;"> 7 System SW</code></div> <div><code style="color: black; font-size: 13px;"> 8 PoE</code></div> <div><code style="color: black; font-size: 13px;"> 9 SXR Redundancy</code></div> <div><code style="color: black; font-size: 13px;"> 10 IP Source-guard</code></div> <div><code style="color: black; font-size: 13px;"> 11 IP Policy</code></div> <div><code style="color: black; font-size: 13px;">telnet@SX#</code></div> <div><code style="color: black; font-size: 13px;"> </code></div> <div><code style="color: black; font-size: 13px;">telnet@SX# </code><code style="color: red; font-size: 13px;">xtrace levels</code></div> <div> <code style="color: black; font-size: 13px;">Level Level Name</code></div> <div><code style="color: black; font-size: 13px;"> 0 Critical</code></div> <div><code style="color: black; font-size: 13px;"> 1 Error</code></div> <div><code style="color: black; font-size: 13px;"> <code style="color: red; font-size: 13px;">2 Info</code></code></div> <div><code style="color: black; font-size: 13px;"> 3 Control Flow</code></div> <div><code style="color: black; font-size: 13px;"> 4 Debug</code></div> <div><code style="color: black; font-size: 13px;">telnet@SX#</code></div> <div> </div> <div>For MAC debugging, set </div> <div><code style="color: black; font-size: 13px;">Xtrace max 10</code> <-- Print 10 mac messages and then stop;</div> <div><code style="color: black; font-size: 13px;">Xtrace 2 2</code> <-- 2 is MAC learning, level 2 is TRACE_INFO, </div> <div> </div> <div><code style="color: black; font-size: 13px;">telnet@SX# </code><code style="color: red; font-size: 13px;">xtrace max 20</code></div> <div><code style="color: black; font-size: 13px;">telnet@SX# </code><code style="color: red; font-size: 13px;">xtrace 2 2</code></div> <div> </div> <div><code style="color: black; font-size: 13px;">telnet@SX# M:2 L:2 - Desc indicates Mac Update Msg, type = 5</code></div> <div><code style="color: black; font-size: 13px;">Mac address = 0000.0000.6a01, vlan = 860, dev = 0, port_trunk = 1</code></div> <div><code style="color: black; font-size: 13px;">M:2 L:2 - NA rcvd, Mac </code><code style="color: black; font-size: 13px;">Addr = 0000.0000.6a01, vlan id = 860, port = 1/12</code></div> <div><code style="color: black; font-size: 13px;">M:2 L:2 - Calc Hw Index for Mac 0000.0000.6a01, Vlan 860 => 5490</code></div> <div><code style="color: black; font-size: 13px;">M:2 L:2 - Desc indicates Mac Update Msg, type = 5</code></div> <div><code style="color: black; font-size: 13px;"> </code></div> <div><code style="color: black; font-size: 13px;">Mac address = 0000.0000.6a01, vlan = 860, dev = 2, port_trunk = 1</code></div> <div><code style="color: black; font-size: 13px;">M:2 L:2 - NA rcvd, </code><code style="color: black; font-size: 13px;">Mac Addr = 0000.0000.6a01, vlan id = 860, port = 2/12</code></div> <div><code style="color: black; font-size: 13px;">M:2 L:2 - Calc Hw Index for Mac 0000.0000.6a01, Vlan 860 => 5490</code></div> <div><code style="color: black; font-size: 13px;">M:2 L:2 - Desc indicates Mac Update Msg, type = 5</code></div> <div><code style="color: black; font-size: 13px;"> </code></div> <div><code style="color: black; font-size: 13px;">Mac address = 0000.0000.6a01, vlan = 860, dev = 2, port_trunk = 1</code></div> <div><code style="color: black; font-size: 13px;">M:2 L:2 - NA rcvd, Mac Addr = 0000.0000.6a01, vlan id = 860, port = 2/12</code></div> <div><code style="color: black; font-size: 13px;">M:2 L:2 - Calc Hw Index for Mac 0000.0000.6a01, Vlan 860 => 5490</code></div> <div><code style="color: black; font-size: 13px;">M:2 L:2 - Desc indicates Mac Update Msg, type = 5</code></div> <div><code style="color: black; font-size: 13px;"> </code></div> <div><code style="color: black; font-size: 13px;">Mac address = 0000.0000.6a01, vlan = 860, dev = 0, port_trunk = 1</code></div> <div><code style="color: black; font-size: 13px;">M:2 L:2 - NA rcvd, Mac Addr = 0000.0000.6a01, vlan id = 860, port = 1/12</code></div> <div><code style="color: black; font-size: 13px;"> -------------------------</code></div> <div> </div> <div>In the above output, the source MAC address (0000.0000.6a01) is being seen/learnt on port 1/12 then on 2/12.</div>

How to determine if there is mac address movement on FESX/SX products?

2020-08-10T13:00:47-0700 2020-08-10T18:00:09-0700 https://support.ruckuswireless.com/articles/000006693 2020-08-10T09:19:10-0700 monthly 0.8 admin,premium knowledge_article_2874 knowledge_article_2874 2017-12-12T15:44:53-0800 000006693 Validated (External) Premium Ruckus icx switches;Brocade eos products System network management System Network Management, Ruckus ICX Switches, Brocade EOS Products How to run a report on BNA to check the POE version on switch? Please follow the below steps: 1) Launch BNA client. 2) Add the CLI monitoring template > Refer to Attachment CLI Definition 3) Add the necessary targets > Refer to Attachment BNA Targets 3) Add the cli "show inline power detail" > Refer to Attachment Add CLI command 4) Finally, Click on deploy to deploy the template. Once successfully deployed, click on the 'Report' and verify the POE firmware statistics on each switch by clicking on the listed IP address > Refer to the Attached Reports.

How to run a report on BNA to check the POE version on switch?

2020-08-10T09:19:10-0700 2020-08-10T12:00:13-0700 https://support.ruckuswireless.com/articles/000007123 2020-08-10T09:31:26-0700 monthly 0.8 admin,premium knowledge_article_4308 knowledge_article_4308 2017-12-12T14:27:21-0800 000007123 Validated (External) Premium Brocade eos products Security Security, Brocade EOS Products What is MACsec between Brocade and Cisco devices MACsec between Brocade and Cisco devices<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Brocade uses the key exchange protocol established on the IEEE 802.1ae standard MACsec Key Agreement (MKA).</li><li>Cisco devices use Security Association Protocol (SAP) as the Key exchange protocol.</li><li>SAP is a Cisco proprietary key exchange protocol between switches.</li><li>On Cisco devices MKA is meant for switch-to-host facing links and is not supported on switch-to-switch links.</li><li>On switch-to-switch links Cisco uses Cisco TrustSec and Cisco SAP.</li><li>Brocade does not support SAP as it is a Cisco proprietary protocol. </li></ul>

Media Access Control Security (MACsec) is a Layer 2 security technology that provides point-to-point security on Ethernet links between nodes.

2020-08-10T09:31:26-0700 2020-08-10T12:00:11-0700 https://support.ruckuswireless.com/articles/000010803 2020-08-10T11:42:54-0700 monthly 0.8 admin,premium knowledge_article_4336 knowledge_article_4336 2020-08-10T11:39:03-0700 000010803 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why are the access points configuration update failing ? <ul><li>Map the WLAN firewall profile to the user configured profile or system default profile</li></ul> <pre class="ckeditor_codeblock" style="margin-left: 40px;"> -Go to Smart Zone UI > Wireless LAN > Zone -Check every WLAN's firewall profile in zone for "No data available" -Update to the correct profile or system default</pre> <ul><li>Also check for the associated zone template if the problematic zone was deployted from template</li><li>Smart Zone 5.2.1 incorporated firewall profile check to prevent deployment of zone template if WLAN firewall profile is without a profile</li></ul>

This article describe one of the possible reason for access point configuration update failure in Smart Zone controller version 5.2.0 or earlier.

2020-08-10T11:42:54-0700 2020-08-10T12:00:09-0700 https://support.ruckuswireless.com/articles/000002368 2020-08-10T00:00:07-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1014 knowledge_article_1014 2013-11-27T09:59:19-0800 000002368 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector When should I bypass CNA feature <div>Smartphone users prefer to use WiFi on their handhelds because of its speed. When a user connects to guest wireless networks, most of the times they are required to provide either a guest pass or a user id/password. Here are the typical steps in connecting a guest network: 1. Choose the desired wireless network from a list of wireless networks 2. Open a browser and enter the necessary credentials Users sometimes ignore the second step above and wonder why their apps and email are not working. To avoid such confusing situations to their users, Apple came up with a feature called Captive Network Assistant. This feature unnecessitates opening a browser and causes the device to automatically prompt the user to provide credentials using a pseudo browser. As you can see this is a great feature and takes out lot of confusion from user's point of view. But it can create couple of issues mentioned in the Troubleshooting Steps above. Apart from that CNA pop is not a fully functional browser. If your users are reporting any similar issues, it is better to bypass the CNA and check how the connectivity goes. This bypass feature can be found under the WLANs configuration page on the ZD. It allows to choose the bypass feature by SSID type - Guest, Captive Portal (Web Authentication), and Hotspot.</div> If you prefer to use CLI to enable the CNA bypass, use the following commands: <div>1.To enable the feature: <div>ruckus# conf</div> <div>You have all rights in this mode.</div> <div>ruckus(config)# sys</div> </div> <div>ruckus(config-sys)# bypasscna <WLAN-TYPE> Enter the WLAN services type (for example, web-auth, guestaccess, wispr). </div> <div>2.To disable the feature:</div> <div>ruckus(config-sys)# no bypasscna “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.” </div>

This article explains an use case of Apple Bypass CNA feature on the ZoneDirector.

2020-08-10T00:00:07-0700 2020-08-10T06:00:28-0700 https://support.ruckuswireless.com/articles/000003570 2020-08-10T02:16:02-0700 monthly 0.8 admin,premium knowledge_article_3841 knowledge_article_3841 2014-10-31T06:35:36-0700 000003570 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, ZoneDirector How to troubleshoot when ZoneDirector failed to upgrade? - Check the Status LED on the ZD. If its flashing red – its in booting process. If this state is in more that 15-20 minutes after starting upgrade and no ping response then go with the next step. If not, just give a few more minutes so the ZD could reboot. - Power off the ZD, after a minute turn it back on, it should either boot up or allow access, if not try the next. - Use the below link to retrieve the ZD in case if it goes in to rescue mode. <a href="https://support.ruckuswireless.com/answers/000001481" target="_blank">https://support.ruckuswireless.com/answers/000001481</a> - If Smart Redundancy is enabled, log in to the active ZoneDirector or the shared Management Interface and start upgrade. The backup ZoneDirector is upgraded first. When the backup ZoneDirector upgrade is complete, the backup ZoneDirector reboots and becomes active (begins accepting AP requests), while the original active ZoneDirector enters backup state and begins its own upgrade process. All APs are now associated to the original backup ZoneDirector (which is now the active ZoneDirector), and begin upgrading AP firmware to the new version. - Follow the recommended firmware and the suggested upgrade path before starting the upgrade. For official upgrade path, check the below article. <a href="https://support.ruckuswireless.com/articles/000001845" target="_blank">https://support.ruckuswireless.com/articles/000001845</a> - For ZD1100 before upgrade need to follow this process : Go to monitor->All events /Activities -> Bottom right you will find “Clear All” button click on it pops up a message “Are you sure you want to delete all entries?” click OK. - ZD1100 is an old device with limited hardware resources, hence upgrading to each code takes more time than expected, please wait for at least 30 minutes for each upgrade to finish. - If you are unable to access ZD while system is on 9.6 version (before or after the upgrade), refer below article <a href="https://support.ruckuswireless.com/articles/000005698" target="_blank">https://support.ruckuswireless.com/articles/000005698</a> - Recommended browser like Chrome or Firefox should be used for upgrades - If still facing issue please contact support and open a case. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

This article gives you information on how to troubleshoot the ZD upgrade failure issues

2020-08-10T02:16:02-0700 2020-08-10T06:00:13-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PHgqCAG?attachment_index=0 2020-08-10T06:00:13-0700 monthly admin,premium knowledge_article_3841 knowledge_article_3841_attachment_1 Recover ZD1100 from Rescue Mode.pdf 210234.0 application/pdf https://support.ruckuswireless.com/articles/000006723 2020-08-07T19:01:24-0700 monthly 0.8 admin,premium knowledge_article_2783 knowledge_article_2783 2017-12-12T16:04:14-0800 000006723 Validated (External) Premium Fastiron ws series;Brocade FastIron WS Series Switches Known issues and workarounds Known Issues and Workarounds, FastIron WS Series Why do we see this Error message: Error! ipv4AddUcPrefix_FDRY: input parameters are illegal? Increase tcam using the command below. This does require a reboot: SX(config)# system-max hw-ip-route-tcam 1020 SX(config)# wr mem SX# reload

Error message: Error! ipv4AddUcPrefix_FDRY: input parameters are illegal

2020-08-07T19:01:24-0700 2020-08-08T00:00:08-0700 https://support.ruckuswireless.com/articles/000010790 2020-08-06T01:46:26-0700 monthly 0.8 admin,premium knowledge_article_4334 knowledge_article_4334 2020-08-06T01:46:26-0700 000010790 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why I am not getting CLI session option under Switch tab more options in Smart Zone? Please login with default admin credentials to use this feature. It is the design limitation for this feature for 5.2.1 release. Only super admin user could use the CLI session (default user "admin"). In future this option will be supported for all the admin users created with switch write permission.

This article explains feature limitation for Switch CLI session using SmartZone GUI

2020-08-06T01:46:26-0700 2020-08-06T06:00:08-0700 https://support.ruckuswireless.com/articles/000010367 2020-08-05T16:53:44-0700 monthly 0.8 admin,premium knowledge_article_4333 knowledge_article_4333 2020-04-21T01:09:54-0700 000010367 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Website access Firmware, Website Access, ZoneDirector How to change ZD URL to access the old interface? We can access the old interface even if our current firmware version is in 10.0.x by changing the URL from the browser. New web interface: <a href="https://66.57.238.78/admin/dashboard.jsp" target="_blank">https://xx.xx.xx.xx/admin10/dashboard.jsp</a> Old web interface: <a href="https://66.57.238.78/admin/dashboard.jsp" target="_blank">https://xx.xx.xx.xx/admin/dashboard.jsp</a> <img alt="User-added image" height="212" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxpO&feoid=00N50000002Cf3M&refid=0EM2J000001pOL0" width="500"></img> This option is removed from version 10.1.2.x, we will get an error message when we try to change the URL to access the old web interface. <img alt="User-added image" height="284" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxpO&feoid=00N50000002Cf3M&refid=0EM2J000001pOL5" width="500"></img>

We can access the old interface even if our current firmware version is in 10.0.x by changing the URL from the browser.

2020-08-05T16:53:44-0700 2020-08-05T18:00:07-0700 https://support.ruckuswireless.com/articles/000010791 2020-08-05T04:06:22-0700 monthly 0.8 admin,premium knowledge_article_4332 knowledge_article_4332 2020-08-05T04:06:22-0700 000010791 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds;Support license activation Known Issues and Workarounds, Support License Activation, SmartCell Gateway, virtual SmartCell Gateway How to import the license file to SZ/VSZ when we get timed out error Few customers get an error message when uploading the file to the SZ/VSZ when the file was sent by 3rd party(Ruckus rep/outside/VAR/colleague) Error: The allowed time to process a response has expired. <img alt="error" height="279" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000GxYK&feoid=00N50000002Cf3M&refid=0EM2J000001C8wK" width="500"></img> The solution is to download the file from the support portal and upload it to the controller. Support portal and controller GUI should be logged in to the same system. steps to download the license form LiMAN: Refer to article 000008262 <a href="https://support.ruckuswireless.com/articles/000008262" target="_blank">https://support.ruckuswireless.com/articles/000008262</a> <ul><li>Login to Ruckus support portal: <a href="https://support.ruckuswireless.com/" target="_blank">https://support.ruckuswireless.com</a></li><li>Click on LiMAN</li><li>Search for the serial number and click on ? (Hover the cursor over the download tab (arrow facing downward))</li><li>The license file will be saved in the system. .bin file</li><li>Login to the controller UI, navigate to Administration -> License -> Click on Upload license. Browse for the file.</li><li>Click on Upload</li><li>Once the license file is successfully uploaded, you will see the updated AP license count on the License page</li></ul>

import license data to node failed.

2020-08-05T04:06:22-0700 2020-08-05T06:00:08-0700 https://support.ruckuswireless.com/articles/000010784 2020-08-04T08:10:17-0700 monthly 0.8 admin,premium knowledge_article_4330 knowledge_article_4330 2020-08-04T08:10:17-0700 000010784 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway How to Download Zone Configuration to CSV File See Below Screenshot... <ol><li>Navigate to Access Points</li><li>Click on Zone in the View Mode</li><li>Click the download icon to download the Zone data to CSV. </li></ol> <img alt="User-added image" height="323" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PyNL&feoid=00N50000002Cf3M&refid=0EM2J000001TVvV" width="1024"></img> Below is an example of the CSV file information: <img alt="User-added image" height="177" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PyNL&feoid=00N50000002Cf3M&refid=0EM2J000001TVvk" width="905"></img>

How to Download Zone Configuration to CSV File on SZ version 3.6.2

2020-08-04T08:10:17-0700 2020-08-04T12:00:12-0700 https://support.ruckuswireless.com/articles/000010783 2020-08-04T10:04:51-0700 monthly 0.8 admin,premium knowledge_article_4328 knowledge_article_4328 2020-08-04T10:04:51-0700 000010783 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway How do I download Zone configuration via a CSV file? To download the Zone data to CSV file, perform the following: <ol><li>Navigate to Access Points</li><li>Click on Zone in the View Mode</li><li>Click the download icon to export all Zone data to a CSV file</li></ol> <img alt="User-added image" height="323" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PyNG&feoid=00N50000002Cf3M&refid=0EM2J000001C8ry" width="1210"></img> The following below is an example of the downloaded CSV file: <img alt="User-added image" height="226" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PyNG&feoid=00N50000002Cf3M&refid=0EM2J000001C8pd" width="1161"></img>

How do I download Zone configuration via a CSV file?

2020-08-04T10:04:51-0700 2020-08-04T12:00:08-0700 https://support.ruckuswireless.com/articles/000009744 2020-08-04T05:13:46-0700 monthly 0.8 admin,premium knowledge_article_4327 knowledge_article_4327 2019-08-30T08:51:28-0700 000009744 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why is Rendezview unable to communicate with controller? SZ totally disallowed TLSv1 since 5.0 and must communicate with TLSv1.2, upgrade Java to 1.8 or 1.7.0_131+ which use TLSv1.2 by default.

On 5.x. version, when customer try to use API to send a request (the first Login request) in response we get the SSL certificate errors and reset connection errors. The problem only occurs with version 5.1 of the Firmware.

2020-08-04T05:13:46-0700 2020-08-04T06:00:11-0700 https://support.ruckuswireless.com/articles/000010788 2020-08-03T18:34:37-0700 monthly 0.8 admin,premium knowledge_article_4325 knowledge_article_4325 2020-08-03T18:34:37-0700 000010788 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway What is the meaning of different session termination causes? The causes of session termination with their respective values are as follows: 1 User Request 2 Lost Carrier 3 Lost Service 4 Idle Timeout 5 Session Timeout 6 Admin Reset 7 Admin Reboot 8 Port Error 9 NAS Error 10 NAS Request 11 NAS Reboot 12 Port Unneeded 13 Port Preempted 14 Port Suspended 15 Service Unavailable 16 Callback 17 User Error 18 Host Request These are standard session termination values used by Ruckus that track the client statistics, join leave time etc and it is not limited to Radius based WLAN's. So even though you do not use Radius authentication based WLAN, clients session is tracked for several reasons. Hence, you would see the messages with client session info when a client joins/leaves the WLAN. Source : https://tools.ietf.org/html/rfc2866#section-5.10

This article provides meaning of different session termination causes when a client leaves or disconnects the WLAN.

2020-08-03T18:34:37-0700 2020-08-04T00:00:08-0700 https://support.ruckuswireless.com/articles/000010131 2020-07-30T10:56:26-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4080 knowledge_article_4080 2020-02-23T20:56:10-0800 000010131 Validated (External) Public I100;Vriot Known issues and workarounds Known Issues and Workarounds, I100, vRIoT Why are IOT APs unregistered after upgrading IOT controller to 1.5? Purchase necessary licenses prior to RIoT 1.5 upgrade. <table class="sectionContent" style="color: rgb(34, 34, 34); font-family: Arial,Helvetica,sans-serif; font-size: 12px; font-style: normal; font-weight: 400; text-align: left; text-decoration: none; white-space: normal; width: 100%;"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="helpCol" style="color: rgb(34, 34, 34); font-family: Arial,Helvetica,sans-serif; margin-left: 0px; width: 16px;"> </td><td colspan="1" rowspan="1" class="fieldCol" style="color: rgb(34, 34, 34); font-family: Arial,Helvetica,sans-serif; margin-left: 0px; text-align: left;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 100%;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial,Helvetica,sans-serif; margin-left: 0px;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:11:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:11:j_id603_00N50000002Cf3M_div" style="color: rgb(0, 0, 0); margin-left: 0px;">Ruckus IOT version 1.5 controller requires 3 distinct licenses for operation. Performing a firmware upgrade Ruckus IOT controller from earlier version than IOT 1.5 or upon installing a fresh instance of IOT 1.5 we require IOT controller to have licenses installed for RTU, Instance and the AP capacity. The AP capacity licenses are used to manage the IOT APs by the controller. However, these licenses are assigned to the AP on first come first served basis and would not look for the IOT Dongles connected to the AP’s. This may lead to a situation where APs stay in unregistered state if IOT controller does not have enough AP capacity licenses to support all APs.</div> </td></tr></tbody></table> </td></tr></tbody></table>

After upgrading to IOT 1.5 Release from a previous version or installing a fresh image of IOT 1.5, APs can stay in unregistered state if IOT controller does not have sufficient licenses installed.

2020-07-30T10:56:26-0700 2020-07-30T12:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zkqSAA?attachment_index=0 2020-07-30T12:00:10-0700 monthly admin,premium,warranty,guest knowledge_article_4080 knowledge_article_4080_attachment_1 TSB2020-004-IOT-1.5 Licensing.pdf 401622.0 application/pdf https://support.ruckuswireless.com/articles/000010781 2020-07-29T15:13:20-0700 monthly 0.8 admin,premium knowledge_article_4322 knowledge_article_4322 2020-07-29T15:13:20-0700 000010781 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway Why are my 3.5 and 3.6 SZ clusters not automatically syncing with NTP This Behavior is Design Intent Per Developer this has been the Design intent in 3.6.2 where the SZ wont sync time with external NTP server automatically unless user click “Sync Time”. The Design has been changed in 5.2 where SZ will sync with external NTP server periodically without manual Sync. This issue is resolved in version 5.2 and above. In 3.5 and 3.6 Leader will not sync with external NTPD, unless: <ol><li style="">SZ node start as a Leader</li><li style="">User click "sync time"</li><li style="">User change external NTP Server</li></ol> Here are the specs for the auto time mechanism in 5.2: NTP Sync Flow on SZ 5.2: <ul><li style="">The leader will check the time difference with external NTP every 5 minutes. <ul style="list-style-type: circle;"><li style="">The leader does nothing if the difference is less than 3 seconds.</li><li style="">The leader will set the difference to the system clock when the difference is between 3 seconds to 30 minutes.</li></ul> </li></ul> SZ won't sync time automatically when time difference > 30 mins. It can be manually synced.

Due to issues with NTP response delay NTP auto sync was disabled in SZ version 3.5 and 3.6 to prevent future dating data. A fix in 5.1 and above has allowed NTP auto sync to be re-enabled.

2020-07-29T15:13:20-0700 2020-07-29T18:00:08-0700 https://support.ruckuswireless.com/articles/000007278 2020-07-28T14:41:59-0700 monthly 0.8 admin,premium knowledge_article_3165 knowledge_article_3165 2017-12-12T13:15:56-0800 000007278 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Can the FCX data center models be field-upgraded to support PoE? No. Brocade ICX models without PoE cannot be upgraded to support PoE. The PoE design requires different power supplies and a different chassis.

Can the ICX models be field-upgraded to support PoE?

2020-07-28T14:41:59-0700 2020-07-28T18:00:09-0700 https://support.ruckuswireless.com/articles/000007022 2020-07-25T03:23:08-0700 monthly 0.8 admin,premium knowledge_article_3187 knowledge_article_3187 2017-12-12T13:15:43-0800 000007022 Validated (External) Premium Ruckus icx switches Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, Ruckus ICX Switches What does the MRP Topology Notification packet, TC RHPDU, look like? <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The MRP TC RHPDU has the same packet format as the regular MRP RHPs except the metro-ring ID is 000. example of a metro-ring RHP for metro ring 10 dest mac 03048000000a RX [1ade5a]------(1faa3000) 00: 1ff4 e0df 4010 e050-0800 000d 003c 8000 FID = 1ff4 10: 0304 8000 000a cc4e-2438 c491 0018 3333 Offset = 10 20: 0300 0100 2000 0050-000a 0000 cc4e 2438 VLAN = 80(0050) P7 RxCoSQ 8 30: c491 abb2 0064 0000-0000 0000 0000 0000 Reason = FilterMatch <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Pri VLAN_Pri CPU MON PORT PType US BRD DAV SAV DPV SV ER SAS Tag Code 7 7 0 0 1/1/14 0000f 0 1 0 0 0 0 0 0 0 0 example of MRP TC RHPDU dest mac 030480000000 RX [1ade5a]------(1faa3000) 00: 1ff4 e0df 4010 e050-0800 000d 003c 8000 FID = 1ff4 10: 0304 8000 0000 cc4e-2438 c491 0018 3333 Offset = 10 20: 0300 0100 2000 0050-000a 0000 cc4e 2438 VLAN = 80(0050) P7 RxCoSQ 8 30: c491 abb2 0064 0000-0000 0000 0000 0000 Reason = FilterMatch <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Pri VLAN_Pri CPU MON PORT PType US BRD DAV SAV DPV SV ER SAS Tag Code 7 7 0 0 1/1/14 0000f 0 1 0 0 0 0 0 0 0 0 example output in dm raw brief mode <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ab0]cc4e2438b28d ->03048000000a Len=24 port: 1/1/14 < RHPs stopped when Metro-Ring breaks </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ab1]10.110.34.131 ->10.200.128.188 TCP S=62092 D=TELNET uAPrsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754ab1]10.200.128.188 ->10.110.34.131 TCP S=TELNET D=62092 uAprsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754ab1]10.200.128.188 ->10.110.34.131 TCP S=TELNET D=62092 uAPrsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ab1]10.200.36.78 ->10.200.128.188 TCP S=54347 D=135 uaprSf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754ab1]10.200.128.188 ->10.200.36.78 TCP S=135 D=54347 uApRsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ab3]10.110.34.131 ->10.200.128.188 TCP S=62092 D=TELNET uAprsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754ab3]10.200.128.188 ->10.110.34.131 TCP S=TELNET D=62092 uAPrsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ab6]10.110.34.131 ->10.200.128.188 TCP S=62092 D=TELNET uAprsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ab6]10.200.36.78 ->10.200.128.188 TCP S=54347 D=135 uaprSf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754ab6]10.200.128.188 ->10.200.36.78 TCP S=135 D=54347 uApRsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754aba]cc4e2438b28d ->030480000000 Len=24 port: 1/1/14 < - TC RHPDU, send 3 times (per MRP interfaces except the MRP primary of the Master Node, counter for TC RHPDU should increment accordingly</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">rhp-processing(T=7686842): Receives TC PDU for configured slave ring[10], flushing mac for VLAN 80</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">rhp_processing: fwding control BPDU: ring = 10 tx_ports = 1/1/18, source port 1/1/14</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754ae3]cc4e2438b28d ->030480000000 Len=24 port: 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ae3]748ef8565740 ->Broadcast ARP Req S=10.200.128.129 D=10.200.128.145 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ae3]748ef8565740 ->Broadcast ARP Req S=10.200.128.129 D=10.200.128.145 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ae3]748ef8565740 ->Broadcast ARP Req S=10.200.128.129 D=10.200.128.145 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">mrp-debug(T=7686883): (slave) processing mac flush from mrp state timer for ring 10 on master vlan 80</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ae3]cc4e2438b28d ->030480000000 Len=24 port: 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">rhp-processing(T=7686883): Receives TC PDU for configured slave ring[10], flushing mac for VLAN 80</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">rhp_processing: fwding control BPDU: ring = 10 tx_ports = 1/1/14, source port 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754ae3]cc4e2438b28d ->030480000000 Len=24 port: 1/1/14</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ae3]cc4e2438b28d ->030480000000 Len=24 port: 1/1/14</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">rhp-processing(T=7686883): Receives TC PDU for configured slave ring[10], flushing mac for VLAN 80</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">rhp_processing: fwding control BPDU: ring = 10 tx_ports = 1/1/18, source port 1/1/14</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754ae3]cc4e2438b28d ->030480000000 Len=24 port: 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ae3]cc4e2438b28d ->030480000000 Len=24 port: 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">rhp-processing(T=7686883): Receives TC PDU for configured slave ring[10], flushing mac for VLAN 80</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">rhp_processing: fwding control BPDU: ring = 10 tx_ports = 1/1/14, source port 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754ae3]cc4e2438b28d ->030480000000 Len=24 port: 1/1/14</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ae3]cc4e2438b28d ->030480000000 Len=24 port: 1/1/14</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">rhp-processing(T=7686883): Receives TC PDU for configured slave ring[10], flushing mac for VLAN 80</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">rhp_processing: fwding control BPDU: ring = 10 tx_ports = 1/1/18, source port 1/1/14</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754ae3]cc4e2438b28d ->030480000000 Len=24 port: 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ae3]cc4e2438b28d ->030480000000 Len=24 port: 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">rhp-processing(T=7686883): Receives TC PDU for configured slave ring[10], flushing mac for VLAN 80</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">rhp_processing: fwding control BPDU: ring = 10 tx_ports = 1/1/14, source port 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754ae3]cc4e2438b28d ->030480000000 Len=24 port: 1/1/14</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">mrp-debug(T=7686884): (slave) processing mac flush from mrp state timer for ring 10 on master vlan 80</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754ae8]748ef8565740 ->Broadcast ARP Req S=10.200.128.129 D=10.200.128.145 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754b12]0014d1da5694 ->Broadcast Len=44 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754b24]cc4e2438b28d ->01e052cccccc Len=761 port: 1/1/14</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754b24]cc4e2438b291 ->01e052cccccc Len=761 port: 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754b92]cc4e2438bf8d ->01e052cccccc Len=761 port: 1/1/14</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754b92]cc4e2438bf91 ->01e052cccccc Len=761 port: 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754bc0]10.200.128.188 ->217.114.103.154 UDP S=8888 D=6343 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754bcd]10.200.36.78 ->10.200.128.188 UDP S=NETBIOS D=NETBIOS port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754bcd]10.200.128.188 ->10.200.36.78 ICMP Type=3 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754bcf]10.110.34.131 ->10.200.128.188 TCP S=62092 D=TELNET uAPrsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754bcf]10.200.128.188 ->10.110.34.131 TCP S=TELNET D=62092 uAprsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754bcf]10.200.128.188 ->10.110.34.131 TCP S=TELNET D=62092 uAPrsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754bd2]10.110.34.131 ->10.200.128.188 TCP S=62092 D=TELNET uAprsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754bd2]10.200.128.188 ->10.110.34.131 TCP S=TELNET D=62092 uAPrsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754bd4]10.110.34.131 ->10.200.128.188 TCP S=62092 D=TELNET uAprsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754bdc]10.200.36.78 ->10.200.128.188 UDP S=NETBIOS D=NETBIOS port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754bdc]10.200.128.188 ->10.200.36.78 ICMP Type=3 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754beb]10.200.36.78 ->10.200.128.188 UDP S=NETBIOS D=NETBIOS port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754beb]10.200.128.188 ->10.200.36.78 ICMP Type=3 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754bfa]10.200.36.78 ->10.200.128.188 TCP S=54436 D=135 uaprSf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754bfa]10.200.128.188 ->10.200.36.78 TCP S=135 D=54436 uApRsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754bff]10.200.36.78 ->10.200.128.188 TCP S=54436 D=135 uaprSf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754bff]10.200.128.188 ->10.200.36.78 TCP S=135 D=54436 uApRsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754c04]10.200.36.78 ->10.200.128.188 TCP S=54436 D=135 uaprSf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754c04]10.200.128.188 ->10.200.36.78 TCP S=135 D=54436 uApRsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754c0d]any ->224.0.0.1 PROTO=IGMP port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754cee]10.200.128.188 ->217.114.103.154 UDP S=8888 D=6343 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754cf7]10.200.36.78 ->10.200.128.188 UDP S=NETBIOS D=NETBIOS port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754cf7]10.200.128.188 ->10.200.36.78 ICMP Type=3 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754cfa]748ef8565740 ->Broadcast ARP Req S=10.200.128.129 D=10.200.128.138 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754d06]10.200.36.78 ->10.200.128.188 UDP S=NETBIOS D=NETBIOS port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754d06]10.200.128.188 ->10.200.36.78 ICMP Type=3 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754d15]10.200.36.78 ->10.200.128.188 UDP S=NETBIOS D=NETBIOS port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754d15]10.200.128.188 ->10.200.36.78 ICMP Type=3 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754d24]10.200.36.78 ->10.200.128.188 TCP S=54507 D=135 uaprSf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754d24]10.200.128.188 ->10.200.36.78 TCP S=135 D=54507 uApRsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754d29]10.200.36.78 ->10.200.128.188 TCP S=54507 D=135 uaprSf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754d29]10.200.128.188 ->10.200.36.78 TCP S=135 D=54507 uApRsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754d2e]10.200.36.78 ->10.200.128.188 TCP S=54507 D=135 uaprSf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754d2e]10.200.128.188 ->10.200.36.78 TCP S=135 D=54507 uApRsf port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754d33]any ->224.0.0.1 PROTO=IGMP port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754d6a]0014d1da5694 ->Broadcast Len=44 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754d7c]cc4e2438b28d ->01e052cccccc Len=761 port: 1/1/14</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754d7c]cc4e2438b291 ->01e052cccccc Len=761 port: 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754dea]cc4e2438bf8d ->01e052cccccc Len=761 port: 1/1/14</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754dea]cc4e2438bf91 ->01e052cccccc Len=761 port: 1/1/18</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754e06]any ->224.0.0.1 PROTO=IGMP port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">TX [754e1b]10.200.128.188 ->217.114.103.154 UDP S=8888 D=6343 port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">RX [754e21]10.200.36.78 ->10.200.128.188 UDP S=NETBIOS D=NETBIOS port: mgmt1</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Raw packet debugging is off - reaches maximum limit</div>

Enterprise

2020-07-25T03:23:08-0700 2020-07-25T06:00:12-0700 https://support.ruckuswireless.com/articles/000007027 2020-07-25T03:30:08-0700 monthly 0.8 admin,premium knowledge_article_2886 knowledge_article_2886 2017-12-12T15:03:30-0800 000007027 Validated (External) Premium Brocade eos products Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, Brocade EOS Products Do FastIron products have SNMP support for Multi-Chassis Trunking MCT? <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;"> <div>For FastIron products, SNMP support for MCT is NOT yet available. There is a plan to have this feature available on future code release, 8.0.30 or later.</div> <div> </div> <div>For NetIron products, SNMP SET, GET, and GET-NEXT requests are supported. Please check the ‘Unified IP MIB Reference’ under ‘MCT MIB Definition’ chapter for more details.</div> </div>

Sometimes the user wants to manage, view, or config MCT via SNMP.2

2020-07-25T03:30:08-0700 2020-07-25T06:00:11-0700 https://support.ruckuswireless.com/articles/000007092 2020-07-25T04:42:23-0700 monthly 0.8 admin,premium knowledge_article_2855 knowledge_article_2855 2017-12-12T15:45:01-0800 000007092 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to address PIM Register checksum failed message It would be recommended to change the way in which Cisco or the network vendor devices calculate the PIM register messages and follow the RFC 3973, since from Campus perspective there is no way to change the PIM checksum structure.

Brocade by default uses the method defined in RFC 3973 to calculate the checksum

2020-07-25T04:42:23-0700 2020-07-25T06:00:09-0700 https://support.ruckuswireless.com/articles/000007183 2020-07-24T17:07:14-0700 monthly 0.8 admin,premium knowledge_article_2853 knowledge_article_2853 2017-12-12T15:45:04-0800 000007183 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers Could not adopt AP650 over MPLS WAN link From the controller CLI, type in the following commands to reduce the mint packet size to 1316. RFS6000(config)# mint-policy global-default RFS6000(config-mint-policy-global-default)# mtu 1316 RFS6000(config-mint-policy-global-default)# commit RFS6000(config-mint-policy-global-default)# write memory RFS6000#FSB-BPL-RFS6000# sh adoption status LONDON-AP1 5.2.0.0-069R configured FSB-BPL-RFS6000 2012-06-05 16:20:22 5 days 02:24:51

Could not adopt AP650 over MPLS WAN link

2020-07-24T17:07:14-0700 2020-07-24T18:00:12-0700 https://support.ruckuswireless.com/articles/000006972 2020-07-24T17:08:11-0700 monthly 0.8 admin knowledge_article_2895 knowledge_article_2895 2017-12-12T15:03:27-0800 000006972 Validated (External) Partner Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How to address Excessive Dropbox Lan Sync Broadcast Traffic on Mobility WLAN products? Wireless administrators can intentionally block UDP port 17500 on the WLAN ingress interface causing Lan Sync feature to automatically disable itself. Here is an example of the RFS controller ip access-list: ip access-list block_dropbox_lan_sync deny udp any any eq 17500 rule-precedence 10 rule-description deny dropbox lan sync permit ip any any rule-precedence 100 Optional: Packet capture commands can be run on the RFS controller before and after config update: # service pktcap on drop tunnel-vlan < --- RFS controller specific packet capture # remote live-pktcap rf-domain default deny count 500 filter port 17500 < --- rf-domain wide packet capture

How to Address Excessive Dropbox Lan Sync Broadcast Traffic on Mobility WLAN products

2020-07-24T17:08:11-0700 2020-07-24T18:00:10-0700 https://support.ruckuswireless.com/articles/000006876 2020-07-24T17:09:48-0700 monthly 0.8 admin knowledge_article_3197 knowledge_article_3197 2017-12-12T13:15:41-0800 000006876 Validated (External) Partner Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How to force smart-rf to rebuild WLAN channel distribution? To encourage the Mobility devices to refresh and rebuild its channel distribution data and optimize the channel distribution, please clear the following smart-rf data using the below CLI on the RFS controller. # service smart-rf clear-interfering-aps Cleared interfering-aps # service smart-rf clear-history History cleared # service smart-rf clear-config Config cleared After clearing the above 3 smart-rf items, allow 24 hours for the RFS controller to rebuild the smart-rf data and re-optimize the channel distribution. Here is the show output after 24 hours for the same 42 AP radios: # show smart-rf channel-distribution 2.4GHz channel distribution for 42 radios ------------------------------------- CHANNEL NUM RADIOS DISTRIBUTION (%) ------------------------------------- 1 14 33.33 6 16 38.10 11 12 28.57 ------------------------------------- We now see fairly even channel distribution with approximately a 3rd of the channels occupied on channel 1, 6, and 11.

How to force smart-rf to rebuild WLAN channel distribution?

2020-07-24T17:09:48-0700 2020-07-24T18:00:08-0700 https://support.ruckuswireless.com/articles/000010757 2020-07-24T00:06:41-0700 monthly 0.8 admin,premium knowledge_article_4318 knowledge_article_4318 2020-07-24T00:06:41-0700 000010757 Validated (External) Premium Sz144 d;Sz100d Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SZ144 D, SZ100D How to recover from Dataplane DP IP changed to 0.0.0.0 DP after a power loss event ? <ul><li>This issue is rare</li><li>Include the use of uninterruptable power supply at deployment site prone to power loss</li><li>Use the work around included in this article to recover the dataplane network configuration</li><li>Hardening of the code will be included in Smart Zone 5.2.2+ </li></ul>

It is a rare occasion network configuration files are corrupted after a power loss event, but it could occur if power loss event was due to power surge or other stressful environmental factors

2020-07-24T00:06:41-0700 2020-07-24T06:00:10-0700 https://support.ruckuswireless.com/articles/000010759 2020-07-24T01:20:36-0700 monthly 0.8 admin,premium knowledge_article_4317 knowledge_article_4317 2020-07-24T01:20:36-0700 000010759 Validated (External) Premium Knowledge Registration Registration, Knowledge How to provide administrative rights for user in support portal How to provide administrative rights? Go to My Support Account <img alt="profile" height="171" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PyDa&feoid=00N50000002Cf3M&refid=0EM2J000001TPrN" width="500"></img> and click on View All users- <img alt="users" height="136" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PyDa&feoid=00N50000002Cf3M&refid=0EM2J000001TPrI" width="500"></img> On the next page, we can see the account users list and a checkbox next to the user to provide Administrator rights. <img alt="admin rights" height="139" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PyDa&feoid=00N50000002Cf3M&refid=0EM2J000001TPrS" width="500"></img> Once the user gets admin rights, the user can access the LiMan page

administrative rights in support portal to access LiMAN (add/remove/download license)

2020-07-24T01:20:36-0700 2020-07-24T06:00:08-0700 https://support.ruckuswireless.com/articles/000010753 2020-07-22T22:56:35-0700 monthly 0.8 admin,premium knowledge_article_4312 knowledge_article_4312 2020-07-22T22:56:35-0700 000010753 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, virtual SmartCell Gateway, SZ100 Why I am unable to login into the SZ using any user account other than Admin User? Since this is a data corruption issue, we have to reconfigure the default account security by following below steps: <ul><li>Login as "admin" to the SZ.</li><li>Config "default" Account Security by going to Administrator> Admin & Role> Account Security</li></ul> <ol><li style="margin-left: 40px;"> Disable "Session Idle timeout"</li><li style="margin-left: 40px;"> Disable "Disable Inactive Account"</li><li style="margin-left: 40px;"> Submit</li></ol> After submission, the missing data on "default" Account Security will be added back when saving to Cassandra and you can try logging in with the user accounts other than Admin. <img height="822" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PyCw&feoid=00N50000002Cf3M&refid=0EM2J000001TOjX" width="949"></img>

This article provides a workaround when SZ management login is failing with any user account other than Admin User

2020-07-22T22:56:35-0700 2020-07-23T00:00:08-0700 https://support.ruckuswireless.com/articles/000010456 2020-07-22T11:02:31-0700 monthly 0.8 admin,premium knowledge_article_4167 knowledge_article_4167 2020-05-01T03:34:36-0700 000010456 Validated (External) Premium Virtual smartcell gateway System network management System Network Management, virtual SmartCell Gateway Why do we see incorrect return value for OID ruckusCtrlApStatus when the AP is offline? As discussed with the Dev team, for all the OIDs in the table (ruckusctrlAPtable) SNMP request would be performed against the AP and if it is unreachable, it will not be possible to get any data. ruckusCtrlApStatus, This OID will display only in case the AP is ONLINE. If OFFLINE, as mentioned we will get the response "No Such Instance" since AP is unreachable. Documentation change request has been submitted.

According to 5.1.1 SNMP guide customer sees incorrect return value for OID ruckusCtrlApStatus when the AP is offline

2020-07-22T11:02:31-0700 2020-07-22T12:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000PiUgSAK?attachment_index=0 2020-07-22T12:00:10-0700 monthly admin,premium knowledge_article_4167 knowledge_article_4167_attachment_1 2020-04-06_17h14_48.png 256401.0 image/png https://support.ruckuswireless.com/articles/000001554 2020-07-20T16:12:18-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3431 knowledge_article_3431 2013-01-28T11:02:35-0800 000001554 Validated (External) Public Ruckus support services Website issues Website Issues, Ruckus Support Services How do I access Ruckus Knowledge Base content? Ruckus Knowledge Base Articles (KB) are available from our online <a href="https://support.ruckuswireless.com" target="_blank">Support Portal</a>. <img alt="User-added image" height="341" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PyAW&feoid=00N50000002Cf3M&refid=0EM2J000001TMxh" width="500"></img> The KB & Forums -> Knowledge Base Search will open the Legacy search view with a link to the New search that appears under the KNOWLEDGE tab across the top and the NEW Advanced Search window facets. (try NEW advanced search) <img alt="User-added image" height="238" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PyAW&feoid=00N50000002Cf3M&refid=0EM2J000001TMyG" width="500"></img> Note the various CONTENT SOURCES that are now available for filtering. Only Knowledge content tagged as External will be available on the Support Portal and only those tagged as PUBLIC access will be available without a login. Note the limited number of RESULTS that are shown here when not logged in. Login to see more content. Ruckus <a href="https://support.ruckuswireless.com" target="_blank">Support Portal</a> provides many different levels of access for Distributors, Partners and End Customers. Guest access: You will have this by default, when you create an account directly by <a href="https://support.ruckuswireless.com/registration" target="_blank">Registering For A Support Account</a>. This level of account has limited access to Knowledge Base (KB) articles and prompts a warning message To access that KB Article please upgrade your support account on some articles. It does not allow access to Software Downloads. However, you can access <a href="https://forums.ruckuswireless.com" target="_blank">Ruckus Forums</a> with Guest access. <img alt="User-added image" height="296" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PyAW&feoid=00N50000002Cf3M&refid=0EM2J000000lso6" width="500"></img> Warranty Access: This level of access is given to the customers who are part of an account which is registered with Ruckus and also an account with no or expired support contract. We do not currently have a way to allow customers under warranty (only) to obtain full site access. However, if you only need to update Standalone AP firmware, you no longer require a support contract. Premium Access: If you have purchased Support Contract, you will automatically get this level of access, which provides full access to Downloads, Knowledge Base, Forums, and Case Management content. Note: If you have Premium Access and are still unable to access support documents from the support site it is most likely due to browser issues. Kindly, use a different browser or clear the cookies and cache from the browser and try to login again. If issues persist, please contact Ruckus <a href="https://support.ruckuswireless.com/contact-us" target="_blank">Customer Support</a>. Premium access for Ruckus Distributors and VAR's/Resellers - This provides you access to our Partner Portal along with the Support Portal. Please contact your account representative for details.

Basic guidelines for accessing and using Ruckus Knowledge Base content via the Support Portal

2020-07-20T16:12:18-0700 2020-07-20T18:00:08-0700 https://support.ruckuswireless.com/articles/000010523 2020-07-17T14:24:53-0700 monthly 0.8 admin,premium knowledge_article_4202 knowledge_article_4202 2020-05-18T14:00:09-0700 000010523 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Firmware Performance, Firmware, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway Do any Ruckus APs use HW assist when encrypting R-GRE? Dedicated hardware to assist with encrypted tunneling allows higher throughput secure client data plane communication. Currently, the Ruckus R610, R710, R720, R730, R750, T710, T750 model APs have dedicated R-GRE hardware encryption.

Some current model Ruckus APs - R610, R710, R720, R730, R750, T710 and T750 all support hardware encryption with R-GRE tunneling.

2020-07-17T14:24:53-0700 2020-07-17T18:00:09-0700 https://support.ruckuswireless.com/articles/000010655 2020-07-17T01:56:31-0700 monthly 0.8 admin,premium knowledge_article_4310 knowledge_article_4310 2020-07-17T01:56:31-0700 000010655 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Troubleshooting Troubleshooting, Cloudpath Why the Windows clients stopped getting Authenticated on Cloudpath? If you find the CA chain certificate is expired then customer needs to get the renewed certificate for Mirosoft CA and install it on Cloudpath under 'CA chain' of Mcirosoft CA template Go to > Certificate Authority > Manage Templates > Microsoft CA Template > Modify <img alt="Renew CA chain" height="392" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxcA&feoid=00N50000002Cf3M&refid=0EM2J000001TItH" width="1078"></img>

Suddenly all the Windows clients stopped getting Authenticated on Cloudpath, it was a working setup with Microsoft CA template.

2020-07-17T01:56:31-0700 2020-07-17T06:00:08-0700 https://support.ruckuswireless.com/articles/000006696 2020-07-16T14:23:35-0700 monthly 0.8 admin,premium knowledge_article_2802 knowledge_article_2802 2017-12-12T16:04:11-0800 000006696 Validated (External) Premium Ruckus icx switches;Brocade eos products System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products BNA/CMCNE 14.2.0 Unable to login via web client when username contains dots/periods Usernames cannot contain periods if web client is to be used. Changes will be made in BNA to be consistent for all passwords. Upgrade to a version of code that contains the fix.

BNA/CMCNE 14.2.0 Unable to login via web client when username contains dots/periods

2020-07-16T14:23:35-0700 2020-07-16T18:00:08-0700 https://support.ruckuswireless.com/articles/000009863 2020-07-16T06:19:39-0700 monthly 0.8 admin,premium knowledge_article_3968 knowledge_article_3968 2019-10-23T01:25:00-0700 000009863 Validated (External) Premium Ruckus diagnostic dashboard rdd Installation;Known issues and workarounds Installation, Known Issues and Workarounds, Ruckus Diagnostic Dashboard RDD Why when booting up Ruckus Diagnostics Dashboard (RDD) it hangs on the SMBus Host Controller message? No resolution needed, the system automatically continues.

When booting up Ruckus Diagnostics Dashboard for the first time, it show the "SMBus Host Controller not enabled" message, and seems to hang.

2020-07-16T06:19:39-0700 2020-07-16T12:00:10-0700 https://support.ruckuswireless.com/articles/000008931 2020-07-16T05:54:13-0700 monthly 0.8 admin,premium knowledge_article_4305 knowledge_article_4305 2019-03-21T00:33:08-0700 000008931 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Observed a few descreoancies in the behaviour of ARC As per our discussion with the Developers, they provided below information about the discrepancies with few social media applications. ARC feature provides way to block, Rate-Limit and apply QoS on application specific network traffic. However, end user may observe discrepancy in the behavior of these features. If few packets are creating additional flows which is TCP 443 traffic then these are plain SSL flows which DPI fails to mark them as Telegram hence receiver can see these messages. This issue is observed with Telegram, WhatsApp, Skype Instant Messaging Apps. Here are few reasons which may affect the behavior of ARC. Consider an example of YouTube. 1. All packets showing TLS data: DPI cannot recognize apps using https/TLS connection due to encrypted traffic. In other words, if there is NO enough plain-text information present in the packetstream to help DPI engine to confirm application name, DPI simply marks it as SSL. This is also observed when the browser/mobile APP is using cookies or previously stored session information to start new data-flows. Consider example where “YouTube” is “Allowed”. Client and YouTube-Server will exchange certificate (Certificate information helps DPI to detect application name), which helps to classify the application as “YouTube”. After few hours, if policy is changed to “YouTube-Deny”, Client device may able to associate with YouTube server using previously stored session-information on client device. (Since session was already established, client will not exchange certificate information). 2. Roaming client: Similar problem may occur when client connected to AP1 moved to another area and got connected to AP2. Browser may send encrypted data to server such that there is not enough signature-data present to conclude the application. This is case where already established sessions are mostly using encrypted channels for data-transfer and hence after roaming applications are not classified correctly. If flow is marked as “SSL” instead of “YouTube”, appropriate policy may not be applied to the “SSL” flows. Hence user may enjoy watching “YouTube” videos though there is “Deny-YouTube” policy configured. 3. Parent flows Vs child flows: Often parent flows are classified using correct name. Since Access Points has default "Allow" policy, packets are allowed till the app-policy is applied. These packets helps application to establish new data-connections (child flows). In case of YouTube we can observe more than 10 flows all started when YouTube application is launched. Few of these flows can be marked correctly by the DPI engine. Few of the flows because of lack of information goes undetected. App-Policy may not work on these undetected/unclassified flows. This is the reason, we may observe lots of “Ads” playing on the “YouTube” App though the “Main” video is not playing in case of “YouTube -deny”. Similar behavior can be observed while running other applications. 4. Geographic locations: Application signature can be different in different geography. Consider a case when application is accessing server deployed in one country. DPI vendor might have analyzed network-traffic from one Geographic location to write application signature. Hence detection of application may work for that country. If the solution is deployed in other parts of the world, appdetection may fail. 5. Application versions: Application vendors release new App versions frequently. This may impact application detection where old signature stops working for new versions. 6. Server URL change: Server-side deployments may change the URL name. Consider "ytimg.com" is change to "yt03.img.com". We must wait till DPI vendor release a signature upgrade to adapt the change in server URLs. 7. Long active applications: Consider a scenario where user started using an application. Consider traffic-policy was "Allow" during login time. In such scenarios, the signature traffic is passed during login/launch time. After an hour when traffic policy changed to "Deny" and then user started sending text messages. In this case, the traffic may not contain any signature traffic to help appdetection. Hence such network-flows are not denied, and we can observe text messages being sent. Often such child-flows are encrypted and hence not classified with appropriate application-name. 8. Incognito window helps: Incognito window prevents usage of web-based API invocations under SSL (Smart browsers) and prohibits usage of browser cookies. It first establishes regular certificate exchange. Because of this, DPI can detect the applications/URLs effectively which helps in better denial of application traffic.

We have seen a few issues with social media applications such as Telegram, WhatsApp. If we block these applications in ARC, we have observed that Sender sends a message to Receiver, messages do get queued for Sender. However Receiver still receives the messages. But this is not the case with audio calls. Telegram/WhatsApp audio calls are blocked from sender to receiver. We have tested with a few mobile phones and it works fine as expected.

2020-07-16T05:54:13-0700 2020-07-16T06:00:08-0700 https://support.ruckuswireless.com/articles/000008863 2020-07-14T09:37:17-0700 monthly 0.8 admin,premium knowledge_article_4300 knowledge_article_4300 2019-03-04T15:40:53-0800 000008863 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Can I move Mesh enabled APs to another Zone? You can (must) Factory Default an AP that you wish to move from a Mesh enabled Zone to non-Mesh enabled Zone. This is especially important for Root APs.

Mesh enabled APs can be moved to another Mesh enabled Zone, but to move to a Non-Mesh Zone, the APs must be Factory Defaulted.

2020-07-14T09:37:17-0700 2020-07-14T12:00:11-0700 https://support.ruckuswireless.com/articles/000001819 2020-07-13T08:51:21-0700 monthly 0.8 admin,premium knowledge_article_3509 knowledge_article_3509 2013-03-19T11:27:08-0700 000001819 Validated (External) Premium Flexmaster umm Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, FlexMaster UMM Is it possible to change the admin username which was created while installing the Flex Master? Solution as follows, There are two possible cases. 1. We can change the username by accessing the Database of the FM directly using the FM CLI. This can be done by Ruckus engineers only. 2. Uninstall and Re-install the FM once again. 3. As an alternative we can create an another user with "Network Administrator" rights as follows. Login to the FM GUI. Navigate to Administer ==> Users & Assignment ==> Create a user account option. This will allow you to create a new user. In the user role, select "Network Administrator" option. So that the user will get administrator rights.

Is it possible to change the admin username which was created while installing the Flex Master?

2020-07-13T08:51:21-0700 2020-07-13T12:00:08-0700 https://support.ruckuswireless.com/articles/000001144 2020-07-10T16:13:28-0700 monthly 0.8 admin,premium knowledge_article_38 knowledge_article_38 2012-03-21T11:59:52-0700 000001144 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector ZoneDirector and Free RADIUS Issues <div>Please change value for "use_tunneled_reply" to yes in eap.conf A sample user profile created for test purpose in /etc/freeradius/users and tested SU Cleartext-Password := "abcd@1234" Service-Type = Framed-User, Tunnel-type = VLAN, Tunnel-medium-type = IEEE-802, Tunnel-Private-Group-Id = 300 Success ZD Debug Log: Sep 29 12:01:07 Simulation stamgr: ieee802_1x_receive_auth():VAP=DVLAN, User-Name="(null)", len=0, mac=c4:46:19:99:76:8a, group_attr=nil role=Default, from Access-Accept Sep 29 12:01:07 Simulation stamgr: decrypt_ms_key():shared secret=ruckus, len=6 Sep 29 12:01:07 Simulation stamgr: decrypt_ms_key():shared secret=ruckus, len=6 Sep 29 12:01:07 Simulation stamgr: ieee802_1x_receive_auth():VAP ac:67:06:14:d8:69- retrieve User-Name "" with length 0 from Access-Accept Sep 29 12:01:07 Simulation stamgr: radius_msg_get_vlan_id():Found VLAN ID 300 Sep 29 12:01:07 Simulation stamgr: ieee802_1x_receive_auth():The VLAN ID of STA c4:46:19:99:76:8a is 300 Sep 29 12:01:07 Simulation stamgr: sm_BE_AUTH_SUCCESS_Enter():802.1x: c4:46:19:99:76:8a BE_AUTH enters SUCCESS The highlighted test shows that controller can extract the VLAN information from the Accept message.</div>

ZD+Free RADIUS Issues

2020-07-10T16:13:28-0700 2020-07-10T18:00:12-0700 https://support.ruckuswireless.com/articles/000006213 2020-07-10T16:00:43-0700 monthly 0.8 admin,premium knowledge_article_4298 knowledge_article_4298 2017-01-18T11:48:31-0800 000006213 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration;Knowledge base Configuration, Knowledge Base, virtual SmartCell Gateway, SZ100 DNS-Server-Access-control-in-3-5

3.5 Access control has an options to map DNS Server

2020-07-10T16:00:43-0700 2020-07-10T18:00:10-0700 https://support.ruckuswireless.com/articles/000002917 2020-07-10T16:08:36-0700 monthly 0.8 admin,premium knowledge_article_4297 knowledge_article_4297 2014-04-15T17:12:01-0700 000002917 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How do I keep any test or new wlan from being advertise when it is first created? n/a

*Control of wlan deployment *Keep test wlan localized *No accidental wlan deployment until it's finalized *New WLAN becomes part of default wlan group *Prevent accidental deployment of WLAN

2020-07-10T16:08:36-0700 2020-07-10T18:00:08-0700 https://support.ruckuswireless.com/articles/000008114 2020-07-09T08:19:18-0700 monthly 0.8 admin,premium knowledge_article_4296 knowledge_article_4296 2018-07-25T10:32:11-0700 000008114 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway When diagnosing issues - how can I force an AP to connect to a specific node in a multinode cluster To force an AP to a specific node you can use the following commands: rkscli: get scg ------ SCG Information ------ SCG Service is enabled. AP is managed by SCG. Server List: 173.95.43.137,173.95.43.134,173.95.43.136,173.95.43.135 SSH tunnel connected to 173.95.43.136 Failover List: Not found Failover Max Retry: 2 DHCP Opt43 Code: 6 Server List from DHCP (Opt43/Opt52): 173.95.43.134 SCG default URL: RuckusController SCG config|heartbeat intervals: 300|30 SCG gwloss|serverloss timeouts: 1800|7200 ----------------------------- OK set scg ip <ip_address_control_plane> set sshtunnel disable set sshtunnel enable To verify AP is connected to the correct node: get scg Example: rkscli: set scg ip 173.95.43.135 OK rkscli: set sshtunnel disable OK rkscli: set sshtunnel enable OK rkscli: get scg ------ SCG Information ------ SCG Service is enabled. AP is managed by SCG. State: DISCONNECTED Server List: 173.95.43.135 SSH tunnel connected to 173.95.43.135 Failover List: Not found Failover Max Retry: 2 DHCP Opt43 Code: 6 Server List from DHCP (Opt43/Opt52): 173.95.43.134 SCG default URL: RuckusController SCG config|heartbeat intervals: 300|30 SCG gwloss|serverloss timeouts: 1800|7200 -----------------------------

vSZ/SCG commands to force an AP to connect to a specific controller for diagnostics

2020-07-09T08:19:18-0700 2020-07-09T12:00:10-0700 https://support.ruckuswireless.com/articles/000009663 2020-07-09T09:25:04-0700 monthly 0.8 admin,premium knowledge_article_4295 knowledge_article_4295 2019-08-01T14:48:31-0700 000009663 Validated (External) Premium Zonedirector;Flexmaster umm;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Troubleshooting Firmware, Troubleshooting, ZoneDirector, FlexMaster UMM How can I use FlexMaster running 9.13.1 to access ZoneDirectors running 10.0.1 which have a new WEB-UI design. To resolve this issue upgrade/migrate the FM to UMM 2.0 Please verify version compatibility by checking the UMM 2.0 release notes: https://support.ruckuswireless.com/documents/2037-ruckus-unleashed-multi-site-manager-umm-v2-0-ga-release-notes <img height="389" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxsh&feoid=00N50000002Cf3M&refid=0EM2J000000uqRv" width="807"></img> Existing version of FM can only be upgraded to UMM 2.0 <img height="287" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxsh&feoid=00N50000002Cf3M&refid=0EM2J000000uqSA" width="800"></img>

Customer has upgraded several ZoneDirectors to 10.0.1.0.88. Due to network constraints they access ZoneDirectors by clicking on serial number link in FlexMaster inventory page. After ZoneDirectors upgrade this link opens only the old version of ZD WEB-UI not the new version

2020-07-09T09:25:04-0700 2020-07-09T12:00:08-0700 https://support.ruckuswireless.com/articles/000001145 2019-05-20T07:39:50-0700 monthly 0.8 admin,premium knowledge_article_2034 knowledge_article_2034 2012-03-21T11:59:52-0700 000001145 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Troubleshooting Configuration, Firmware, Troubleshooting, ZoneDirector How to restore Zone Director certificate when the GUI is inaccessible? If the ZoneDirector will ping/ssh but not open WebGUI, follow the below procedure to reset/restore the ZD certificate: • SSH into your ZD, login with your admin credentials and you can reset your certificate through the command interface and this will restart your Zone Director. Ruckus> en Ruckus# config Ruckus (config)# certificate Ruckus (config-certificate)# restore • Zone Director will restart now to apply the changes in the certificate settings.

User upgraded versions and then could ssh login to ZD but can not web login to ZD.

2019-05-20T07:39:50-0700 2020-07-09T00:17:09-0700 https://support.ruckuswireless.com/articles/000010370 2020-07-08T17:26:04-0700 monthly 0.8 admin,premium knowledge_article_4294 knowledge_article_4294 2020-04-20T05:34:48-0700 000010370 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Performance;Configuration;System network management;Known issues and workarounds Performance, Configuration, System Network Management, Known Issues and Workarounds, SZ100 Why timestamp column is missing on the FlowMessage file after upgrading from 3.6.x to 5.1.x <ul><li>Fix is integrated in 5.2.x release</li></ul> <img alt="User-added image" height="51" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxsS&feoid=00N50000002Cf3M&refid=0EM2J000001pON6" width="500"></img>

After upgrading SZ from 3.6.x to 5.1.x, statistics reports gathered on the FTP server do not show timestamp column on flow message file

2020-07-08T17:26:04-0700 2020-07-08T18:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zxaSAA?attachment_index=0 2020-07-08T18:00:09-0700 monthly admin,premium knowledge_article_4294 knowledge_article_4294_attachment_1 fixstatsexporttimestamp_5_1_2_0_302.ksp 74590.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000010713 2020-07-07T13:22:04-0700 monthly 0.8 admin,premium knowledge_article_4292 knowledge_article_4292 2020-07-07T13:22:04-0700 000010713 Validated (External) Premium Knowledge;Ruckus icx switches Support license activation;Registration Support License Activation, Registration, Knowledge, Ruckus ICX Switches How to find the serial number from the certificate of Entitlement (CoE) The serial number prefixes are unique to each license type, table/excel attached for reference. <img alt="ICX prefix" height="139" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxo1&feoid=00N50000002Cf3M&refid=0EM2J000001TEUr" width="500"></img> Sample COE attached The license certificate of Entitlement (CoE) is a proof of purchase that includes a description of the license, the Ruckus part number, and the license serial number. <img alt="COE" height="517" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxo1&feoid=00N50000002Cf3M&refid=0EM2J000001TETo" width="500"></img>

The certificate of Entitlement (CoE) issued for each license purchased includes a unique serial number

2020-07-07T13:22:04-0700 2020-07-07T18:00:11-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000PihfSAC?attachment_index=0 2020-07-07T18:00:11-0700 monthly admin,premium knowledge_article_4292 knowledge_article_4292_attachment_1 COE prefix.xlsx 10910.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000010714 2020-07-07T13:23:23-0700 monthly 0.8 admin,premium knowledge_article_4291 knowledge_article_4291 2020-07-07T13:23:23-0700 000010714 Validated (External) Premium Knowledge;Ruckus icx switches Support license activation;Registration Support License Activation, Registration, Knowledge, Ruckus ICX Switches How to find the licenses that are available for each Ruckus ICX platform The following table lists the licenses that are available for each Ruckus ICX platform. Note the following descriptions of the fields • Licensed Feature: Licensed features available for the platform. • License Install Options: Names of the licenses that can be installed on the platform. These are the license names used in the CLI when installing a license. Note that the "R" in the license name indicates the L3 PREM license. • License Delete Options: Names of the licenses that can be deleted from the platform. These are the license names used in the CLI when deleting a license. • Default Package: Pre-installed licenses on the platform. • Possible Packages: Possible license packages available for the platform. These license package names are displayed in the show license command output. <img alt="ICX license" height="277" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxoL&feoid=00N50000002Cf3M&refid=0EM2J000001TEb9" width="500"></img> <table style="width: 287pt;" width="381"><colgroup><col style="width: 97pt;" width="129"></col><col style="width: 85pt;" width="113"></col><col style="width: 105pt;" width="139"></col></colgroup><tbody><tr height="19" style="height: 14.5pt;"><td colspan="1" rowspan="1" class="xl63" height="19" style="height: 14.5pt; width: 97pt; white-space: normal;" width="129">Part Numbers</td><td colspan="1" rowspan="1" class="xl63" style="width: 85pt; white-space: normal;" width="113">License Type</td><td colspan="1" rowspan="1" class="xl63" style="width: 105pt; white-space: normal;" width="139">Email Template</td></tr><tr height="271" style="height: 203.0pt;"><td colspan="1" rowspan="1" class="xl64" height="271" style="height: 203.0pt; width: 97pt; white-space: normal;" width="129">ICX6450-2X10G-LIC-POD ICX6450-PREM-LIC ICX6610-10G-LIC-POD ICX6610-ADV-LIC ICX6610-PREM-LIC ICX6650-2P40G-LIC-POD ICX6650-32-ADV ICX6650-8P10G-LIC-POD </td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Node Locked</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">Node-Lock</td></tr><tr height="19" style="height: 14.5pt;"><td colspan="1" rowspan="1" class="xl64" height="19" style="height: 14.5pt; width: 97pt; white-space: normal;" width="129">ICX-MACSEC-LIC</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">SAU</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">SAU-MACSEC</td></tr><tr height="77" style="height: 58.0pt;"><td colspan="1" rowspan="1" class="xl64" height="77" style="height: 58.0pt; width: 97pt; white-space: normal;" width="129">ICX7250-2X10G-LIC-POD ICX7250-8X10G-LIC-POD</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Node Locked</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">Node-Lock/SAU</td></tr><tr height="39" style="height: 29.0pt;"><td colspan="1" rowspan="1" class="xl64" height="39" style="height: 29.0pt; width: 97pt; white-space: normal;" width="129">ICX7250-PREM-LIC</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Non-Node Locked</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">Non-Node Lock/SAU</td></tr><tr height="39" style="height: 29.0pt;"><td colspan="1" rowspan="1" class="xl64" height="39" style="height: 29.0pt; width: 97pt; white-space: normal;" width="129">ICX7450-PREM-LIC</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Non-Node Locked</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">Non-Node Lock/SAU</td></tr><tr height="58" style="height: 43.5pt;"><td colspan="1" rowspan="1" class="xl64" height="58" style="height: 43.5pt; width: 97pt; white-space: normal;" width="129">ICX7650-PREM-LIC</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Certificate of Entitlement (SAU)</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">SAU - 7650</td></tr><tr height="58" style="height: 43.5pt;"><td colspan="1" rowspan="1" class="xl64" height="58" style="height: 43.5pt; width: 97pt; white-space: normal;" width="129">BR-ICX-7150-210U410R-P-01</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Certificate of Entitlement (SAU)</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">SAU - 7150</td></tr><tr height="58" style="height: 43.5pt;"><td colspan="1" rowspan="1" class="xl64" height="58" style="height: 43.5pt; width: 97pt; white-space: normal;" width="129">BR-ICX-7150-41U210-P-01</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Certificate of Entitlement (SAU)</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">SAU - 7150</td></tr><tr height="58" style="height: 43.5pt;"><td colspan="1" rowspan="1" class="xl64" height="58" style="height: 43.5pt; width: 97pt; white-space: normal;" width="129">BR-ICX-7150-41U410R-P-01</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Certificate of Entitlement (SAU)</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">SAU - 7150</td></tr><tr height="58" style="height: 43.5pt;"><td colspan="1" rowspan="1" class="xl64" height="58" style="height: 43.5pt; width: 97pt; white-space: normal;" width="129">BR-ICX-7150C-21U210R-P-01</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Certificate of Entitlement (SAU)</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">SAU - 7150</td></tr><tr height="58" style="height: 43.5pt;"><td colspan="1" rowspan="1" class="xl64" height="58" style="height: 43.5pt; width: 97pt; white-space: normal;" width="129">BR-ICX-7150Z210U810R-P-01</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Certificate of Entitlement (SAU)</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">SAU - 7150</td></tr><tr height="58" style="height: 43.5pt;"><td colspan="1" rowspan="1" class="xl64" height="58" style="height: 43.5pt; width: 97pt; white-space: normal;" width="129">ICX7750-L3-COE</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Certificate of Entitlement (SAU)</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">SAU - 7750</td></tr><tr height="58" style="height: 43.5pt;"><td colspan="1" rowspan="1" class="xl64" height="58" style="height: 43.5pt; width: 97pt; white-space: normal;" width="129">ICX7850-PREM-LIC</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Certificate of Entitlement (SAU)</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">SAU - 7850</td></tr><tr height="58" style="height: 43.5pt;"><td colspan="1" rowspan="1" class="xl64" height="58" style="height: 43.5pt; width: 97pt; white-space: normal;" width="129">ICX7550-PREM-LIC</td><td colspan="1" rowspan="1" class="xl64" style="width: 85pt; white-space: normal;" width="113">Certificate of Entitlement (SAU)</td><td colspan="1" rowspan="1" class="xl64" style="width: 105pt; white-space: normal;" width="139">SAU - 7550</td></tr></tbody></table>

Article about the ICX license feature and license install options

2020-07-07T13:23:23-0700 2020-07-07T18:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000PihkSAC?attachment_index=0 2020-07-07T18:00:09-0700 monthly admin,premium knowledge_article_4291 knowledge_article_4291_attachment_1 ICX license feature.xlsx 11529.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000010369 2020-07-06T17:59:16-0700 monthly 0.8 admin,premium knowledge_article_4289 knowledge_article_4289 2020-04-21T01:20:58-0700 000010369 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration Configuration, SmartCell Insight How to Delete SMTP Mail Server configuration from SCI The workaround is to edit the SQL manually From SCI CLI please run the below command : sudo docker exec postgresql psql -U postgres -d config -c "delete from setting where key='smtp'" <img alt="User-added image" height="235" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxmP&feoid=00N50000002Cf3M&refid=0EM2J000001pOMm" width="500"></img> <img alt="User-added image" height="241" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxmP&feoid=00N50000002Cf3M&refid=0EM2J000001pOMr" width="500"></img>

This article explains how to remove Outgoing Mail Server from SCI

2020-07-06T17:59:16-0700 2020-07-06T18:00:09-0700 https://support.ruckuswireless.com/articles/000010692 2020-07-05T23:56:05-0700 monthly 0.8 admin,premium knowledge_article_4287 knowledge_article_4287 2020-07-05T23:56:05-0700 000010692 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Insight Why does my browser have issues displaying SCI dashboards/data? SCI supports the following web browsers: Chrome Safari Firefox Unsupported browsers: The following are not supported, based upon known issues/no interoperability testing : Microsoft Internet Explorer Microsoft Legacy Edge: <ol style="list-style-type: decimal; color: rgb(23, 43, 77); font-size: 14px; font-style: normal; font-weight: 400; text-align: start; white-space: normal; background-color: rgb(255, 255, 255);"><li style="list-style-type: none;"> </li><li style="list-style-type: none;">A note on MS Edge:</li><li style="list-style-type: none;"> </li><li style="list-style-type: none;">There are two primary versions of MS Edge:</li><li style="list-style-type: none;"> </li><li style="list-style-type: none;">a. MS Legacy Edge: This is the original version(s) using 'EdgeHTML' platform. This version is contained/shipped with Microsoft Windows. Ruckus has received some customer reports of login and icon placement issues with this earlier platform variant of Edge</li><li style="list-style-type: none;"> </li><li style="list-style-type: none;">b. MS Edge (January 2020 onwards): This uses a Chromium-based platform and was released in January 2020. It supersedes the Legacy Edge variant. This version appears to interoperate with SCI successfully, but it is not included in Quality Assurance interoperability testing at this time.</li></ol>

A summary of web browsers supported by SCI

2020-07-05T23:56:05-0700 2020-07-06T00:00:07-0700 https://support.ruckuswireless.com/articles/000010673 2020-07-02T15:21:09-0700 monthly 0.8 admin,premium knowledge_article_4286 knowledge_article_4286 2020-07-02T15:21:09-0700 000010673 Validated (External) Premium Sz300;Zoneflex indoor;Scg200;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration Configuration, SZ300, ZoneFlex Indoor, SCG200, virtual SmartCell Gateway, SZ100 How can I locate the zone for a given access point and to which AP group does the access point belong to? There are two ways to identify and display the access point zone and access point group information. To display the Zone and AP Group information for an access point on a persistent basis, click on the configuration wheel as shown below... <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxgg&feoid=00N50000002Cf3M&refid=0EM2J000001T7dI"></img> This will display the Table Settings for the display Next, click on the settings you want displayed, in this case it's Zone and AP Group, and select OK. This will return you back to the Access Points display. You can also configure additional columns for persistent display. <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxgg&feoid=00N50000002Cf3M&refid=0EM2J000001T7dJ"></img> The Zone and AP Group will now display on a persistent basis as shown below... <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxgg&feoid=00N50000002Cf3M&refid=0EM2J000001T7dN"></img> The quickest way to identify the Zone and AP Group information for a give AP is to highlight the access point and navigate down the screen to the General tab. Here you will see the Zone and AP group information. <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxgg&feoid=00N50000002Cf3M&refid=0EM2J000001T7dm"></img>

Locating access point zone and AP Group configuration

2020-07-02T15:21:09-0700 2020-07-02T18:00:09-0700 https://support.ruckuswireless.com/articles/000004924 2020-07-01T14:09:07-0700 monthly 0.8 admin,premium knowledge_article_4284 knowledge_article_4284 2015-07-27T11:19:38-0700 000004924 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How to configure proxy authentication service for a WLAN? These are the steps to configure an authentication service used in a WLAN: 1. Configure an Authentication Service in Configuration -> Services&Profiles -> Services - Authentication. In this example it uses RADIUS as service protocol: <img alt="User-added image" height="147" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxkY&feoid=00N50000002Cf3M&refid=0EM50000000Logx" width="500"></img> Name and details for Primary Server are the required values. 2. Configure an Authentication Service Profile in Configuration -> Services&Profiles -> Service Profiles - Authentication. a. First a name is assigned to the profile <img alt="User-added image" height="198" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxkY&feoid=00N50000002Cf3M&refid=0EM50000000Loh2" width="500"></img> b. In the section Realm Based Authentication Service, it is required to assign the Authentication service configured in point 1 to the desired realms. In this example, we are simply changing the default values presented (No Match, Unspecified) to use that service. <img alt="User-added image" height="195" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxkY&feoid=00N50000002Cf3M&refid=0EM50000000Loh7" width="500"></img> <img alt="User-added image" height="198" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxkY&feoid=00N50000002Cf3M&refid=0EM50000000LohC" width="500"></img> c. At this point, different Authentication services can be chosen for different realms but it is important to select any valid one. Leaving these to default values (Auth Service is NA-Request Rejected) will cause to reject all authentication attempts. 3. WLAN is configured where Authentication Service is configured to use controller as proxy, and selecting the Service Profile from point 2: <img alt="User-added image" height="234" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxkY&feoid=00N50000002Cf3M&refid=0EM50000000LohH" width="500"></img>

Configure an Authentication Service

2020-07-01T14:09:07-0700 2020-07-01T18:00:12-0700 https://support.ruckuswireless.com/articles/000004899 2020-07-01T14:13:44-0700 monthly 0.8 admin,premium knowledge_article_4283 knowledge_article_4283 2015-07-22T11:19:19-0700 000004899 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Can vSZ SMTP configuration give AP location/domain and AP zone information? No. Currently we do not have any option on the vSCGc that can give that information.

vSZ SMTP configuration cannot provide AP location, domain, zone details

2020-07-01T14:13:44-0700 2020-07-01T18:00:11-0700 https://support.ruckuswireless.com/articles/000004859 2020-07-01T14:16:52-0700 monthly 0.8 admin,premium knowledge_article_4282 knowledge_article_4282 2015-07-13T02:18:52-0700 000004859 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Why do I get the client-to-server cipher error? Upgrade Putty to version 6.0

ERROR: Couldn't agree a client-to-server cipher (available: aes128-ctr, aes192-ctr, aes256-ctr)

2020-07-01T14:16:52-0700 2020-07-01T18:00:09-0700 https://support.ruckuswireless.com/articles/000010359 2020-06-29T02:20:49-0700 monthly 0.8 admin,premium knowledge_article_4272 knowledge_article_4272 2020-04-17T02:27:53-0700 000010359 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Installation;Known issues and workarounds Installation, Known Issues and Workarounds, SmartCell Insight How to determine the processing speed of the Apache druid? <div style="margin-left: 40px;"> <ul><li>SCI uses Apache druid which is real-time analytics database</li><li>We were facing performance issue with respect to the Apache druid database</li><li>In General, we configure two HDD's for a SCI instance</li><li>For an optimum performance the minimum speed required in 500 Kbps</li><li>Before 5.4.2, we were unable to gather the processing speed of druid database</li><li>From 5.4.2, we can retrieve the processing speed of druid database using the below command</li></ul> sudo dd if=/dev/zero of=/storage/file.tmp bs=1024 count=1048756 oflag=dsync where bs >>>> block size count >>>> copies in the number of blocks oflag =‘dsync’ Use synchronized I/O for data. For the output file, this forces a physical write of output data on each write. For the input file, this flag can matter when reading from a remote file that has been written to synchronously by some other process. Metadata (e.g., last-access and last-modified time) is not necessarily synchronized. </div>

This article provide you information on how to determine the processing speed of the Apache druid in SCI

2020-06-29T02:20:49-0700 2020-06-29T06:00:11-0700 https://support.ruckuswireless.com/articles/000005481 2020-06-26T15:29:02-0700 monthly 0.8 admin,premium knowledge_article_4269 knowledge_article_4269 2016-02-09T15:27:05-0800 000005481 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, SmartCell Gateway, SmartCell AP Why AP with default IP address can't establish Ruckus GRE tunnel There are no plans to solve this, so please use the workaround.

AP with default IP address can't establish Ruckus GRE tunnel

2020-06-26T15:29:02-0700 2020-06-26T18:00:33-0700 https://support.ruckuswireless.com/articles/000005478 2020-06-26T15:32:32-0700 monthly 0.8 admin,premium knowledge_article_4268 knowledge_article_4268 2016-03-07T16:00:00-0800 000005478 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SZ100 Why AP channel blacklist script is not working on SZ? Enable Background Scanning or ChannelFly in the SZ.

Blacklist script is not working on SZ

2020-06-26T15:32:32-0700 2020-06-26T18:00:31-0700 https://support.ruckuswireless.com/articles/000005475 2020-06-26T15:37:28-0700 monthly 0.8 admin,premium knowledge_article_4267 knowledge_article_4267 2016-01-26T23:22:55-0800 000005475 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Firmware;System network management;Website services Firmware, System Network Management, Website Services, Unleashed Does Unleashed AP debug work with Log Analyser tool Log Analyser was not supported earlier but now is supported after making some enhancement on Rowdy tool. <img alt="Unleashed debug file in Rowdy tool" height="292" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxhU&feoid=00N50000002Cf3M&refid=0EM5000000066fw" width="500"></img>

Log Analyser was not supported earlier

2020-06-26T15:37:28-0700 2020-06-26T18:00:30-0700 https://support.ruckuswireless.com/articles/000005386 2020-06-26T15:43:00-0700 monthly 0.8 admin,premium knowledge_article_4266 knowledge_article_4266 2016-02-09T15:22:46-0800 000005386 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SZ100 Why is SZ100 generating "member data are inconsistent" error while removing an AP? The problem is isolated as a WEBUI logic error while performing loop operations. This issue is fixed in 3.2.1 and 3.4 builds.

SZ100- "member data are inconsistent" error while removing an AP from a Group, re-adding it back and saving config.

2020-06-26T15:43:00-0700 2020-06-26T18:00:27-0700 http://support.ruckuswireless.com/article_attachments/kA2500000008ib0CAA?attachment_index=0 2020-06-26T18:00:27-0700 monthly admin,premium knowledge_article_4266 knowledge_article_4266_attachment_1 Applied configuration.png 324979.0 image/png https://support.ruckuswireless.com/articles/000005327 2020-06-26T15:46:35-0700 monthly 0.8 admin,premium knowledge_article_4265 knowledge_article_4265 2016-01-11T15:32:27-0800 000005327 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector Why do R500 APs randomly reboot? Upgrade as soon as possible if you are seeing this. This problem appears to be related to R500 APs specifically.

R500 APs were randomly resetting with reason "Application Reboot".

2020-06-26T15:46:35-0700 2020-06-26T18:00:26-0700 https://support.ruckuswireless.com/articles/000005217 2020-06-26T15:54:40-0700 monthly 0.8 admin,premium knowledge_article_4264 knowledge_article_4264 2015-10-20T13:52:16-0700 000005217 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway What is the maximum file size for an attachment to a case with Tech Support? Email replies to Tech Support with file attachments intended for a ticket can only be up to 25MB (megabytes) in size. Users interfacing with their tickets through the Support Portal, can upload file attachments up to 25GB (gigabytes) and their TSE will be notified. Syslogs and unfiltered Wireless Sniffer traces often exceed 25MB, and need to be uploaded thru the Support Portal.

What to do if the attachment is larger than 25MB (megabytes).

2020-06-26T15:54:40-0700 2020-06-26T18:00:24-0700 https://support.ruckuswireless.com/articles/000005218 2020-06-26T15:57:46-0700 monthly 0.8 admin knowledge_article_3785 knowledge_article_3785 2015-11-03T15:54:17-0800 000005218 Validated (External) Internal Scg200;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SCG200 Can R300 be moved between zones in SCG with mesh enabled? This bug is present in all releases up to 3.1.1 patch1 (3.1.1.0.474). There is ksp in ER-2934 to fix this for releases 3.1.1.0.450 and 3.1.1.0.474. This bug is fixed in releases 3.1.1 patch2 and 3.2 GA.

R300 is placed in a zone and needs to be moved to a different one

2020-06-26T15:57:46-0700 2020-06-26T18:00:22-0700 https://support.ruckuswireless.com/articles/000005126 2020-06-26T16:01:53-0700 monthly 0.8 admin,premium knowledge_article_4263 knowledge_article_4263 2015-10-08T15:52:41-0700 000005126 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management;Troubleshooting System Network Management, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can I reboot all of my APs at once? You can reboot all connected APs with ZD CLI debug commands. 1. Log into ZD CLI via SSH 2. Go to Enable mode 3. From Enable go to Debug Mode 4. Enter the following command to reboot all of the AP's managed by the ZD: ruckus> en ruckus# debug You have all rights in this mode. ruckus(debug)#rksap_cli -A "reboot" or ruckus(debug)#remote_ap_cli -A "reboot"

Admins can issue a ZD CLI command if they want to reboot all connected APs at once.

2020-06-26T16:01:53-0700 2020-06-26T18:00:21-0700 https://support.ruckuswireless.com/articles/000005112 2020-06-26T16:04:55-0700 monthly 0.8 admin,premium knowledge_article_4262 knowledge_article_4262 2015-09-24T11:19:41-0700 000005112 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management;Troubleshooting System Network Management, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to get an AP Support Info file from AP managed by ZD? To retrieve an AP Support Info (also called System Info file) from an AP managed by a ZoneDirector: - Log into ZD WebUI. - Select Monitor Tab - Under Monitor, select Access Points - In Access Points at the top you will see Currently Managed APs. - On the far right of that table is "Action" - Select the first icon on the left. It has a blue circle with an "i" in it.

How to save an AP Support Info file.

2020-06-26T16:04:55-0700 2020-06-26T18:00:19-0700 https://support.ruckuswireless.com/articles/000005098 2020-06-26T16:12:31-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4261 knowledge_article_4261 2015-09-08T01:06:15-0700 000005098 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How to extend ZDs DHCP scope to provide 512 leases? Extend the range the start IP of the scope have to be changed to 192.168.90.x; where "x" being the number after excluding reserved/static IP's including ZD, APs other network devices with static IP in the network. With this they would get 192.168.90.x-192.168.91.254 IP's for the users. Suggested to change the static IP of the APs to the excluded range to avoid IP conflict and that being the sole reason of having start IP option. The DHCP server will not know about the static IPs being assigned to the client, even you configure those IPs from the ZD. The reason why we need to do so is "When a DHCP client requests a lease, a DHCP server checks its pool of available addresses and assigns the client a lease on an available IPv4 address. By default, the server checks only the list of current leases to determine whether an address is available. It does not actually query the network to see whether an address is in use".

How to extend ZDs DHCP scope to provide 512 leases?

2020-06-26T16:12:31-0700 2020-06-26T18:00:18-0700 https://support.ruckuswireless.com/articles/000005089 2020-06-26T16:16:46-0700 monthly 0.8 admin,premium knowledge_article_4260 knowledge_article_4260 2015-09-22T15:21:05-0700 000005089 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway How to apply rate limiting using WISPr-Bandwidth-Max-Up/Down RADIUS attributes? Per client rate limiting can be enforced using the values provided by AAA server in attributes WISPr-Bandwidth-Max-Up and WISPr-Bandwidth-Max-Down sent in Access-Accept: The first one will fix uplink bandwidth while the second one will fix downlink bandwidth that UE can use. For these attributes to be used and applied under current design, both of them need to be present in Access-Accept message. If only one of them is present, then no rate limiting will be enforced in any direction.

Per client rate limiting can be enforced using the values provided by AAA server

2020-06-26T16:16:46-0700 2020-06-26T18:00:16-0700 https://support.ruckuswireless.com/articles/000005077 2020-06-26T17:05:44-0700 monthly 0.8 admin,premium knowledge_article_4259 knowledge_article_4259 2015-09-22T15:18:44-0700 000005077 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway What valid values can be included in CUI Radius attribute for SZ environment? This attribute (with ID 89) may be returned by AAA server in Radius Access-Accept message. These are some indications about its possible value: - CUI value returned from AAA in Access-Accept must be a valid one (MSISDN or any chargeable user identity, not NULL) to be accepted by SCG. If returned value is NULL, the controller will not accept it and the user will not be able to connect. - CUI is not mandatory in all call flows (only mandatory in TTG call flows). So if AAA doesn't have a valid value to include here, it can be omitted in Access-Accept.

Any WLAN in SZ environment that involves Radius authentication, and AAA server may return CUI attribute in Access-Accept

2020-06-26T17:05:44-0700 2020-06-26T18:00:14-0700 https://support.ruckuswireless.com/articles/000005073 2020-06-26T17:07:40-0700 monthly 0.8 admin,premium knowledge_article_4258 knowledge_article_4258 2015-09-01T15:22:22-0700 000005073 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to get the eth port status of ZD managed APs from the ZD CLI? Run the below command from the debug mode of the ZDs CLI. This will list information from all connected APs (as shown in the picture) remote_ap_cli –A “get eth” <img alt="User-added image" height="111" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxiI&feoid=00N50000002Cf3M&refid=0EM50000000LqDi" width="500"></img>

To get the APs eth port status incl using Physical link and PoE capability

2020-06-26T17:07:40-0700 2020-06-26T18:00:13-0700 https://support.ruckuswireless.com/articles/000005023 2020-06-26T17:13:12-0700 monthly 0.8 admin,premium knowledge_article_4257 knowledge_article_4257 2015-08-17T15:24:44-0700 000005023 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector Why SNMP OID ruckusZDWLANConfigWirelessClientIsolation does not work? ruckusZDWLANConfigWirelessClientIsolation works only with SNMP v3 and not with v1 / v2

SNMP OID ruckusZDWLANConfigWirelessClientIsolation does not work with v1 / v2

2020-06-26T17:13:12-0700 2020-06-26T18:00:11-0700 https://support.ruckuswireless.com/articles/000005019 2020-06-26T17:14:46-0700 monthly 0.8 admin,premium knowledge_article_4256 knowledge_article_4256 2015-08-12T09:16:53-0700 000005019 Validated (External) Premium Virtual smartcell gateway System network management;Troubleshooting System Network Management, Troubleshooting, virtual SmartCell Gateway Why are the APs not getting updated configuration from vSCG?

This article gives information about why the APs are unable to get the configuration updates.

2020-06-26T17:14:46-0700 2020-06-26T18:00:09-0700 https://support.ruckuswireless.com/articles/000005644 2020-06-25T14:55:59-0700 monthly 0.8 admin,premium knowledge_article_4255 knowledge_article_4255 2016-03-31T16:58:47-0700 000005644 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Unleashed How long should I wait when the Unleashed Master AP goes offline before the Standby Master AP takes over? The final resolution is Patience. Give the system enough time and it will recover on its own.

Explains the timing of the Unleashed Standby Master AP taking control

2020-06-25T14:55:59-0700 2020-06-25T18:00:09-0700 https://support.ruckuswireless.com/articles/000005868 2020-06-24T10:58:20-0700 monthly 0.8 admin knowledge_article_3563 knowledge_article_3563 2016-07-07T15:21:55-0700 000005868 Validated (External) Internal Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why Realm information is stripped from the username while administrative login? The ksp of ER-4070_user_login_with_realm_3_2_1_0_163_0 can workaround this case. Test procedure: 1.Create an account as test@test.com on AAA server. 2.Create a profile on Configuration->Administrators->RADIUS Servers for Administrators->type->Radius. 3.Apply this KSP. 4.Use test@test.com to login at vSZ's web GUI and pass the authentication.

vSZ/SZ strips Realm information from the username while doing administrative login

2020-06-24T10:58:20-0700 2020-06-24T12:00:10-0700 https://support.ruckuswireless.com/articles/000005727 2020-06-24T11:02:02-0700 monthly 0.8 admin,premium knowledge_article_4254 knowledge_article_4254 2016-07-07T15:27:53-0700 000005727 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway Client connectivity issues in WPA2/AES WLAN related to 802.11w / MFP ? Upgrade to a version of code that contains the fix.

Client connectivity issues related to 802.11w

2020-06-24T11:02:02-0700 2020-06-24T12:00:08-0700 https://support.ruckuswireless.com/articles/000007262 2020-06-22T14:00:15-0700 monthly 0.8 admin knowledge_article_3060 knowledge_article_3060 2017-12-12T14:27:30-0800 000007262 Validated (External) Partner Brocade eos products Configuration Configuration, Brocade EOS Products Why do I see ETHERNET FRAME CHECK SEQUENCE INCORRECT in wireshark and how can I remove it? <div>To disable the warnings when they are producing a false negative, use the following navigation path.</div> <div><code style="color: black; font-size: 13px;"> </code></div> <div><code style="color: black; font-size: 13px;">Edit > Preferences > Protocols > Ethernet</code></div> <div><img alt="User-added image" height="348" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxdm&feoid=00N50000002Cf3M&refid=0EM50000000XRH2" width="500"></img></div> <div> </div> <div><code style="color: black; font-size: 13px;">Edit > Preferences > Protocols > Ethernet</code></div> <div> </div> <div>Remove the check for Validate the Ethernet checksum if possible:</div> <img alt="User-added image" height="538" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxdm&feoid=00N50000002Cf3M&refid=0EM50000000XRH7" width="500"></img>

Why do I see ETHERNET FRAME CHECK SEQUENCE INCORRECT in wireshark and how can I remove it?

2020-06-22T14:00:15-0700 2020-06-22T18:00:41-0700 https://support.ruckuswireless.com/articles/000007256 2020-06-22T14:02:25-0700 monthly 0.8 admin knowledge_article_3001 knowledge_article_3001 2017-12-12T14:34:18-0800 000007256 Validated (External) Partner Icx 7750;RUCKUS ICX 7750 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ICX 7750 Why are Port reports Up/Blocking on ICX when no devices connected to it? Upgrade to a version of code that contains the fix.

Port reports Up/Blocking on ICX when no devices connected to it.

2020-06-22T14:02:25-0700 2020-06-22T18:00:39-0700 https://support.ruckuswireless.com/articles/000007244 2020-06-22T14:08:52-0700 monthly 0.8 admin,premium knowledge_article_3173 knowledge_article_3173 2017-12-12T13:15:51-0800 000007244 Validated (External) Premium Brocade eos products System network management System Network Management, Brocade EOS Products Brocade Campus BPDU Guard Feature <table class="sectionContent" style="width: 1003.7px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 828.14px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">YouTube video: <a href="https://www.youtube.com/watch?v=FOW-EMGbyVY&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=FOW-EMGbyVY&feature=youtu.be</a></div> </td></tr></tbody></table> </td></tr></tbody></table>

BROCADE CAMPUS FEATURE EXPLAINER SERIES:

2020-06-22T14:08:52-0700 2020-06-22T18:00:36-0700 https://support.ruckuswireless.com/articles/000007210 2020-06-22T14:11:13-0700 monthly 0.8 admin,premium knowledge_article_3056 knowledge_article_3056 2017-12-12T14:27:30-0800 000007210 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers What adoption modes are available for Brocade Mobility APs and Mobility controllers? LAYER-2 ADOPTION Layer-2 adoption is used when the controller and the APs are on the same VLAN / Network Segment as shown in Figure 1. This is the simplest method of adopting an AP to the controller: <img alt="User-added image" height="289" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxe6&feoid=00N50000002Cf3M&refid=0EM50000000XHO3" width="500"></img> Figure.1 Layer-2 Adoption of WiNG5 APs <div>When WiNG5 APs are booted up, they first try to discover the controller on the Layer-2 network. Message Flow Sequence 1. The AP sends out a broadcast discover packet on all the VLAN interfaces; by default the GE1 port of all the APs are configured to be part of VLAN-1. So an AP with a default config sends the broadcast packet on VLAN-1 on GE-1. 2. The controllers receiving the broadcast discover packets respond back with an offer packet, indicating its willingness to adopt the AP. The offer packet from the controller includes information like the controller's group ID, load and other parameters; which will help the AP decide the best controller to adopt it. 3. If the AP gets offers from multiple controllers, it decides the best Controller to adopt to and sends a Request Packet to the controller. 4. The controller then sends a reply to the request from the AP. When the AP gets the reply from the controller, it creates a link to the controller and gets adopted. Once it gets adopted, it downloads the configuration from the controller. To view the APs adopted to a controller, the show adoption status command can be used. <div>rfs4000-22A5DC(config)*# show adoption status ----------------------------------------------------------------------------------------- HOST-NAME VERSION CFG STAT ADOPTED-BY LAST-ADOPTION UPTIME ----------------------------------------------------------------------------------------- ap71xx-4450A0 5.1.0.0-074R configured rfs4000-22A5DC 2011-04-02 19:49:47 5 days 05:51:51 ap6511-083FE8 5.1.0.0-074R configured rfs4000-22A5DC 2011-04-08 01:38:53 0 days 00:04:33 ap650-316428 5.1.0.0-074R configured rfs4000-22A5DC 2011-04-01 01:30:51 7 days 00:12:10 ------------------------------------------------------------------------------------------ Total number of APs displayed: 3</div> <div> In the GUI, the AP Adoption information can be found in the context Statistics->rfs4000 device->Adoption->Adopted APs <img alt="User-added image" height="217" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxe6&feoid=00N50000002Cf3M&refid=0EM50000000XHOD" width="500"></img> LAYER-3 ADOPTION Layer-3 adoption is used when the controller and the APs are not deployed in the same VLAN / LAN Segment. There are two ways to adopt an AP to the controller over Layer-3: by using DHCP option 189 / 191 and by explicit configuration: <img alt="User-added image" height="336" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000Pxe6&feoid=00N50000002Cf3M&refid=0EM50000000XHOI" width="500"></img> Figure.2 Layer-3 Adoption of WiNG5 APs </div> <div>DHCP option 191 / 189 </div> <div>DHCP option 191 or 189 can be supplied with the DHCP Offer to provide the Access Points with one or more WLAN Switch Controller IP addresses. The APs will attempt to connect to the controller IP addresses specified in these DHCP options. The WLAN Switch Controller IP addresses can be separated with multiple delimiters including a space, comma and semi colon. Using option 191, two pools of controller IP addresses can be specified, which is helpful in cases where a particular set of IPs should be tried first. The controllers in pool1 are tried up to two times first; if that fails, AP tries to create links to the controllers in pool2. If that fails twice too, the AP starts all over again from pool-1. An example of option 191 contents is: pool1=172.16.1.4,172.16.1.5;pool2=10.1.1.10,10.1.1.11,10.1.1.12;level=1 Hostnames can also be specified instead of IP Addresses. Hostnames are resolved by DNS server and can return multiple IP addresses. This list of IP addresses obtained through DNS is treated the same as a list of IP addresses specified directly using option 191. pool1=rfs4000.floor1.sj.ca107.us.brocade.com;pool2=10.1.1.10,10.1.1.11,10.1.1.12;level=1 In Figure 2, the router is configured as DHCP server and sends DHCP offers to all the APs. DHCP option 191 is also configured, so the APs know the controller IP address through the DHCP option 191. <div>Message Flow Sequence 1. When the AP boots up, it sends the DHCP request and the branch router responds with the IP address and option 189/191. 2. APs get the IP address from the DHCP server, and from option 189/191, knows the controller IP address. 3. APs send requests to all the controllers in pool-1, and selects the best controller. 4. APs get adopted to the controller and download the configuration from the controller.</div> </div> </div>

What adoption modes are available for Brocade Mobility APs and Mobility controllers?

2020-06-22T14:11:13-0700 2020-06-22T18:00:34-0700 https://support.ruckuswireless.com/articles/000007072 2020-06-22T14:16:59-0700 monthly 0.8 admin knowledge_article_3179 knowledge_article_3179 2017-12-12T13:15:49-0800 000007072 Validated (External) Partner Icx 6430;Icx 7250;Ruckus ICX 6430 and 6450 Campus Switches;Ruckus ICX 7250 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ICX 6430, ICX 7250 DHCP snooping table and IPSG not in sync when client moves to another port of the switch Upgrade to a version of code that contains the fix.

When user gets connected to 1st AP (on 1st switchport) and moves to 2nd AP (on 2nd switchport), then the MAC entry does not get cleared from IP Source guard table of 1st port.

2020-06-22T14:16:59-0700 2020-06-22T18:00:31-0700 https://support.ruckuswireless.com/articles/000006936 2020-06-22T14:23:08-0700 monthly 0.8 admin knowledge_article_2906 knowledge_article_2906 2017-12-12T15:03:23-0800 000006936 Validated (External) Partner Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to break the boot loop on EBU (Enterprise / Business Unit) device? Connect via console to the device. During the initial phase of the boot sequence, hit the 'b'. This will bring the device into the boot monitor prompt. Then type the following: use default-config boot sys flash primary The device will reload without any configuration. You can then recover the device.

Break the boot loop on EBU (Enterprise / Business Unit) device

2020-06-22T14:23:08-0700 2020-06-22T18:00:28-0700 https://support.ruckuswireless.com/articles/000006757 2020-06-22T14:29:04-0700 monthly 0.8 admin knowledge_article_2765 knowledge_article_2765 2017-12-12T16:04:18-0800 000006757 Validated (External) Partner Fastiron ws series;Fastiron cx series;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration;Troubleshooting Configuration, Troubleshooting, FastIron WS Series, FastIron CX Series How can I find the MAC Address of a Metro Ring Protocol (MRP) Ring Health Packet (RHP)? The destination MAC address of the RHP packet takes the format of 0304.800.00xx. Where xx is the ring ID in hex. DEC = 111 HEX= 6f For example Ring 111 would have a MAC address of 0304.8000.006f. Another option is to look at the Metro RHP Table on the LP. LP-1# show metro-rhp Ring MacAddress InPort OutPort Cam(Ppcr).. ---- -------------- ------ ------- ----------- 0304.8000.0000 0x07f0 299005(1:2) 299005(1:1) Ring MacAddress InPort OutPort FID SecPort Maste Cam(Ppcr).. ---- -------------- ------ ------- ------ ------- ----- ----------- 1 0304.8000.0001 0x07f0 0xffff 65535 0 2 0304.8000.0002 0x07f0 0xffff 65535 0 3 0304.8000.0003 0x07f0 0xffff 65535 0 4 0304.8000.0004 0x07f0 0xffff 65535 0 <snip> 111 0304.8000.006f 0xa03e 0xa03e 1 0298994(1:1) 112 0304.8000.0070 0x07f0 0xffff 65535 0 113 0304.8000.0071 0x07f0 0xffff 65535 0 <snip>

How can I find the MAC Address of a Metro Ring Protocol (MRP) Ring Health Packet (RHP)?

2020-06-22T14:29:04-0700 2020-06-22T18:00:25-0700 https://support.ruckuswireless.com/articles/000006739 2020-06-22T14:31:31-0700 monthly 0.8 admin knowledge_article_3027 knowledge_article_3027 2017-12-12T14:34:11-0800 000006739 Validated (External) Partner Ruckus icx switches;Brocade eos products Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products Why would PVLAN not work as expected in software release 7.2.02? Upgrade to software release 7.2.02e or later.

On FastIon platforms PVLAN may not work as expected in software release 7.2.02

2020-06-22T14:31:31-0700 2020-06-22T18:00:23-0700 https://support.ruckuswireless.com/articles/000006727 2020-06-22T14:33:18-0700 monthly 0.8 admin,premium knowledge_article_2784 knowledge_article_2784 2017-12-12T16:04:14-0800 000006727 Validated (External) Premium Ruckus icx switches;Brocade eos products Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products Why does Ipv4 license show invalid status on SX with IPv6 management module? This is a display issue only with no issue related to IPv4 functionality.

Ipv4 license shows invalid status on SX with IPv6 management module

2020-06-22T14:33:18-0700 2020-06-22T18:00:22-0700 https://support.ruckuswireless.com/articles/000006678 2020-06-22T14:35:59-0700 monthly 0.8 admin,premium knowledge_article_4252 knowledge_article_4252 2017-12-12T14:11:52-0800 000006678 Validated (External) Premium Ruckus icx switches;Brocade eos products System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products BNA reports are not launching on a Linux Headless Install Ensure one of the compatible Network Advisor web browsers are installed properly, working, and configured as the default browser. Network Advisor will then detect the configured default web browser and launch it whenever a Network Advisor report is run.

BNA reports are not launching on a Linux Headless Install

2020-06-22T14:35:59-0700 2020-06-22T18:00:20-0700 https://support.ruckuswireless.com/articles/000006556 2020-06-22T14:39:49-0700 monthly 0.8 admin knowledge_article_2991 knowledge_article_2991 2017-12-12T14:35:49-0800 000006556 Validated (External) Partner Ruckus icx switches Performance;System network management;Troubleshooting;Known issues and workarounds Performance, System Network Management, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches What is Mobility NTP monlist vulnerability CVE-2013-5211? This is a known concern on the Mobility product line and is addressed with code release 5.5.2 or higher. See Mobility 5.5.2 Release Notes attached here.

The NTP service supports a monitoring service that allows administrators to query the server for traffic counts of connected clients. This information is provided via the “monlist” command.

2020-06-22T14:39:49-0700 2020-06-22T18:00:17-0700 http://support.ruckuswireless.com/article_attachments/kA250000000TvqSCAS?attachment_index=0 2020-06-22T18:00:17-0700 monthly admin knowledge_article_2991 knowledge_article_2991_attachment_1 ka25B000000CdPTQA0_Attachment__c.pdf 548856.0 application/pdf https://support.ruckuswireless.com/articles/000006503 2020-06-22T14:45:52-0700 monthly 0.8 admin,premium knowledge_article_4251 knowledge_article_4251 2017-11-27T00:35:27-0800 000006503 Validated (External) Premium Vsz dataplane Configuration;Installation Configuration, Installation, vSZ Dataplane Integration with Linkify when using the vDP After adding the Control Plane IP in the walled garden list. Client can send login request to the SZ and should be authorized if a radius-accept is received from the server. rkscli: get acl-service wlanxx ACL List on wlan32 list id: 231 211 65 212 233 list231: ALLOW ARP/EAPOL/DHCP req/DNS req list211: ALLOW to SCG portal (for tunnel wlan) list65: hotspot0 Walled Garden: ALLOW: 10.19.121.50,linkyfi.com,10.11.12.13,10.11.12.13-10.11.12.15,10.11.12.100/28,10.11.12.13 255.255.255.0,www.ruckus.com,www.appleiphonecell.com,captive.apple.com,www.apple.com,www.itools.info,www.ibook.info,www.airport.us,www.thinkdifferent.us,connectivitycheck.android.com,msftncsi.com,*.msftncsi.com,facebook.com,facebook.net,akamaihd.net,digicert.com,fbcdn.net,fb.com,fbsbx.com,*.facebook.com,*.facebook.net,*.akamaihd.net,*.digicert.com,*.fbcdn.net,*.fb.com,*.fbsbx.com,twitter.com,twimg.com,abs.twitter.com,*.twitter.com,*.twimg.com,*.abs.twitter.com,instagram.com,youtube.com,ytimg.com,gstatic.com,google.com,googlevideo.com,*.youtube.com,*.ytimg.com,*.gstatic.com,*.google.com,*.googlevideo.com list212: DNAT HTTP packet to SCG (for tunnel wlan) list233: DROP

How to use vDP with Linkyfy

2020-06-22T14:45:52-0700 2020-06-22T18:00:16-0700 https://support.ruckuswireless.com/articles/000006440 2020-06-22T14:47:50-0700 monthly 0.8 admin,premium knowledge_article_4250 knowledge_article_4250 2017-09-18T02:49:49-0700 000006440 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, virtual SmartCell Gateway, SZ100 Why did smart zone go down when certificate was mapped to management web? Yes, when default certificate or Service certificate is mapped to Management Web on vSZ, all services will restart and you will lose access to the controller for a few minutes

When default certificate or Service certificate is mapped to Management Web on vSZ, all services will restart and you will lose access to the controller for a few minutes.

2020-06-22T14:47:50-0700 2020-06-22T18:00:14-0700 https://support.ruckuswireless.com/articles/000006383 2020-06-22T14:50:14-0700 monthly 0.8 admin,premium knowledge_article_4249 knowledge_article_4249 2017-06-02T09:48:07-0700 000006383 Validated (External) Premium Unleashed;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Troubleshooting Troubleshooting, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor What is an AP watchdog timeout? Watchdog timeout will prevent CPU hang up by forcing a CPU restart, so it does not record anything except 'watchdog timeout' message. Therefore, you may need to recreate it in your lab to know trigger and conditions for a root cause analysis. If you know a trigger, then you can recreate it, but if not, it will be difficult to recreate the issue. We typically recommend to upgrade firmware if the customer saw multiple crash on multiple APs. Tech Support should search JIRA for match on reboot reason messages seen in AP supportinfo file.

AP will crash with watchdog timeout sometimes. We will explain basic troubleshooting for it.

2020-06-22T14:50:14-0700 2020-06-22T18:00:12-0700 https://support.ruckuswireless.com/articles/000006210 2020-06-22T14:52:29-0700 monthly 0.8 admin,premium knowledge_article_4248 knowledge_article_4248 2019-06-20T18:05:38-0700 000006210 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How to configure SNMPv3 on whats up gold 1.Configured SNMPv3 with authentication type SHA and AES on ZD for read only and read/write. 2.Configured whats up gold with authentication type SHA-1 and encryption type AES-128, ZD and the AP's were discovered by the tool.

Customer wanted to configure SNMPv3 on zone director 3000. Whats up gold was unable to discover the ZD and AP's. Customer wanted to know the authentication type and encryption method used on ZD to configure the same on the monitoring tool.

2020-06-22T14:52:29-0700 2020-06-22T18:00:11-0700 https://support.ruckuswireless.com/articles/000009330 2020-06-22T15:13:46-0700 monthly 0.8 admin knowledge_article_3870 knowledge_article_3870 2019-06-04T00:06:10-0700 000009330 Validated (External) Partner Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway How to check on another cluster operation running backup which prevents from upload patch file? Always verify on running backup prior to upload any patch file. On SCG/vSZ CLI, run below commands to check on running task if any: ruckus# show backup-config-state ruckus# show backup-state ruckus# show backup-upgrade-state

Unable to upload patch due to cluster operation running config backup. CLI commands to check any running backup

2020-06-22T15:13:46-0700 2020-06-22T18:00:09-0700 https://support.ruckuswireless.com/articles/000008286 2020-06-22T08:21:52-0700 monthly 0.8 admin,premium knowledge_article_4247 knowledge_article_4247 2018-09-26T11:12:36-0700 000008286 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway Why my Chromecast/Airplay or Bonjour services are not reachable when WLAN is tunnelled to SZ-100? Go to Service and Profiles >> Tunnels & Ports >> Multicast Forwarding >> Set it to ON (Enable Forwarding multicast packet on tunnel mode) >> Click on OK to save settings. <img alt="Screenshot of the setting" height="592" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxdX&feoid=00N50000002Cf3M&refid=0EM50000000li1n" width="500"></img> Note: Feature is supported only on SZ-100

Chromecast/Airplay or Bonjour services are not reachable when WLAN is tunnelled to SZ-100

2020-06-22T08:21:52-0700 2020-06-22T12:00:09-0700 https://support.ruckuswireless.com/articles/000008855 2020-06-19T13:19:21-0700 monthly 0.8 admin,premium knowledge_article_4246 knowledge_article_4246 2019-03-15T01:33:10-0700 000008855 Validated (External) Premium Scg200;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;Installation;Troubleshooting Performance, Configuration, Installation, Troubleshooting, SCG200, virtual SmartCell Gateway Why are APs not joining SZ but all the services are UP on the node? <ul><li>Packet capture on the control interface port of the SCG, meanwhile we ping from SCG200 to control interface default gateway:</li></ul> bash-4.1$ tcpdump -i interface -w /tmp/xxxx.pcap & bash-4.1$ sudo arping -I br0 -c 10 10.0.7.77 <ul><li>After a couple of minutes we stopped the packet capture:</li></ul> ps -A | grep tcpdump kill -9 PID <ul><li>Investigation of the packet capture with Wireshark:</li></ul> From CDP packets we can see where the SCG control port is connected, and some configuration of the switch port. We need to check the name of the switch, VLAN, subnet, etc. In this case the name of the switch had a different name to the one the customer thought It was connected, so all the config was wrong. <img alt="User-added image" height="275" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxcP&feoid=00N50000002Cf3M&refid=0EM2J000000mCtf" width="500"></img> After notifying this to customer they changed the cable to proper switch and port and APs could join successfully to the node.

This KBA explains how to know the APs are not joining the SZ because of an issue on the configuration of the switch port.

2020-06-19T13:19:21-0700 2020-06-19T18:00:29-0700 https://support.ruckuswireless.com/articles/000008676 2020-06-19T13:28:00-0700 monthly 0.8 admin,premium knowledge_article_4245 knowledge_article_4245 2018-12-11T11:18:58-0800 000008676 Validated (External) Premium Vriot Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, vRIoT How to check if vRIoT is upgraded, or fresh installed? To check if a vRIoT server is upgraded or fresh installed login to the webgui of the vRIoT controller. Then go to the admin tab, and choose versions/patches The version that you are currently running you could already see in the right top corner (1.2.0.0.22 in picture below). That this vRIoT is upgraded you can see if you click on the Change version to button, and you see multiple entries. <img alt="User-added image" height="449" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxcU&feoid=00N50000002Cf3M&refid=0EM2J000000lyuF" width="500"></img>

How can you see if the vRIoT server is upgraded, or if it was a fresh installed with that version.

2020-06-19T13:28:00-0700 2020-06-19T18:00:27-0700 https://support.ruckuswireless.com/articles/000008642 2020-06-19T13:30:22-0700 monthly 0.8 admin,premium knowledge_article_4244 knowledge_article_4244 2018-11-20T12:24:20-0800 000008642 Validated (External) Premium Ruckus icx switches Performance;System network management;Troubleshooting;Known issues and workarounds Performance, System Network Management, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches ICX: Why do Aruba APs cause Giant packet drops? <ul><li>Set the SAP MTU to 1500 on the Aruba Wireless Controller to avoid these frames to be sent to the network.</li></ul> Or <ul><li>Enable Jumbo frames on all the ICXs of the Network. This will require more resources on the ICX</li></ul> Best Practices - ALWAYS configure any Aruba controller SAP MTU to 1500 bytes to avoid network issues and AP connectivity problems!

The Aruba APs send frames of 1578 size every minute, if they reach the Aruba controller and receive an acknowledge the MTU is set to 1578 for every packet.

2020-06-19T13:30:22-0700 2020-06-19T18:00:26-0700 https://support.ruckuswireless.com/articles/000007648 2020-06-19T13:48:30-0700 monthly 0.8 admin,premium knowledge_article_4240 knowledge_article_4240 2018-02-08T06:38:19-0800 000007648 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway What is the first SmartZone firmware to support T310d Outdoor AP? We released an AP patch bundle with T310d AP support on 3.6 GA. The T310 series is supported natively in SZ 3.6.1 and later. -- Upgrade the vSZ to 3.6.0 firmware version or above to start using AP T310d https://support.ruckuswireless.com/documents/2153-smartzone-3-6-ga-ap-bundle-for-t310d-b741-release-notes https://support.ruckuswireless.com/software/1570-smartzone-3-6-ga-new-ap-model-bundle-for-t310d-b741 The AP T301d is supported natively from 3.6.1 MR <div id="cke_pastebin"> </div>

We released an AP patch bundle with T310d AP support on 3.6 GA. The T310 series is supported natively in SZ 3.6.1 and later.

2020-06-19T13:48:30-0700 2020-06-19T18:00:17-0700 https://support.ruckuswireless.com/articles/000007344 2020-06-19T13:53:43-0700 monthly 0.8 admin,premium knowledge_article_2932 knowledge_article_2932 2017-12-12T14:36:08-0800 000007344 Validated (External) Premium Ruckus icx switches Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, Ruckus ICX Switches Switch crashes at macAuth_process_event_authentication_success with 8040a image Upgrade to a version of code that contains the fix: ?Fixed in FI 08.0.30k, FI 08.0.40b, FI 08.0.50 on-wards.

Switch crashes at macAuth_process_event_authentication_success with 8040a image

2020-06-19T13:53:43-0700 2020-06-19T18:00:16-0700 https://support.ruckuswireless.com/articles/000007347 2020-06-19T13:55:14-0700 monthly 0.8 admin,premium knowledge_article_4239 knowledge_article_4239 2017-12-12T14:36:08-0800 000007347 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches Web GUI displays the opposite fan direction of the show chassis output If you encounter the problem that is reported in the SLN Article please upgrade to one of the following codes: FI 08.0.30k or FI 08.0.50

Web GUI displays the opposite fan direction of the show chassis output

2020-06-19T13:55:14-0700 2020-06-19T18:00:14-0700 https://support.ruckuswireless.com/articles/000007290 2020-06-19T13:56:46-0700 monthly 0.8 admin,premium knowledge_article_2999 knowledge_article_2999 2017-12-12T14:34:20-0800 000007290 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products Can Brocade FCX Series data center and campus models be mixed in a stack? Yes, users can mix a FCX Series data center and campus models in a stack. In order to stack Brocade FCX Series data center and campus models together, users must use the 10 GbE ports on all switches.

Can Brocade FCX Series data center and campus models be mixed in a stack?

2020-06-19T13:56:46-0700 2020-06-19T18:00:12-0700 https://support.ruckuswireless.com/articles/000010645 2020-06-19T06:09:19-0700 monthly 0.8 admin,premium knowledge_article_4238 knowledge_article_4238 2020-06-19T06:09:19-0700 000010645 Validated (External) Premium Virtual smartcell gateway Troubleshooting Troubleshooting, virtual SmartCell Gateway How long is a serviceticket valid for and how do i know if/when a ticket becomes invalid There is a date stamp when a serviceTicket is created and the serviceTicket ONLY valid for 24 hours after creation.

How long is a serviceticket valid for and how do i know if/when a ticket becomes invalid

2020-06-19T06:09:19-0700 2020-06-19T12:00:13-0700 https://support.ruckuswireless.com/articles/000009156 2020-06-19T11:09:48-0700 monthly 0.8 admin,premium knowledge_article_4237 knowledge_article_4237 2019-04-29T07:44:20-0700 000009156 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Installation;System network management;Troubleshooting;Known issues and workarounds Performance, Installation, System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway Why is the management interface on my newly configured vSZ not responding? To resolve the issue, the Control, Management and Cluster interfaces must be re-configured to have IP addresses on different IP networks. Determine which interface(s) require re-configuring using the previous steps above. Once identified, the IP addresses are changed as follows (commands in bold): Management Interface 3-interface# config 3-interface(config)# interface management 3-interface(config-if)# ip address 192.168.2.35 255.255.255.0 192.168.2.1 This requires restarting all vSZ services. Do you want to continue (or input 'no' to cancel)? [yes/no] yes Control Interface 3-interface# config 3-interface(config)# interface control 3-interface(config-if)# ip address 192.168.2.35 255.255.255.0 192.168.2.1 This requires restarting all vSZ services. Do you want to continue (or input 'no' to cancel)? [yes/no] yes Cluster Interface 3-interface# config 3-interface(config)# interface cluster 3-interface(config-if)# ip address 192.168.2.35 255.255.255.0 192.168.2.1 This requires restarting all vSZ services. Do you want to continue (or input 'no' to cancel)? [yes/no] yes As seen above, the services must be restarted, at which point you can re-connect using the new IP.

Steps to identify the cause of SZ management interface connectivity issues

2020-06-19T11:09:48-0700 2020-06-19T12:00:11-0700 https://support.ruckuswireless.com/articles/000010634 2020-06-18T01:48:16-0700 monthly 0.8 admin,premium knowledge_article_4234 knowledge_article_4234 2020-06-18T01:48:16-0700 000010634 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway An AP repeatedly fails to obtain the certificate, even when a new certificate is obtained from "https://certrenewal.ruckuswireless.com" 1. Ensure port 91 TCP/UDP is open (bi-directional) between the SZ and the AP. Check the local network firewall. 2. If required, Ruckus support can help to verify this by running curl between SZ<>AP. 3. If problems still persist after this step, download a support-log from the AP, and log a case with Ruckus Support.

Even when the correct '.res' certificate response package is uploaded to SZ and sent to the AP, the AP fails to download the certificate

2020-06-18T01:48:16-0700 2020-06-18T06:00:10-0700 https://support.ruckuswireless.com/articles/000010627 2020-06-17T04:23:00-0700 monthly 0.8 admin,premium knowledge_article_4232 knowledge_article_4232 2020-06-17T04:19:10-0700 000010627 Validated (External) Premium Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Performance;Configuration;System network management;Troubleshooting;Known issues and workarounds Performance, Configuration, System Network Management, Troubleshooting, Known Issues and Workarounds, SPoT How to resolve "The selected date range is too long, Please try a shorter date range" error? We need to change redis-configuration settings to increase its "maxmemory". This is required for the instance running big venues. Below are the steps to do it. Unfortunately, this setting will go to default 128 MB after the restart restart of vSPOT. So the procedure has to be applied after every restart of the VM\vSPOT. Usually, 128MB should be enough. But for instances with big venues we need to adjust it . 1. Login to the vSPOT CLI and enter the below commands. spot enter redis-cli -p 60801 config get maxmemory (To check the current memory set) CONFIG SET maxmemory <enter the max memory in bytes> ( To set the max memory). Below is the example to set the max memory to 536 MB. spot enter lbs@vspot:/storage/spot/system/log$ redis-cli -p 60801 127.0.0.1:60801> config get maxmemory 1) "maxmemory" 2) "134217728" 127.0.0.1:60801> CONFIG SET maxmemory 536870912 OK 127.0.0.1:60801>

This article helps you to resolve the error on vSPoT "The selected date range is too long, Please try a shorter date range" when generating data for the date range.

2020-06-17T04:23:00-0700 2020-06-17T06:00:10-0700 https://support.ruckuswireless.com/articles/000010273 2020-06-17T05:23:44-0700 monthly 0.8 admin,premium knowledge_article_4112 knowledge_article_4112 2020-03-30T22:19:01-0700 000010273 Validated (External) Premium Smartcell ap Configuration;Troubleshooting;Registration Configuration, Troubleshooting, Registration, SmartCell AP How can I determine the transmit power changes made by the Auto Cell Size (ACS) feature <h2> 3.6.x is a beta implementation of ACS and only modified AP transmit power based on data from AP neighbors 5.x includes full ACS implementation that modifies both AP transmit power and AP receiver sensitivity AP CLI command - get cell-size wlanx will show the maximum power the AP is configured to provide and the decrease in power based on received power measurements on neighbor AP's <img alt="User-added image" height="603" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxaT&feoid=00N50000002Cf3M&refid=0EM2J000000weOB" width="500"></img> TxPower will show the maximum power configured for the AP (this can be configured via SZ GUI at the zone, ap group or individual AP level TxPwr Offset shows the instantaneous decrease in power based on the ACS algorithm from data received from neighbor AP's This data is updated every 5 minutes Use set auto-cell <wlanx> debug 7 to see detection and power changes in the AP syslog. Return to debug 3 after testing to unburden syslog (found in support info or set logging command)</h2> <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxaT&feoid=00N50000002Cf3M&refid=0EM2J000000wfTW"></img> <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxaT&feoid=00N50000002Cf3M&refid=0EM2J000000wfTb"></img> <pre> set auto-cell <wifi name> <command> {options} </pre> <pre> mode {enable|disable} Enable / Disable Auto Cell Sizing </pre> <pre> ------------------------------------------------------------------------ </pre> <pre> debug {syslog} <log mask> Print debug message to syslog </pre> <pre> ------------------------------------------------------------------------- </pre> <pre> timer {15 - 900} Auto Cell Size run timer </pre> <pre> ------------------------------------------------------------------------- </pre> <pre> nbr_upd_timer {15 - 900} Neighbor Update timer </pre> <pre> ------------------------------------------------------------------------- </pre> <pre> co_channel_nbr_thr {-72 - -90} Co-Ch Neighbor RSSI threshol </pre> <pre> ------------------------------------------------------------------------- </pre> <pre> nbr_rssi_thr {-72 - -90} Neighbor RSSI threshod </pre> <h2> Sample messages: <img height="316" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxaT&feoid=00N50000002Cf3M&refid=0EM2J000000wfTv" width="901"></img> Update received from Neighbor AP: <img height="211" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxaT&feoid=00N50000002Cf3M&refid=0EM2J000000wfTw" width="905"></img> Log message indicating AP changed Power: <img height="139" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxaT&feoid=00N50000002Cf3M&refid=0EM2J000000wfU5" width="961"></img> Change in get auto-cell wlanx <img height="399" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxaT&feoid=00N50000002Cf3M&refid=0EM2J000000wfU0" width="1020"></img> Data from Neighbor AP's</h2> <img alt="User-added image" height="289" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxaT&feoid=00N50000002Cf3M&refid=0EM2J000001T2vN" width="610"></img>

AP CLI command get auto-cell <interface> and AP syslog commands provide information on Transmit power changes done by Auto Cell Size (ACS) feature

2020-06-17T05:23:44-0700 2020-06-17T06:00:08-0700 https://support.ruckuswireless.com/articles/000010361 2020-06-16T10:28:39-0700 monthly 0.8 admin,premium knowledge_article_4231 knowledge_article_4231 2020-04-20T05:09:40-0700 000010361 Validated (External) Premium Cloudpath;Smartcell gateway;Virtual smartcell gateway;Cloudpath Enrollment System (ES);BPG_Cloudpath;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Cloudpath, SmartCell Gateway, virtual SmartCell Gateway Why MAC Registration is failing on Cloudpath? SZ/vSZ by default encrypts MAC addresses and this is not compatible with Cloudpath, so a CLI only command <no encrypt-mac-ip> has to be issued To verify this on vSZ run command: show running-config encrypt-mac-ip from privilege mode. <img alt="Verify current config" height="127" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxZV&feoid=00N50000002Cf3M&refid=0EM2J000001pNKt" width="807"></img> To disable encryption of MAC and IP address for Wireless Internet Service Provider roaming (WISPr) enriched URL, use the following command. ruckus(config)# no encrypt-mac-ip <img alt="Disable MAC encryption" height="206" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxZV&feoid=00N50000002Cf3M&refid=0EM2J000001pNL3" width="818"></img>

This article explains the steps to trouble-shoot MAC Registration issue in Cloudpath.

2020-06-16T10:28:39-0700 2020-06-16T18:00:08-0700 https://support.ruckuswireless.com/articles/000003002 2020-06-15T12:05:51-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4227 knowledge_article_4227 2014-05-06T10:39:33-0700 000003002 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor I have an iPad connection issue, how do I identify the iPad model? There are two (2) ways to identify the Ipad device: 1. by looking at the engraving of the back of the device, the model number is labeled and then looking that model number up at http://support.apple.com/kb/ht5452 <img alt="User-added image" height="340" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxYI&feoid=00N50000002Cf3M&refid=0EM2J000001T1Uf" width="500"></img> <img alt="User-added image" height="358" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxYI&feoid=00N50000002Cf3M&refid=0EM2J000001T1Up" width="500"></img> 2. the other way of identifying the device is to look at the Settings / General section section of the iPad and then googling the P/N that is described within the General description. <img alt="User-added image" height="663" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxYI&feoid=00N50000002Cf3M&refid=0EM2J000001T1Uz" width="500"></img> <img alt="User-added image" height="571" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxYI&feoid=00N50000002Cf3M&refid=0EM2J000001T1V4" width="500"></img>

As models of new iPads come into the market, cases are opened against these without knowing the model. One of the first steps in troubleshooting an specific iPad issue is to identify it and this is what this document does; how to identify the Apple iPad model.

2020-06-15T12:05:51-0700 2020-06-15T18:00:08-0700 https://support.ruckuswireless.com/articles/000010598 2020-06-15T03:16:22-0700 monthly 0.8 admin,premium knowledge_article_4226 knowledge_article_4226 2020-06-15T03:10:31-0700 000010598 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Troubleshooting Troubleshooting, Cloudpath Why are Ipad's not able to authenticate <ul><li>Looking further into the ipad devices, we found that all the new ipad's had incorrect date and time. The year mentioned was 2026.</li><li>The Certificate that was being sent from the client had incorrect year and the Radius server was reject the Access Request.</li><li>Changing the Date and time resolved he issue. The ipad's were able to to authenticate without any problem.</li></ul> Note : Please make sure to check Date and time when you come across these kind of issues.

All the new Ipad's in the network are not able to Authenticate (Onboard)

2020-06-15T03:16:22-0700 2020-06-15T06:00:08-0700 https://support.ruckuswireless.com/articles/000010585 2020-06-08T20:53:54-0700 monthly 0.8 admin,premium knowledge_article_4224 knowledge_article_4224 2020-06-08T20:53:54-0700 000010585 Validated (External) Premium Flexmaster umm Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, FlexMaster UMM How to resolve "Duplicated Unleashed-ID" event alert in UMM? To fix this issue, identify the AP from the events which is giving the error and login to the Unleashed and renew Unleashed ID by following the below steps: <ol><li>Login Unleashed</li><li>Go to Admin& Services à System –-> system info</li><li>Click the ‘Generate’ icon to generate a new ID and then Click Apply</li></ol> <img alt="User-added image" height="232" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxWv&feoid=00N50000002Cf3M&refid=0EM2J000001Ssbc" width="705"></img>

This article helps us to understand about the "Duplicated Unleashed-ID" event and how to resolve it.

2020-06-08T20:53:54-0700 2020-06-09T00:00:08-0700 https://support.ruckuswireless.com/articles/000001731 2020-06-03T01:25:55-0700 monthly 0.8 admin,premium knowledge_article_4220 knowledge_article_4220 2013-03-05T22:02:36-0800 000001731 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Customer created roles in the ZD for different groups of users on Radius server, He has Issues while assigning proper role to the user.

Issue with assigning proper roles for users with different groups in the Radius server.

2020-06-03T01:25:55-0700 2020-06-03T06:00:16-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDEECA4?attachment_index=0 2020-06-03T06:00:16-0700 monthly admin,premium knowledge_article_4220 knowledge_article_4220_attachment_1 Assigning proper roles to the users.pdf 466791.0 application/pdf https://support.ruckuswireless.com/articles/000001763 2020-06-03T01:26:40-0700 monthly 0.8 admin,premium knowledge_article_4219 knowledge_article_4219 2013-03-05T22:10:02-0800 000001763 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor When we try to assign static Ipaddress for a standalone AP, got the error message as WAN/Data Network: The IPv4 address field is improper or empty.

Error message as IPv4 address field is improper or empty

2020-06-03T01:26:40-0700 2020-06-03T06:00:14-0700 https://support.ruckuswireless.com/articles/000001548 2020-06-03T01:27:31-0700 monthly 0.8 admin,premium knowledge_article_4218 knowledge_article_4218 2013-01-26T18:24:06-0800 000001548 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to customize the Web Authentication login Logo Customer configured a standard wlan with Web authentication server as Active directory. When a client tries to connect to this wlan and access the internet, It will redirect to the login page where the customer needs to enter the credentials of the user from the Active Directory, Customer is trying to edit this logo and want to change to his company logo. Mentioned to him that there is no option to change logo of standard Web authentication wlan but we can make changes to the guest logo for the guest wlan at configure -> Guest access -> Guest access customization.

How to customize the Web Authentication login Logo

2020-06-03T01:27:31-0700 2020-06-03T06:00:13-0700 https://support.ruckuswireless.com/articles/000001580 2020-06-03T01:28:02-0700 monthly 0.8 admin,premium knowledge_article_4217 knowledge_article_4217 2013-02-06T08:44:33-0800 000001580 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Issue while installing Intranet SSL Certificate in the Zone Director Question : Customer want to install an SSL certificate on the Zone Director, so users do not receive a certificate warning when they are redirected the login authenticate page. He would like to purchase an "intranet" SSL since it will only be accessed from within his network, but have run into a problem. For an intranet certificate, a FQDN cannot be used. On the Ruckus .CSR generation page at Configure ->Certificate, it states to use the FQDN in the common name field. Solution : Provided the below suggestions to the customer which helps him to resolve the problem. - Use something like "zd", "<a href="http://zd.com/" style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" target="_blank">zd.com</a>pany" or "<a href="http://zd.com/" style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" target="_blank">zd.com</a>pany.local" as the common name instead of "<a href="http://zd.company.com/" style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" target="_blank">ZD.company.com</a>". - "<a href="http://zd.company.com/" style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" target="_blank">zd.company.com</a>" doesn't allow us to request for a Intranet SSL certificate.( NO “.com” usage in the common name for Intranets). - Login authentication pages use IP address in the address bar so please type the correct ZD ipaddress in the subject alternative name when generating the CSR.

Issue while installing Intranet SSL Certificate in the Zone Director

2020-06-03T01:28:02-0700 2020-06-03T06:00:11-0700 https://support.ruckuswireless.com/articles/000010559 2020-06-03T01:30:04-0700 monthly 0.8 admin,premium knowledge_article_4216 knowledge_article_4216 2020-06-03T01:30:04-0700 000010559 Validated (External) Premium Ruckus diagnostic dashboard rdd Troubleshooting Troubleshooting, Ruckus Diagnostic Dashboard RDD How to query AP MAC address using the search box in RDD Searching for APs using MAC address can be found in the global search bar in the top right of the navigation bar. Make sure there are no trailing whitespaces in the search text, if there are whitespaces, no value will be return from the search. <img alt="User-added image" height="139" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxUp&feoid=00N50000002Cf3M&refid=0EM2J000001SktO" width="500"></img> <img alt="User-added image" height="217" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxUp&feoid=00N50000002Cf3M&refid=0EM2J000001SktT" width="500"></img>

The search box is not returning any value when querying any AP MAC address

2020-06-03T01:30:04-0700 2020-06-03T06:00:10-0700 https://support.ruckuswireless.com/articles/000002159 2020-06-02T02:55:58-0700 monthly 0.8 admin,premium knowledge_article_4214 knowledge_article_4214 2013-10-11T07:46:52-0700 000002159 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Active Directory Authentication with Group Extraction <div> - Created an Active Directory authentication in Zone Director at AAA server configuration.</div> <div>- Confirmed the authentication works between the Zone Director and Active Directory server.</div> <div>- In AD, Created a group called "WIFI" with few users.</div> <div>- In ZD at Configure -> Roles, modified the default role to include group name "WIFI" as the group attribute. - Created a WLAN (WIFI wlan) in ZD, checked the Captive portal and selected the AD server created for the authentication settings.</div> <div>When the client connected to WIFI wlan with an account not a part of the WIFI group, the client can still able to authenticate.Why ?</div> <div> </div> <div>Solution : </div> <div>The default role will allow access to all the users in Active Directory server so we need to create a new role and add group name as attribute to the new role. Now It doesn't allow the users out of the group to access the WLAN. </div>

2020-06-02T02:55:58-0700 2020-06-02T06:00:10-0700 https://support.ruckuswireless.com/articles/000010562 2020-06-01T19:51:30-0700 monthly 0.8 admin,premium knowledge_article_4212 knowledge_article_4212 2020-06-01T19:51:30-0700 000010562 Validated (External) Premium Unable to download report in PDF formats SCI version was on 5.2.1 Upgraded the SCI version to 5.4.2 and issue is resolved. In 5.3.1 release notes, also it has been mentioned the pdf download issue to be fixed. <img alt="User-added image" height="176" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxV4&feoid=00N50000002Cf3M&refid=0EM2J000001SmaT" width="500"></img>

Unable to download reports in PDF formats. CSV format reports are downloadable from SCI.

2020-06-01T19:51:30-0700 2020-06-02T00:00:08-0700 https://support.ruckuswireless.com/articles/000010207 2020-04-09T14:07:47-0700 monthly 0.8 admin,premium knowledge_article_4098 knowledge_article_4098 2020-03-17T08:55:50-0700 000010207 Validated (External) Premium Smartcell ap;Smartcell insight;SmartCell Insight (SCI) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell AP, SmartCell Insight Why do some AP's in SCI repots show Airtime values of 1000's percent Solution for systems running 3.6.2.0.250 (3.6.2 Patch2) is to install AP patch scg-ap-3.6.2.0-763.noarch.patch available from Ruckus Support AP will filter Airtime data that is out of normal values. Fix is in AP code version 3.6.2.0.763+ which is applicable to SZ 3.6.2.0.250 which requires uploading and applying the AP patch Fix is integrated in AP code version 5.2.0.0.1412 found in 5.2 GA build 5.2.0.0.699

Airtime displayed in SCI is not reasonable value - showing numbers in 1000's % while it should always be less then 100%

2020-04-09T14:07:47-0700 2020-05-28T06:18:58-0700 https://support.ruckuswireless.com/articles/000008834 2020-05-28T03:06:26-0700 monthly 0.8 admin,premium knowledge_article_4210 knowledge_article_4210 2019-03-13T05:15:47-0700 000008834 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway How to Configure vSZ admin login using LDAP authentication server? Step 1: Create Role/Group - Login to the SmartZone controller GUI and navigate to Administration --> Admins and Roles and Click ‘Create’ Under Groups tab. <img alt="User-added image" height="414" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8F0" width="500"></img> Step 2: Define User Permission for the created Role/Group <img alt="User-added image" height="274" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8F5" width="500"></img> Step 3: Add the resources - Add the required resources to the user group created and click Next: <img alt="User-added image" height="364" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8FA" width="500"></img> Step 4: Add/Create the Users: - Create a user and click OK: <img alt="User-added image" height="372" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8FF" width="500"></img> - Move the user from Available Users list to Selected Users and click Next: <img alt="User-added image" height="366" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8FK" width="500"></img> Step 5: Create AAA server with Type as LDAP - Go to Administration --> Admins and Roles --> AAA tab and Create LDAP server <img alt="User-added image" height="379" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8FP" width="500"></img> - Validate AAA server configuration as shown below: <img alt="User-added image" height="548" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8Fe" width="500"></img> Step 6: Create a User Group/User in AD server (windows server) to grant access: - Create a new Group in AD server (Right click and click on Add a group) Example: "vSZ-admin" <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8Fj"></img> - Add a New User in the AD server: Example: "scgadmin" <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8Fo"></img> - The user was created under test.info domain: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8Ft"></img> <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8G8"></img> - Assign a group to the New User: - User properties --> Member of --> Add --> OK <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8GD"></img> Step 7: Verify the configuration from ldp.exe - To verify Base Domain name and Admin Domain name (same as AAA server config in SmartZone controller), open ldp.exe in windows server: - Connect with port 389 for LDAP. <img alt="User-added image" height="299" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8GI" width="500"></img> - Bind: Once connected, Bind with administrator user: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8GS"></img> - Tree view: Validate the tree view and option is available in view option. - View -->Tree View --> BaseDN --> OK <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8GX"></img> - Base Domain Name: - Find the Organizational Unit (ou) which has user group (Example: vSZ-admin, the group which should has access to SmartZone Controller). - For the New User (scgadmin) is created in test.info/User, the base domain name should be CN=Users,DC=test,DC=info - Verify the DN. <img alt="User-added image" height="232" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8Hu" width="500"></img> - Admin Domain Name: - Find the administrator user in the tree and verify the DN: - In this scenario, It should be CN=Administrator,CN=Users,DC=test,DC=info <img alt="User-added image" height="178" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8Hz" width="500"></img> Step 8: AAA Test - Perform AAA test to check if configuration of AAA server is correct: <img alt="User-added image" height="399" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8IT" width="500"></img> Step 9: Admin Login - User can logon to SmartZone controller by using the following format Username@Realm_Name and password: <img alt="User-added image" height="301" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8In" width="500"></img> - Once logged in, validate the user account from the right hand corner as shown below. - The User will be same as the Admin User created in the SmartZone under AAA server configuration from step4. <img alt="User-added image" height="159" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054WE&feoid=00N50000002Cf3M&refid=0EM2J000000m8Is" width="500"></img> Note: LDAPs is currently not supported for the Admin authentication logon.

Configuration assistance for the Admin User authentication using LDAP (Windows Server based) on SmartZone or vSZ platform

2020-05-28T03:06:26-0700 2020-05-28T06:00:14-0700 https://support.ruckuswireless.com/articles/000001573 2020-05-28T03:19:24-0700 monthly 0.8 admin,premium knowledge_article_4209 knowledge_article_4209 2013-02-24T19:45:00-0800 000001573 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Installation;Known issues and workarounds Firmware, Installation, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor Can we use both ZF2925 and ZF7341 together with same Zone Director No, it is not compatible to use both ZF2925 and ZF7341 together to be managed by a ZD. Because ZF 2925 is compatible to work with ZD till 8.1 firmware version and ZF 7341 is compatible to work only with 8.2 and above firmware version.

This article provides information about using both ZF2925 and ZF7341 APs together on a same ZD

2020-05-28T03:19:24-0700 2020-05-28T06:00:12-0700 https://support.ruckuswireless.com/articles/000010543 2020-05-28T04:56:07-0700 monthly 0.8 admin,premium knowledge_article_4208 knowledge_article_4208 2020-05-28T04:56:07-0700 000010543 Validated (External) Premium Virtual smartcell gateway Configuration;Troubleshooting Configuration, Troubleshooting, virtual SmartCell Gateway In wipsr non proxy with external AAA, AP is not sending Radius request to external server? From the configuration it may seem like non-proxy RADIUS is supported in WISPr, but the call flow goes through the controller. Hence, if the vSZ controller does not have access to AAA server in a non-proxy setup then WISPr authentication will not work. <img alt="User-added image" height="142" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxTh&feoid=00N50000002Cf3M&refid=0EM2J000001SjE5" width="500"></img>

Wispr authentication with non-proxy external AAA is only possible if controller has access to send radius request to external AAA server.

2020-05-28T04:56:07-0700 2020-05-28T06:00:10-0700 https://support.ruckuswireless.com/articles/000010442 2020-05-26T17:16:17-0700 monthly 0.8 admin,premium knowledge_article_4168 knowledge_article_4168 2020-04-29T15:08:02-0700 000010442 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Installation;Known issues and workarounds Firmware, Installation, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway Why can Ruckus APs with solo image 114.0.x fail to join SmartZone Controller? TBD at this time. Refer to the TSB attached.

This Article describes a condition of AP joining issues with SmartZone from Solo AP image 114.0.x.x.

2020-05-26T17:16:17-0700 2020-05-26T18:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000PiTsSAK?attachment_index=0 2020-05-26T18:00:09-0700 monthly admin,premium knowledge_article_4168 knowledge_article_4168_attachment_1 TSB-2020-007 Solo AP-SZ SSH fail.pdf 233482.0 application/pdf https://support.ruckuswireless.com/articles/000010527 2020-05-25T04:31:33-0700 monthly 0.8 admin,premium knowledge_article_4206 knowledge_article_4206 2020-05-25T04:31:33-0700 000010527 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;System network management;Known issues and workarounds Installation, System Network Management, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why uploaded signature package is not showing on SmartZone controller GUI and still shows old one? Issue is with Safari browser (OS) and how it handles some specific type of file extension. Avoid using Safari for file download from support portal. <ul><li>Do not use Safari browser to download the file as it will corrupt the file.</li><li>Recommended browser is Google Chrome.</li><li>Post downloading the sigpack file, check the MD5 checksum of downloaded file and make sure it matches with support portal page file checksum.</li></ul> <img height="243" size="59159" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxRC&feoid=00N50000002Cf3M&refid=0EM2J000001ShLi" width="829"></img>

This article explains why uploading application signature package do not actually change it to uploaded package and still shows old signature package on vSZ controller GUI when sigpack file downloaded by Safari browser

2020-05-25T04:31:33-0700 2020-05-25T06:00:08-0700 https://support.ruckuswireless.com/articles/000009675 2019-08-02T16:07:00-0700 monthly 0.8 admin,premium knowledge_article_3907 knowledge_article_3907 2019-08-02T16:07:00-0700 000009675 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Firmware Configuration, Firmware, ZoneFlex Indoor, ZoneFlex Outdoor How do I configure AP Ethernet port settings? Find this information in SmartZone 5.1.1 Administrator Guide (vSZ-H / SZ300), starting on page 87 for definitions, and page 380 for how to apply the definitions (creating an Ethernet port profile). https://support.ruckuswireless.com/documents/2801-smartzone-5-1-1-mr1-administrator-guide-sz300-vsz-h Configuring the Port Settings of a Particular AP Model Use Port Settings in the AP Model-Specific Configuration section to configure the Ethernet ports of a particular AP model. Follow these steps to configure the port settings of a certain AP model. 1. All ports are enabled by default (the Enable check boxes are all selected). To disable a particular port entirely, clear the Enable check box next to the port name (LAN1, LAN2, etc.) 2. For any enabled ports, you can choose whether the port will be used as a Trunk Port, Access Port, or General Port. The following restrictions apply: • All APs must be configured with at least one Trunk Port. NOTE You cannot move an AP model to an AP group and configure the AP model to use a trunk port at the same time, if general ports are enabled when trunk port limitation is disabled. You must configure the selected AP model to use at least one trunk port, and then move the AP model to the AP group. • For single port APs, the single LAN port must be a trunk port and is therefore not configurable. • For ZoneFlex 7025/7055, the LAN5/Uplink port on the rear of the AP is defined as a Trunk Port and is not configurable. The four front-facing LAN ports are configurable. • For all other APs, you can configure each port individually as either a Trunk Port, Access Port, or General Port. See Designating an Ethernet Port Type on page 88 for more information. Designating an Ethernet Port Type Ethernet ports can be configured as access ports, trunk ports, or general ports. Trunk links are required to pass VLAN information between switches. Access ports provide access to the network and can be configured as members of specific VLANs, thereby separating the traffic on these ports from traffic on other VLANs. General ports are user-defined ports that can have any combination of up to 20 VLAN IDs assigned. For most ZoneFlex APs, you can set which ports you want to be your Access, Trunk and General Ports from the controller web interface, as long as at least one port on each AP is designated as a Trunk Port. By default, all ports are enabled as Trunk Ports with Untag VLAN set as 1 (except for ZoneFlex 7025, whose front ports are enabled as Access Ports by default). If configured as an Access Port, all untagged ingress traffic is the configured Untag VLAN, and all egress traffic is untagged. If configured as a Trunk Port, all untagged ingress traffic is the configured Untag VLAN (by default, 1), and all VLAN-tagged traffic on VLANs 1-4094 will be seen when present on the network. The default Untag VLAN for each port is VLAN 1. Change the Untag VLAN to: • Segment all ingress traffic on this Access Port to a specific VLAN. • Redefine the native VLAN on this Trunk Port to match your network configuration. When trunk port limitation is disabled using the eth-port-validate-one-trunk disable command, validation checks are not performed for the VLAN members and the AP Management VLAN. If the AP configuration for general ports and access ports does not include a member of an AP management VLAN, or the VLAN of a WAN interface configured through CLI, the AP will disconnect and the Ethernet port stops transmitting data. Make sure that you configure the correct VLAN member in the ports (general/access) and the AP management VLAN. NOTE Ensure that at least one of the general port VLANs is the same as a Management VLAN of the AP. Access Ports Access ports provide access to the network and can be configured as members of a specific VLAN, thereby separating the traffic on these ports from traffic on other VLANs. All Access Ports are set to Untag (native) VLAN 1 by default. This means that all Access Ports belong to the native VLAN and are all part of a single broadcast domain. When untagged frames from a client arrive at an AP’s Access Port, they are given an 802.1Q VLAN header with 1 as their VLAN ID before being passed onto the wired network. When VLAN 1 traffic arrives destined for the client, the VLAN tag is removed and it is sent as plain (untagged) 802.11 traffic. When any tagged traffic other than VLAN 1 traffic arrives at the same Access Port, it is dropped rather than forwarded to the client. To remove ports from the native VLAN and assign them to specific VLANs, select Access Port and enter any valid VLAN ID in the VLAN ID field (valid VLAN IDs are 2-4094). The following table describes the behavior of incoming and outgoing traffic for Access Ports with VLANs configured. TABLE 10 Access Ports with VLANs configured VLAN Settings................................ Incoming Traffic (from Client)...............................Outgoing Traffic (to Client) Access Port, Untag VLAN 1 .............All incoming traffic is native VLAN (VLAN 1). .......All outgoing traffic on the port is sent untagged. Access Port, Untag VLAN [2-4094] ...All incoming traffic is sent to VLANs specified. ....Only traffic belonging to the specified VLAN is forwarded. All other VLAN traffic is dropped. Trunk Ports Trunk links are required to pass VLAN information between switches. Trunking is a function that must be enabled on both sides of a link. If two switches are connected together, for example, both switch ports must be configured as trunk ports. The trunk port is a member of all the VLANs that exist on the AP/switch and carries traffic for all VLANs between switches. For a trunk port, the VLAN Untag ID field is used to define the native VLAN - the VLAN into which untagged ingress packets are placed upon arrival. If your network uses a different VLAN as the native VLAN, configure the AP trunk port’s VLAN Untag ID with the native VLAN used throughout your network. General Ports General ports are user-specified ports that can have any combination of up to 20 VLAN IDs assigned. General ports function similarly to Trunk ports, except that where Trunk ports pass all VLAN traffic, General ports pass only the VLAN traffic that is defined by the user. To configure an AP Ethernet port as a General port, select General Port and enter multiple valid VLAN IDs separated by commas or a range separated by a hyphen. NOTE You must also include the Untag VLAN ID in the Members field when defining the VLANs that a General port will pass. For example, if you enter 1 as the Untag VLAN ID and want the port to pass traffic on VLANs 200 and 300, you would enter: 1,200,300.

Enabled ports can be used as Trunk port, Access port, or General port. This article provides definitions and application details.

2019-08-02T16:07:00-0700 2020-05-22T10:28:28-0700 https://support.ruckuswireless.com/articles/000010518 2020-05-19T05:47:56-0700 monthly 0.8 admin,premium knowledge_article_4203 knowledge_article_4203 2020-05-19T05:40:03-0700 000010518 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;Configuration;Troubleshooting;Known issues and workarounds Performance, Configuration, Troubleshooting, Known Issues and Workarounds, Unleashed Why AP power mode changes back to 802.3af after a reboot <ul><li>Change the AP power mode using the Unleashed GUI</li><li>Select the AP--> Edit-->Other--> Enabled "PoE Operating Mode" overide group config and select 802.3at POE</li></ul> <img alt="User-added image" height="233" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxQ4&feoid=00N50000002Cf3M&refid=0EM2J000001Sdzj" width="500"></img> <ul><li>Now reboot the AP and the POE mode does not change to 802.3af</li></ul> ruckus(ap-mode)# get power-mode PoE Configured Mode : AT Power Consumption Status : 802.3at Switch/Injector OK ruckus(ap-mode)#

This article explains how we can make the AP to sustain 802.3at or 802.at+ power even after a reboot

2020-05-19T05:47:56-0700 2020-05-19T06:00:09-0700 https://support.ruckuswireless.com/articles/000010500 2020-05-17T14:35:22-0700 monthly 0.8 admin,premium knowledge_article_4201 knowledge_article_4201 2020-05-17T14:35:22-0700 000010500 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How to resolve unable to cancel firmware upgrade schedule for ICX switches <ul><li>Software defect has been fixed in Smart Zone controller version 5.2.0.0.699 or higher</li><li>Please upgrade accordingly</li></ul>

2020-05-17T14:35:22-0700 2020-05-17T18:00:13-0700 https://support.ruckuswireless.com/articles/000009775 2020-05-16T19:26:59-0700 monthly 0.8 admin,premium knowledge_article_4198 knowledge_article_4198 2019-09-30T00:40:08-0700 000009775 Validated (External) Premium Ruckus icx switches;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches, SmartCell Gateway Why ICX switches are not able to join the controller? Known HTTP Error Codes and how to resolve them. a) HTTP Error Code 400 – Authentication - Verify the device certification on ICX. - configure 'non-tpm-switch-cert-validate' on SZ. b) HTTP Error Code 401 - Unauthorized switch (switch not recognized by SZ or not pre-approved) - Move the ICX switch manually from the default group or create a switch registration rule for SmartZone to automatically add the switch to an existing group. Screenshots from vSZ attached for reference. c) HTTP Error Code 403 – Switch registration rejected by SZ due to license capacity. - Add licenses on SmartZone, or reconfigure the ICX switch to use another SmartZone device. d) HTTP Error Code 500 - SZ server encountered an unexpected condition that prevented it from fulfilling the request. - Make sure SmartZone is up and running without errors. e) HTTP Error Code 503 - The volume of switches is over system capacity or Switch was deleted. - Reconfigure the ICX switch to use another SmartZone device

What are the meanings of HTTP error codes and how to resolve them

2020-05-16T19:26:59-0700 2020-05-17T00:00:08-0700 https://support.ruckuswireless.com/articles/000010128 2020-05-13T21:02:20-0700 monthly 0.8 admin,premium knowledge_article_4196 knowledge_article_4196 2020-02-21T04:35:33-0800 000010128 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Insight Why does SCI Web interface report an error when I try to login? Please troubleshoot if it is the license issue with the troubleshooting steps above, and log a Support case if the issue persists with valid license.

User experiencing "An error occurred logging you in" on SCI GUI which maybe a problem of no valid license

2020-05-13T21:02:20-0700 2020-05-14T00:00:08-0700 https://support.ruckuswireless.com/articles/000010079 2020-05-13T14:07:23-0700 monthly 0.8 admin,premium knowledge_article_4194 knowledge_article_4194 2020-01-16T14:15:03-0800 000010079 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Security;Known issues and workarounds;Support license activation;Registration Firmware, Security, Known Issues and Workarounds, Support License Activation, Registration, ZoneDirector What is the recommended ZoneDirector upgrade procedure for various version levels? The following are ZoneDirector backup / upgrade best practices, designed to assist customers who may be at risk per a Security vulnerability, ie ID-20191224. Step 1: Determine your ZD serial number and current firmware version. In ZD 9.13 and earlier, go to the ZD WebUI Dashboard tab, info is displayed. In ZD 10.x and later, ZD version is found on Dashboard tab, and Serial Number is found under System-> System Info. Write down your ZD serial number for reference. Step 2: See Security Bulletin table to determine the right secure patched version for your ZD model(s). <a href="https://support.ruckuswireless.com/security_bulletins/299" style="color: #0563c1; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/security_bulletins/299</a> <img alt="User-added image" height="240" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054oN&feoid=00N50000002Cf3M&refid=0EM2J000000w4ZD" width="636"></img> Retrieve a copy of the firmware from the ZoneDirector product page on Support portal. <a href="https://support.ruckuswireless.com" style="color: #0563c1; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com</a> Save the ZD firmware image to your PC. Step 3: Backup your ZoneDirector; Save backup file with version digits in filename. From ZD WebUI, go to Administer -> Backup, click the button to save ZD backup file. Save the .bak file to your PC. Edit the filename to include the version you are running before upgrading, ie mbZD_db_9.13.3.0.164_010320_13_24.bak is from 9.13.3.0.164. Step4: Retrieve temporary entitlement file. Go to <a href="https://supportactivation.ruckuswireless.com" style="color: #0563c1; text-decoration: underline;" target="_blank">https://supportactivation.ruckuswireless.com</a> Enter your ZD serial number, and click Submit button. Save the .spt file to your PC. Step 5: Install temporary entitlement file. In ZD 9.13 and earlier, go to Administer -> Support and under Support services, click Browse, and point to the .spt file on your PC. In ZD 10.x and later, from Administer -> Support, click on Update Services by File, click Browse, and point to the the .spt file on your PC. When installed, the ZD will display a notice that Entitlement expires in seven (7) days. Step 6: Install secure patch ZD firmware upgrade. Go to Administer -> Upgrade, under Software Upgrade, browse to the secure patch ZD firmware you saved earlier. When the file is fully loaded, Browse will be replaced by Upgrade. Click Upgrade to complete the process. Note: You will be prompted to save a backup before continuing, but you already have so you can click Cancel, and continue when you see this notice. The ZoneDirector will reboot after upgrade, and WebUI page should refresh to Login. Familiarize yourself with any new look/feel changes in ZD WebUI after upgrade.

Steps are provided for performing a backup / upgrade to ZoneDirector controllers, on various version levels.

2020-05-13T14:07:23-0700 2020-05-13T18:00:13-0700 https://support.ruckuswireless.com/articles/000009469 2020-05-13T14:27:08-0700 monthly 0.8 admin,premium knowledge_article_4148 knowledge_article_4148 2019-07-05T07:05:57-0700 000009469 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware;Installation Configuration, Firmware, Installation, Unleashed What is the maximum APs supported in an Unleashed network? In 200.7 release maximum supported APs in the Unleashed network have grown to 50 AP's. It is applicable only if the AP's models all are Wave2 802.11ac capable and if Gateway mode is not enabled. If the Master AP is deployed in Gateway Mode, the maximum number remains 25 APs. When <a href="https://support.ruckuswireless.com/documents/3125-ruckus-unleashed-200-8-ga-release-notes" target="_blank" title="Ruckus Unleashed 200.8 (GA) Release Notes ">Ruckus Unleashed 200.8 (GA)</a> got released and the maximum number of AP supports got increased. Unleashed now supports up to 128 APs and 2,048 clients in bridge mode. In gateway mode, a maximum of 50 APs and 1,028 clients is supported. And this increase applies only to Unleashed 802.11 ac Wave 2 or newer generation APs such as WiFi 6 APs. 802.11ac Wave 1 APs are no longer supported. Unleashed R310, R500, R600, and T300 series do not support firmware release 200.8 Note: Before 200.7 firmware version the maximum APs supported in the Unleashed network is 25. See attached Release Notes. <a href="https://support.ruckuswireless.com/documents/3125-ruckus-unleashed-200-8-ga-release-notes" target="_blank">https://support.ruckuswireless.com/documents/3125-ruckus-unleashed-200-8-ga-release-notes</a>

Maximum AP's supported in Unleashed network changed after 200.7 and 200.8 versions

2020-05-13T14:27:08-0700 2020-05-13T18:00:10-0700 https://support.ruckuswireless.com/articles/000005962 2019-06-30T16:12:27-0700 monthly 0.8 admin,premium knowledge_article_2395 knowledge_article_2395 2016-08-03T11:15:01-0700 000005962 Validated (External) Premium Ruckus cloud wifi;Unleashed;Zonedirector;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi, Unleashed, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway Why does Chrome/Android browser have a problem with Captive Portal in WiSPr or Guest Access service? Browse to a website that does not use HSTS, complete the authentication, then browse to any site.

Browser protection mechanism can affect WiSPr and Guest Access portal redirection.

2019-06-30T16:12:27-0700 2020-05-07T13:17:46-0700 https://support.ruckuswireless.com/articles/000006504 2020-05-06T16:01:20-0700 monthly 0.8 admin,premium knowledge_article_4186 knowledge_article_4186 2018-08-01T14:38:42-0700 000006504 Validated (External) Premium Icx 7250;Ruckus ICX 7250 Campus Switches Performance;Known issues and workarounds Performance, Known Issues and Workarounds, ICX 7250 Why ports lose POE when a ower is disconnected from EPS4000 This is expected, If a power supply is removed the EPS 4000 is not able to provide enough power to all POE ports on the switch, need to have a t least one more POE power supply in order to prevent ports from loosing power when a power supply on the EPS 4000 fails.

Several ports on ICX switch stops providing power to connected PDs, when a power supply in an EPS4000 (external power supply) fails or is removed.

2020-05-06T16:01:20-0700 2020-05-06T18:00:29-0700 https://support.ruckuswireless.com/articles/000008455 2020-05-06T16:08:57-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4183 knowledge_article_4183 2018-10-22T10:58:17-0700 000008455 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware;Installation;Security;Known issues and workarounds Configuration, Firmware, Installation, Security, Known Issues and Workarounds, Unleashed Why doesn't WPA/TKIP work for Unleashed? WPA/TKIP is not an option in 200.5 or newer SW versions of Unleashed. The last SW version available where one can still configure WPA/TKIP is in 200.4 SW version. The change is supported in 200.4 only via CLI. Here are 2 examples in 200.4 of configuring WPA, WPA/TKIP and WPA/auto, within the Unleashed master AP: ruckus(config)# wlan wpa {creates WLAN with wpa as name} ruckus(config-wlan)# open wpa passphrase 12345678 algorithm TKIP {authentication method type wpa with tkip encryption} ruckus(config-wlan)# open wpa-mixed passphrase 123456789 algorithm auto {authentication mehtod type wpa-mixed with auto encryption} To confirm that the TKIP only client has associated successfully: rkscli: get station wlan0 list all ADDR AID VLAN CHAN RSSI IDLE CAPS STATE HTCAPS/VHTCAPS ADMITTEDBW b8:8a:60:c4:83:94 1Y 1 1 85 0 ESS PRIV SHTPRE QOS ERP Normal 0 WPA TKIP TKIP PSK WME If you configure the WLAN in 200.4 and then upgrade to 200.5+ SW, keep in mind that you won't be able to modify the WLAN once upgraded. After upgrade, you will be able to delete the WLAN, change to WPA2 (or none as authentication), but not modify further the auth. method.

WPA/TKIP is not an option in 200.5 or newer SW versions of Unleashed. The last SW version available where one can still configure WPA/TKIP is in 200.4 SW version.

2020-05-06T16:08:57-0700 2020-05-06T18:00:24-0700 https://support.ruckuswireless.com/articles/000009477 2020-05-06T16:11:04-0700 monthly 0.8 admin,premium knowledge_article_4181 knowledge_article_4181 2019-07-01T02:04:37-0700 000009477 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway How to enable packet capture on AP's using WEB UI from SZ/vSZ User can enable packet streaming feature on both wired and wireless interfaces on specified APs using web UI. You must enable this feature on a per-AP basis. It allows multiple users to execute AP packet capturing, but only a single AP can execute one capturing task at a time. For a single user can capture tasks in multiple APs, but batch operation is not allowed. Only users with full access permission can execute AP packet capturing. Steps to configure Packet Capture: 1) From the Access Points page, select the AP from the list. 2) Click More and select Packet Capture. The Packet Capture dialog box appears. <img alt="Packet Capture" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000PxKf&feoid=00N50000002Cf3M&refid=0EM2J000000ueF6"></img> 3) Configure the Capture Mode: a) Stream to Wireshark: Capture Interface Select the required wireless or wired interface - For 2.4 GHz/5 GHz, update the following details: ->Wireshark station IP: Enter the IP address. ->MAC Address Filter: Enter the MAC address. ->Frame Type Filter: Click the required options from Management, Control, and Data. - For Wired Interface, update the following details: ->Wireshark station IP: Enter the IP address. ->LAN Port: Choose the LAN port. b) Save to file: Capture Interface Select the required wireless or wired interface - For 2.4 GHz/5 GHz, update the following details: ->MAC Address Filter: Enter the MAC address. ->Frame Type Filter: Click the required options from Management, Control, and Data. - For Wired Interface, update the following details: ->Wireshark station IP: Enter the IP address. ->LAN Port: Choose the LAN port. 4) Click Start.

This article provides information on configuring packet capture for APs on SZ/vSZ

2020-05-06T16:11:04-0700 2020-05-06T18:00:21-0700 https://support.ruckuswireless.com/articles/000003601 2020-05-06T16:17:59-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4180 knowledge_article_4180 2014-11-17T09:38:32-0800 000003601 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why Panasonic tough books are not connecting to Zero-IT wlan ? - Disabled 802.11r FT Roaming and 802.11k Neighbor-list Report. - The Panasonic laptops with windows XP started to join the Zero-IT wlan without any problem.

Zero IT not properly getting set up on windows xp

2020-05-06T16:17:59-0700 2020-05-06T18:00:19-0700 https://support.ruckuswireless.com/articles/000004024 2020-05-06T16:21:31-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4179 knowledge_article_4179 2015-03-12T17:36:13-0700 000004024 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Why does the virtual machine cannot pass any traffic on a bridge mode? Disabled the "force DHCP" on the WLAN.

Virtual machine not able to access the network when the interface is set to bridge mode

2020-05-06T16:21:31-0700 2020-05-06T18:00:18-0700 https://support.ruckuswireless.com/articles/000003375 2020-05-06T16:29:11-0700 monthly 0.8 admin,premium knowledge_article_4178 knowledge_article_4178 2014-09-09T03:01:46-0700 000003375 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector Which RADIUS servers support the RadSec? You need ZD firmware 9.9 or above to enable RadSec. Here are the steps involved in the configuration process of setting up ZD as a RadSec authenticator: 1. Login to the ZD's web interface and go to the Configure --> AAA Servers page 2. Create a AAA server entry 3. Check the TLS encryption option and type in the server's IP address, shared secret. For the ZD to trust the AAA server's cert authority, you need to load the corresponding root CA's cert into the ZD. This needs to be done from the Configure --> Certificate --> Advanced Options --> Add a trusted CA section.

This article lists TLS versions that are supported by RadSec feature on the ZD and commercial RADIUS servers that support this feature.

2020-05-06T16:29:11-0700 2020-05-06T18:00:16-0700 https://support.ruckuswireless.com/articles/000002879 2020-05-06T16:43:45-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4174 knowledge_article_4174 2014-04-08T01:18:04-0700 000002879 Validated (External) Public Flexmaster umm System network management System Network Management, FlexMaster UMM Is there a single association event report I can generate that gives me detailed information of the client? FlexMaster's monitor section gives insight into past and current status of the network. Reports can be generated for performance, alerts, and events from the Monitor tab. One of the significant reports of interest could be who is joining the network and at what time. To get this report, admin can follow the below procedure: 1. Click on Events under the Monitor 2. Choose "Event Type", "Exactly equals", and "Client join" from the dropdowns. Then click on the "Query" button. 3. This will show all events saved in the database. (Number of events that can be saved under the FM is controlled by a purge policy which is under Administer, System Settings. Looks for events older than setting.) These events can be exported to a XLS or CSV file from this screen. As you will see this report doesn't have many details of the client device. The only way to get such information is through a query directly from the database. This requires MySQL shell access. Assuming you have the details of MySQL database credentials setup at the time of FM install, here is how to login to MySQL's shell to issue the required query: 1. Login to the FM machine using a SSH terminal such as PuTTY. 2. Go to the mysql folder using the "cd /opt/FlexMaster/3rdparty/mysql/mysql-enterprise-5.1.53-linux-x86_64-glibc23/" command. 3. Issue the "./bin/mysql -S ./mysql.sock -ur -uroot -pmyP@$$@123" command to drop into the mysql prompt. Here "root" is the mysql username and "myP@$$@123" is the mysql password. 4. At the "mysql>" prompt type "use itms;" command. 5. Now type the "SELECT e.clientMAC AS 'Client MAC',c.os AS 'Device Info', c.hostName AS 'Host Name', c.manufacture AS 'Vendor', e.eventAttr, e.timest AS 'Association date' FROM (SELECT clientmac, eventattr,FROM_UNIXTIME(devicetimestamp) AS timest,zdapmac FROM event WHERE eventTypeid=10148 ORDER BY devicetimestamp) e LEFT JOIN zdclient c ON c.mac=e.clientMAC INTO OUTFILE '/tmp/client_association_step1_new.csv' FIELDS TERMINATED BY ',' ESCAPED BY '\\' LINES TERMINATED BY '\n';" command to get the client association event report in the desired format. This report gets saved in a .csv format under the /tmp folder as desired above.

Default client association event can be obtained from the FM GUI. But these events don't give client OS details. Following query will provide client's MAC address, OS, username if it is a captive portal or a dot1x SSID, AP's MAC address, and join time.

2020-05-06T16:43:45-0700 2020-05-06T18:00:09-0700 https://support.ruckuswireless.com/articles/000003631 2020-05-06T16:45:37-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4173 knowledge_article_4173 2014-11-19T15:33:31-0800 000003631 Validated (External) Public Zoneflex 7731 Performance;Troubleshooting Performance, Troubleshooting, ZoneFlex 7731 What does the Up/Down parameter on the Status/Wireless GUI page signify? This is a counter showing the number of times the wireless link has been established/disconnected since the last system reboot. If the connection is going up and down and you don't know if it is wireless/wire related, this will assist in determining whether the wireless is the issue.

This document defines the Up/Down parameter found in the Status Wireless page of the 7731 GUI.

2020-05-06T16:45:37-0700 2020-05-06T18:00:07-0700 https://support.ruckuswireless.com/articles/000010386 2020-05-06T03:38:44-0700 monthly 0.8 admin,premium knowledge_article_4154 knowledge_article_4154 2020-04-27T05:30:03-0700 000010386 Validated (External) Premium Virtual smartcell gateway Installation Installation, virtual SmartCell Gateway How to install vSZ on Azure? Please find the attached document with the instructions for installing the vSZ on the Microsoft Azure Cloud Platform. Points to be noted: <ul><li> As of now, we do not support the 3-interface installation of vSZ on cloud platforms. Only a single interface configuration is possible for now. </li><li>Console access to the vSZ can be achieved by following the below instructions.</li></ul> <div style="margin-left: 80px;"><a href="https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/serial-console-overview" target="_blank">https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/serial-console-overview</a></div> <ul><li>Make sure to allow all the required ports on the Azure's firewall/Inbound Security Rules for AP connectivity, upgrades, etc., Refer to the vSZ getting started guide for more details. </li></ul>

This article provide details on how to install a vSZ on Microsoft Azure cloud platform.

2020-05-06T03:38:44-0700 2020-05-06T06:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000PiRcSAK?attachment_index=0 2020-05-06T06:00:08-0700 monthly admin,premium knowledge_article_4154 knowledge_article_4154_attachment_1 vsz-installation-ms-azsure-technote.pdf 1924054.0 application/pdf https://support.ruckuswireless.com/articles/000010475 2020-05-05T01:29:49-0700 monthly 0.8 admin,premium knowledge_article_4172 knowledge_article_4172 2020-05-05T01:29:49-0700 000010475 Validated (External) Premium Ruckus icx switches Performance;Troubleshooting Performance, Troubleshooting, Ruckus ICX Switches Why gig-default-neg-off-config-on-FCX648s-fiber-port-brings-the-link-down ? This is a software defect fixed under FI-207613. Fix is available in FI08.0.30u image.

'gig-default neg-off' configuration on FCX648s-HPOE fiber port brings the link down and requires reload to bring up the link

2020-05-05T01:29:49-0700 2020-05-05T06:00:13-0700 https://support.ruckuswireless.com/articles/000008026 2020-05-05T02:57:27-0700 monthly 0.8 admin,premium knowledge_article_4171 knowledge_article_4171 2018-06-22T08:31:04-0700 000008026 Validated (External) Premium Spot lbs;Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SPoT LBS, SPoT How to Pull the Unique Visitors MAC Address using vSpot API Call? 1. Login to vSpot:- <img alt="User-added image" height="214" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054gx&feoid=00N50000002Cf3M&refid=0EM2J000001SYOi" width="500"></img> 2. Select API Explorer:- <img alt="User-added image" height="302" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054gx&feoid=00N50000002Cf3M&refid=0EM2J000001SYOn" width="500"></img> 3. Authenticate using API call:- <img alt="User-added image" height="382" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054gx&feoid=00N50000002Cf3M&refid=0EM2J000001SYOs" width="500"></img> <img alt="User-added image" height="442" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054gx&feoid=00N50000002Cf3M&refid=0EM2J000001SYOx" width="500"></img> 4. Authentication Response:- <img alt="User-added image" height="472" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054gx&feoid=00N50000002Cf3M&refid=0EM2J000001SYP2" width="500"></img> Note: Copy the API Key from the above result 5. Enter the API Key and hit Apply. Note: Nothing happens after this, the screen remains the same. No result expected: <img alt="User-added image" height="384" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054gx&feoid=00N50000002Cf3M&refid=0EM2J000001SYP7" width="500"></img> 6. To Pull the Unique Mac address list:- <img alt="User-added image" height="408" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054gx&feoid=00N50000002Cf3M&refid=0EM2J000001SYPC" width="500"></img> 7. Enter the required fields depending on the reports and hit ‘Try it Out’:- <img alt="User-added image" height="435" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054gx&feoid=00N50000002Cf3M&refid=0EM2J000001SYPH" width="500"></img> <img alt="User-added image" height="407" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054gx&feoid=00N50000002Cf3M&refid=0EM2J000001SYPM" width="500"></img> It takes some time to show the results:- <img alt="User-added image" height="229" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054gx&feoid=00N50000002Cf3M&refid=0EM2J000001SYOP" width="500"></img> After some time, you will have a response:- <img alt="User-added image" height="394" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054gx&feoid=00N50000002Cf3M&refid=0EM2J000001SYPR" width="500"></img>

To pull the Unique Visitors MAC Address using the vSpot API Call

2020-05-05T02:57:27-0700 2020-05-05T06:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA2500000008nTPCAY?attachment_index=0 2020-05-05T06:00:10-0700 monthly admin,premium knowledge_article_4171 knowledge_article_4171_attachment_1 UniqueVisitorMACAddress-APICall.pdf 1126424.0 application/pdf https://support.ruckuswireless.com/articles/000010443 2020-04-30T09:48:46-0700 monthly 0.8 admin,premium knowledge_article_4159 knowledge_article_4159 2020-04-29T15:20:27-0700 000010443 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway Why do APs with Static IPs fail to connect to SZ 5.2 Dual Stack Zones? After upgrading SmartZone to 5.2, apply official <a href="https://support.ruckuswireless.com/software/2462-smartzone-ap-patch-prior-to-moving-802-11ac-wave1-aps-to-5-2-ga-refresh-sz300-sz-100-vsz" target="_blank">AP_Patch_5.2.0.0.5030</a> to the SmartZone and upgrade directly to 5.2.0.0.5030 to avoid APs disconnecting from SmartZone.

APs with Static IP addresses can fail to connect to SZ 5.2 Dual-Stack Zones.

2020-04-30T09:48:46-0700 2020-04-30T12:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA22J000000PiTxSAK?attachment_index=0 2020-04-30T12:00:09-0700 monthly admin,premium knowledge_article_4159 knowledge_article_4159_attachment_1 TSB-2020-008 SZ 5.2-AP Conn loss.pdf 229165.0 application/pdf https://support.ruckuswireless.com/articles/000010396 2020-04-30T02:15:27-0700 monthly 0.8 admin,premium knowledge_article_4163 knowledge_article_4163 2020-04-30T02:15:27-0700 000010396 Validated (External) Premium Zonedirector 3000;ZoneDirector 3000 Security;Known issues and workarounds Security, Known Issues and Workarounds, ZoneDirector 3000 Customer running 2 ZDs both of which are running the firmware 10.2.1.0 build 159 that addressed the latest security vulnerability Allowed HTTP Methods: OPTIONS, GET, HEAD, POST, PUT, DELETE The web server framework for ZD is AppWeb, the version is 3.4.2. It does support the risky "PUT" and "DELETE" method by default. But for ZD, we don't have the backend code to handle the "PUT" and "DELETE" method, it means even if the webserver does receive the "PUT" or "DETELTE" request from the browser, we simply drop the request. So the attack will be mitigated. The latest version of AppWeb has disabled the risky "PUT" and "DELETE" method by default. The ways to address the issue are: 1. Upgrade the AppWeb to the latest version 2. Investigate the AppWeb server source code and patch it by ourselves. Given the real impact should below as ZD should simply drop those "PUT"/"Delete" requests, meanwhile upgrade app webs would take huge effort since lots of features have a dependency on it. PUT and DELETE HTTP methods are fixed in 10.4 version.

The Nessus operator assessed vulnerabilities against ZD using Nessus Professional Version 8.9.0, and detected "Allowed HTTP Methods: PUT, DELETE" vulnerability

2020-04-30T02:15:27-0700 2020-04-30T06:00:14-0700 https://support.ruckuswireless.com/articles/000010281 2020-04-27T14:36:05-0700 monthly 0.8 admin,premium knowledge_article_4109 knowledge_article_4109 2020-03-30T22:21:51-0700 000010281 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Security;Troubleshooting;Known issues and workarounds Security, Troubleshooting, Known Issues and Workarounds, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Is there any impact of Logjam TLS vulnerability on Ruckus Products? Ruckus products (Unleashed and ZD/APs) don't allow export option for cipher suites. So, Ruckus products are not exposed to Logjam Attack. See also this Security Bulletin on the Support portal: <a href="https://support.ruckuswireless.com/security_bulletins/20" style="color: #0563c1; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/security_bulletins/20</a>

This article explains Logjam TLS vulnerability and no impact on Ruckus Products.

2020-04-27T14:36:05-0700 2020-04-27T18:00:07-0700 https://support.ruckuswireless.com/articles/000010387 2020-04-27T06:37:09-0700 monthly 0.8 admin,premium knowledge_article_4156 knowledge_article_4156 2020-04-27T06:09:06-0700 000010387 Validated (External) Premium Ruckus cloud lte Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Ruckus Cloud LTE I am following reference document and adding SAS information but AP is unable to register to Federated SAS? The listed FW SAS account on reference document has been decommissioned and hence the AP's would fail to register and show connectivity issue with SAS. We will have to correct the SAS information as below : Provider:Federated Wireless URL:https://developer-sc-02.federatedwireless.com/v1.2/ Version v1.2 CBSD User ID: u6qVTY

Customer tried adding the SAS account listed in the reference document but it failed to register AP.

2020-04-27T06:37:09-0700 2020-04-27T12:00:08-0700 https://support.ruckuswireless.com/articles/000006426 2020-04-23T14:00:28-0700 monthly 0.8 admin,premium knowledge_article_4153 knowledge_article_4153 2017-09-08T03:09:25-0700 000006426 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Firmware;Installation;Troubleshooting Firmware, Installation, Troubleshooting, SmartCell Insight Why can't I view any other Page on SCI apart from "License Tab" and why do I see error "AP capacity Exceeded" Obtain licenses to cover all APs managed by ZoneDirector/SmartZone controllers. In order to upload the license file, login to the SCI with following URL: https://<SCI IP addr>/admin/license this will take you directly to the license page of SCI so that you could upload the purchased AP license file.

Error on SCI version 3.1 due to insufficient licenses

2020-04-23T14:00:28-0700 2020-04-23T18:00:12-0700 https://support.ruckuswireless.com/articles/000008517 2020-04-23T14:17:10-0700 monthly 0.8 admin,premium knowledge_article_4152 knowledge_article_4152 2018-11-07T09:40:17-0800 000008517 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, SmartCell Insight How do I reset the web interface password for the 'admin' user? 1. SSH into the SCI master node using the IP address and the username = rsa , password = node-token If you cannot find or do not know the node token, use command sudo cat /.node_token <div style="text-align: center;"> </div> 2. Execute the following command. Note: a. The command must be pasted exactly as-below. b. The command ends with: \'admin\’”' c. When you paste it in to shell, it might replace the final apostrophes with two periods (..) or something else unexpected. In which case delete them and overwrite with correct expression. <div style="text-align: center;">sudo docker exec postgresql bash -c $'psql -d config -U postgres -c "UPDATE \\"user\\" set password = \'\$2a\$10\$o3J7KgFY2rPeq8M2B5k.KO2ttxXNYA7Hjivzmdzj3VazyDm7POK26\' WHERE username = \'admin\’”'</div> 3. If the command was correctly entered, the console will report: UPDATE 1 4. The new password is admin1234 5. Login to the SCI web interface using admin / admin1234 and change the password to something more secure, and appropriate.

Instructions to reset the web interface 'admin' password

2020-04-23T14:17:10-0700 2020-04-23T18:00:10-0700 https://support.ruckuswireless.com/articles/000006273 2020-04-23T14:20:22-0700 monthly 0.8 admin,premium knowledge_article_4151 knowledge_article_4151 2017-02-27T16:47:25-0800 000006273 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Insight Why I am unable to login to the SCI's Web Interface? We have to restart docker container to bring SCI services back to normal: Steps to restart docker: 1. Login to the SCI using SSH 2. In CLI, run “sudo docker ps” to verify the processes uptime and status. 3. See whether there is a list of processes running in docker containers 4. If not, issue the following commands: sudo service docker start sudo service docker-compose start Post executing above commands, give about 2-3 minutes time and verify the active processes under docker container by using “sudo docker ps”. You would see similar result: root@master-da2aec20:/master-da2aec20:/# sudo docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 8c7dc6e24636 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-api:v2.4.0 "/bin/sh -c ./bin/sta" 2 weeks ago Up About a minute rsa-api 76af06a681b9 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-imply:v2.4.0 "/run.sh master" 2 weeks ago Up About a minute imply-master 66ef58f5be1d 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-postgresql:v2.4.0 "/docker-entrypoint.s" 2 weeks ago Up 2 minutes postgresql 3ddbfdd63f14 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-imply:v2.4.0 "/run.sh data" 2 weeks ago Up About a minute imply-data ba0f358ec07b 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa:v2.4.0 "/run.sh slave" 2 weeks ago Up 20 seconds rsa-slave 41a3507740ed 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa:v2.4.0 "/run.sh master" 2 weeks ago Up 30 seconds rsa-master 8784ca698a1b 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-pivot:v2.4.0 "/bin/sh -c ./bin/sta" 2 weeks ago Up 2 minutes pivot 4797217e0187 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-mosquitto:v2.4.0 "/run.sh" 2 weeks ago Up About a minute mosquitto 9915c2d9eb91 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-cluster-manager:v2.4.0 "bin/consul" 2 weeks ago Up 2 minutes consul 84c73b4ee6e6 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-gateway:v2.4.0 "/bin/sh -c /start-co" 2 weeks ago Up About a minute rsa-gateway 8037def76704 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-hadoop:v2.4.0 "./run.sh datanode" 2 weeks ago Up About a minute hdfs-datanode f9dcd3976aa2 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-imply:v2.4.0 "/run.sh query" 2 weeks ago Up About a minute imply-query 836d4ebcdba0 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-cluster-manager:v2.4.0 "bin/passenger" 2 weeks ago Up 2 minutes rsa-cluster-manager d7cc6b3be4a5 484213038011.dkr.ecr.us-west-2.amazonaws.com/rsa-hadoop:v2.4.0 "./run.sh namenode" 2 weeks ago Up About a minute hdfs-namenode Wait till the webs process is Started post this change: ;root@master-da2aec20:/master-da2aec20:/# ps aux | grep web root 42627 36.6 1.2 5722924 390416 ? Sl 09:42 1:10 /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.111-2.b15.el7_3.x86_64/jre/bin/java -cp /spark/conf/:/spark/jars/* -Dspark.deploy.retainedApplications=50 -Dspark.deploy.retainedDrivers=50 -Xmx1g org.apache.spark.deploy.master.Master --host master-da2aec20.node.rsa --port 7077 --[01;31mweb[mui-port 8080 root 43977 0.0 0.0 11636 1408 ? S 09:45 0:00 bash /spark/bin/spark-class org.apache.spark.deploy.worker.Worker --[01;31mweb[mui-port 8081 spark://master-da2aec20.node.rsa:7077 --[01;31mweb[mui-port 8881 root 43981 0.0 0.0 11636 664 ? S 09:45 0:00 bash /spark/bin/spark-class org.apache.spark.deploy.worker.Worker --[01;31mweb[mui-port 8081 spark://master-da2aec20.node.rsa:7077 --[01;31mweb[mui-port 8881 root 43982 12.2 0.1 2586308 37660 ? Sl 09:45 0:02 java -Xmx128m -cp /spark/jars/* org.apache.spark.launcher.Main org.apache.spark.deploy.worker.Worker --[01;31mweb[mui-port 8081 spark://master-da2aec20.node.rsa:7077 --[01;31mweb[mui-port 8881 Once Webs is Started, login to the SCI WebUI will be working normal.

This article explains why SCI Web access is down.

2020-04-23T14:20:22-0700 2020-04-23T18:00:08-0700 https://support.ruckuswireless.com/articles/000010375 2020-04-22T18:54:37-0700 monthly 0.8 admin,premium knowledge_article_4150 knowledge_article_4150 2020-04-22T18:54:37-0700 000010375 Validated (External) Premium Vriot Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, vRIoT Why LoRa LNS tab is not visible on Ruckus IOT controller using Fiefox Browser LoRa LNS is a frame with the Ruckus IOT UI. A frame is an HTML element which defines a particular area in which another HTML content can be displayed. We need to Accept this certificate warning for this self signed certificate once within this frame to remove this error permanently. To perform this action, follow below steps: <ul><li>Click in the middle of the screen and go to the LoRa Frame as displayed below<img alt="User-added image" height="431" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054xj&feoid=00N50000002Cf3M&refid=0EM2J000001pQEQ" width="878"></img></li><li>This will open a new browser screen and you need to accept the warning once:<img alt="User-added image" height="459" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054xj&feoid=00N50000002Cf3M&refid=0EM2J000001pQFE" width="602"></img></li><li>Once done, you would get normal access to LoRa Dashboard from IOT controller UI<img alt="User-added image" height="269" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054xj&feoid=00N50000002Cf3M&refid=0EM2J000001pQFY" width="709"></img></li></ul>

This article details on how to fix Ruckus IOT UI access for LoRa Tab on Firefox

2020-04-22T18:54:37-0700 2020-04-23T00:00:09-0700 https://support.ruckuswireless.com/articles/000010299 2020-04-22T10:38:55-0700 monthly 0.8 admin,premium knowledge_article_4126 knowledge_article_4126 2020-04-08T23:36:46-0700 000010299 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Troubleshooting Troubleshooting, SmartCell Insight Why am I seeing this error "Error - Could not Compute" when I try to query more than 7 days in Data Explorer Dashboard Issue was resolved after waiting for all newly connected Data Nodes and data was processed: <img alt="User-added image" height="343" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054xK&feoid=00N50000002Cf3M&refid=0EM2J000001pJT3" width="779"></img>

Customer is trying to access details on saved Data Explorer dashboard and gets error "Error - Could not Compute" when querying over 7 days

2020-04-22T10:38:55-0700 2020-04-22T12:00:08-0700 https://support.ruckuswireless.com/articles/000010363 2020-04-20T04:15:58-0700 monthly 0.8 admin,premium knowledge_article_4146 knowledge_article_4146 2020-04-20T04:15:58-0700 000010363 Validated (External) Premium Vriot Firmware;Installation Firmware, Installation, vRIoT How to apply a patch to the Ruckus IOT controller? Here are the steps on how to apply the patch on Ruckus IOT controller: <ul><li>Download the Patch from Ruckus Support Portal.</li><li>Go to Admin> Version & Patches Tab on vRIOT GUI</li><li>Click on Upload Patches, select the downloaded image and click on Apply Patch.</li></ul> <img alt="Patch upload" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054vT&feoid=00N50000002Cf3M&refid=0EM2J000001pO9Y" width="795"></img> Once patch is applied, we need to reboot the IOT controller manually to take it effect.

This article explains the steps to apply AP patch to the IOT controller.

2020-04-20T04:15:58-0700 2020-04-20T06:00:12-0700 https://support.ruckuswireless.com/articles/000002332 2014-08-14T16:50:32-0700 monthly 0.8 admin,premium knowledge_article_1221 knowledge_article_1221 2014-08-14T16:50:32-0700 000002332 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Mediaflex;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;MediaFlex 2501;MediaFlex 2900;MediaFlex 2811;MediaFlex 5811;MediaFlex 7811;MediaFlex 7211 Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, MediaFlex Why is the AP not able to finish privisioing? To verify that this is an MTU issue check the MTU between the ZD and AP. 1. open a command window and use ping with a "Set Don't Fragment flag" with the same packet length as the Current Tunnel MTU: <img alt="User-added image" height="314" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PG2g&feoid=00N50000002Cf3M&refid=0EM50000000LNG7" width="500"></img> 2. If the pings with the DF flag set does not get through try reducing the packet size (-s 1500, 1400, 1300). <img alt="User-added image" height="491" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PG2g&feoid=00N50000002Cf3M&refid=0EM50000000LNGC" width="500"></img> 3. Once you fine the packet size that can get through with the DF flag set you can set the LWAPP MTU to match that and it should resolve the issue: Configure>Access Point: <img alt="User-added image" height="422" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PG2g&feoid=00N50000002Cf3M&refid=0EM50000000LNGH" width="500"></img>

*Remote AP were working fine prior to the upgrade *All Local AP connect back just fine *Remote AP came up, upgraded firmware, but can not get pass the "Provisioning" stage

2014-08-14T16:50:32-0700 2020-04-15T07:36:03-0700 https://support.ruckuswireless.com/articles/000010346 2020-04-14T01:02:48-0700 monthly 0.8 admin,premium knowledge_article_4139 knowledge_article_4139 2020-04-14T01:02:48-0700 000010346 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath How to configure AD Admin users to login to the CloudPath? 1. Create an Admin User in the AD /LADP server. Network/System Admin needs to be involved for the AD Server configuration and can ping to CloudPath from the AD Server. 2. Ping the AD server from CloudPath to validate the connectivity: <img alt="User-added image" height="176" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054tS&feoid=00N50000002Cf3M&refid=0EM2J000001pLNC" width="500"></img> 3. Edit or Create the 'Authentication Server' against which the AD Admin users will login --> Check the box for 'Use for Admin Logins' and provide the Admin Group Regex (if any else use *) as show below: <img alt="User-added image" height="338" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054tS&feoid=00N50000002Cf3M&refid=0EM2J000001pLMx" width="500"></img> 4. Run the Test against the AD Server to validate the connectivity under 'Authentication Servers' list: <img alt="User-added image" height="43" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054tS&feoid=00N50000002Cf3M&refid=0EM2J000001pLNb" width="500"></img> 5. Perform the Test: <img alt="User-added image" height="352" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054tS&feoid=00N50000002Cf3M&refid=0EM2J000001pLNg" width="500"></img> <img alt="User-added image" height="817" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054tS&feoid=00N50000002Cf3M&refid=0EM2J000001pLNl" width="500"></img> 6. Sign in as the AD User: <img alt="User-added image" height="336" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054tS&feoid=00N50000002Cf3M&refid=0EM2J000001pLNq" width="500"></img> 7. Verify the Login: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054tS&feoid=00N50000002Cf3M&refid=0EM2J000001pLNv"></img>

Configuration assistance for the AD Admin users to login to the CloudPath

2020-04-14T01:02:48-0700 2020-04-14T06:00:17-0700 https://support.ruckuswireless.com/articles/000009730 2020-04-14T01:52:16-0700 monthly 0.8 admin,premium knowledge_article_4136 knowledge_article_4136 2020-04-14T01:11:22-0700 000009730 Validated (External) Premium H510;Virtual smartcell gateway;Ruckus H510 Configuration;Troubleshooting Configuration, Troubleshooting, H510, virtual SmartCell Gateway Why H510 AP is not passing multiple VLANs traffic on LAN port? Issue: The IP Phone and the PC connected behind the LAN 1 port of H510 were not getting the IP from the respective VLAN. A brief network diagram: <img alt="User-added image" height="393" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054tc&feoid=00N50000002Cf3M&refid=0EM2J000001pLMJ" width="500"></img> Configuration: 1. Edit the AP Zone --> Expand 'AP Model Specific Configuration' --> Select the AP model as H510: <img alt="User-added image" height="322" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054tc&feoid=00N50000002Cf3M&refid=0EM2J000001pLKm" width="500"></img> 2. Go to Port Settings --> Click on '+' sign to create a new LAN Profile: <img alt="User-added image" height="332" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054tc&feoid=00N50000002Cf3M&refid=0EM2J000001pLKw" width="500"></img> 3. Created a new LAN profile name 'Dual' with Untagged VLAN 217 and Tagged VLAN 333 as shown below: <img alt="User-added image" height="283" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054tc&feoid=00N50000002Cf3M&refid=0EM2J000001pLL6" width="500"></img> Note: VLAN 217 and VLAN 333 are allowed and configured on all the uplinks and inter-VLAN configuration is working fine. Network Admin is responsible for the switch side configuration. 4. Configured Cisco IP Phone : Admin VLAN as VLAN 333 and PC VLAN as VLAN 217. Cisco Support needs to be involved for the Cisco IP Phone configuration changes.

This article helps you in troubleshooting issues if H510 is not passing any VLAN traffic on the LAN port.

2020-04-14T01:52:16-0700 2020-04-14T06:00:11-0700 https://support.ruckuswireless.com/articles/000010338 2020-04-13T03:59:11-0700 monthly 0.8 admin,premium knowledge_article_4133 knowledge_article_4133 2020-04-13T03:57:15-0700 000010338 Validated (External) Premium Ruckus cloud lte Performance;Troubleshooting Performance, Troubleshooting, Ruckus Cloud LTE I have configured PTP server settings on my account but AP are failing to sync. PTP does not handle delay between sites. It is very sensitive to delay, below requirement are required for delay and L2/L3 architect if PTP is remote. **QOS deployment : 1) L2 QoS: Priority bit set to 7 for time sensitive PTP packets (Sync and DelayReq). 2) L3 QoS: DSCP set to EF (Expedited Forward). **Network requirements : 1) PDV (Packet Delay Variation) must be less than 1 microsecond. 2) Network Asymmetry must be less than 1 microsecond. 3) Between PTP master and slave distance should be less than 6 switch hops.

Customer has configured PTP but the slave AP is unable to synchronize and is failing.

2020-04-13T03:59:11-0700 2020-04-13T06:00:11-0700 https://support.ruckuswireless.com/articles/000002748 2014-03-05T01:07:52-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_866 knowledge_article_866 2014-03-05T01:07:52-0800 000002748 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How can I disable interim updates to an accounting server? Accounting server can be defined under Configure --> AAA Servers page. Once a server is defined, admin can enable the accounting option under selected SSIDs. When a wireless client connects to the network, ZD will send an accounting start packet. As long as the client remains connected, ZD will send interim updates at an interval defined under the SSID. This will continue until the client disconnects from the network which will make the ZD to send an accounting stop packet. If you are interested only in the start and stop packets, you can disable the interim updates. This can be configured by setting the interval to 0 minutes.

Interim updates will be sent at an interval defined under a SSID. This article discusses how to disable them.

2014-03-05T01:07:52-0800 2020-04-10T21:11:27-0700 https://support.ruckuswireless.com/articles/000010130 2020-04-10T10:43:09-0700 monthly 0.8 admin,premium knowledge_article_4083 knowledge_article_4083 2020-02-27T05:11:48-0800 000010130 Validated (External) Premium Ruckus network director rnd Configuration;Installation Configuration, Installation, Ruckus Network Director RND Can RND move ZD only based AP code to specific SZ Ruckus Network Director does not recognize ZoneDirector discovery using lwapp port 12223 (apmgr) only based AP code (9.x, 100.x) and cannot redirect them per registration rules. Solutions: <ul><li>Re-flash the AP's with 104.x or later Standalone code</li><li>Manually point AP's to an SZ running lwapp2scg conversion daemon (set director ip <sz_control_ip>)</li></ul>

RND cannot be used to move AP's running ZD only based code to SZ

2020-04-10T10:43:09-0700 2020-04-10T12:00:11-0700 https://support.ruckuswireless.com/articles/000010171 2020-04-10T11:05:08-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4086 knowledge_article_4086 2020-03-03T04:07:37-0800 000010171 Validated (External) Public Ruckus cloud lte Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud LTE Why will my Galaxy S10+ phone check-listed to work with Ruckus AP not connect to Ruckus CBSD/AP? There is a parameter within the phone called APN (Access Point Networks) and these are the parameters that the phone used to connect the SIM to the LTE network. By default, the APN parameters out of the box will not work with a Ruckus LTE / Ruckus SIM solution. If you are not using a Ruckus LTE/SIM solution, then please refer to your LTE/SIM provider for APN instructions. For Ruckus LTE/SIM solution, please go to the following phone settings to chane APN parameters. Go to Settings --> Connections --> Mobile Networks --> Access Points Names --> Add Within this section under Name add 'internet' and under APN add 'internet'. Also MCC (mobile country code) should be 315 and MNC (mobile network code) should be 010 (There is a bug in Galaxy S10 where it shows 01 for MNC but it should auto populate to 010 if GS10+ is running Feb or post Feb 2020 SW), change all 4 of those parameters. Then click on the 3 dots to Save the profile called internet. Below is a visual of the first 4 parameters that need to be modified, Name and APN along with the MCC and MNC: <img alt="User-added image" height="617" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054rg&feoid=00N50000002Cf3M&refid=0EM2J000000wSiE" width="293"></img><img alt="User-added image" height="610" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054rg&feoid=00N50000002Cf3M&refid=0EM2J000000wSiJ" width="289"></img> After you have saved the profile and selected the APN internet profile, go to Mobile Networks, select Network Operators, and finally select 315010 and your phone will connect 1-4 mins later: <img alt="User-added image" height="757" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054rg&feoid=00N50000002Cf3M&refid=0EM2J000000wSiT" width="360"></img><img alt="User-added image" height="748" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054rg&feoid=00N50000002Cf3M&refid=0EM2J000000wSiY" width="354"></img><img alt="User-added image" height="749" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054rg&feoid=00N50000002Cf3M&refid=0EM2J000000wSjC" width="356"></img> Once it is connected to Ruckus AP and Ruckus LTE, you will see the words ‘LTE’ next to the 5 bars.

Smartphone will not work out of the box. One needs to change APN parameters to connect to Ruckus LTE network.

2020-04-10T11:05:08-0700 2020-04-10T12:00:08-0700 https://support.ruckuswireless.com/articles/000010126 2020-04-09T16:15:22-0700 monthly 0.8 admin,premium knowledge_article_4073 knowledge_article_4073 2020-02-20T01:23:18-0800 000010126 Validated (External) Premium Sz300;Ruckus icx switches;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, SZ300, Ruckus ICX Switches, virtual SmartCell Gateway, SZ100 Why is the move button grayed out on my vSZ/SZ controller when I want to move an ICX switch to its switch group? Support has a KSP available for 5.1.2, and the fix is already part of 5.2 refresh.

If German language is selected in the webgui of the vSZ/SZ controller, the move button is grayed out.

2020-04-09T16:15:22-0700 2020-04-09T18:00:09-0700 https://support.ruckuswireless.com/articles/000010290 2020-04-08T04:53:20-0700 monthly 0.8 admin,premium knowledge_article_4121 knowledge_article_4121 2020-04-08T04:53:20-0700 000010290 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration Configuration, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway Why 802.11w MFP option can't be enabled when we use fast roaming The 802.11w standard aims to protect control and management frames and a set of robust management frames against forgery and replay attacks. The frame types protected include Disassociation, Deauthentication, and Robust Action frames. 802.11w does not encrypt the frames however, it protects the management frames. It ensures that the messages come from legitimate sources. To do that, you have to add a Message Integrity Check (MIC) element. 802.11w has introduced a new key called Integrity Group Temporal Key (IGTK), which is used to protect broadcast/multicast robust management frames. When Management Frame Protection is negotiated, the Access Point (AP) encrypts the GTK and IGTK values which are delivered in Message 3 of the 4-way handshake. If the AP later changes the GTK, it sends the new GTK and IGTK to the client with the use of the Group Key Handshake. It adds a MIC that is calculated with the use of the IGTK key. When we enable the fast roaming the client device does not need to re-authenticate every time it roams from one access point to another. Hence, when we enable the 802.11r(fast roaming) the option 802.11w MFP will be grayed out or we won't be able to see that option.

In a WLAN when we enable the 802.11r fast roaming the 802.11w MFP option will be grayed out or we won't be able to see that option.

2020-04-08T04:53:20-0700 2020-04-09T08:49:55-0700 https://support.ruckuswireless.com/articles/000010182 2020-04-06T05:42:03-0700 monthly 0.8 admin,premium knowledge_article_4116 knowledge_article_4116 2020-04-06T05:42:03-0700 000010182 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Troubleshooting Troubleshooting, Unleashed Why does the "heartbeat loss" error message pops up every 12 hours?

This article explains the behavior of the AP during the heartbeat loss and states a workaround

2020-04-06T05:42:03-0700 2020-04-06T06:00:08-0700 https://support.ruckuswireless.com/articles/000010282 2020-04-03T07:48:41-0700 monthly 0.8 admin,premium knowledge_article_4115 knowledge_article_4115 2020-04-03T07:48:41-0700 000010282 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Which ZD SW version supports WLAN Autonomous Mode The autonomous Mode feature started on ZD SW 9.7 and supported in subsequent releases. Prior to ZD SW 9.7 code, Autonomous mode WLAN feature was not available.

Enabling autonomous mode

2020-04-03T07:48:41-0700 2020-04-03T12:00:09-0700 https://support.ruckuswireless.com/articles/000010113 2020-04-02T10:18:25-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_4072 knowledge_article_4072 2020-02-17T01:53:07-0800 000010113 Validated (External) Public Sz300;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, SZ300, virtual SmartCell Gateway, SZ100 Why is my controller node unresponsive after executing a "Cluster Node Restore" with my cluster running SmartZone version 5.2 or higher? Please refer to the correct process for “Replacing a Controller Node” found in the SmartZone 5.2 Administration Guides for either the SZ100 or SZ300: <a href="https://docs.arris.com/bundle/sz-520-adminguide-sz100vsz/page/GUID-D5745AC3-AA89-4CA1-9EF9-5E77CA75860C.html" style="color: #0033cc; text-decoration: underline;" target="_blank">SmartZone 5.2.0 (GA) Administrator Guide (SZ100/vSZ-E)</a> <a href="https://docs.arris.com/bundle/sz-520-adminguide-sz300vsz/page/GUID-D5745AC3-AA89-4CA1-9EF9-5E77CA75860C.html" style="color: #0033cc; text-decoration: underline;" target="_blank">SmartZone 5.2.0 (GA) Administrator Guide (SZ300/vSZ-H)</a>

This Bulletin describes the changes to the Cluster Restore process introduced with SZ 5.2 + software.

2020-04-02T10:18:25-0700 2020-04-02T12:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zjOSAQ?attachment_index=0 2020-04-02T12:00:08-0700 monthly admin,premium,warranty,guest knowledge_article_4072 knowledge_article_4072_attachment_1 TSB2020-001 Cluster Restore v2.0.pdf 141972.0 application/pdf https://support.ruckuswireless.com/articles/000010279 2020-03-30T22:20:33-0700 monthly 0.8 admin,premium knowledge_article_4111 knowledge_article_4111 2020-03-30T22:20:33-0700 000010279 Validated (External) Premium Ruckus diagnostic dashboard rdd;Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Diagnostic Dashboard RDD, ZoneDirector How to add the ZD controller to Ruckus Diagnostic Dashboard(RDD)? Set up a cluster first on the RDD. Cluster is the top-level container to administer groups of controllers. - Log in to RDD using your user name and password. Click Login. - From the RDD, select Wireless > Clusters and Click on Actions to create Cluster. <img alt="Cluster" height="134" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054m2&feoid=00N50000002Cf3M&refid=0EM2J000000wgLx" width="500"></img> - Enter the information for the following fields in the Create Cluster screen. a) For the Tenant field select the appropriate tenant. b) For the Name field enter the cluster name. c) For the System ID field, enter the system ID. This ID is unique per cluster. When all the information is entered, click Save. <img alt="Cluster1" height="132" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054m2&feoid=00N50000002Cf3M&refid=0EM2J000000wgMC" width="500"></img> - Navigate to Wireless > Controllers Tab > click Actions > Create Controller. <img alt="Controller" height="178" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054m2&feoid=00N50000002Cf3M&refid=0EM2J000000wgMW" width="500"></img> - Create New Controller and enter information for the following fields. a) For the Name field, enter the controller name. b) For the Cluster field, select the correct Cluster from the drop down. c) For the Description field, enter a Description of the controller. Use a consistent naming scheme. d) For the Model field, select the latest model. This content is validated during the RDD registration process and may be updated by data from the controller. e) For the Serial Number, enter the serial number of the controller. f) For the Control IP field, enter the IP address of the controller. g) For the Mgmt IP field, enter the Management IP address of the controller. This IP address may be the same address as the controller. h) For the Username field, enter the Web UI username. i) For the Password field,enter the Web UI password. When all the information is entered, click Submit. <img alt="Controller2" height="178" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054m2&feoid=00N50000002Cf3M&refid=0EM2J000000wgMg" width="500"></img> Zone Director is polled for data by RDD. It may take an hour for the controller status to turn green as RDD gathers poll intervals from the new device.

2020-03-30T22:20:33-0700 2020-03-31T00:00:12-0700 https://support.ruckuswireless.com/articles/000010274 2020-03-30T22:20:59-0700 monthly 0.8 admin,premium knowledge_article_4110 knowledge_article_4110 2020-03-30T22:20:59-0700 000010274 Validated (External) Premium Ruckus diagnostic dashboard rdd;Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Diagnostic Dashboard RDD, SmartCell Gateway, virtual SmartCell Gateway How to add the SZ controller to Ruckus Diagnostic Dashboard(RDD)? 1) Adding a new cluster on RDD: Set up a cluster first on the RDD. Cluster is the top-level container to administer groups of controllers. - Log in to RDD using your user name and password. Click Login. - From the RDD, select Wireless > Clusters and Click on Actions to create Cluster. <img alt="Cluster1" height="134" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054l4&feoid=00N50000002Cf3M&refid=0EM2J000000wgJr" width="500"></img> - Enter the information for the following fields in the Create Cluster screen. a) For the Tenant field select the appropriate tenant. b) For the Name field enter the cluster name. c) For the System ID field, enter the system ID. This ID is unique per cluster. When all the information is entered, click Save. <img alt="Cluster" height="132" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054l4&feoid=00N50000002Cf3M&refid=0EM2J000000wgJh" width="500"></img> 2) Adding and Configuring a Smart Zone Controller for RDD: Create a data profile for RDD using the Northbound Data Streaming tab on the Smart Zone controller and add the controller node on the RDD. - From the SZ user interface, navigate to select System > General Settings > Northbound Data Streaming and enabled Northbound Data Streaming for RDD. <img alt="NorthBound" height="153" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054l4&feoid=00N50000002Cf3M&refid=0EM2J000000wgK1" width="500"></img> - Create Northbound Data Streaming profile and enter the information for following fields. a) For the Name field, enter a name of the profile.? b) For the Server Host field, enter the RDD VM IP address. c) For the Server Port field, enter the value 8883. d) For the User field, enter "synesis" as a user name for this profile.? e) For the Password field, enter "synesis" as a password for this profile. f) For the System ID field, enter an ID that is unique per cluster for this profile.? The ID must match on the controller and RDD. When all the information is entered, click OK. <img alt="NorthBound2" height="194" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054l4&feoid=00N50000002Cf3M&refid=0EM2J000000wgKL" width="500"></img> - Log in to RDD using your user name and password. - From the RDD, navigate to Wireless > Controllers Tab. <img alt="Controller" height="178" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054l4&feoid=00N50000002Cf3M&refid=0EM2J000000wgKk" width="500"></img> - On the Controllers screen, click Actions > Create Controller and enter information for the following fields. a) For the Name field, enter the controller name. b) For the Cluster field, select the correct Cluster from the drop down. c) For the Description field, enter a Description of the controller. Use a consistent naming scheme. d) For the Model field, select the latest model. This content is validated during the RDD registration process and may be updated by data from the controller. e) For the Serial Number, enter the serial number of the controller. f) For the Control IP field,enter the Control IP address of the controller. This may be the same as the Mgmt IP if the controller interfaces were configured to be in Single Port Group mode. g) For the Mgmt IP field, enter the Management IP address of the controller. This IP address may be the same address as the controller in Essentials but may be different in High-Scale. h) For the Username field, enter the Web UI username. i) For the Password field,enter the Web UI password. When all the information is entered, click Submit. <img alt="Controller2" height="178" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054l4&feoid=00N50000002Cf3M&refid=0EM2J000000wgKp" width="500"></img> It may take an hour for the controller status to turn green as RDD gathers poll intervals from the new device.

This article provides information on adding and configuring the SZ on RDD.

2020-03-30T22:20:59-0700 2020-03-31T00:00:10-0700 https://support.ruckuswireless.com/articles/000010265 2020-03-26T05:20:38-0700 monthly 0.8 admin,premium knowledge_article_4104 knowledge_article_4104 2020-03-24T02:02:52-0700 000010265 Validated (External) Premium Spot lbs;Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Configuration;Troubleshooting Configuration, Troubleshooting, SPoT LBS, SPoT How to update SSL certificate in vSPOT? <h3 id="SSLsupporttoupdatecustomercertificates-Pre-requisites">Pre-requisites</h3> <ul><li>Valid SSL certificate files (*.key, *.crt) are required.</li><li>Valid intermediate CA certificates (*.crt) if any.</li><li> Check vSPoT docker container is running by running the command. <table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1"><code>admin</code><code>@vspotappliance</code><code>:~$ spot list</code></td></tr></tbody></table> </li></ul> <img alt="User-added image" height="64" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054lx&feoid=00N50000002Cf3M&refid=0EM2J000000wdTU" width="500"></img> <h3 id="SSLsupporttoupdatecustomercertificates-Step-by-stepguide">Step-by-step guide</h3> <ul><li> For SSL certificate with intermediate CA certificates please merge the domain certificate and intermediate certificate as one certificate file. This merged certificate file (in this example, my.crt) should be used as the *.crt file in the next step. NOTE: If the intermediate certificates are not merged with your issued SSL certificate, the trusted-chain certificate might not be established. This means that when users attempt to access the site, they might receive a "Security Alert" or "Not Secure" certificate error in the site's certificate chain. For example, the below command merges the vspot.client.com.crt and intermediate_ca.crt as one certificate file (my.crt). </li></ul> <table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1"><code>bash:~$ cat vspot.client.com.crt intermediate_ca.crt > my.crt</code></td></tr></tbody></table> <ul><li>Copy the SSL certificate files *.key and *.crt file (merged certificate file in-case with intermediate CA's) to the vspot host machine's home directory (e.g /home/admin/ssl/).</li><li> Run the following command to update the SSL certificate. Please make sure the order of the files follows the example below. <table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1"><code>admin</code><code>@vspotappliance</code><code>:~$ spot config ssl-upload /home/admin/ssl/my.crt /home/admin/ssl/my.key</code></td></tr></tbody></table> </li></ul> <img alt="User-added image" height="72" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054lx&feoid=00N50000002Cf3M&refid=0EM2J000000wdTj" width="500"></img> <ul><li>Open the vSPoT URL (in this example, https://<vspot-IP>) in a web browser to verify whether the nginx is working fine with the updated certificate.</li><li>For vSPoT installations accessed with Fully Qualified Domain Name(FQDN) or DNS hostname (e.g., Open https://vspot.ruckuslbs.com), and verify if the browser accepts the updated SSL certificate as a valid certificate (e.g. a green lock icon on Google Chrome browser in the URL address bar; other browser may exhibit different behaviour/s).</li><li>vSPoT Login page should be shown and you or any user should be able to login using their credentials as before.</li></ul> <h3 id="SSLsupporttoupdatecustomercertificates-RollbackSSLUpdate:"> Rollback SSL Update:</h3> <ul><li>This step can be useful to rollback using the default SSL certificate if in case the update SSL certificate step has resulted in a failure to bring up the admin dashboard.</li><li> Run the following command to rollback to the default SSL certificate. <table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1"><code>admin</code><code>@vspotappliance</code><code>:~$ spot config ssl-rollback</code></td></tr></tbody></table> </li></ul> <img alt="User-added image" height="72" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054lx&feoid=00N50000002Cf3M&refid=0EM2J000000wdTo" width="500"></img>

This article shows steps on how to update vSPOT SSL certificate and rollback steps

2020-03-26T05:20:38-0700 2020-03-26T06:00:08-0700 https://support.ruckuswireless.com/articles/000009687 2019-08-07T10:42:25-0700 monthly 0.8 admin,premium knowledge_article_3913 knowledge_article_3913 2019-08-07T10:42:25-0700 000009687 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway What are the differences between access network configuration for Ethernet Port Usage ? There are three available options under Smart Zone GUI configuration Services & Profiles > Tunnels & Ports > Ethernet Port > Select a Port Profile > Ethernet Port Usage Each selection will 'bridge' the wired Ethernet port accordingly as follows: <ul><li>Default WAN bridges the wired port to the eth0/PoE/uplink port</li><li>Local Subnet (LAN) creates a new isolated bridge and does not bridge to the access point's eth0/PoE port</li><li>Tunnel Ethernet Port traffic bridges the wired port to the gre1/tunnel and terminates at the dataplane similar to that of a wlan tunnel</li></ul> Local Subnet (LAN) is not a common selection for most access points as it creates an isolated subnet and typically used on Ruckus H5xx hospitality models with 4 wired ports to create a private LAN.

This article is to expand more in detail what the Smart Zone access point's wired port(s) Ethernet port usage access network setting does from a layer 2 network or bridge perspective.

2019-08-07T10:42:25-0700 2020-03-25T09:41:01-0700 https://support.ruckuswireless.com/articles/000010235 2020-03-19T07:41:49-0700 monthly 0.8 admin,premium knowledge_article_4101 knowledge_article_4101 2020-03-19T07:41:49-0700 000010235 Validated (External) Premium Ruckus diagnostic dashboard rdd Troubleshooting Troubleshooting, Ruckus Diagnostic Dashboard RDD Why is my SZ controller showing "Unknown" in my RDD? This is a known issue with this RDD SW1.10.4. Upgrade to the latest code SW1.10.15 After upgrade without any modification to the Network or configuration, the SZ now shows its status Online. <img alt="User-added image" height="244" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054jN&feoid=00N50000002Cf3M&refid=0EM2J000000wbfE" width="500"></img>

SZ showing "Unknown" status from RDD platform, it should be Online

2020-03-19T07:41:49-0700 2020-03-19T12:00:08-0700 https://support.ruckuswireless.com/articles/000010234 2020-03-18T15:12:08-0700 monthly 0.8 admin,premium knowledge_article_4100 knowledge_article_4100 2020-03-18T11:55:01-0700 000010234 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, SZ100 Is there a condition where upgrading SZ100 to 5.2 from any previous version can cause the SZ to become unresponsive? Engineering has prepared a KSP fix which you need to apply to the SZ after we upgrade the SZ to 5.2. This KSP replaces the defective Data plane and will take effect after SZ reboot. Please see attached TSB document with installation instructions.

This Bulletin describes a condition where upgrading SZ100 to 5.2 from any previous release and changing the AP Zone firmware to 5.2 would cause SZ to become unresponsive.

2020-03-18T15:12:08-0700 2020-03-18T18:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zpWSAQ?attachment_index=0 2020-03-18T18:00:08-0700 monthly admin,premium knowledge_article_4100 knowledge_article_4100_attachment_1 TSB2020-005_SZ100_5.2_Dplane.pdf 286305.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA22J0000004zpWSAQ?attachment_index=2 2020-03-18T18:00:08-0700 monthly admin,premium knowledge_article_4100 knowledge_article_4100_attachment_1 ER-8183_5_2_0_0_699-v1_0.ksp 13526688.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000007299 2017-12-12T15:03:32-0800 monthly 0.8 admin,premium knowledge_article_2879 knowledge_article_2879 2017-12-12T15:03:32-0800 000007299 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to define a management VLAN on FastIron switches? Creating a management VLAN for switches Prerequisites: VLAN created with ports assigned. Notes: By default, a switch will respond to requests on all VLANs provided the Layer-3 addressing matches. Creating a management VLAN stops that behavior and the switch management will only answer requests that are on the specified VLAN. Caveats: Only one management VLAN can be assigned. If an ip default gateway has already been assigned, it will be moved into the VLAN configuration as default-gateway. Configuration Example: vlan 10 name Management management-vlan default-gateway 192.168.10.1 1

How to define a management VLAN on FastIron switches?

2017-12-12T15:03:32-0800 2020-03-12T09:16:09-0700 https://support.ruckuswireless.com/articles/000010184 2020-03-11T06:41:58-0700 monthly 0.8 admin,premium knowledge_article_4097 knowledge_article_4097 2020-03-11T06:41:58-0700 000010184 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Performance;System network management Performance, System Network Management, Cloudpath How to check memory usage, disk space or CPU usage in a Cloudpath server? There is no option to check for the CPU, memory and disk usage on the CloudPath GUI. To validate the resources on CloudPath we would need to execute below commands from CP CLI: Log in to the CloudPath CLI as shown below. login as: cpn_service cpn_service@10.177.89.79's password: <Enter the Password here> Type "console" to navigate to the shell mode of the device. 1, "iostat -c" This command provides the system's average CPU utilization since the last reboot. "-c" stands for CPU utilization. <img alt="User-added image" height="113" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054eX&feoid=00N50000002Cf3M&refid=0EM2J000000wXmL" width="1108"></img> 2, "vmstat -s" This command will show the virtual memory statistics. <img alt="User-added image" height="418" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054eX&feoid=00N50000002Cf3M&refid=0EM2J000000wXmQ" width="556"></img> 3, "top" This commands displays the real time performance of the processes in the system. The output of the command is updated every 5 seconds by default. <img alt="User-added image" height="285" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054eX&feoid=00N50000002Cf3M&refid=0EM2J000000wXmf" width="634"></img> 4, "free" or "free -m" or "free -tm" This command will show you the amount of free and used memory on your system. "-m" will show the memory usage in MB. "-g" can be used to see the usage in GB. "-tm" will add an extra line to show memory total. <img alt="User-added image" height="280" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054eX&feoid=00N50000002Cf3M&refid=0EM2J000000wXmp" width="636"></img> 5, "df -h" This command will show the disk space used in megabytes, gigabytes etc <img alt="User-added image" height="254" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054eX&feoid=00N50000002Cf3M&refid=0EM2J000000wXn4" width="634"></img>

Check memory, disk space and CPU usage in Cloudpath Server

2020-03-11T06:41:58-0700 2020-03-11T12:00:11-0700 https://support.ruckuswireless.com/articles/000010204 2020-03-11T07:20:24-0700 monthly 0.8 admin,premium knowledge_article_4096 knowledge_article_4096 2020-03-11T07:20:24-0700 000010204 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Security Security, ZoneFlex Indoor, ZoneFlex Outdoor Does Kr00k - vulnerability Affect Ruckus APs? Since all Ruckus APs are 100% Atheros and hence not affected by the vulnerability.

This article provides details about Kr00k - vulnerability affect on Ruckus Wireless Products.

2020-03-11T07:20:24-0700 2020-03-11T12:00:09-0700 https://support.ruckuswireless.com/articles/000001520 2020-03-11T01:35:29-0700 monthly 0.8 admin,premium knowledge_article_4095 knowledge_article_4095 2013-01-23T13:02:44-0800 000001520 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How do you describe DHCP option 82 We can configure the DHCP option 82 in both the standalone AP and in ZD. - The DHCP Relay Agent Information Option(Option 82) allows a DHCP Relay Agent to insert specific identification information into a request that is being forwarded to a DHCP server. - When this option is enabled for an Ethernet port or a WLAN SSID, additional information will be encapsulated in DHCP option 82 and inserted into DHCP request packets. This option supports the ability for a service provider to allocate IP addresses intelligently by considering information on the origin of the IP allocation request. - When this option is enabled and an AP receives a DHCP request from a wireless client, it will encapsulate additional information (such as VLAN ID, AP name, SSID and MAC address) into the DHCP request packets before forwarding them to the DHCP server. The DHCP server can then use this information to allocate an IP address to the client from a particular DHCP pool based on these parameters. See also DHCP Option 82 for information on enabling this option for Ethernet ports. Please follow the procedure to enable DHCP option 82. In Standalone AP, Go to configuration -> Wireless -> WLAN1 -> Enable the option at Insert DHCP option 82. In Zone Director, Configure -> Wlans -> Advanced options -> enable DHCP option 82 to the wlan.

Query-on-DHCP-option-82

2020-03-11T01:35:29-0700 2020-03-11T06:00:08-0700 https://support.ruckuswireless.com/articles/000010041 2020-03-10T15:45:27-0700 monthly 0.8 admin,premium knowledge_article_4093 knowledge_article_4093 2019-12-17T05:32:57-0800 000010041 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Known issues and workarounds Known Issues and Workarounds, Cloudpath Why is my antivirus showing CloudpathNetworkWizardLoader.exe as virus/Trojan detected? Cloudpath Dev team reached out to different security providers to get the application whitelisted, including VirusTotal. CloudpathNetworkWizardLoader.exe has been whitelisted but you may need to take action to update your security endpoints. Symantec: ACTION NEEDED Response from them: Upon further analysis and investigation we have verified your submission and as such this detection will be removed from our products. The updated detection will be distributed in the next set of virus definitions, available via LiveUpdate or from our website at https://www.symantec.com/security_response/definitions.jsp Please note that whitelisting can take up to 24 hours to take effect. Note: Symantec's Heuristics Engine (SONAR) may still blocking the CP provisioning application and may detecting it as an infected file. Cloudpath team is aware and already reported to Symantec. This will also be fixed soon. MS Windows Defender: ACTION NEEDED Response from them: We have removed the detection. Please follow the steps below to clear cached detection and obtain the latest malware definitions. <ol><li>Open command prompt as administrator and change directory to c:\Program Files\Windows Defender</li><li>Run "MpCmdRun.exe -removedefinitions -dynamicsignatures"</li><li>Run "MpCmdRun.exe -SignatureUpdate"</li></ol> Alternatively, the latest definition is available for download here: https://www.microsoft.com/en-us/wdsi/definitions Avast: NO ACTION NEEDED Response from them: Thank you for reporting this. Our virus specialists have been working on this problem and the provided file has been whitelisted. SentinelOne: N/A at this time

Virus detected on CloudpathNetworkWizardLoader.exe is a false positive, as application was not whitelisted in different security solutions.

2020-03-10T15:45:27-0700 2020-03-10T18:00:08-0700 https://support.ruckuswireless.com/articles/000010187 2020-03-10T05:17:49-0700 monthly 0.8 admin,premium knowledge_article_4091 knowledge_article_4091 2020-03-10T05:17:49-0700 000010187 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Receiving a dialogue screen showing "Unable to upload the diagnostic/patch script file to the controller. Reason:." In 3.6.2, there is the option to upload the KSP to a specific node via the Upload to Current Node selection. <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054f6&feoid=00N50000002Cf3M&refid=0EM2J000000wWf2" style="width: 393px; height: 135px;"></img> If this selection is left unchecked, all other nodes in the cluster will also receive the KSPs; if the Upload to Current Node is checked, then only that node will receive the KSP. Therefore, check all other nodes in the cluster to confirm if the KSPs in question have been uploaded as this error is essentially indicating that the KSP already exists in the other nodes. Typically, the dialogue screen would indicate the reason for the error, and in this case, would be duplicating KSPs that already have been uploaded to the cluster such as the following: <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054f6&feoid=00N50000002Cf3M&refid=0EM2J000000wWf3"></img>

When uploading a KSP the node produces a dialogue screen showing "Unable to upload the diagnostic/patch script file to the controller. Reason:."

2020-03-10T05:17:49-0700 2020-03-10T06:00:08-0700 https://support.ruckuswireless.com/articles/000010183 2020-03-09T12:59:48-0700 monthly 0.8 admin,premium knowledge_article_4090 knowledge_article_4090 2020-03-09T12:59:48-0700 000010183 Validated (External) Premium Vriot Troubleshooting Troubleshooting, vRIoT How do I download diagnostics file from the IOT controller? To Download Diagnostics file, go to Admin Page and Under Services Tab, you would find Diagnostics option under the right side corner: <img alt="User-added image" height="164" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054eS&feoid=00N50000002Cf3M&refid=0EM2J000000wVo5" width="1085"></img> Click on this Diagnostics Tab and it will download the diagnostics file in diagnostic.xxxxxxxx.tar.gz format. Share this diagnostics file with Ruckus Support Team for further debugging the problem.

This article provides instructions on how to get the diagnostics file from IOT controller.

2020-03-09T12:59:48-0700 2020-03-09T18:00:16-0700 https://support.ruckuswireless.com/articles/000009987 2020-03-09T15:00:24-0700 monthly 0.8 admin,premium knowledge_article_4019 knowledge_article_4019 2019-12-11T22:18:18-0800 000009987 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway I use the pre-provisioning .csv file to add new Access Points to my controller. Can I automate this using API calls? AP records can be created in SZ controllers prior to installation using pre-provisioning .csv script. It is keyed on the AP MAC address and minimally requires the AP Zone name so that the AP when it joins will be put into that Zone, inheriting it's configuration. It also allows you to set the AP name, location, description, GPS location (if not equipped with chips), login and password. You could also specify static IP configurations but generally it is best to let the AP get this via DHCP and let the SZ learn this. You can also create new AP records based on it's MAC address for a specific Zone and also allowing importing the above data via API calls. The API details can be found on this page (it's HTML and not a PDF): <a href="https://support.ruckuswireless.com/documents/2429-smartzone-3-6-2-mr2-public-api-reference-guide-vsz-h" style="color: blue; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/documents/2429-smartzone-3-6-2-mr2-public-api-reference-guide-vsz-h</a> The basic information is found under Access Point Configuration - Create <img alt="User-added image" height="354" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054fG&feoid=00N50000002Cf3M&refid=0EM2J000000vjpR" width="500"></img> One key feature not possible via the Pre-Provisioning CSV script is the ability to assign the AP to an AP group (which can be previously created using API) You would probably need to lookup some details prior to actually creating the AP record (again using AP MAC as key for the record) - such as Zone ID (does not use Zone name as the CSV) <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054fG&feoid=00N50000002Cf3M&refid=0EM2J000000vjpq"></img> Creating API scripts that use this data is beyond the scope of this article. Standard scripting tools or API tools such as Postmaster can be used to automate this process.

API calls to automate per-provisioning Access Points on SZ

2020-03-09T15:00:24-0700 2020-03-09T18:00:15-0700 https://support.ruckuswireless.com/articles/000009481 2020-03-09T15:04:50-0700 monthly 0.8 admin,premium knowledge_article_4089 knowledge_article_4089 2019-06-28T14:39:16-0700 000009481 Validated (External) Premium Cloudpath;Smartcell gateway;Cloudpath Enrollment System (ES);BPG_Cloudpath;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Registration Configuration, Troubleshooting, Registration, Cloudpath, SmartCell Gateway Unable to create DPSK key on vsz though cloudpath Do not create a user in cloudpath with spaces in them. No warning message is seen on cloudpath for this issue.

Customer is trying to authenticate user users based legacy DPSK with the help of cloudpath workflow.

2020-03-09T15:04:50-0700 2020-03-09T18:00:13-0700 https://support.ruckuswireless.com/articles/000009986 2020-03-09T15:07:15-0700 monthly 0.8 admin,premium knowledge_article_4018 knowledge_article_4018 2019-12-11T22:19:00-0800 000009986 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How does the ZoneDirector feature 802.1x EAP + MAC Address work and does it replace Hotspot MAC bypass? On the ZD the authentication method "802.1x EAP + MAC Address" was designed for some specific service providers. It will do MAC authentication if 802.1x authentication fails as a fallback mechanism (since 802.1x requires client side supplicant software). This feature is only available with Standard type WLAN and does not work with Hotspot/WiSPr authentication. <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054fQ&feoid=00N50000002Cf3M&refid=0EM2J000000vjnp"></img> Although designed as a 802.1x fallback mechanism the AP will first attempt to do MAC authentication during L2 association, and then do 802.1x EAP authentication using the client supplicant negotiated with the RADIUS authentication server.

Feature description for Standard type WLAN

2020-03-09T15:07:15-0700 2020-03-09T18:00:12-0700 https://support.ruckuswireless.com/articles/000009561 2020-03-09T10:40:54-0700 monthly 0.8 admin,premium knowledge_article_4071 knowledge_article_4071 2019-07-17T00:19:00-0700 000009561 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Performance;Configuration;System network management;Troubleshooting Performance, Configuration, System Network Management, Troubleshooting, Cloudpath Why CP package installation reports the "Show Icon In Notification Area needs to be enabled.', setting ID 40029.[FAILED]" error on the client? Basically the Windows client is not able to launch the WinHelper. Check if customer is getting a UAC or smart screen pop up asking if you want to allow the EXE. If yes, make sure to execute this with the admin credentials. Trying from the user which has the right permission should resolve the issue.

This article will help to resolve the above error which is found on the clients CP logs while connecting to SSID.

2020-03-09T10:40:54-0700 2020-03-09T12:00:07-0700 https://support.ruckuswireless.com/articles/000009916 2019-10-30T06:33:53-0700 monthly 0.8 admin,premium knowledge_article_3987 knowledge_article_3987 2019-10-30T06:33:53-0700 000009916 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Troubleshooting Troubleshooting, SmartCell Insight I am seeing a large number of Failed Authentications for several AP's in SCI Data Exploerer Network Cube, what does this represent From internal Ruckus documentation we verified that the Failed Authentication found in Data Explorer Network Cube represent 802.11 legacy authentication issues which always proceed association requests and are part of the WPA 4 way hand shake. <h2 style=""> ap_report.proto::Message APReportBinWlan</h2> <table class="Table" style=""><tbody><tr><td colspan="1" rowspan="1" style="">authFailureCount</td><td colspan="1" rowspan="1" style="">TYPE_UINT32</td><td colspan="1" rowspan="1" style="">delta</td><td colspan="1" rowspan="1" style="">SUM</td><td colspan="1" rowspan="1" style="">3.6</td><td colspan="1" rowspan="1" style="">802.11 auth failure count on wlan(delta value)</td></tr></tbody></table> Since Client is not associating the client cannot be blocked using the Monitor Client option or the Services and profiles Blocked Client ACL. Only physical search for misbehaving client on site and fixing or eliminating it will remove the AP flags and SCI Failed Authentication statistics.

Large number of Failed Authentications seen in SCI Data Explorer Network Cube represent 802.11 authentication issues and not RADIUS/AAA authenticaitons

2019-10-30T06:33:53-0700 2020-03-02T12:38:54-0800 https://support.ruckuswireless.com/articles/000008778 2019-01-18T15:01:07-0800 monthly 0.8 admin,premium knowledge_article_3542 knowledge_article_3542 2019-01-18T14:55:43-0800 000008778 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Known issues and workarounds Known Issues and Workarounds, Cloudpath Can we restore the workflow config with using old snapshot on Cloudpath? If customer is running own on-premise Cloudpath instance, they can restore "VMware snapshot". If there is no "VMware snapshot", customer need to edit the work flow and revert back the changes.

Can we restore the workflow config with using old snapshot on Cloudpath?

2019-01-18T15:01:07-0800 2020-03-02T11:28:36-0800 https://support.ruckuswireless.com/articles/000010123 2020-02-27T05:12:24-0800 monthly 0.8 admin,premium knowledge_article_4082 knowledge_article_4082 2020-02-20T00:53:54-0800 000010123 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway Why ZD to SZ migration not working with ZD versions 10.1.2.0.270/10.2.1.0.147? Downgrade the ZD to 10.1.2.0.251 and perform the Migration.

While performing a a ZD to SZ migration getting a "cannot connect to zone-director" error if the ZD is running on 10.1.2.0.270/10.2.1.0.147

2020-02-27T05:12:24-0800 2020-02-27T06:00:10-0800 https://support.ruckuswireless.com/articles/000010139 2020-02-27T05:15:13-0800 monthly 0.8 admin,premium knowledge_article_4081 knowledge_article_4081 2020-02-27T05:15:13-0800 000010139 Validated (External) Premium Zonedirector 5000;ZoneDirector 5000 Firmware Firmware, ZoneDirector 5000 How long does it take to upgrade a Zone Director 5000 that is managing 900 or more Access Points Based on data from large service provider: Standalone Zone Director with 900+ AP should upgrade in 30-40 minutes depending on network responce System with Smart Redundancy will take about 2 hours to fully upgrade both controllers and all Access Points.

Time it takes to completely upgrade a Zone Director 5K with 900 Access Points

2020-02-27T05:15:13-0800 2020-02-27T06:00:08-0800 https://support.ruckuswireless.com/articles/000010129 2020-02-21T04:38:13-0800 monthly 0.8 admin,premium knowledge_article_4077 knowledge_article_4077 2020-02-21T04:38:13-0800 000010129 Validated (External) Premium Brocade eos products System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, Brocade EOS Products Why are SSH connections to the ICX refused since upgrading to 8030t? Upgrading the affected ICX hardware to 08.0.30td will resolve the issue. This firmware can be obtained directly from Ruckus Support. Quote Ruckus Support case-reference 987149 to assist the tech support representative with understanding of the issue.

A summary of known-issue FI-194362, how to identify it and how to resolve the issue

2020-02-21T04:38:13-0800 2020-02-21T06:00:10-0800 https://support.ruckuswireless.com/articles/000010127 2020-02-21T04:39:16-0800 monthly 0.8 admin,premium knowledge_article_4076 knowledge_article_4076 2020-02-21T04:39:16-0800 000010127 Validated (External) Premium Ruckus diagnostic dashboard rdd System network management;Troubleshooting System Network Management, Troubleshooting, Ruckus Diagnostic Dashboard RDD What is the significance of RDD triggering a new case with this description? - "...has transitioned state from online to offline" Investigate the affected ICX hardware for: Unexpected reboots Power supply issues Local network reachability WAN connectivity

An explanation of how this event triggered

2020-02-21T04:39:16-0800 2020-02-21T06:00:08-0800 https://support.ruckuswireless.com/articles/000010120 2020-02-20T09:36:28-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4075 knowledge_article_4075 2020-02-18T09:30:04-0800 000010120 Validated (External) Public Ruckus icx switches System network management System Network Management, Ruckus ICX Switches Not able to backup config from SZ? This fix will be confirmed and checked in SZ 5.2.1 first, and then backport to 5.1.2.3.1010(FIPS version). ETA for patch end of 2/24 week.

With 'banner motd require-enter-key' and banner motd command enabled config backup SZ feature will not work.

2020-02-20T09:36:28-0800 2020-02-20T12:00:08-0800 https://support.ruckuswireless.com/articles/000001305 2018-12-06T22:46:25-0800 monthly 0.8 admin,premium knowledge_article_346 knowledge_article_346 2012-04-03T14:04:06-0700 000001305 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Can I disable mesh after it is enabled? Note that you can not disable Mesh on a global basis once it is enabled. However, you can enable/disable Mesh on a per-AP basis. If there is a need to disable Mesh after (accidentally) enabling it, you need to factory default the ZD and start the configuration from scratch, or restore a known-good configuration with Mesh disabled. When using the latter method ensure the to-be-restored backup file was taken while the Zone Director was running the same firmware version as is running right now. Restoring a backup file taken while running an older firmware release is not supported.

Can I disable mesh after it is enabled?

2018-12-06T22:46:25-0800 2020-02-20T07:31:46-0800 https://support.ruckuswireless.com/articles/000010121 2020-02-17T07:26:38-0800 monthly 0.8 admin,premium knowledge_article_4068 knowledge_article_4068 2020-02-17T07:26:38-0800 000010121 Validated (External) Premium Vriot Installation;Known issues and workarounds Installation, Known Issues and Workarounds, vRIoT Why do i get the unknown country code SI message? Upgrade the VRIoT server to 1.5.1 or higher.

The vRIoT server keeps sending this message in the event log.

2020-02-17T07:26:38-0800 2020-02-17T12:00:08-0800 https://support.ruckuswireless.com/articles/000010118 2020-02-17T01:54:16-0800 monthly 0.8 admin,premium knowledge_article_4067 knowledge_article_4067 2020-02-17T01:54:16-0800 000010118 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector Is there a bulk way to push a change like re-naming all of the APs in the ZD? Or what would be the most efficient way to accomplish this? Unfortunately there is no bulk import, as found in SZ pre-provisioning, script available for Zone Director. There is a feature where you can import only the AP information from another ZD's backup, but there is no way to export the existing config, change it and re-import it as the configuration file is encrypted. I also checked Flex Master, but for Zone Directors you can only save a sample Zone Director Configuration and then use Flex Master to basically clone that configuration to other Zone Directors. You could create a CLI (expect) script that takes a list of AP's and then the AP name and description information and use the zd CLI commands to automate updating the ZD with the data. You should be able to make a script like this: ap “MAC Add” devname “text” description “text” end --repeat as necessary-- A CLI script with a list of Access Point MAC addresses and parameters to be changed could be used with a CLI scripting tool to automate this process. These scripting tools would depend on CLI/SSH tool used and instructions are beyond scope of this note.

There are no built in mechanisms to change the AP name and description on existing AP's on Zone Director

2020-02-17T01:54:16-0800 2020-02-17T06:00:08-0800 https://support.ruckuswireless.com/articles/000008830 2019-03-08T12:39:31-0800 monthly 0.8 admin,premium knowledge_article_3579 knowledge_article_3579 2019-02-01T12:59:39-0800 000008830 Validated (External) Premium Ruckus icx switches;Smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, SmartCell Gateway Why does the VSZ GUI reflect ICX status Offline when it is Online and Healthy? <ul><li>This is a known ICX defect per FI-195837</li><li>Upgrade ICX switch code to 8.0.90a or higher</li></ul>

If basic reachability is verified and Firewall is not blocking port 22 and 443 between ICX and VSZ communication, the offline status could be related to a known ICX reverse ssh tunnel defect

2019-03-08T12:39:31-0800 2020-02-13T15:57:33-0800 https://support.ruckuswireless.com/articles/000007213 2017-12-12T15:45:07-0800 monthly 0.8 admin,premium knowledge_article_2848 knowledge_article_2848 2017-12-12T15:45:07-0800 000007213 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches How to configure an IP Address and a default gateway on a switch? Setting IP Address and default gateway on a Brocade switch Notes: This is for a device running switch code. For devices in Layer-3 mode, refer to “Configuring Router Interfaces” or “Configuring Virtual Router Interfaces” to assign an IP. To assign a default-gateway on a router, use ip route 0.0.0.0/0 192.168.10.1 Troubleshooting: show ip Configuration Example: <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">ip address 192.168.10.2/24 <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">ip default-gateway 192.168.10.1 For more information, please watch this video from our BROCADE CAMPUS FEATURE EXPLAINER SERIES - DEFAULT GATEWAY CONFIGURATION: <a href="https://www.youtube.com/watch?v=YA3kXaWpEqE&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=YA3kXaWpEqE&feature=youtu.be</a>

IP address and gateway configuration on a L2 switch.

2017-12-12T15:45:07-0800 2020-02-03T18:26:06-0800 https://support.ruckuswireless.com/articles/000009310 2020-02-03T07:02:55-0800 monthly 0.8 admin,premium knowledge_article_3727 knowledge_article_3727 2019-05-29T04:21:26-0700 000009310 Validated (External) Premium Ruckus icx switches;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches, SmartCell Gateway Why vSZ/SZ is not showing configured VLAN and other configuration from ICX, even when it is already managed by vSZ/SZ on 5.1 version? ICX image needs to be a UFI image. Please use a UFI image and follow the specified upgrade procedure. It is very important to follow the procedure correctly and completely. Upgrading from a non-UFI version to a FastIron 8.0.90 UFI version is a two-step upgrade process. 1. Download the FastIron 08.0.90 application image and uboot from any prior FastIron release (for example, 08.0.30), and reboot the system with the 08.0.90 images. 2. Download the 08.0.90 UFI, and to avoid any cross boot combination of FI and uboot, in all cases, use the boot system flash primary command or the boot system flash secondary command to reload or reboot the device. Details are provided in below help link for specific upgrade procedure or you can refer the upgrade guide on Support portal for your desired firmware version. <a href="http://docs.ruckuswireless.com/fastiron/08.0.90/fastiron-08090-upgradeguide/GUID-5DD7EE86-6988-4CA7-81D2-22EA77BD1992.html" target="_blank">http://docs.ruckuswireless.com/fastiron/08.0.90/fastiron-08090-upgradeguide/GUID-5DD7EE86-6988-4CA7-81D2-22EA77BD1992.html</a> or You may also refer below article which explains how to upgrade ICX switch from Non-UFI to UFI image. <a href="https://support.ruckuswireless.com/articles/000009146" target="_blank">https://support.ruckuswireless.com/articles/000009146</a> Post upgrading the image on ICX, please verify the same by running "show version" command <img alt="User-added image" height="131" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054Wi&feoid=00N50000002Cf3M&refid=0EM2J000000qMzK" width="753"></img> After this we should be able to see all the switch configuration like VLAN/ACL etc in vSZ GUI and con configure them from vSZ, vice-versa.

Starting from vSZ/SZ 5.1 version, we can read/write/modify switch configuration like VLAN/ACL etc. but feature only works when ICX is running on a UFI image.

2020-02-03T07:02:55-0800 2020-02-03T12:00:08-0800 https://support.ruckuswireless.com/articles/000001773 2019-08-05T03:30:48-0700 monthly 0.8 admin,premium knowledge_article_250 knowledge_article_250 2013-03-12T07:50:19-0700 000001773 Validated (External) Premium Zoneplanner;ZonePlanner Troubleshooting Troubleshooting, ZonePlanner How to resolve Air Magnet Error - "license file not found or invalid software license file" Find the details below. <ul><li>Please make sure you are installing the latest version of software.</li><li>Please match the MAC address assigned to your Survey license is valid on your laptop.</li><li>If license & MAC are valid, please download this license file from your MyAirMagnet account (https://www.airmagnet.com/my_airmagnet) and manually place it in your program folder: C:\Program Files\AirMagnet Inc\AirMagnet Surveyor\</li><li>There should be only one license file in this folder.</li><li>Now simply launch the software.</li></ul>

Reasons for Air Magnet license error and how to resolve it

2019-08-05T03:30:48-0700 2020-02-03T02:19:25-0800 https://support.ruckuswireless.com/articles/000006344 2017-06-05T11:13:00-0700 monthly 0.8 admin,premium knowledge_article_2627 knowledge_article_2627 2017-06-05T11:13:00-0700 000006344 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware Configuration, Firmware, SmartCell Gateway, virtual SmartCell Gateway What will happen to EOL (End of Life) Access Points when I upgrade my SCG/SZ to a version where they are unsupported. If you are running vSZ HIgh-capacity mode (similar functionality to SCG-200/SCG-300) with multiple Zones, each of which can have it's own Firmware version, then you can keep zones with legacy AP's running the existing AP firmware when you upgrade to a newer cluster firmware. In general - vSZ will support n-2 versions of AP code - so if you are running 3.4.x it will support 3.2.x and 3.1.x version of AP code. AP's supported on 3.1 only will no longer be supported if you upgrade to 3.5 version (which can support 3.4.x and 3.2.x only). The Zones must already exist on the vSZ before upgrade which will maintain copies of the legacy AP code allowing new AP's to join that existing Zones. The older firmware will not be available on Zones created after upgrade. vSZ-Essentials (similar to SZ-100) only support a single Zone until 3.5 so this multiple zone system to keep legacy AP's is not available (but will be in future releases supporting 3.5 EOL AP's in 3.6 and 3.7) 7341 and 7762’s are last supported in 3.1.1 code – so it will NOT be supported in 3.5. The last version of vSZ High-Capacity that will support 3.1.1 AP code is 3.4.x The release notes for each version are usually correct in which AP’s will be supported <a name="_MailEndCompose">If you upgrade to 3.5 these AP’s will no longer be operational. In fact – you will not be able to upgrade to 3.5 until you delete any AP zone running 3.1.1 code.</a>

AP's are showing on the "unsupported" list

2017-06-05T11:13:00-0700 2020-01-30T07:28:18-0800 https://support.ruckuswireless.com/articles/000010103 2020-01-30T03:41:42-0800 monthly 0.8 admin,premium knowledge_article_4060 knowledge_article_4060 2020-01-30T03:39:46-0800 000010103 Validated (External) Premium Ruckus icx switches;Smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches, SmartCell Gateway Why is the config backup of ICX failing from vSZ WEB interface ? This is a defect on the ICX code that deny the backup to be taken from the smartzone and it will be fixed on the code 8090f.

Customer is trying to take configuration backup on ICX managed by vSZ from SZ WEB interface and it is failing

2020-01-30T03:41:42-0800 2020-01-30T06:00:10-0800 https://support.ruckuswireless.com/articles/000009291 2020-01-28T08:22:35-0800 monthly 0.8 admin,premium knowledge_article_3867 knowledge_article_3867 2019-05-31T16:29:51-0700 000009291 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How can I use ZoneDirector CLI commands to change the Authentication server in multiple WLAN's? To use CLI commands to make this change: You need to enter config mode: ruckus# config You have all rights in this mode. You need to enter each WLAN you wish to configure – this is where you need the magic of a CLI tool that can input a list of WLAN’s (name has to match so not to create a new WLAN) ruckus(config)# wlan ALCA The WLAN service 'ALCA' has been loaded. To save the WLAN service, type 'end' or 'exit'. To change Authentication server you have to know what type of encryption is used – this is for no encryption: ruckus(config-wlan)# mac none auth-server test2 The command was executed successfully. To save the changes, type 'end' or 'exit'. To change Authentication server when using wpa encryption you have to specify the whole string – which means you need to input the psk passphrase for that WLAN or changer it (more scripting magic … or too much ?) ruckus(config-wlan)# mac wpa passphrase YouAreNotReal algorithm AES auth-server Test The command was executed successfully. To save the changes, type 'end' or 'exit'. Then to save change: ruckus(config-wlan)# exit The WLAN service 'ALCA' has been updated and saved. Your changes have been saved. To get a list of existing WLAN's to put into a CLI script to automate this operation you can use ruckus# show wlan all Using a SSH/CLI tool like secureCRT to automate this operation is beyond the scope of this article and is dependent on program used. CLI guide for ZD (9.13.x) <a href="https://support.ruckuswireless.com/documents/1107-zonedirector-9-13-ga-cli-reference-guide" target="_blank">https://support.ruckuswireless.com/documents/1107-zonedirector-9-13-ga-cli-reference-guide</a>

Customer requires ZoneDirector CLI commands needed to change the authentication server in multiple WLAN configurations

2020-01-28T08:22:35-0800 2020-01-28T12:00:10-0800 https://support.ruckuswireless.com/articles/000010099 2020-01-27T23:01:20-0800 monthly 0.8 admin,premium knowledge_article_4057 knowledge_article_4057 2020-01-27T23:01:20-0800 000010099 Validated (External) Premium Zonedirector;Smartcell insight;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Insight (SCI) Performance;System network management Performance, System Network Management, ZoneDirector, SmartCell Insight Why the Application tab on the SCI does not display any data. ZoneDirector can send the application recognition statistics to SCI for analysis, for monitoring application reports such as top applications by client count and top applications by traffic volume. To resolve the issue, please follow the below steps: 1. Ensure that all other data\statistics available on SCI are upto date. 2. If yes, check on the ZD under Clients >> Application and make sure that the Application data is being collected. (See picture below). 3. ZD will be able to send the Application data to the SCI only if the ZD has the data. <img alt="User-added image" height="398" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054VG&feoid=00N50000002Cf3M&refid=0EM2J000000w9O5" width="834"></img> 4. If there are not data collected on the ZD, enable the below option on the WLANs for which you want to capture the traffic. Wireless LANs> Create/Edit > Advanced Options > Application Recognition & Control > Enable 5. Once enabled, ZD will start collecting the data from the AP and will be available on the SCI after the polling interval. If there is data available on the ZD but still SCI is not able to display on the SCI>> Application, please contact the support team.

This article will help you on how make sure that the Application tab on the SCI collects the data from ZD.

2020-01-27T23:01:20-0800 2020-01-28T00:00:07-0800 https://support.ruckuswireless.com/articles/000005579 2018-12-26T13:18:17-0800 monthly 0.8 admin,premium knowledge_article_2292 knowledge_article_2292 2016-03-10T14:54:34-0800 000005579 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway Does Ruckus have an .xml formated VSA data dictionary file for ClearPass Policy Manager RADIUS? Attached is an .xml format Ruckus Data Dictionary file for ClearPass Policy Manager.

The Clearpass Policy Manager server requires attribute dictionary files be in .xml format. This article contains a Ruckus VSA data dictionary file in .xml format for Aruba ClearPass server.

2018-12-26T13:18:17-0800 2020-01-23T15:34:24-0800 http://support.ruckuswireless.com/article_attachments/kA2500000008irICAQ?attachment_index=0 2020-01-23T15:34:24-0800 monthly admin,premium knowledge_article_2292 knowledge_article_2292_attachment_1 RuckusRadiusDictionary.xml 1357.0 application/xml https://support.ruckuswireless.com/articles/000010007 2020-01-22T08:01:45-0800 monthly 0.8 admin,premium knowledge_article_4054 knowledge_article_4054 2019-12-10T13:50:04-0800 000010007 Validated (External) Premium Ruckus cloud lte;Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Installation;Known issues and workarounds;Registration Firmware, Installation, Known Issues and Workarounds, Registration, Ruckus Cloud LTE, SmartCell Gateway, virtual SmartCell Gateway Why is my SmartZone controller failing to sync license with the Ruckus Cloud License Server (Flexnet). <ul><li style="">Please refer to the IP address listed in the two URL links below, which need to be opened on the customers firewall for daily LiMAN/Flexnet and SmartZone synchronization. This applies to all customers who have SZs behind a firewall with an IP/DNS policy configured. Configure your firewall accordingly with Flexera IP address for both uplink and downlink traffic.</li><li class="x">See the two KB articles from Flexera below. One is for the sites and the other is for downloads. </li></ul> Network Block or IP whitelist for FlexNet Operations Cloud <a href="https://community.flexera.com/t5/FlexNet-Operations-Knowledge/Network-Block-or-IP-whitelist-for-FlexNet-Operations-Cloud/ta-p/2713" style="color: #0033cc; text-decoration: underline;" target="_blank">https://community.flexera.com/t5/FlexNet-Operations-Knowledge/Network-Block-or-IP-whitelist-for-FlexNet-Operations-Cloud/ta-p/2713</a> IP Addresses for FlexNet Operations Cloud Download Servers <a href="https://community.flexera.com/t5/FlexNet-Operations-Knowledge/IP-Addresses-for-FlexNet-Operations-Cloud-Download-Servers/ta-p/2698" style="color: #0033cc; text-decoration: underline;" target="_blank">https://community.flexera.com/t5/FlexNet-Operations-Knowledge/IP-Addresses-for-FlexNet-Operations-Cloud-Download-Servers/ta-p/2698</a> Please visit <a href="https://Support.Ruckuswireless.com" style="color: #0033cc; text-decoration: underline;" target="_blank">https://Support.Ruckuswireless.com</a> for support.

Customers reported that SmartZone controller is failing to sync license with Flexnet.

2020-01-22T08:01:45-0800 2020-01-22T12:00:14-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000004zeiSAA?attachment_index=0 2020-01-22T12:00:14-0800 monthly admin,premium knowledge_article_4054 knowledge_article_4054_attachment_1 TSB2019 -009SZ_Cld_Lic_Serv_Blkd v3.pdf 305952.0 application/pdf https://support.ruckuswireless.com/articles/000009915 2020-01-22T08:02:18-0800 monthly 0.8 admin,premium knowledge_article_4053 knowledge_article_4053 2019-10-29T16:05:43-0700 000009915 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;Known issues and workarounds;Support license activation Installation, Known Issues and Workarounds, Support License Activation, SmartCell Gateway, virtual SmartCell Gateway What is happening if Ruckus Flexera Cloud License server for SZ/vSZ capacity licenses no longer supports TLS 1.0? <ul><li style="">Ruckus (Flexera) Cloud License Server TLS 1.1 support has been addressed on SZ/vSZ 3.4 and above.</li><li style="">All customers are recommended to upgrade the SW on the SZ/vSZ controllers to 3.4 or higher due to security vulnerability with TLS 1.0.</li><li style="">NOTE: <ul><li style="">Active support entitlement on the controller is required to upgrade the SW.</li><li>Please review 3.4.2P1 release note to ensure the AP model is supported after the upgrade.</li><li style="">SZ and vSZ SW 3.2 or below will not be able to synchronize with the Ruckus (Flexera) Cloud License Server after March 31, 2020 due to critical security vulnerability with TLS 1.0.</li></ul> </li><li style="">Please visit <a href="https://Support.Ruckuswireless.com" style="color: #0033cc; text-decoration: underline;" target="_blank">https://Support.Ruckuswireless.com</a> to upgrade SZ/vSZ 3.4.2P1. </li></ul>

As of Dec. 5, 2019, Ruckus Flexera Cloud License server for SZ/vSZ capacity licenses no longer supports TLS 1.0.

2020-01-22T08:02:18-0800 2020-01-22T12:00:12-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000004zZiSAI?attachment_index=0 2020-01-22T12:00:12-0800 monthly admin,premium knowledge_article_4053 knowledge_article_4053_attachment_1 TSB_2019-007_TLS1.0_Spprt_v3.pdf 306918.0 application/pdf https://support.ruckuswireless.com/articles/000009989 2020-01-15T14:35:50-0800 monthly 0.8 admin,premium knowledge_article_4047 knowledge_article_4047 2020-01-13T01:16:49-0800 000009989 Validated (External) Premium Virtual smartcell gateway Configuration;Troubleshooting Configuration, Troubleshooting, virtual SmartCell Gateway Why am I seeing this error in the event logs and how do I remove them " AP disconnected from data plane []. Reason: [no remote peer available]" Disable Tunnel if selected under "Access Network:, uncheck to un select and save: <img alt="User-added image" height="478" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054Sv&feoid=00N50000002Cf3M&refid=0EM2J000000vjtJ" width="500"></img>

Log event 610 filling event log due to client miss-configuration of Ethernet Services and profiles

2020-01-15T14:35:50-0800 2020-01-15T18:00:07-0800 https://support.ruckuswireless.com/articles/000009881 2019-10-23T03:00:42-0700 monthly 0.8 admin,premium knowledge_article_3967 knowledge_article_3967 2019-10-23T03:00:42-0700 000009881 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, SmartCell Gateway, virtual SmartCell Gateway Does SZ support use of RFC5343 SNMP Engine-ID? SmartZone does not currently support the local Engine-ID discovery mechanism documented in RFC5343. Therefore it is not possible to customise an Engine-ID in SZ nor provide SZ's Engine-ID to a 3rd party SNMPv3 management system. More info on Engine-ID can be found on the IETF website: https://tools.ietf.org/rfc/rfc5343.txt

Summary of Engine-ID support in SmartZone

2019-10-23T03:00:42-0700 2020-01-15T10:33:14-0800 https://support.ruckuswireless.com/articles/000010052 2020-01-13T01:22:47-0800 monthly 0.8 admin,premium knowledge_article_4045 knowledge_article_4045 2020-01-13T01:22:47-0800 000010052 Validated (External) Premium Virtual smartcell gateway Configuration;Troubleshooting Configuration, Troubleshooting, virtual SmartCell Gateway How do I use PEAP based radius for vSZ/SZ admin login? Configuration required on the Radius server and controller will be the same as mentioned in the below article. <a href="https://support.ruckuswireless.com/articles/000008283" title="https://support.ruckuswireless.com/articles/000008283" target="_blank">https://support.ruckuswireless.com/articles/000008283</a> However, In order to use PEAP based authentication, you must configure the Trusted CA certificate to support PEAP and EAP connection respectively and if customer not using any certificate on controller then extract the Root CA certificate from Radius server and upload the same under System->Certifcates-> SZ Trusted CA certificates/Chain (external). <img alt="Certificate upload" height="154" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054Pm&feoid=00N50000002Cf3M&refid=0EM2J000000vw02" width="500"></img>

Configuration required on SZ/vSZ and Radius server for new feature admin login with PEAP.

2020-01-13T01:22:47-0800 2020-01-13T06:00:09-0800 https://support.ruckuswireless.com/articles/000010008 2020-01-09T13:22:50-0800 monthly 0.8 admin,premium knowledge_article_4044 knowledge_article_4044 2019-12-26T12:54:13-0800 000010008 Validated (External) Premium R320;R750;R610;R650;E510;H320;H510;R510;T710;M510;R730;R720;C110;R710;P300;Ruckus R320;RUCKUS R750;Ruckus R610;RUCKUS R650;Ruckus E510;Ruckus H320;Ruckus H510;Ruckus R510;Ruckus T710;Ruckus T710s;Ruckus M510;Ruckus M510-JP;Ruckus R730;Ruckus R720;Ruckus C110;Ruckus R710;Ruckus P300 Installation;Security;System network management Installation, Security, System Network Management, R320, R750, R610, R650, E510, H320, H510, R510, T710, M510, R730, R720, C110, R710, P300 Why does my Ruckus AP prompt me to change the passcode when I first login to it? Please read attached TSB for more details, including the full listing of all Ruckus APs that are affected.

This Bulletin describes the changes available on the Ruckus standalone AP Image 114.0.0.0.1294, which was created because of California Senate Bill 327 (CA SB-327) which goes into effect January 1, 2020.

2020-01-09T13:22:50-0800 2020-01-09T18:00:08-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000004zenSAA?attachment_index=0 2020-01-09T18:00:08-0800 monthly admin,premium knowledge_article_4044 knowledge_article_4044_attachment_1 TSB2019-008-IoT-AP_Changes_Rev1.0.pdf 236588.0 application/pdf https://support.ruckuswireless.com/articles/000009927 2020-01-07T15:01:06-0800 monthly 0.8 admin,premium knowledge_article_4030 knowledge_article_4030 2019-12-27T02:53:52-0800 000009927 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;Configuration;Firmware;Known issues and workarounds Performance, Configuration, Firmware, Known Issues and Workarounds, Unleashed Why R710/T710 LACP #get bond output under CLI showing LACP is disabled? Upgrade Unleashed network to 200.7.10.202.92 (GA Refresh2)

R710/T710 APs were not able to display bonding configuration status using get bond despite LACP/LAG configured correctly on the network

2020-01-07T15:01:06-0800 2020-01-07T18:00:08-0800 https://support.ruckuswireless.com/articles/000010053 2020-01-07T07:06:24-0800 monthly 0.8 admin,premium knowledge_article_4041 knowledge_article_4041 2020-01-07T07:06:24-0800 000010053 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor What is the meaning of fw(5189) : Unknown error seen during AP firmware update via CLI ? Reboot the AP between consecutive firmware update using AP CLI

This artcile describes a type of error seen when performing an AP firmware update via CLI

2020-01-07T07:06:24-0800 2020-01-07T12:00:11-0800 https://support.ruckuswireless.com/articles/000010022 2020-01-07T07:08:08-0800 monthly 0.8 admin,premium knowledge_article_4039 knowledge_article_4039 2020-01-07T07:08:08-0800 000010022 Validated (External) Premium Sz100d Installation Installation, SZ100D What are the status lights on the SZ-100D physical data plane appliance ? <table border="1"><tbody><tr><td colspan="1" rowspan="1" style="background-color: rgb(187, 187, 187);">Operation</td><td colspan="1" rowspan="1" style="background-color: rgb(187, 187, 187);">Status LED Behavior</td><td colspan="1" rowspan="1" style="background-color: rgb(187, 187, 187);">Remark</td></tr><tr><td colspan="1" rowspan="1"> Normal Operation (SSH Tunnel Enabled) </td><td colspan="1" rowspan="1">Solid Green</td><td colspan="1" rowspan="1"> </td></tr><tr><td colspan="1" rowspan="1"> Out of Service (cluster node, data plane, network partition) </td><td colspan="1" rowspan="1">Solid Red</td><td colspan="1" rowspan="1"> </td></tr><tr><td colspan="1" rowspan="1">Join a node</td><td colspan="1" rowspan="1">Fast Blinking Green</td><td colspan="1" rowspan="1">Only change LED status on join node</td></tr><tr><td colspan="1" rowspan="1">Remove a node</td><td colspan="1" rowspan="1">Fast Blinking Green</td><td colspan="1" rowspan="1">Only change LED status on remove node</td></tr><tr><td colspan="1" rowspan="1">Backup Process</td><td colspan="1" rowspan="1">Fast Blinking Green</td><td colspan="1" rowspan="1"> </td></tr><tr><td colspan="1" rowspan="1">Upgrade Process</td><td colspan="1" rowspan="1">Fast Blinking Green</td><td colspan="1" rowspan="1"> The upgrade process requires the system reboot. LED status during the upgrade process : Fast Blinking Green (start upgrade operation) -> [node by node] : Slow Blinking Red (Shouting Down, Booting up) -> Fast Blinking Green (post upgrade operation) -> Solid Green (Normal Operation) </td></tr><tr><td colspan="1" rowspan="1">Restore Process</td><td colspan="1" rowspan="1">Fast Blinking Red</td><td colspan="1" rowspan="1"> The restore process requires the system reboot. LED status during the restore process : Fast Blinking Red (start restore operation )-> Slow Blinking Red (Shouting Down, booting up ) -> Solid Green (Normal Operation) </td></tr><tr><td colspan="1" rowspan="1">Factory-Reset Process</td><td colspan="1" rowspan="1">Fast Blinking Red</td><td colspan="1" rowspan="1"> </td></tr><tr><td colspan="1" rowspan="1">Factory Default State</td><td colspan="1" rowspan="1">Slow Blinking Green</td><td colspan="1" rowspan="1"> </td></tr><tr><td colspan="1" rowspan="1">Booting Up</td><td colspan="1" rowspan="1"> Slow Blinking Red </td><td colspan="1" rowspan="1"> </td></tr><tr><td colspan="1" rowspan="1">Shutting Down</td><td colspan="1" rowspan="1">Slow Blinking Red</td><td colspan="1" rowspan="1"> </td></tr></tbody></table>

This article supplements the SZ-D quick setup guide to share more details on the physical data plane appliance status LED

2020-01-07T07:08:08-0800 2020-01-07T12:00:07-0800 https://support.ruckuswireless.com/articles/000009666 2020-01-06T09:48:48-0800 monthly 0.8 admin,premium knowledge_article_4036 knowledge_article_4036 2019-08-01T15:06:23-0700 000009666 Validated (External) Premium Ruckus icx switches Configuration;Security Configuration, Security, Ruckus ICX Switches What is the meaning of each OID value in SNMP? In the OID Repository below, we can find the meaning of each value: Example: 1.3.6.1.4.1.1991.1.3.60.2.1.1.3 95 cypecc01mdf-bi77001a ICX7750-48F iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) 1991 products(1) registration(3) snICX7750Family(60) snICX775048FFamily(2) snICX775048FBaseFamily(1) snICX775048F(1) snICX775048FRouter(3) http://www.oid-info.com/index.htm: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054R4&feoid=00N50000002Cf3M&refid=0EM2J000000vys1"></img>

Meaning of OID values

2020-01-06T09:48:48-0800 2020-01-06T12:00:14-0800 https://support.ruckuswireless.com/articles/000009688 2020-01-06T10:16:38-0800 monthly 0.8 admin,premium knowledge_article_4034 knowledge_article_4034 2019-08-07T12:35:54-0700 000009688 Validated (External) Premium Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, SPoT Why are APs that are connected to the VSPOT LBS server showing status as RED? With the current code VSPOT 3.7.2 and below, VSZ 5.1.1.x and below, there is a limitation of 15 character for naming VENUE in SPOT/VSPOT.

APs that are connected to the VSPOT LBS server showing status as RED

2020-01-06T10:16:38-0800 2020-01-06T12:00:10-0800 https://support.ruckuswireless.com/articles/000009988 2020-01-02T14:55:54-0800 monthly 0.8 admin,premium knowledge_article_4020 knowledge_article_4020 2019-12-11T22:15:40-0800 000009988 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway How does 802.1x-MAC option work for WLAN authenticaiton on SmartZone platform? There is an authentication feature available when you select Standard WLAN type called 802.1x & MAC <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054Qk&feoid=00N50000002Cf3M&refid=0EM2J000000vjrI" style="width: 987px; height: 228px;"></img> The SZ implementation of this feature is very different then the Zone Director version - it requires device to both authenticate via 802.1x and also MAC authentication. Since the MAC authentication and the 802.1X authentication could return RADIUS attributes, we will restrict the system to honor only the attributes returned for the 802.1X authentication. Other than success, the MAC authentication is not used for applying policy. But this is also not part of the Captive Portal authentication system but a standalone authentication feature (although you can add either 802.1x or MAC auth on top of Hotspot authentication). The client device must support an 802.1x EAP supplicant. The RADIUS server must also support the selected EAP supplicant and also accept both the EAP password (depending on EAP type ie certificate for EAP-TLS, username and password for EAP-PEAP or EAP-TTLS) and also must have the client MAC address for user name and password for the MAC authentication type. On the SZ both will be checked before client can connect (not a bypass). Here are some notes: <h2 style="">Functionality</h2> When the administrator selects the WLAN type with authentication method "802.1X & MAC," the following behavior is expected: <ol><li>MAC address authentication proceeds as with a WLAN with authentication type "MAC Address." </li><li>If MAC address authentication is successful, 802.1X/EAP authentication proceeds as with a WLAN with authentication type "802.1X EAP"</li><li>If both are successful, the UE is authorized to access the WLAN</li></ol> <h2 style="">Policy Precedence</h2> Since the MAC authentication and the 802.1X authentication could return RADIUS attributes, we will restrict the system to honor only the attributes returned for the 802.1X authentication. Other than success, the MAC authentication is not used for applying policy. <h2 style="">Identifying the Username</h2> With two usernames (MAC address and 802.1X username), we need to decide which one to use. Both for the SZ system (Client list) as well as ACCT-Start and any other events/logs, we will use the 802.1X username as the username. This is an extra secure feature that will block clients whose MAC address not listed in RADIUS from even attempting 802.1x authentication, which is in itself a very secure authentication method.

Description of the operation of 802.1x-MAC option available for WLAN configuration on SZ controller platform

2020-01-02T14:55:54-0800 2020-01-02T18:00:11-0800 https://support.ruckuswireless.com/articles/000009985 2020-01-02T15:01:11-0800 monthly 0.8 admin,premium knowledge_article_4017 knowledge_article_4017 2019-12-11T22:22:50-0800 000009985 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How to resolve NET::ERR_CERT_REVOKED SmartZone UI issues caused by MAC OS 10.15.1 or later update <ul><li>Use an alternate browser such as Firefox</li><li>Suggest to install a compliant CA signed certificate on the SmartZone</li><li>Regenerate default self-signed certificate with validity period of 825 days</li></ul> NOTE - Regenerating self-signed certificate is production impacting and will impact services requiring TLS certificate such as tunnel & hotspot WLAN and management web services. Please contact Commscope support personnel to assist

This article provides the work around for MAC OS 10.15.1 or later Chrome & Safari users facing SmartZone UI error NET::ERR_CERT_REVOKED

2020-01-02T15:01:11-0800 2020-01-02T18:00:09-0800 https://support.ruckuswireless.com/articles/000010054 2020-01-01T08:35:26-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_4031 knowledge_article_4031 2020-01-01T08:35:26-0800 000010054 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Security Security, Unleashed Unleashed Security Issue Update Unleashed Software per Instructions available at How To Hub for Ruckus at Home: <a href="https://support.ruckuswireless.com/hth-ruckus-at-home" target="_blank">https://support.ruckuswireless.com/hth-ruckus-at-home</a>

Homeowner customers need security update for Unleashed Access Points (APs)

2020-01-01T08:35:26-0800 2020-01-01T12:00:08-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000004zgZSAQ?attachment_index=0 2020-01-01T12:00:08-0800 monthly admin,premium,warranty,guest knowledge_article_4031 knowledge_article_4031_attachment_1 HomeownerQAFinalver.pdf 179776.0 application/pdf https://support.ruckuswireless.com/articles/000004520 2019-12-27T04:37:28-0800 monthly 0.8 admin,premium knowledge_article_4029 knowledge_article_4029 2015-05-07T16:11:01-0700 000004520 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway Known issues and workarounds Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway How to get GUI access for vSCG/vSZ/SZ managed APs Log in to the AP CLI and give the following command and then the AP GUI will be accessible from the browser. set https enable <div style="margin-left: 40px;"><img alt="User-added image" height="255" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054Pc&feoid=00N50000002Cf3M&refid=0EM2J000000vvMb" width="500"></img></div>

This article provides information on how to get the HTTPS access for the v/SZ managed APs.

2019-12-27T04:37:28-0800 2019-12-27T06:00:09-0800 https://support.ruckuswireless.com/articles/000005856 2019-12-25T12:49:31-0800 monthly 0.8 admin,premium knowledge_article_4027 knowledge_article_4027 2018-09-12T14:02:30-0700 000005856 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Firmware;System network management;Troubleshooting Configuration, Firmware, System Network Management, Troubleshooting, Cloudpath How do I install an SSL certificate on Cloudpath? To create and upload an SSL certificate on Cloudpath, use the following process. Step 1: Generate a CSR on Cloudpath. Only do this once. Administration > System Services > Web Server > Upload WWW Certificate. * If you are re-issuing a wildcard certificate, make sure the hostname includes the *. For example: *.domain.com. * If using a single-domain SSL certificate, the HTTPS server name should already be populated for you. Step 2: Once issued via the public CA, download certificates for Apache. They should be in PEM format.If the certificate is in .crt format,following commands can be used to covert certificate from .crt to .pem using openssl or cygwin. openssl x509 -in mycert.crt -out mycert.pem -outform PEM When viewing the files via Notepad, it should begin and end with this: -----BEGIN CERTIFICATE----- -----END CERTIFICATE----- Step 3: A public key and a chain should be uploaded. The public key usually has a filename that's similar to the domain name. * The chain will vary from CA, but usually it will say Root, Intermediate. Root could be imported in chain option and intermediate can be imported in Additional chain. * Root and intermediate could be extracted from certificate(.crt). <img alt="User-added image" height="471" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054PS&feoid=00N50000002Cf3M&refid=0EM2J000000vuph" width="500"></img> Click on intermediate/Root --> View certificate --> Details --> Copy to file --> Certificate export --> P7b Format <img alt="User-added image" height="490" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054PS&feoid=00N50000002Cf3M&refid=0EM2J000000vupm" width="500"></img> Step 4: Return to the Upload WWW Certificate page and upload the private key(.pem format) and Private Key Password. It is recommended to create a VMware Snapshot of your Cloudpath VM prior to applying the SSL certificates.In some cases if the wrong certificate is applied it can cause the web server to crash. While this is recoverable, the quickest solution is to roll back to the previous VMware Snapshot. Step 5: To verify if the correct chain is imported,ssh into cloudpath CLI with cpn_service as username and password (port 8022). #console [cpn_service@10 ~]$ openssl x509 -text -noout -in /etc/pki/tls/cert/ca_intermediate.cer Here,there should be two certificates. Following is the example. <img alt="User-added image" height="623" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054PS&feoid=00N50000002Cf3M&refid=0EM2J000000vupr" width="500"></img> <img alt="User-added image" height="382" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054PS&feoid=00N50000002Cf3M&refid=0EM2J000000vupw" width="500"></img> .

How to generate a CSR in Cloudpath and install the SSL certificate.

2019-12-25T12:49:31-0800 2019-12-25T18:00:08-0800 https://support.ruckuswireless.com/articles/000010050 2019-12-24T12:30:48-0800 monthly 0.8 admin,premium knowledge_article_4026 knowledge_article_4026 2019-12-24T12:30:48-0800 000010050 Validated (External) Premium Ruckus icx switches Performance Performance, Ruckus ICX Switches What is the reason for stack reboot in version 8090 and 8091? The official fix is to use the link-dampening commands in affected environment. The link-dampening feature protects networks from the effects of microflaps that can periodically occur in some environments and is good practice to have it configured. (Example of command): enable configure terminal linkdampen interval 4 ethernet 1/2/3 exit wr mem • Engineering is considering enabling the link-dampening feature by default in a future version of code. TBD on timing. code with the link-dampening feature enabled. The target path code for the 7250 is 8.0.90d. Currently, patch code 8.0.90e has been released.

Stack switch member spontaneously rebooting after upgrade to 8090 and 8091 versions was stable for years on 8030

2019-12-24T12:30:48-0800 2019-12-24T18:00:08-0800 https://support.ruckuswireless.com/articles/000009971 2019-12-19T21:13:19-0800 monthly 0.8 admin,premium knowledge_article_4025 knowledge_article_4025 2019-11-22T03:24:28-0800 000009971 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches How to enable optical monitoring for down ports? Ports that are down are not included for optical monitoring by default configuration. The configuration which would allow the monitoring for the down ports on an ICX device is, optical-monitor down-port-enable (config prompt) ICX(config)#optical-monitor down-port-enable Optical monitoring for down ports is enabled.

Enabling optical monitoring for ports that are down.

2019-12-19T21:13:19-0800 2019-12-20T00:00:08-0800 https://support.ruckuswireless.com/articles/000006060 2016-09-26T16:12:16-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2423 knowledge_article_2423 2016-09-26T16:12:16-0700 000006060 Validated (External) Public Virtual smartcell gateway Configuration;Installation;Security;Known issues and workarounds Configuration, Installation, Security, Known Issues and Workarounds, virtual SmartCell Gateway Why am I not receiving emails via SMTP when alarm is triggered? Customer was not receiving any SMTP emails with AP disconnects / reconnects even though SMTP was configured correctly. - opened AP/ZD communication ports as per KBA-3402, ports open as per the UserGuide/AdminGuide appendix. - opened all outbound firewall controller ports as per KBA-4316. Both of these changes did not seem to help. However, the end-user decided to reboot the controller some days later and after the reboot the issue went away, he is now receiving emails. Please consult with your Ruckus support Engineer before opening outbound firewall ports and before rebooting the controller. It might be a better option to allow a certain port, like SMTP port traffic, before opening all outbound firewall ports (as per KBA-4316).

Email setup email works but subsequent alarms are not being sent via SMTP as we are triggering but no messages reaching via email

2016-09-26T16:12:16-0700 2019-12-19T08:55:22-0800 https://support.ruckuswireless.com/articles/000010042 2019-12-19T05:09:21-0800 monthly 0.8 admin,premium knowledge_article_4024 knowledge_article_4024 2019-12-19T05:07:06-0800 000010042 Validated (External) Premium Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration Configuration, SZ300, SCG200, virtual SmartCell Gateway, SZ100 Does SZ/vSZ support WPAD auto-proxy configuration? vSZ/SZ does not support WPAD auto-proxy configuration to update UE's browser with proxy settings when they connect to an SSID. This feature is only supported on the ZD platform

This article provide information on WPAD auto-proxy configuration supportability on SZ/vSZ

2019-12-19T05:09:21-0800 2019-12-19T06:00:07-0800 https://support.ruckuswireless.com/articles/000009127 2019-06-11T16:41:45-0700 monthly 0.8 admin,premium knowledge_article_3671 knowledge_article_3671 2019-04-25T05:01:35-0700 000009127 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector How does Hotspot (WISPr) call flow work with ZD and external Web Portal Server ? Following diagram explains the step by step procedure on how Hotspot call flow works: <img alt="User-added image" height="537" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Sfz&feoid=00N50000002Cf3M&refid=0EM2J000000qEFm" width="911"></img> Overall hotspot functionality can be explained in following steps: •1. User connects to a hotspot SSID from his laptop or smartphone. Since Hotspot is a Layer 3 Authentication, User must have an IP and DNS. However, at this stage user remains Un-authenticaed and allowed access to some pre-defiled ports, including DHCP, DNS, HTTP, HTTPS and Destinations configured under walled garden. •2. User opens a browser( or gets an auto pop-up login page) and tries to go to any intended page, example www.ruckuswireless.com. •3. User device then sends a DNS request for www.ruckuswireless.com and gets reply with actual IP of www.ruckuswireless.com. •4. User device browser does a TCP 3-way handshake with www.ruckuswireless.com's IP. The ZD spoofs SYN+ACK response and masquerading self as the web server. This makes client browser believe that it is still communicating with www.ruckuswireless.com. •5. Users will be redirected to the pre-configured location when they try to browse the web sites outside the walled garden. Below is a sample HTTP Redirection: HTTP/1.0 302 Moved Temporarily location: https://192.168.0.100/cgi-bin/login.cgi?res=notyet&uamip=10.1.0.1&uamport=3990&challenge=40695c65fc2f66b4da3ee4d17fc9bca4&mac=00-18-DE-D9-0E-F3&ip=10.1.0.2&called=00-1D-2E-16-45-F8&nasid=nas01&userurl=http%3a%2f%2fwww.ruckuswireless.com%2fwebhp%3fhl%3den At this step User may get a Certificate warning which is expected as the FQDN(common name) in the certificate presented by the controller is impossible to match the URL that UE tries to visit. •6. User browser initiates an HTTP/HTTPS GET connection to address of controller's IP. •7. URL will present a HTML Form which requires the User Name and Password. •8. User fills and submits the form to the ZD. •9. ZD forwards these credentials to the RADIUS server for authentication. •10.If the User Name and Password is valid, the user will be redirected to the requested URL cached by the ZD; otherwise, an error message will be displayed. •11.AP will then allow browsing to the internet. <div style="margin-left: .25in; text-align: left;"> </div> <div style="margin-left: .25in; text-align: left;"> </div> <div style="margin-left: .25in; text-align: left;"> “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.” </div> <div style="margin-left: .25in; text-align: left;"> </div>

This article explains the call flow for Hotspot(WISPr) with ZD and external Web Portal Server

2019-06-11T16:41:45-0700 2019-12-18T12:43:59-0800 https://support.ruckuswireless.com/articles/000009970 2019-12-13T09:46:10-0800 monthly 0.8 admin,premium knowledge_article_4022 knowledge_article_4022 2019-11-28T02:04:11-0800 000009970 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Known issues and workarounds Known Issues and Workarounds, Cloudpath Why am I not able to save the Palo Alto settings on the Cloud hosted Cloudpath? Upgrade to a version of code that contains the fix once it becomes available. Check Release Notes on this product for future fixes.

Details about why the user is unable to save the Palo Alto settings and how to resolve it.

2019-12-13T09:46:10-0800 2019-12-13T12:00:11-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000004zcXSAQ?attachment_index=0 2019-12-13T12:00:11-0800 monthly admin,premium knowledge_article_4022 knowledge_article_4022_attachment_1 Screen shots.docx 372175.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000009741 2019-12-11T07:36:19-0800 monthly 0.8 admin,premium knowledge_article_3975 knowledge_article_3975 2019-08-29T11:38:12-0700 000009741 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Insight How to increase Druid cache size on SCI? Increase HDD storage and Druid cache size.

SCI HDD data storage is increased still druid cache size is at high utilization

2019-12-11T07:36:19-0800 2019-12-11T12:00:08-0800 https://support.ruckuswireless.com/articles/000006217 2019-12-09T14:26:52-0800 monthly 0.8 admin,premium knowledge_article_4013 knowledge_article_4013 2017-01-18T11:47:43-0800 000006217 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway How do I configure Bonjour Gateway See deployment and configuration details in attached Bonjour GW Guide.

How to configure and troubleshoot Ruckus Bonjour Gateway in ZD and vSZ/SZ-100/SCG

2019-12-09T14:26:52-0800 2019-12-09T18:00:08-0800 http://support.ruckuswireless.com/article_attachments/kA250000000LbJoCAK?attachment_index=0 2019-12-09T18:00:08-0800 monthly admin,premium knowledge_article_4013 knowledge_article_4013_attachment_1 RUC-197 Bonjour Gateway Guide.pdf 1139540.0 application/pdf https://support.ruckuswireless.com/articles/000006281 2019-01-27T22:35:22-0800 monthly 0.8 admin,premium knowledge_article_3568 knowledge_article_3568 2017-03-08T11:09:02-0800 000006281 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;System network management Configuration, System Network Management, Unleashed Do we have Speedflex in Unleashed? - SpeedFlex testing tool is not available in Unleashed version till 200.2 - Release 200.3 has launched the support for SpeedFlex testing tool similar to Zone Director. - The speed test can be initiated from both Master and Member AP WebUI. - Ruckus SpeedFlex app is available for both iOS & Android mobile devices - The SpeedFlex can be run between the below setup: 1) Master AP and Member AP (Member AP can be Ethernet connected or over a Mesh link) 2) Client device and an Unleashed AP within the Unleashed network - To run SpeedFlex between member AP and Master AP, please expand show system overview info by choosing respective AP from the Access point list. <img alt="SpeedFlex between AP to AP" height="282" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Rs&feoid=00N50000002Cf3M&refid=0EM50000000gNut" width="500"></img> - To run SpeedFlex between clients and the AP, go to client list as shown below. <img alt="SpeedFlex between connected client and AP" height="162" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Rs&feoid=00N50000002Cf3M&refid=0EM50000000gNuo" width="500"></img>

Unleashed has SpeedFlex for Clients or APs since 200.2.

2019-01-27T22:35:22-0800 2019-12-08T13:48:03-0800 https://support.ruckuswireless.com/articles/000009857 2019-12-02T09:23:11-0800 monthly 0.8 admin,premium knowledge_article_4011 knowledge_article_4011 2019-12-02T09:23:11-0800 000009857 Validated (External) Premium Ruckus icx switches System network management System Network Management, Ruckus ICX Switches How to find MAC addresses in the ICX? There is a standard OID which has been tested by different vendors and that will work perfectly fine in all ICX platforms. Please refer to example below: object dot1dTpFdbEntry, OID: 1.3.6.1.2.1.17.4.3.1 <a href="file:///C:/Users/Administrator/Desktop/usr" target="_blank">C:\Users\Administrator\Desktop\usr</a>>snmpwalk -v2c -c ruckus 10.176.209.82 1.3.6.1.2.1.17.4.3.1 iso.3.6.1.2.1.17.4.3.1.1.0.5.51.144.166.79 = Hex-STRING: 00 05 33 90 A6 4F iso.3.6.1.2.1.17.4.3.1.1.204.78.36.207.149.1 = Hex-STRING: CC 4E 24 CF 95 01

There is a standard OID example that can be used to find the MAC address of end devices plugged into the ICXs'

2019-12-02T09:23:11-0800 2019-12-02T12:00:08-0800 https://support.ruckuswireless.com/articles/000009981 2019-12-01T18:30:59-0800 monthly 0.8 admin,premium knowledge_article_4010 knowledge_article_4010 2019-12-01T18:30:59-0800 000009981 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway How Anti-Spoofing inter-works with Client Isolation in R5.x onwards Anti-spoofing is separated from Client Isolation feature from Release 5.x onwards and both of the features would be working independently of each other. The two features are independently configurable. With respect to the ingress packet processing order, anti-spoof filter appears first and CI filter is next (both unicast and multicast filters). The reason is that, if anti-spoof is enabled and the packet is spoofed, it must be dropped first. Only genuine packets must be validated against CI filters when anti-spoof is enabled. Below are scenarios and its expected behaviour for both Anti-spoof feature and Client Isolation feature: When Anti-spoof feature ENABLED & Client Isolation feature DISABLED Anti-spoof behavior: Spoofed packets originating from wlanX will be dropped. Client isolation behavior: For genuine packets from wlanX, isolation behavior will be as per CI redesign. Spoofed packets from wlanX will not reach CI algorithm. When Anti-spoof feature DISABLED & Client Isolation feature ENABLED Anti-spoof behavior: Spoofed packets originating from wlanX will be allowed. Client isolation behavior: For genuine packets from wlanX, isolation behavior will be as per CI redesign FS. Spoofed packets originating from clients on wlanX MAY still reach other clients on wlanX and clients on other wlan/network. The reason is, if the source MAC of the packet is spoofed in L2 header, then CI algorithm will not know, if the CI filters are enabled on that client. Note: L2 source MAC spoofing is a highly unlikely event, when client is connected to secure network because the encryption keys are usually associated with client MAC and thus, for a spoofed MAC, packet decryption would fail. When Anti-spoof feature ENABLED & Client Isolation feature ENABLED Anti-spoof behavior: Spoofed packets originating from wlanX will be dropped. Client isolation behavior: For genuine packets from wlanX, isolation behavior will be as per CI redesign FS. Spoofed packets from wlanX will not reach CI algorithm When Anti-spoof feature DISABLED & Client Isolation feature DISABLED Anti-spoof behavior: Spoofed packets originating from wlanX will be allowed. Client isolation behavior: For all packets from wlanX, isolation behavior will be as per CI redesign FS.

This article explains on changes made and inter-working of Anti-spoofing feature with Client Isolation

2019-12-01T18:30:59-0800 2019-12-02T00:00:08-0800 https://support.ruckuswireless.com/articles/000009852 2019-11-27T11:24:30-0800 monthly 0.8 admin,premium knowledge_article_4006 knowledge_article_4006 2019-10-17T12:58:21-0700 000009852 Validated (External) Premium Ruckus icx switches Performance;Registration Performance, Registration, Ruckus ICX Switches Why is ICS being denied join? As per defect FI-203554 Engineering is working on further resolution. Check release notes for fix status.

ICX is joining the group with /32 subnet mask when it should be /128 since it is IPv6 PIM

2019-11-27T11:24:30-0800 2019-11-27T12:00:11-0800 https://support.ruckuswireless.com/articles/000009739 2019-11-27T11:55:01-0800 monthly 0.8 admin,premium knowledge_article_4005 knowledge_article_4005 2019-09-12T10:35:20-0700 000009739 Validated (External) Premium Ruckus support services Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus Support Services Why does Mac book 2019 have connectivity issue when it joins the WLAN for the first time while other Mac Book does not? The issue is seen with only Mac Book 2019 with OS 10.15 and when it is connecting to the WLAN for the very first time. Below steps to be followed to resolve the issue: 1) Completely remove the SSID from the Mac book. 2) Add the SSID manually as a preferred network. 3) Move that SSID at the top. 4) Turn OFF Wireless adapter and turn it back ON, it will connect.

Mac Book 2019 with OS 10.15 not connecting to the WLAN

2019-11-27T11:55:01-0800 2019-11-27T12:00:09-0800 https://support.ruckuswireless.com/articles/000003970 2018-10-24T23:17:58-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1578 knowledge_article_1578 2015-01-30T00:25:30-0800 000003970 Validated (External) Public Virtual smartcell gateway Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, virtual SmartCell Gateway How can I see all the guest passes created on a vSCG? For vSZ firmware 3.x to 3.4 To create a guest pass first of all a guest network should exist. This can be setup under Configuration --> AP Zones. Pick your AP zone and then go to the WLAN page. There you can choose "Guest Access" as the authentication type while creating a new SSID. Now you can create guest passes by going to the Identity --> Guest Pass page. But this page will only show the latest guest pass. If you want to see all of them, go to the Identity --> Profiles page. Here choose "Type" from the first dropdown and you will see "Guest" as option in the second dropdown box. Choose this and then click on the "Load Data" button to see the existing guest passes. For vSZ firmware 3.5 and higher If you are running your controller on firmware 3.5 or higher , please navigate to vSZ GUI >> Clients >> Guests. You can see all the guest passes generated for specific AP zone.

This article explains what needs to be done to see all guest passes ever created on a vSCG.

2018-10-24T23:17:58-0700 2019-11-26T12:57:16-0800 https://support.ruckuswireless.com/articles/000009969 2019-11-21T06:14:28-0800 monthly 0.8 admin,premium knowledge_article_4002 knowledge_article_4002 2019-11-21T06:14:28-0800 000009969 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration Configuration, Cloudpath What is the radius server IP address in the CloudPath? When you install the CloudPath server, the radius server settings show the IP address as 'cp-as-1'. This is the default configuration. <div style="margin-left: 40px;"><img alt="User-added image" height="318" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054HY&feoid=00N50000002Cf3M&refid=0EM2J000000ve8v" width="500"></img></div> - If you are using the Ruckus Cloud-hosted CloudPath server, then you can 'nslookup' to the CloudPath domain name and use the same IP address in the Radius server settings. <div> </div> <div style="margin-left: 40px;">Example: C:\Users\Windows>nslookup as1.cloudpath.net Server: asia-dns.arrisi.com Address: 10.10.10.106 Non-authoritative answer: Name: cp-as-1.cloud.ruckuswireless.com Address: 35.198.203.128 Aliases: as1.cloudpath.net</div> - If the CloudPath server is locally hosted then you can 'nslookup' to your local CloudPath domain name and use that IP address in the Radius server configuration.

This article provides you with the information on how to get the radius server IP address for CloudPath.

2019-11-21T06:14:28-0800 2019-11-21T12:00:10-0800 https://support.ruckuswireless.com/articles/000006369 2017-05-10T15:43:16-0700 monthly 0.8 admin,premium knowledge_article_2617 knowledge_article_2617 2017-05-09T15:00:02-0700 000006369 Validated (External) Premium Ruckus support services Firmware Firmware, Ruckus Support Services How can I find the latest Ruckus ICX switch FastIron OS version? The table below displays latest supported FastIron OS release per switch model: <img alt="User-added image" height="326" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000000PtJ&feoid=00N50000002Cf3M&refid=0EM50000000FXHX" width="1281"></img> <img alt="User-added image" height="382" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000000PtJ&feoid=00N50000002Cf3M&refid=0EM50000000FYpB" width="903"></img>

The included table displays Brocade swtich models still Active or not yet EoS, and supported FastIron OS versions.

2017-05-10T15:43:16-0700 2019-11-21T07:08:04-0800 https://support.ruckuswireless.com/articles/000008861 2019-03-20T10:51:34-0700 monthly 0.8 admin,premium knowledge_article_3626 knowledge_article_3626 2019-03-06T07:41:03-0800 000008861 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting Performance, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway How do I intrepet the output from the SZ Troublshooting Spectrum Analysis Tool The data display includes two primary graphs: <ol><li style="margin-left: 0in;">Real-Time FFT (Fast Fourier Transform) and Spectrum Usage - this graph shows a continuously updating real-time look at measured spectrum data as well as a longer-term power amplitude /density view that shows collections of measured data over time, as described below. <ol><li>Spectrum Usage – this chart uses a color-based view to show collections of data points over time. As more data samples are measured at a specific frequency and amplitude coordinate, the color shown at that coordinate will change. <ol><li>Note that there are different potential types of "color by X" view modes to represent the data. <ol><li>Color by Amplitude (Power level) – this will use a warm color for high amplitude and a cool color for low amplitude</li><li>Color by Density – this will use a warm color to represent a high number of samples at a given coordinate and a cool color to show low number of samples at a given coordinate</li></ol> </li><li>Over some period of time, this display will show the relative usage of the spectrum at a given amplitude. Despite some opinions, the spectrum density display does not negate the need for a real-time utilization display. </li></ol> </li><li>Real-Time FFT – the real-time FFT is a second-by-second, update of measured data across the band. The AP radio will scan across the band collecting samples at each frequency. The samples will be reported from the AP to the SZ and collected in 1sec or 2sec batches. The display will then show this "real-time" sampled data on the chart as a line (a single color, preferably dark and bold). The real-time display includes two view modes (two different ways to interpret the raw data): <ol><li>Amplitude (this setting should be the default) – the Real-Time FFT by Amplitude display shows the average or maximum amplitude of energy measured across the band for that sample period (sample period is 2sec) (maximum/average are selectable in the drop-down, average is expected to be the default). <ol><li>The x-axis shows frequency</li><li>The y-axis shows amplitude</li></ol> </li><li>Utilization (aka Duty Cycle) – the Real-Time FFT by Utilization display shows the percentage (%) of time at which the frequency is utilized at an amplitude above N. The utilization display should have a configurable amplitude threshold, with a default setting of -85dBm. <ol><li>The x-axis shows frequency</li><li>The y-axis shows %</li></ol> </li></ol> </li><li>Note: The Real-Time FFT and Spectrum Usage data presentations are viewed on the same chart at the same time. We should allow for all unique combinations of chart view modes, as follows: <ol><li>Real-Time FFT by Amplitude & Color by Amplitude</li><li>Real-Time FFT by Amplitude & Color by Density</li><li>Real-Time FFT by Utilization & Color by Amplitude</li><li>Real-Time FFT by Utilization & Color by Density</li></ol> </li></ol> </li></ol> <ol><li>Swept Spectrogram – this chart shows similar data as the Real-Time FFT, but it displays a waterfall of color over time, where each horizontal line in the waterfall represents one sample period (e.g. 2 seconds), and the full waterfall display spans 2 minutes of time (60 sample bins of 2sec each). There are two display options for the spectrogram chart: <ol><li>Amplitude (this setting should be the default) – this display shows the maximum or mean amplitude of energy measured across the band for that sample period (maximum/average are selectable in the drop-down). <ol><li>The x-axis shows frequency</li><li>The y-axis shows time samples</li><li>The color displayed at each coordinate represents the amplitude of the samples in that period (where a continuum of color represents low to high amplitude). <ol><li>The color continuum is fixed, with a dBm range from -40dBm to -100dBm (any value above -40dBm will use the same value as -40dBm), where the color continuum can span from (#e60d0b, #e6621a, #36d540, #1cc428, #30f0cf, #3060cf). </li></ol> </li></ol> </li><li>Utilization – this display shows the percentage (%) of time at which the frequency is utilized at an amplitude above N. The utilization display should have a configurable amplitude threshold, with a default setting of -85dBm. <ol><li>The x-axis shows frequency</li><li>The y-axis shows time samples</li><li>The color displayed at each coordinate represents the percentage of time within the sample period that amplitude crossed the duty cycle threshold <ol><li>The color continuum is fixed, with a percentage range from 0% to 100%, where the color continuum can span from (#e60d0b, #e6621a, #36d540, #1cc428, #30f0cf, #3060cf). </li></ol> </li></ol> </li></ol> </li></ol> <img alt="Spectrum Analysis Output" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095iZ&feoid=00N50000002Cf3M&refid=0EM2J000000mDMI"></img> Display Colors The color continuum for amplitude and duty cycle percentage should use a cold/cool color (e.g. blue, green, etc) for low amplitude, low percentage, and low density. It should then use a warm/hot color (e.g. red) for high amplitude, high percentage, and high density. Specific colors can be determined by engineering. Please let me know if you need me to specify the continuum. Concurrent Spectrum Sessions <ul><li>How many simultaneous APs can be in spectrum mode by different administrators? <ul><li>: 10 </li><li> </li></ul> </li></ul> Granularity of Display <ul><li>The AP's spectrum functionality takes samples in intervals of 312.5KHz on the frequency scale, and has granularity of 1dBm of amplitude. <ul><li>AP will report to the SZ using this level of granularity. The first prototype should attempt to maintain this level of display granularity.</li></ul> </li></ul> AP’s with 3rd Radio Support: <ul><li style="margin-left: 0in;">Ruckus has some AP’s with 3rd radio support, T710 is latest addition to that family, 3rd Radio is pre-programmed to operate in 5GHz band only, so Spectrum Analysis function on 5GHz Band on 3rd radio products is automatically offloaded to 3rd radio, what that means AP’s having 3rd radio can allow client serviceability and Spectrum Analysis support at the same time on 5GHz band.</li></ul>

Details on Spectrum Analysis Tool output

2019-03-20T10:51:34-0700 2019-11-21T05:18:10-0800 https://support.ruckuswireless.com/articles/000009961 2019-11-20T01:46:34-0800 monthly 0.8 admin,premium knowledge_article_4001 knowledge_article_4001 2019-11-20T01:46:34-0800 000009961 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to enable band balancing when it is grayed out under WLAN settings? <ul><li>Band Balancing option is grayed out under the WLAN Advanced Settings.</li></ul> <div style="margin-left: 80px;"><img alt="User-added image" height="292" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054H9&feoid=00N50000002Cf3M&refid=0EM2J000000vdTi" width="500"></img> </div> <ul><li>This option gets grayed when we do not enable it under the ZD web UI > Services & Profiles > Services > Band Balancing.</li></ul> <div style="margin-left: 80px;"><img alt="User-added image" height="193" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054H9&feoid=00N50000002Cf3M&refid=0EM2J000000vdTn" width="500"></img></div> <ul><li>Once you enable the band balancing under Services & Profiles, you will be able to configure it on the WLAN settings.</li></ul>

This article provides you the information on how to configure the band balancing setting on the WLAN when it is grayed out.

2019-11-20T01:46:34-0800 2019-11-20T06:00:07-0800 https://support.ruckuswireless.com/articles/000009933 2019-11-19T01:57:37-0800 monthly 0.8 admin,premium knowledge_article_3998 knowledge_article_3998 2019-11-19T01:57:37-0800 000009933 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor what is the difference of "set scg reset" and "set scg init" AP CLI commands? - "set scg reset" . AP does not change the list of SZ Control IP list. It does not reboot AP, just kills and restart wsgclient. If we want to manually set the SZ IP, "set scg ip [SZ control IP]". - "set scg init". AP wipes out the SZ Control IP list and reboots. Once the AP reboots, it should get new list either from the AP Registrar, or via CLI ("set scg ip" command ) or from DHCP option, etc. If It does not get a new SZ Control IP list, AP will just sit in idle without connecting to SZ. If we want to manually set the SZ IP, "set scg ip [SZ control IP]".

Explaining the difference between AP CLI commands "set scg reset" and "set scg init"

2019-11-19T01:57:37-0800 2019-11-19T06:00:07-0800 https://support.ruckuswireless.com/articles/000009952 2019-11-15T02:07:33-0800 monthly 0.8 admin,premium knowledge_article_3995 knowledge_article_3995 2019-11-15T02:01:57-0800 000009952 Validated (External) Premium Ruckus cloud lte Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud LTE I need to replace or de-register my CBSD's ? In order to de-register an AP, you need to disable the AP service from the Cloud LTE WEB Interface. Click on AP's tab >> Chose the AP to de-register and click >> click on more button at the top right-hand side >> Select " disable AP service", wait for 5-10 minutes and now click delete Access point from more button. <img alt="User-added image" height="483" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054Fm&feoid=00N50000002Cf3M&refid=0EM2J000000vbV8" width="1021"></img> Note : Once the service is disabled, then the AP can be deleted, do not directly delete the AP without service disabled.

Customer needs to replace their old CBSDs with new one for which the CBSD's should be removed from SAS account.

2019-11-15T02:07:33-0800 2019-11-15T06:00:18-0800 https://support.ruckuswireless.com/articles/000009931 2019-11-13T02:21:31-0800 monthly 0.8 admin,premium knowledge_article_3993 knowledge_article_3993 2019-11-13T02:07:22-0800 000009931 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Known issues and workarounds Known Issues and Workarounds, Cloudpath Why user is unable to generate the MSI from the Cloudpath MSI package 1. Download the MSI Package in Cloudpath portal >> Manage templates. 2. Unzip the file 3. Go to contents folder 4. Edit scrip.wxs file in notepad or notepad++ 5. Find the line with Source='contentscertinstall.exe' 6. Add a forward slash "/" in between 'contents and certinstall.exe' Source='contents/certinstall.exe' 7. Save file. Close file in notepad++. 8. Go back to main folder you expanded the files to 9. Double click on the create_msi file to create the MSI file. 10. Once generated the file will be called "deployable.msi"

User is getting error “Error LGHT0100 : File of type ‘File’ with name ‘contentscertinstall.exe’ could not be found” when generating the MSI from the Cloudpath MSI package.

2019-11-13T02:21:31-0800 2019-11-13T06:00:11-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000004zagSAA?attachment_index=0 2019-11-13T06:00:11-0800 monthly admin,premium knowledge_article_3993 knowledge_article_3993_attachment_1 1.png 437964.0 image/png http://support.ruckuswireless.com/article_attachments/kA22J0000004zagSAA?attachment_index=1 2019-11-13T06:00:11-0800 monthly admin,premium knowledge_article_3993 knowledge_article_3993_attachment_1 2.png 31942.0 image/png https://support.ruckuswireless.com/articles/000005348 2019-11-12T09:19:40-0800 monthly 0.8 admin,premium knowledge_article_3992 knowledge_article_3992 2016-01-11T15:36:31-0800 000005348 Validated (External) Premium Scg200;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Known issues and workarounds;Support license activation Known Issues and Workarounds, Support License Activation, SCG200, virtual SmartCell Gateway, SZ100 What is the Domain name and IP address of the server that Ruckus Wireless uses to validate licenses ? Ruckus Wireless uses the following server to check if there are valid licenses for your system (vSZ/SZ/SCG). Please make sure your appliance can reach this server. Server: Name: ruckuswireless.flexnetoperations.com IP address : Ruckus offer licensing solution in partnership with Flexera, who hosts the licensing server in the cloud. IP addresses of our licensing server can change after their upgrades. So there is no dedicated IP address for the FQDN and IP address would change randomly. Note: If you are planning to configure firewall in your network for the licensing server, we recommend to add only FQDN (ruckuswireless.flexnetoperations.com) to the Firewall and not the IP address , as it would change.

What is the Domain name and IP address of the server that Ruckus Wireless uses to validate licenses ?

2019-11-12T09:19:40-0800 2019-11-12T12:00:08-0800 https://support.ruckuswireless.com/articles/000009924 2019-11-06T00:13:42-0800 monthly 0.8 admin,premium knowledge_article_3991 knowledge_article_3991 2019-11-06T00:13:42-0800 000009924 Validated (External) Premium Sz300;Virtual smartcell gateway;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Configuration Configuration, SZ300, virtual SmartCell Gateway How many Partner Domains are supported on vSZ-H There is a limit of 1024 partner/MSP domains permitted on vSZ-H or SZ300. These count towards the maximum total system domains of 2048, so if you have the maximum of 1024 Partner domains you will now have a limit of 1024 regular system domains

Number of Partner/MSP domains supported on vSZ-H or SZ300

2019-11-06T00:13:42-0800 2019-11-06T06:00:08-0800 https://support.ruckuswireless.com/articles/000005965 2019-06-24T00:25:22-0700 monthly 0.8 admin,premium knowledge_article_2396 knowledge_article_2396 2016-08-03T14:18:29-0700 000005965 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;Firmware Performance, Firmware, Unleashed What is the maximum number of concurrent clients in an Unleashed network, even R310 is the only method? 512 max number of clients are supported in an Unleashed network. Unleashed network supports mix model of APs (Unleashed R310, R500, R600, T300, T301, R510, R610, R710, T710 series). Even if you have R310s only in your Unleashed network it can support up to 512 clients. At the same time, R310 supports 100 clients per AP. So, to max out the 512 clients in an Unleashed network, you would need at least 6 * R310s.

512 is the max number of clients in an Unleashed network, except 100 max per R310 and Wave1 APs in GW Mode, and 200 max for Wave 2 APs in GW Mode.

2019-06-24T00:25:22-0700 2019-11-04T12:02:10-0800 https://support.ruckuswireless.com/articles/000009828 2019-10-30T06:03:07-0700 monthly 0.8 admin,premium knowledge_article_3988 knowledge_article_3988 2019-10-30T06:03:07-0700 000009828 Validated (External) Premium Ruckus cloud wifi;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, Ruckus Cloud WiFi, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway Why my Surface pro laptop is not connecting to 5 G band after windows firmware upgrade As per Microsoft support forum's last update (as of 26th Oct 2019) an official fix is not available yet and permanent fix will be generally available through Windows Update as soon as it completes their quality testing. Please reach out to Microsoft support for help and updates about this issue. Note: Information given in this article is based on few cases reported by customers to Ruckus support and the information available on Microsoft's support forum. Refer the below link for more information. <a href="https://answers.microsoft.com/en-us/surface/forum/surfbook-surfnetwork/marvell-semiconductor-inc-net-156817013110-wifi/033b3613-135e-430a-952f-46440c764f58" target="_blank">https://answers.microsoft.com/en-us/surface/forum/surfbook-surfnetwork/marvell-semiconductor-inc-net-156817013110-wifi/033b3613-135e-430a-952f-46440c764f58</a>

Windows 10 Beta upgrade has inbuilt WiFi driver update which has this issue where Surface pro will not connect to 5 GHz WiFi network

2019-10-30T06:03:07-0700 2019-10-30T12:00:10-0700 https://support.ruckuswireless.com/articles/000009839 2019-10-30T01:00:55-0700 monthly 0.8 admin,premium knowledge_article_3986 knowledge_article_3986 2019-10-30T01:00:55-0700 000009839 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches Why samsung officeserv smt i2205 phone detects underload state The smt i2205 device is not able to meet the requirement of the PD Maintain Power Signature (MPS) defined by the IEEE standard. The PD device needs to maintain a minimal current draw of 10ma after the POE hardware detection and classification phase. The switch is designed to detect the underload condition and disconnect power where the load current is below 7.5ma for more than 324mS. As the attached scope capture shows, the smt i2205 can’t maintain the minimal current draw after the detection and classification phase, and the log shows the smt i2205 device gets disable for an underload fault condition.

samsung-officeserv-smt-i2205-phone-detects-under load-state on ICX 7150,7250,7450.

2019-10-30T01:00:55-0700 2019-10-30T06:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zVWSAY?attachment_index=0 2019-10-30T06:00:10-0700 monthly admin,premium knowledge_article_3986 knowledge_article_3986_attachment_1 oscilloscope capture.jpg 53890.0 image/jpeg https://support.ruckuswireless.com/articles/000009489 2019-10-29T18:58:00-0700 monthly 0.8 admin,premium knowledge_article_3985 knowledge_article_3985 2019-07-01T08:52:27-0700 000009489 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector Why my zd is unresponsive Customers can upgrade to following releases which contains the fix to solve the problem 9.10.2 refresh 6 - 9.10.2.0.76 9.12.3 refresh 7 - 9.12.3.0.134 10.0.1 MR1 refresh 5 - 10.0.1.0.88 and later release for ZD running with 9.13.x, please upgrade to 10.0.1 MR1 or later release

ZD may go to unresponsive state after running for a couple of months due to memory leakage issue in 9.13, need reboot to recover, fix is available in 10.0.1 and latest release

2019-10-29T18:58:00-0700 2019-10-30T00:00:07-0700 https://support.ruckuswireless.com/articles/000008027 2019-10-28T10:21:54-0700 monthly 0.8 admin,premium knowledge_article_3981 knowledge_article_3981 2018-06-22T11:26:05-0700 000008027 Validated (External) Premium Brocade network advisor;Brocade Network Advisor (BNA) Firmware Firmware, Brocade Network Advisor What is the recommended BNA version when running 14.3.x? * SAN, IP, SAN+IP - Starting with BNA 14.3.1 = SAN or SAN + IP Only - Starting with BNA 14.2.1x = IP Only (Next release is 14.2.10) - IP Only license will not work with BNA 14.3.x (License Error)

BNA upgrade recommendations assistance.

2019-10-28T10:21:54-0700 2019-10-28T12:00:10-0700 https://support.ruckuswireless.com/articles/000009914 2019-10-28T10:23:02-0700 monthly 0.8 admin,premium knowledge_article_3980 knowledge_article_3980 2019-10-28T09:57:06-0700 000009914 Validated (External) Premium R750;R610;T710s;R510;T710;R730;R720;T610;R710;RUCKUS R750;Ruckus R610;Ruckus T710s;Ruckus R510;Ruckus T710;Ruckus R730;Ruckus R720;Ruckus T610;Ruckus R710 Configuration Configuration, R750, R610, T710s, R510, T710, R730, R720, T610, R710 How to configure LACP on AP. Requirement: LACP is supported as long as the AP is powered via: <ul><li>802.3at PoE+</li><li>Passive PoE injector capable of at least 20W</li><li>12V DC power supply</li></ul> Please refer to the ZoneFlex Indoor Access Point 100.x User Guide for further details on features & functionality limitations imposed under 802.3af PoE Operating Mode. <ul><li>In order for the AP to identify an 802.3at / PoE+ switch, the switch must support LLDP power over MDI (802.3p)</li></ul> CLI Config commands Log in to AP CLI using SSH - Bond command on the CLI can be used to configure LACP. Command format as below. get bond - Show Bond Info set bond {options} - Configure Bond/LACP settings ** <profile>: bond0, ... ** options: enable : R720 Only to enable LACP Mode disable : R720 Only to disable LACP Mode lacp-rate [0,1], 0 for slow, 1 for fast xmit-hash [0,1,2], 0 for L(ayer2), 1 for L3+4, 2 for L2+3 {add|delete} <eth0| eth1> Example: Set bond bond0 add eth0 set bond bond0 add eth1 Get bond

Configure LACP using AP CLI

2019-10-28T10:23:02-0700 2019-10-28T12:00:07-0700 https://support.ruckuswireless.com/articles/000009815 2019-09-25T17:06:19-0700 monthly 0.8 admin,premium knowledge_article_3938 knowledge_article_3938 2019-09-25T17:06:19-0700 000009815 Validated (External) Premium Unleashed;Zonedirector;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Unleashed, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway Why I am unable to use WiFi calling feature on my Samsung phone when I am connected to Ruckus tunnelled WLAN? <ul><li>Suspecting path MTU between AP to DP network (customer network) has mtu bottelneck at some node, which was causing tunnel negotiation to 1238.</li><li>Enabling force-fragmentation command on APs to force fully fragment the tunnelled traffic resolved the issue.</li></ul> set tunnelmgr force-frag enable <ul><li>Issue was also specific to Samsung client because ePDG based calling was working fine with iPhones without enabling force-fragmentation on AP.</li></ul> Note: This command can be executed using AP CLI script from SZ side. Refer related article <a href="https://support.ruckuswireless.com/articles/000004057" target="_blank">https://support.ruckuswireless.com/articles/000004057</a>

ePDG based WiFi calling feature on Samsung needs higher MTU when tunnel gets established, hence force fragmentation is required if path MTU is low between AP to Data Plane.

2019-09-25T17:06:19-0700 2019-10-25T11:17:09-0700 https://support.ruckuswireless.com/articles/000009860 2019-10-24T15:54:55-0700 monthly 0.8 admin,premium knowledge_article_3964 knowledge_article_3964 2019-10-18T00:06:50-0700 000009860 Validated (External) Premium Ruckus diagnostic dashboard rdd;Smartcell gateway;Smartcell insight;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) Configuration;Installation;System network management Configuration, Installation, System Network Management, Ruckus Diagnostic Dashboard RDD, SmartCell Gateway, SmartCell Insight, virtual SmartCell Gateway What are the VM host resource requirements of RDD? For RDD systems which will be managing more than 10,000 APs or 500 switches, a custom RDD VM image is required. Contact Ruckus Support, who will request an image from the RDD Development Team. For smaller networks (sub-10k APs / 500 switches), the following minimum and recommended resources are advised: Minimum: 4 vCPU 8GB RAM 500GB Disk Recommended: 8vCPU 16GB RAM 500GB Disk <img alt="User-added image" height="75" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000054AD&feoid=00N50000002Cf3M&refid=0EM2J000000vPJC" width="500"></img>

Summary of RDD system requirements based upon AP/switch numbers connected.

2019-10-24T15:54:55-0700 2019-10-24T18:00:13-0700 https://support.ruckuswireless.com/articles/000009859 2019-10-24T15:57:47-0700 monthly 0.8 admin,premium knowledge_article_3978 knowledge_article_3978 2019-10-18T00:29:01-0700 000009859 Validated (External) Premium Ruckus diagnostic dashboard rdd;Smartcell insight;Virtual smartcell gateway;SmartCell Insight (SCI) Configuration;Installation;System network management Configuration, Installation, System Network Management, Ruckus Diagnostic Dashboard RDD, SmartCell Insight, virtual SmartCell Gateway I have added Ruckus Diagnostics Dashboard to my network, and now SCI shows no data. Why? In a network using just a controller (SZ or ZD) and SCI, the controller sends data directly to SCI. When RDD is introduced into the network, the data flow changes - the controller sends data to RDD, and RDD forwards the data to SCI. So RDD must be configured with knowledge of the SCI, else RDD won't forward data to SCI. The following steps should be configured in the following order, to configure RDD and SCI to interact correctly. In RDD: 1. An MQTT Bridging Profile In RDD, create a bridge between the RDD and SCI, so RDD knows where to forward data to. This will configure the RDD to accept MQTT data streams from the controller (e.g. SZ). The data is sent from the controller, to RDD. 1. On the RDD dashboard, click Administration > Ruckus Diagnostic Cluster > MQTT Bridging to display the MQTT Bridging screen. 2. Click New Profile to create a new MQTT profile. The New Profile screen displays. 3. Enter or select information for the following fields in the New Profile screen. a) For the Name field, enter a name for the MQTT profile. b) For the Description field, enter a description of the profile. c) For the Topic field, enter sci-topic. This text must be exact for RDD to listen to the MQTT content stream. 4. When all the information is added, click Create Profile. RDD is configured to receive the MQTT stream from the Ruckus controller. In SCI: 2. An RDD System Profile In SCI, create a system profile for the RDD, so that SCI can authenticate inbound traffic from RDD. 1. Login to SCI and on the SCI main dashboard, click Settings > System > + Add to display the New System screen. 2. Enter or select information for the following fields in the New System screen. a) For the System ID field, enter the same System ID that you entered for the MQTT bridging profile on the controller. b) For the Type field, use the drop down arrow to select the type of controller and release. The release must be SZ or vSZ 3.5 or later release. c) For the URL field, enter the URL of the SZ or vSZ controller on port 8443. d) For the Username field, enter the username of the SZ or vSZ controller. e) For the Password field, enter the password of the SZ or vSZ controller. f) Under the SCI Profile section, the User field is generated. Note the user name and enter it in the RDD MQTT forwarder screen in RDD (see phase 3). g) Under the SCI Profile section, the Password field is auto-generated by SCI. Copy this password and enter it in the RDD MQTT forwarder screen in RDD (see phase 3). 3. When all the information is added, click Create. The new SCI system is created In RDD: 3. An MQTT Forwarder MQTT bridging allows RDD to receive the MQTT data first and then forward the data to SCI. Creating an MQTT forwarder in RDD allows the MQTT stream to be sent to SCI. 1. On the RDD dashboard, click Administration > Ruckus Diagnostic Cluster > MQTT Bridging and select the MQTT bridging profile (created in phase 1). 2. Click New Forwarder. The New Forwarder screen displays 3. Enter or select information for the following fields in the New Forwarder screen. a) For the Name field, enter a name for the MQTT forwarder. b) For the Description field, enter a description of the MQTT forwarder. c) For the Dst Port field, enter 8883. d) For the TLS field, move the slider to activate TLS. e) For the Username field, enter the username from the SCI default configuration detailed above in phase 2. f) For the Password field, enter the password copied from the SCI default configuration detailed above in phase 2. g) For the Topic field, enter sci-topic. Type this text exactly. h) For the Hostname field, enter the IP address or the FQDN of the targeted instance of SCI 4. When all the information is added, click Create Forwarder. SCI is now configured to receive the Ruckus controller MQTT stream from RDD

Summary on how to configure RDD to forward data to SCI.

2019-10-24T15:57:47-0700 2019-10-24T18:00:11-0700 https://support.ruckuswireless.com/articles/000009806 2019-10-24T01:44:54-0700 monthly 0.8 admin,premium knowledge_article_3976 knowledge_article_3976 2019-09-17T15:36:47-0700 000009806 Validated (External) Premium Ruckus cloud lte Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus Cloud LTE Why is my LTE AP showing never contacted on Cloud? Below are the AP status on the cloud and the initial debugging and reason of the state. 1) Why is AP State shows Never contacted cloud? <ul><li>AP IP reachability to Internet: <ul><li>Make sure AP connected to IP network can reach to internet and have DNS Server setup to reach internet say google.com/yahoo.com to test it out.</li><li>Do DNS resolution to '<a href="https://sc-registrar.ruckuswireless.com/api/v2/scr/action." target="_blank">https://sc-registrar.ruckuswireless.com/api/v2/scr/action.</a>' make sure AP can resolve it to 'sc-registrar.ruckuswireless.com'</li></ul> </li><li>IPsec ports are not open in firewall <ul><li>Open ports 4500, 500, 443,80 and all ports listed in below article over firewall to the internet.</li><li><a href="https://na89.salesforce.com/kA22J0000004zKs?srPos=0&srKp=ka2&lang=en_US" target="_blank">https://na89.salesforce.com/kA22J0000004zKs?srPos=0&srKp=ka2&lang=en_US</a></li></ul> </li><li>AP is not in factory state <ul><li>If AP is not in factory state, it won't connect to SCR and get the cloud Security GW and Management Server as it's already holding some of the management configuration. Set factory it using reset button behind the AP, press and hold for 10 seconds to trigger factory reset.</li></ul> </li></ul> 2) Why is AP state is contacted but not connected/operational? <ul><li>Check whether AP to Management SecGW connection is flapping.</li><li>Check whether AP alarms/event in AP and check whether IPsec tunnel is up.</li><li>If IPsec tunnel to SecGW is up then check HEMS connection is up using show RSCStatus using CLI.</li></ul> 3) Why is AP state is in connected but not operational. <ul><li>AP admin state is disabled. <ul><li>Check whether AP has been administratively disabled from UI by going to AP ? More ? Operation status disable/Enable.</li><li> Or may be due to any of the following reasons.</li></ul> </li><li>AP lost Sync: <ul><li>if AP is GPS source, AP may have lost GPS satellite</li><li>If AP is PTP source, AP may have lost to PTP master</li></ul> </li><li>AP to EPC connection lost: <ul><li>SCTP connection timeout to EPC</li><li>AP-EPC connection lost</li><li>EPC is not reachable</li><li>If there is SecGW before EPC, AP-SecGW connection lost.</li></ul> </li></ul> <ul><li>AP lost the grant: <ul><li>AP may have relinquish the Grant due to timing sync failure or lost connection to EPC.</li><li>AP-SAS heartbeat failed/Communication failed.</li><li>AP-SAS grant conflict</li><li>AP-SAS registration error</li><li>SAS revoked the grant.</li></ul> </li></ul> <ul></ul> <ul></ul> <ul></ul>

Basic debugging steps and reason for the LTE AP connectivity issue on cloud.

2019-10-24T01:44:54-0700 2019-10-24T06:00:12-0700 https://support.ruckuswireless.com/articles/000009803 2019-10-23T14:47:29-0700 monthly 0.8 admin,premium knowledge_article_3973 knowledge_article_3973 2019-09-13T10:27:09-0700 000009803 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;Firmware;Troubleshooting;Known issues and workarounds Performance, Configuration, Firmware, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway Why the AP zone configuration is not updating after upgrade the AP zone to 5.1.2.0.336? <div>Upload the supported signature package on the controller which has to be installed manually after an upgrade Below is the direct link to download the signature package <a href="https://support.ruckuswireless.com/software/2194-smartzone-5-1-2-sigpack-1-430-1-application-signature-package" style="color: #0563c1; text-decoration: underline;" target="_blank">https://support.ruckuswireless.com/software/2194-smartzone-5-1-2-sigpack-1-430-1-application-signature-package</a> Follow the steps given below to upload the signature package: 1. Go to Services & Profiles > Application Control. 2. Select the Signature Package tab. 3. The Current Signature Package Info section displays the information about the signature package file name, size and version. 4. In Upload Signature Package, click Browse to select the file. 5. Click Upload to upload the file. </div>

Notice AP-zone configuration is not updating and wireless clients are getting disconnected after upgrading the AP zone to 5.1.2.0.373.

2019-10-23T14:47:29-0700 2019-10-23T18:00:12-0700 https://support.ruckuswireless.com/articles/000009800 2019-10-23T15:14:55-0700 monthly 0.8 admin,premium knowledge_article_3970 knowledge_article_3970 2019-09-12T12:38:29-0700 000009800 Validated (External) Premium Ruckus cloud lte Performance;Installation;Troubleshooting Performance, Installation, Troubleshooting, Ruckus Cloud LTE What does the LED status on the LTE AP means? Below are the details of LED status on all EnodeB (LTE AP's) and basic T-shoot. <img alt="User-added image" height="279" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000548v&feoid=00N50000002Cf3M&refid=0EM2J000000v9Hx" width="500"></img> <img alt="User-added image" height="280" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000548v&feoid=00N50000002Cf3M&refid=0EM2J000000v9I2" width="500"></img>

LED Status and T-shoot

2019-10-23T15:14:55-0700 2019-10-23T18:00:07-0700 https://support.ruckuswireless.com/articles/000008933 2019-05-13T15:22:50-0700 monthly 0.8 admin,premium knowledge_article_3693 knowledge_article_3693 2019-04-02T04:16:36-0700 000008933 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway How do I use SZ APIs with Postman? In the video attached on this KBA there's a basic description on how to execute SZ APIs with the program Postman. Note: In later versions, port 8443 has also been added to the APIs port, but have in mind that format of the URL is slightly different on this new port: <h2>https://{host}:8443/wsg/api/public/v5_1</h2> <h2>https://{host}:7443/api/public/v5_1</h2>

A small TOI describing how to use Ruckus SZ APIs with Postman

2019-05-13T15:22:50-0700 2019-10-23T12:55:28-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000008oF4SAI?attachment_index=0 2019-10-23T12:55:28-0700 monthly admin,premium knowledge_article_3693 knowledge_article_3693_attachment_1 Ruckus SZ APIs v2.mp4 7822693.0 video/mp4 https://support.ruckuswireless.com/articles/000004199 2019-03-14T10:39:50-0700 monthly 0.8 admin,premium knowledge_article_3617 knowledge_article_3617 2016-03-17T05:52:56-0700 000004199 Validated (External) Premium Zonedirector 1100;ZoneDirector 1100 Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneDirector 1100 Why isn't mapview displaying R700 AP coverage for 5GHz radio on ZD1100? Upgrade to firmware version 9.8.2.0.15 and above. The issue is fixed. Extract from the ZoneFlex 9.8.2 MR (9.8 MR2) Release Notes: "5.1.8. R700 5 GHz 11ac radio now displays properly on the Map View. (ID ER-1654)"

ZD1100 map view displays heat map for 2.4 GHz radio but does not display heat map for 5GHz. This issue occurs on firmware version 9.8.0.0 373 for R700.

2019-03-14T10:39:50-0700 2019-10-23T07:05:35-0700 https://support.ruckuswireless.com/articles/000002856 2014-03-31T17:53:19-0700 monthly 0.8 admin,premium knowledge_article_875 knowledge_article_875 2014-03-31T17:53:19-0700 000002856 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Can I hide an SSID only on certain Access Points ?

Hiding SSID only on certain Access points

2014-03-31T17:53:19-0700 2019-10-19T08:21:22-0700 https://support.ruckuswireless.com/articles/000009861 2019-10-18T11:17:10-0700 monthly 0.8 admin,premium knowledge_article_3965 knowledge_article_3965 2019-10-18T11:17:10-0700 000009861 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway What does the command-line error "% You do not have the privilege to perform this operation" mean? The error "% You do not have the privilege to perform this operation" occurs if a (non-existent) MAC address is entered which is not found in the AP database. The SZ first validates the MAC address formatting and sends the data to the SZ backend service to determine if the user has the permission to operate on this AP. But because the MAC is not contained in the database, permission to execute the operation fails. The resulting message is "You do not have the privilege to perform this operation". If the problem persists after double-checking the MAC address, remove any possible doubt by manually typing the command into the SZ system (i.e. not copy/pasting any parts of the command into the SSH session.

Eplanation of why this error occurs

2019-10-18T11:17:10-0700 2019-10-18T12:00:08-0700 https://support.ruckuswireless.com/articles/000006810 2017-12-12T15:44:55-0800 monthly 0.8 admin,premium knowledge_article_2871 knowledge_article_2871 2017-12-12T15:44:55-0800 000006810 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure QoS? <h3>Changing a Port Priority</h3> To change the QoS priority of a specific port, enter these commands. Syntax: [no] priority <num> device(config)# interface ethernet 1/1/1 device(config-if-e1000-1/1/1)# priority 7 The device assigns priority 7 to untagged switched traffic received on port 1/1/1. <h3>Assigning a Static MAC Entry</h3> By default, all MAC entries are in the best-effort queue. When you configure a static MAC entry, you can assign the entry to a higher QoS level. To configure a static MAC entry and assign the entry to the premium queue, enter commands such as the following. Syntax: [no] static-mac-address <mac-addr> Ethernet <port> [priority <num>] device(config)# vlan 9 device(config-vlan-9)# static-mac-address 0000.0063.67FF ethernet 1/1/1 priority 7 device(config-vlan-9)# write memory <h3>802.1p Priority Override</h3> You can configure a port to ignore the 802.1p priority for traffic classification for an incoming packet. Overriding factors that effect this feature: <ul><li>ACL priority will take precedence (if configured)</li><li>Static MAC address with priority matching SA or DA</li><li>Ingress port configured priority</li><li>Then configured or default port priority (0) will be used</li></ul> To enable 802.1p priority overrirde, enter the following command at the interface level of the CLI, Syntax: [no] priority ignore-8021p device(config-if-e1000-2)# priority ignore-8021p 802.1p priority override is supported on physical ports and trunk ports.

How to configure QoS?

2017-12-12T15:44:55-0800 2019-10-18T11:05:17-0700 https://support.ruckuswireless.com/articles/000009813 2019-10-18T02:42:17-0700 monthly 0.8 admin,premium knowledge_article_3936 knowledge_article_3936 2019-09-23T09:01:48-0700 000009813 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Insight My SCI has very low disk-space remaining - what can I do to free-up some disk space? SCI version 5.4 will contain improved house-keeping of the .jar files, to lower disk-usage.

Remedial steps which can be taken in the event that SCI disk space is running-low. This guide is intended for experienced linux-users.

2019-10-18T02:42:17-0700 2019-10-18T06:00:07-0700 https://support.ruckuswireless.com/articles/000009497 2019-10-16T07:35:56-0700 monthly 0.8 admin,premium knowledge_article_3958 knowledge_article_3958 2019-10-16T07:35:56-0700 000009497 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting Configuration, Troubleshooting, Cloudpath How to create Split Users in the Workflow? <ul><li>Configuration on the Cloudpath Side:</li></ul> The article covers the configuration steps involved in the split users. We use split users when we have 1 SSID on the Wireless network and clients connecting should be assigned the network access based on their roles. For example, a student should have access to the Internet only and should have student policy. Similarly for the staff. Below are the configuration steps to configure the split users in cloudpath. Please note: This article does not include role mapping. <ol><li style="">Add Authentication Server Configuration on the Cloudpath: For testing AD Server is Used:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" height="239" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueV4" width="500"></img></div> <ol start="2" style="margin-left: 80px;"><li>Setup a Device Configuration Or Use the existing one: In this setup, I created a New Device Configuration as shown:</li></ol> <div style="margin-left: 80px;">Note: Select the options as per the requirement</div> <div style="margin-left: 120px;"><img alt="User-added image" height="116" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueV9" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="137" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueVE" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="111" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueVJ" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="177" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueVO" width="500"></img></div> <ol start="3" style="margin-left: 80px;"><li style="">Create a Workflow with AUP:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" height="261" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueVT" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="54" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueVY" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="269" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueVi" width="500"></img> </div> <ol start="4" style="margin-left: 80px;"><li style="">Create Users/Branches using the ‘Split users into different branches’:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" height="268" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueVn" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="160" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueVs" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="260" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueVx" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="81" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueW2" width="500"></img> </div> <div style="margin-left: 80px;">Preview: </div> <div style="margin-left: 120px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueWC"></img> </div> <ol start="5" style="margin-left: 80px;"><li style="">Add Authentication Method to the Workflow:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" height="252" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueWH" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="123" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueWM" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="177" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueWR" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="255" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueWW" width="500"></img></div> <ol start="6" style="margin-left: 80px;"><li>Similarly, Add Authentication Methods for other Users.</li></ol> <div style="margin-left: 120px;"> <img alt="User-added image" height="173" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueWb" width="500"></img></div> <ol start="7" style="margin-left: 80px;"><li style="">Test against Authentication Method:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" height="103" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueWg" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="252" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueWl" width="500"></img></div> <div style="margin-left: 120px;"><img alt="User-added image" height="179" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueWv" width="500"></img></div> <ol start="8" style="margin-left: 80px;"><li style="">Assign the Device Config to the WorkFlow:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" height="207" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueX0" width="500"></img></div> <div style="margin-left: 80px;">Note: I have used the Default Existing Client Certificate Template. We can create one as per the network requirement.</div> <div style="margin-left: 120px;"><img alt="User-added image" height="161" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueX5" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="261" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueXA" width="500"></img> </div> <ul><li>Setup the Wireless Controller: </li></ul> <ol style="margin-left: 80px;"><li style="">Create BOYD WLAN with Authentication Type Standard Usage and Method as 802.1x.</li></ol> <div style="margin-left: 80px;">Note: The BOYD WLAN Name should match the Device Configuration Name on the Cloudpath as shown below:</div> <div style="margin-left: 120px;"><img alt="User-added image" height="396" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueXF" width="500"></img> </div> <div style="margin-left: 120px;"> <img alt="User-added image" height="320" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueXK" width="500"></img></div> <ol start="2" style="margin-left: 80px;"><li style="">Setup the Authentication Server on the Wireless Controller to use the CloudPath as Radius Server:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" height="328" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueXP" width="500"></img></div> <ol start="3" style="margin-left: 80px;"><li style="">Map the Authentication Server on the WLAN:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" height="408" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueXZ" width="500"></img></div> <ol start="4" style="margin-left: 80px;"><li style="">Create HotSpot Service with the Clpudpath URL redirection:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" height="442" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueXe" width="500"></img> </div> <ol start="5" style="margin-left: 80px;"><li style="">Map the HotSpot Profile to the HotSpot Wispr WLAN and Map it against the Authentication Server:-</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" height="415" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueXj" width="500"></img> </div> <div style="margin-left: 120px;"><img alt="User-added image" height="463" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueXo" width="500"></img></div> <ul><li>Setup on the Wireless Client: </li></ul> <ol style="margin-left: 80px;"><li style="">The client connects to the HotSpot Wispr SSID:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueXt"></img> </div> <ol start="2" style="margin-left: 80px;"><li style="">Gets redirected to the BOYD SSID Internally: -</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueXy"></img> </div> <ol start="3" style="margin-left: 80px;"><li style="">After Accepting Terms and Condition select the appropriate Role:-</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueY3"></img> </div> <ol start="4" style="margin-left: 80px;"><li style="">Authenticate against the Role selected:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueY8"></img> </div> <ol start="5" style="margin-left: 80px;"><li style="">Post Authentication, the Device Config Profile will be downloaded:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueYD"></img></div> <ol start="6" style="margin-left: 80px;"><li style="">Install the device profile:</li></ol> <div style="margin-left: 120px;"><img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053D1&feoid=00N50000002Cf3M&refid=0EM2J000000ueYI"></img></div> Once the Certificate is installed on the Client Machine, the client will be authorized for the Network Access.

Configuration Assistance for the Split Users

2019-10-16T07:35:56-0700 2019-10-16T12:00:13-0700 https://support.ruckuswireless.com/articles/000008290 2019-10-16T09:57:22-0700 monthly 0.8 admin,premium knowledge_article_3957 knowledge_article_3957 2019-04-30T23:07:33-0700 000008290 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How to create guest access WLAN on the ZoneDirector? Follow the below procedure to configure the Guest Access WLAN on the ZoneDirector latest version(10.2.1) Step 1: Creating the Guest Access Service <ul><li>Go to Service & Profiles >> Guest Access.</li><li>Click on “Create” and name the service.</li><li>Under Authentication, select ‘Use Guest Pass and Social login authentication’ option if you want to configure the Guest Pass only or both Guest Pass and Social Login authentication.</li><li>You can leave the rest of the settings or can modify as per the requirement.</li></ul> <img alt="User-added image" height="229" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053x9&feoid=00N50000002Cf3M&refid=0EM2J000000uizw" width="500"></img> Step 2: Creating a WLAN <ul><li>Go to Wireless LANs.</li><li>Click on Create and enter the SSID details.</li><li>Select “Guest Access” under WLAN Usages > Type.</li><li>Select Authentication and Encryption as “None”.</li></ul> <img alt="User-added image" height="324" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053x9&feoid=00N50000002Cf3M&refid=0EM2J000000uj06" width="500"></img> Step 3: Creating the “Role” <ul><li>Go to Services & Profiles >> Roles </li><li>Click on Create and name the Role. </li><li>Select the Guest WLAN configured in the above step.</li><li>Check the option “Allow guest pass generation”</li></ul> <img alt="User-added image" height="337" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053x9&feoid=00N50000002Cf3M&refid=0EM2J000000uj0L" width="500"></img> Step 4: Creating the User <ul><li>Go to Services & Profiles >> Users.</li><li>Click on Create. Name the user and create a password.</li><li>Map the user to the role what was created in the previous step.</li></ul> <img alt="User-added image" height="210" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053x9&feoid=00N50000002Cf3M&refid=0EM2J000000uj0Q" width="500"></img> Step 5: Accessing the Guest Pass portal <ul><li>Enter the below URL in the browser to access the Guest pass portal.</li></ul> <div style="margin-left: 80px;"><a href="https://ZD" target="_blank">https://</a><ZD-IP address>/guestpass Example : https://1.1.1.1/guestpass</div> <ul><li>Enter the User name and password which you created earlier.</li></ul> <img alt="User-added image" height="234" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053x9&feoid=00N50000002Cf3M&refid=0EM2J000000qFbe" width="500"></img> Step 6: Creating the Guest pass code: <ul><li>Enter the details for whom you are creating and click on next.</li></ul> <img alt="User-added image" height="375" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053x9&feoid=00N50000002Cf3M&refid=0EM2J000000qFbj" width="500"></img> <img alt="User-added image" height="454" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053x9&feoid=00N50000002Cf3M&refid=0EM2J000000qFbo" width="500"></img> <img alt="User-added image" height="438" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053x9&feoid=00N50000002Cf3M&refid=0EM2J000000qFbt" width="500"></img> Step 7: Test the Guest Pass Code <ul><li>Now you should be asked to enter the passcode while connecting to the SSID.</li><li>Enter the passcode and see if you are getting through.</li></ul> Additional Notes On Guest Pass: <ul><li>Under the 'Guest Information', you have an option called 'Shareable'. Choose the shareable count from the drop down-list if you want to share the same guest pass with different users.</li><li>If there is an SMTP server or SMS server configured on the ZD, you can share the guest pass through email or SMS to the users.</li><li>We also have a print option to print the guest pass.</li></ul>

This document has step by step instruction on how to configure the Guest Pass access for the SSID on the ZD.

2019-10-16T09:57:22-0700 2019-10-16T12:00:09-0700 https://support.ruckuswireless.com/articles/000009854 2019-10-15T13:57:41-0700 monthly 0.8 admin,premium knowledge_article_3956 knowledge_article_3956 2019-10-15T13:57:41-0700 000009854 Validated (External) Premium R730;Ruckus R730 Known issues and workarounds Known Issues and Workarounds, R730 Why could we be seeing high drops and retries on R730 model AP? For the R730 to run at full capacity with all spatial streams you need 31.0 watts (e.g. more than POE+ which is a maximum of 30 Watts). If you're using Ruckus ICX switches, you may be able to use the POE overdrive feature which will do upto 45 watts on a standard POE+ (802.3at) port. This is a Ruckus proprietary feature and only works with Ruckus AP's and Ruckus Switches. Specifically POE overdrive is supported on ICX7650-48P, ICX7650-48ZP, and ICX7150-48ZP. Also, to configure your AP for PoE+ input, Standalone AP: rkscli: set power-mode at Then type: rkscli: get power-mode and it should show: PoE Configured Mode : AT Power Consumption Status : 802.3at PoE+ OK Controller Managed APs: Look under AP Group or AP settings, because AP CLI (only) changes are lost on reboot. See Also: R710 PoE+ injector still gets recognized as 802.3af power https://forums.ruckuswireless.com/ruckuswireless/topics/r710-poe-injector-still-gets-recognized-as-802-3af-power

For the R730 to run at full capacity with all spatial streams you need 31.0 watts (e.g. more than POE+ which is a maximum of 30 Watts).

2019-10-15T13:57:41-0700 2019-10-15T18:00:10-0700 https://support.ruckuswireless.com/articles/000009856 2019-10-15T14:33:41-0700 monthly 0.8 admin,premium knowledge_article_3955 knowledge_article_3955 2019-10-15T14:33:41-0700 000009856 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why do I get an API error trying to delete an AP from the Default Zone/AP Group? Q: It may be that there is no place for it to remove it too. Meaning if you remove it from an AP group not the default it will go to the default AP group. The only option to remove it from the default group would be to globally delete it. I presume you are in enterprise or on an SZ100? A: You are correct that removing a member AP from the default AP-group leaves it nowhere to go, hence the error. Creating a test AP-group and removing an AP from it moves it to the default ap-group. To remove it from the system you need to use /aps/{apMac}.

A deleted AP gets put in the Default Zone so you cannot delete it from here using API.

2019-10-15T14:33:41-0700 2019-10-15T18:00:08-0700 https://support.ruckuswireless.com/articles/000009850 2019-10-14T03:29:36-0700 monthly 0.8 admin,premium knowledge_article_3953 knowledge_article_3953 2019-10-14T03:29:36-0700 000009850 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;Installation;System network management Performance, Configuration, Installation, System Network Management, SmartCell Gateway, virtual SmartCell Gateway How do I balance the number of APs on each data plane or control plane? It is strongly recommended to rebalance APs outside of peak time or during a maintenance window. The time taken to complete the rebalancing will differ significantly depending the number of APs being moved. There may be a very small service interuption to users on each AP being moved. To rebalance APs between control planes and data planes, choose system and then cluster from the menu on the left side of the SZ GUI. <img alt="User-added image" height="240" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000544e&feoid=00N50000002Cf3M&refid=0EM2J000000vLxS" width="153"></img> From the cluster table, choose 'more', and then select Rebalance APs. This task may take some time depending on the number of APs being rebalanced. You can refresh the the table to monitor the progress. <img alt="User-added image" height="169" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000544e&feoid=00N50000002Cf3M&refid=0EM2J000000vLxr" width="500"></img> It is also possible to initiate this task from the command CLI of the controller: Controller> en Password: ********* Controller# config Controller(config)# rebalance-aps

How to rebalance APs between cluster and data planes

2019-10-14T03:29:36-0700 2019-10-14T06:00:12-0700 https://support.ruckuswireless.com/articles/000009843 2019-10-14T03:38:55-0700 monthly 0.8 admin,premium knowledge_article_3952 knowledge_article_3952 2019-10-14T03:38:55-0700 000009843 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway What log can I check to see packets and source IP dropped due to configured Management ACL on SZ controller Specific logs for the management ACL are not available but packet drops can be found in iptables.log. Logs can be downloaded from: Diagnostics::Administrator logs under system - iptables.log <img alt="User-added image" height="438" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000543v&feoid=00N50000002Cf3M&refid=0EM2J000000vKkI" width="500"></img> Click on number link next to system application log and then click on iptables.log to download file. File will be compressed as .tgz and can be uncompressed using standard available compression tools such as 7zip. Note: this log is not specific to the Management ACL but shows all packets dropped by all interfaces on the SZ ports for SSH (port 22) and WEB-UI (8443) Sample log: 2019-09-21T16:50:06+00:00 Cluster3-vSZ1 kernel: : IPT DROP: IN=br2 OUT= MAC=52:54:00:e6:c6:ac:60:9c:9f:bb:79:f4:08:00 SRC=192.53.81.1 DST=173.95.43.86 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=16140 DF PROTO=TCP SPT=34162 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2019-09-21T16:50:06+00:00 Cluster3-vSZ1 kernel: : IPT DROP: IN=br2 OUT= MAC=52:54:00:e6:c6:ac:60:9c:9f:bb:79:f4:08:00 SRC=192.53.81.1 DST=173.95.43.86 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=16141 DF PROTO=TCP SPT=34164 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2019-09-21T16:50:08+00:00 Cluster3-vSZ1 kernel: : IPT DROP: IN=br0 OUT= MAC=52:54:00:3e:cc:d5:60:9c:9f:bb:79:f4:08:00 SRC=77.247.110.172 DST=173.95.43.142 LEN=52 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=UDP SPT=32966 DPT=53 LEN=32 2019-09-21T16:50:10+00:00 Cluster3-vSZ1 kernel: : IPT DROP: IN=br2 OUT= MAC=52:54:00:e6:c6:ac:60:9c:9f:bb:79:f4:08:00 SRC=192.53.81.1 DST=173.95.43.86 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=16142 DF PROTO=TCP SPT=34196 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2019-09-21T16:50:10+00:00 Cluster3-vSZ1 kernel: : IPT DROP: IN=br2 OUT= MAC=52:54:00:e6:c6:ac:60:9c:9f:bb:79:f4:08:00 SRC=192.53.81.1 DST=173.95.43.86 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=16143 DF PROTO=TCP SPT=34198 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2019-09-21T16:50:10+00:00 Cluster3-vSZ1 kernel: : IPT DROP: IN=br2 OUT= MAC=52:54:00:e6:c6:ac:60:9c:9f:bb:79:f4:08:00 SRC=172.101.250.19 DST=173.95.43.86 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=17298 PROTO=TCP SPT=60322 DPT=443 WINDOW=29040 RES=0x00 SYN URGP=0 2019-09-21T16:50:10+00:00 Cluster3-vSZ1 kernel: : IPT DROP: IN=br2 OUT= MAC=52:54:00:e6:c6:ac:60:9c:9f:bb:79:f4:08:00 SRC=192.53.81.1 DST=173.95.43.86 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=16144 DF PROTO=TCP SPT=34199 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2019-09-21T16:50:10+00:00 Cluster3-vSZ1 kernel: : IPT DROP: IN=br2 OUT= MAC=52:54:00:e6:c6:ac:60:9c:9f:bb:79:f4:08:00 SRC=192.53.81.1 DST=173.95.43.86 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=16145 DF PROTO=TCP SPT=34200 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 br0 is the control plane interface where the AP's connect br2 is the management interface used for management access, radius queries ect.

Log file that can be checked to verify packets dropped and source IP address for SSH and WEB-UI management access not listed in configured Management ACL

2019-10-14T03:38:55-0700 2019-10-14T06:00:10-0700 https://support.ruckuswireless.com/articles/000005199 2015-10-14T03:17:06-0700 monthly 0.8 admin,premium knowledge_article_2179 knowledge_article_2179 2015-10-14T03:17:06-0700 000005199 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector Can I continue to use the SSL Certificate issued for Internal name for Guest Access, Captive Portal, ZD WebUI Management? To address this, you can either use a Certificate issued by a Public CA for FQDN of ZD which ends with a Public Domain like .com or .org or edu etc or if you would like to use an Internal name then Certificate can only be signed by your own Internal Root CA.

As per CA/Browser Forum (CA/B) all publicly trusted SSL Certificates issued to ‘’internal names’’ will expire before November 1, 2015.

2015-10-14T03:17:06-0700 2019-10-10T03:54:01-0700 https://support.ruckuswireless.com/articles/000009844 2019-10-08T14:59:26-0700 monthly 0.8 admin,premium knowledge_article_3950 knowledge_article_3950 2019-10-08T14:59:26-0700 000009844 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) System network management System Network Management, SmartCell Gateway How to SNMP query the Smart Zone controller AP radio table? <ul><li>Smart Zone AP MIB table requires AP mac-address in the index to return the correct results</li><li>Use an online calculator to translate MAC address into decimal format</li></ul> <pre class="ckeditor_codeblock"> AP MAC "38:FF:36:12:AF:60" in decimal = 56.255.54.18.175.96</pre> <ul><li>Insert the MAC address in decimal format after AP radio table mib into the command format</li></ul> <pre class="ckeditor_codeblock"> snmpget -v2c -c public <ip_addr> ruckusCtrlAPRadioTable.6.56.255.54.18.175.96.1 Where 6 is always the length of the string index and last digit is the radio index of (0,1)</pre> <ul style="margin-left: 40px;"><li>Here are snmpwalk examples to query the beacon period and radio channel fo a AP with MAC address 38:FF:36:12:AF:60</li></ul> <pre class="ckeditor_codeblock"> ruckusCtrlApRadioBeaconPeriod 1.3.6.1.4.1.25053.1.8.1.1.1.2.3.1.16.6.56.255.54.18.175.96 rho:~$ snmpwalk -v 2c -c public 192.168.51.41 1.3.6.1.4.1.25053.1.8.1.1.1.2.3.1.16.6.56.255.54.18.175.96 iso.3.6.1.4.1.25053.1.8.1.1.1.2.3.1.16.6.56.255.54.18.175.96.0 = INTEGER: 100 <--- Radio 0 iso.3.6.1.4.1.25053.1.8.1.1.1.2.3.1.16.6.56.255.54.18.175.96.1 = INTEGER: 100 <--- Radio 1 ruckusCtrlApRadioChannel rho:~$ snmpwalk -v 2c -c public 192.168.51.41 1.3.6.1.4.1.25053.1.8.1.1.1.2.3.1.10.6.56.255.54.18.175.96 iso.3.6.1.4.1.25053.1.8.1.1.1.2.3.1.10.6.56.255.54.18.175.96.0 = Gauge32: 7 <--- Radio 0 iso.3.6.1.4.1.25053.1.8.1.1.1.2.3.1.10.6.56.255.54.18.175.96.1 = Gauge32: 132 <----- Radio 1</pre>

This article supplement the Smart Zone SNMP MIB reference guide and provide examples of using net-snmp snmpwalk to query the controller AP radio table

2019-10-08T14:59:26-0700 2019-10-08T18:00:08-0700 https://support.ruckuswireless.com/articles/000009823 2019-10-08T07:55:39-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3949 knowledge_article_3949 2019-10-08T07:55:39-0700 000009823 Validated (External) Public Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Installation;Troubleshooting Installation, Troubleshooting, Cloudpath How to fix the cloudpath installation that fails to boot up in Hyper-V? Perform the following steps to deploy the CP virtual appliance with Generation 1 VM: 1. Open the Hyper-V Manager. 2. From the Action menu, select New > Virtual Machine. This opens the New Virtual Machine Wizard. 3. Read the Before You Begin screen. 4. In the Name field, enter a name for the new VM and click Next. 5. Select Generation 1, and click Next to assign Startup memory.

Hyper-V is failing to boot the OS when powering on the Cloudpath VM instance

2019-10-08T07:55:39-0700 2019-10-08T12:00:08-0700 https://support.ruckuswireless.com/articles/000009326 2019-06-04T07:32:59-0700 monthly 0.8 admin,premium knowledge_article_3738 knowledge_article_3738 2019-06-04T07:32:59-0700 000009326 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, virtual SmartCell Gateway, SZ100 What is the Default Username and Password for the Default Zone? The Default AP Admin Logon Username and Password for the Default Zone is the "Cluster Name" to Login to the AP CLI connected to the Default Zone through CLI (SSH Access). For an Example: Cluster Name: vsze-181, then the AP Logon Username: vsze-181 and the Password: vsze-181 Refer to the screenshot attached: <img alt="Get the Cluster Name" height="258" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SU3&feoid=00N50000002Cf3M&refid=0EM2J000000qOv0" width="882"></img> <img alt="User-added image" height="676" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SU3&feoid=00N50000002Cf3M&refid=0EM2J000000qOvA" width="881"></img> <img alt="User-added image" height="347" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SU3&feoid=00N50000002Cf3M&refid=0EM2J000000qOvP" width="553"></img>

What is the Default Username and Password for the "Default Zone" for the AP Logon?

2019-06-04T07:32:59-0700 2019-10-06T03:42:32-0700 https://support.ruckuswireless.com/articles/000002034 2019-01-19T23:34:10-0800 monthly 0.8 admin,premium knowledge_article_486 knowledge_article_486 2013-06-13T21:00:17-0700 000002034 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to disable PoE out across an Access point which supports PoE out port? The following command will display the PoE-out status across the device. get poe_out : get poe_out -- Display PoE OUT port status/info Eg:- rkscli: get poe_out 'PoE OUT' port status: Disabled OK The following command will modify the PoE-out status across the device. set poe_out : set poe_out {enable|disable} -- Enable/Disable PoE OUT port Eg:- rkscli: set poe_out enable 'PoE OUT' port status: Enabled OK There is also an alternative way to configure this port setting from the Zonedirector CLI: ruckus>en ruckus#config ruckus(config)#ap "<MAC Address of an AP>" ruckus(config-ap)#poe-out {enable/disable} Eg:- ruckus(config-ap)#poe-out enable NOTE:- 7025 AP doesn't support the above commands and it is not possible to disable this functionality on them. However, it does support across all other 7762 and 7782 APs.

How to disable PoE out across an Access point which supports PoE out port?

2019-01-19T23:34:10-0800 2019-10-03T12:18:21-0700 https://support.ruckuswireless.com/articles/000009825 2019-10-03T02:53:03-0700 monthly 0.8 admin,premium knowledge_article_3947 knowledge_article_3947 2019-10-03T02:53:03-0700 000009825 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration Performance, Configuration, SmartCell Gateway, virtual SmartCell Gateway What is the AP tunnel offload feature on Smart Zone running 3.6.2 or higher version? In a typical AP-DP setup all the data traffic processed by AP'a main CPU cores, however, to improve the tunnel data performance, some APs supports offload feature and these APs has an additional hardware resource (CPU cores) which is utilised to offload tunnel data to dedicated CPU cores. This is called tunnel offload or NSS(Network Sub System) offload. This improves two things: <ol><li>Decreases the load on main AP CPU cores.</li><li>Boast performance (tunnel throughput) of tunnel data by offloading data traffic to dedicated CPU cores (only for data path).</li></ol> How to disable/enable the offload in a AP? By default tunnel offload feature is enabled on any Ruckus AP which is managed by SZ/vSZ controller and running 3.6.2 or above firmware version. Disabling the tunnel offload is only available using AP CLI and command is as follows: # set tunnelmgr offload disable To verify # get tunnelmgr <div style="margin-left: 40px;"> <pre> ### TUNNELMGR Info ### tunnelmgr Service: Enabled Tunnel Establishment: Enabled Tunnel Authentication: Enabled Tunnel Cipher: Enabled PMTU: Auto PMTU Discovery: Enabled Node Affinity: Disabled Force Fragmentation: Disabled Offload: Disabled Tunnel Type: Ruckus-GRE SCG-D IP List: =1@[10.2.14.42]:23233,[10.2.14.39]:23233 GRE over UDP: AP/WSG-D UDP port # 23233/23233 Keep Alive Interval/Retry-Limit: 10/6 Offload: 1 Keep Alive Interval2: N/A Keep Alive Count: N/A Force Primary Interval: N/A </pre> </div> <div>To again re-enable it </div> <div style="margin-left: 40px;"># set tunnelmgr offload enable</div> <div> You can use AP CLI script to enable or disable the command on the APs managed by a specific Zone. <a href="https://support.ruckuswireless.com/articles/000004057" target="_blank">https://support.ruckuswireless.com/articles/000004057</a></div> <div style="margin-left: 40px;"> </div>

Tunnel offload feature was introduced on SmartZone 3.6.2 version to enhance and improve the tunnel data throughput performance. Article explains basic details of this feature as it is not part of regular SZ firmware release notes.

2019-10-03T02:53:03-0700 2019-10-03T06:00:11-0700 https://support.ruckuswireless.com/articles/000009836 2019-10-03T02:54:05-0700 monthly 0.8 admin,premium knowledge_article_3946 knowledge_article_3946 2019-10-03T02:54:05-0700 000009836 Validated (External) Premium Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, SZ300, SCG200, virtual SmartCell Gateway, SZ100 Why SZ GUI is showing mesh options greyed out under AP Zone setting? If user wants to disable zone mesh then it must meets following rules: <ol><li>All APs must be in connected state in the zone.</li><li>If all APs are connected, check if all APs have either Root AP or Disabled.</li></ol> In case, if there is even a single AP in disconnected/offline state or AP is in mesh state, GUI will grey out the mesh configuration options. This is design intent.

If a single or more APs are in disconnected state or in mesh state, AP Zone mesh options will be greyed out to prevent any outage caused by mesh setting changes.

2019-10-03T02:54:05-0700 2019-10-03T06:00:09-0700 https://support.ruckuswireless.com/articles/000009832 2019-10-02T07:39:21-0700 monthly 0.8 admin,premium knowledge_article_3945 knowledge_article_3945 2019-10-02T07:39:21-0700 000009832 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway I disabled my AP CLI scripts, but they continue to execute - why? 1. TIf the AP CLI script must be urgently prevented from further executions, delete the script using the Delete button. 2. Alternatively a patch file (KSP) exists which can be executed on each SZ node to resolve this bug.

Description of a known issue with scheduled AP CLI scripts in SZ 5.1

2019-10-02T07:39:21-0700 2019-10-02T12:00:08-0700 https://support.ruckuswireless.com/articles/000009830 2019-10-01T05:32:24-0700 monthly 0.8 admin,premium knowledge_article_3944 knowledge_article_3944 2019-10-01T05:32:24-0700 000009830 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) System network management;Troubleshooting System Network Management, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway How long are AP events and alarms stored in SZ? Below is a summary of the data retention periods (in days) applicable to SZ 3.6 and 5.x: <div style="margin-left: 160px;"> <table style="width: 288pt;" width="383"><colgroup><col style="width: 48pt;" width="64"></col><col style="width: 67pt;" width="89"></col><col style="width: 69pt;" width="92"></col><col style="width: 104pt;" width="138"></col></colgroup><tbody><tr height="20" style="height: 15.0pt;"><td colspan="1" rowspan="1" class="xl63" height="20" style="height: 15.0pt; width: 48pt; text-align: center; white-space: nowrap;" width="64">Platform</td><td colspan="1" rowspan="1" class="xl63" style="width: 67pt; text-align: center; white-space: nowrap;" width="89">Events</td><td colspan="1" rowspan="1" class="xl63" style="width: 69pt; text-align: center; white-space: nowrap;" width="92">Alarms</td><td colspan="1" rowspan="1" class="xl63" style="width: 104pt; text-align: center; white-space: nowrap;" width="138">Historical Client Data</td></tr><tr height="20" style="height: 15.0pt;"><td colspan="1" rowspan="1" class="xl63" height="20" style="height: 15.0pt; text-align: center; white-space: nowrap;">SZ-High Scale </td><td colspan="1" rowspan="1" class="xl64" style="text-align: center; white-space: nowrap;">3</td><td colspan="1" rowspan="1" class="xl64" style="text-align: center; white-space: nowrap;">7</td><td colspan="1" rowspan="1" class="xl64" style="text-align: center; white-space: nowrap;">7</td></tr><tr height="20" style="height: 15.0pt;"><td colspan="1" rowspan="1" class="xl63" height="20" style="height: 15.0pt; text-align: center; white-space: nowrap;">SZ-Essentials</td><td colspan="1" rowspan="1" class="xl64" style="text-align: center; white-space: nowrap;">7</td><td colspan="1" rowspan="1" class="xl64" style="text-align: center; white-space: nowrap;">7</td><td colspan="1" rowspan="1" class="xl64" style="text-align: center; white-space: nowrap;">7</td></tr></tbody></table> </div> Note that SZ-300 is considered vSZ-H.

A summary of the data retention periods for SZ-H and SZ-E.

2019-10-01T05:32:24-0700 2019-10-01T06:00:07-0700 https://support.ruckuswireless.com/articles/000009820 2019-09-30T15:03:02-0700 monthly 0.8 admin,premium knowledge_article_3943 knowledge_article_3943 2019-09-25T16:19:09-0700 000009820 Validated (External) Premium Ruckus cloud lte Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, Ruckus Cloud LTE What do I need to do after my network has been updated to 19.01 to bring my APs back up to "Operational" state? Follow instructions in attached TSB_2019-006 file. Configured networks will be in switched "OFF" state after the migration. Tenant will have to create new ECGI records and allocate to such networks, then re-enable the networks.

This Bulletin describes the changes available on the updated version of LTE AP Management -- 2019.01_LTE.

2019-09-30T15:03:02-0700 2019-09-30T18:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zTzSAI?attachment_index=0 2019-09-30T18:00:08-0700 monthly admin,premium knowledge_article_3943 knowledge_article_3943_attachment_1 TSB2019-006_19.01_LTE_AP_Mgmt_ECGIv3.pdf 465963.0 application/pdf https://support.ruckuswireless.com/articles/000009827 2019-09-30T00:36:44-0700 monthly 0.8 admin,premium knowledge_article_3941 knowledge_article_3941 2019-09-30T00:36:44-0700 000009827 Validated (External) Premium I tried to disable Geo Redundancy that I had set up as Active Standby and then configure as Active Active but the Standy cluster remains stuck in pervious mode. Manually disable cluster HA (cluster Geo Redundancy) is required; all cluster HA pre zone settings will be disabled after disabling globally. The standby cluster is required to reset by applying set-factory manually. An additional problem occurred after factory defaulting and reforming the Standby Cluster. Active - Master showed it was enabled but sync failed: <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000540N&feoid=00N50000002Cf3M&refid=0EM2J000000vGJF"></img> And Standby Cluster did not show Geo Redundancy enabled: <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000540N&feoid=00N50000002Cf3M&refid=0EM2J000000vGJG"></img> Configuration Sync was found to be enabled by default on the Active-Slave cluster, which is not required as this is controlled by Active Master, This was disabled and it worked perfectly fine <img alt="User-added image" height="481" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000540N&feoid=00N50000002Cf3M&refid=0EM2J000000vGJZ" width="500"></img>

Converting Geo Cluster Redundancy from Active Standby mode to Active Active mode requires factory defaulting Standby cluster and setting it up again.

2019-09-30T00:36:44-0700 2019-09-30T06:00:09-0700 https://support.ruckuswireless.com/articles/000009402 2019-09-28T10:33:27-0700 monthly 0.8 admin,premium knowledge_article_3921 knowledge_article_3921 2019-09-01T18:50:47-0700 000009402 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management;Troubleshooting;Known issues and workarounds Configuration, System Network Management, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor SMTP configuration on ZD as in Microsoft office 365 SMTP relay did not work When we tried testing SMTP server settings with the e-mail address that have a mailbox, the test was success and we applied the same SMTP settings on the ZD. While using option 3 from the microsoft document, the SMTP setting should be made where the e-mail address have mail box.

SMTP configuration on ZD(version 10.2) as in Microsoft office 365 SMTP relay did not work

2019-09-28T10:33:27-0700 2019-09-28T12:00:10-0700 https://support.ruckuswireless.com/articles/000009799 2019-09-27T10:38:42-0700 monthly 0.8 admin,premium knowledge_article_3935 knowledge_article_3935 2019-09-23T09:51:31-0700 000009799 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting Configuration, Troubleshooting, Cloudpath How to add Azure CA cert to Truststore in Cloudpath -Go back to your App Federation Metadata URL in Azure and copy and paste it into your browser -Click on the “padlock” icon and then click on the “Certificate (Valid)”, icon. Go to the “Certification Path” tab in the Certificate menu, select the “DigiCert Baltimore Root”, certificate and click on “View Certificate” -Go to the “Details” tab and click on “Copy to File...” -Follow the export wizard to save your file as a “DER encoded library X.509 (.CER)” file - Log into Cloudpath account. - Navigate to truststore to add the CA. - If add button is unavailable check the user permission under Administration -> <a id="breadcrumb-1" href="https://training.cloudpath.net/admin/advanced/admin/" target="_blank">Administrators</a>->Modify. Change the role to CA administrator. - Logoff and login back. - Navigate to truststore and add the CA cert.a. *Click on "Add” *Click on “Choose File” and locate your saved .cer Root certificate that you saved in the earlier step. Do not enter a password, click continue -The new Root CA should show up in your Truststore

Customer was unable to integrate Cloudpath with Azure SAML due to server certificate presented by azure was not trusted by Cloudpath.

2019-09-27T10:38:42-0700 2019-09-27T12:00:14-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zSISAY?attachment_index=0 2019-09-27T12:00:14-0700 monthly admin,premium knowledge_article_3935 knowledge_article_3935_attachment_1 Azure SAML - Cloudpath Integration.pdf 558670.0 application/pdf https://support.ruckuswireless.com/articles/000009774 2019-09-27T10:39:13-0700 monthly 0.8 admin,premium knowledge_article_3924 knowledge_article_3924 2019-09-09T11:52:10-0700 000009774 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Performance;Configuration;Firmware;Security Performance, Configuration, Firmware, Security, SmartCell Gateway, SmartCell AP How do we disable TLSv1.0 and force TLSv1.2 on Ruckus AP managed by v/SZ The support to disable the TLSv1.0 on AP was added from 5.1 and hence on any previous version we would not be able to use this command. **Usage : set tls-version : set tls-version { tlsv1 | tlsv1.1 | tlsv1.2 } (Reboot is required)

Some APs on the Network are working on TLSv1.0 and customer wants to disable it and use TLSV1.1 or TLSV1.2

2019-09-27T10:39:13-0700 2019-09-27T12:00:13-0700 https://support.ruckuswireless.com/articles/000009751 2019-09-27T10:39:32-0700 monthly 0.8 admin,premium knowledge_article_3922 knowledge_article_3922 2019-09-02T07:29:17-0700 000009751 Validated (External) Premium Ruckus cloud wifi Configuration;Firmware Configuration, Firmware, Ruckus Cloud WiFi What is the inactivity timeout on Ruckus cloud WLAN? By default the Inactivity timeout on version 18.04 was 300 seconds and we did not have the option to configure or change the value from the Controller WEB UI. From version 18.05 we have the option of changing the inactivity timeout on the Cloud controller WEB UI. You can configure the value to a minimum of 60 seconds to a maximum of 1000 seconds for the users. This setting is available under Networks >> Edit Networks >> Advanced >> Client inactivity timeout.

Customer wants to know the inactivity timeout on Cloud WLAN

2019-09-27T10:39:32-0700 2019-09-27T12:00:11-0700 https://support.ruckuswireless.com/articles/000004567 2019-09-27T10:57:30-0700 monthly 0.8 admin,premium knowledge_article_1912 knowledge_article_1912 2015-05-17T22:12:31-0700 000004567 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway Where do I configure AP tunnel MTU in SZ / SCG The AP WAN MTU settings have changed between SCG version 2.1.x and 2.5.x. In 2.5.x and later, the settings for Tunnel Type, Tunnel Encryption and WAN Interface MTU has moved from the AP Zone to the AP Tunnel Profiles section under general configuration. A new profile must be defined for these custom settings as the default record may not be modified. SCG allows maximum 1500 MTU and that basically sets the MTU on AP as 1440. You can check this from AP CLI with command “get mtu gre”. <img alt="User-added image" height="100" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005411&feoid=00N50000002Cf3M&refid=0EM2J000000vGH4" width="500"></img> The MTU is negotiated between the two end points and it depends upon the path MTU. AP sends ICMP packet to the vDP every 10 minutes to discover the PMTU and if any fragmentation needed for the ICMP packet, AP reduces the gre MTU from 1440 to 1392. The calculation will be Eth + IP + UDP + Ruckus GRE : 14+20+8+16 =58 . This negotiates MTU to no more than 1440.

This article describes where the tunnel MTU setting may be found on SZ / SCG

2019-09-27T10:57:30-0700 2019-09-27T12:00:08-0700 https://support.ruckuswireless.com/articles/000009819 2019-09-26T09:38:59-0700 monthly 0.8 admin,premium knowledge_article_3940 knowledge_article_3940 2019-09-26T09:38:59-0700 000009819 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration Performance, Configuration, SmartCell Gateway, virtual SmartCell Gateway Are there any implications/concerns with having a significantly increased number of AP Groups per VSZ There is a hard limit of 512 AP groups per Zone. There is minimal impact on operation in having many AP groups. The AP group is more a logical and administrative configuration that allows controlling configurations into groups that are common to a set of AP's. Usually it is recommended to only create AP groups when these common configuration changes are needed. One of the most common common configuration are WLAN groups which are used to control which SSID's are transmitted per radio per AP. Creating multiple Zones causes negligible impact on operation. Zones were originally designed to act as individual Zone Director style features like AP firmware and are also mostly logical. The one operational impact is that if you used Ruckus Captive Portal features such as Guest Pass or Hotspot services (which I do not believe you do) then seamless roaming between zones does not work - clients will be forced to re authenticate when moving from AP's in one zone to another. SZ-H/SCG300 version 3.1 and above 10,000 Zones are supported per Cluster. Additionally WLAN groups can be assigned directly to individual AP's by overriding the Zone or AP group level, this may alleviate the need for creating new Zones. You can create 2048 WLAN groups per Zone. Most AP group features can be actually overridden on the specific AP level, so AP groups are most useful when you want to manage a set of AP's together with one common settings page. So operationally using and maxing out AP groups, extra zones or just using direct AP configurations should not impact SZ operation, but it is good to use these logical groupings as designed.

Does creating additional AP groups and AP Zones impact the client service or SZ operation

2019-09-26T09:38:59-0700 2019-09-26T12:00:08-0700 https://support.ruckuswireless.com/articles/000009818 2019-09-24T09:22:22-0700 monthly 0.8 admin,premium knowledge_article_3937 knowledge_article_3937 2019-09-24T09:22:22-0700 000009818 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration Performance, Configuration, SmartCell Gateway, virtual SmartCell Gateway Are there any operational and service effects caused by adding additional Domains and moving existing Zones into these new Domains The SZ 300 and vSZ-H support up to 2048 Domains Domains are primarily a logical separation to arrange access via admin roles to particular groups of Zones. When adding or changing domains you need to make sure existing admin and roles are still correctly aligned for specific domain access. Moving complete AP Zones into new Domains should have no effect on AP operation and Client connectivity as the actual Zone configuration and AP configuration are not changed. Several internal enhancements in version 3.5 code to improve moving Zones between or into new domains. These have been included in 3.6 + SZ firmware. Existing AP Zones with operational AP's were moved into newly created Domains without any effect on AP operation: <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053yb&feoid=00N50000002Cf3M&refid=0EM2J000000vEMv"></img>

Verify the affects on service (client connectivity) and operation (system load) when adding additional SZ Domains to organize existing production AP Zones for better reporting and the possible service affect when moving operational Zones into new Domains

2019-09-24T09:22:22-0700 2019-09-24T12:00:10-0700 https://support.ruckuswireless.com/articles/000006323 2019-05-10T17:39:47-0700 monthly 0.8 admin,premium knowledge_article_3494 knowledge_article_3494 2017-05-08T15:10:58-0700 000006323 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway I configured an AP Zone with Mesh enabled and placed an AP in it. I now want to move the AP to a different AP zone but it says I cannot because of the Mesh ssid. Since enabling MESH makes fundamental changes to the AP interfaces and bridge configuration, the only way to remove this and allow the AP to be moved to a new non-mesh zone is to factory default the AP and allow it to rediscover the SZ and be re-configured. Make sure you have deleted the AP from the existing Zone first - or it will just go right back into there and inherit the same mesh configurations. It is possible to disable MESH on an entire Zone, if and only if all AP's in that Zone are operating as Root (wired) AP's and all AP's in the Zone are connected. But for individual AP's - factory default is the only way to re-configure the AP to allow it to move.

How to move a MESH enabled AP to a different Zone and how to disable MESH on a Zone

2019-05-10T17:39:47-0700 2019-09-24T11:14:38-0700 https://support.ruckuswireless.com/articles/000006287 2019-07-07T20:09:57-0700 monthly 0.8 admin,premium knowledge_article_2593 knowledge_article_2593 2017-03-10T14:07:58-0800 000006287 Validated (External) Premium Spot lbs;Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Configuration;Troubleshooting Configuration, Troubleshooting, SPoT LBS, SPoT How does SPoT or vSPoT finds whether a particular mac address is local administered address or Randomized mac address? Question: How does SPoT or vSPoT finds whether a particular mac address is local administered address or Randomized mac address? Answer: Our APs can easily detect whether a MAC address is Random mac address or a local administered mac address using the most significant byte of the 1st octet of the OUI (Organizationally Unique Identifier). The bit 1 of most significant byte of Random Mac address is always set to 1 - With “MAC Randomization” support, Wi-Fi clients use random MAC’s while probing. - The same client device can use different random MAC address while probing. - Now this is done to avoid footfall tracking of the devices by venues. - (Assume a use case: If Wi-Fi is enabled on phone, even if user did not select any Wi-Fi network to connect, the client devices still keep probing periodically which makes the client easily trackable if device uses the same mac address for probing) - Our SPoT is filtering out those random mac addresses or in other words our SPoT do not try to locate or triangulate the devices based on Random mac addresses. Please find attached the schematic diagram illustrating the mac randomization; <img alt="User-added image" height="170" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Js&feoid=00N50000002Cf3M&refid=0EM50000000gYRP" style="width: 653px; height: 232px;" width="500"></img>

This articles shows how SPoT and vSPOT find random and local administered MAC addresses?

2019-07-07T20:09:57-0700 2019-09-24T05:58:59-0700 https://support.ruckuswireless.com/articles/000007334 2017-12-12T13:15:56-0800 monthly 0.8 admin,premium knowledge_article_3163 knowledge_article_3163 2017-12-12T13:15:56-0800 000007334 Validated (External) Premium Icx 7750;RUCKUS ICX 7750 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ICX 7750 Certificate of Entitlement for ICX7750 (ICX7750-L3-COE) A Certificate of Entitlement (ICX7750-L3-COE) should be purchased to use advanced routing functionality. Without the Certificate of Entitlement, customers may use base Layer 3 features: VRRP, RIP, and static routes. Other Layer 3 features are considered advanced and require the ICX7750-L3-COE. The Certificate of Entitlement is serialized paper that is not tied to a particular switch; no activation is required. In addition, the Brocade Technical Assistance Center (TAC) will not require the Certificate of Entitlement for support. You do not need to load a license onto the switch to use the full Layer 3 Premium feature set. The purchase of the CoE gives entitlement for the use of the full feature set and functionality Please use the following links as reference: <a href="http://www.brocade.com/content/dam/common/documents/content-types/faqs/brocade-icx-7750-faq.pdf" target="_blank">http://www.brocade.com/content/dam/common/documents/content-types/faqs/brocade-icx-7750-faq.pdf</a> <a href="http://www.brocade.com/content/html/en/software-licensing-guide/fastiron-08040a-licenseguide/GUID-E65BAA46-FAE9-415D-A72A-2B2DED24A1EB.html" target="_blank">http://www.brocade.com/content/html/en/software-licensing-guide/fastiron-08040a-licenseguide/GUID-E65BAA46-FAE9-415D-A72A-2B2DED24A1EB.html</a>

Explanation of the Certificate of Entitlement for the ICX 7750s (ICX7750-L3-COE)

2017-12-12T13:15:56-0800 2019-09-23T14:14:07-0700 https://support.ruckuswireless.com/articles/000002592 2019-07-15T09:20:28-0700 monthly 0.8 admin,premium knowledge_article_3833 knowledge_article_3833 2015-05-12T19:29:04-0700 000002592 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector Does miracast run on normal wi-fi networks Understand the limitations of miracast and wi-fi direct in a mixed environment.

Sony Miracast enabled TVs fail when Zone Director WiFi infrastructure system is turned on.

2019-07-15T09:20:28-0700 2019-09-12T16:20:14-0700 https://support.ruckuswireless.com/articles/000009641 2019-09-12T05:58:05-0700 monthly 0.8 admin,premium knowledge_article_3927 knowledge_article_3927 2019-07-25T10:02:42-0700 000009641 Validated (External) Premium Vsz dataplane Troubleshooting Troubleshooting, vSZ Dataplane How to run packet capture from vSZ-D Command Line Interface? There are two possible ways to enable Packet capture from vDP CLI: Option-1: Data Plane Packet Capture This option allows us to Enable Remote Capture on the vSZ-D Data Plane and then export it to an FTP server. For any client traffic-related issues, we need to capture using this method. Login to the vDP CLI and execute below CLI: <div style="margin-left: 40px;"> vDP-194(debug)# dp-packet-capture enable The dataplane-packet-capture file exists. Do you want to remove the previous record? (y/n)y { You will see this prompt if there is any previously saved dp capture] The record is removed. Enable dataplane-packet-capture function. </div> Run the show command to verify if PCAP is enabled or not <div style="margin-left: 40px;"> vDP-194(debug)# show Debug Settings: Remote Packet Capture: Disable Data Plane Packet Capture: Enable </div> Once the capture is done, disable the PCAP and it will save the PCAP file in one of the vSZ-D's directories. <div style="margin-left: 40px;"> vDP-194(debug)# dp-packet-capture disable Disable dataplane-packet-capture function.</div> To export packet-capture to an FTP server, run the following commands: <div style="margin-left: 40px;"> vDP-194(debug)# dp-packet-capture save Please select the transmission protocol(ftp or sftp):ftp Please select the transmission protocol(ftp or sftp):1.1.1.1 Please select the transmission protocol(ftp or sftp):user Please select the transmission protocol(ftp or sftp):password Please select the transmission protocol(ftp or sftp):ftp Please enter the [ftp] server ip address:1.1.1.1 Please input the user name for [ftp]:user Please input the password for [ftp]:password Start to transmit the file... Please wait for a while. Save the dataplane-packet-capture file pkt_genA.pcap Done.</div> Option #2: Enable Remote Packet Capture This option is a traditional way of enabling Remote PCAP and then pulling all vDP interfaces using Wireshark. We can further choose the interface we want to capture using Remote capture. For AP/DP or Management Interfaces related issues, we use br0 or Eth0 interface to capture. <div style="margin-left: 40px;"> vDP-194(debug)# remote-packet-capture enable Enable remote-packet-capture function. vDP-194(debug)# show Debug Settings: Remote Packet Capture: Enable Data Plane Packet Capture: Disable</div> Once Enabled, open Wireshark on your PC to capture the remote interface as shown below: <ul><li>Navigate to Capture> Options in the Menu Bar and click on Manage Interfaces:</li><li>In the Next Window, click on Remote Interfaces and enter the IP of the vSZ-D here.</li><li>Choose the interface you would like to capture. This case demonstrates br0 captures.</li><li>Start the capture to begin capturing the interface.</li></ul> <div style="margin-left: 40px;"><img alt="User-added image" height="512" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053vN&feoid=00N50000002Cf3M&refid=0EM2J000000unoc" width="1277"></img></div> <div style="margin-left: 40px;"><img alt="User-added image" height="558" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053vN&feoid=00N50000002Cf3M&refid=0EM2J000000unnt" width="1104"></img></div> <ul><li>Once done, stop the capture and save it as a local file.</li></ul>

This article explains the procedure of collection Packet Captures from vSZ- D CLI.

2019-09-12T05:58:05-0700 2019-09-12T06:00:09-0700 https://support.ruckuswireless.com/articles/000009728 2019-09-09T13:49:49-0700 monthly 0.8 admin,premium knowledge_article_3925 knowledge_article_3925 2019-09-09T13:49:49-0700 000009728 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Installation;System network management;Troubleshooting Configuration, Installation, System Network Management, Troubleshooting, Unleashed One of the reasons for internet disconnected status on the unleashed AP. Customer logged into the Araknis switch and checked the configuration of the core switch. STP settings in the LAN have been left default. We must have a managed switch installed as the core switch in order to modify STP settings. In the basic settings of the switch, the priority was set to default by 32768. Then, it was changed to a lesser value comparatively (i.e) 4096. This will force the core switch to be the elected root bridge and resolve most STP issues.

This article explains why Unleashed AP will not be able to connect to the Internet.

2019-09-09T13:49:49-0700 2019-09-09T18:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zP9SAI?attachment_index=0 2019-09-09T18:00:06-0700 monthly admin,premium knowledge_article_3925 knowledge_article_3925_attachment_1 PrioritySTP.PNG 276637.0 image/png https://support.ruckuswireless.com/articles/000005871 2016-06-30T14:39:55-0700 monthly 0.8 admin,premium knowledge_article_2366 knowledge_article_2366 2016-06-30T14:39:55-0700 000005871 Validated (External) Premium Virtual smartcell gateway Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, virtual SmartCell Gateway Do we have a guide for creating VM on MS Azure Marketplace? Azure Online Resources: (Guide to create a virtual machine image for the Azure Marketplace) <a href="https://azure.microsoft.com/en-us/documentation/articles/marketplace-publishing-vm-image-creation/#5-obtain-certification-for-your-vm-image" target="_blank">https://azure.microsoft.com/en-us/documentation/articles/marketplace-publishing-vm-image-creation/#5-obtain-certification-for-your-vm-image</a>

Microsoft Azure cloud environment instructions to help create a VM for vSZ installations.

2016-06-30T14:39:55-0700 2019-08-30T16:28:14-0700 https://support.ruckuswireless.com/articles/000007140 2017-12-12T14:12:11-0800 monthly 0.8 admin,premium knowledge_article_3104 knowledge_article_3104 2017-12-12T14:12:11-0800 000007140 Validated (External) Premium Ruckus icx switches System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Ruckus ICX Switches How do you BOOT from TFTP? Commands:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> printenv setenv ipaddr <device IP address> -> set ip address setenv netmask <255.255.255.0> -> set subnet mask setenv serverip <xxx.xxx.xxx.xxx> -> set tftp server address setenv gatewayip <xxx.xxx.xxx.xxx> -> set gateway address (OPTIONAL) ping <server-ip> > confirm connectivity to the server setenv uboot kxz07401.bin -> unit boot setenv image_name ICX64S07400.bin (change as needed for patch level) tftpboot (this will start the code boot) printenv

Booting from a TFTP server

2017-12-12T14:12:11-0800 2019-08-28T23:45:51-0700 https://support.ruckuswireless.com/articles/000009660 2019-07-31T08:37:55-0700 monthly 0.8 admin,premium knowledge_article_3898 knowledge_article_3898 2019-07-31T08:37:55-0700 000009660 Validated (External) Premium Sz300;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Installation;System network management Installation, System Network Management, SZ300, virtual SmartCell Gateway, SZ100 What does the AP and switch total capacity actually mean on SmartZone controller? As per SZ-100 datasheet, Managed APs: <div style="margin-left: 40px;">• Up to 1,024 per controller • Up to 3,000 per cluster</div> Managed Switches: <div style="margin-left: 40px;">• Up to 200 per controller • Up to 600 per cluster</div> The total capacity is either 1024 APs or 204 switches and not 1024 APs and 204 switches which means 1024/204 = 5. That is, if you use 1 switch, it consumes the space of 5 APs. In this case (customer scenario): 44 APs + 8 switches (40 APs). A total of 84 APs used or 16 switches used. Hence, remaining APs are 1024-84 = 940 and remaining switches are 204-16 = 188.

This article provides more details on the AP and switch capacity on the SZ/vSZ controllers.

2019-07-31T08:37:55-0700 2019-08-27T05:53:09-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zLHSAY?attachment_index=0 2019-08-27T05:53:09-0700 monthly admin,premium knowledge_article_3898 knowledge_article_3898_attachment_1 SZ-100.jpg 18794.0 image/jpeg http://support.ruckuswireless.com/article_attachments/kA22J0000004zLHSAY?attachment_index=1 2019-08-27T05:53:09-0700 monthly admin,premium knowledge_article_3898 knowledge_article_3898_attachment_1 SZ-300.png 59144.0 image/png https://support.ruckuswireless.com/articles/000004448 2019-08-21T16:08:00-0700 monthly 0.8 admin,premium knowledge_article_2238 knowledge_article_2238 2015-05-07T00:44:48-0700 000004448 Validated (External) Premium Scg200;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SCG200, virtual SmartCell Gateway DFS: How to blacklist 5G UNII-2 channels on vSCG/SCG managed APs? -- Prior to SmartZone 3.2, administrators can use AP CLI scripts to disable unwanted 5G UNII-2 Channels. Various Ruck OS/SZ version example scripts are provided below, and use similar formats. 1. Define an AP script file. The file can be written using any simple text editor (like Notepad or vi). Here are some AP script examples. Use the 'wifi0' (2.4G) or 'wifi1' (5G) radio in the blacklist commands, to specify the specific radio. wifi0 for 2.4Ghz wifi1 for 5Ghz These three example AP scripts will configure SNMP communities (#1), disable channel 11 on 2.4G (#2), or all DFS/UNII-2 channels on 5G (#3). Example Script #1: #define AP FW version (must match the AP version in the zone) fw_version=2.1.2.0.110 #define Model class (only option available is 'all') model=all # Command (these are examples, any AP CLI command will be accepted; One command per line) set remote-mgmt snmp set snmp community ro READ - Save the file. Example Script #2: fw_version=3.0.3.0.455 model=all # disable channel 11 on 2.4G set blacklist wifi0 11 -1 Example Script #3: #SmartZone AP DFS channel blacklist script fw_version=3.1.1.0.349 model=all set blacklist wifi1 clear # set blacklist wifi1 36 -1 # set blacklist wifi1 40 -1 # set blacklist wifi1 44 -1 # set blacklist wifi1 48 -1 set blacklist wifi1 52 -1 set blacklist wifi1 56 -1 set blacklist wifi1 60 -1 set blacklist wifi1 64 -1 set blacklist wifi1 100 -1 set blacklist wifi1 104 -1 set blacklist wifi1 108 -1 set blacklist wifi1 112 -1 set blacklist wifi1 116 -1 set blacklist wifi1 120 -1 set blacklist wifi1 124 -1 set blacklist wifi1 128 -1 set blacklist wifi1 132 -1 set blacklist wifi1 136 -1 set blacklist wifi1 140 -1 # set blacklist wifi1 149 -1 # set blacklist wifi1 153 -1 # set blacklist wifi1 157 -1 # set blacklist wifi1 161 -1 # set blacklist wifi1 165 -1 # optional CF mgt commands set channelfly wifi0 mtbc 1440 set channelfly wifi1 mtbc 1440 reboot 2. Running AP scripts on SmartZone controllers. a. Go to SCG/vSCG WebUI: Administration -> Diagnostics -> AP CLI Scripts. b. Select the zone where you want to apply it. c. Click on 'Browse' and select the file from your PC. d. Click on 'Upload' to load into SCG/vSCG. e. Click on 'Execute' to run it in the selected zone. For each AP you will obtain execution status. If any command fails, that AP will be marked as Failed. Otherwise it will be marked as 'Succeed'. Note: The script will be executed only on currently connected APs. If at a later time new APs are added into the zone or they were disconnected when it was executed, the script needs to be executed again. 3. How to verify the Channel been blacklisted on APs? Log in into one of the vSCG/SCG managed APs and execute the below command. rkscli: get channelavailability get channelavailability : get channelavailability <wifi name> -- Displays the all radio channel availability <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053qN&feoid=00N50000002Cf3M&refid=0EM2J000000uwVt"></img> 4. Additionally, from the SZ, an Admin can issue channel blacklist commands to connected APs. Usage: remote ap-cli <ap-mac> "<ap-cmd>" For example, where an Indoor AP is used to Mesh with an Outdoor AP, you would want to disable UNII DFS channels, and would also need to disable the lower channels used by Indoor, but not Outdoor APs. Usage: set blacklist <wifi name> <channel> <value> {options} -> [ {enable|disable|warnonly} (Enable/Disable/EnableWarningOnly Auto Blacklist)] -> [ clear (Clears entire blacklist)] -> [ <chan> {-1|0} (-1=Add to user-specified blacklist, 0=Remove) -> [ {rx_phyerr|util_busy|nf0hi|nf0lo|nfcap0hi|nfcap0lo} <val> ] <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053qN&feoid=00N50000002Cf3M&refid=0EM2J000000uwWN"></img> Issue these commands to blacklist channels on indoor AP with MAC address E0:10:7F:13:88:40 scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 52 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 56 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 60 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 64 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 100 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 104 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 108 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 112 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 116 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 132 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 136 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 140 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 165 -1" And scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 36 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 40 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 44 -1" scg2.lab# remote ap-cli E0:10:7F:13:88:40 "set blacklist wifi1 48 -1" Would leave the Indoor AP using 5G channels 149, 153, 157, 161, which the Outdoor AP can also use and Mesh on. Please Note: Following command can also be used to blacklist UNII-2/Middle Band channel from AP CLI. This command is supported on both ZoneDirector and SmartZone (3.5.x and later releases) managed AP. This command is reboot persistent. rkscli: set dfsmidbandblock Commands starting with 'set dfsmidbandblock' : set dfsmidbandblock : set dfsmidbandblock <wifi name> {enable|disable} -- Set DFS mid-band (UNI-11 2) block status <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053qN&feoid=00N50000002Cf3M&refid=0EM2J000000uwV0"></img>

Text script files can be executed on SmartZone controllers to configure APs to Blacklist the 5G UNII-2 channels used by DFS/Radar.

2019-08-21T16:08:00-0700 2019-08-21T18:00:08-0700 https://support.ruckuswireless.com/articles/000009700 2019-08-21T16:14:51-0700 monthly 0.8 admin,premium knowledge_article_3917 knowledge_article_3917 2019-08-12T11:29:55-0700 000009700 Validated (External) Premium Ruckus icx switches Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, Ruckus ICX Switches Why are we unable to securely copy SCP Config or supportsave via SCP on ICX 7xxx series switches? Upgrade to FI 08.0.90d or later, when it becomes available.

Until FI 08.0.90d we are unable to securely copy SCP Config or supportsave via SCP on ICX 7xxxx switches.

2019-08-21T16:14:51-0700 2019-08-21T18:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zNrSAI?attachment_index=0 2019-08-21T18:00:06-0700 monthly admin,premium knowledge_article_3917 knowledge_article_3917_attachment_1 TSB-2019-005-A-SCP_Failures.pdf 177628.0 application/pdf https://support.ruckuswireless.com/articles/000003408 2014-09-18T18:47:41-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1284 knowledge_article_1284 2014-09-18T18:47:41-0700 000003408 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What settings are required for the Twilio based SMS settings Test to be successful?

This article explains configuration settings required for the SMS settings test to be successful. For other non-configuration related reasons, please check the article at https://support.ruckuswireless.com/answers/000002761

2014-09-18T18:47:41-0700 2019-08-20T09:16:37-0700 https://support.ruckuswireless.com/articles/000009677 2019-08-14T08:58:04-0700 monthly 0.8 admin,premium knowledge_article_3919 knowledge_article_3919 2019-08-06T04:43:08-0700 000009677 Validated (External) Premium Icx 7750;RUCKUS ICX 7750 Campus Switches Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ICX 7750 Why does the ICX 7750 not boot? Install at least 3 FAN units for the ICX 7750 to work properly.

FATAL ERROR: At least three FRU fans should be present with the same air-flow direction System is shutting down!!!

2019-08-14T08:58:04-0700 2019-08-14T12:00:07-0700 https://support.ruckuswireless.com/articles/000009147 2019-08-13T10:27:37-0700 monthly 0.8 admin,premium knowledge_article_3918 knowledge_article_3918 2019-04-26T15:17:25-0700 000009147 Validated (External) Premium Ruckus icx switches Performance;Configuration;Firmware;Known issues and workarounds Performance, Configuration, Firmware, Known Issues and Workarounds, Ruckus ICX Switches When connecting ICX7850-48F with 1GBe link to ICX7450 SFP, why does the link show up on 7850, but down on 7450? If the customer is experiencing link issues between an ICX7850-48F and an ICX7000 series switch with ports configured for 1 GbE speed, then have the customer disable “auto-negotiation” using CLI “gig-default neg-off” on the affected interface. The ICX7850-48F switch does not support the auto-negotiation function on the 1/10/25 GbE SFP ports when configured for 1 GbE mode. This requires changing the default configuration of the downstream device to disable auto-negotiation to allow the port link to come up properly.

When connecting an ICX7850-48F at 1 GbE speed to an ICX7450 SFP port configured for 1 GbE, the link shows up on the ICX7850-48F but shows down on the ICX7450 switch. This is due to a miss-match of the auto-negotiation port mode for the two switches.

2019-08-13T10:27:37-0700 2019-08-13T12:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000000OE4SAM?attachment_index=0 2019-08-13T12:00:06-0700 monthly admin,premium knowledge_article_3918 knowledge_article_3918_attachment_1 ICX7850 TSB 2019-001.pdf 110965.0 application/pdf https://support.ruckuswireless.com/articles/000001579 2019-06-06T14:15:33-0700 monthly 0.8 admin,premium knowledge_article_204 knowledge_article_204 2013-02-04T17:08:45-0800 000001579 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor If the ZD is connected on to a switch port which has untagged VLAN (Native) , what is the VLAN that needs to be configured on the Z There is no configuration that needs to be done on the ZD as by default all Ruckus devices are on the native or untagged VLAN (VLAN 1 used as untagged/native VLAN). All we need to do is plug the ZD into the switch and the untagged packets will be passed. On the GUI>System, the VLAN option under IPv4 configuration is where the the management VLAN of ZD is specified; we are basically tagging the VLAN here (if the VLAN is anything other than 1) and the ZD will thereafter understand only tagged packets of this particular VLAN. Important note: Changing VLAN from 1 to any other VLAN on ZD IP configuration will make the VLAN tagged. In details (the default behavior) If VLAN is set to 1 (This is by default set to 1) = Untagged If VLAN is set to other than 1 = Tagged

2019-06-06T14:15:33-0700 2019-08-13T02:30:33-0700 https://support.ruckuswireless.com/articles/000009697 2019-08-09T14:26:57-0700 monthly 0.8 admin,premium knowledge_article_3916 knowledge_article_3916 2019-08-09T14:26:57-0700 000009697 Validated (External) Premium Ruckus icx switches;Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, Ruckus ICX Switches, SmartCell Gateway, virtual SmartCell Gateway Can I configure ICX to serve DHCP option 43 to another ICX switch?

You can configure internal DHCP on ICX switches to serve option 43 to other ICX switches.

2019-08-09T14:26:57-0700 2019-08-09T18:00:06-0700 https://support.ruckuswireless.com/articles/000008909 2019-08-07T13:43:56-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3914 knowledge_article_3914 2019-03-13T19:13:35-0700 000008909 Validated (External) Public Smartcell insight;Spot;SmartCell Insight (SCI);Ruckus SPoT;Calibrator App for SPoT;vSPoT System network management System Network Management, SmartCell Insight, SPoT How to do a backup in SCI or vSPoT? vSPoT and SCI don't have their own feature of backup. You can utulize the backup feature of your VM. 1. Login to VM 2. Choose the vSPoT or SCI instances 3. Right click on it --> select take snapshot option 4. It will ask you to snapshot file to your local PC Note: When you restore a snapshot, you basically go back to the state when the snapshot was taken. You cannot combine data together with another SCI / vSPoT instance.

Neither SCI nor vSPoT have backup capabilities. Taking a snapshot with your VM is the only option.

2019-08-07T13:43:56-0700 2019-08-07T18:00:07-0700 https://support.ruckuswireless.com/articles/000009657 2019-08-06T15:41:06-0700 monthly 0.8 admin,premium knowledge_article_3896 knowledge_article_3896 2019-07-30T11:19:54-0700 000009657 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to use snmpset to add associate a VLAN with a port? To Add a port to a VLAN <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053lN&feoid=00N50000002Cf3M&refid=0EM2J000000updC"></img> snmpset -v2c -c ruckus 1.3.6.1.4.1.1991.1.1.3.2.6.1.3.X.Y i C 1.3.6.1.4.1.1991.1.1.3.2.6.1.4.X.Y i D X= VLAN Y= PORT C=3 remove C=4 add D=1 tagged D=2 untagged ? with the following set we are adding port 1/1/1 to vlan 10 as tagged: C:\Users\Administrator\Desktop\usr\bin>snmpset -v2c -c ruckus 10.176.192.138 1.3.6.1.4.1.1991.1.1.3.2.6.1.3.10.1 i 4 1.3.6.1.4.1.1991.1.1.3.2.6.1.4.10.1 i 1 SNMPv2-SMI::enterprises.1991.1.1.3.2.6.1.3.10.1 = INTEGER: 4 SNMPv2-SMI::enterprises.1991.1.1.3.2.6.1.4.10.1 = INTEGER: 1 with the following set we are adding port 1/1/1 to vlan 11 as Untagged: C:\Users\Administrator\Desktop\usr\bin>snmpset -v2c -c ruckus 10.176.192.138 1.3.6.1.4.1.1991.1.1.3.2.6.1.3.11.1 i 4 1.3.6.1.4.1.1991.1.1.3.2.6.1.4.11.1 i 2 SNMPv2-SMI::enterprises.1991.1.1.3.2.6.1.3.11.1 = INTEGER: 4 SNMPv2-SMI::enterprises.1991.1.1.3.2.6.1.4.11.1 = INTEGER: 2

How to use snmpset to add associate a VLAN with a port?

2019-08-06T15:41:06-0700 2019-08-06T18:00:07-0700 https://support.ruckuswireless.com/articles/000009565 2019-08-05T10:36:53-0700 monthly 0.8 admin,premium knowledge_article_3910 knowledge_article_3910 2019-07-16T19:41:15-0700 000009565 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway How to get AP client statistics? AP stats are sent to SCG/SZ platform by AP. This files can be exported to an external FTP server. To enable this feature, go to the controller web UI and select the Enable uploading statistical data to the FTP server check-box from System > General Settings > FTP. After the feature is enabled, each controller node sends a zip file to the FTP server via FTP or SFTP, on an hourly basis. *Note that you will require to configure and FTP server prior to enable this feature under same System > General Settings > FTP Below are the list of statistics that will be exported: <img alt="User-added image" height="218" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053kj&feoid=00N50000002Cf3M&refid=0EM2J000000ukT4" width="500"></img> <img alt="User-added image" height="230" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053kj&feoid=00N50000002Cf3M&refid=0EM2J000000ukT9" width="500"></img>

This article provides information on how to get AP client statistics to an external file.

2019-08-05T10:36:53-0700 2019-08-05T12:00:10-0700 https://support.ruckuswireless.com/articles/000009670 2019-08-02T16:21:30-0700 monthly 0.8 admin,premium knowledge_article_3902 knowledge_article_3902 2019-08-01T13:54:35-0700 000009670 Validated (External) Premium Ruckus cloud lte Known issues and workarounds Known Issues and Workarounds, Ruckus Cloud LTE Update ARRIS & WINNFORUM PKI certificates (TSB 2019-004) All LTE APs must be upgraded to the latest build to obtain the new certificates. This bulletin provides information about certificate related changes included in SC 2.3.1 build 32, SC 2.4.0 build 23 & upcoming SC 2.4.1 software updates.

The LTE AP Certificates needs to be updated to a new SC build to avoid connectivity issues with AP Management & SAS. This includes both ARRIS PKI & WINNFORUM PKI certificates on all LTE APs.

2019-08-02T16:21:30-0700 2019-08-05T07:58:55-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zM5SAI?attachment_index=0 2019-08-05T07:58:55-0700 monthly admin,premium knowledge_article_3902 knowledge_article_3902_attachment_1 TSB 2019-004 WINNFORUM ARRS PKI Cert.pdf 221391.0 application/pdf https://support.ruckuswireless.com/articles/000002774 2019-08-05T03:28:41-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3767 knowledge_article_3767 2014-03-17T02:01:42-0700 000002774 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector What causes the Authorized (Deny) status of a wireless client and what can I do about it? ZoneDirector allows various access control methods to its clients. These include: 1. Layer 2 based MAC ACLs 2. Layer 3 based ACLs that disallows or allows a particular service available at a server by its IP address 3. Device access policies that disallows or allows a particular OS 4. White lists that allow access to a machine only if its MAC address matches to the known/configured value 5. Application denial policy that disallows access to an entire domain When you see status such as "Authorized (Deny)" as shown below, you need to check the policies under the Configure --> Access Control page. <img alt="User-added image" height="103" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053jl&feoid=00N50000002Cf3M&refid=0EM50000000LRUI" width="500"></img> For example, a device policy can be setup to deny access to Windows machines while allowing access to Apple machines. If you try different OSs on the SSID and see different authorization states for each it is quite possible that device policy is setup to reflect this behavior. Other place to look at include the Configure --> Roles. Find out the role the user belongs to and check the configuration of it. It is quite possible that his role either has the OS denied or time range setup that denies access outside a specific time.

This article explains the reason for Authorized (Deny) status on a connected client.

2019-08-05T03:28:41-0700 2019-08-05T06:00:14-0700 https://support.ruckuswireless.com/articles/000002036 2019-08-05T03:32:34-0700 monthly 0.8 admin,premium knowledge_article_481 knowledge_article_481 2013-06-12T20:54:37-0700 000002036 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector, ZoneFlex Indoor Is ZF7942 AP supported in ZD3000? ZF7942 access point has reached its end of life on December 31st, 2010. Please refer to <a href="https://support.ruckuswireless.com/documents/172-zf7942-ot-end-of-life-notification/download" target="_blank">this</a> document for detailed information regarding the 7942 End of Sale notification. However, all ZoneDirectors support this Access Point till 9.4.3 MR firmware version and is not compatible with any firmware versions beyond this(eg:- 9.5,9.6,etc.,). Hence, this model AP is not supported in ZD3000 as it supports firmware only from 9.9.

ZF7942 is not supported by ZD3000

2019-08-05T03:32:34-0700 2019-08-05T06:00:12-0700 https://support.ruckuswireless.com/articles/000002677 2019-08-05T03:36:08-0700 monthly 0.8 admin,premium knowledge_article_1192 knowledge_article_1192 2014-02-19T06:10:38-0800 000002677 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How can I allow LAN traffic using ZD ACL to a specific port 9100 for my HP wireless enabled printers Currently we do not have this filtering capability. We have confirmed In the lab and verified that the rules configured in the Access Control Lists (ACLs) will only be applied to packets originating from the wireless clients to any others. They do not apply to packets originated on the LAN (wired) side. So it is clear that, there is no way of using ACLs to control and limit traffic from LAN side to Wireless side clients. It will be a new feature request to enable ACL rules on the traffic going from LAN side to Wireless side this will be implemented in a future release. If you require this functionality please contact your Ruckus Wireless sales representative

The current ACL in the controller only filters packets from the wireless devices and not the wired devices

2019-08-05T03:36:08-0700 2019-08-05T06:00:10-0700 https://support.ruckuswireless.com/articles/000003561 2019-08-05T03:38:39-0700 monthly 0.8 admin,premium knowledge_article_1356 knowledge_article_1356 2014-10-27T15:49:22-0700 000003561 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway What name do I use to resolve the SCG or vSCG in DNS? To resolve a SCG or vSCG FQDN use DNS name "RuckusController" Example: RuckusController.domain.local In Smart Redundancy, resolve hostname to both real SCG/vSCG IP addresses

This articles shares the domain name which APs resolve to discover the SZ/vSZ controller

2019-08-05T03:38:39-0700 2019-08-05T06:00:09-0700 https://support.ruckuswireless.com/articles/000001912 2019-08-05T03:41:56-0700 monthly 0.8 admin,premium knowledge_article_282 knowledge_article_282 2013-04-03T17:40:41-0700 000001912 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Troubleshooting Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why won’t APs connect to a ZD when connecting to an HP V1810-48G switch? The HP V1810 may have a security setting turned on that is preventing the LWAPP connection. If all other steps have been performed, check the security setting to see if “Auto DoS” is enabled: If “Auto DoS” is enabled, turning it off will allow LWAPP packets to through and cause the AP to connect to the ZD.

Reasons for why APs won't connected to a ZD via HP V1810-48G switch

2019-08-05T03:41:56-0700 2019-08-05T06:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDZ2CAO?attachment_index=0 2019-08-05T06:00:08-0700 monthly admin,premium knowledge_article_282 knowledge_article_282_attachment_1 KB-AP-Discover-HP-Switch.pdf 65807.0 application/pdf https://support.ruckuswireless.com/articles/000006305 2019-08-05T03:49:01-0700 monthly 0.8 admin,premium knowledge_article_3908 knowledge_article_3908 2017-03-20T13:49:01-0700 000006305 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation;System network management;Known issues and workarounds Configuration, Firmware, Installation, System Network Management, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway SmartZone SZ 3.5 - Can I migrate ZoneDirector APs and Configuration? SmartZone 3.5+ will support AP migration from ZoneDirector (ie ZD1200 to SZ100). It requires ZD 9.13 or later, and migrates the APs, but not the configuration.

ZD configuration cannot be migrated to SZ/vSZ

2019-08-05T03:49:01-0700 2019-08-05T06:00:07-0700 https://support.ruckuswireless.com/articles/000001980 2019-08-04T16:54:45-0700 monthly 0.8 admin,premium knowledge_article_3765 knowledge_article_3765 2013-04-25T13:31:53-0700 000001980 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why can't I connect more than 100 clients to my network even when WLAN is set to allow 250 clients? 100 is the default entry of the Max allowed clients to associate. After configuring the value as 250 under the WLAN settings, sometimes the same value has to entered on the AP group settings on the ZD also if the more than 100 clients devices are going to be connected to a single AP. Find the details below. Login to the ZD GUI. Navigate to Configure ==> Access Points. Under the Access Points group click on the Edit hyperlink for the specific AP group to which the AP is part of. There you can see Max clients associated with this AP option. Here we have to change the value as 250. Now the AP will allow 250 clients to connect to it.

The value of maximum number of clients needs to be set on both WLAN and AP settings

2019-08-04T16:54:45-0700 2019-08-04T18:00:06-0700 https://support.ruckuswireless.com/articles/000008849 2019-08-02T15:43:57-0700 monthly 0.8 admin,premium knowledge_article_3589 knowledge_article_3589 2019-02-22T15:15:35-0800 000008849 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Can you explain SmartZone Fault Tolerance and Clustering with regard to DB replication? Ruckus SmartZone has an N+1 redundancy architecture (only withstands the loss of one node, no matter the cluster size). Cluster DB information is replicated between member Nodes with a factor of 2. Each database would have two copies within the cluster. In a 3 node scenario, SZ1 has DB1 & DB2, SZ2 has DB2 & DB3, SZ3 has DB3 & DB1. If SZ3 becomes unavailable, SZ2 can still serve DB3 on SZ3's behalf. But if SZ2 dies too, SZ1 will not be able to cope with the data lost. This is also one of the reasons against splitting 4 node clusters across two Data Centers. The loss of either Data Center would take out two nodes, and hence bring the whole Cluster down (total outage rather than reduced capacity for APs in the cluster). If deploying in a two Data Center model, a 2 node Cluster is recommended (until Geo-Redundancy ~SZ 3.6). Note: In a 3 or 4 node cluster, with one failed node, one option is to Manually Remove the failed node from the others, which will force a DB re-sync between remaining cluster members. If more than 1 node is down in a cluster, the entire SZ cluster would enter OOS (out of service) state and not be able to function. The SSH connections to all devices (AP, switch, vDP) would also be closed. ---------------- See Ruckus SZ Fault Tolerance and Clustering explained, on YouTube here: https://www.youtube.com/watch?v=K9LrlndHj8Q

SZ clusters replicate DB info across members and there are methods to prevent loss if a member node becomes unavailable.

2019-08-02T15:43:57-0700 2019-08-02T18:00:10-0700 https://support.ruckuswireless.com/articles/000009676 2019-08-02T16:18:49-0700 monthly 0.8 admin,premium knowledge_article_3906 knowledge_article_3906 2019-08-02T16:18:49-0700 000009676 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway What are the known Captive Portal URLs for CNA? Source: https://captivebehavior.wballiance.com/ Captive Network Portal Behavior Public Wi-Fi networks offering temporary internet access often begin new connections using a Captive Portal Mini-Browser (or “CPMB”). These CPMB utilities are built into operating systems in order to make it easier to connect to public Wi-Fi networks. The problem is that their behavior is nuanced, often undocumented and can be difficult to understand. The connection process for the CPMB usually involves the following steps: <ul><li>Network/Access Point Association</li><li>Checking connectivity state (detection of Captive Network)</li><li>Pop-up of a notification (in some cases)</li><li>Waiting for device activation (if device is in a blocked state)</li><li>Opening CPMB or waiting for the activation of the notification</li><li>Checking current connectivity state based on user’s action while CPMB is open</li><li>Closing CPMB after authentication process is completed (automatically or manually)</li></ul> <img alt="CPMB Connection Process Diagram" src="https://captivebehavior.wballiance.com/assets/images/cpmb-process-diagram.png"></img> <h3 id="general-behavior-for-most-devices">General Behavior (for most devices)</h3> <ul><li> There are no persistent cookies in CPMB: all the written cookies are destroyed after CPMB closes. </li><li> CPMB closes after authorization is completed (sometimes it requires additional actions from the user) </li><li> The CPMB disappears and the device disconnects from the network when focus is changed to another app, such as SMS or email. </li><li> Most external services (file system, applications and etc.) are not accessible from CPMB. There are various differences in device behavior in pre-authenticated vs post-authenticated states, along with many limitations including memory usage, local storage, Javascript support etc. </li></ul> <h2 id="list-of-captive-portal-check-urls">List of captive portal check URLs</h2> <h3 id="apple-ios">Apple iOS</h3> <ul><li>www.apple.com</li><li>www.appleiphonecell.com</li><li>captive.apple.com</li><li>www.airport.us</li><li>www.ibook.info</li><li>www.itools.info</li><li>www.thinkdifferent.us</li><li>apple.com</li></ul> <h3 id="apple-macos">Apple MacOS</h3> <ul><li>captive.apple.com</li></ul> <h3 id="google-android">Google Android</h3> <ul><li>clients3.google.com</li><li>clients4.google.com</li><li>android.clients.google.com</li><li>connectivitycheck.android.com</li><li>connectivitycheck.gstatic.com</li><li>www.gstatic.com</li><li>www.google.com</li><li>www.androidbak.net</li></ul> <h3 id="samsung-android">Samsung Android</h3> <ul><li>http://connectivitycheck.android.com/generate_204</li><li>http://connectivitycheck.gstatic.com/generate_204</li><li>d2uzsrnmmf6tds.cloudfront.net</li></ul> <h3 id="htc-android">HTC Android</h3> <ul><li>clients3.google.com</li></ul> <h3 id="windows">Windows</h3> <ul><li>msftncsi.com</li></ul>

The URLs pinged by various cellphone manufacturers vary, and these are some known URLs used.

2019-08-02T16:18:49-0700 2019-08-02T18:00:08-0700 https://support.ruckuswireless.com/articles/000009198 2019-08-02T09:49:33-0700 monthly 0.8 admin,premium knowledge_article_3905 knowledge_article_3905 2019-05-10T08:41:32-0700 000009198 Validated (External) Premium Sz300;Scg200;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, SZ300, SCG200, virtual SmartCell Gateway, SZ100 Why can a super user not move APs from the staging zone to any other zone? If the 'System' domain (top-level domain in the tree) is not added to the zones permitted for the Super Admin user group; this means that the Staging Zone is not included, and moving APs between zones is not permitted.

This article provides details on why a super admin user cannot move AP's to different zones.

2019-08-02T09:49:33-0700 2019-08-02T12:00:12-0700 https://support.ruckuswireless.com/articles/000009668 2019-08-02T10:38:42-0700 monthly 0.8 admin,premium knowledge_article_3900 knowledge_article_3900 2019-08-01T11:19:01-0700 000009668 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware Configuration, Firmware, SmartCell Gateway, virtual SmartCell Gateway How do I add a CA certificate to SmartZone for Web and WiSPr? During the mac-based authentication workflow within Cloudpath, the end user is passed credentials to POST to the SmartZone. If the SmartZone does not have a valid certificate, end users may be prompted to send a form to an unsecure website or users may not be able to POST to the SmartZone. It is recommended to have a valid Certificate on the SmartZone. If the certificate is not signed by a public certificate authority, the clients will receive errors during the POST. This quick-guide will walk you through how to: 1. Generate a CSR 2. Submit the CSR for signing by GoDaddy 3. Install the Signed Certificate into your SmartZone See attached tech note for further details.

This article will help admins to generate CSR, submit CSR, and install a signed certificate onto SmartZone controller.

2019-08-02T10:38:42-0700 2019-08-02T12:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zLvSAI?attachment_index=0 2019-08-02T12:00:10-0700 monthly admin,premium knowledge_article_3900 knowledge_article_3900_attachment_1 InstallWebWiSPrCertificateOnSZ.pdf 650062.0 application/pdf https://support.ruckuswireless.com/articles/000009673 2019-08-02T10:39:18-0700 monthly 0.8 admin,premium knowledge_article_3904 knowledge_article_3904 2019-08-02T10:36:56-0700 000009673 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How do we manage SSL Certificates on SmartZone Controllers? X.509 SSL certificates are used by SmartZone controllers to secure and encrypt key communications. This document describes how to request, install and manage SSL certificates for use by the Ruckus SmartZone controller platform. This document is broken into the following main categories: • SSL Certificate Overview • How the SmartZone Uses SSL Certificates • Installing an SSL Certificate for SmartZone This document focuses on the basics of how to generate and install an SSL certificate to encrypt and secure communications on the SmartZone platform

This document provides an overview of how to configure a SmartZone to use SSL certificates.

2019-08-02T10:39:18-0700 2019-08-02T12:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zMKSAY?attachment_index=0 2019-08-02T12:00:07-0700 monthly admin,premium knowledge_article_3904 knowledge_article_3904_attachment_1 RTN_HowtoConfigCertsSZ.pdf 4170319.0 application/pdf https://support.ruckuswireless.com/articles/000009669 2019-08-01T13:35:34-0700 monthly 0.8 admin,premium knowledge_article_3903 knowledge_article_3903 2019-08-01T13:35:34-0700 000009669 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway Is there any way to disable 802.11ax on Ruckus APs, I have Legacy clients? Adjust the AP characteristics of the Zone used by Legacy wifi devices. Examples of the Commands available are: For Ruckus SZ APs, this needs to be done on the CLI of the AP, as follows: set mode <wifi name> <radio mode> Valid modes :11ahe , 11ac ,11na ,11ng, 11ghe Where wifi name is wifi0 for 2.4GHz and wifi1 for 5GHz R730 in default condition: rkscli: get mode wifi0 wifi0 Mode: 11ghe << .11ax enabled – ghe means 11g and HE means High Efficiency AKA .11ax WiFi6 OK rkscli: get mode wifi1 wifi1 Mode: 11ahe << .11ax mode enabled – again a part means 5Ghz and HE means High Efficiency Changing the mode to .11ac 5GHz and 11n 2.4Ghz: rkscli: set mode wifi0 11ng OK rkscli: set mode wifi1 11ac OK Verifying modes: rkscli: get mode wifi0 wifi0 Mode: 11ng OK rkscli: get mode wifi1 wifi1 Mode: 11ac OK Here is an example of an SZ script that can be used to disable 802.11ax on R730 model APs: fw_version=5.1.1.0.619 model=r730 set mode wifi0 11ng set mode wifi1 11ac

We can apply CLI commands to limit AP capabilities to Legacy modes, in order to allow old devices to connect.

2019-08-01T13:35:34-0700 2019-08-01T18:00:08-0700 https://support.ruckuswireless.com/articles/000009667 2019-08-01T11:08:43-0700 monthly 0.8 admin,premium knowledge_article_3901 knowledge_article_3901 2019-08-01T11:08:43-0700 000009667 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway How do I configure Hierarchial AP DHCP - NAT, within an SZ zone? Since Release 5.0, a hierarchical DHCP/NAT architecture is available. When DHCP/NAT is enabled in an AP Zone it is possible to select the AP that will be providing the DHCP and NAT function for the whole network, including wired devices (APs in the zone as well as Switches, printers, PCs …) and wireless devices. See attached guide for further details.

Since SZ 5.0, within an AP zone, it is possible to select primary/secondary APs to serve DHCP and NAT.

2019-08-01T11:08:43-0700 2019-08-01T12:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zLqSAI?attachment_index=0 2019-08-01T12:00:08-0700 monthly admin,premium knowledge_article_3901 knowledge_article_3901_attachment_1 Using AP as DHCP and NAT Gateway.pdf 958994.0 application/pdf https://support.ruckuswireless.com/articles/000009658 2019-07-31T21:25:50-0700 monthly 0.8 admin,premium knowledge_article_3899 knowledge_article_3899 2019-07-31T21:25:50-0700 000009658 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;System network management;Website access Configuration, System Network Management, Website Access, Cloudpath How to resolve "The URL used in the browser differs from the snapshot's URL" when the CP clients are redirecting? We need to change the Cloudpath's Host name and the HTTP server name as per the URL resulting on the browser. Below is the CP which has the hostname as "Cloudpath-153" and the http server name as "Cloudpath-153.wwie.video54.local" When redirection happens, the browser is giving the below error. <img alt="User-added image" height="263" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053gX&feoid=00N50000002Cf3M&refid=0EM2J000000uq6i" width="500"></img> Change the HOST name and then change the HTTP Server name as below. config hostname cloudpathes-153 config https-servername "cloudpathes-153.wwie.video54.local" Step1:Current configuration: <img alt="User-added image" height="290" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053gX&feoid=00N50000002Cf3M&refid=0EM2J000000uq7C" width="500"></img> Step2: Change the Hostname. <img alt="User-added image" height="378" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053gX&feoid=00N50000002Cf3M&refid=0EM2J000000uq7H" width="500"></img> Step3 : Change the http server name. <img alt="User-added image" height="312" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053gX&feoid=00N50000002Cf3M&refid=0EM2J000000uq7M" width="500"></img>

This article will help us to resolve the error "The URL used in the browser differs from the snapshot's URL" which is observed in the clients when they are redirected to the portal hosted in Cloudpath.

2019-07-31T21:25:50-0700 2019-08-01T00:00:07-0700 https://support.ruckuswireless.com/articles/000009392 2019-07-10T15:58:18-0700 monthly 0.8 admin,premium knowledge_article_3759 knowledge_article_3759 2019-06-13T06:52:13-0700 000009392 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Installation Configuration, Installation, Cloudpath How are mobile configuration profiles installed on iOS 12.2 version? The IOS version 8.0 and later will support automatic profile installation, however, the release of iOS 12.2, Apple have changed the behavior of how mobile configuration profiles are installed, This is a security feature to make it harder for users to install rogue profiles by mistake. If the user does not install the configuration profile within 8 minutes, it is deleted. From Cloudpath we cannot do any change, we are bound by how Apple supports their installation, since we do not run any agents on iOS. Users have to follow this method to install the profile https://support.apple.com/en-in/HT209435 <img alt="User-added image" height="666" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Q0&feoid=00N50000002Cf3M&refid=0EM2J000000qS6L" width="500"></img> <img alt="User-added image" height="666" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Q0&feoid=00N50000002Cf3M&refid=0EM2J000000qS6Q" width="500"></img>

In the release of IOS 12.2, Apple has changed the behavior of how mobile configuration profiles are installed

2019-07-10T15:58:18-0700 2019-07-31T07:37:33-0700 https://support.ruckuswireless.com/articles/000004310 2019-07-30T08:23:57-0700 monthly 0.8 admin,premium knowledge_article_3897 knowledge_article_3897 2015-04-03T11:00:22-0700 000004310 Validated (External) Premium Smartcell insight;Virtual smartcell gateway;SmartCell Insight (SCI) Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, SmartCell Insight, virtual SmartCell Gateway Can we restore SCG/vSCG if upgrade fails? If the upgrade fails for any reason follow these steps to restore the SCG-200/vSCG to the latest available backup. 1) Log on to the CLI of each node 2) Go to enable mode, execute 'restore local', and choose the backup file that you want to restore. Do not proceed with the restore yet. 3) Confirm that both nodes have the same backup version and that they are both ready to be restored. 4) Answer 'Yes' on both the nodes to start the restore process. The restore process starts and the following messages are printed on the CLI: Starting to restore current system, and then reload system if successfully trigger restore process Restarting system.... You have completed restoring the SCG-200/vSCG to the backup version that you selected.

If the upgrade fails on SCG/vSCG we can login to the cli mode and then restore it with the latest back up file if avalaible

2019-07-30T08:23:57-0700 2019-07-30T12:00:08-0700 https://support.ruckuswireless.com/articles/000009616 2019-07-30T01:57:23-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3895 knowledge_article_3895 2019-07-30T01:57:23-0700 000009616 Validated (External) Public Ruckus support services Support license activation Support License Activation, Ruckus Support Services Why am I receiving the message "Please contact Support. This sales order has both Partner and End User products." while activating Support/License ? The reason for the unsuccessful activation is that the Sales Order has both End User and Partner Support which needs to be split and processed. Reach out to your Partner/Distributor to report this issue on the Sales Order. They in turn need to work with our Accounts Receivables (<a href="mailto:#RuckusAccounts.Receivable@commscope.com" style="color: blue; text-decoration: underline;" target="_blank">#RuckusAccounts.Receivable@commscope.com</a>) team to fix the issue. That is to cancel the order and assist with placing 2 different orders, one for End User Support and the other for Partner Support. Note: Only the Partner and the Distributor are authorized to reach out to Ruckus Accounts Receivable team.

This article has information on the error message received while activating an order having both End User and Partner Support.

2019-07-30T01:57:23-0700 2019-07-30T06:00:07-0700 https://support.ruckuswireless.com/articles/000009653 2019-07-29T13:24:50-0700 monthly 0.8 admin,premium knowledge_article_3893 knowledge_article_3893 2019-07-29T13:24:50-0700 000009653 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Support license activation Configuration, Support License Activation, SmartCell Gateway What is the difference between the normal cluster and the Geo-redundant cluster in terms of AP licensing? Let's take an example of two SZ controllers, one in Delhi and other in Mumbai with 500 APs managed by each controller. A total of 1000 APs. Licenses in Cluster Setup with two nodes: If we are configuring both the controllers to be part of the same cluster, you need to have just 1000 AP license as a whole. 500 licenses will be mapped to each controller and when they are part of the same cluster, the 500+500=1000 licenses will be added to the total pool of licenses for this cluster. So, if one of the controllers goes down, the AP licenses in the common pool will be used by the other controller and all the APs will be up on the active controller and continue to function. Licenses in Geo-Redundant Cluster: If we are configuring Active-Active Geo-redundancy, each of the clusters needs to have 1000 APs each with a total of 2000 AP licenses. The reason being that the controllers are part of two different clusters and the licenses are not pooled across clusters. So, each controller needs to have 1000 AP licenses separately to accommodate all the APs in case of failure of the other controller. Here is a snippet from our vSZ-H/SZ300 administrator guide for 5.1.1 version: <img size="58065" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053fy&feoid=00N50000002Cf3M&refid=0EM2J000000upDY" style="width: 731px; height: 302px;"></img>

This article provides information about the AP licenses in general cluster and Geo-redundant cluster setups on vSZ/SZ.

2019-07-29T13:24:50-0700 2019-07-29T18:00:06-0700 https://support.ruckuswireless.com/articles/000007101 2019-07-26T09:14:49-0700 monthly 0.8 admin,premium knowledge_article_3891 knowledge_article_3891 2017-12-12T13:15:51-0800 000007101 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products How to reset the AP-7131 to factory default using the CLI Connect the supplied console cable to the AP-7131 via the console port. 1. Reset AP. 2. Press ESC during bootup to get to the boot prompt. 3. boot>reset config 4. boot>reboot Note: The default username/password is "admin/admin123." Change the password when prompted.

How to reset the AP-7131 to factory default using the CLI

2019-07-26T09:14:49-0700 2019-07-26T12:00:09-0700 https://support.ruckuswireless.com/articles/000001344 2019-07-26T09:43:17-0700 monthly 0.8 admin,premium knowledge_article_3890 knowledge_article_3890 2013-01-09T23:38:27-0800 000001344 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Installation;System network management Firmware, Installation, System Network Management, ZoneDirector Migrating configuration form one ZoneDirector to another, Configuration from ZD1000 to ZD1100 Make sure that both the ZoneDirectors are on the same version. If the new/old ZoneDirector has managed APs make sure that they are on the same version too. Step 1: Log into the WEB UI of the old ZoneDirector to save the backup. Step 2: Check the current version running on old ZoneDirector by selecting Dashboard tab -> System Overview, once we get to know current version click on the Administer tab and then choose Back Up option. Refer the below screen capture. <img alt="Zone Director Back Up page screenshot" height="240" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka250000000PFsG&feoid=00N50000002Cf3M&refid=0EM50000000LJil" width="584"></img> Step 3: Now click on Back Up option and save the file to your local PC. Step 4: Log into the WEB UI of the ZoneDirector you want to restore the back up and check the current version running. If we observe same version proceed to the next step, if not matching upgrade/downgrade the new ZoneDirector to match the old ZoneDirector version. Step 5: Click on the Administer tab and then under Restore Configuration, click 'Choose File' button and browse to the saved backup file. Then click upload. Step 6: Once after hitting upload the new ZoneDirector starts to upload the configuration and after successful restore configuration ZoneDirector restarts itself to display login screen. Note: If the New/Replaced/Higher version is on the ZoneDirector that you want to restore the configuration then you could try this too.

Process to transfer the configuration form old ZoneDirector to new/higher model/replaced ZoneDirector

2019-07-26T09:43:17-0700 2019-07-26T12:00:07-0700 https://support.ruckuswireless.com/articles/000009002 2019-07-26T02:30:58-0700 monthly 0.8 admin,premium knowledge_article_3888 knowledge_article_3888 2019-04-02T05:00:02-0700 000009002 Validated (External) Premium Vsz dataplane Firmware;Troubleshooting Firmware, Troubleshooting, vSZ Dataplane How to upgrade vSZ-D using FTP via CLI? vSZ-D CLI allows upgrade via CLI using FTP and SFTP. This article provides steps on how to upgrade vDP using a Local FTP server. Prerequisites: - A local FTP server reachable from the vSZ-D - Downloaded vSZ-D firmware from the Ruckus Support Portal and copied over to the FTP Server. - Backup of existing vDP configuration. vDP-194# backup backup <ftp/tftp/sftp> <ip-addr> <The path/filename on the server > [username is needed if you used ftp/sftp] [password is needed if you used ftp/sftp] Below is the CLI syntax for the upgrade:; upgrade <ftp/sftp> <ip-addr> <The filename with full path on the server > [username is needed if you used FTP] [password is needed if you used FTP] vDP-194# upgrade ftp 10.172.16.10 How-To-Hub/vSZ-D-5.1.1.0.598.ximg admin admin123 Once upgrade is done, vDP will auto-reboot and show up the new image. show commands: <img alt="User-added image" height="337" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053eb&feoid=00N50000002Cf3M&refid=0EM2J000000uo12" width="1106"></img>

This article provides information on how to upgrade the vSZ-D through CLI

2019-07-26T02:30:58-0700 2019-07-26T06:00:08-0700 https://support.ruckuswireless.com/articles/000002850 2014-03-28T02:19:40-0700 monthly 0.8 admin,premium knowledge_article_801 knowledge_article_801 2014-03-27T04:17:15-0700 000002850 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Why do we see the log message " AP[Ruckus 1] detects excessive probe requests on radio [11b/g] " in events and activities on ZD ? AP[Ruckus 1] detects excessive probe requests on radio [11b/g] <div> To find the client, use a wireless sniffer and locate the MAC of that offending client. </div> <div> Note: Blocking of clients only happens if authentication of that client fails multiple times. We don’t block clients when we detect excessive probe requests.</div>

Observing the following log message on ZD - " AP[Ruckus 1] detects excessive probe requests on radio [11b/g] "

2014-03-28T02:19:40-0700 2019-07-25T14:00:42-0700 https://support.ruckuswireless.com/articles/000009632 2019-07-25T06:58:02-0700 monthly 0.8 admin,premium knowledge_article_3887 knowledge_article_3887 2019-07-25T06:58:02-0700 000009632 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway How to configure AP Management VLAN from the SZ/vSZ GUI? AP management VLAN allows users to configure AP management VLAN to either “Keep APs’ settings” or a specific VLAN ID. LAB Scenario: There are several management VLAN network topologies that an admin can set up to achieve the goal of separating WLAN Traffic with SZ/AP management traffic. By management traffic, we mean that any traffic that is handled by SZ AP itself, for example, HTTPS/SNMP/SSH etc to and from SZ/AP. In this LAB setup our SZ and other Servers are on Management VLAN 200, however, AP's located in a different location with Management VLAN 1000. With the Management VLAN 1000 Tagged on the AP uplink port and the switches, when we change management VLAN from the GUI, AP could join the SZ. <div style="margin-left: 40px;"><img alt="User-added image" height="371" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053cQ&feoid=00N50000002Cf3M&refid=0EM2J000000unDM" width="701"></img></div> AP management VLAN can be configured in SZ GUI under the following options : Zone Level: Access Points> Ap Zone> Advanced Options> AP Management VLAN <div style="margin-left: 40px;"><img alt="User-added image" height="490" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053cQ&feoid=00N50000002Cf3M&refid=0EM2J000000unAw" width="797"></img></div> AP Group : Access Points> Ap Zone> AP Group> Advance Options> AP Management VLAN > Override <div style="margin-left: 40px;"><img alt="User-added image" height="377" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053cQ&feoid=00N50000002Cf3M&refid=0EM2J000000unB1" width="797"></img></div> Edit AP settings: Access Points> Select the AP> Advance Options> AP Management VLAN > Override <div style="margin-left: 40px;"><img alt="User-added image" height="354" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053cQ&feoid=00N50000002Cf3M&refid=0EM2J000000unB6" width="806"></img></div> After configuring the management interface VLAN on AP’s, the APs could disconnect from SZ. It is Admin's responsibility to adjust their own network environment, Tag the VLAN on AP uplink to reconnect the APs back. The SZ Web GUI shows a confirmation message box to notify users about the possible disconnections when they attempt to change AP management VLAN or moving APs between zone and AP Groups. <div style="margin-left: 40px;"><img alt="User-added image" height="383" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053cQ&feoid=00N50000002Cf3M&refid=0EM2J000000unCE" width="500"></img></div>

This Article explains how to configure AP Management VLAN from the SZ/vSZ GUI

2019-07-25T06:58:02-0700 2019-07-25T12:00:10-0700 https://support.ruckuswireless.com/articles/000008985 2019-07-25T10:10:29-0700 monthly 0.8 admin,premium knowledge_article_3885 knowledge_article_3885 2019-03-29T08:29:55-0700 000008985 Validated (External) Premium Vsz dataplane Configuration;Firmware Configuration, Firmware, vSZ Dataplane How to upgrade the vDP from GUI? Upgrading vDP from earlier versions to R5.1.x <img alt="User-added image" height="252" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053eW&feoid=00N50000002Cf3M&refid=0EM2J000000q7lq" width="771"></img> To Upgrade the Data Plane: 1. Select Administration > Upgrade. 2. Select the DP Patch tab. The DP Patch page appears. 3. In Patch File Upload, click Browse to select the patch file (.ximg file) downloaded from the Ruckus support site. 4. Click Upload. 5. In Data Planes, choose a patch file version from the Select upgrade version. 6. Click Apply to apply the patch file version to the virtual data plane. <img alt="User-added image" height="343" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053eW&feoid=00N50000002Cf3M&refid=0EM2J000000q7lv" width="787"></img> Note: - Data migration is not supported if system upgrades from • R3.6/3.6.1/3.6.2 to R5.0 • R3.6/3.6.1/3.6.2 to R5.1 - System upgrade from R5.0 to R5.1 supports data migration.

This article gives information on how to upgrade the vDP through GUI

2019-07-25T10:10:29-0700 2019-07-25T12:00:07-0700 https://support.ruckuswireless.com/articles/000009630 2019-07-25T00:23:32-0700 monthly 0.8 admin,premium knowledge_article_3883 knowledge_article_3883 2019-07-25T00:23:32-0700 000009630 Validated (External) Premium Sz300;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Performance;System network management Performance, System Network Management, SZ300, virtual SmartCell Gateway, SZ100 Is it possible to Create and Schedule AP CLI Scripts on Smartzone? AP CLI Scripts Scheduling is introduced in version 5.1.1, on previous versions there is no way to schedule the execution of AP CLI Scripts, we must do the execution uploading the txt file and selecting the zone for execute the script. Here are the steps for configure the scheduled execution of AP CLI script on 5.1.1: Select Scripts on Diagnostics tab: <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053bN&feoid=00N50000002Cf3M&refid=0EM2J000000umta"></img> Go to AP CLI Scripts and Check Script Guideline so you can create the script on a txt file: <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053bN&feoid=00N50000002Cf3M&refid=0EM2J000000umtb"></img> <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053bN&feoid=00N50000002Cf3M&refid=0EM2J000000umtc"></img> Be aware of dont use the commands on the black list Click on Upload Script, name script and upload file: <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053bN&feoid=00N50000002Cf3M&refid=0EM2J000000umtd"></img> Select Script and Click on Schedule: <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053bN&feoid=00N50000002Cf3M&refid=0EM2J000000umte"></img> Enable Schedule and select, interval, time of execution and the zones which you will need to execute the script, then click OK: <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053bN&feoid=00N50000002Cf3M&refid=0EM2J000000umtf"></img> The script will execute on the schedule you created.

How to create and configure schedule AP CLI script

2019-07-25T00:23:32-0700 2019-07-25T06:00:06-0700 https://support.ruckuswireless.com/articles/000009638 2019-07-24T16:24:23-0700 monthly 0.8 admin,premium knowledge_article_3880 knowledge_article_3880 2019-07-24T16:24:05-0700 000009638 Validated (External) Premium Q710;Q910;Ruckus Q710;Ruckus Q910 Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, Q710, Q910 Are you having registration delays or connection stability issues with LTE Access Points? We will ship new SIM cards programmed with correct information & request the defective SIMs be shipped back. We will add these new SIM cards to customers’ account & they will be available for activation when the customers receive the replacement SIM cards. Customers will need to send us old SIM cards using the return shipping label provided along with the new SIM package. We will keep the old SIM cards active for 30 days to allow the SIM cards to be swapped & the defective SIM data will be purged from customers’ account at that time. We are shipping new SIMs in phases in the next 2-4 weeks. We will send out an email notification once the SIMs are shipped. If customers are experiencing any issues before the SIMs are shipped, customers should contact Ruckus support for expedited action.

This bulletin covers a problem and corrective actions to address incorrectly programmed SIMs for Ruckus private LTE network service.

2019-07-24T16:24:23-0700 2019-07-24T18:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zJVSAY?attachment_index=0 2019-07-24T18:00:06-0700 monthly admin,premium knowledge_article_3880 knowledge_article_3880_attachment_1 TSB2019-003 PRVT LTE SIM Rplmnt R02.pdf 85762.0 application/pdf https://support.ruckuswireless.com/articles/000007794 2019-07-24T10:30:13-0700 monthly 0.8 admin,premium knowledge_article_3878 knowledge_article_3878 2018-05-07T09:25:01-0700 000007794 Validated (External) Premium Ruckus icx switches Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches Why ICX7150 switches encounter communication issues with Microsoft NLB? For this case the following could be used: 1- Move the NLB clusters (NLB01, NLB02) from ICX7150-03(SW3_layer3 ) into ICX7150-02(Layer2) as shown in the diagram below, User in VLAN3---------ICX7150-01(Layer2)------------ICX7150-02_Layer2 --------------ICX7150-03(SW3_layer3) | | NLB01 NLB02 2- Create static ARP entry on ICX7150-03(SW3_layer3 ) to point to the port/lag to ICX7150-02(Layer2) as follow, arp 10.14.1.24 03bf.0a0e.0118 eth 1/1/1 3- On the ICX7150-02(Layer2) create a multi-port static MAC for the VIP MAC address as follow, static-mac-address 03bf.0a0e.0118 eth 1/1/10 to 1/1/11 priority 7

Customer replaced HP switches with ICX7150 and started experiencing communication issues with Microsoft NLB

2019-07-24T10:30:13-0700 2019-07-24T12:00:21-0700 http://support.ruckuswireless.com/article_attachments/kA250000000fxZ2CAI?attachment_index=0 2019-07-24T12:00:21-0700 monthly admin,premium knowledge_article_3878 knowledge_article_3878_attachment_1 ICX7150 and Microsoft NLB.pdf 301582.0 application/pdf https://support.ruckuswireless.com/articles/000007759 2019-07-24T11:21:47-0700 monthly 0.8 admin,premium knowledge_article_3876 knowledge_article_3876 2018-05-02T15:46:02-0700 000007759 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches Why users can always get login access to the ICX device via telnet/ssh, using their mac-auth/802.1x/web-auth credentials? “no-login” option will be available in a future release to fix this issue. This option will prevent users from logging into the ICX device using mac-auth/802.1x/web-auth username and password. Command syntax: radius-server host <ip-address> auth-port <port-num> acct-port <port-num> { accounting-only| authentication-only | default } key <key string> [ dot1x | mac-auth | web-auth| no-login ]

By current design, all configured RADIUS-servers are used for SSH/Telnet/Console authentication. Therefore, users that have access to the network can login into the switch using their credential, which is a security concern for our customers.

2019-07-24T11:21:47-0700 2019-07-24T12:00:13-0700 http://support.ruckuswireless.com/article_attachments/kA250000000fxVFCAY?attachment_index=0 2019-07-24T12:00:13-0700 monthly admin,premium knowledge_article_3876 knowledge_article_3876_attachment_1 No-login option.pdf 272536.0 application/pdf https://support.ruckuswireless.com/articles/000007743 2019-07-24T11:24:17-0700 monthly 0.8 admin,premium knowledge_article_3875 knowledge_article_3875 2018-05-02T15:36:58-0700 000007743 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration;Security;Troubleshooting;Known issues and workarounds Configuration, Security, Troubleshooting, Known Issues and Workarounds, ICX 7250, ICX 7450, ICX 7750 Why the ACL gets removed from the running config when downgrading the code on an ICX7750 from 8061x to 8040x version? For example if you are running code FI 08.0.50 or FI 08.0.61b and you have the following ACL config: ICX(config)# show ip acc Extended IP access list 100: 4 entries 10: permit ip host 33.0.0.100 any 20: permit ip host 33.0.0.101 any 30: permit ip host 33.0.0.102 any 40: deny ip host 33.0.0.103 any Before downgrading to FI 08.0.40b version you need to run suppress-acl-seq command as follow: ICX(config)# acl-policy ICX(config-acl-policy)# suppress-acl-seq ICX(config-acl-policy)# wr mem Then you can downgrade the code to FI 08.0.40b securely, and your ACL will show up as follow: ICX(config)# show ip acc Extended IP access list 100: 4 entries permit ip host 33.0.0.100 any permit ip host 33.0.0.101 any permit ip host 33.0.0.102 any deny ip host 33.0.0.103 any

Downgrading code from FI 08.0.50 will result in ACL loss from config

2019-07-24T11:24:17-0700 2019-07-24T12:00:12-0700 https://support.ruckuswireless.com/articles/000006944 2019-07-24T11:31:10-0700 monthly 0.8 admin,premium knowledge_article_3874 knowledge_article_3874 2017-12-12T15:03:23-0800 000006944 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches Why is the DHCP address pool depletion with Avaya phones connected without LLDP being enabled? Option 1 A DHCP server gives out an IP address with a finite or infinite lease. The Avaya recommended lease duration for IP phones is 2 to 4 weeks. During a maintenance window lowering the lease duration on the DHCP server the FES2402/4802 stacks can be restarted without causing DHCP address pool depletion on the data VLAN. Once reloads have been completed the lease duration can be restored to previous settings. Option 2 Another way to make the phones boot correctly would be to modify the DHCP options, (sample configuration included). With different model types and firmware versions for the Avaya phones which may or may not have LLDP support. In order to resolve the problem, we included the 176 and 242 option in the data and voice VLAN DHCP options. The phones booted on data VLAN 49. They recognize the voice VLAN is 51 from the DHCP settings and rebooted on the voice VLAN and start operating. We do not use any VLAN settings, Mcipadd settings in our 46xxsettings.txt file, and also no LLDP involvement at all. --- FES4802 switch --- =============================================================================== SW: Version 04.1.01bTc3 Copyright (c) 1996-2006 Foundry Networks, Inc. Compiled on Dec 11 2009 at 17:43:32 labeled as FER04101b (3891371 bytes) from Primary FER04101b.bin Boot Monitor: Version 04.1.01Tc4 HW: Stackable FES4802-PREM-ILP =============================================================================== Couple interface configurations that carry data of phone. interface ethernet 25 spanning-tree 802-1w admin-edge-port dual-mode 49 <- data vlan inline power voice-vlan 51 <-voice vlan ! interface ethernet 26 spanning-tree 802-1w admin-edge-port dual-mode 49 inline power voice-vlan 51 interface ve 51 ip address <octet>.<octet>.51.1 255.255.255.0 <- <octet>.<octet> to scrub for security, instead of the full ip address of the ve interface. 12 <octet>.<octet>.51.116 0004.0d29.aa83 Dynamic 0 40 Valid <-Avaya phone type 4620 ver fw 2.3 13 <octet>.<octet>.51.130 0004.f2e3.b831 Dynamic 2 37 Valid <-Avaya phones type 4690 ver fw 2.6 17 <octet>.<octet>.51.134 0004.0d28.3d25 Dynamic 0 25 Valid <-Avaya phones type 4621 ver fw 2.902 ---DHCP Server Configuration voice and data vlan-------------------------------------------------------------------------------- Options for Scope <octet>.<octet>.51.0: < - Voice Vlan DHCP scope and its options DHCP Standard Options : General Option Values: OptionId : 51 Option Value: Number of Option Elements = 1 Option Element Type = DWORD Option Element Value = 691200 OptionId : 242 Option Value: Number of Option Elements = 1 Option Element Type = STRING Option Element Value = MCIPADD=<octet>.<octet>.52.13, <octet>.<octet>.1.11, <octet>.<octet>.51.5,MCPORT=1719, HTTPSRVR=<octet>.<octet>.21.77,L2QAUD=5,L2QSIG=5,L2Q=1,L2QVLAN=51 OptionId : 176 Option Value: Number of Option Elements = 1 Option Element Type = STRING Option Element Value = MCIPADD=<octet>.<octet>.52.13, <octet>.<octet>.1.11, <octet>.<octet>.51.5,MCPORT=1719, TFTPSRVR=<octet>.<octet>.21.77,TFTPDIR=/,L2QAUD=5,L2QSIG=5,L2Q=1,L2QVLAN=51 OptionId : 3 Option Value: Number of Option Elements = 1 Option Element Type = IPADDRESS Option Element Value = <octet>.<octet>.51.1 Options for Scope <octet>.<octet>.49.0: < - Data Vlan DHCP scope and its options DHCP Standard Options : General Option Values: OptionId : 51 Option Value: Number of Option Elements = 1 Option Element Type = DWORD Option Element Value = 691200 OptionId : 242 Option Value: Number of Option Elements = 1 Option Element Type = STRING Option Element Value = MCIPADD=<octet>.<octet>..52.13, <octet>.<octet>.1.11, <octet>.<octet>.51.5,MCPORT=1719, HTTPSRVR=<octet>.<octet>.21.77,L2QAUD=5,L2QSIG=5,L2Q=1,L2QVLAN=51 OptionId : 176 Option Value: Number of Option Elements = 1 Option Element Type = STRING Option Element Value = MCIPADD=<octet>.<octet>.52.13, <octet>.<octet>.1.11, <octet>.<octet>.51.5,MCPORT=1719, TFTPSRVR=<octet>.<octet>.21.77,TFTPDIR=/,L2QAUD=5,L2QSIG=5,L2Q=1,L2QVLAN=51 OptionId : 3 Option Value: Number of Option Elements = 1 Option Element Type = IPADDRESS Option Element Value = <octet>.<octet>.49.1 Command completed successfully.

DHCP address pool depletion with Avaya phones connected without LLDP being enabled

2019-07-24T11:31:10-0700 2019-07-24T12:00:10-0700 https://support.ruckuswireless.com/articles/000006384 2019-07-24T11:38:53-0700 monthly 0.8 admin,premium knowledge_article_3873 knowledge_article_3873 2018-08-21T11:12:46-0700 000006384 Validated (External) Premium Virtual smartcell gateway Configuration;Troubleshooting Configuration, Troubleshooting, virtual SmartCell Gateway Can I create a WLAN with 802.1X LDAP authentication in SZ/vSZ/SCG? Since SZ 3.2, Ruckus has authentication against Active Directory (AD) within 802.1X WLANs but It is done through NPS. So customers need to install AD-NPS, and proxy authentication will be done like in RADIUS. The controller will be the RADIUS client, and It will authenticate against AD-NPS WITH RADIUS protocol. WebAuth, and WISPr are able to authenticate against AD in 3.2. directly (since SZ 3.2).

Ruckus does not allow direct LDAP authentication in a 802.1X WLAN

2019-07-24T11:38:53-0700 2019-07-24T12:00:09-0700 https://support.ruckuswireless.com/articles/000007407 2019-07-24T11:43:04-0700 monthly 0.8 admin,premium knowledge_article_3872 knowledge_article_3872 2017-12-12T16:13:31-0800 000007407 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration;Security Configuration, Security, ICX 7250, ICX 7450, ICX 7750 How to Prevent a Smurf Attack? ! Configuration to avoid being an intermediary in a Smurf attack. DO-DIST-301(config)# no ip directed-broadcast ! Configuration to avoid being a victim in a Smurf attack. DO-DIST-301(config)# ip icmp attack-rate burst-normal 2500 burst-max 3450 lockup 50 ! In this configuration example, if the number of ICMP packets received per second exceeds 2500, the excess packets are dropped. If the number of ICMP packets received per second exceeds 3450, the device drops all ICMP packets for the next 50 seconds.

DoS attack in which an attacker causes a victim to be flooded with Internet Control Message Protocol (ICMP)

2019-07-24T11:43:04-0700 2019-07-24T12:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4VCAS?attachment_index=0 2019-07-24T12:00:08-0700 monthly admin,premium knowledge_article_3872 knowledge_article_3872_attachment_1 ka25B000000CcMBQA0_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000008305 2019-07-24T11:51:46-0700 monthly 0.8 admin,premium knowledge_article_3871 knowledge_article_3871 2018-09-21T15:32:51-0700 000008305 Validated (External) Premium Ruckus icx switches Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, Ruckus ICX Switches How do I limit Telnet or Console sessions on ICX? Session timeouts are useful when performing admin duties, to insure no connections are left open/unattended for too long. Ruckus ICX switches have CLI commands to configure a session-timeout on Telnet and serial Console connections. <h1 style="margin-left: 0in;">console timeout</h1> Configures the idle time for a serial console session. <h2 style="margin-left: 0in;">Syntax:</h2> console timeout time no console timeout time <h2 style="margin-left: 0in;">Command Default:</h2> By default, an ICX device does not time out serial console sessions. <h2 style="margin-left: 0in;">Parameters</h2> <a name="GUID-68DEDAAA-4EBD-428A-AAE4-4BD724D56F2" style=""></a>time The time a serial session can remain idle before it is timed out, in minutes. The valid range is from 0 through 240. The default value is 0 (no timeout). ------------- telnet login-timeout Configures the login timeout for a Telnet session. Syntax: telnet login-timeout time no telnet login-timeout time Command Default By default, the Telnet login-timeout is 1 minute. Parameters: time Time in minutes, valid values are from 1 to 10. The default is 1. The 'no' form of the command sets the login timeout value back to default. Examples: The following example shows how to set the login timeout value of a Telnet session to 10 minutes. device (config)# telnet loging-timeout 10

We have CLI commands to configure Telnet or Console session timeout periods.

2019-07-24T11:51:46-0700 2019-07-24T12:00:06-0700 https://support.ruckuswireless.com/articles/000009300 2019-07-23T12:58:47-0700 monthly 0.8 admin,premium knowledge_article_3869 knowledge_article_3869 2019-05-31T06:49:35-0700 000009300 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway Why when I disable the other ports on an H510 SZ controlled AP at the Zone or AP Group model specific configuration does this change not show up on the AP? Many configuration settings can be done at 3 levels - Zone, AP Group and individual AP. This is a configuration hierarchy where configurations from Zone (upper level) or AP Group level configuration.can be overridden by individual AP level configuration. Overriding the configuration at the individual AP level will stop using the AP Group level or Zone Level. Likewise you can override the Zone configuration at the AP group level. There is no global way to disable AP or Group level overrides, so if each AP has overridden the Group or Zone level then you must configure each AP to disable this override. From the AP Configuration level: <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053bS&feoid=00N50000002Cf3M&refid=0EM2J000000qMae"></img> Uncheck the override button in Model Specific Options: <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053bS&feoid=00N50000002Cf3M&refid=0EM2J000000qMaj"></img> Save the settings by clicking on "OK" <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053bS&feoid=00N50000002Cf3M&refid=0EM2J000000qMbS"></img> Verify the settings in the GUI now showing higher level, in this case Zone level, configuration: <img alt="User-added image" height="483" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053bS&feoid=00N50000002Cf3M&refid=0EM2J000000qMb8" width="500"></img> This can also be done using the SZ CLI, which may permit automating changes using a CLI scripting tool. NOTE: This setting cannot be changed using the Diagnostic::AP script tool found in the SZ GUI as AP CLI settings are overwritten by SZ WEB-UI or SZ SSH CLI config settings. For the individual AP you can shortcut to the AP from en;config by using the AP MAC Raleigh-Cluster4-vSZ4(config)# ap 34:FA:9F:30:61:90 Raleigh-Cluster4-vSZ4(config-ap)# no model Do you want to continue to delete (or input 'no' to cancel)? [yes/no] yes Save the configuration by exiting the config level: Raleigh-Cluster4-vSZ4(config-ap)# exit Do you want to save this context configuration (or input 'no' to cancel)? [yes/no] yes Verify configuration using show running-config: Raleigh-Cluster4-vSZ4(config)# show running-config ap 34:FA:9F:30:61:90 ... Model Specification ---------------------------------------------------------------- Model Specific Control : Disabled Verify on GUI as well: <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053bS&feoid=00N50000002Cf3M&refid=0EM2J000000qMaZ"></img> You can also check the actual port status on the AP to make sure the changes are actually getting to the AP: Raleigh-Cluster4-vSZ4# remote ap-cli 34:FA:9F:30:61:90 "get eth" Port Interface 802.1X Logical Link Physical Link Label ----------------------------------------------------------------- 4 eth0 None Up Up 1000Mbps full POE IN, LAN5/UPLINK 0 eth1 None Down Down LAN1 1 eth2 None Down Down LAN2 2 eth3 None Down Down LAN3 3 eth4 None Down Down LAN4 NOTE: Read Port#N as N+1, if you are referring this CLI output with AP's "Configure :: Ethernet Ports" UI Page. OK SZ CLI guide: <a href="https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.ruckuswireless.com%2Fdocuments%2F2434-smartzone-3-6-2-mr2-command-reference-guide-sz300-scg200-vsz-h&data=01%7C01%7CAlbert.Pierson%40arris.com%7C76749eefcb8642114ff708d6e06e892b%7Cf27929ade5544d55837ac561519c3091%7C1&sdata=6EGemUIJCsX8TWplNvnNsYoz65YMxuteFvEnqykXcEc%3D&reserved=0" target="_blank">https://support.ruckuswireless.com/documents/2434-smartzone-3-6-2-mr2-command-reference-guide-sz300-scg200-vsz-h</a>

Customer disabled ports on an H510 model specific configuration at the Zone level but the configuration did not propagate to the AP's

2019-07-23T12:58:47-0700 2019-07-23T18:00:16-0700 https://support.ruckuswireless.com/articles/000009299 2019-07-23T13:10:59-0700 monthly 0.8 admin,premium knowledge_article_3868 knowledge_article_3868 2019-05-31T16:04:16-0700 000009299 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why are my ZoneDirector controlled Access Points connecting to the wrong ZoneDirector that they had previously been connected to? Access Points re-connected to the correct ZoneDirector when they were factory defaulted on site or remotely. This worked because the local router on the AP network had DHCP option 43 configured to send the AP's back to the correct ZoneDirector. If DHCP option 43 or DNS discovery is not configured on the Access Point network then the AP's will have to be accessed directly via SSH CLI after set factory and reboot and manually connect to the correct ZoneDirector using: set director ip <ZD_IP> The only way to clear the "most recent Zone Director" list is to factory default the Access Point. If the Access Point is still connected on the previous/wrong ZoneDirector this can be done using the remote_ap_cli command from the ZD SSH CLI NOTE: After entering the "set factory" command you also need to reboot the AP using "reboot" command. This can also be done by connecting to each Access Point via SSH CLI Please login: admin Password: Welcome to the Ruckus Wireless ZoneDirector 1200 Command Line Interface ruckus> en ruckus# debug You have all rights in this mode. ruckus(debug)# remote_ap_cli -a 38:ff:36:35:26:e0 "set factory" ---- Command 'rkscli -c "set factory "' executed at 38:ff:36:35:26:e0 Factory defaults will take effect after reboot OK remote_ap_cli "-a" "F0:3E:90:24:A2:00" ""set" "factory"" ruckus(debug)# remote_ap_cli -a F0:3E:90:24:A2:00 "reboot" ---- Command 'rkscli -c "reboot "' executed at F0:3E:90:24:A2:00 OK remote_ap_cli "-a" "F0:3E:90:24:A2:00:" ""reboot"" ruckus(debug)# After reboot the AP should only show the correct ZoneDirector. If the AP has connected to the correct ZoneDirector then you can use the remote_ap_cli command from that ZoneDirectors SSH CLI or by connecting to the AP directly via SSH CLI.. Only the correct ZoneDirector should now be displayed. remote_ap_cli "-a" "F0:3E:90:24:A2:00" ""get" "director"" ruckus(debug)# remote_ap_cli -a F0:3E:90:26:53:00 "get director" ---- Command 'rkscli -c "get director "' executed at F0:3E:90:26:53:00 ------ ZoneDirector Info ------ Primary Controller : n/a Secondary Controller : n/a DHCP Opt43 Code : 3 The information of the most recent Zone Director: [1] 2.2.2.2 AP is under management of ZoneDirector: 2.2.2.2 / f8:e7:1e:21:00:40, Currently AP is in state: RUN NOTES: Limited ZD discovery option found in ZoneDirector - configure Access Point - Access Point Policy will NOT clear the "most recent ZoneDirector" list Configured Limited ZD discovery on the ZD after connecting to two test ZoneDirectors: <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053bX&feoid=00N50000002Cf3M&refid=0EM2J000000qMTi"></img> THIS DID NOT change the recent ZD list, even with AP reboot: The information of the most recent ZoneDirector: [1] 10.176.208.37 [2] 10.176.192.160 The only way AP's can discover ZD's is by: <ul><li>AP in same L2 network/VLAN as ZD</li><li>having previously been connected to the ZD</li><li>DHCP option 43 or DNS lookup option</li><li>set director ip (which overwrites above mechanisms)</li><li>limited ZD discovery configuration.</li></ul>

Zone Director controlled Access Points connected to a previously used ZoneDirector when current ZoneDirector was out of service

2019-07-23T13:10:59-0700 2019-07-23T18:00:15-0700 https://support.ruckuswireless.com/articles/000009341 2019-07-23T13:19:43-0700 monthly 0.8 admin,premium knowledge_article_3866 knowledge_article_3866 2019-06-14T01:37:17-0700 000009341 Validated (External) Premium I100;Vriot Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, I100, vRIoT Why Innr IOT-ZigBee bulbs are getting randomly disconnected from the IoT Gateway ? The problem was isolated to defective Innr bulbs and replacement of the bulbs fixed the issue.

Explains a scenario where Innr-IoT bulbs were getting randomly disconnected from the IOT gateway and would not connect back unless IoT Gateway is rebooted.

2019-07-23T13:19:43-0700 2019-07-23T18:00:13-0700 https://support.ruckuswireless.com/articles/000009507 2019-07-23T13:31:28-0700 monthly 0.8 admin,premium knowledge_article_3864 knowledge_article_3864 2019-07-01T11:48:25-0700 000009507 Validated (External) Premium Virtual smartcell gateway Performance;Security;Troubleshooting Performance, Security, Troubleshooting, virtual SmartCell Gateway Why is my client unable to authenticate successfully when 802.11r is enabled using WPA2 PSK encryption on AP R610? A permanent fix is in ER-7262 for CL.

Failure when 802.11r is enabled in the WLAN configuration

2019-07-23T13:31:28-0700 2019-07-23T18:00:12-0700 https://support.ruckuswireless.com/articles/000009165 2019-07-23T13:24:06-0700 monthly 0.8 admin,premium knowledge_article_3865 knowledge_article_3865 2019-04-30T01:56:51-0700 000009165 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Performance;System network management;Troubleshooting;Known issues and workarounds Performance, System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Insight How to resolve the Druid Overload issues with "504 Gateway Time-out error"? Run the below commands from the SCI command-line, to clear all stuck tasks and restart the Druid indexing services. 1: Stop the Imply Data process. rsa@master-18199eda ~ $ sudo docker stop imply-data 2: Remove the DRUID tasks within the Imply Data. rsa@master-18199eda ~ $ sudo rm -fr /storage/imply-data/cache/druid/task/* 3: Remove the stuck tasks within the postgresql prompt: rsa@master-18199eda ~ $ sudo docker exec -it postgresql psql -U postgres druid psql (9.5.4) Type "help" for help. druid=# delete from druid_tasks where id like 'kill_%'; druid=# delete from druid_tasks where id like 'merge_%'; druid=# delete from druid_tasks where created_date<'2019-03-04'; NOTE: Make sure to modify the date to 2 days prior to current date. 4: Truncate the DRUID tasks and exit from the DRUID: druid=# truncate druid_tasklocks; TRUNCATE TABLE 5. Quit Druid using the below command: druid=# \q 6: Restart imply-master and imply-data: rsa@master-18199eda ~ $ sudo docker restart imply-master imply-master rsa@master-18199eda ~ $ sudo docker start imply-data imply-data 7. Restart imply-data on any Data Nodes in the cluster (if applicable): rsa@data-12345eda ~ $ sudo docker start imply-data imply-data

This article will help you to resolve the Druid issues which causes the SCI to collect the data from controller.

2019-07-23T13:24:06-0700 2019-07-23T18:00:12-0700 https://support.ruckuswireless.com/articles/000009281 2019-07-23T13:41:50-0700 monthly 0.8 admin,premium knowledge_article_3862 knowledge_article_3862 2019-05-20T18:07:37-0700 000009281 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How to fix error "Unable to create the AP zone. Global entity UserTrafficProfile doesn't exist anymore! " ? This is a known issue being tracked as a defect. Check Release Notes for Fixed In versions.

Using imported access point zone template from another unique cluster will result in this validation check error. This article describes the work around.

2019-07-23T13:41:50-0700 2019-07-23T18:00:10-0700 https://support.ruckuswireless.com/articles/000009308 2019-07-23T14:00:47-0700 monthly 0.8 admin,premium knowledge_article_3860 knowledge_article_3860 2019-05-28T12:53:42-0700 000009308 Validated (External) Premium Ruckus icx switches Security;Known issues and workarounds Security, Known Issues and Workarounds, Ruckus ICX Switches Are Ruckus ICX switches affected by this vulnerability? ICX switches are not affected. ICX 7xxx series switches use Broadcom chipset and ICX 6xxx series switches use Marvel chipset.

Under certain conditions, MDS provides a program with the potential to read data that program otherwise would not be able to see.

2019-07-23T14:00:47-0700 2019-07-23T18:00:08-0700 https://support.ruckuswireless.com/articles/000009171 2019-07-23T14:27:35-0700 monthly 0.8 admin,premium knowledge_article_3859 knowledge_article_3859 2019-05-06T14:53:36-0700 000009171 Validated (External) Premium Icx 7150;RUCKUS ICX 7150 Campus Switches Installation Installation, ICX 7150 Are passive stack cables of 3m supported on the 7150 family? Until then the issue has been fixed, use the workaround or use only active cables. Review Release Notes for a Fixed in Version.

When 3m passive cables used on 7150 to form stack, the stack is unstable and port flap is seen.

2019-07-23T14:27:35-0700 2019-07-23T18:00:07-0700 https://support.ruckuswireless.com/articles/000006289 2019-07-22T09:16:43-0700 monthly 0.8 admin,premium knowledge_article_3856 knowledge_article_3856 2017-03-10T14:12:14-0800 000006289 Validated (External) Premium Vsz dataplane Performance;Troubleshooting Performance, Troubleshooting, vSZ Dataplane Why is client performance poor with tunnelled WLAN over 4G connection? The MTU over the 4G link is somewhere bottlenecked resulting in pmtu negotiation to 1296. Asked the user to check with the team who manage 4G link. It was later found that the MTU set on their end is 1360. However, it was misconfigured for the Tunneled link between AP and VDP. The Cellular team reconfigured the MTU settings for tunneled interface(AP-VDP) and post making this change, the end user started to get 30/15 up/down performance results.

Getting 48 Mbit up / 10Mbit down on the 4G connection with local breakout. However with GRE enabled WLAN the throughput was in kbps.

2019-07-22T09:16:43-0700 2019-07-22T12:00:12-0700 https://support.ruckuswireless.com/articles/000009559 2019-07-22T10:50:45-0700 monthly 0.8 admin,premium knowledge_article_3832 knowledge_article_3832 2019-07-15T03:50:52-0700 000009559 Validated (External) Premium Icx 7150;Icx 7250;Icx 7450;RUCKUS ICX 7150 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, ICX 7150, ICX 7250, ICX 7450 Why-PoE-port-flaps-for-a-period-of-time-after-a-stack-reload ? Upgrade to a version of code that contains the fix.

PoE ports keep flapping during a period of time from some minutes up to an hour after a stack reload.

2019-07-22T10:50:45-0700 2019-07-22T12:00:10-0700 https://support.ruckuswireless.com/articles/000002702 2019-07-22T11:26:14-0700 monthly 0.8 admin,premium knowledge_article_3854 knowledge_article_3854 2014-02-25T08:49:44-0800 000002702 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector What is maximum number of restricted subnets that can be configured on any ZD ? The maximum number of Restricted subnets that can be created on the ZD regardless of the ZD model and firmware version is 22.

This article provides more details on the ZD restricted subnets.

2019-07-22T11:26:14-0700 2019-07-22T12:00:08-0700 https://support.ruckuswireless.com/articles/000009526 2019-07-19T14:09:52-0700 monthly 0.8 admin,premium knowledge_article_3851 knowledge_article_3851 2019-07-09T13:32:52-0700 000009526 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Insight Does nginx server on SCI has any compatibility issues with the sever CPUs? - SCI was installed on a server with CPU : AMD Opteron(tm) Processor 6174. - This CPU model is very old(released in 2010/ 2013) and has compatibility issues with the nginx server running on our SCI rsa-gateway service. Refer to the below link for more details. <div style="margin-left: 40px;"><a href="https://github.com/Kong/kong/issues/2846" target="_blank">https://github.com/Kong/kong/issues/2846</a> </div> - Post moving the SCI to a differnet server with CPU : Intel(R) Xeon(R) CPU E5-4669 v4 @ 2.20GHz, which was released in 2017, the SCI GUI is available. Note : Always make sure that SCI is installed on the server with new CPUs to avoid this issue.

Article provides information on nginx compatibility issues with the old server CPUs which results in SCI GUI crash

2019-07-19T14:09:52-0700 2019-07-19T18:00:08-0700 https://support.ruckuswireless.com/articles/000009610 2019-07-19T06:08:57-0700 monthly 0.8 admin,premium knowledge_article_3850 knowledge_article_3850 2019-07-19T06:08:57-0700 000009610 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security;System network management Configuration, Security, System Network Management, SmartCell Gateway, virtual SmartCell Gateway How do I configure the built-in firewall on SmartZone? The SZ has an outbound firewall (iptables) which can be configured to allow/block access. To control inbound traffic, an external firewall in front of your SZ is required. Note that rules are stateful, and adding a deny-all rule before adding 'allow' rules to permit access, will likely isolate the SZ from further communications! Below is a configuration example: SZ-5-0# config SZ-5-0(config)# outbound-firewall SZ-5-0(config-outbound-firewall)# ? <div style="margin-left: 40px;">do Do command enable Allow the outbound traffic end End the current configuration session and return to privileged EXEC mode exit Exit from the EXEC help Display this help message ip-rule Add allow iptables profile no No commands </div> SZ-5-0(config-outbound-firewall)# ip-rule example out tcp sport 50 src 10.10.10.10 SZ-5-0(config-outbound-firewall)# enable SZ-5-0(config-outbound-firewall)# end SZ-5-0(config)# exit SZ-5-0# show running-config outbound-firewall <div style="margin-left: 40px;">outbound firewall enable description=user define ud_example service=out=sport/50/tcp=src/10.10.10.10 interface=all description=user define ud__ftp_f6a32129 service=out=dport/22/tcp=dst/192.168.1.102 interface=all description=user define ud__license_278584e5 service=out=dport/443/tcp=dst/ruckuswireless.flexnetoperations.com interface=all </div>

Configuration examples for the SmartZone outbound firewall

2019-07-19T06:08:57-0700 2019-07-19T12:00:09-0700 https://support.ruckuswireless.com/articles/000009550 2019-07-18T08:05:34-0700 monthly 0.8 admin,premium knowledge_article_3848 knowledge_article_3848 2019-07-18T08:05:34-0700 000009550 Validated (External) Premium Sz300;Ruckus icx switches;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Known issues and workarounds Known Issues and Workarounds, SZ300, Ruckus ICX Switches, virtual SmartCell Gateway, SZ100 Why does the 'copy configuration from...' and 'get configuration from switch' commands not work on vSZ/SZ? The resolution is to omit the following lines (fields) from the copy command: <img alt="User-added image" height="26" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Sp&feoid=00N50000002Cf3M&refid=0EM2J000000uilo" width="500"></img> ! stack unit 1 module 1 icx7150-48p-poe-port-management-module module 2 icx7150-2-copper-port-2g-module module 3 icx7150-4-sfp-plus-port-40g-module priority 253 stack-port 1/3/3 ! and also: hostname LAB-AMS-RACK11 ip address 192.168.10.2 255.255.255.0 ip dns server-address 192.168.10.1 ip default-gateway 192.168.10.1 ...as they are seen as unique items.

In SZ/vSZ the 'copy configuration from...' and 'get configuration from switch' don't work; this is because certain items are unique to the switch and should not be copied.

2019-07-18T08:05:34-0700 2019-07-18T12:00:09-0700 https://support.ruckuswireless.com/articles/000009600 2019-07-18T09:47:18-0700 monthly 0.8 admin,premium knowledge_article_3847 knowledge_article_3847 2019-07-18T09:28:54-0700 000009600 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway What state should AP's appear in SZ GUI when added using the AP Pre-provisioning CSV script Pre-provisioned AP does not consume any license until it has registered to SZ AP's will be in pending state until they register to the SZ Pre-provisioning Feature Overview <ul><li style="margin-left: 24px; text-align: justify;">This feature provides the operator with an option to pre-populate and provision AP information, providing tighter operational security and closer end to end control over the entire provisioning procedure.</li><li style="margin-left: 24px; text-align: justify;">The basic idea of the feature is to pre-populate a valid set of APs delivered to the operator from Ruckus and allow the operator to pre-configure the APs at the SCG prior to the APs registering with the operator.</li><li style="margin-left: 24px; text-align: justify;">The requirements are implicitly listed by describing the basic sunny-day use case in the following sections</li><li style="margin-left: 24px; text-align: justify;">This feature provides an alternate procedure, that allows the operator complete control of AP configuration and join and AP service activation. </li><li style="margin-left: 24px; text-align: justify;">The prior methods of APs joining the SCG and being assigned to zones based on Rules shall be an alternate option that will continue to be available to the operators.</li></ul> AP updates its basic info to SCG & waits for approval. AP asks for the AP's registration state. Below is how SZ determines AP's registration state. · Check for SZ's AP license If SZ doesn't have enough AP license. § Returns Rejected § Triggers an apStatusRejected(105) event · Based on SZ Profile and configuration to decide Pending or Approval If AP joins the staging zone. Returns Pending If AP joins a non-staging zone. Returns Approved v AP keeps checking if SCG-C approves it, Response a. 0 = Pending a. 1 = Approved, with cert + keys 08/01 09:28:11 860 Info: registration:848 Approved state! b. 2 = Rejected a. Swapping - To indicate this is a Swapped AP b. Deleted Pre-provisioning CSV fields: <table class="Table" style=""><thead><tr><td colspan="1" rowspan="1" valign="top" style=""> </td><td colspan="1" rowspan="1" valign="top" style="">Mandatory</td><td colspan="1" rowspan="1" valign="top" style="">Optional</td></tr></thead><tbody><tr><td colspan="1" rowspan="1" valign="top" style="">Carrier</td><td colspan="1" rowspan="1" valign="top" style="">AP Mac Address, Zone Name</td><td colspan="1" rowspan="1" valign="top" style="">Model, AP Name, Description, Location, GPS Coordinates, Logon ID, Password, Administrative State/Manual Unlock, IP Address, Network Mask, Gateway, Primary DNS, Secondary DNS, Provision Checklist, Serial Number, IPv6 Address, IPv6, Gateway, IPv6 Primary DNS, IPv6 Secondary DNS</td></tr></tbody></table> A sample Pre-provisioning script csv can be downloaded from the Monitor::Access Point page by clicking on the "more" pulldown <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053XL&feoid=00N50000002Cf3M&refid=0EM2J000000ul4P"></img> <img src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053XL&feoid=00N50000002Cf3M&refid=0EM2J000000ul4U"></img>

What state should AP's be displayed in SZ GUI when added to cluster using AP Pre-provisioning CSV script and do they consume AP licenses

2019-07-18T09:47:18-0700 2019-07-18T12:00:07-0700 https://support.ruckuswireless.com/articles/000009482 2019-07-17T16:55:22-0700 monthly 0.8 admin,premium knowledge_article_3846 knowledge_article_3846 2019-06-26T23:52:32-0700 000009482 Validated (External) Premium Unleashed;Zonedirector;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Unleashed, ZoneDirector How to turn off https redirection in web authentication By default web authentication portal redirection is forced by HTTPS mode, in ZD 10.2 and Unleash 200.6 release, we can disable force https redirection as below ruckus# config You have all rights in this mode. ruckus(config)# show portal-auth-generation Force DNS server: Disabled Force Web Portal HTTPS Redirection: Enabled The default setting is web authentication use https redirection, to disable force https redirection, execute following command ruckus(config)# no web-portal-force-https-redirection The command was executed successfully. ruckus(config)# show portal-auth-generation Force DNS server: Disabled Force Web Portal HTTPS Redirection: Disabled ruckus(config)# After disabling https redirection, web authentication will use http redirection to redirect stations to login page. please note there may have potential security concern as traffic is not encrypted.

Disable force https redirection for web authentication in ZD and Unleash

2019-07-17T16:55:22-0700 2019-07-17T18:00:13-0700 https://support.ruckuswireless.com/articles/000008992 2019-07-17T16:58:35-0700 monthly 0.8 admin,premium knowledge_article_3845 knowledge_article_3845 2019-06-26T23:54:08-0700 000008992 Validated (External) Premium R730;Ruckus R730 Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, R730 Why Samsung S10 has low performance when connects to R730 Customer need upgrade R730 image to latest release with 802.11ax draft 3.0 update to fix the problem. 802.11ax draft 3.0 standard will be supported in following release: Solo image : 112.1.0.0.504 SZ Image: SZ 3.6.2 patch 1-3.6.2.0.222 with AP patch 3.6.2.0-706 3.6.2 patch 2 5.1.1 ZD image: 10.1.2 (MR2 Refresh2)- 10.1.2.0.251

This article explains why Samsung S10 802.11ax client connect to R730 has low performance and the solution

2019-07-17T16:58:35-0700 2019-07-17T18:00:12-0700 https://support.ruckuswireless.com/articles/000001907 2019-07-17T17:02:11-0700 monthly 0.8 admin,premium knowledge_article_3844 knowledge_article_3844 2013-04-01T13:41:10-0700 000001907 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to take backup from ZoneDirector via CLI ? Set up a TFTP server using tftpd32 Application on windows machine. Login to ZD via CLI using Putty application with admin credentials. ruckus> enable ruckus# debug ruckus(debug)# save-config <IP-ADDR> <FILE-NAME> Upload the configuration to the designated TFTP site. <IP-ADDR> Enter the TFTP server IP address (for example,192.168.0.1). <FILE-NAME> Enter file name (for example backup) Example: ruckus(debug)# save-config 192.168.0.1 backup Creating backup config file Done Uploading backup config file The command was executed successfully.

Upload the configuration to the designated TFTP site.

2019-07-17T17:02:11-0700 2019-07-17T18:00:11-0700 https://support.ruckuswireless.com/articles/000008850 2019-07-17T17:15:27-0700 monthly 0.8 admin,premium knowledge_article_3840 knowledge_article_3840 2019-03-18T13:26:28-0700 000008850 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, SmartCell Gateway, SmartCell AP Can I move AP with mesh enabled to another Zone in SZ v3.4.2? Upgrade to a version of code that contains the fix.

APs with mesh enabled cannot be moved to other Zones with different mesh network name or passphrase, or to a mesh disabled zone. This is by design to protect AP connectivity. Tested in 3.4.2

2019-07-17T17:15:27-0700 2019-07-17T18:00:07-0700 https://support.ruckuswireless.com/articles/000008900 2019-07-16T06:31:22-0700 monthly 0.8 admin,premium knowledge_article_3838 knowledge_article_3838 2019-03-14T16:54:03-0700 000008900 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Troubleshooting Configuration, Troubleshooting, Cloudpath How to upload a wildcard certificate on on-premises Cloudpath? Once the certificate is uploaded on the CP, you will receive below error. <img alt="User-added image" height="252" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Ug&feoid=00N50000002Cf3M&refid=0EM2J000000mG4T" width="500"></img> You will need to login to Cloudpath CLI and execute below two commands to update the web server url and enrollment url # config hostname airport.pinkfreewifi.com # config https-servername default After executing these two commands the error will disappear and you can see updated FQDN in web url. You will need to republish the workflow in-order to update the url in the enrollment portal. NOTE: This is only applicable to on-premises Cloudpath. On a Ruckus cloud hosted Cloudpath you cannot add the cert as it already has a CA signed cert.

This article explain steps to upload wildcard certificate on the on-premises Cloudpath

2019-07-16T06:31:22-0700 2019-07-16T12:00:06-0700 https://support.ruckuswireless.com/articles/000009552 2019-07-15T06:52:19-0700 monthly 0.8 admin,premium knowledge_article_3834 knowledge_article_3834 2019-07-15T06:52:19-0700 000009552 Validated (External) Premium Zonedirector;Zoneflex indoor;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, SmartCell Gateway, virtual SmartCell Gateway My R710 is configured for 802.3af power, but it keeps rebooting. Why? <div style="margin-left: 40px;"> </div> 1. If the AP is configured to use 4 Tx Chains, first reduce it to 2 Tx-chains and observe for stabilised behaviour. This config change does not require an AP reboot. Support for the 8023af-txchain command is available in builds: <div style="margin-left: 40px;">SZ 3.5.1 + ZD 9.13 + SOLO 104.1 +</div> In AP: set 8023af-txchain 2 In SZ: en config zone <zone-name> ap-model R710 poe-operating-mode 802.3af 2 exit yes In ZD: enable config ap-group <name> model r710 802.3af-txchain 2 end 2. If the reboot problem persists, reduce the Tx Chains further (therefore reducing the power consumed by the 2.4GHz radio) to 1 chain, and observe for improvement. AP: set 8023af-txchain 1 SZ: poe-operating-mode 802.3af 2 ZD: model r710 802.3af-txchain 2

Steps to identify if the AP is exceeding 802.3af power limits and fix the issue

2019-07-15T06:52:19-0700 2019-07-15T12:00:07-0700 https://support.ruckuswireless.com/articles/000009541 2019-07-12T14:36:27-0700 monthly 0.8 admin,premium knowledge_article_3826 knowledge_article_3826 2019-07-11T13:46:26-0700 000009541 Validated (External) Premium T310c;T310d;T310n;T310s;Ruckus T310c;Ruckus T310d;Ruckus T310n;Ruckus T310s Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, T310c, T310d, T310n, T310s Do we have an image of the T310 model APs DC power connector? Attached is the image of the T310 model AP's DC input connector for reference. This is a T310d model AP Quick Setup Guide link: https://support.ruckuswireless.com/documents/2247-t310d-quick-setup-guide The AP can draw power from the Ethernet input as a Class3 device, providing a maximum of 12.95W to the system. Alternately, power can be supplied through a *customer provided* 12V DC power supply (7-20V DC acceptable) that will connect to a two-pin terminal block. The terminal block is accessable through a water-tight gland on one end of the unit. The terminal block connection has surge and polarity protection to protect against inserting the wrong polarity leads into the terminal block.

The attached image is the DC power input jack for T310 model APs (T310s, T310n, T310d, T310c)

2019-07-12T14:36:27-0700 2019-07-12T18:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zEQSAY?attachment_index=0 2019-07-12T18:00:07-0700 monthly admin,premium knowledge_article_3826 knowledge_article_3826_attachment_1 T310-DC connector.jpg 1658156.0 image/jpeg https://support.ruckuswireless.com/articles/000009412 2019-07-11T12:02:24-0700 monthly 0.8 admin,premium knowledge_article_3821 knowledge_article_3821 2019-06-24T06:37:31-0700 000009412 Validated (External) Premium Sz300;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, SZ300, virtual SmartCell Gateway, SZ100 How to display more then 10 result entries for an API query. By default this query will return only 10 entries. You can see there are more with the parameter "hasMore":true. You can modify the number of entries returned adding this parameter to your body: "limit": X (where X is the number of entries returned). Alternatively (or added to limit), you can also use parameter "page": Y (where Y is the page number) to get following pages with more info Modified body: { "filters": [ { "type": "DOMAIN", "value": "8b2081d5-9662-40d9-a3db-2a3cf4dde3f7" } ], "fullTextSearch": { "type": "AND", "value": "" }, "attributes": [ "*" ] , "limit":20 }

When using the API query to get BSSID's from all AP's the query would return only 10 entry by default. We would need to modify the query body for the return entries with "limit": X (where X is the number of entries returned).

2019-07-11T12:02:24-0700 2019-07-11T18:00:21-0700 https://support.ruckuswireless.com/articles/000009488 2019-07-11T14:07:40-0700 monthly 0.8 admin,premium knowledge_article_3799 knowledge_article_3799 2019-06-28T01:38:31-0700 000009488 Validated (External) Premium Sz300;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Known issues and workarounds Known Issues and Workarounds, SZ300 Why can certain clients not authenticate via the portal anymore? A fix for this is implemented in the 3.6.2.0.222 and 5.x Upgrade both controller and AP firmware to resolve the issue.

While adding more AP's in the cluster suddenly client authentication starts to fail for some clients (not all).

2019-07-11T14:07:40-0700 2019-07-11T18:00:18-0700 https://support.ruckuswireless.com/articles/000009447 2019-07-11T14:33:02-0700 monthly 0.8 admin,premium knowledge_article_3778 knowledge_article_3778 2019-06-21T04:45:02-0700 000009447 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor How to modify timers in mesh AP to check gateway connectivity? Default settings can be checked at AP side with command: rkscli: get meshcfg Gateway Detection Timeout: 30 Gateway Ping Period: 1 Gateway Ping Type: Unicast Controllerless Status: Enabled No ethernet neighbor communication Status: Disabled Zero Touch: Disabled OK -> Ping period is set by default to 1, meaning that ARP request will be sent every second. And detection timeout is the timer (by default 30 seconds) where AP will decide gateway is not reachable anymore after not receiving replies. These values can be modified with AP CLI commands (which can be used to build a script to be run from controller side if needed). This is an example changing timeout to 600 seconds, and ping period to 30 seconds: rkscli: set meshcfg gwtimeout 600 OK rkscli: set meshcfg gwpingperiod 30 OK rkscli: get meshcfg Gateway Detection Timeout: 600 Gateway Ping Period: 30 Gateway Ping Type: Unicast Controllerless Status: Enabled No ethernet neighbor communication Status: Disabled Zero Touch: Disabled OK

AP CLI commands to modify AP timers to check gateway connectivity

2019-07-11T14:33:02-0700 2019-07-11T18:00:17-0700 https://support.ruckuswireless.com/articles/000009491 2019-07-11T14:58:09-0700 monthly 0.8 admin,premium knowledge_article_3801 knowledge_article_3801 2019-06-28T06:33:32-0700 000009491 Validated (External) Premium Vsz dataplane Support license activation Support License Activation, vSZ Dataplane Why are all my 10GB vSD dataplanes in pending state when I have valid licenses? Customer must have a 1GB dataplane license for the vDP to use 10GB. Generate a temporary 1GB dataplane license. The 1GB license is the baseline and te 10GB license is an upgrade.

Customer has valid 10GB vDP licenses. 90 day temporary license expires and all dataplanes were in "Pending" state. When Customer attempted to sync the licenses, the following error appeared ""Unable to approve the data plane. Reason: Insufficient vSZ-D Capacity License, please purchase license to proceed."

2019-07-11T14:58:09-0700 2019-07-11T18:00:15-0700 https://support.ruckuswireless.com/articles/000009173 2019-07-11T15:10:48-0700 monthly 0.8 admin,premium knowledge_article_3824 knowledge_article_3824 2019-05-20T08:38:16-0700 000009173 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, SmartCell AP Why are my SZ controlled APs not transmitting any SSIDs? Verify WLAN Group with Service SSID's (select Zone and Wireless LAN tab) <img alt="" height="496" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Rh&feoid=00N50000002Cf3M&refid=0EM2J000000qHdp" width="1245"></img> Move the AP to a service AP group using correct WLAN group <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Rh&feoid=00N50000002Cf3M&refid=0EM2J000000qHdq"></img> <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Rh&feoid=00N50000002Cf3M&refid=0EM2J000000qHdr"></img> Verify WLAN's now listed on AP: Controller -vSZ4# remote ap-cli 44:1E:98:20:09:B0 "get wlanlist" name status type wlanID radioID bssid ssid -------------------------------------------------------------------------------------------------- wlan0 up AP wlan0 0 44:1e:98:20:09:b8 hotel_GRE wlan1 up AP wlan1 0 44:1e:98:60:09:b8 hotel_GUEST wlan2 down AP wlan2 0 00:00:00:00:00:00 Wireless3 wlan3 down AP wlan3 0 00:00:00:00:00:00 Wireless4 wlan4 down AP wlan4 0 00:00:00:00:00:00 Wireless5 wlan5 down AP wlan5 0 00:00:00:00:00:00 Wireless6 wlan6 down AP wlan6 0 00:00:00:00:00:00 Wireless7 wlan7 down AP wlan7 0 00:00:00:00:00:00 Wireless8 recovery-ssid down AP wlan102 0 00:00:00:00:00:00 Recover.Me-2009B0 wlan32 up AP wlan32 1 44:1e:98:20:09:bc hotel_GRE wlan33 up AP wlan33 1 44:1e:98:60:09:bc hotel_GUEST wlan34 down AP wlan34 1 00:00:00:00:00:00 Wireless11 wlan35 down AP wlan35 1 00:00:00:00:00:00 Wireless12 wlan36 down AP wlan36 1 00:00:00:00:00:00 Wireless13 wlan37 down AP wlan37 1 00:00:00:00:00:00 Wireless14 wlan38 down AP wlan38 1 00:00:00:00:00:00 Wireless15 wlan39 down AP wlan39 1 00:00:00:00:00:00 Wireless16 OK Verify SSID's on Monitor::Access Point in GUI shows correctly listed WLAN's/SSID's by highlighting AP and checking info under WLAN's for specific AP <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Rh&feoid=00N50000002Cf3M&refid=0EM2J000000qHds"></img>

Newly added Access Points are not transmitting any SSIDs

2019-07-11T15:10:48-0700 2019-07-11T18:00:13-0700 https://support.ruckuswireless.com/articles/000008886 2019-07-11T15:17:16-0700 monthly 0.8 admin,premium knowledge_article_3683 knowledge_article_3683 2019-03-11T07:53:49-0700 000008886 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, SmartCell Gateway, virtual SmartCell Gateway How can the vSZ HDD be re-sized? In the event that the SZ VM node has insufficient HDD capacity (such as if the SZ was configured and accidentally left with a default 100GB HDD size), it may be necessary to re-size it. In VMware and KVM, this is a straight-forward task performed on the hypervisor. BEFORE MAKING ANY CHANGES TAKE A CONFIGURATION BACKUP AND CLUSTER BACKUP. IF POSSIBLE EXPORT THE CLUSTER BACKUP OFF THE NODE/S! This will give you a 'plan b' should any user-errors be made when re-sizing. For instructions on taking a cluster backup see KBA 000006239. Once you have the config and cluster backups, use the following procedure to re-size the HDD: 1. Shutdown the SZ from CLI using command 'shutdown' 2. Power-off the VM from hypervisor 3. Increase HDD size using the hypervisor: In VMware right-click the VM > Edit Settings > Hardware tab > Hard Disk 1 > resize it > click OK <div style="margin-left: 40px;"><img alt="User-added image" height="448" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Rr&feoid=00N50000002Cf3M&refid=0EM2J000000mElz" width="500"></img></div> In KVM use the following command: "qemu-img resize {file name of the controller QCOW bin} +size" <div style="margin-left: 80px;">Example below: root@vSZ-VM1:/# cd /var/lib/libvirt/storage/vSZ1 root@vSZ-VM1:/var/lib/libvirt/storage/vSZ1# ls -al total 101586704 drwxr-xr-x 2 root root 4096 Jan 23 12:10 . drwxr-xr-x 4 root root 4096 Sep 21 13:48 .. -rw-r--r-- 1 root root 99231727616 Jan 23 11:51 vscg-3.4.0.0.976.qcow2 -rwxr--r-- 1 root root 923482214 Oct 11 09:53 vscg-3.4.0.0.976.qcow2.bin -rw-r--r-- 1 root root 2854092800 Jan 23 15:08 vscg-3.5.0.0.562.qcow2 -rwxr--r-- 1 root root 1015418934 Jan 23 11:59 vscg-3.5.0.0.562.qcow2.bin root@vSZ-VM1:/var/lib/libvirt/storage/vSZ1# qemu-img resize vscg-3.5.0.0.562.qcow2 +500G </div> 4. Power-on the vSZ VM FIN.

Steps to re-size the HDD in the event that more disk-space is required

2019-07-11T15:17:16-0700 2019-07-11T18:00:11-0700 https://support.ruckuswireless.com/articles/000009290 2019-07-11T15:20:58-0700 monthly 0.8 admin,premium knowledge_article_3807 knowledge_article_3807 2019-06-03T15:19:59-0700 000009290 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway How can I use SZ CLI commands to change the Authentication server in multiple WLAN's The process will be similar to that used for using ZD (KBA article 000009291) but with the extra added step of having to enter first into each domain, then zone, then into each WLAN to make the changes. Again – a CLI tool may be able to automate this by using these as variables from a list. The CLI commands that would need the values added by the script are: ruckus# config ruckus(config)# ruckus(config)# domain name ruckus(config)# zone name ruckus(config-domain-zone)# wlan name ruckus(config-domain-zone-wlan)# authservice name Using a SSH/CLI tool like secureCRT to automate this operation is beyond the scope of this article and is dependent on program used. CLI guide for SZ (3.6.2.x) <a href="https://support.ruckuswireless.com/documents/2434-smartzone-3-6-2-mr2-command-reference-guide-sz300-scg200-vsz-h" target="_blank">https://support.ruckuswireless.com/documents/2434-smartzone-3-6-2-mr2-command-reference-guide-sz300-scg200-vsz-h</a>

Require SZ CLI commands needed to change the authentication server in multiple WLAN configurations

2019-07-11T15:20:58-0700 2019-07-11T18:00:10-0700 https://support.ruckuswireless.com/articles/000009377 2019-07-11T15:26:09-0700 monthly 0.8 admin,premium knowledge_article_3806 knowledge_article_3806 2019-06-11T08:45:02-0700 000009377 Validated (External) Premium Zoneflex indoor;Smartcell ap Configuration;Installation Configuration, Installation, ZoneFlex Indoor, SmartCell AP What are the limitations of running an R610 AP with only 802.3af power (15W max)? This data can be found in our Data Sheet: https://webresources.ruckuswireless.com/datasheets/r610/ds-ruckus-r610.html The second Ethernet port will be disabled and 2.4Ghz Radio will only operate using 2 RF chains, limiting maximum throughput on that radio: <table border="0" cellpadding="0"><thead><tr><th colspan="3" rowspan="1">POWER<a href="https://webresources.ruckuswireless.com/datasheets/r610/ds-ruckus-r610.html#d49e1745" target="_blank" title="Max power varies by country setting, band, and MCS rate.">3</a></th></tr><tr><th colspan="1" rowspan="1">Power Supply</th><th colspan="1" rowspan="1">Mode Feature</th><th colspan="1" rowspan="1">Maximum Power Consumption</th></tr></thead><tbody><tr><td colspan="1" rowspan="1">DC Input 12V DC, 2.0A</td><td colspan="1" rowspan="1"> <ul><li>Full functionality</li></ul> </td><td colspan="1" rowspan="1"> <ul><li>19.1W</li></ul> </td></tr><tr><td colspan="1" rowspan="1">802.3af</td><td colspan="1" rowspan="1"> <ul><li>Limits 2.4GHz to 2x3 (2-chain transmit at 21dBm aggregate power, 3-chain receive)</li><li>Turns off USB port</li><li>Turns off 1 Ethernet port</li></ul> </td><td colspan="1" rowspan="1"> <ul><li>15W</li></ul> </td></tr><tr><td colspan="1" rowspan="1">802.3at</td><td colspan="1" rowspan="1"> <ul><li>Full functionality</li></ul> </td><td colspan="1" rowspan="1"> <ul><li>18.8W</li></ul> </td></tr></tbody></table> This AP, as most 802.11 ac and ax AP's requires 802.3at power for full functionality.

R610 requires 802.3at power for full operation. When powered by PoE providing only

2019-07-11T15:26:09-0700 2019-07-11T18:00:09-0700 https://support.ruckuswireless.com/articles/000007124 2019-07-11T15:34:58-0700 monthly 0.8 admin,premium knowledge_article_3822 knowledge_article_3822 2017-12-12T14:27:23-0800 000007124 Validated (External) Premium Ruckus icx switches;Brocade eos products System network management System Network Management, Ruckus ICX Switches, Brocade EOS Products How do I set the port regions on FI X series switches? <h3 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">FastIron X Series device port regions</h3> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">Ports on the FastIron X Series devices are grouped into regions. For a few features, you will need to know the region to which a port belongs. However, for most features, a port region does not affect configuration or operation of the feature. <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>SX-FI48GPP: ports 1 - 48 belong to port region 0</li><li>SX-FI-2XG: ports 1 - 2 belong to port region 0</li><li>SX-FI-8XG: ports 1 - 8 belong to port region 0</li><li>SX-FI-24HF: ports 1 - 24 belong to port region 0</li><li>SX-FI-24GPP: ports 1 - 24 belong to port region 0</li></ul> <h3 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">FCX device port regions</h3> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">The port region rules for FCX devices are as follows:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">For all platforms, a 24-port Gbps module has one port region. In addition, any 10 Gbps ports on the device also belong to this single port region. For all platforms, the 48-port Gbps module has two port regions: <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Ports 1 - 24 belong to port region 0</li><li>Ports 25 - 48 belong to port region 1 </li></ul> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">For FCX648 devices with two 10 Gbps XFP ports, and a two 10 Gbps CX4 stacking ports:</div> <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>The two 10 Gbps XFP ports belong to port region 0 (along with ports 1 -24 )</li><li>The two 10 Gbps CX4 stacking ports belong to port region 1 (along with ports 25 - 48) </li></ul> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">For FCX648 devices with four 10 Gbps SFP+ ports:</div> <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>10 Gbps SFP+ ports 3 and 4 belong to port region 0 (along with ports 1 -24 )</li><li>10 Gbps SFP+ ports 1 and 2 ports belong to port region 1 (along with ports 25 - 48) </li></ul> <h3 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">ICX 6610 device port regions</h3> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">A 24-port Gbps has the following port regions:</div> <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Ports 1-24 belong to region 0</li><li>10 Gbps SFP+ ports belong to region 0 </li></ul> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">A 48-port Gbps has the following port regions:</div> <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Ports 1-24 belong to region 0</li><li>Ports 25-48 belong to region 1</li><li>10 Gbps SFP+ ports belong to region 0 </li></ul> <h3 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">ICX 6430 device port regions</h3> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">A 24-port Gbps module has one port region. The four SFP ports on the device also belong to this single port region. A 48-port Gbps module has two port regions:</div> <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Ports 1-24 and SFP ports 1& 2 belong to port region 0</li><li>Ports 25-48 and SFP ports 3 & 4 belong to port region 1 </li></ul> <h3 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">ICX 6450 device port regions</h3> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">A 24-port Gbps module has one port region. The four SFP+ ports on the device also belong to this single port region. A 48-port Gbps module has two port regions:</div> <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Ports 1-24 and SFP+ ports 1& 2 belong to port region 0</li><li>Ports 25-48 and SFP+ ports 3 & 4 belong to port region 1 </li></ul> <h3 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);"> ICX 6650 device port regions</h3> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">ICX 6650 device has only one port region. Brocade ICX 6650 has only one port region. All ports belong to region 0. <h3>ICX 7150 device port regions</h3> ICX 7150 device has only one port region. All ports belong to region 0. <h3>ICX 7250 device port regions</h3> ICX 7250 device has only one port region. All ports belong to region 0. </div> <h3 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">ICX 7450 device port regions</h3> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Brocade ICX 7450 24 port has only one port region. Brocade ICX 7450 48 port has two port regions. <h3>ICX 7650 device port regions</h3> ICX 7650 device has only one port region. All ports belong to region 0. </div> <h3 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">ICX 7750 device port regions</h3> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">ICX 7750 device has only one port region.</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Brocade ICX 7750 has only one port region. All ports belong to region 0. <h3>ICX 7850 device port regions</h3> ICX 7850 device has only one port region. All ports belong to region 0. </div>

Describes port regions on FastIron switches.

2019-07-11T15:34:58-0700 2019-07-11T18:00:08-0700 https://support.ruckuswireless.com/articles/000009411 2019-07-11T15:42:42-0700 monthly 0.8 admin,premium knowledge_article_3770 knowledge_article_3770 2019-06-18T03:21:17-0700 000009411 Validated (External) Premium Icx 7150;RUCKUS ICX 7150 Campus Switches Firmware;Installation;Known issues and workarounds Firmware, Installation, Known Issues and Workarounds, ICX 7150 How to stop BUG: soft lockup issue when booting up? RMA will be required.

How to debug "soft lockup" error

2019-07-11T15:42:42-0700 2019-07-11T18:00:07-0700 https://support.ruckuswireless.com/articles/000008995 2019-06-11T16:26:16-0700 monthly 0.8 admin,premium knowledge_article_3739 knowledge_article_3739 2019-04-01T09:41:06-0700 000008995 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector Why ZD dashboard displays an error, "Page cannot load Google Maps correctly"? The resolution for this issue is to get the Google API key by navigating to the gear icon on the dashboard and then clicking on the link <a href="https://developers.google.com/maps/documentation/javascript/get-api-key" target="_blank">Apply a Google Maps API Key</a> <img alt="User-added image" height="292" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Sf1&feoid=00N50000002Cf3M&refid=0EM2J000000q8Bj" width="500"></img> Once you click on this link, it will redirect you to the Google Developers URL where you can find detailed steps on how to get the Google MAPs API key. Once you get the key, you may paste it in the "Enter Google Maps API key"box and click OK for the settings to save. You can alternatively install the same key by navigating to Configure>System> Configure MAP (at the bottom of the screen) >Apply to save. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Sf1&feoid=00N50000002Cf3M&refid=0EM2J000000q8C8"></img> “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

This Article explains why we get an error prompt "Page cannot load Google Maps correctly" on the ZD dashboard moment we log into it.

2019-06-11T16:26:16-0700 2019-07-10T23:53:46-0700 https://support.ruckuswireless.com/articles/000001371 2014-04-09T07:38:34-0700 monthly 0.8 admin,premium knowledge_article_904 knowledge_article_904 2013-01-15T22:23:42-0800 000001371 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What is the maximum validity of guest pass You can configure the validity of the Guest Pass on per Guest pass basis in the Guest Pass Generation page and the maximum validity that can be set for any individual guest pass is 10 Years.

Maximum validity of guest pass

2014-04-09T07:38:34-0700 2019-07-08T11:14:28-0700 https://support.ruckuswireless.com/articles/000001205 2019-07-08T01:19:21-0700 monthly 0.8 admin,premium knowledge_article_1833 knowledge_article_1833 2012-03-21T12:00:58-0700 000001205 Validated (External) Premium Flexmaster umm Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, FlexMaster UMM Linux machine is up but not able to access web interface of the FM. What are all the things that need to be checked on the Linux machine? After ensuring HW and OS requirements are met, please follow below troubleshooting steps in case of FM GUI inaccessibility. 1. Check whether the IP address / URL of the FM is able to ping from the network. This gives us the conclusion about the IP connectivity and also the DNS. 2. Make sure any competing web server such as Apache is NOT running on the specific Linux machine. Web server status can be checked using the following CLI command options. <ul><li>service httpd status</li><li>/etc/init.d/https status</li><li>status httpd</li></ul> If you noticed it as running, permanently stop it using the "chkconfig httpd off" command. You can also uninstall it completely by using the "yum remove httpd" command. 3. Make sure whether MySQL is running properly or not using the following commands. <ul><li>service mysqld status</li><li>/etc/init.d/mysqld status</li><li>mysqladmin -u root -p status</li></ul> 4. Check whether Java is installed and running or not. To check whether Java version which is installed or not, use the following command. <ul><li>java -version</li></ul> To check whether the Java related processes is running or not, we can use the following command. <ul><li>ps -A | grep java</li></ul> Using ps command we can check both web server and MySQL related processes. ps -A will show all of the processes currently running on the Linux server. 5. Check the iptables service which is a built-in firewall for Linux. Disable this service or modify it to accommodate the FM. Following are two available options to disable the iptables service. <ul><li>service iptables disable</li><li>chkconfig iptables off</li></ul> 6. Make sure SELinux is disabled or modified to let FM operate as expected. You can check its status using the "sestatus" command. You can temporarily disable it just for verifying FM using the following command: <ul><li>echo 0 > /selinux/enforce</li></ul> If you prefer to permanently disable it, apply the following change. <ul><li>Under /etc/selinux/config change SELINUX=enforcing to SELINUX=disabled</li></ul>

This article explains the factors to check if FM GUI isn't accessible after what seemed like a successful install.

2019-07-08T01:19:21-0700 2019-07-08T06:00:12-0700 https://support.ruckuswireless.com/articles/000007760 2019-07-08T01:16:22-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3302 knowledge_article_3302 2018-04-16T09:49:27-0700 000007760 Validated (External) Public Scg200;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Installation Configuration, Installation, SCG200, virtual SmartCell Gateway, SZ100 What are Russia country code (Low Power) RF settings? From the SZ release 3.6.1, support for a new country code setting for Russia is added (Russia_Low_Power), using a low-power RF output mode for low-range applications. The new country code RL can be used only with outdoor APs and has the settings of EIRP ? 25 mW for 5725 – 5875 MHz. Available channel with RL country code: <ul><li>149 (5745 MHz) HT20 HT40 HT80</li><li>153 (5765 MHz) HT20 HT40 HT80</li><li>157 (5785 MHz) HT20 HT40 HT80</li><li>161 (5805 MHz) HT20 HT40 HT80</li><li>165 (5825 MHz) HT20 HT40</li><li>169 (5845 MHz) HT20 HT40</li><li>173 (5865 MHz) HT20</li></ul>

Since SZ 3.6.1 we have a new country code Russia Low Power.

2019-07-08T01:16:22-0700 2019-07-08T06:00:12-0700 https://support.ruckuswireless.com/articles/000004152 2019-07-08T01:53:22-0700 monthly 0.8 admin,premium knowledge_article_1628 knowledge_article_1628 2015-03-10T14:01:35-0700 000004152 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can I tell a normal client roam from something I should care about? Since ZoneFlex 9.7, our AP syslog messages have included 802.11 association/disassociation, showing clients who roam from an AP (received STA-DISASSOC reason code = 8) and our clean-up procedure of then sending a (STA-DISASSOC reason code = 1). This is normal client activity logging and messages are not indicative of any problems of and by themselves.

How can I tell a normal client roam from something I should care about?

2019-07-08T01:53:22-0700 2019-07-08T06:00:09-0700 https://support.ruckuswireless.com/articles/000003128 2019-07-08T01:58:32-0700 monthly 0.8 admin,premium knowledge_article_1469 knowledge_article_1469 2014-12-01T07:40:50-0800 000003128 Validated (External) Premium Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, ZoneDirector, SmartCell Gateway How to set notifications for password expiration? Inform the Captive Portal users that AD password expiration policy is enabled, and this will force them to change their passwords.

When Authenticating to Active Directory for Captive Portal user login, I want to have my AD passwords expire on a set value of X days, and then have the CP users get notified of this as they would be notified in an normal network domain access topology.

2019-07-08T01:58:32-0700 2019-07-08T06:00:07-0700 https://support.ruckuswireless.com/articles/000002380 2019-07-07T19:42:25-0700 monthly 0.8 admin,premium knowledge_article_3816 knowledge_article_3816 2013-12-02T07:16:45-0800 000002380 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector What is the reason for guest pass error that displays wrong language and time Below is the Time and Language error seen on a Guest-Pass even when different language options were selected on the Zone director while creating Guest Pass. Description of the Error : Using English the output is in French and while using French the output is in French. Work around: Please change the settings of the long date in Windows 7 configuration screen, these settings can be found on Control Panel >> Clock,Language and Region >> Change the date,time or number format >> Formats >> Long date >> dd MMMM,yyyy (See below for example) <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053JE&feoid=00N50000002Cf3M&refid=0EM50000000LOVI"></img>

This article describes the possible reason for a time and language error on Guest Pass

2019-07-07T19:42:25-0700 2019-07-08T00:00:30-0700 https://support.ruckuswireless.com/articles/000002498 2019-07-07T19:21:36-0700 monthly 0.8 admin,premium knowledge_article_3817 knowledge_article_3817 2014-02-05T04:13:58-0800 000002498 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why did the APs disconnect from ZD after enabling SmartRedundancy - Before enabling SR, set AP management VLAN to 'keep AP settings'. - If it was not done and APs are now disconnected, the best way is to allow this VLAN on their uplinks. - If this is not an option, we need to factory reset the AP since they need to be erased of their VLAN settings.

This article describes one of the (very likely) reasons why a set of APs are disconnected after enabling SmartRedundancy in two ZoneDirectors

2019-07-07T19:21:36-0700 2019-07-08T00:00:30-0700 https://support.ruckuswireless.com/articles/000001906 2019-07-07T19:50:32-0700 monthly 0.8 admin,premium knowledge_article_2555 knowledge_article_2555 2013-04-01T13:42:40-0700 000001906 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, ZoneDirector What is MAC-spoofing AP Detected alarm message, why is its triggered and why can it not be stopped "MAC-spoofing AP Detected" alarm is triggered on ZoneDirector when there is an AP connected in the network that is spoofing the MAC address of the connected AP. Ruckus AP automatically begins sending broadcast de-authentication messages spoofing the rogue’s BSSID (MAC) to prevent wireless clients from connecting to the malicious rogue AP (if this option is selected). You can disable disable this alarm event by unchecking "MAC-spoofing AP Detected" box. ZD>> configure>>alarm settings >> Alarm Events >> uncheck "MAC-spoofing AP Detected" Please find the attached screenshot for your reference. <img alt="User-added image" height="243" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053JY&feoid=00N50000002Cf3M&refid=0EM50000000LH6V" width="500"></img>

This article describes the reason for MAC-spoofing APs Detected alarm message and shares related details

2019-07-07T19:50:32-0700 2019-07-08T00:00:29-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDYYCA4?attachment_index=0 2019-07-08T00:00:29-0700 monthly admin,premium knowledge_article_2555 knowledge_article_2555_attachment_1 MAC-spoofing AP Detected.jpg 152843.0 image/jpeg https://support.ruckuswireless.com/articles/000007874 2019-07-07T19:56:34-0700 monthly 0.8 admin,premium knowledge_article_3315 knowledge_article_3315 2018-05-29T10:40:17-0700 000007874 Validated (External) Premium Zoneflex indoor Performance;Installation;Troubleshooting;Known issues and workarounds Performance, Installation, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor Why do I see lower coverage with R710s? Use 802.1at PoE switches to power R710 model APs. If using 802.1af PoE, the R710 will drop down power significantly. R710 Power with 802.3af • 2.4GHz: 2x4, 19dBm per chain (down from 28dbm) • 5GHz: 4x4, 20dBm per chain (down from 28dbm) To compare, 7363 has 26 dbm and 24 dbm for 2.4 GHz and 5 GHz respectively. <div id="cke_pastebin"> </div>

This article tells the requirement by R710 for 802.3at power better coverage

2019-07-07T19:56:34-0700 2019-07-08T00:00:28-0700 https://support.ruckuswireless.com/articles/000007772 2019-07-07T20:20:37-0700 monthly 0.8 admin,premium knowledge_article_3305 knowledge_article_3305 2018-04-30T14:26:17-0700 000007772 Validated (External) Premium Unleashed;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway Do any Ruckus APs support DHCP/NAT feature? Ruckus APs can provide DHCP/NAT features in Solo AP, wired Unleashed Master, and SZ 3.5+ zone Access Points. See also: KBA-6282: What is Gateway Mode in Unleashed https://support.ruckuswireless.com/answers/000006282 or KBA-1479: How to configure Local Subnet on Standalone AP https://support.ruckuswireless.com/answers/000001479 and Ruckus Outdoor AP 106.x User Guide: that includes many outdoor models. <a href="https://support.ruckuswireless.com/documents/1814-ruckus-outdoor-ap-106-0-user-guide" target="_blank">https://support.ruckuswireless.com/documents/1814-ruckus-outdoor-ap-106-0-user-guide</a> or SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1 https://support.ruckuswireless.com/documents/1828-smartzone-3-5-1-mr1-administrator-guide-sz100-vsz-e

Ruckus APs can provide DHCP/NAT features in Solo AP, wired Unleashed Master, and SZ 3.5+ zone Access Points.

2019-07-07T20:20:37-0700 2019-07-08T00:00:25-0700 https://support.ruckuswireless.com/articles/000003425 2019-07-07T20:24:31-0700 monthly 0.8 admin,premium knowledge_article_1470 knowledge_article_1470 2014-12-01T07:51:19-0800 000003425 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector Why does the Guest Pass fail to print using Internet Explorer 7 and 8 Upgrade or use other Browser See KB for ZERO IT using Guest Pass https://support.ruckuswireless.com/answers/000002842

Customer wants to use IE 7 or IE 8 to print out Guest Pass, but it does not give the option to print the created GP - so this fails to work.

2019-07-07T20:24:31-0700 2019-07-08T00:00:24-0700 https://support.ruckuswireless.com/articles/000005651 2019-07-07T21:17:50-0700 monthly 0.8 admin,premium knowledge_article_2300 knowledge_article_2300 2016-04-01T16:02:57-0700 000005651 Validated (External) Premium R710;Ruckus R710 Performance;Configuration;Installation;Known issues and workarounds Performance, Configuration, Installation, Known Issues and Workarounds, R710 How can I configure HP Procurve switch to provide PoE+ power for R710 model APs? <table border="0" cellpadding="0" style="width: 100.0%;" width="100%"><tbody><tr><td colspan="1" rowspan="1" style="">This method has been tested on the HP Procurve 3500yl (J9310A) PoE+ switch. It may work on other HP Procurve models. First, there are settings that need to be done in the ZoneDirector to enable LLDP. If you are using the APs as standalone devices, you may need to enable LLDP on each AP. 1. Connect to the ZoneDirector using Telnet or SSH. 2. Enter the following commands: <pre> enable config ap-group "System Default" LLDP enable exit</pre> (REPEAT the ap-group part for each ap group you have setup in ZoneDirector) <pre> exit</pre> 3. Connect to the Procurve 3500yl (J9310A) switch using Telnet or SSH. 4. Check the switch firmware. It should be K.16.01.0004 or newer. If it is older, update the firmware on the switch before continuing. 5. Enter the following command to check the firmware version: <pre> show version</pre> 6. Determine the ports you have the R710 APs connected to. (For the article, ports 1-10 are connected to Ruckus R710 APs) Use this command to 'see' the PoE devices on your switch: <pre> show power-over-ethernet brief</pre> 7. Enter the following commands: <pre> config lldp run interface 1 poe-value 25 poe-lldp-detect enable exit</pre> (REPEAT for each interface that has a Ruckus R710 AP connected) <pre> lldp config 1-10 medTlvEnable capabilities &nbs</pre> <pre> p; lldp config 1-10 medTlvEnable network_policy lldp config 1-10 medTlvEnable poe lldp config 1-10 dot3TlvEnable poeplus_config exit write memory</pre> 8. Reset power to APs (this will disconnect anyone using WiFi momentarily) <pre> config interface 1 no power power</pre> <pre> exit</pre> (REPEAT for each interface that has a Ruckus R710 AP connected) After some time has passed, check the ZoneDirector -> Monitor -> Access Points -> click on one of the R710 APs and see that it shows 802.3at PoE+ for "Power Consumption Mode" </td></tr></tbody></table>

Enabling LLDP can help HP Procurve switches provide PoE+ to R710 model APs.

2019-07-07T21:17:50-0700 2019-07-08T00:00:20-0700 https://support.ruckuswireless.com/articles/000004818 2019-07-07T21:20:28-0700 monthly 0.8 admin,premium knowledge_article_2006 knowledge_article_2006 2015-07-07T02:02:53-0700 000004818 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway How do I retrieve the log files from the SCG via CLI? <div class="page" title="Page 401"> <div class="layoutArea"> <div class="column"> To export the local system logs to external FTP server, use the following command: </div> </div> <div class="layoutArea"> <div class="column"> ruckus(debug)# export log <ftp-url> <ftp-url> app <name> Syntax Description This command uses the following syntax: <ftp-url> - FTP URL, Format: ftp://<username>:<password>@<ftp-host>[/<dir- path>]] app: Application <name>: Application name Default This command has no default settings. Command Mode Debug Example <pre> ruckus(debug)# export log ftp://username:password@172.20.0.100 app radiusproxy </pre> </div> </div> </div>

This procedure explains how you can upload the log files from the SCG to an FTP server

2019-07-07T21:20:28-0700 2019-07-08T00:00:19-0700 https://support.ruckuswireless.com/articles/000004195 2019-07-07T21:43:45-0700 monthly 0.8 admin,premium knowledge_article_1636 knowledge_article_1636 2015-03-16T11:20:51-0700 000004195 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How to determine if Mesh is enabled on ZD from the debug file If you have ZD WebUI access, from Configure/Mesh page, the Mesh Settings field shows if Mesh is Enabled. If you do not have ZD WebUI access, but have a ZD debug info file, customers can use the Support Portal Log Analyzer to determine if APs are shown as Root APs(), Mesh APs(), or Other APs(). If all APs are shown as Other APs(), you know that Mesh is not enabled on the ZD the debug came from. <img alt="Support Portal Log Analyzer Tool" height="432" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Le&feoid=00N50000002Cf3M&refid=0EM50000000LgHz" width="500"></img> <img alt="Uploaded ZD debug files" height="136" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Le&feoid=00N50000002Cf3M&refid=0EM50000000LgI4" width="500"></img> <img alt="ZD with Root and Mesh APs" height="443" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Le&feoid=00N50000002Cf3M&refid=0EM50000000LgI9" width="500"></img> <img alt="ZD with only Other APs(), so no Mesh enabled" height="383" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Le&feoid=00N50000002Cf3M&refid=0EM50000000LgIE" width="500"></img>

You can use the ZD WebUI or Support Portal Log Analyzer to determine if Mesh is enabled

2019-07-07T21:43:45-0700 2019-07-08T00:00:17-0700 https://support.ruckuswireless.com/articles/000005668 2019-07-07T22:54:34-0700 monthly 0.8 admin,premium knowledge_article_2302 knowledge_article_2302 2016-04-05T14:44:15-0700 000005668 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;System network management Firmware, System Network Management, SmartCell Gateway, virtual SmartCell Gateway How does Time synchronization occur in vSZ Clusters? Do vSZ controllers each synch with NTP? Virtual SmartZone Cluster NTP synchronization: <ul><li>Leader is synchronizing its time with the configured NTP server,</li><li>Followers are synchronizing with Leader</li><li>APs are synchronizing with vSZ they get managed from</li></ul>

NTP is used by cluster leader, followers sync with leader, APs sync with vSZ that manages them.

2019-07-07T22:54:34-0700 2019-07-08T00:00:13-0700 https://support.ruckuswireless.com/articles/000002888 2019-07-07T23:07:49-0700 monthly 0.8 admin,premium knowledge_article_898 knowledge_article_898 2014-04-08T05:03:20-0700 000002888 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell ap;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP Why does Ekahau not show Ruckus AP Name

In Ekahau there is a white oblong window for each AP discovered during a site survey - customers like this to show as the AP number relating to each Ruckus AP deployed so they look at large numbers of discovered APs and be able to know which one is which by name and location In Ekahau there is a white oblong window for each AP discovered during a site survey, we would like this to show as the AP number relating to each Ruckus AP deployed so we can look at large numbers of discovered APs and be able to know which one is which. When Ekahau discovers APs, it finds the MAC OUI and identifies the vendor - but it doesn't provide the AP name

2019-07-07T23:07:49-0700 2019-07-08T00:00:10-0700 https://support.ruckuswireless.com/articles/000001840 2019-07-07T23:18:16-0700 monthly 0.8 admin,premium knowledge_article_3814 knowledge_article_3814 2013-03-15T11:56:02-0700 000001840 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor Need to assign a static IP address In the standalone AP GUI, please go to: Configuration -> Internet -> Internet connection settings -> Assign the static IP with the appropriate VLAN

Assigning static IP address on standalone AP GUI

2019-07-07T23:18:16-0700 2019-07-08T00:00:08-0700 https://support.ruckuswireless.com/articles/000002019 2019-07-07T23:20:46-0700 monthly 0.8 admin,premium knowledge_article_3813 knowledge_article_3813 2013-05-06T17:09:52-0700 000002019 Validated (External) Premium Zonedirector;Flexmaster umm;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector, FlexMaster UMM How-to-configure-and-push-the-configuration-template-from-Flexmaster-to-the-Zonedirector? This document explains how to configure the configuration templates across the Flexmaster along with the process of creating backup and restoring backup to the Zonedirector.

Configuring and pushing the configuration template from Flexmaster to the Zonedirector

2019-07-07T23:20:46-0700 2019-07-08T00:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDhuCAG?attachment_index=0 2019-07-08T00:00:07-0700 monthly admin,premium knowledge_article_3813 knowledge_article_3813_attachment_1 FM configuration template.pdf 54006.0 application/pdf https://support.ruckuswireless.com/articles/000009509 2019-07-02T18:34:09-0700 monthly 0.8 admin,premium knowledge_article_3810 knowledge_article_3810 2019-07-02T18:34:09-0700 000009509 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, Cloudpath Why HTTPS server name in Cloudpath is reverting back to the previously configured name? When changing the HTTPs server name, we need to use the below command to change to a new name: config https-servername "server name.domain" Eg: config https-servername abc.company.net However, if you are trying to change the address from 123.company.com to abc.company.com, then it will reverts back to the previous configured name (123.company.com) once the HTTPS service restarts. The reason is, it will try to match the Server HOST name configured. If you are trying to change the HTTPS server name, first change the HOST name and then change the HTTPs Server name as below. config hostname abc.company.net config https-servername "abc.company.net" Now, the HTTPS server address will not change after the service restart. Below is sample behavior of a setup when trying to change the HTTPS server name. Before changing the HTTPS server name. <img alt="User-added image" height="315" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Ge&feoid=00N50000002Cf3M&refid=0EM2J000000uf3Q" width="500"></img> After Changing the Server name: <img alt="User-added image" height="270" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Ge&feoid=00N50000002Cf3M&refid=0EM2J000000uf3V" width="500"></img> After changing the HTTPS Server name and restarting the services, the server name remains unchanged. Hence, change the Hostname before changing the HTTPS Server Name. <img alt="User-added image" height="286" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000053Ge&feoid=00N50000002Cf3M&refid=0EM2J000000uf3a" width="500"></img> Note: You need to republish the Workflow if it was created with before changing the hostname. A new workflow will have a different URL with the new host name. Update the redirection URL configured on the Hotspot config.

This article will explain the procedure for changing the HTTPS server name of Cloud Path server.

2019-07-02T18:34:09-0700 2019-07-03T00:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004zCoSAI?attachment_index=0 2019-07-03T00:00:08-0700 monthly admin,premium knowledge_article_3810 knowledge_article_3810_attachment_1 Before Changing.jpg 123659.0 image/jpeg http://support.ruckuswireless.com/article_attachments/kA22J0000004zCoSAI?attachment_index=1 2019-07-03T00:00:08-0700 monthly admin,premium knowledge_article_3810 knowledge_article_3810_attachment_1 After changing.jpg 94712.0 image/jpeg http://support.ruckuswireless.com/article_attachments/kA22J0000004zCoSAI?attachment_index=2 2019-07-03T00:00:08-0700 monthly admin,premium knowledge_article_3810 knowledge_article_3810_attachment_1 After service restart.jpg 108891.0 image/jpeg https://support.ruckuswireless.com/articles/000005672 2016-05-04T10:14:47-0700 monthly 0.8 admin,premium knowledge_article_2306 knowledge_article_2306 2016-04-13T11:47:34-0700 000005672 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, Unleashed What is the timing involved for a Master AP to failover to the Standby Master AP? If the Unleashed Master AP loses connectivity to the network, the Standby Master AP will take over after waiting a sufficient amount of time (longer than a Master AP reboot). The Master and Standby Master AP exchange heartbeats, sent every 6 seconds. If 12 heartbeats are not seen by the Standby Master AP, it begins to take over. Once the Standby Master AP takes over, it will take another minute or two, before the network operations are returned to normal. Unleashed Mesh APs cannot take on either Master/Standby Master AP role. ------------------------------------------------- Note: Unleashed 200.1 - If both Master AP and Standby Master AP become disconnected from the network, other Member APs do NOT take over the roles and go into recovery mode. The 200.2 (expected) fix will incorporate a Virtual IP (VIP) known to all Member APs, to allow for a lowest MAC address selection of new Master/Standby Master AP, if both should become disconnected from the network.

Timing involved for a Master AP to failover to the Standby Master AP.

2016-05-04T10:14:47-0700 2019-07-02T05:02:49-0700 https://support.ruckuswireless.com/articles/000001599 2014-01-11T14:11:02-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_214 knowledge_article_214 2013-02-08T07:05:35-0800 000001599 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware Firmware, ZoneDirector Which Ruckus firmware version supports Hotspot 2.0 Hotspot 2.0 is supported by the firmware version 9.5.0.0.156. Zone Director now supports Wi-Fi CERTIFIED Passpoint™ hotspots in addition to legacy hotspot services. <div> Hotspot 2.0 allows Wi-Fi CERTIFIED Passpoint™ devices to easily find, select and connect automatically in a security protected fashion. </div>

2014-01-11T14:11:02-0800 2019-07-02T03:40:10-0700 https://support.ruckuswireless.com/articles/000009505 2019-07-01T02:57:35-0700 monthly 0.8 admin,premium knowledge_article_3805 knowledge_article_3805 2019-07-01T02:57:35-0700 000009505 Validated (External) Premium Ruckus icx switches Configuration;Security;System network management;Known issues and workarounds Configuration, Security, System Network Management, Known Issues and Workarounds, Ruckus ICX Switches How do I configure the equivalent of dual-mode since the feature is now deprecated in 8090? Below is a link to an official Ruckus video (4 minutes long) on YouTube, explaining why Dual-Mode is deprecated from the very-latest firmware versions, and how to configure the latest firmware to configure the equivalent tagging/untagging behaviour. The video contains a use-case and live-demonstration on a router: <a href="https://www.youtube.com/watch?v=SAIZaiq1fvY&t=68s" target="_blank">https://www.youtube.com/watch?v=SAIZaiq1fvY&t=68s</a>

Dual-Mode is no longer used in the latest software

2019-07-01T02:57:35-0700 2019-07-01T06:00:08-0700 https://support.ruckuswireless.com/articles/000002397 2019-06-30T16:03:48-0700 monthly 0.8 admin,premium knowledge_article_3804 knowledge_article_3804 2013-12-01T08:13:59-0800 000002397 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway What is Noise floor and Airtime Utilization? Noise is any unwanted signal that potentially degrades performance of the wireless network. Noise floor is a measure of intensity of this noise. Higher noise floor at the AP weakens the signal received from a client. It will also limit the range for client communication. With high noise floor you will see weak RSSI value for MAP and clients even though the distance may not be high. We can try changing channel to avoid high noise floor values. Air Time Utilization measures business of the environment surrounding a AP. If the medium is busy it gives a limited opportunity to transmit and receive data. It usually results in slowness for data transfer. Try changing channels to see if it helps to avoid busy channels.

Defines the Noise floor and Airtime Utilization

2019-06-30T16:03:48-0700 2019-06-30T18:00:22-0700 https://support.ruckuswireless.com/articles/000005022 2019-06-30T15:17:54-0700 monthly 0.8 admin,premium knowledge_article_2106 knowledge_article_2106 2015-08-17T16:08:29-0700 000005022 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway Will application log level settings from the original controller get transferred when I restore a backup configuration in a different SZ/SCG vSZ/vSCG Leaving Application log settings in Debug level is not advised as this can over load the logging system Apply log levels above <warning> or <error> only when diagnosing an issue Check log level settings before saving a configuration backup to ensure any bebug level settings are not propagated to new system unless this is the intention.

SZ/SCG configuration backup also includes/will retain Application Logs level settings

2019-06-30T15:17:54-0700 2019-06-30T18:00:19-0700 https://support.ruckuswireless.com/articles/000005232 2019-06-30T15:26:50-0700 monthly 0.8 admin,premium knowledge_article_2193 knowledge_article_2193 2015-10-29T11:30:52-0700 000005232 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway How to configure daylight saving option on vSCG?

This article gives information on how to configure daylight saving on vSCG when the WLAN schedule is enabled.

2019-06-30T15:26:50-0700 2019-06-30T18:00:18-0700 https://support.ruckuswireless.com/articles/000004294 2019-06-30T16:33:01-0700 monthly 0.8 admin,premium knowledge_article_1870 knowledge_article_1870 2015-05-15T11:52:30-0700 000004294 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Installation Firmware, Installation, SmartCell Gateway, virtual SmartCell Gateway How do I upgrade my SCG200 from 2.6 to 3.0.3?

Can't upgrade SCG beyond 2.6 without factory default

2019-06-30T16:33:01-0700 2019-06-30T18:00:14-0700 https://support.ruckuswireless.com/articles/000006225 2019-06-30T16:39:20-0700 monthly 0.8 admin,premium knowledge_article_2570 knowledge_article_2570 2017-01-20T16:48:05-0800 000006225 Validated (External) Premium Unleashed;Zonedirector;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, Unleashed, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway Why are Windows clients not getting IP address and end up getting APIPA 169.254.x.x Update/reinstall Wifi interface drivers in the Laptop

Windows clients are not getting IP address, ends up getting APIPA 169.254.x.x

2019-06-30T16:39:20-0700 2019-06-30T18:00:13-0700 https://support.ruckuswireless.com/articles/000001177 2019-06-30T16:42:55-0700 monthly 0.8 admin,premium knowledge_article_24 knowledge_article_24 2012-03-21T12:00:40-0700 000001177 Validated (External) Premium Flexmaster umm Performance;Configuration;Installation;System network management;Troubleshooting Performance, Configuration, Installation, System Network Management, Troubleshooting, FlexMaster UMM APs are up in ZD but they show down in FM after a network re-bounce. What caused this My network went down and came up. Now I see all my APs as connected on the ZD Dashboard. But the FM Dashboard still shows all APs as down. What is going on here? FM actively polls all managed devices including ZDs every 5 minutes. If there are a lot of devices under FM management it can take up to 10 minutes for the periodic polling to occur. Until it gets a response to the poll from the ZD, FM doesn’t know status of the APs. Because of this, there is lag of 5-10 minutes between ZD data and FM data.

My network went down and came up. Now I see all my APs as connected on the ZD Dashboard. But the FM Dashboard still shows all APs as down. What is going on here?

2019-06-30T16:42:55-0700 2019-06-30T18:00:12-0700 https://support.ruckuswireless.com/articles/000003294 2019-06-30T16:49:39-0700 monthly 0.8 admin,premium knowledge_article_3487 knowledge_article_3487 2014-09-02T09:05:37-0700 000003294 Validated (External) Premium Virtual smartcell gateway Installation;Troubleshooting;Support license activation Installation, Troubleshooting, Support License Activation, virtual SmartCell Gateway Why did I lose my controller rights and AP licenses after removing and creating a new instance of vSZ Create an RMA for the old Serial Number, and provide the new Serial Number. <div id="cke_pastebin" style="width: 1px; height: 1px;"> </div>

Customer lost their existing controller rights and AP licenses after creating a new vSZ instance.

2019-06-30T16:49:39-0700 2019-06-30T18:00:11-0700 https://support.ruckuswireless.com/articles/000004534 2019-06-30T17:19:53-0700 monthly 0.8 admin,premium knowledge_article_1846 knowledge_article_1846 2015-05-10T23:31:23-0700 000004534 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How do I remove an AP double entry on a zone? - See Workaround <ol></ol>

After restoring a configuration backup on an SCG 2.5.1.0.182, one or more APs are shown twice in an AP zone. This article describes how to rectify this double entry.

2019-06-30T17:19:53-0700 2019-06-30T18:00:10-0700 https://support.ruckuswireless.com/articles/000003383 2019-06-30T17:28:47-0700 monthly 0.8 admin,premium knowledge_article_1570 knowledge_article_1570 2015-01-23T13:35:33-0800 000003383 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;System network management;Troubleshooting;Known issues and workarounds Configuration, Installation, System Network Management, Troubleshooting, Known Issues and Workarounds, ZoneDirector How to get back into the ZoneDirector after misconfiguration of ZD Access VLAN ID Steps to recover the ZoneDirector 1. Access ZoneDirector via serial port and execute following commands. ruckus> enable ruckus# config ruckus(config)# system ruckus(config-sys)# mgmt-if ruckus(config-sys-mgmt-if)#vlan <VLAN ID> Also make the appropriate changes on the default interface by accessing (config-system-interface)#prompt Requirements for serial access: ~ Serial cable (Both ends DB9 connector) ~ Use Serial application like HyperTerm, TeraTerm ~ Remember Ruckus uses 115200 baud, 8 databits, no parity, 1 stopbit, no flowcontrol on ZoneDirector console. 2. If the above option is not possible, assign the appropriate VLAN on the uplink port of the ZD, so as to allow traffic from the ZD. 3. (Only if no other options work) Hard Reset the ZoneDirector and upload the backup configuration on the ZoneDirector (If the backup is saved earlier to the changes)

Lost access to ZoneDirector due to misconfiguration in the ZD Access VLAN. This article describes the steps to regain access to it.

2019-06-30T17:28:47-0700 2019-06-30T18:00:06-0700 https://support.ruckuswireless.com/articles/000009493 2019-06-28T14:05:03-0700 monthly 0.8 admin,premium knowledge_article_3803 knowledge_article_3803 2019-06-28T14:05:03-0700 000009493 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneDirector 7363 Rebooting with Kernel Panic : epc : 83bd4e90 ag7100_poll+0x9dc/0xaf4 [ag7100_mod] Uplink switch Ethernet ports must be set to 100Mbps auto-negotiation or 1000Mbps auto-negotiation.

7363 Rebooting with Kernel Panic

2019-06-28T14:05:03-0700 2019-06-28T18:00:08-0700 https://support.ruckuswireless.com/articles/000009483 2019-06-28T01:51:23-0700 monthly 0.8 admin,premium knowledge_article_3798 knowledge_article_3798 2019-06-28T01:51:23-0700 000009483 Validated (External) Premium Ruckus icx switches Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches Why are there no events in the database or SNMP traps sent, when a switch goes offline? Engineering has created a KSP in ER-7387 to fix this issue. KSP needs to be installed in all nodes and service restart is required after installation.

In the vSZ/SZ you can configure a trap to be send when a switch goes offline, a bug was found in the detection of the switch offline event module causing also the SNMP trap not being send.

2019-06-28T01:51:23-0700 2019-06-28T06:00:06-0700 https://support.ruckuswireless.com/articles/000009366 2019-06-27T10:50:37-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3761 knowledge_article_3761 2019-06-11T11:01:28-0700 000009366 Validated (External) Public Ruckus cloud lte Configuration;Installation;Troubleshooting;Known issues and workarounds;Registration Configuration, Installation, Troubleshooting, Known Issues and Workarounds, Registration, Ruckus Cloud LTE Why does my Windows 7 client not connect with my CBRS Infomark IML-C4510W via USB? A Windows 7 (W7) client which has not previously connected to an Infomark IML-C4510W will not connect automatically and will not be able to find the driver from the internet and thus not connect via a USB port to the W7 client. A Windows 10 client does automatically auto-detect the Infomark and this procedure is not needed. Solution is to download the driver and run the .exe depending on whether the client is 32 or 64 bit (both options are available here). For a 64 bit W7 client, load/execute the dpinst64.exe file attached by double clicking. For a 32 bit W7 client, load the dpinst32.exe file. Attaching 32 and 64 driver files below.

A windows 7 client will not work if one connects an Infomark to a Windows 7 client

2019-06-27T10:50:37-0700 2019-06-27T12:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000000OOiSAM?attachment_index=0 2019-06-27T12:00:07-0700 monthly admin,premium,warranty,guest knowledge_article_3761 knowledge_article_3761_attachment_1 dpinst32.exe 546304.0 application/octet-stream http://support.ruckuswireless.com/article_attachments/kA22J0000000OOiSAM?attachment_index=1 2019-06-27T12:00:07-0700 monthly admin,premium,warranty,guest knowledge_article_3761 knowledge_article_3761_attachment_1 dpinst64.exe 671744.0 application/octet-stream https://support.ruckuswireless.com/articles/000006672 2018-09-27T18:30:00-0700 monthly 0.8 admin,premium knowledge_article_2919 knowledge_article_2919 2017-12-12T15:03:17-0800 000006672 Validated (External) Premium Icx 6430;Icx 6450;Ruckus ICX 6430 and 6450 Campus Switches Configuration;Firmware;System network management Configuration, Firmware, System Network Management, ICX 6430, ICX 6450 How to upgrade an ICX 6430 or ICX 6450 stack from 07.4.00 to 08.0.10 version or later? First upgrade the desired primary or secondary flash image to the new code version and reboot the stack onto the new code version before upgrading the bootrom image. Failure to reboot onto the new code version before upgrading the bootrom image could result in mismatched bootrom images for the stack member units, which will prevent the stack from successfully forming after the upgrade. If the bootrom image was upgraded first and/or there is a bootrom mismatch on the stack, the following alert may be received: ................................................................................................ SYNCING IMAGE TO FLASH. DO NOT SWITCH OVER OR POWER DOWN THE UNIT... .................. WARNING: Possible failure on one of the member units while downloading the image. Images may not be in sync after reload. In that case, perform a flash image upgrade to the 80.0.0 version, reload the stack, and then the bootrom image will be uploaded to the rest of the stack units. Steps: 1. Upgrade the desired primary or secondary flash image to the new code version and reboot the stack onto the new code version: copy tftp flash <tftp-ip-addr> FCXR08030k.bin <primary/secondary> write mem boot sys flash <primary/secondary> or reload / From privilege mode 2. Proceed to upgrade the boot code: copy tftp flash <tftp-ip-addr> kxz10105.bin boot write mem boot sys flash <primary/secondary> or reload / From privilege mode

How to properly upgrade an ICX 6430 or ICX 6450 stack from 07.4.00 to 08.0.10 version or later?

2018-09-27T18:30:00-0700 2019-06-26T02:51:05-0700 https://support.ruckuswireless.com/articles/000007216 2017-12-12T15:45:07-0800 monthly 0.8 admin,premium knowledge_article_2846 knowledge_article_2846 2017-12-12T15:45:07-0800 000007216 Validated (External) Premium Ruckus icx switches System network management System Network Management, Ruckus ICX Switches ICX SERIES USB FLASH DISK OPERATIONS <table class="sectionContent" style="width: 1003.7px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 828.14px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">YouTube video: <a href="https://www.youtube.com/watch?v=VXt-Px1XpS8&feature=youtu.be" style="color: rgb(1, 91, 167); text-decoration: underline;" target="_blank">https://www.youtube.com/watch?v=VXt-Px1XpS8&feature=youtu.be</a></div> </td></tr></tbody></table> </td></tr></tbody></table>

BROCADE CAMPUS FEATURE EXPLAINER SERIES

2017-12-12T15:45:07-0800 2019-06-26T01:48:46-0700 https://support.ruckuswireless.com/articles/000006006 2019-01-26T18:53:34-0800 monthly 0.8 admin,premium knowledge_article_2410 knowledge_article_2410 2016-08-19T14:11:01-0700 000006006 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Firmware Performance, Configuration, Firmware, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor If using ToS markings on WLAN tunnel from APs to ZD, does it apply to all tunneled WLANs? Yes, for ZoneDirector tunneled WLAN traffic, this is a system wide setting. There is no ability to specify a WLAN in the configuration, so all tunneled WLANs are marked with the same ToS value. <img alt="User-added image" height="146" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Km&feoid=00N50000002Cf3M&refid=0EM50000000Merm" width="564"></img>

ToS values on WLAN tunnel between APs and ZD apply to ALL tunneled WLANs.

2019-01-26T18:53:34-0800 2019-06-25T06:42:19-0700 https://support.ruckuswireless.com/articles/000003751 2019-01-27T15:05:15-0800 monthly 0.8 admin,premium knowledge_article_1481 knowledge_article_1481 2014-12-05T05:40:05-0800 000003751 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector What takes the priority when session time-out attribute is configred on both ZD and Radius Server? The Radius Server will be given Priority when session timeout attribute is configured on both Radius and ZoneDirector. Note: If you want the Zone Director attribute to give priority then disable the attribute in Radius Server session timeout.

What takes the priority when session time-out attribute is configured on both Zone Director and Radius server

2019-01-27T15:05:15-0800 2019-06-25T02:29:32-0700 https://support.ruckuswireless.com/articles/000009467 2019-06-24T14:01:37-0700 monthly 0.8 admin,premium knowledge_article_3792 knowledge_article_3792 2019-06-24T14:01:37-0700 000009467 Validated (External) Premium Ruckus icx switches Configuration;Firmware Configuration, Firmware, Ruckus ICX Switches Can I use ICX MAC based dynamic VLAN assignment without RADIUS? We determined the correct syntax to perform the dynamic VLAN assignment to Intercom devices whose MAC addresses match b4fb.0000.0000 and are connected to Eth ports. ! vlan 1 name DEFAULT-VLAN by port no untagged ethe 1/1/1 to 1/1/24 ! vlan 15 by port tagged ethe 1/2/1 ! vlan 254 by port untagged ethe 1/2/1 ! ! authentication auth-default-vlan 254 mac-authentication enable mac-authentication enable ethe 1/1/1 to 1/1/24 ! ! ip address 10.254.110.11 255.255.0.0 dynamic ip default-gateway 10.254.0.1 dynamic ! mac filter 1 permit any any mac filter 15 permit b4fb.0000.0000 ffff.0000.0000 any ! ! interface ethernet 1/1/1 auth-filter 15 15 auth-filter 1 ! interface ethernet 1/1/2 auth-filter 1 auth-filter 15 15 !

We can use MAC filtering with MAC-authentication to assign dynamic VLANs without RADIUS.

2019-06-24T14:01:37-0700 2019-06-24T18:00:08-0700 https://support.ruckuswireless.com/articles/000001221 2019-06-24T00:18:27-0700 monthly 0.8 admin,premium knowledge_article_2136 knowledge_article_2136 2012-03-21T12:01:11-0700 000001221 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector How to enable Network Discovery in Windows 2003? Make sure that “Network Discovery” option is enabled on the Control Panel ? Network and Sharing Center. Then you can click on “View computers and devices” link on the left hand side navigation pane to see the ZoneDirector.

How to enable Network Discovery in Windows 2003

2019-06-24T00:18:27-0700 2019-06-24T06:00:20-0700 https://support.ruckuswireless.com/articles/000004474 2019-06-24T00:29:36-0700 monthly 0.8 admin,premium knowledge_article_2480 knowledge_article_2480 2015-05-01T10:14:35-0700 000004474 Validated (External) Premium Zonedirector;Zoneflex indoor;Smartcell gateway;Spot lbs;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, SmartCell Gateway, SPoT LBS, virtual SmartCell Gateway Why are my APs not showing up in vSPOT/SPOT venue? After all of these steps you should see the AP on LBS server status as Green: <img alt="User-added image" height="193" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005378&feoid=00N50000002Cf3M&refid=0EM50000000LivN" width="500"></img> If not, contact Ruckus Technical Support for further assistance.

APs not showing up in vSPOT/SPOT venue

2019-06-24T00:29:36-0700 2019-06-24T06:00:18-0700 https://support.ruckuswireless.com/articles/000006280 2019-06-24T02:14:39-0700 monthly 0.8 admin,premium knowledge_article_3780 knowledge_article_3780 2017-02-27T09:59:06-0800 000006280 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Security;Troubleshooting Configuration, Firmware, Security, Troubleshooting, ZoneDirector How to use the HTTPS/ HTTP redirection for Guest Access login page? Prior to 9.13.0.0.232 release, Guest captive portal only supports http protocol, so customer has security concern for guest access key can be captured by unautherized user. Https protocol will be used in 9.13 instead of http, which has SSL encrytion. Guest user authentication will be safe due to this enhancement. Since the ZD acts as the WEB server for Guest Access login page, the client browser will be presented the ZD certificate to create the secure connection. By default this is a privately signed certificate which will generate an error on the client Browser. To prevent this either purchase and install a certificate on the Zone Director that is signed by a Well Known Certificate Authority (pre loaded into browsers) or upload the ZD certificate into client browsers (not really practical - but just adding it to be complete). Also - once a certificate is uploaded the redirection page will now use the FQDN of the certificate for re-direction. You must make sure this FQDN is resolved to the ZD IP for client devices. It is possible to request a Certificate using the SAN (Subject Alternative Name) option which can specify the IP address of the ZD. A workaround has been provided in 9.13.1 release as mentioned below. <ul><li>In 9.13.1.0.26 MR release, you can disable HTTPS redirection as the default method for Guest WLAN using the below command.</li></ul> <div style="margin-left: 80px;">ruckus>en ruckus#config ruckus(config)# no guest-access-force-https-redirection</div> <div> <ul><li>If required, we can enable HTTPS redirection for Guest WLAN as default method using the below command.</li></ul> <div style="margin-left: 80px;">ruckus>en ruckus#config ruckus(config)# guest-access-force-https-redirection </div> </div>

This article provides information on http/https redirection on Guest Access WLANs.

2019-06-24T02:14:39-0700 2019-06-24T06:00:17-0700 https://support.ruckuswireless.com/articles/000001736 2019-06-24T02:45:49-0700 monthly 0.8 admin,premium knowledge_article_933 knowledge_article_933 2013-03-05T22:04:25-0800 000001736 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to disable directed DHCP from the ZD <div>SSH into the ZD and run the following commands:</div> <div> <div>ruckus>en</div> <div>ruckus#debug</div> <div>ruckus(debug)# remote_ap_cli -A set qos directedDHCP disable (This command disables directedDHCP on all the connected APs) </div> <div>ruckus(debug)# remote_ap_cli -A get qos (To check whether the Directed DHCP is disabled or not)</div> </div> When we disable directed DHCP using the above command AP's will not do the broadcast to unicast conversion.

Disable Directed DHCP on all the AP's managed by a ZD from the ZD CLI

2019-06-24T02:45:49-0700 2019-06-24T06:00:14-0700 https://support.ruckuswireless.com/articles/000005479 2019-06-24T02:51:00-0700 monthly 0.8 admin,premium knowledge_article_2264 knowledge_article_2264 2016-01-28T10:05:53-0800 000005479 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed How to set Grace period for guest wlan in Unleashed APs? There is no Grace period setting for a Guest WLAN on Unleashed GUI till 200.4 release so only CLI option is available. ruckus> enable ruckus# config ruckus(config)# wlan <WLAN Name> ruckus(config-wlan)# show Grace Period: Status = Enabled Period = 480 Minutes // Default value ruckus(config-wlan)# grace-period 144000 Grace Period: Status = Enabled Period = 144000 Minutes ruckus(config-wlan)# grace-period 1500000 The grace period must be a number between 1 and 144000

Grace period settings for guest wlan on Unleashed APs

2019-06-24T02:51:00-0700 2019-06-24T06:00:11-0700 https://support.ruckuswireless.com/articles/000001137 2019-06-24T03:13:45-0700 monthly 0.8 admin,premium knowledge_article_438 knowledge_article_438 2012-03-21T11:59:52-0700 000001137 Validated (External) Premium Zoneflex indoor Configuration;Installation Configuration, Installation, ZoneFlex Indoor How to configure router mode in standalone AP Objective Configure a WLAN in router mode, so the AP will provide DHCP and NAT service to the STA connecting to it. The client will receive a private IP address from a DHCP scope configured in the AP, and the AP will be providing NAT service using its own IP address as public. Configuration <h3>Local subnet</h3> In Configuration::Local Subnet::Local Subnet 1 (2, 3, 4) you can configure a new subnet (up to four) where the WLAN clients will be located. In this page you configure the AP IP address, subnet and internal VLAN. You can also enable the DHCP server and assign a scope. The AP IP address configured here will act as default gateway for the WLAN clients. A configuration example can be found below: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000537r&feoid=00N50000002Cf3M&refid=0EM50000000L9A7"></img> <h2>WLAN</h2> In Configuration::Radio 2.4G (or Radio 5G) you can configure the desired WLAN. Aside the typical WLAN values like SSID or encryption method, two parameters need a particular configuration <ul><li>Packet forward: It must be selected the option ‘Local Subnet NAT and Route to WAN’</li><li>Local subnet: It must be selected the Local subnet configured in the previous step.</li></ul> A configuration example can be found below: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000537r&feoid=00N50000002Cf3M&refid=0EM50000000L9AC"></img> <h2>Ethernet</h2> In Configure::Ethernet ports, the uplink port is configured just with default values: Access port and Packet forward=Bridge to WAN. A configuration example can be found below: <img alt="User-added image" height="310" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000537r&feoid=00N50000002Cf3M&refid=0EM50000000L9AH" width="500"></img> <h1>AP Status</h1> Once configured, you can verify subnet status under Status::Local subnets where you can find the DHCP clients like in the example below: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000537r&feoid=00N50000002Cf3M&refid=0EM50000000L9AM"></img> These same clients can also be found under WLAN statistics in Status::Radio 2.4G (or Radio 5G): <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000537r&feoid=00N50000002Cf3M&refid=0EM50000000L9AR"></img> And clicking in the client MAC address from previous image you can review STA statistics: <img alt="User-added image" height="481" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000537r&feoid=00N50000002Cf3M&refid=0EM50000000L9AW" width="500"></img>

How to configure router mode in standalone AP

2019-06-24T03:13:45-0700 2019-06-24T06:00:10-0700 https://support.ruckuswireless.com/articles/000007583 2019-06-24T03:15:40-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3226 knowledge_article_3226 2018-01-08T09:58:57-0800 000007583 Validated (External) Public All;Brocade Mobility 6511 Wallplate Access Point Security Security, All Is there any impact of Meltdown and Spectre vulnerabilities on Ruckus Products? Spectre and Meltdown Vulnerabilities – CVE-2017-5753 CVE-2017-5715 & CVE-2017-5754 Initial Internal Release Date: 01/05/2018 Initial Release to the public: 01/05/2018 Document Version: 1.0 This (Ruckus Networks Security Advisory) constitutes Ruckus Networks (An ARRIS Company) Proprietary Information and should not be disseminated, forwarded or disclosed without written permission from Ruckus Networks (An ARRIS Company). Summary Google Project Zero team and other researchers have reported Spectre and Meltdown, CPU architecture level vulnerabilities. Exploitation of these vulnerabilities could potentially lead to privilege level information disclosure. For more detail about these vulnerabilities, please refer here: https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html What are the issues? These vulnerabilities are assigned the CVE IDs and details of the same are explained as below: 1. CVE-2017-5753: Systems with processors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information via a side-channel analysis. 2. CVE-2017-5715: Systems with processors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information via a side-channel analysis. 3. CVE-2017-5754: Systems with processors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information via a side-channel analysis of data cache. What is the impact on Ruckus products? No Ruckus products are impacted. Why are Ruckus products not impacted? Ruckus Networks products are based on a number of different CPU architectures (ARM, Intel, PPC etc) some of which are affected by these vulnerabilities. All Ruckus products only run software that are integral to the system and do not allow installation of arbitrarty software from unauthorized users. For an attacker to exploit this vulnerability, one has to gain access to the system using another vulnerability. We recommend that customers always install any patches released as per our security advisories. Please refer to some caveats below. Caveats: Ruckus has been closely working with our cloud providers supporting products such as Ruckus Cloud, Cloudpath. They are either in the process of applying, or have already applied, mitigation patches to their virtualization environments. Virtual appliance products such as virtual SmartZone controller, Virtual SPoT, SCI and Cloudpath on-prem software run on virtualization platform hypervisors. It is advised that customers contact the host OS / hypervisor vendors to patch the systems to address any vulnerabilities that might allow an attacker to gain access to the host OS memory modules and there-by access into the guest OS (like our virtual appliances) memory systems and cause undesired results. What action do I take? No immediate action is required. Ruckus is actively investigating available kernel patches, CPU microcode updates, and other mitigations and may deploy these in future software releases. While there are some mitigation techniques available that are known to reduce system performance significantly, Ruckus is doing the due diligence to test the impact of such patches on our quality, performance and resiliency. How does Ruckus qualify severity of security issues? Ruckus typically utilizes the Common Vulnerability Scoring System (CVSS) v3. This rating system is a vendor agnostic, industry open standard designed to convey vulnerability severity and help determine urgency and priority of response. In cases where CVSS v3 scores are not available, CVSS v2 score are provided. Below are the CVSS scores and vector information for respective CVEs: Note: Since the status of the CVE is under Awaiting Analysis, hence there are no NIST based scores officially published for these issues on the date of publishing of this advisory. CVE ID CVSS Base Score Vector - - ------------------------------------------------------------------------------------------- CVE-2017-5753 Not Available Not Available CVE-2017-5715 Not Available Not Available CVE-2017-5754 Not Available Not Available - - ------------------------------------------------------------------------------------------- Revision History: Version ID Change Date - - ------------------------------------------------------------------------------------------- 1.0 20180105 Initial Release January 05, 2018 - - ------------------------------------------------------------------------------------------- Ruckus Support can be contacted as follows: The full contact list is at: https://support.ruckuswireless.com/contact-us STATUS OF THIS NOTICE: Initial release Although Ruckus Networks has made all the efforts to make sure that the facts and content stated in this advisory should be best of our ability, however, Ruckus Networks cannot guarantee the accuracy of all statements in this advisory due to complete publication for the CVE is not done yet. Should there be a significant change in the facts, Ruckus may update this advisory. DISCLAIMER THIS RUCKUS Networks SECURITY ADVISORY INCLUDING THE INFORMATION IT CONTAINS AND THE PROGRAMS MADE AVAILABLE THROUGH THE LINKS THAT IT INCLUDES, IS PROVIDED TO YOU ON AN "AS IS" BASIS. RUCKUS NETWORKS (AN ARRIS COMPANY) AND ITS SUPPLIERS DO NOT WARRANT THAT SUCH INFORMATION OR THE FUNCTIONS CONTAINED IN SUCH PROGRAMS WILL MEET YOUR REQUIREMENTS OR THAT THE OPERATION OF THE PROGRAMS WILL BE UNINTERRUPTED OR ERROR-FREE. THE INFORMATION AND PROGRAMS ARE PROVIDED TO YOU WITH NO WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT WILL RUCKUS NETWORKS ( AN ARRIS COMPANY), ITS SUPPLIERS, OR ANYONE ELSE WHO HAS BEEN INVOLVED IN THE CREATION, PRODUCTION, OR DELIVERY OF THE INFORMATION OR PROGRAMS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES, INCLUDING WITHOUT LIMITATION, LOST PROFITS OR LOST DATA, THAT MAY ARISE OUT OF YOUR USE OF OR FAILURE TO USE THE INFORMATION OR PROGRAMS, EVEN IF RUCKUS NETWORKS (AN ARRIS COMPANY) OR SUCH OTHER ENTITIES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE FOREGOING SHALL NOT BE DEEMED TO PRECLUDE ANY LIABILITY, WHICH UNDER APPLICABLE PRODUCTS LIABILITY LAW, CANNOT BE PRECLUDED BY CONTRACT. This “Ruckus Networks Security Advisory” constitutes Ruckus Networks ( an ARRIS company) Proprietary Information and should not be disseminated, forwarded or disclosed without written permission from Ruckus Networks ( an ARRIS COMPANY). © Copyright 2018 Ruckus Networks (An ARRIS Company). All Rights Reserved -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEbBAEBAgAGBQJaUCIaAAoJEFH6g5RLqzh1HWkH+I1M3mgueJnHmW5XxRgnxczu j0kL6hDCxsO+sReGwy0zI23nhZm9dL/91BJ3z/gXm9v0p74SR+Wwq5bFc7OCJCq8 4yhY/oU08NwLZDW2wPrMnTyMemfzl2hePDmkXfdAk+HQ4zPn/UtRdWyK/blM/BUX 7NJiV/3Lf+PJsWQz1BO2jr+zzP9frUb6Y9gd0Yd/hqgGv899WDB++O+qqA1o7NEL ed6rlkc95N3SvUYTazESZi2AReVC0dF4KFSahaLXfV5oqTWBZQxKTgCFLuSFZmv4 u7b2kz4tvLzD6UyIyTXiXKZ8nzEvLNdgRvMf1KG3g6DsG++aHIUVzEhuAx9sfw== =20eP -----END PGP SIGNATURE----- Source: https://www.ruckuswireless.com/security

This article explains Meltdown and Spectre vulnerabilities and their impact on Ruckus Products

2019-06-24T03:15:40-0700 2019-06-24T06:00:09-0700 https://support.ruckuswireless.com/articles/000006216 2019-06-24T03:25:44-0700 monthly 0.8 admin,premium knowledge_article_2565 knowledge_article_2565 2017-01-18T10:48:06-0800 000006216 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Can I disable HTTPS redirect in SmartZone 3.4? A patch file and AP CLI command combination can be applied to SZ 3.4 controller platform to disable HTTPS redirect for WISPr. This also applies for CNA bypass after Apple change from HTTP to HTTPS. Information to apply a patch file to SCG/vSZ/SZ-100 can be found here: https://support.ruckuswireless.com/answers/000004058 Download, and unzip the 'scg-ap-3.4.0.0-1406.patch' file from this bitstream link: <a href="https://bitstream.ruckuswireless.com" target="_blank">https://bitstream.ruckuswireless.com</a> FILE: scg-ap-3.4.0.0-1406.zip 78046540 Kb AccessCode: 026eb0c6c038235ab8bf35e35fea39a0 Apply the following AP CLI command from rkscli: prompt set hotspot_ng-https-redirection hotspot0 disable = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = SZ 3.4.2 will not require patch file, but will still require AP CLI command. SZ 3.5 will have command built in on SZ controllers.

ZoneDirector has option to disable HTTPS redirect which is needed in SmartZone.

2019-06-24T03:25:44-0700 2019-06-24T06:00:06-0700 https://support.ruckuswireless.com/articles/000001675 2019-06-23T21:33:18-0700 monthly 0.8 admin,premium knowledge_article_3790 knowledge_article_3790 2013-02-24T19:42:31-0800 000001675 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway How can WLAN and Role settings in the controller cause the 802.1X authentication to fail <div> This issue occurs because the customer did not enable the WLAN under the Roles. We need to ensure that the WLAN being accessed is allowed and assigned to the correct Role. Once this is done the user will be able to authenticate themselves successfully.</div>

This articles shares one of the reasons for 802.1X authentication failure related to WLAN not being enabled in the correct role

2019-06-23T21:33:18-0700 2019-06-24T00:00:32-0700 https://support.ruckuswireless.com/articles/000002710 2019-06-23T23:05:35-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1150 knowledge_article_1150 2014-02-27T15:57:44-0800 000002710 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector At what frequency do application pie charts get updated? Here is the frequency of update based on the display plan selected for application visibility: 1 hour - 5 minutes 24 hours - 2 hours 1 week - 12 hours 1 month - 48 hours Please note that these are fixed values and can not be changed. As an additional note, each AP accumulates application data and sends it to the ZD every 5 minutes.

This article explains update frequency of application pie chart for each display span - last hour, last day, last week, and last month.

2019-06-23T23:05:35-0700 2019-06-24T00:00:29-0700 https://support.ruckuswireless.com/articles/000003439 2019-06-23T23:40:42-0700 monthly 0.8 admin,premium knowledge_article_3788 knowledge_article_3788 2014-09-24T14:12:18-0700 000003439 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway Can VLAN 1 be Tagged on Ruckus devices? Edit the Ethernet port configuration of the access point (whether individually or on the AP group) and change the 'Untag ID' value to anything other than 1. This will cause VLAN 1 traffic to exit the Ethernet port tagged.

This article describes the process of tagging VLAN 1 on Ruckus devices

2019-06-23T23:40:42-0700 2019-06-24T00:00:28-0700 https://support.ruckuswireless.com/articles/000003968 2019-06-23T23:14:05-0700 monthly 0.8 admin,premium knowledge_article_3787 knowledge_article_3787 2015-01-28T14:12:50-0800 000003968 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Troubleshooting Configuration, Firmware, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway VSCG: How to show previously created guest passes? To show previously created guest passes, navigate to Identity->Profiles-> Load criteria with "Type:Guest." This will show the list of guest passes created in the past. <img alt="User-added image" height="144" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000005360&feoid=00N50000002Cf3M&refid=0EM50000000Ldii" width="500"></img>

Information on how to show previously created guest passes (pre-3.5 version)?

2019-06-23T23:14:05-0700 2019-06-24T00:00:27-0700 https://support.ruckuswireless.com/articles/000004694 2019-06-23T22:19:33-0700 monthly 0.8 admin,premium knowledge_article_1952 knowledge_article_1952 2015-06-18T01:46:55-0700 000004694 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) System network management System Network Management, SmartCell Gateway, virtual SmartCell Gateway How do I import and export batch AP provisioning information? There may be times when you wish to export all batch provisioned access points, or create a template to import batches from previous exports. This can be done by navigating to the Configuration >>Access Points page on the SCG WebUI: <img alt="User-added image" height="139" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000535M&feoid=00N50000002Cf3M&refid=0EM50000000LlqM" width="500"></img> Click on Export >> Export All Batch Provisioning Aps <img alt="User-added image" height="122" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000535M&feoid=00N50000002Cf3M&refid=0EM50000000LlqW" width="500"></img> To import a previously exported batch, simply choose the Import option instead of export.

This article explains both how to batch export provisioned access points and how to create a template to import previous exports

2019-06-23T22:19:33-0700 2019-06-24T00:00:26-0700 https://support.ruckuswireless.com/articles/000004211 2019-06-23T22:54:54-0700 monthly 0.8 admin,premium knowledge_article_1650 knowledge_article_1650 2015-03-18T03:29:40-0700 000004211 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Why do admin activities in the event logs not display the local admin username Upgrade to a version of code that contains the fix by viewing Release Notes for fixed status.

There are several admin accounts on the ZD, but the event log only shows the Admin as having any activity

2019-06-23T22:54:54-0700 2019-06-24T00:00:24-0700 https://support.ruckuswireless.com/articles/000005491 2019-06-23T21:07:16-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2274 knowledge_article_2274 2016-02-08T10:39:25-0800 000005491 Validated (External) Public Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation;Known issues and workarounds Configuration, Firmware, Installation, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway What is the function of SmartZone Pre-check Scripts for Data Migration Upgrades Uploading controller image starts a monitor timer with default 10 minute limit, that may abort upgrade attempt. This script extends the timeout to pre-check data migration setup before the code upgrade. Instructions on applying the Upload Pre-Check Timeout script are available on the Release Notes. <img alt="User-added image" height="362" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000534d&feoid=00N50000002Cf3M&refid=0EM500000006B7k" width="500"></img> The SmartZone Upload Pre-check Timeout Script is available on Support download page. This script can be run on any 3.0.x and 3.1.1+ versions of SmartZone that include data migration. <img alt="User-added image" height="388" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000534d&feoid=00N50000002Cf3M&refid=0EM500000006KIN" width="617"></img> “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.” Uploading controller image starts a monitor timer with default 10 minute limit, that may abort upgrade attempt. This script extends the timeout to pre-check data migration setup before the code upgrade.

This script extends SZ upgrade process monitor, to allow more time for data migration pre-check.

2019-06-23T21:07:16-0700 2019-06-24T00:00:23-0700 https://support.ruckuswireless.com/articles/000004327 2019-06-23T19:12:10-0700 monthly 0.8 admin,premium knowledge_article_1734 knowledge_article_1734 2015-04-13T01:27:10-0700 000004327 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway How do I configure FreeRADIUS to support a MySQL backend? Prerequisites This article describes the configuration of a MySQL server as a backend database for an existing FreeRADIUS installation. It is highly recommended that [<a href="/articles/FAQ/Installing-and-configuring-FreeRADIUS-on-Linux?q=%0A++++++Select+Id%2C+KnowledgeArticleId%2C+IsDeleted%2C+ValidationStatus%2C%0A+++++++++++++PublishStatus%2C+VersionNumber%2C+IsLatestVersion%2C+IsVisibleInApp%2C%0A+++++++++++++IsVisibleInPkb%2C+IsVisibleInCsp%2C+IsVisibleInPrm%2C+CreatedDate%2C%0A+++++++++++++LastModifiedDate%2C+SystemModstamp%2C%0A+++++++++++++Language%2C+Title%2C+UrlName%2C+ArchivedDate%2C+Summary%2C%0A+++++++++++++ArticleNumber%2C+FirstPublishedDate%2C+LastPublishedDate%2C%0A+++++++++++++Answer__c%2C+Question__c%2C+Attachment__Name__s%2C%0A+++++++++++++Attachment__ContentType__s%2C+Attachment__Length__s%2C+Attachment__Body__s%2C%0A+++++++++++++Symptoms_Keywords__c%2C+Customer_Environment__c%2C+Workaround__c%2C+Root_Cause__c%2C%0A+++++++++++++Related_Articles__c%2C+Defect_Id__c%2C+Version__c%2C+Security__c%2C+A_Loop_Created__c%2C%0A+++++++++++++Troubleshooting_Steps__c%2C+KCS_Coach__c%0A+++++++From+FAQ__kav%0A+++++++Where+PublishStatus+%3D+%27Online%27+And%0A+++++++++++++Language%3D%27en_US%27+And%0A+++++++++++++IsVisibleInPkb+%3D+true+And%0A+++++++++++++ValidationStatus+IN+%28%27Validated+%28External%29%27%2C+%27Validated+%28Public%29%27%29+And%0A+++++++++++++LastModifiedDate+%3E+2019-06-21T18%3A24%3A16.000Z%0A++++" target="_blank">Installing and configuring FreeRADIUS on Linux</a>] is followed prior to following the steps presented in this article. Getting started Using a plain-text file for storing user credentials is not easy to maintain, nor does it easily integrate with existing subscriber management platforms (SMP). In these cases, FreeRADIUS may be configured to communicate with a MySQL backend for authentication and accounting services. If you intend using MySQL as a backend database, you should install the MySQL server daemon, along with the FreeRADIUS mysql modules by issuing the following commands: <pre> # apt-get install mysql-server freeradius-mysql</pre> During the MySQL installation process, you will be prompted to set a password for the root user. Enter a secure password, keeping it safe at all times. Once the installation completes, a database needs to be created, loaded with the FreeRADIUS schema. A MySQL user needs to be created, with permission to interact and modify the data contained within the new database. The FreeRADIUS server will use these credentials to interact with MySQL. Preparing the MySQL environment To create the new database, connect to MySQL as root: <pre> # mysql -uroot -p</pre> Provide the password you specified for the root user during the installation process. Next, create the "radius" database: <pre> (mysql): create database radius;</pre> Finally, create a MySQL user, granting them full permission to the radius database: <pre> (mysql): grant all on radius.* to 'radius'@'localhost' identified by 'myradiuspassword';</pre> The FreeRADIUS module ships with a base schema, which should be loaded into the radius database. To install the schema, return to the bash CLI and issue the following command: <pre> # mysql -uradius -p radius < /etc/freeradius/sql/mysql/schema.sql</pre> When prompted for a password, enter the password supplied when you executed the "grant" command in MySQL. In our example, the password is set to "myradiuspassword". After this process completes, the radius database will contain the complete schema required by FreeRADIUS. This can be verified by issuing the following commands: <pre> # mysql -uradius -p radius (mysql): show tables; +------------------+ | Tables_in_radius | +------------------+ | radacct | | radcheck | | radgroupcheck | | radgroupreply | | radpostauth | | radreply | | radusergroup | +------------------+ 7 rows in set (0.00 sec) Creating test data </pre> To verify the configuration, insert a test user and password pair into the radcheck table. A few reply attributes may be inserted into the radreply table, which will be include in the Access-Accept message, returned on successful authentication: <pre> (mysql): insert into radcheck(username, attribute, op, value) VALUES ('demo_mysql', 'Cleartext-Password', ':=', 'demo'); (mysql): insert into radreply(username, attribute, op, value) VALUES ('demo_mysql', 'Framed-IP-Address', ':=', '10.0.0.3');</pre> Enabling the FreeRADIUS SQL module The SQL module in FreeRADIUS needs to be enabled explicitly. Edit the file /etc/freeradius/radiusd.conf located and uncomment the line: <pre> # $INCLUDE sql.conf</pre> Edit the /etc/freeradius/sql.conf file, ensuring that the username and password within the sql {} section are set to the values specified when you executed the "grant..." command within mysql. Next, you need to enable the MySQL module in your site configuration. Open the /etc/freeradius/sites-enabled/default file (or your specific site configuration file) for editing and: 1. In the authorize {} section, below "files", uncomment the line "# sql" to permit authorization via the SQL module. [*] 2. In the accounting {} section, uncomment the "# sql" line to direct accounting information to the SQL database. [*] Note you can comment out the "files" module (# files) if you want to prevent FreeRADIUS from reading the users file, enforcing SQL only authentication. Finally, once you have completed the editing, request the FreeRADIUS daemon reload its configuration: <pre> # /etc/init.d/freeradius reload</pre> Testing and validation Test the SQL authentication using the credentials you populated into the radcheck/radreply tables using the radcheck tool: <pre> # radtest demo_mysql demo localhost 1812 testing123 Sending Access-Request of id 61 to 127.0.0.1 port 1812 User-Name = "demo_mysql" User-Password = "demo" NAS-IP-Address = 127.0.1.1 NAS-Port = 1812 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=61, length=26 Framed-IP-Address = 10.0.0.3 </pre> Note that receipt of an Access-Accept packet confirms the authentication was successful. Also, confirm that the Framed-IP-Address attribute (and any others you specified in the radreply table) were included.

This article describes how to configure an existing FreeRADIUS installation to support a MySQL authentication backend

2019-06-23T19:12:10-0700 2019-06-24T00:00:22-0700 https://support.ruckuswireless.com/articles/000004254 2019-06-23T20:13:27-0700 monthly 0.8 admin,premium knowledge_article_1678 knowledge_article_1678 2015-03-27T00:09:21-0700 000004254 Validated (External) Premium Zonedirector;Smartcell insight;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Insight (SCI) Configuration;System network management Configuration, System Network Management, ZoneDirector, SmartCell Insight How do I change the credentials stored in SCI after changing the admin password in Zone Director Remove the specific ZD from the monitor page (red x next to relevant ZD) and then re-add from Setup screen. Since you're not deleting the SYSTEM, no data would be lost (read the warning message) Removing ZD source from SCI Monitor WEB-UI page (http://<sci_ip>): <img alt="User-added image" height="130" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000533z&feoid=00N50000002Cf3M&refid=0EM50000000LgnH" width="500"></img> Warning message - note existing data is preserved as long as group is not removed: <img alt="User-added image" height="132" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000533z&feoid=00N50000002Cf3M&refid=0EM50000000LgnM" width="500"></img> Remove source success message: <img alt="User-added image" height="74" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000533z&feoid=00N50000002Cf3M&refid=0EM50000000LgnR" width="500"></img> Add ZD as Standalone Source from System setup page of Monitor WEB-UI: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000533z&feoid=00N50000002Cf3M&refid=0EM50000000LgnW"></img> Add Source success message: <img alt="User-added image" height="116" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000533z&feoid=00N50000002Cf3M&refid=0EM50000000Lgnb" width="500"></img> Source now connected: <img alt="User-added image" height="62" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000533z&feoid=00N50000002Cf3M&refid=0EM50000000Lgng" width="500"></img> ZD Source Data is now getting received (see latest "Pass" on log on Diagnostic page of Monitor WEB-UI): <img alt="User-added image" height="129" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000533z&feoid=00N50000002Cf3M&refid=0EM50000000Lgnl" width="500"></img>

Method to change the source credentials in SCI to match changed credentials in Standalone Zone Director

2019-06-23T20:13:27-0700 2019-06-24T00:00:18-0700 https://support.ruckuswireless.com/articles/000004835 2019-06-23T20:17:49-0700 monthly 0.8 admin,premium knowledge_article_3784 knowledge_article_3784 2015-07-16T16:17:00-0700 000004835 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Installation Installation, ZoneFlex Indoor, ZoneFlex Outdoor What is EIRP & how to calculate EIRP for Ruckus APs ? Equivalent isotropically radiated power (EIRP) is the highest RF signal strength that is transmitted from a particular antenna. To understand this better, think of our flashlight example for a moment. Assume that the bulb without the lens generates 1 watt of RF Components 69 power. When you put the lens on the fl ashlight, it focuses that 1 watt of light. If you were to look at the light now, it would appear much brighter. If you were to measure the brightest point of the light that was being generated by the flashlight, because of the effects of the lens it may be equal to the brightness of an 8-watt bulb. So by focusing the light, you are able to make the equivalent isotropically radiated power of the focused bulb equal to 8 watts. EIRP Calculation : Tx Max EIRP = "PA power + antenna gain + combining gain + TxBF gain (where applicable)"

Equivalent isotropically radiated power (EIRP) is the highest RF signal strength transmitted from a particular antenna.

2019-06-23T20:17:49-0700 2019-06-24T00:00:17-0700 https://support.ruckuswireless.com/articles/000004360 2019-06-23T20:29:55-0700 monthly 0.8 admin,premium knowledge_article_1741 knowledge_article_1741 2015-04-14T04:42:07-0700 000004360 Validated (External) Premium Zonedirector;Smartcell gateway;Smartcell ap;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway Why is my mobile device unable to associate with an EAP-TTLS 802.1x WLAN? Mobile devices, powered by Android or iOS operating systems, ship with a limited number of trusted root certificates. The list included on PC/Laptop distributions is often more extensive. If the certificate used for EAP-TTLS was not issued by a CA known to the mobile device, the device will not associate with the WLAN. It is therefore important to install the root CA's certificate on each mobile device, or alternatively purchase a certificate from a CA whose certificate is already included within the mobile device's operating system. For a list of these CAs, see: <a href="https://support.apple.com/en-za/HT204132" target="_blank"> List of available trusted root certificates in iOS 7 : https://support.apple.com/en-in/HT203065 List of available trusted root certificates in iOS 8 : https://support.apple.com/en-in/HT205214 List of available trusted root certificates in iOS 9 : https://support.apple.com/en-in/HT205205 List of available trusted root certificates in iOS 10 : https://support.apple.com/en-in/HT207177 List of available trusted root certificates in iOS 11 : https://support.apple.com/en-in/HT208125 List of available trusted root certificates in iOS 12, macOS 10.14, watchOS 5, and tvOS 12: https://support.apple.com/en-in/HT209144</a>

This article provides reasons for why mobile devices are unable to associate with 802.1x EAP-TTLS WLANs when PCs/laptops connect without issue.

2019-06-23T20:29:55-0700 2019-06-24T00:00:16-0700 https://support.ruckuswireless.com/articles/000004802 2019-06-23T20:32:04-0700 monthly 0.8 admin,premium knowledge_article_1985 knowledge_article_1985 2015-07-01T05:12:28-0700 000004802 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway How do I login to the APs that are in the staging zone? You can login to APs that are inside the Staging Zone using the method below: If the AP is approved: Use cluster name for both username and password. You can find name of the cluster from the dashboard or using the "show cluster name" command from controller's CLI. If the AP is not approved: Use factory default credentials (super, sp-admin) or the credentials that the AP would otherwise have if it weren't connected to the controller. If the AP is moved to a non-staging zone, its credentials will change to the ones assigned to that zone.

This article mentions credentials required to login to APs that are in the staging zone

2019-06-23T20:32:04-0700 2019-06-24T00:00:14-0700 https://support.ruckuswireless.com/articles/000002508 2019-06-23T20:43:36-0700 monthly 0.8 admin,premium knowledge_article_2000 knowledge_article_2000 2014-02-26T07:11:50-0800 000002508 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why does band steering fail to move clients to 5GHz WLAN? <div>APs that have band steering/balancing enabled can use the latest received probes to set threshold and RSSI (SNR) values per STA MAC as a basis for steering a STA to a specific band for primary association. Once associated to an AP, the STA is no longer part of the balancing and must re-associate in order to be part of the table used to track the associated MACs. Band steering typically operates using an RSSI threshold of about 20. If a WLAN has RSSI threshold set to zero, then band steering is disabled on that WLAN and the station table is not updated when probe requests are received on that WLAN. On the opposite extreme, an RSSI threshold of 1 forces all dual-band clients to 5 GHz. Settings The RSSI (SNR) thresholds are controlled by the following CLI commands at the AP: rkscli: get band-steering <wlan-name> rkscli: set band-steering <wlan-name> <rssi-value> rkscli: set band-steering all <rssi-value></div>

5GHz clients capable clients are connecting to 2.4 radio even though band steering is enabled.

2019-06-23T20:43:36-0700 2019-06-24T00:00:13-0700 https://support.ruckuswireless.com/articles/000002107 2019-06-23T21:46:19-0700 monthly 0.8 admin,premium knowledge_article_3782 knowledge_article_3782 2014-01-16T12:58:17-0800 000002107 Validated (External) Premium Zoneflex 7962;Zoneflex 7300 series Configuration Configuration, ZoneFlex 7962, ZoneFlex 7300 Series How to split traffic from multiple WLANs out the Ethernet ports on ZF7363 AP <div>Traffic splitting on 7363 stand-alone AP (9.4 and later) </div> <div>You can split traffic on one WLAN service out a separate Ethernet interface. The production port can</div> <div>service corporate users on Ethernet port 3 (Gig capable port) while guest traffic can be sent/received on</div> <div>Ethernet port 2, connected directly to a DMZ for internet only access. </div> <div>Use the following steps to separate the traffic:</div> <div>1. Configure the Ethernet Port 1 or 2 (Port 2 in this example):</div> <div> a. Go to “Configure>Ethernet Ports”</div> <div> b. Set the Port to “Access Port”</div> <div> c. Set the Packet Forward to “Bridge to WAN"</div> <div> d. Leave 802.1x to “default”</div> <div> e. Set the VLAN to “UNTAG ID: [desirec VLAN]” VLAN 2 for example <img alt="User-added image" height="214" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000534s&feoid=00N50000002Cf3M&refid=0EM50000000LPx3" width="500"></img> <div>2. Configure the WLAN service to use the newly created local subnet</div> <div> a. Configure the Wireless network, Wireless 2 for example with the appropriate name/SSID</div> <div> b. Set the Packet Forward to “Bridge to WAN”</div> <div> c. Set the Access VLAN to match the local subnet and Ethernet port setting, 2 in this example:</div> <img alt="User-added image" height="343" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000534s&feoid=00N50000002Cf3M&refid=0EM50000000LPxD" width="500"></img> <div>3. To Test this plug a wired device, configure the IP on the same subnet as the local subnet (192.168.40.11/24) and connect a wireless client to this WLAN service and also assign a static IP in the same subnet (192.168.40.10) as well and the two should be able to ping each other.</div> <div> 4. Switch config 1 VLAN Port Config: <img alt="User-added image" height="143" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000534s&feoid=00N50000002Cf3M&refid=0EM50000000LPxI" width="500"></img> <img alt="User-added image" height="144" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000534s&feoid=00N50000002Cf3M&refid=0EM50000000LPxN" width="500"></img> <img alt="User-added image" height="358" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000534s&feoid=00N50000002Cf3M&refid=0EM50000000LPxS" width="500"></img></div> </div>

2019-06-23T21:46:19-0700 2019-06-24T00:00:12-0700 https://support.ruckuswireless.com/articles/000003918 2019-06-23T23:01:16-0700 monthly 0.8 admin,premium knowledge_article_1569 knowledge_article_1569 2015-01-23T13:15:42-0800 000003918 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to disable Mesh on all the Access Points connected to the ZoneDirector? Here is the command to disable Mesh on all the access points connected to ZoneDirector. ruckus(debug)# remote_ap_cli -A "set mesh dormant" Syntex : set mesh {auto|dormant|root|mesh|portbased} Options: auto: set mesh role to Auto dormant: disable mesh root: set mesh role to Root AP mesh: set mesh role to Mesh AP portbased: set mesh role to Port-based

Disabling Mesh on Access Point using ZoneDirector Remote CLI commands

2019-06-23T23:01:16-0700 2019-06-24T00:00:11-0700 https://support.ruckuswireless.com/articles/000004399 2019-06-23T23:25:58-0700 monthly 0.8 admin,premium knowledge_article_2030 knowledge_article_2030 2015-07-01T04:52:56-0700 000004399 Validated (External) Premium Flexmaster umm Known issues and workarounds Known Issues and Workarounds, FlexMaster UMM How are repeat associations of clients counted in the flexmaster report? When client associates multiple times during a special period, "Clients associated report" will display only one record. By saying "special period", we mean the time interval chosen while generating the report. So, the repeated clients will be counted as only one within a specific time period.

This article explains how the repeated clients are counted when a report like "Client associated report" is generated.

2019-06-23T23:25:58-0700 2019-06-24T00:00:08-0700 https://support.ruckuswireless.com/articles/000004356 2019-06-23T23:52:37-0700 monthly 0.8 admin,premium knowledge_article_1958 knowledge_article_1958 2015-06-19T01:56:02-0700 000004356 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;System network management;Troubleshooting;Known issues and workarounds Configuration, System Network Management, Troubleshooting, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway How do I generate GSM authentication triplets? Introduction This article describes how to generate GSM authentication triplets required for deploying an EAP-SIM environment when you do not know the SIM Ki, or do not have an HLR. The steps contained herein describe how to generate authentication triplets using a PC/SC compatible card reader (tested with the Omnikey 6121) and Ubuntu Linux (14.04). The installation of Ubuntu Linux and the procurement of the Omnikey 6121 (or PC/SC compatible card reader) fall beyond the scope of this article. Installing required packages As root, issue the following commands to install the PC/SC daemon and supporting utilities: <pre> # apt-get install pcscd pcsc-tools python-pyscard unzip</pre> Download the card library, which facilitates communications with the smart card from [<a href="https://github.com/mitshell/card/archive/master.zip" target="_blank">here</a>]. Unzip the archive and install the library: <pre class="p1"> # unzip master.zip # cd card/ # python setup.py install</pre> Once the library is successfully installed, it is safe to remove the archive and the temporary extracted files. Generating GSM authentication triplets Connect the card reader and SIM card to the host machine's USB port. Confirm that the smart card is readable by executing the following command: <pre> # pcsc_scan</pre> You will be notified if the system cannot read the sim card. Assuming the card is found, it is safe to proceed. You may ignore any warning messages regarding the card itself. Download the attached "gen_triplets.py" file, which generates three RAND values and subsequently 3 sets of authentication triplets. Edit the file, setting the length of the mnc_len parameter (line 10) to 2 or 3, depending on your country. Execute the gen_triplets.py file and record the output: <pre class="p1"> # ./gen_triplets.py ?-------------------------- GSM Auth Triplet Generator -------------------------- imsi: 64111010771XXXX identity: 164111010771XXXX@wlan.mnc011.mcc641.3gppnetwork.org Triplets #imsi, rand, sres, kc 64111010771XXXX,fb1132e6422feaXXX8b47d2e631c3eff,923XXb46,2e9409XXf5f22000 64111010771XXXX,27dca7cae59f75XXXc08876ebd631b28,da3XXbd2,a7125cXXd5bf1400 64111010771XXXX,af4fe7d544820dXXXf5b712b51fbaead,22dXX0c6,8f3dfcXX5070f400</pre> Note the IMSI number of the SIM card is output, along with the subscriber's identity (both obfuscated with X's in this example). Most importantly, the trailing 3 lines present the IMSI number and the authenticate triplets for this particular SIM card.

This article describes a method for generating GSM authentication triplets. These triplets are required for EAP-SIM authentication when you do not know the SIM Ki (or control the HLR).

2019-06-23T23:52:37-0700 2019-06-24T00:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PIWSCA4?attachment_index=0 2019-06-24T00:00:07-0700 monthly admin,premium knowledge_article_1958 knowledge_article_1958_attachment_1 gen_triplets.py 1242.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000009449 2019-06-21T11:20:20-0700 monthly 0.8 admin,premium knowledge_article_3781 knowledge_article_3781 2019-06-21T11:20:20-0700 000009449 Validated (External) Premium Vsz dataplane;Sz100;SmartZone 100-D (SZ100-D) Known issues and workarounds Known Issues and Workarounds, vSZ Dataplane, SZ100 Why controller shows different guest pass expiration time on the E-mail and the default page? This is a bug and is fixed in the 5.1.2 firmware. For customers running on earlier firmwares, suggest to upload the attached KSP named "ER-7410-5_1_1_0_598-v1_0.ksp" Follow the below instructions to apply the KSP. <ul><li>Open SCG web UI, click Administrator -> Diagnostics -> Diagnostic/Patch Scripts. Press ‘Browse’ button and upload the KSP.</li><li>Access SCG CLI, login, and enter following commands:</li></ul> <div style="margin-left: 80px;">vSZ>en vSZ#patches vSZ(patches)#apply ER-7410-5_1_1_0_598-v1_0.ksp</div> Note: Post applying KSP, web service will get restart and WebGUI of the controller will go down for 5 to 10 minutes.

vSZ/SZ running on versions 5.1.1.0.589, 5.1.1.0.496 shows incorrect guest pass expiration time on default guest print page and in the E-mail sent to the user.

2019-06-21T11:20:20-0700 2019-06-22T00:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000004z8wSAA?attachment_index=0 2019-06-22T00:00:09-0700 monthly admin,premium knowledge_article_3781 knowledge_article_3781_attachment_1 ER-7410-5_1_1_0_598-v1_0.ksp 613433.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000009438 2019-06-21T04:34:53-0700 monthly 0.8 admin,premium knowledge_article_3779 knowledge_article_3779 2019-06-21T04:34:53-0700 000009438 Validated (External) Premium Sz300;Ruckus icx switches;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartZone 100-D (SZ100-D) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SZ300, Ruckus ICX Switches, virtual SmartCell Gateway, SZ100 Why is the configuration tab not visible in 5.1.1.0.598? To get the configuration tab visible you need to upgrade the ICX switch to version 8.0.90 or higher. After the upgrade you will see the configuration TAB when you select the switch in the switch TAB. <img alt="User-added image" height="30" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SrH&feoid=00N50000002Cf3M&refid=0EM2J000000qUHG" width="500"></img>

The configuration tab is not visible if the controller is not at 5.1.1.x.x firmware and the switch is at 8.0.90 or higher.

2019-06-21T04:34:53-0700 2019-06-21T06:00:09-0700 https://support.ruckuswireless.com/articles/000009448 2019-06-21T05:44:42-0700 monthly 0.8 admin,premium knowledge_article_3777 knowledge_article_3777 2019-06-21T05:44:42-0700 000009448 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Why can the AP not get the controller IP address from the AP registrar? This is fixed in the released 5.1.1 version, and also in 3.4.2P4 and an AP patch is available for 3.6.2P1. No patch is created for 5.0 or 5.1 as we expect customer to upgrade to 5.1.1

When an AP is deleted from the controller, set scg init is send to the AP, as the NTP server is removed the time might be incorrect which means the AP registrar certificate is out of sync.

2019-06-21T05:44:42-0700 2019-06-21T06:00:06-0700 https://support.ruckuswireless.com/articles/000009415 2019-06-19T07:56:43-0700 monthly 0.8 admin,premium knowledge_article_3775 knowledge_article_3775 2019-06-19T07:56:43-0700 000009415 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why do I see 'SFT Connection Failed!' when testing an SFTP connection between my SZ and my external SFTP server? Apply a patch file (KSP) to every node in your SZ cluster. Below are some pointers regarding the KSP: a. The KSP patches the OpenSSH used by SZ, and is a service-affecting process. Ruckus recommends you schedule a maintenance window, notifying any end-users that there could be down-time whilst the SZ services restart. b. The KSP must be applied to each individual node in the SZ cluster, using the process detailed below. c. The KSP can be applied to the nodes in any order. E.g. in a 3-node SZ cluster, you can apply it to any of the 3 nodes first. Once that has finished and the services are back online, repeated the process on the next node and wait for services to be back online. Then repeat the process again for the final node. There are two patch versions available, dependent on the SZ 5.1 version used: ER7385_fix_sftp_algorithm_5_1_1_0_589_700820 ER7385_fix_sftp_algorithm_5_1_1_0_598_700480 Log a case with Ruckus Support, requesting a copy of the KSP/s above and refer the Support representative to this article. STEPS TO APPLY THE KSP: 1. Take a configuration backup 2. In SZ web interface, upload the KSP to Diagnostics > Patch/Diagnostic Scripts > browse > upload > Apply Patch. 3. Once the patch is successfully applied, restart services in SZ CLI. This is a service-affecting action that will take between 10-20 minutes to complete: <login> enable service restart yes 4. After all services are restarted, re-test the SFTP connection in the web GUI and it should now work. 5. Connect to each other

Summary of a bug in 5.1 (fix available) preventing scheduled Configuration Backups from being sent to SFTP

2019-06-19T07:56:43-0700 2019-06-19T12:00:09-0700 https://support.ruckuswireless.com/articles/000009406 2019-06-19T09:28:36-0700 monthly 0.8 admin,premium knowledge_article_3774 knowledge_article_3774 2019-06-19T09:28:36-0700 000009406 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway Why won't my APs enable the radios/broadcast the WLANs even though they are configured on the AP? The Time-Scheduled featureis enabled as 'Always Off' or 'Specific' and overriding any other configuration of the WLAN, rendering the WLAN disabled: <img alt="User-added image" height="382" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Skf&feoid=00N50000002Cf3M&refid=0EM2J000000qTzC" width="500"></img> 1. In SmartZone GUI, go to WLANs > select the Domain/Zone > WLAN Group > highlight the affected WLAN. 2. Click 'Edit' 3. In the new window, expand 'Advanced Options' and scroll down to 'Schedule'. Change to 'Always On': <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Skf&feoid=00N50000002Cf3M&refid=0EM2J000000qTzH"></img> 4. Click OK 5. Go back to your AP and verify the WLAN is now enabled, by checking with a wireless device close to the AP, or else log-in to the AP and type 'get wlanlist': <img alt="User-added image" height="241" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Skf&feoid=00N50000002Cf3M&refid=0EM2J000000qTzM" width="500"></img>

How to check if the WLAN Service Schedule is configured to disable the WLANs

2019-06-19T09:28:36-0700 2019-06-19T12:00:08-0700 https://support.ruckuswireless.com/articles/000001493 2019-01-26T18:24:21-0800 monthly 0.8 admin,premium knowledge_article_1250 knowledge_article_1250 2013-01-20T16:56:04-0800 000001493 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector What is CPMK authentication method ? This indicates that EAP client is using cached PMK method. The emphasis is to show people this authentication is done using Cached PMK vs the standard EAP based key generation. CPMK is Cached Pairwise Master Key and EAP is the Extended Authentication Protocol used when wireless client connected to wlan with 802.1x authentication.some of the Clients have the ability to store the PMK, this is called Cached PMK(CPMK). This a feature that was requested by some of the customers. Roaming to a different AP does not show the auth method as CPMK. Its related to the client behavior, if the client connected to the WLAN (with EAP) and if we disconnect and try to connect post that then it may show as the CPMK, if the client is capable of storing the cache. Its related to WPA-mixed" and "auto" - AP offers all the possible methods but at the end its client decision to choose what it prefers. If you use 802.1X authentication in conjunction with WPA2-Enterprise and have multiple wireless access points (APs), you should ensure Pairwise Master Key (PMK) caching is enabled on the Windows clients. It enables faster roaming, eliminating pre or full 802.1X authentication when roaming to another AP. If PMK caching isn’t supported by the APs,pre-authentication can also be enabled. If supported by the AP, it eliminates having to perform full 802.1X authentication when roaming to another AP. In previous Windows versions, PMK caching had to be enabled via the registry or group policy. In Windows 7, it can be configured via the Windows GUI: On the Wireless Network Properties dialog, select the Security tab, and then click the Advanced Settings button.

For few client devices the Authentication method shows as CPMK at monitor -> Currently Active Clients instead of EAP.

2019-01-26T18:24:21-0800 2019-06-19T11:08:36-0700 https://support.ruckuswireless.com/articles/000009195 2019-05-10T08:15:13-0700 monthly 0.8 admin,premium knowledge_article_3686 knowledge_article_3686 2019-05-10T08:14:47-0700 000009195 Validated (External) Premium Virtual smartcell gateway Known issues and workarounds Known Issues and Workarounds, virtual SmartCell Gateway What is the implication of the error message "808 cluster application stopped" and how can it be fixed? Install the attached KSP on each node within the cluster. This ksp will only update the script - ' /usr/ttg_pdg/scripts/mwsg-check'. And there is no other binary code change or service restarting in this ksp. Service impact -> Low.

The "Error 808" message suddenly appears but there is no service impact.

2019-05-10T08:15:13-0700 2019-06-18T13:29:59-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000000OGKSA2?attachment_index=0 2019-06-18T13:29:59-0700 monthly admin,premium knowledge_article_3686 knowledge_article_3686_attachment_1 ER6648_MWSG_CHECK_626451.ksp 39130.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000009132 2019-06-18T07:23:01-0700 monthly 0.8 admin,premium knowledge_article_3772 knowledge_article_3772 2019-04-26T05:35:14-0700 000009132 Validated (External) Premium Sz300;Scg200;Virtual smartcell gateway;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, SZ300, SCG200, virtual SmartCell Gateway How is Cluster Redundancy configured in SZ 3.4? Overview: Cluster Redundancy (geo-redundancy) operates by configuring two or more clusters to have network connectivity across a WAN. In the event that one cluster fails or loses network connectivity, the APs connected to it will failover to the other (redundant) cluster. After the failover event has occurred, the APs will maintain on the new cluster until they are manually 're-homed' back to the original cluster. Example: - Cluster-A (current production cluster with two nodes) - Cluster-B (redundant cluster with two nodes) Cluster-A hosts 1,000 APs in a live, business-critical network, hosted at a data centre in London, UK. The business has determined that some level of redundancy is required for disaster-recovery purposes, in the case that the data centre hosting Cluster-A experiences an outage or Cluster-A suffers a hardware failure. Cluster-B hosts 50 APs, and is a combined lab/production network used by the business for managing internal IT networks and testing deployment features. It is hosted at a data centre in Manchester, UK. This cluster can be utilised as a fail-over option, in the event that Cluster-A suffers an interruption to service. The steps to set-up Cluster Redundancy are as-follows: 1) Cluster-A and Cluster-B are set-up so that APs can reach the Control IP interfaces of both clusters. 2) Cluster-A is configured with the IP addresses of Cluster B's control IP addresses. In SZ 3.4 web interface: <div style="margin-left: 40px;">a. Configuration > Cluster Planes > Enable Cluster Redundancy b. Click 'Create New' c. Enter a Name (Cluster-B) d. Click 'Create New IP' > enter the control IP of node-1 in Cluster-B e. Click 'Save' f. Click 'Create New IP' > enter the control IP of node-2 in Cluster-B g. Click 'Save</div> 3) The APs managed by Cluster-A will be configured with the additional Control IP addresses you have just entered. 4) The steps above are repeated on Cluster-B, with the control IP addresses from Cluster-A being entered instead. 5) Cluster-A and B have both now been configured with 'Cluster Redundancy' 6) At this point, Cluster-A's data centre suffers a fire, and partial power-outage. The APs managed by Cluster-A lose reachability to all of the Cluster-A nodes. The APs then start to establish connectivity with the Cluster-B nodes, based upon the Control-IP addresses contained with the AP configuration. The APs establish connectivity, and management of these APs resumes, albeit from Cluster-B. 7) Cluster-A's data centre is recovered, and the SZ cluster is powered-up again. The business wants to move the AP management back to Cluster-A. this can be done-so one AP 'Zone' at a time from the web interface of Cluster-B: a) Configuration > AP Zones > select a zone > click Re-home APs > select target. Note - both clusters must be configured with Cluster Redundancy enabled, if the APs are to be re-homed/switched back between the nodes after a fail-over event occurs. Other uses for Cluster Redundancy: It is possible to use cluster redundancy (in both versions 3.4 and 3.5) to manually fail-over (or migrate) APs from one cluster to another cluster. This might be performed, in the event that the current production cluster hardware is due for replacement. A new cluster is built on new hardware, and the APs are manually failed-over from the old cluster to the new cluster. Licensing: As both clusters are essentially fully-operational SZ clusters with their own management capabilities and the capacity to manage their own WLAN networks, each cluster requires it's own full software licensing (Right-To-Use) and adequate AP licenses to manage any APs which may fail-over to it. In the example above: a) Cluster-A requires a total of 1,050 AP licenses (licenses for the original 1,000 APs, + 50 additional in the case that APs in Cluster-B fail-over to it. b) Cluster-B requires a total of 1,050 AP licenses (licensing for the 50 original APs, + 1,000 in case Cluster-A fails-over to it. AP licenses are shared across the entire cluster. If a node fails all AP licenses remain active for 90 days permitting time to RMA the SZ node across to a new SZ serial number using LiMan Smart Licensing Manager. Cluster Redundancy in SZ version 3.6+: The behaviour of Cluster Redundancy in 3.6 onwards changes significantly. Refer to the SZ 3.6 or 5.x User Guides for further information. Node Management Management of the WLAN/controller network is based on a "single pane" view, where accessing one node's web interface provides a full-view of the APs connected to all nodes within the cluster.

A brief description of how Cluster Redundancy operates in SZ version 3.4

2019-06-18T07:23:01-0700 2019-06-18T12:00:08-0700 https://support.ruckuswireless.com/articles/000009030 2019-06-18T11:40:13-0700 monthly 0.8 admin,premium knowledge_article_3771 knowledge_article_3771 2019-04-11T04:39:15-0700 000009030 Validated (External) Premium Sz300;Virtual smartcell gateway;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Configuration Configuration, SZ300, virtual SmartCell Gateway how do I move APs from Standy cluster to Active cluster? vSZs/SZs configured in Cluster Mode: When moving APs from the Standby cluster to the Active cluster we need to use "Rehome Active Cluster” method, from System. This way all APs from System are moved. This is the explanation from the 5.1 Admistrator Guide: Rehoming Managed APs and Data Planes: Rehoming is the process of returning the APs and external data planes that have failed over to the standby cluster back to their original cluster (once it becomes available). Rehoming must be done manually. APs and external data planes that have failed over will continue to be managed by the failover cluster until you rehome them. <h5 style="margin-left: 40px;">NOTE You can rehome managed APs and external data planes, only in a cluster redundancy environment. When APs or external data planes of a certain active cluster failover to a standby cluster, you must manually restore them to the original cluster, once the active cluster is fixed and back to service.</h5> Rehoming APs or external data planes must be done on a per-cluster basis. Follow these steps to rehome managed APs to the original cluster: <div style="margin-left: 40px;">1. From the Access Points page, select the System to activate rehome operation. 2. Click More and select Rehome Active Clusters.</div> <div style="margin-left: 80px;">A confirmation dialog box appears.</div> <div style="margin-left: 40px;">3. Click Yes, you have set all APs in the standby cluster to rehome to the active cluster to which they were previously connected.</div> <div> vSZ/SZ configured with Single Node: AP switchover is moving APs between clusters, not confined to clusters that enable cluster redundancy. For normal clusters, you can switchover APs with firmware later or equal to R5.0, no matter it is in the Staging or Non-staging Zone in High-scale platform and Default or Non-default Zone in the Essentials platform. But for a standby cluster in cluster redundancy, APs in Staging or Default Zone can only be moved to another cluster by switchover. To configure APs to swtichover clusters: </div> <div style="margin-left: 40px;">1. From the Access Points page, select the AP from the list.</div> <div style="margin-left: 40px;">2. Click More and select Switch Over Clusters. The specify Destination Cluster dialog box appears.</div> <div style="margin-left: 40px;">3. Enter the Control IP or FQDN</div> <div style="margin-left: 40px;">4. Click OK. A confirmation dialog to trigger the AP switchover appears.</div> <div style="margin-left: 40px;">5. Click Yes.</div> <div style="margin-left: 40px;"> NOTE There's another method that only works with non mesh APs, the “Switchover Cluster” method, so we won't be using this one when in cluster redundancy. If we try to do this with a mesh AP, we will get an error window with this message,</div> <div> <img alt="User-added image" height="286" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SpL&feoid=00N50000002Cf3M&refid=0EM2J000000q9Ph" width="500"></img></div> <div style="margin-left: 40px;"> </div> <div> </div> <div style="margin-left: 40px;"> </div>

There are different methods to move APs from different clusters. Here It is explained how to move APs in cluster redundancy.

2019-06-18T11:40:13-0700 2019-06-18T12:00:07-0700 https://support.ruckuswireless.com/articles/000009355 2019-06-18T03:44:37-0700 monthly 0.8 admin,premium knowledge_article_3769 knowledge_article_3769 2019-06-18T03:44:37-0700 000009355 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How to change WLAN configurations i.e password using SNMP MIBs? ****We need to have SNMP Version 3 to push the configuration to the Zone director for changing the WLAN configuration**** To enable and configure SNMP V3 on ZD, we need to follow these steps: Step1: On Zone Director A. Go to System B. System Settings C. Network Management D. SNMP V3 Agent. Step 2: On SNMP V3 Agent Read/Write community, Need to provide the User, Authentication Type, Authentication Passphrase, Privacy Type and Privacy Passphrase and click on apply. Step 3: On SNMP Tool A. Download the SNMP MIB file from the Ruckus Support portal for the current Firmware version of the controller (<a href="https://support.ruckuswireless.com/software?filter=73#firmwares" target="_blank">https://support.ruckuswireless.com/software?filter=73#firmwares</a>) B. Save the file on the local Drive. C. Open SNMP V3 Tool to provide the address of the controller and in Advanced option provide the port Number(161), user, Auth Type, Auth Password, Privacy Type, Privacy Password as same as we have provided on the Controller. ( Please select SNMP Version 3 on Advanced Option ) Step 4: A. Now load the MIB file on the SNMP Tool and select 'ruckusZDWLANconfigWPAKey'. B. Then we can see all the configured WLAN on the controller and need to select the particular WLAN which we need to change the passphrase. C. Post selecting the WLAN on Operations we need to select SET and provide the new passphrase on the value option. Please find the attached document for reference.

This Article will describe how to change WLAN password using SNMP MIBs for the Zone Directors.

2019-06-18T03:44:37-0700 2019-06-18T06:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000000OO9SAM?attachment_index=0 2019-06-18T06:00:07-0700 monthly admin,premium knowledge_article_3769 knowledge_article_3769_attachment_1 SNMP MIBs.pptx 237909.0 application/vnd.openxmlformats-officedocument.presentationml.presentation https://support.ruckuswireless.com/articles/000003576 2019-06-17T07:54:15-0700 monthly 0.8 admin,premium knowledge_article_1359 knowledge_article_1359 2014-10-29T20:29:09-0700 000003576 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Zoneswitch;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Installation Installation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, ZoneSwitch, SmartCell Gateway Which Ruckus Devices are UL certified ? UL (Underwriters Laboratories) is a safety consulting and certification company. To find out which Ruckus devices are UL certified. + Navigate to link : http://database.ul.com/cgi-bin/XYV/template/LISEXT/1FRAME/compsrch.html + Create an account if there does not exist one already + Search with company name "Ruckus Wireless Inc" <img alt="User-added image" height="254" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SnA&feoid=00N50000002Cf3M&refid=0EM50000000LaDQ" width="500"></img> This will give you list of Ruckus devices certified by UL.

Ruckus devices listed in UL (Underwriters Laboratories)

2019-06-17T07:54:15-0700 2019-06-17T12:00:22-0700 https://support.ruckuswireless.com/articles/000005033 2019-06-17T07:59:03-0700 monthly 0.8 admin,premium knowledge_article_3768 knowledge_article_3768 2015-08-20T16:13:47-0700 000005033 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector Why doesn't my service schedule display when I configure an autonomous WLAN? The service schedule doesn't display when configuring an autonomous WLAN. This is an expected behavior when configuring an autonomous WLAN.

Due to the nature of autonomous WLANs, they do not have service schedule settings.

2019-06-17T07:59:03-0700 2019-06-17T12:00:20-0700 https://support.ruckuswireless.com/articles/000005823 2019-06-17T07:51:02-0700 monthly 0.8 admin,premium knowledge_article_2353 knowledge_article_2353 2016-06-09T14:31:52-0700 000005823 Validated (External) Premium Zoneflex indoor Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor How can Customers troubleshoot an ISP provided Access Point? To troubleshoot an AP that might be bad, perform these tests. No Power 1. Does AP use power adapter or PoE? Power Adapter I. Disconnect power connector from back of AP, and reconnect it. II. Disconnect power plug from wall adapter or power strip, connect a lamp or other device to test outlet. If necessary, connect AP power plug to another wall outlet or power strip port. PoE Switch I. Disconnect Ethernet cable from AP, reconnect and be sure it's into PoE labeled Ethernet port. II. Disconnect Etherent cable from PoE switch, reconnect cable to a different PoE output switch port. III. Change Ethernet cable, and perform steps I and II again if necessary. IV. Try connecting another AP to the same switch port and if it powers on, it is very likely that this AP is defective. If AP does not power on after these troubleshooting steps, contact Service Provider for an RMA.

ISP provided APs are not accessible by customers using SSH, and limits available troubleshooting.

2019-06-17T07:51:02-0700 2019-06-17T12:00:19-0700 https://support.ruckuswireless.com/articles/000007536 2019-06-17T08:11:20-0700 monthly 0.8 admin,premium knowledge_article_3219 knowledge_article_3219 2017-12-13T14:16:37-0800 000007536 Validated (External) Premium Ruckus icx switches;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway Do we have Ruckus Mesh Max Hops and Loop Detection and how can they be described Ruckus Mesh Loop Prevention is incorporated in our Meshing algorithm itself. 1) What is the maximum # of Mesh hops? Software does implement a hard limit - since the mesh link connection is dynamic, a MAP can usually hear from multiple nodes on the same chain, loop detection on the mesh chain is critical for stability. In the Loop Detection mechanism, at most 8 Access Point MAC addresses can be stored in the frame (eMAP included). That equates to 7 max "links/hops" for calculation. Then, 5, and 3, with eMAP involved, etc. 2) What do we recommend for MAPs when STP and loop protection are enabled? It is ok to turn on STP on the network side. - Turn off port security on the switch side (relating to GW MAC protection) APs internally have a loop avoidance feature that will kick in for 10 seconds at a time, if bridging code notices looping.

Mesh algorithms are intelligent and dynamic, adjusting to conditions between last MAP and Root AP

2019-06-17T08:11:20-0700 2019-06-17T12:00:18-0700 https://support.ruckuswireless.com/articles/000003351 2019-06-17T07:45:09-0700 monthly 0.8 admin,premium knowledge_article_1258 knowledge_article_1258 2014-09-03T16:54:21-0700 000003351 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Troubleshooting Performance, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor Why are the APs upgrading firmware whenever the ZD is rebooted? Reset the APs and upgrade them in standalone mode to version 9.8.0.0.373 and their Back up file will also get updated. Connect them to network, they will join the ZD and will not upgrade firmware whenever the ZD is rebooted.

APs upgrade firmware whenever the ZD is rebooted

2019-06-17T07:45:09-0700 2019-06-17T12:00:17-0700 https://support.ruckuswireless.com/articles/000006423 2019-06-17T08:06:54-0700 monthly 0.8 admin,premium knowledge_article_2654 knowledge_article_2654 2017-08-22T16:33:53-0700 000006423 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Performance;Configuration;Installation Performance, Configuration, Installation, SZ100 What is the SZ-100 port throughput and usage (Mgt/Control) vs DataPlane traffic? 1. What is the real life expected maximum throughput on SZ-100 with 10gE ports encrypted and unencrypted? Based on 1400 byte packets <ul><li>10 Gbps unencrypted </li><li>5 Gbps encrypted </li></ul> 2. Can the 4x1GE ports still be used for management/control traffic when using 10GE ports for Data Plane? Yes, 1 GE ports can be used for management/control and 10GE ports for Data Plane traffic. <img alt="User-added image" height="341" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SnK&feoid=00N50000002Cf3M&refid=0EM50000000BkWb" width="606"></img> Configuration is done during Setup and can’t be changed: <img alt="User-added image" height="534" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SnK&feoid=00N50000002Cf3M&refid=0EM50000000BkWq" width="645"></img> <img alt="User-added image" height="378" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SnK&feoid=00N50000002Cf3M&refid=0EM50000000BkWv" width="691"></img> <img alt="User-added image" height="351" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SnK&feoid=00N50000002Cf3M&refid=0EM50000000BkX0" width="691"></img>

SZ-100 can use One Port Group (Mgt / Cntrl) or Two Port Group (separate Mgt / Cntrl) configuration.

2019-06-17T08:06:54-0700 2019-06-17T12:00:14-0700 https://support.ruckuswireless.com/articles/000006400 2019-06-17T08:31:21-0700 monthly 0.8 admin,premium knowledge_article_3766 knowledge_article_3766 2017-07-06T21:19:19-0700 000006400 Validated (External) Premium Zoneflex indoor Configuration;Firmware;Installation;Troubleshooting Configuration, Firmware, Installation, Troubleshooting, ZoneFlex Indoor Is Mesh feature supported on R310 AP R310 AP does not support mesh

2019-06-17T08:31:21-0700 2019-06-17T12:00:12-0700 https://support.ruckuswireless.com/articles/000003675 2019-06-17T08:35:08-0700 monthly 0.8 admin,premium knowledge_article_1438 knowledge_article_1438 2014-11-19T06:09:59-0800 000003675 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor System network management System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor why are we unable to access the AP in the factory default state? - Disconnected the AP from the network, powered it up using power adapter and accessed it directly by connecting it to a PC.

This article describes ones of the reasons for unsuccessful login to the Factory default AP GUI

2019-06-17T08:35:08-0700 2019-06-17T12:00:11-0700 https://support.ruckuswireless.com/articles/000004989 2019-06-17T08:47:03-0700 monthly 0.8 admin,premium knowledge_article_2113 knowledge_article_2113 2015-08-21T07:24:27-0700 000004989 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How to map external syslog server on ZoneDirector to get DFS events ? Navigate to ZoneDirector GUI >> Configure >> System >> Log Settings : Enable Remote Syslog / inherit remote Syslog server for APs <ul><li>Under Remote syslog Advance Settings</li></ul> Configure : ZoneDirector Settings Facility Name : Keep Original Priority Level : Warning Configure: Managed AP Settings Facility Name : Keep Original Priority Level : Warning <img alt="User-added image" height="193" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Sny&feoid=00N50000002Cf3M&refid=0EM50000000LpIX" width="500"></img> The Priority level is set to Warning as DFS channel information is associated with Priority Level Warning category From the ZoneDirector Syslog Events Reference Guide: {ap} can not support DFS channel {channel}. - Warning - Set channels to non-DFS channels. AP does support DFS channel specified. {ap} can not support CBand channel {channel} .- Warning - No action required. AP does not support C-Band channels (149 – 161).

Remote Syslog server configuration for DFS events

2019-06-17T08:47:03-0700 2019-06-17T12:00:08-0700 https://support.ruckuswireless.com/articles/000005552 2019-06-17T03:51:06-0700 monthly 0.8 admin,premium knowledge_article_2290 knowledge_article_2290 2016-03-04T03:51:00-0800 000005552 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Installation Performance, Installation, SmartCell Gateway, virtual SmartCell Gateway What is the maximum number of local DB users and guest passes in SZ controllers? The maximum number of local DB users + guest passes is limited per platform as follows: - SCG-200: 1 Million entries - vSZ-H: 40.000 entries up to release 3.1. It is increased to 1 Million entries starting with 3.1.1 - SZ-100: 120.000 entries - vSZ-E: 40.000 entries Local DB is intended only for users generated by ZeroIT and HS2.0 onboarding, and is not available for use with WebAuth.

Maximum number of local DB users and guest passes in SZ controllers.

2019-06-17T03:51:06-0700 2019-06-17T06:00:08-0700 https://support.ruckuswireless.com/articles/000003691 2019-06-17T03:24:11-0700 monthly 0.8 admin,premium knowledge_article_1451 knowledge_article_1451 2014-11-25T01:06:53-0800 000003691 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor How to configure NAS ID with IP address for radius authentication. NAS ID could be configured either Using GUI or CLI of the AP. Configuration of NAS ID using GUI : -For configuring the NAS ID go to Configure > HotSpot - select the More Options (below is the snippet) <img alt="User-added image" height="224" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Slx&feoid=00N50000002Cf3M&refid=0EM50000000LbHo" width="500"></img> Now we would be able to see the configuration of NAS ID . We could configure a string or an IP address in it as shown in below snippet. <img alt="User-added image" height="252" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Slx&feoid=00N50000002Cf3M&refid=0EM50000000LbHt" width="500"></img> - Save the configuration by clicking on update settings . Now we have configured the NAS ID for the Hotspot WLAN. Configuration of NAS ID using CLI: - SSH into the AP and run below command : rkscli: set hotspot hotspot0 nas-id First-Floor AP

Configure NAS-ID on Standalone AP

2019-06-17T03:24:11-0700 2019-06-17T06:00:08-0700 https://support.ruckuswireless.com/articles/000006260 2019-06-16T21:39:44-0700 monthly 0.8 admin,premium knowledge_article_3689 knowledge_article_3689 2017-02-15T15:35:50-0800 000006260 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Firmware Firmware, Unleashed Why do the member Unleashed APs not get upgraded We upgraded other APs through CLI individually and all APs could be seen connected to Unleashed network at 200.3 eventually.

Master Unleashed AP was upgraded to 200.3 from 200.1 version but it did not upgrade rest of the APs which remained at 200.1 version and got disconnected.

2019-06-16T21:39:44-0700 2019-06-17T00:00:09-0700 https://support.ruckuswireless.com/articles/000006406 2019-06-16T21:51:49-0700 monthly 0.8 admin,premium knowledge_article_3764 knowledge_article_3764 2017-07-19T07:21:14-0700 000006406 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector Why does the primary ZD not send SMTP messages Open all necessary ports for communication for all 3 IP addresses (active ZD IP, standby ZD IP and management IP) When you have enabled the management IP address on your ZD, the active will always communicate using the management IP with the SMTP server. In case the active ZD fails the standby will become the active and will also use the same management IP address for communication. But when both ZDs are up, the Active will use management IP and the Standby will communicate using its physical IP address for communication with SMTP server.

The customer has 2 ZDs working in redundancy

2019-06-16T21:51:49-0700 2019-06-17T00:00:08-0700 https://support.ruckuswireless.com/articles/000009401 2019-06-13T15:58:39-0700 monthly 0.8 admin,premium knowledge_article_3760 knowledge_article_3760 2019-06-13T15:58:39-0700 000009401 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, SmartCell Insight Can we install SCI in Nutanix Hyperconverge (HCI) platform? Yes, a customer using VMware or Hyper-V hypervisors should be able to install SCI in Nutanix Hyperconverge (HCI) platform environment. But the Acropolis hypervisor is not supported today. They need either VMware or Hyper-V running in Nutanix, and then install SCI on top of either of those.

We should be able to install SCI in Nutanix using VMware or Hyper-V hypervisors, but Acropolis is not supported.

2019-06-13T15:58:39-0700 2019-06-13T18:00:06-0700 https://support.ruckuswireless.com/articles/000009393 2019-06-13T05:35:21-0700 monthly 0.8 admin,premium knowledge_article_3756 knowledge_article_3756 2019-06-13T05:35:21-0700 000009393 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway Why are the Sessions and Clients total data usage graphs in SCI, showing different total GB of throughput? The 'Client' and 'Sessions' Data Cubes within SCI are populated with data from different areas of SmartZone. In the event that the two sources are not correctly synchronised, it is possible that these differences will be reflected and more apparent in SCI. This is a known issue in SZ (SCG-70193) regarding how the client Tx/Rx counters are reset after a client disconnects. The incremental counter value is reported into 'Client' in SCI, but the reset (after client disconnect) counter value is reported into 'Sessions' in SCI. This bug is present in SZ 3.5.1 and 3.6.0. It is fixed in 3.6.1 onwards.

A description of why the data reported in Sessions and Clients graphs, might be different

2019-06-13T05:35:21-0700 2019-06-13T06:00:07-0700 https://support.ruckuswireless.com/articles/000002840 2019-06-11T16:23:11-0700 monthly 0.8 admin,premium knowledge_article_3592 knowledge_article_3592 2014-03-25T21:30:14-0700 000002840 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What should I do if my ZD gets stuck during upgrade? Try Power Cycling the ZD, and Upgrade again. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

Customer tried to upgrade ZD 1100 from 9.5.1.0.50 to 9.6.0.0.27 and ZD got struck in middle.

2019-06-11T16:23:11-0700 2019-06-11T18:00:36-0700 https://support.ruckuswireless.com/articles/000001720 2019-06-11T16:32:48-0700 monthly 0.8 admin,premium knowledge_article_856 knowledge_article_856 2013-03-04T14:28:04-0800 000001720 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Windows machines unable to authenticate while using 802.1x EAP An 802.1x client may fail to connect to a Radius server if the Trusted Root CA certificate that issued the Radius server certificate is not installed on the client computer. Either verify that the trusted root authority is installed on the client computer or disable certificate validation on the client. Please make the below changes in client machine to disable certificate validation. WARNING: This disables an important component of client security. Only do this when other elements of your network security are sufficient to ensure against unauthorized access! Manually create a wireless network profile, <img alt="User-added image" height="305" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SfQ&feoid=00N50000002Cf3M&refid=0EM50000000LGBj" width="500"></img> Enter the network name(SSID), security and encryption type as configured in the ZD-wlan and click next, <img alt="User-added image" height="367" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SfQ&feoid=00N50000002Cf3M&refid=0EM50000000LGBo" width="500"></img> Once the profile is created, right click on it and choose properties, <img alt="User-added image" height="274" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SfQ&feoid=00N50000002Cf3M&refid=0EM50000000LGBt" width="500"></img> Click on the Security tab and choose authentication method 'settings' option, <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SfQ&feoid=00N50000002Cf3M&refid=0EM50000000LGBy"></img> Uncheck 'Validate server certificate' option and click on configure, <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SfQ&feoid=00N50000002Cf3M&refid=0EM50000000LGC3"></img> Uncheck the option 'Automatically use my windows logon name and password', click ok, <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SfQ&feoid=00N50000002Cf3M&refid=0EM50000000LGC8"></img> Now go back to the wlan properties screen and click on advanced settings, <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SfQ&feoid=00N50000002Cf3M&refid=0EM50000000LGCD"></img> Check the option 'specify authentication mode' and select user authentication, <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SfQ&feoid=00N50000002Cf3M&refid=0EM50000000LGCI"></img> Once this is done you will be prompted to enter the username and password stored in Radius server, once this is entered you will see the authentication going through and client getting connected to wireless. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SfQ&feoid=00N50000002Cf3M&refid=0EM50000000LGCN"></img> “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

Profile configuration on Windows computer for PEAP authentication

2019-06-11T16:32:48-0700 2019-06-11T18:00:29-0700 https://support.ruckuswireless.com/articles/000003503 2019-06-11T16:34:10-0700 monthly 0.8 admin,premium knowledge_article_1340 knowledge_article_1340 2014-10-19T17:56:27-0700 000003503 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Troubleshooting Installation, Troubleshooting, ZoneDirector What are the RADIUS 2008 server reason codes and an explanation for unsuccessful Logins? Windows 2008 Network Policy Server (NPS) provides reason codes to identify changes, problems, and status via events in Event Viewer while NPS is running. For each and every user login attempt there will be a log created on the Radius server side under Event Viewer ==> Windows logs ==> Security. The reason codes in the attached document are applicable for Windows Server 2008, Windows Server 2008 R2. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

Windows 2008 Network Policy Server (NPS) provides reason codes to identify changes, problems, and status via events in Event Viewer while NPS is running.

2019-06-11T16:34:10-0700 2019-06-11T18:00:28-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PHc0CAG?attachment_index=0 2019-06-11T18:00:28-0700 monthly admin,premium knowledge_article_1340 knowledge_article_1340_attachment_1 Radius 2008 reason codes explained.pdf 499288.0 application/pdf https://support.ruckuswireless.com/articles/000001706 2019-06-11T16:36:34-0700 monthly 0.8 admin,premium knowledge_article_234 knowledge_article_234 2013-02-28T13:23:54-0800 000001706 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;System network management;Troubleshooting;Knowledge base Configuration, Security, System Network Management, Troubleshooting, Knowledge Base, ZoneDirector LDAP authentication with no password or empty password <h1>LDAP Authentication with Empty Password</h1> <img alt="User-added image" height="425" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Sff&feoid=00N50000002Cf3M&refid=0EM50000000LG8B" width="500"></img> When configuring the LDAP authentication options, users might be confused as to why a correct username and an empty password field successfully authenticates. This is working as designed by the Zone Director because we need to allow users that want to authenticate with a null password field to do so. This behavior is in accordance with RFC 2251 (Internet Engineering Task Force -> f<a href="http://www.ietf.org/rfc/rfc2251.txt" target="_blank">http://www.ietf.org/rfc/rfc2251.txt</a>) and TID# 10057574. However there should be a solution on the LDAP server. The specific solution for Novell's iManager to not allow empty password fields are the following: 1) Login to iManager 2) Select LDAP 3) LDAP options 4) View LDAP servers 5) Select your LDAP server 6) Select the "connections tab" 7) Scroll down to "Restrictions" 8) Set "Bind Restrictions" to disallow "Anonymous Binding" The instructions might be vendor specific so search through their settings for restrictions-like options and be sure to search their respective knowledge base for terms like "anonymous binding" and not just "empty password" or "no password" which might not bring up the correct hits. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

Customers may be able to authenticate against an LDAP server with the correct username and an empty password field.

2019-06-11T16:36:34-0700 2019-06-11T18:00:27-0700 https://support.ruckuswireless.com/articles/000005492 2019-06-11T16:37:36-0700 monthly 0.8 admin,premium knowledge_article_2279 knowledge_article_2279 2016-02-22T11:01:51-0800 000005492 Validated (External) Premium Zonedirector;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, virtual SmartCell Gateway Can we use encrypted passwords in LDAP with ZD/vSZ for user authentication? SCG/ZD Radius module supports LDAP authentication with clear text password, not the encrypted password. As of now we cannot use LDAP with salted hash passwords(using MD5 algorithm) with ZD/vSZ for user authentication. However LDAP/AD over TLS is supported on ZD. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

This article gives you information on whether ZD/vSZ supports the encrypted passwords with LDAP/Open LDAP.

2019-06-11T16:37:36-0700 2019-06-11T18:00:26-0700 https://support.ruckuswireless.com/articles/000003725 2019-06-11T16:38:34-0700 monthly 0.8 admin,premium knowledge_article_1466 knowledge_article_1466 2014-12-01T05:35:58-0800 000003725 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector Is it possible to configure 802.1X with Active Directory? 802.1X standard only works with RADIUS and cannot be used with Active Directory (AD) directly. The User database may be stored in AD, but that is accessed through the Radius server, so the ZoneDirector only talks to the Radius server and not directly to Active Directory. The only way of using the AD authentication directly is for web authentication/captive portal. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

This article explains whether if it is possible to configure 802.1X with Active Directory with ZoneDirector

2019-06-11T16:38:34-0700 2019-06-11T18:00:25-0700 https://support.ruckuswireless.com/articles/000004022 2019-06-11T16:43:25-0700 monthly 0.8 admin,premium knowledge_article_1581 knowledge_article_1581 2015-02-04T00:59:28-0800 000004022 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How can I allow access for my hotspot users to go to Google Play store while still placed within the walled garden? By default a hotspot network configured on a ZD will block Internet access unless the user goes through a web browser based authentication first (or some other form of auto authentication via http communication between wireless client and the network). Hotspot administrator may decide to make exception to this block-all-by-default rule. The way to do this is through configuration of walled garden. Whatever Internet sites are specified in this list can be visited by hotspot users without going through web based authorization. Walled garden setting is available under ZD's Configure --> Hotspot Service page. Click on the hotspot service that you are interested in. Just using Google Play store as a sample, following URLs need to be added to the walled garden: ocsp.digicert.com crl3.digicert.com crl4.digicert.com *.play.google.com *.ssl.gstatic.com *.android.clients.google.com *.googleusercontent.com *.ggpht.com *.geotrust.com *.appengine.google.com *.settings.crashlytics.com *.googleapis.com *.cloud.google.com *.gvt1.com *.android.com *.amazon.com “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

This article contains a list of website URLs that need to to be included in the walled garden to allow access to the Google Play store.

2019-06-11T16:43:25-0700 2019-06-11T18:00:21-0700 https://support.ruckuswireless.com/articles/000006319 2019-06-11T16:47:04-0700 monthly 0.8 admin,premium knowledge_article_3533 knowledge_article_3533 2017-03-27T10:32:41-0700 000006319 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway Do you know why SZ 3.5 Sig File upload would fail and how to correct? Issue is fixed on 3.6.1 and later releases. Upgrade to 3.6.1 latest release or later version. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

An Application Control Policy prevents Sig File upload, and must be disabled for Sig File successful upload.

2019-06-11T16:47:04-0700 2019-06-11T18:00:18-0700 https://support.ruckuswireless.com/articles/000005100 2019-06-11T16:50:08-0700 monthly 0.8 admin,premium knowledge_article_2327 knowledge_article_2327 2015-09-08T08:44:53-0700 000005100 Validated (External) Premium Smart wireless services;Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Firmware Firmware, Smart Wireless Services, virtual SmartCell Gateway, SZ100 Can I downgrade an SZ controller to a previous version? SCG/SZ prohibits downgrading using the standard Firmware mechanism. It is only possible to restore a previous Cluster (full system) backup made with the previous version in vSZ and SZ and to enter setup mode and upgrade/downgrade with local file in SZ100 Restoring cluster restores the system to the version configuration and data at the time it was saved. All newer configuration and changes will be lost. Prior to SZ 3.1.1 you could NOT downgrade to RuckOS 3.0.4 without bricking the system resulting in RMA. Starting with SZ 3.1.1, you can restore a 3.0.4 Cluster Snapshot without needing to re-build the instance. ----- To downgrade a SmartZone/RuckOS based controller to a previous version, please navigate to In SZ100: Administration > Backup & Restore > Cluster Backup and Restore and click on the restore icon as shown in the below picture In below picture, we're trying trying to downgrade SZ100 from 3.1.1.0.450 to 3.1.1.0.442 <img alt="User-added image" height="161" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SgY&feoid=00N50000002Cf3M&refid=0EM50000000Lr3Z" style="width: 960px; height: 332px;" width="733"></img> In vSZ-E/vSZ-H Administration > Cluster Backup and Restore and click on the icon to restore (refer above screenshot for icon) Note: Best practices dictate that you should always save a configuration backup before performing upgrades, and include digits in the filename to remind you what version the backup was taken from, so you can also restore the configuration file, if you decide that you want to go back to a previous FW version. It is also be possible to downgrade SCG-200/SZ100 by factory defaulting the box and then from the second setup page in the WEB-UI (Cluster Join/create), select the ICON on bottom left allowing upgrading or downgrading the firmware without restrictions: <img alt="User-added image" height="337" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SgY&feoid=00N50000002Cf3M&refid=0EM50000000ELuo" style="width: 643px; height: 429px;" width="500"></img> “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

How to downgrade SmartZone controller to a previous firmware version

2019-06-11T16:50:08-0700 2019-06-11T18:00:17-0700 https://support.ruckuswireless.com/articles/000008069 2019-06-11T16:55:28-0700 monthly 0.8 admin,premium knowledge_article_3667 knowledge_article_3667 2018-08-15T14:04:50-0700 000008069 Validated (External) Premium Zonedirector;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector, virtual SmartCell Gateway Why do we need to reboot the controller for mesh AP migration? For the mesh environment, basically SZ needs to set one specific setting on ZD and ZD needs to be rebooted in order to take effect. If you have already reboot this ZD after SZ sets this config to ZD, you don’t have to reboot it again. <ul><li style="color: black;">What is the difference or change in migration process after rebooting the controller ?</li></ul> <div>Answer: The specific mesh config will take effect on ZD after reboot.</div> <ul><li style="color: black;">Do we need to reboot the ZD after “connection and fetching ZD AP info” or “after clicking migrate button”?</li></ul> Answer: If you got this message “If ZoneDirector has mesh enabled, please restart the ZoneDirector and then refresh this page to connect to ZoneDirector again.”, you can go ahead and reboot the ZD. <ul><li style="color: black;">If a customer is performing migration of 100 AP’s in a batch of 25 AP’s , Does he need to reboot the controller after each batch of migration?</li></ul> Answer: Rebooting ZD once is enough. <ul><li style="color: black;">Once we start the migration process a new AP Zone will be created on the SZ. How does mesh AP’s remain connected in network after migration because we cannot enable mesh in AP zone during migration?</li></ul> Answer: If ZD has the mesh configuration, these configurations will be moved to this new AP zone on SZ to make sure the mesh can work correctly. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

During migration you will get a notification "If ZoneDirector has mesh enabled, please restart the ZoneDirector and then refresh this page to connect to ZoneDirector again". Customer wants to know why he needs to reboot the controller for mesh AP migration.

2019-06-11T16:55:28-0700 2019-06-11T18:00:11-0700 https://support.ruckuswireless.com/articles/000004969 2019-06-11T16:58:55-0700 monthly 0.8 admin,premium knowledge_article_3718 knowledge_article_3718 2015-08-03T10:21:21-0700 000004969 Validated (External) Premium Virtual smartcell gateway Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, virtual SmartCell Gateway What can I do if I get ovf errors when trying to install the .ova instance of vSZ? There have been .ova installation problems reported with VM Workstation, not seen with VM Fusion. The same problem was seen with vSCG 3.0.3, 3.0.4 and 3.1.1 Symptom: VMWorkstation 10.0 loads and runs the vSCG 3.0.3 or 3.0.4 and 3.1.1 OVA file on a Dell Latitude notebook, but fails to load the vSCG .ova file on a lab system Dell Precision 3500 desktop which has higher hardware specifications. Test Environment: Dell Pecision t3500 with Xeon hyperthreaded quad core CPUand 24Gb RAM running Windows 7 64 bit (Fails) Dell Latitude E7440 with i7 4600U hyperthreaded 2 core CPU and 16Gb RAM running Windows 7 64 bit (Works) Curiously vSPoT 1.5 OVF file loads and runs just fine on both platforms. Attempting a load of the ova file results in the error below: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000ShM&feoid=00N50000002Cf3M&refid=0EM50000000Lp5i"></img> Solution: 1. Use something like 7-Zip to extract the .ova archive files which results in this: <img alt="User-added image" height="156" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000ShM&feoid=00N50000002Cf3M&refid=0EM50000000Lp5n" width="500"></img> 2. Open the .ovf file with a text editor, Notepad is just fine. Search for ulaSection Then look for the osType specification. <img alt="User-added image" height="125" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000ShM&feoid=00N50000002Cf3M&refid=0EM50000000Lp5s" width="500"></img> Notice that the specification is vmw:osType="*other26xLinux64Guest" Edit this by removing the leading asterisk so that it becomes vmw:osType="other26xLinux64Guest" Save .ovf file and exit Notepad 3. Now return to VMWorkstation and open the modified .ovf file, if the .mf and .vmdk extracted files are in the same folder these will be automatically loaded. Continue with normal vSCG installation. “For more information on this topic—including video tutorials—visit the Ruckus Support How-To Hub at <a href="https://support.ruckuswireless.com/how-to-hub" target="_blank">https://support.ruckuswireless.com/how-to-hub</a>.”

Virtual SmartZone .ova should load on VM Workstation or VM Fusion. If problems loading on VM Workstation, below are suggestions.

2019-06-11T16:58:55-0700 2019-06-11T18:00:07-0700 https://support.ruckuswireless.com/articles/000009324 2019-06-11T03:54:41-0700 monthly 0.8 admin,premium knowledge_article_3752 knowledge_article_3752 2019-06-03T08:34:57-0700 000009324 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security;Troubleshooting;Known issues and workarounds Configuration, Security, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway When a user is redirected to a Hotspot/WISPr Landing Page, why does the redirection URL address appear twice in the browser address? The design of the redirect URL constructed by the SmartZone platform is a product of how the redirect was originally developed on the Zone Director platform and then further-developed for the SZ platform at a later date. The reason is therefore due to a combination of 'legacy' and backward-compatibility reasons and should not be considered problematic in any way.

A description of why some content in the end-users' https/http redirect URL may appear twice

2019-06-11T03:54:41-0700 2019-06-11T06:00:07-0700 https://support.ruckuswireless.com/articles/000009331 2019-06-11T03:55:19-0700 monthly 0.8 admin,premium knowledge_article_3751 knowledge_article_3751 2019-06-04T01:27:55-0700 000009331 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Configuration Performance, Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway Which APs and software versions support the use of upper 5.8GHz/UNII-3 channels with a UK country code? Summary: The UKs regulatory body permitted the use of 'UNII-3' 5GHz channels 149, 153, 157, 161,165 for indoor use in March 2017. Ruckus software has since been included support for these channels when using a UK country-code configuration. Supported Platforms: Support was introduced in the following software: - SmartZone 3.6.1.0.MR1 (3.6.1.0.227) - ZoneDirector 10.3 (not released at time of writing, June 2019) Support APs: The following wave-2 APs support these new channels, and also subsequent later models: <div style="margin-left: 40px;">R720 R610 R510 R310, R320 T310 H510 M510</div> Unsupported APs: Wave-1 802.11ac AP models such as the R300, R500, R600, T300. Note that the R710 also does not support this change. There are no plans to include it. Known Issues: It is recommended to use release 3.6.2 Patch 1 (3.6.2.0.222) due to a related bug in 3.6.1 (ER-6664).

A summary of which APs and software versions support upper 5.8GHz channels when using UK country code

2019-06-11T03:55:19-0700 2019-06-11T06:00:06-0700 https://support.ruckuswireless.com/articles/000002569 2019-06-09T20:34:50-0700 monthly 0.8 admin,premium knowledge_article_705 knowledge_article_705 2014-01-30T16:27:37-0800 000002569 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Security Configuration, Installation, Security, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How do I determine the Circuit ID that is used in DHCP option 82 When I get a packet capture of the DHCP option 82 I see the following. <img alt="capture_w_option82_hex" height="212" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SdK&feoid=00N50000002Cf3M&refid=0EM50000000LQOO" width="500"></img> As you can see from the picture above the circuit ID starts with the Indicator type and not the circuit ID itself. The info is in hexadecimal on the left. Realize this information is for this AP and WLAN only. Every circuit will be different

What is the Circuit ID in DHCP option 82

2019-06-09T20:34:50-0700 2019-06-10T00:00:19-0700 https://support.ruckuswireless.com/articles/000003395 2019-06-09T19:10:38-0700 monthly 0.8 admin,premium knowledge_article_1268 knowledge_article_1268 2014-09-14T20:11:31-0700 000003395 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector Why wireless clients are getting different gateway IP addresses when connected to wireless network. Gateway IP address on the Zone Director is changed after enabling the DHCP server on the ZoneDirector; due to this Zone Director will still provide previous gateway IP address. - Disable and re-enable DHCP server on the ZoneDirector. - Connect the client to wireless network and now it will be able to get actual IP address with gateway information.

Wireless clients connected to the WLAN will get a different gateway IP then expected IP addresses

2019-06-09T19:10:38-0700 2019-06-10T00:00:14-0700 https://support.ruckuswireless.com/articles/000003407 2019-06-09T19:08:13-0700 monthly 0.8 admin,premium knowledge_article_3531 knowledge_article_3531 2014-09-18T01:31:47-0700 000003407 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why is email alarm is not triggered when the AP is facing heartbeat lost problem with the ZD "AP Lost Contact" Email alarm works as follows. When ZoneDirector loses connection with an AP and is unable to re-establish connection within 20 minutes, it sends the alarm message to the configured email address. "AP Lost Contact" will be triggered only after 20 mins from the time AP gets disconnected from ZD. Note: <div>With the exception of the Lost Contact with AP event, Zone Director only sends one email alarm notification for each event. If the same event happens again, no alarm will be sent until you clear the alarm on the Monitor > All Alarms page. On the other hand, Zone Director sends a new alarm notification each time the Lost Contact with AP event occurs.</div>

Email alarm is not triggered when the AP loses heartbeats with ZD. It is only triggered when AP loses contact with ZD

2019-06-09T19:08:13-0700 2019-06-10T00:00:12-0700 https://support.ruckuswireless.com/articles/000003420 2019-06-09T18:55:16-0700 monthly 0.8 admin,premium knowledge_article_3749 knowledge_article_3749 2014-09-23T09:08:35-0700 000003420 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell ap Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP Why is a Motorola scanner unable to connect to a secured vSCG network Some clients do not like mix mode. The best thing to do is to set the WLAN as either WAP-TKIP or WPA2-AES. Use WAP2-AES when ever possible. Try not to use any of these combination of Encryption Method/Algorithm: WAP-mixed-(AUTO/TKIP/AES) WAP-AES WAP2-TKIP

*The scanner is able to connect to an open WLAN *Tested WLAN with and without 802.11d setting *Other clients are able to connect just fine

2019-06-09T18:55:16-0700 2019-06-10T00:00:11-0700 https://support.ruckuswireless.com/articles/000001908 2019-06-09T21:18:30-0700 monthly 0.8 admin,premium knowledge_article_3748 knowledge_article_3748 2013-04-01T13:40:04-0700 000001908 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Security Configuration, Security, ZoneFlex Indoor, ZoneFlex Outdoor Do Ruckus APs support CDP (Cisco Discovery Protocol) ? No, Ruckus APs don't support Cisco Discovery Protocol.

2019-06-09T21:18:30-0700 2019-06-10T00:00:10-0700 https://support.ruckuswireless.com/articles/000003221 2019-06-09T19:59:17-0700 monthly 0.8 admin,premium knowledge_article_3747 knowledge_article_3747 2014-07-17T09:40:03-0700 000003221 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor Can we use Bonjour Gateway to bridge iChat service between VLANs? - Following the workaround steps above, resolves the issue.

iChat is not one of our standard Bonjour Bridge services defined, but we can support iChat between VLANs (wired/wireless) with an "Other" service definition.

2019-06-09T19:59:17-0700 2019-06-10T00:00:09-0700 https://support.ruckuswireless.com/articles/000003105 2019-06-09T13:19:57-0700 monthly 0.8 admin,premium knowledge_article_1106 knowledge_article_1106 2014-06-06T01:50:14-0700 000003105 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why I am unable to download Zero-IT configuration file? The DPSKs created on ZoneDirector reached the threshold limit and after deleting few expired DPSKs and unused DPSKs, downloading of new Zero-IT config file was successful.

DPSK reached the threshold limit on ZoneDirector - Affecting Zero-IT (prove flie) download

2019-06-09T13:19:57-0700 2019-06-09T18:00:17-0700 https://support.ruckuswireless.com/articles/000002196 2019-06-09T14:23:14-0700 monthly 0.8 admin,premium knowledge_article_1160 knowledge_article_1160 2013-10-08T13:12:52-0700 000002196 Validated (External) Premium Zonedirector;Zoneflex 7782;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex 7782 Why is ZF-7782 unable to connect to ZD - If GPS option is enabled on this AP (can be seen in the ZD or from the AP CLI), the AP will not connect to the ZD. - Disable the GPS Option which would resolve the issue.

AP ZF7782 unable to join the ZD due to the error "Get Configurations Fault"

2019-06-09T14:23:14-0700 2019-06-09T18:00:15-0700 https://support.ruckuswireless.com/articles/000003124 2019-06-09T14:31:23-0700 monthly 0.8 admin,premium knowledge_article_1195 knowledge_article_1195 2014-06-11T09:31:56-0700 000003124 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Does ZD support German umlauts? ZoneDirector does not support these kind of special characters as of now. Microsoft Radius server supports these characters. Even if Radius server is configured with usernames including Umlauts characters, ZD will not accept it when client tries to authenticate. (ideally, ZD will take them as plain characters)

German Umlauts used in clients username are unable to authenticate with ZD. German Umlauts are special characters which are ü ö ä Ä Ü Ö ß

2019-06-09T14:31:23-0700 2019-06-09T18:00:14-0700 https://support.ruckuswireless.com/articles/000002075 2019-06-09T13:50:20-0700 monthly 0.8 admin,premium knowledge_article_440 knowledge_article_440 2013-06-02T19:29:11-0700 000002075 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How I can self-provision clients that do not have ethernet ports Please find attached the document which will help us on configuring Zero-IT feature for client devices without ethernet ports. Note: This is only applicable for 9.5 and pre 9.5 versions. Post 9.6 version BYOD feature has been introduced in order to achieve above requirement.

Zero-IT provisioning for clients without ethernet ports

2019-06-09T13:50:20-0700 2019-06-09T18:00:14-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDmfCAG?attachment_index=0 2019-06-09T18:00:14-0700 monthly admin,premium knowledge_article_440 knowledge_article_440_attachment_1 Self-Provisioning of Clients.pdf 1482176.0 application/pdf https://support.ruckuswireless.com/articles/000002462 2019-06-09T14:24:59-0700 monthly 0.8 admin,premium knowledge_article_1246 knowledge_article_1246 2014-01-14T12:42:17-0800 000002462 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What is the maximum number of clients that can connect to ZoneDirector if ZD's built-in DHCP server is enabled? The built in DHCP server of the ZoneDirector will offer a maximum of 512 IP addresses including the ZoneDirector IP address. ZoneDirector's DHCP server will not assign IP addresses to devices that are on different subnet and part of the different VLAN, it will assign IP address only to the same subnet and same VLAN where the ZD is configured. To activate this, ZD should be configured in static/manual IP address

Maximum number of clients that can connect to the ZD if the ZD's built-in DHCP server is being used to assign IP addresses to clients.

2019-06-09T14:24:59-0700 2019-06-09T18:00:12-0700 https://support.ruckuswireless.com/articles/000003491 2019-06-09T16:59:52-0700 monthly 0.8 admin,premium knowledge_article_1335 knowledge_article_1335 2014-10-10T13:18:42-0700 000003491 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, ZoneDirector What could cause intermittent blips in VoIP for users across Mesh AP link? If the environment is not greatly impacted by interference on the AP Mesh radio band, disabling background scanning will prevent the off-channel scanning by the APs, and can be configured on the Mesh band only (usually 5G). Note: VoIP over Mesh is NOT recommended more than ONE HOP, with no more than THREE VOIP CLIENTS, over the best of mesh signal links on any AP models. An alternative is to extend the period that background scanning is performed. Too high is ineffective however.

2019-06-09T16:59:52-0700 2019-06-09T18:00:11-0700 https://support.ruckuswireless.com/articles/000003410 2019-06-09T16:50:31-0700 monthly 0.8 admin,premium knowledge_article_1336 knowledge_article_1336 2014-10-14T14:30:57-0700 000003410 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Installation Installation, SmartCell Gateway, SmartCell AP Why does my SCG AP keep loosing the server list? If the vSCG is sitting behind a NAT box, the NAT IP has to be configured. Use the following command to set the NAT IP: vscg-single-interface# config vscg-single-interface(config)# ip control-nat [NAX box public IP] vscg-single-interface(config)# end Please see KB "How to add/show/delete control-nat ip on vSCG" for more detail.

Communication or NAT IP configurations missing on vSZ/vSCG

2019-06-09T16:50:31-0700 2019-06-09T18:00:10-0700 https://support.ruckuswireless.com/articles/000003478 2019-06-09T17:08:43-0700 monthly 0.8 admin,premium knowledge_article_1354 knowledge_article_1354 2014-10-27T09:37:20-0700 000003478 Validated (External) Premium Zoneflex outdoor Performance;Installation Performance, Installation, ZoneFlex Outdoor What are the differences between ZF 7782 and T300? Please find the detailed information in the attachement

This article lists all the differences between ZF 7782 and T300

2019-06-09T17:08:43-0700 2019-06-09T18:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PHZ1CAO?attachment_index=0 2019-06-09T18:00:09-0700 monthly admin,premium knowledge_article_1354 knowledge_article_1354_attachment_1 T300-Comparative_7782_v1.pptx 5747243.0 application/vnd.openxmlformats-officedocument.presentationml.presentation https://support.ruckuswireless.com/articles/000003501 2019-06-09T15:00:52-0700 monthly 0.8 admin,premium knowledge_article_3530 knowledge_article_3530 2014-10-19T18:04:50-0700 000003501 Validated (External) Premium Flexmaster umm Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, FlexMaster UMM The network test for 'localhost' '127.0.0.1' is failed.Please contact with administrator or make sure the file /etc/hosts is configured properly. This error comes while installing FM. As your machine gets started, it will need to know the mapping of some hostnames to IP addresses before DNS can be referenced. This mapping is kept in the <tt class="filename" style="background-color: rgb(255, 255, 255);">/etc/hosts</tt> file. In the absence of a name server, any network program on your system consults this file to determine the IP address that corresponds to a host name. Make sure that /etc/hosts file is configured properly with Host name/Domain name. Sample /etc/hosts file as follows. <pre class="programlisting" style="background-color: rgb(224, 224, 224);"> IPAddress Hostname Alias 127.0.0.1 localhost deep.openna.com 208.164.186.1 deep.openna.com deep 208.164.186.2 mail.openna.com mail</pre> The leftmost column is the IP address to be resolved. The next column is that host's name. Any subsequent columns are alias for that host. In the second line, for example, the IP address <tt class="literal" style="background-color: rgb(255, 255, 255);">208.164.186.1</tt> is for the host <tt class="literal" style="background-color: rgb(255, 255, 255);">deep.openna.com</tt>. Another name for <tt class="literal" style="background-color: rgb(255, 255, 255);">deep.openna.com</tt> is deep. After you are finished configuring your networking files, don't forget to restart your network for the changes to take effect. <pre class="screen" style="background-color: rgb(224, 224, 224);"> [root@deep] /# /etc/rc.d/init.d/network restart</pre>

Local host loopback IP in host system missing.

2019-06-09T15:00:52-0700 2019-06-09T18:00:08-0700 https://support.ruckuswireless.com/articles/000002991 2019-06-09T12:32:14-0700 monthly 0.8 admin,premium knowledge_article_3516 knowledge_article_3516 2014-05-02T13:11:32-0700 000002991 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Security Configuration, Installation, Security, ZoneDirector How to import certificates on ZDs configured for Smart Redundancy ? Please refer to the attached document for best practices to upload Certificates on ZDs that are part of Smart Redundancy. Note: The document also contains information about uploading Certificates on a single ZD.

Need recommendations for importing certificates on ZDs configured for Smart Redundancy.

2019-06-09T12:32:14-0700 2019-06-09T18:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PFMXCA4?attachment_index=0 2019-06-09T18:00:07-0700 monthly admin,premium knowledge_article_3516 knowledge_article_3516_attachment_1 Importing Certificate.pdf 247254.0 application/pdf https://support.ruckuswireless.com/articles/000003117 2019-06-09T13:24:45-0700 monthly 0.8 admin,premium knowledge_article_1107 knowledge_article_1107 2014-06-06T04:28:07-0700 000003117 Validated (External) Premium Zoneflex outdoor Installation Installation, ZoneFlex Outdoor What are the IP protection class specifications for Ruckus APs The IP Class (International Protection class) classifies and rates the degree of protection provided against the intrusion (including body parts such as hands and fingers), dust, accidental contact, and water by mechanical casings and electrical enclosures. <ul><li>IP Class specifications for Outdoor Access Points</li></ul> <div> <table border="0" cellpadding="0" cellspacing="0" width="402"><tbody><tr height="19"><td colspan="1" rowspan="1" height="19" width="157">AP Model (All submodels)</td><td colspan="1" rowspan="1" width="245">IP rating</td></tr><tr height="19"><td colspan="1" rowspan="1" height="19" width="157">P300</td><td colspan="1" rowspan="1" width="245">IP-67</td></tr><tr height="19"><td colspan="1" rowspan="1" height="19" width="157">T710</td><td colspan="1" rowspan="1" width="245">IP-67</td></tr><tr height="19"><td colspan="1" rowspan="1" height="19" width="157">T610</td><td colspan="1" rowspan="1" width="245">IP-67</td></tr><tr height="19"><td colspan="1" rowspan="1" height="19" width="157">E510</td><td colspan="1" rowspan="1" width="245">IP-67</td></tr><tr height="19"><td colspan="1" rowspan="1" height="19" width="157">T310</td><td colspan="1" rowspan="1" width="245">IP-67</td></tr><tr height="19"><td colspan="1" rowspan="1" height="19" width="157">T301 (All models)</td><td colspan="1" rowspan="1" width="245">IP-67</td></tr><tr height="19"><td colspan="1" rowspan="1" height="19" width="157">ZoneFlex T300</td><td colspan="1" rowspan="1" width="245">Weather protection: IP67 per IEC 60529</td></tr><tr height="19"><td colspan="2" rowspan="1" height="19" width="402">EOL models</td></tr><tr height="19"><td colspan="1" rowspan="1" height="19" width="157">ZF7782</td><td colspan="1" rowspan="1" width="245">IP-67</td></tr><tr height="19"><td colspan="1" rowspan="1" height="19" width="157">ZF7762 (S and AC both)</td><td colspan="1" rowspan="1" width="245">IP-67</td></tr><tr height="19"><td colspan="1" rowspan="1" height="19" width="157"> ZF7761-CM</td><td colspan="1" rowspan="1" width="245">IP-67</td></tr><tr height="19"><td colspan="1" rowspan="1" height="19" width="157">ZF7731</td><td colspan="1" rowspan="1" width="245">IP-65</td></tr></tbody></table> See the below snippet for the meaning of IP 5, 6, 7 rating. <img alt="User-added image" height="225" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SaV&feoid=00N50000002Cf3M&refid=0EM50000000LVMr" width="500"></img></div> <div>Note : IP class specifications are meant only for Outdoor APs and not for Indoor APs.</div> <div> </div>

IP67 means the unit can be dropped into a body of water up to a meter deep for half an hour, while IP68 guarantees protection in water up to 1.5m deep for the same period of time. Both are resistant to dust.

2019-06-09T13:24:45-0700 2019-06-09T18:00:06-0700 https://support.ruckuswireless.com/articles/000003024 2015-03-05T16:36:54-0800 monthly 0.8 admin,premium knowledge_article_1623 knowledge_article_1623 2014-05-09T14:23:38-0700 000003024 Validated (External) Premium Delete the configuration of the R700 from the ZD and then rejoin the AP.

R700 not broadcasting 11ac when running 9.8

2015-03-05T16:36:54-0800 2019-06-09T17:03:15-0700 https://support.ruckuswireless.com/articles/000002146 2019-06-09T11:44:52-0700 monthly 0.8 admin,premium knowledge_article_3532 knowledge_article_3532 2014-05-02T01:03:58-0700 000002146 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How does DHCP Relay (ip-helper) work with Ruckus For DHCP relay to work, you need to define the IP address of the DHCP server in the Router that terminates the VLAN as the DHCP relay address. From Ruckus point of view you simply configure the advanced options in the WLAN configuration to tag the traffic into the correct VLAN. Once a wireless client is associated and authenticated all traffic for that client will be sent tagged into the network. The Switch port needs to be configured to accept this tagged traffic. A router needs to have an interface in this VLAN and its IP address will be the default gateway for this network. The DHCP relay function will snoop for DHCP Discovery broadcasts, convert them to IP multicast and forward them to the DHCP server. The DHCP server will use the IP address of the DHCP relayed message (usually the default Gateway IP for this network, also called “helper address”) to choose the correct scope, and then sends back an IP unicast DHCP offer into this network. If there are intervening routers on the network between the DHCP server and the client subnet, a static route needs to be added for the client IP subnet as the DHCP offers will be sent with the IP address offered to the client and needs to get routed back to the correct network.

How does DHCP Relay (ip-helper) work with Ruckus?

2019-06-09T11:44:52-0700 2019-06-09T12:00:08-0700 https://support.ruckuswireless.com/articles/000003075 2019-06-09T11:49:48-0700 monthly 0.8 admin,premium knowledge_article_1029 knowledge_article_1029 2014-05-23T04:04:00-0700 000003075 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to block HTTPS/HTTP access to access points which are being managed by ZoneDirector <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255);">Execute following remote_ap_cli commands from the ZoneDirector in CLI mode to to block HTTPS/HTTP access to Access Points which are managed by ZoneDirector. ruckus> enable </div> <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255);">ruckus#debug</div> <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255);">ruckus(debug)# remote_ap_cli -A "set http disable"</div> <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255);">ruckus(debug)# remote_ap_cli -A "set https disable" Once the commands are executed we will be no longer able to access Access Points from the web browser. To enable the https and http access again, run below command <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255);">ruckus(debug)# remote_ap_cli -A "set http enable"</div> <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255);">ruckus(debug)# remote_ap_cli -A "set https enable"</div> Note: Only online APs on ZD will accept this command, there will be no effort/change to the APs which are offline in ZD. The set disable/enable commands can also be run on independent AP CLIs.</div>

Block HTTPS/HTTP access to ZoneDirector managed Access Points

2019-06-09T11:49:48-0700 2019-06-09T12:00:06-0700 https://support.ruckuswireless.com/articles/000009167 2019-06-07T16:31:49-0700 monthly 0.8 admin,premium knowledge_article_3746 knowledge_article_3746 2019-05-10T04:31:52-0700 000009167 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;System network management;Troubleshooting;Known issues and workarounds Configuration, Installation, System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How to set static route on vSZ-H controller to access Management Interface? If all of the managed APs are located in different locations on the internet, the vSZ may not know all of the IP subnets of these APs. In this case, the control interface should be set as the default gateway for the vSZ and you will need to add a static route to reach the management network. Below is the IP configuration details of one of our 3-interface vSZ-H Lab controllers: <img alt="User-added image" height="422" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SZX&feoid=00N50000002Cf3M&refid=0EM2J000000qFcw" width="821"></img> Below is the configuration of Static Routes, to access the vSZ-H (when Control Interface has been set as System Default Gateway): <img alt="User-added image" height="289" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SZX&feoid=00N50000002Cf3M&refid=0EM2J000000qFd1" width="804"></img> Note: The Network Address is the client network address (client from which you are trying to access the vSZ-H); Subnet Mask should be configured as client network Subnet Mask; Gateway should be configured as the Gateway of the Management Interface of vSZ-H. You can perform the below set of configurations: -- During initial setup set Management Interface as System Default Gateway. -- Once, setup is complete and you are able to login to vSZ WebGUI, go to System --> Cluster --> Edit Control Plane Settings. -- Set the Static Routes to Management Interface of controller and then from Physical Interfaces tab, change the Default Gateway to Control Interface. -- This will restart the services. Note: If you enable Access and Core Separation, the Management Interface is set as System Gateway by default.

How to configure static route on vSZ-H to access Management Interface

2019-06-07T16:31:49-0700 2019-06-07T18:00:08-0700 https://support.ruckuswireless.com/articles/000002934 2019-06-07T00:31:50-0700 monthly 0.8 admin,premium knowledge_article_3528 knowledge_article_3528 2014-04-18T04:31:28-0700 000002934 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;System network management Performance, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Can we generate reports on the Zone Director? No, we cannot generate any kind of reports on the Zone Director, as this is not supported on ZD. Only through Flex Master and SCI, we can extract reports regarding the Access Points and Clients.

Generating a report on ZD regarding Clients and Access Points

2019-06-07T00:31:50-0700 2019-06-07T06:00:08-0700 https://support.ruckuswireless.com/articles/000002208 2019-06-07T01:23:47-0700 monthly 0.8 admin,premium knowledge_article_3744 knowledge_article_3744 2014-04-28T11:25:19-0700 000002208 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Mediaflex;Mobile apps;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;MediaFlex 2501;MediaFlex 2900;MediaFlex 2811;MediaFlex 5811;MediaFlex 7811;MediaFlex 7211;RUCKUS One Mobile Apps;Ruckus Cloud Mobile Apps Configuration;Installation;System network management Configuration, Installation, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, MediaFlex, Mobile Apps Why can't I run SpeedFlex in both directions <div>1) Make sure the AP and ZD are connected at the same rate either 100 Mbps or 1000 Mbps.</div> 2) Use ZAP and use the -r option to limit the rate of the test to no more then the lowest link rate between the AP and ZD. If the lowest rate is 100 Mbps, test at 90 Mbps rate. An example: Syntax: zap.exe -r [rate] -s[source IP] -d[destination IP] ZD IP: 10.9.101.2 AP IP: 10.9.101.22 c:> zap.exe -r90 -s10.9.101.2 -d10.9.101.22 (this will have the ZD send test packets to the AP at a rate of 90 Mbps) Here is a sample test when both AP and ZD are connected to a Gig switch port but rate limit the test to 90 Mbps: <div> <div>C:\Downloads\Utilities\zap\zap-2012>zap.exe -r90 -s10.9.101.2 -d10.9.101.22</div> <div>zap.exe version 1.83.15, Copyright ( C ) 2004-2006 Ruckus Wireless, Inc. All Rights Reserved.</div> <div>Built Jun 25 2012 at 10:40:18</div> <div>IP version = 4</div> <div>Engaging default options -p50000 -n1000 -l1452 -a50 -p50ms -q0x0</div> <div> </div> <div>Warning: The build version of ZAPD at rx station is higher than the build version of zap!Please update the firmware of your ZD!</div> <div>Warning: The build version of ZAPD at tx station is higher than the build version of zap!Please update the firmware of your ZD!</div> <div> 0: 10.9.101.2->10.9.101.22 441=rx 0=dr 0=oo 0=rp 441=rx in 53 9ms 95.0mbps 95.0 | 95.0 95.0 95.0 95.0 95.0 95.0</div> <div> 1: 10.9.101.2->10.9.101.22 882=rx 0=dr 0=oo 0=rp 441=rx in 53 0ms 96.6mbps 95.8 | 96.6 95.0 95.0 95.0 95.0 95.0</div> <div> 2: 10.9.101.2->10.9.101.22 1322=rx 1=dr 0=oo 0=rp 440=rx in 51 9ms 98.5mbps 96.7 | 98.5 96.6 95.0 95.0 95.0 95.0</div> <div> 3: 10.9.101.2->10.9.101.22 1763=rx 1=dr 0=oo 0=rp 441=rx in 52 5ms 97.6mbps 97.0 | 98.5 96.6 95.0 95.0 95.0 95.0</div> <div> 4: 10.9.101.2->10.9.101.22 2204=rx 1=dr 0=oo 0=rp 441=rx in 53 6ms 95.5mbps 96.7 | 98.5 96.6 95.0 95.0 95.0 95.0</div> <div> 5: 10.9.101.2->10.9.101.22 2645=rx 1=dr 0=oo 0=rp 441=rx in 53 5ms 95.7mbps 96.5 | 98.5 95.7 95.0 95.0 95.0 95.0</div> <div> 6: 10.9.101.2->10.9.101.22 3086=rx 1=dr 0=oo 0=rp 441=rx in 52 3ms 98.0mbps 96.7 | 98.5 96.6 95.0 95.0 95.0 95.0</div> <div> 7: 10.9.101.2->10.9.101.22 3527=rx 1=dr 0=oo 0=rp 441=rx in 53 5ms 95.8mbps 96.6 | 98.5 95.8 95.0 95.0 95.0 95.0</div> <div> 8: 10.9.101.2->10.9.101.22 3968=rx 1=dr 0=oo 0=rp 441=rx in 52 2ms 98.1mbps 96.8 | 98.5 96.6 95.0 95.0 95.0 95.0</div> <div> 9: 10.9.101.2->10.9.101.22 4409=rx 1=dr 0=oo 0=rp 441=rx in 52 8ms 96.9mbps 96.8 | 98.5 96.6 95.0 95.0 95.0 95.0</div> <div> </div> <div>C:\Downloads\Utilities\zap\zap-2012></div> </div>

*SpeedFlex works only in one direction. *SpeedFlex works fine in both direction on some APs, but not others.

2019-06-07T01:23:47-0700 2019-06-07T06:00:07-0700 https://support.ruckuswireless.com/articles/000009006 2019-04-17T16:50:20-0700 monthly 0.8 admin,premium knowledge_article_3662 knowledge_article_3662 2019-04-12T04:11:56-0700 000009006 Validated (External) Premium Zonedirector;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, virtual SmartCell Gateway How to configure External DPSK on RADIUS server. Attaching an example document for External DPSK configuration on RADIUS Server. However, it is best to get in touch with the RADIUS server Support team, if any doubts/queries regarding the Radius configuration. Call Flow for External DPSK: 1.User connects to the WPA2-PSK network 2.Access Points learns the MAC address of the client device and forwards this information to the Controller. 3.The Controller initiates a RADIUS-Request message to the external RADIUS server. This RADIUS-Request message contains, among other information, the devices MAC addresses the username and password. 4.The external RADIUS server makes a decision based on those credentials to either ACCEPT or REJECT the request. 5.If the external RADIUS server has decided that the username/password credentials are valid RADIUS-ACCEPT message is passed back to the Access Point with the External DPSK as a VSA to the Controller. Normal 802.114-way handshake concludes; UE is on the network. 6.If the external RADIUS server has decided that the credentials and/or PSK is incorrect/expired/non-existent, the external RADIUS server will return a ACCESS-REJECT message to the Access Point informing the Access Point to terminate the connection.

This article explains how to configure DPSK with an external Radius Server.

2019-04-17T16:50:20-0700 2019-06-07T03:56:55-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000000O6jSAE?attachment_index=0 2019-06-07T03:56:55-0700 monthly admin,premium knowledge_article_3662 knowledge_article_3662_attachment_1 External DPSK windows server.docx 759220.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000002809 2019-06-06T23:37:16-0700 monthly 0.8 admin,premium knowledge_article_807 knowledge_article_807 2014-03-27T08:31:31-0700 000002809 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell ap;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP Why does Zero-IT fail on Windows with Intel ProSet controlling WNIC? Since Ruckus relies on the operating system scripting tools to create the WLAN we have always specified that the client must be running the Windows Zero Configuration Wireless Management Tool for prov.exe to complete. See Troubleshooting

Because of the process used for Zero-IT WLAN configuration of the wireless connection, Windows OS requires that the wireless NIC be controlled by the system WLAN Auto Configuration (WLANsvc / WZC)

2019-06-06T23:37:16-0700 2019-06-07T00:00:17-0700 https://support.ruckuswireless.com/articles/000002375 2019-06-06T18:07:39-0700 monthly 0.8 admin,premium knowledge_article_657 knowledge_article_657 2013-11-26T07:12:48-0800 000002375 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to Broadcast a WLAN at a specific time/specific period of a day ? <div style="text-align: center;">WLAN-Service Schedule</div> <div> The service Schedule option is used to control WLAN service availability for hours of the day, or days of the week . This option is available on ZoneDirector >> Configure >> WLANs >> Edit: WLAN >> Click on Advance Options. By default Service Schedule is "Always on" <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SX2&feoid=00N50000002Cf3M&refid=0EM50000000LOIn"></img> To Broadcast at a specific time select "Specific" and set the time period of the day <img alt="User-added image" height="137" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SX2&feoid=00N50000002Cf3M&refid=0EM50000000LOIs" width="500"></img> Click on "OK" to save the configuration. Note: This feature will not work properly if ZoneDirector does not have the correct time. To ensure ZoneDirector always maintains the correct time, configure an NTP server and point ZoneDirector to the NTP server's IP address</div> <div> </div> <div> </div>

WLAN Service Scheduling - Broadcasting WLAN at a specific time/specific period of a day

2019-06-06T18:07:39-0700 2019-06-07T00:00:14-0700 https://support.ruckuswireless.com/articles/000001886 2019-06-06T18:12:02-0700 monthly 0.8 admin,premium knowledge_article_286 knowledge_article_286 2013-04-03T18:13:27-0700 000001886 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Can I turn off the LED lights on managed APs from the ZD? When Ruckus APs are managed by ZoneDirector, we can disable the external LEDs on certain ZoneFlex model APs. The option is present at Configure -> AP group - > Model Specific Control -> select each AP model to check the disable LED option. This can be useful if your APs are installed in a public location and you don't want to draw attention to them, or in hospitality installations.

Lights may not required in specific install like hotels and library etc, and can be disabled from ZD's AP group settings.

2019-06-06T18:12:02-0700 2019-06-07T00:00:13-0700 https://support.ruckuswireless.com/articles/000002671 2019-06-06T19:49:07-0700 monthly 0.8 admin,premium knowledge_article_774 knowledge_article_774 2014-02-19T08:22:31-0800 000002671 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why do the ZD debug logs show that channels are getting changed on 5 GHz due to interference after disabling 5GHz wlan service for the specific AP, Disabling 5 GHz WLAN service for the AP from the ZD will not affect or disable the Mesh SSIDs running on the AP. As long as the Mesh SSIDs are running on the AP, we will see the channel changes and some 5GHz radio related logs on the ZD debug logs. It is normal behavior and working as per design.

Mesh is still running on 5 G radio and due to that logs have generated

2019-06-06T19:49:07-0700 2019-06-07T00:00:11-0700 https://support.ruckuswireless.com/articles/000002708 2019-06-06T20:00:34-0700 monthly 0.8 admin,premium knowledge_article_760 knowledge_article_760 2014-02-26T12:10:17-0800 000002708 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to disable Smartcast? Smartcast cannot be disabled and this is as per system design. We can only disable Directed Muticast but we do not have any option to disable Smartcast.

Customer wants to disable Smartcast for testing of voice streaming application without prioritization

2019-06-06T20:00:34-0700 2019-06-07T00:00:10-0700 https://support.ruckuswireless.com/articles/000002854 2019-06-06T20:31:12-0700 monthly 0.8 admin,premium knowledge_article_873 knowledge_article_873 2014-03-31T12:25:38-0700 000002854 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector How I can configure my new Zone Director Requirement for initial configuration of Zone Director * Check if the Status LED on the Zone Director(ZD) is flashing green (this indicates that the ZD is in factory default state) * TCP destination ports 80 and 443 (HTTP and HTTPS) should be opened in firewall (if there's a firewall in your network) * If you want to set static IP on the ZD, make available the IP address, Subnet mask, Gateway and if DHCP is used then search the MAC address of the ZD in your DHCP server when ZD is connected to the network. Initial configuration of Zone Director 1. Power on the Zone Director, let it boot up and wait for the Status led to be flashing green 2. If DHCP has provided IP to the ZD, search in the DHCP server that is allocated to the ZD, this could be a search with the MAC address or Name 'ruckus'. After knowing the IP address of ZD, open command prompt on the network and see if you are able to ping IP adddress (ZD IP address allocated by DHCP server). If it's giving a reply then open a browser, enter the IP address of the ZD and hit enter. It would redirect to the following setup Wizard. If there is no DHCP server, then go to the 3rd step. <img alt="ZD Set Up wizard" height="282" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SY5&feoid=00N50000002Cf3M&refid=0EM50000000LSKY" width="500"></img> 3. Connect the laptop and set a static IP like 192.168.0.22, Subnet mask 255.255.255.0, Gateway and DNS should be blank. <img alt="Static IP_Laptop" height="379" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SY5&feoid=00N50000002Cf3M&refid=0EM50000000LSKO" width="500"></img> Open command prompt, then ping the default IP of ZD 192.168.0.2 and see if you are getting reply. If you are getting a reply - open a browser and enter the default IP address of the ZD (192.168.0.2) and hit enter, it would redirect to the setup Wizard as shown above. <img alt="Ping_responce" height="188" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SY5&feoid=00N50000002Cf3M&refid=0EM50000000LSKd" width="500"></img> You can also refer ZD quick setup guide from below link: <a href="https://support.ruckuswireless.com/documents/2499-zonedirector-1200-quick-setup-guide-qsg/download" target="_blank">https://support.ruckuswireless.com/documents/2499-zonedirector-1200-quick-setup-guide-qsg/download</a> Note: Above link is for ZD1200, however all configuration procedure of all ZD products is the same.

Setting up/Configuration of new Zone Director

2019-06-06T20:31:12-0700 2019-06-07T00:00:08-0700 https://support.ruckuswireless.com/articles/000001183 2019-06-06T12:43:00-0700 monthly 0.8 admin,premium knowledge_article_3742 knowledge_article_3742 2012-03-21T12:00:40-0700 000001183 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Installation Installation, ZoneFlex Indoor, ZoneFlex Outdoor My site-survey tool shows a weak signal for the Ruckus APs. What should I do? To overcome this problem is to use the site survey tool (such as AirMagnet) in “associated mode”. In this mode the tool is expected to associate with the AP to perform the coverage testing and thus will force the Ruckus smart antenna to choose an antenna pattern pointing to the relevant client. In order to truly measure the wireless coverage it is recommended to perform a performance test across the desired coverage area.

My site-survey tool shows a weak signal for the Ruckus APs. What should I do?

2019-06-06T12:43:00-0700 2019-06-06T18:00:09-0700 https://support.ruckuswireless.com/articles/000009364 2019-06-06T15:23:17-0700 monthly 0.8 admin,premium knowledge_article_3741 knowledge_article_3741 2019-06-06T15:23:17-0700 000009364 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;Firmware;Known issues and workarounds Performance, Configuration, Firmware, Known Issues and Workarounds, SmartCell Gateway When adding a New node to the Existing Cluster running on same firmware Error "Cluster Version Mismatch" is displayed on Web GUI -> Restoring the Cluster backup from the previous image (i.e, from where the upgrade was initiated) on the Leader node would resolve the issue.

2019-06-06T15:23:17-0700 2019-06-06T18:00:07-0700 https://support.ruckuswireless.com/articles/000009327 2019-06-04T00:45:14-0700 monthly 0.8 admin,premium knowledge_article_3737 knowledge_article_3737 2019-06-04T00:45:14-0700 000009327 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, SmartCell Gateway, virtual SmartCell Gateway Where do I find the most recent information on the attributes supported by SmartZone? The most up-to-date source of RADIUS attributes and Vendor Specific Attributes (VSA's) supported by SmartZone can be found in the following guides on the Support portal: vSZ-H / SZ-300: 5.1.1: https://support.ruckuswireless.com/documents/2799-smartzone-5-1-1-mr1-aaa-radius-interface-reference-guide-sz300-vsz-h 5.1.0: https://support.ruckuswireless.com/documents/2799-smartzone-5-1-1-mr1-aaa-radius-interface-reference-guide-sz300-vsz-h 5.0.0: https://support.ruckuswireless.com/documents/2324-smartzone-5-0-ga-aaa-radius-interface-reference-guide-sz300-vsz-h vSZ-H / SZ-300 / SCG-200 3.6.1: https://support.ruckuswireless.com/documents/2221-smartzone-3-6-1-aaa-radius-interface-reference-guide-sz300-scg200-vsz-h 3.6.0: https://support.ruckuswireless.com/documents/2058-smartzone-3-6-aaa-radius-interface-reference-guide-sz300-scg200-vsz-h 3.5.1: https://support.ruckuswireless.com/documents/1836-smartzone-3-5-1-mr1-aaa-interface-reference-guide-sz300-scg200-vsz-h 3.4.1: https://support.ruckuswireless.com/documents/1187-smartzone-3-4-1-mr-aaa-interface-reference-guide-scg200-vsz-h vSZ-E / SZ-100 5.1.1: https://support.ruckuswireless.com/documents/2813-smartzone-5-1-1-mr1-aaa-radius-interface-reference-guide-sz100-vsz-e 5.0.0: https://support.ruckuswireless.com/documents/2304-smartzone-5-0-ga-aaa-radius-interface-reference-guide-sz100-vsz-e 3.6.1: https://support.ruckuswireless.com/documents/2210-smartzone-3-6-1-aaa-radius-interface-reference-guide-sz100-vsz-e 3.6.0: https://support.ruckuswireless.com/documents/2080-smartzone-3-6-aaa-radius-interface-reference-guide-sz100-vsz-e 3.5.1: https://support.ruckuswireless.com/documents/1827-smartzone-3-5-1-mr1-aaa-interface-reference-guide-sz100-vsz-e 3.4.1: https://support.ruckuswireless.com/documents/1198-smartzone-3-4-1-mr-aaa-interface-reference-guide-sz100-vsz-e

Where to find the most up-to-date list of RADIUS attributes supported by SZ

2019-06-04T00:45:14-0700 2019-06-04T06:00:09-0700 https://support.ruckuswireless.com/articles/000004251 2015-03-25T06:10:05-0700 monthly 0.8 admin,premium knowledge_article_1669 knowledge_article_1669 2015-03-25T06:10:05-0700 000004251 Validated (External) Premium Smartcell gateway;Swipe;SmartCell Gateway 200 (SCG200);SWIPE Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway, SWIPE Why does the SWIPE app connect, and then disconnect with an error? Upgrade SCG SW when available.

Using the SWIPE application with vSCG ver 3.0, I loose the connection to the vSCG and it fails to work.

2015-03-25T06:10:05-0700 2019-06-03T07:58:48-0700 https://support.ruckuswireless.com/articles/000005802 2019-06-03T03:18:11-0700 monthly 0.8 admin,premium knowledge_article_2350 knowledge_article_2350 2016-05-30T02:08:25-0700 000005802 Validated (External) Premium Scg200;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SCG200, virtual SmartCell Gateway Why does TACACS+ connection fail from SZ? Verify if outbound firewall is enabled. SZ# show running-config outbound-firewall To disable outbound firewall using CLI: SZ(config)# no outbound-firewall To enable a TACACS rule with the firewall enabled use: SZ(config)# outbound-firewall SZ(config-outbound-firewall)# ip-rule tacacs out tcp dport 49 To confirm use the show command above. Output should be similar to this: SZ# show running-config outbound-firewall outbound firewall enable description=user define ud_tacacs service=out=dport/49/tcp interface=all

SmartZone connection fails due to outbound firewall

2019-06-03T03:18:11-0700 2019-06-03T06:00:14-0700 https://support.ruckuswireless.com/articles/000005176 2019-06-03T03:27:08-0700 monthly 0.8 admin,premium knowledge_article_2174 knowledge_article_2174 2015-10-08T15:54:52-0700 000005176 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Installation Configuration, Installation, SmartCell Insight Can we configure SCI to use Microsoft Office 365 email accounts? Verify SMTP settings from SCI Monitor (http://<sci_ip> (ver1.3); https://<sci_ip> (ver 1.4)) System Setup tab: <img alt="User-added image" height="208" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000STF&feoid=00N50000002Cf3M&refid=0EM50000000HLLX" width="500"></img> Google search for Microsoft email settings: http://answers.microsoft.com/en-us/office/forum/office_365hp-office_install/smtp-gateway-for-office-365/c4fa326a-92f7-4fd7-8a07-5fdd302f251e?tab=question&status=AllReplies#tabs Correct SMTP host: SMTP gateway <a href="http://smtp.outlook.office365.com/" target="_blank">smtp.outlook.office365.com</a> and PORT 587 Updated SMTP settings: <img alt="User-added image" height="194" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000STF&feoid=00N50000002Cf3M&refid=0EM50000000HLLc" width="500"></img> Re-test from SCI Enterprise Console: <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000STF&feoid=00N50000002Cf3M&refid=0EM50000000HLLh"></img> Email from SCI report now successful: <img alt="" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000STF&feoid=00N50000002Cf3M&refid=0EM50000000HLLi"></img>

Email of Reports from SCI using Microsoft Office 365 email account not working

2019-06-03T03:27:08-0700 2019-06-03T06:00:12-0700 https://support.ruckuswireless.com/articles/000001887 2019-06-03T05:03:34-0700 monthly 0.8 admin,premium knowledge_article_478 knowledge_article_478 2013-06-12T21:02:27-0700 000001887 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Installation;Troubleshooting Firmware, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why don't APs broadcast their SSIDs after upgrading Zonedirector to 9.5 MR1 release This problem usually arises when ZoneDirector is upgraded from 9.5.0.0.156 to the 9.5.1.0.50 version. However the ZoneDirector's firmware still shows as 9.5.0.0.156 version after the upgrade. But when we go to Monitor-->Access points, and AP details we can see the software version of the AP as 9.5.1.0.50. This clearly shows that the mismatching firmware version across the Access Points which results in Access Points failing to broadcast the SSIDs. The issue can be resolved by re-upgrading the ZoneDirector with the same freshly downloaded firmware image file after rebooting it. Please ensure that ZoneDirector shows its firmware version as 9.5.1.0.50(on Dashboard) after performing the upgrade.

ZD upgrade partially finished, re-upgrading can resolve the issue.

2019-06-03T05:03:34-0700 2019-06-03T06:00:08-0700 https://support.ruckuswireless.com/articles/000002463 2019-06-03T05:30:27-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_678 knowledge_article_678 2013-12-26T16:06:41-0800 000002463 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Will a hard reset delete the license file on a ZoneDirector? A hard reset will not delete the license from a ZoneDirector as it is maintained in protected storage which has no effect of factory reset on it.

ZD hard reset will not delete the AP license file

2019-06-03T05:30:27-0700 2019-06-03T06:00:07-0700 https://support.ruckuswireless.com/articles/000009298 2019-05-31T05:48:40-0700 monthly 0.8 admin,premium knowledge_article_3732 knowledge_article_3732 2019-05-31T05:48:40-0700 000009298 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, SmartCell Gateway, virtual SmartCell Gateway What is the purpose of a Subscription Package in SZ 5.0? The 'Guest Pass' WLAN feature allows the creation of a WLAN designed to serve WiFi users with unique or group-based usernames and passwords, which they can use to connect to the WiFi for a pre-defined period of time. Below is a description of some of the key elements/terminology used in the Guest Pass feature. The explanation below is provided with the context of a hotel guest WiFi solution: 1. A 'Guest' WLAN configured to type 'Guest Pass': This WLAN will broadcast the guest WiF, to which your users will connect 2. A customised guest portal landing page - typically hosted on an external platform (not SZ), but can optionally use the SZ. When a WiFi hotel guest connects to the Guest WLAN, their wireless device is automatically redirected to a welcome page where they must input the username/password detailed in their Guest Pass. 3. Guest Pass 'administrator', also known as a 'Local User': created in SZ. In a hotel scenario, this may be the concierge, who has a unique login to the SZ controller, which gives them privileges to create new Guest Passes but nothing more than this. The concierge can generate Guest Passes for hotel guests with personalised usernames, passwords, specify a lifespan for the Guest Pass connectivity, and how many devices can re-use the Guest Pass username/password. The Guest Pass username and password is then shared with the hotel guest. 4. Guest Pass: Generated by the concierge, this defines the username and password which the hotel guest will use to login to the Guest WLAN. When the hotel guest connects to the Guest WLAN, their wireless device redirects to the guest portal landing page and enters their username/password. 5. Subscription Package: A pre-defined set of options available to the Local Users (i.e. the concierge/administrator). The Subscription Package can be customised in order that different hotel staff can create Guest Passes with different properties. For instance the Hotel Manager may have the ability to generate Guest Passes that last for 1 month and can be shared by multiple users, whereas a junior concierge may only be able to issue single-use 1-day Guest Passes. For further details on the specifics of configuring a Guest Pass WLAN, see the SZ User Guide.

A brief description of the terminology used in Guest Pass generation

2019-05-31T05:48:40-0700 2019-05-31T06:00:06-0700 https://support.ruckuswireless.com/articles/000009312 2019-05-30T05:50:12-0700 monthly 0.8 admin,premium knowledge_article_3731 knowledge_article_3731 2019-05-30T05:47:04-0700 000009312 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration Configuration, virtual SmartCell Gateway, SZ100 How to map AD server to Hotspot and Web Authentication SSID's while using vSZ/SZ as proxy <ul><li>To see the AD server under authentication servers while using controller as Proxy, we will have to enable Global Catalog under AD configuration</li></ul> Note : Once AD is configured without enabling Global Catalog, you will not be able to edit it. Global Catalog will be greyed out. <img alt="User-added image" height="450" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SS2&feoid=00N50000002Cf3M&refid=0EM2J000000qNcq" width="591"></img> <ul><li>In this case. you will have to delete the AD config and configure it once again</li><li>Global Catalog is enabled now</li></ul> <img alt="User-added image" height="492" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SS2&feoid=00N50000002Cf3M&refid=0EM2J000000qNcv" width="598"></img> Wlan Config Hotspot : AD server configured on under Proxy is seen under Authentication servers <img alt="User-added image" height="493" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SS2&feoid=00N50000002Cf3M&refid=0EM2J000000qNd0" width="622"></img> Wlan Config WebAuth: AD server configured on under Proxy is seen under Authentication servers <img alt="User-added image" height="483" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SS2&feoid=00N50000002Cf3M&refid=0EM2J000000qNd5" width="612"></img> Resolution : Please enable Global Catalog while using SZ/vSZ as proxy to map AD under Hotspot and Web Authentication SSID's

When we configure AD server without enabling Global Catalog. The AD server will not be seen under Authentication Servers for Hotspot and Web Authentication while using SZ/vSZ as Proxy

2019-05-30T05:50:12-0700 2019-05-30T06:00:07-0700 https://support.ruckuswireless.com/articles/000001237 2019-05-29T13:49:14-0700 monthly 0.8 admin,premium knowledge_article_360 knowledge_article_360 2012-03-21T12:01:27-0700 000001237 Validated (External) Premium Flexmaster umm Installation Installation, FlexMaster UMM Do I need a MySQL database server running before installing FlexMaster? <div class="faq_item" style="margin-left: 0px;">No, you don’t! MySQL comes as part of the FlexMaster installation package. If your Linux server contains an instance of MySQL prior to FlexMaster installation, that MySQL instance and all dependent packages must be uninstalled prior to initializing FlexMaster installation. </div>

MySQL is inbuilt into Flexmaster installation package.

2019-05-29T13:49:14-0700 2019-05-29T18:00:09-0700 https://support.ruckuswireless.com/articles/000004231 2019-05-29T06:57:34-0700 monthly 0.8 admin,premium knowledge_article_3729 knowledge_article_3729 2015-03-20T10:41:31-0700 000004231 Validated (External) Premium Virtual smartcell gateway Installation Installation, virtual SmartCell Gateway Why can't I deploy the vSCG on VM ESXi that is running on a SuperMicro server? If the server running the VM ESXi is not in the VM HCL, deploy vSCG on a VM that is running on one of the supported platform.

*Can not deploy VOA file on ESXi running on SuperMicro server

2019-05-29T06:57:34-0700 2019-05-29T12:00:20-0700 https://support.ruckuswireless.com/articles/000003176 2019-05-29T07:38:30-0700 monthly 0.8 admin,premium knowledge_article_1143 knowledge_article_1143 2014-06-24T04:35:34-0700 000003176 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Why is there not Aeroscout tag information being displayed when its configured properly? Shut down the competitors Aeroscout configuration so it is not using the engine.

We can see all info in Aeroscout engine, but we still have no positioning of the tag on the ZD, while with a competitors WLAN infrastructure this is functioning fine. The configuration of the ZD is done according to the known working setup examples on hand.

2019-05-29T07:38:30-0700 2019-05-29T12:00:18-0700 https://support.ruckuswireless.com/articles/000003701 2019-05-29T07:42:20-0700 monthly 0.8 admin,premium knowledge_article_1448 knowledge_article_1448 2014-11-24T22:03:23-0800 000003701 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector Does Ruckus have scroll back or Page break option in CLI? If we use putty.exe utility to SSH to AP/ZDs, increase the Window size as shown in the screen, in order to allow us to scroll back to the beginning of a long CLI command output. By default, we can allow a scroll back of 200 lines.

Currently a help or ? can produce more than one page of output, and many terminal applications do not scroll back far enough to permit users to see all output.

2019-05-29T07:42:20-0700 2019-05-29T12:00:18-0700 https://support.ruckuswireless.com/articles/000003791 2019-05-29T07:46:39-0700 monthly 0.8 admin,premium knowledge_article_1500 knowledge_article_1500 2014-12-14T19:52:50-0800 000003791 Validated (External) Premium Spot lbs Configuration;Troubleshooting Configuration, Troubleshooting, SPoT LBS Why are Access Point connections fluctuating on SPoT / LBS server? Configuring primary / secondary DNS IP address on the ZoneDirector and Access Points helped in communicating Access Points to SPoT / LBS stably. DNS IP configuration on ZoneDirector : <img alt="User-added image" height="222" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SQB&feoid=00N50000002Cf3M&refid=0EM50000000LcHb" width="500"></img> DNS IP configuration on Access Points: ZoneDirector >> Configure >> Access Points >> Click on "edit" for specific MAC address and navigate to Device IP settings. <img alt="User-added image" height="310" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SQB&feoid=00N50000002Cf3M&refid=0EM50000000LcHg" width="500"></img>

ZoneDirector managed Access Points fail to communicate with SPOT/LBS server

2019-05-29T07:46:39-0700 2019-05-29T12:00:16-0700 https://support.ruckuswireless.com/articles/000003526 2019-05-29T09:51:33-0700 monthly 0.8 admin,premium knowledge_article_3728 knowledge_article_3728 2014-10-28T05:55:15-0700 000003526 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Flexmaster umm;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;System network management;Troubleshooting Installation, System Network Management, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, FlexMaster UMM Why does AP status shows as disconnected in Flexmaster and connected on ZD Allocate Hardware resources based on Hardware resource vs Network element chart

All the connected Access Points are showing disconnected in FM, however those are live in ZD.

2019-05-29T09:51:33-0700 2019-05-29T12:00:12-0700 https://support.ruckuswireless.com/articles/000006645 2019-05-29T10:08:29-0700 monthly 0.8 admin,premium knowledge_article_2806 knowledge_article_2806 2017-12-12T16:04:09-0800 000006645 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products What Diffie-Hellman Groups are supported on FastIron? Brocade SSH2 supports the following key exchange methods, <ul><li>diffie-hellman-group1-sha1</li><li>diffie-hellman-group14-sha1</li></ul> Diffie-Hellman Group 1 768-bit modulus MODP Group - RFC 7296 Diffie-Hellman Group 14 2048-bit modulus MODP Group - RFC 3526 By default Brocade FastIron devices use diffie-hellman-group1-sha1 as the key-exchange method. We can change and configure diffie-hellman-group14-sha1 as the key-exchange method to establish an SSH connection only on FCX devices. The following example overrides the default key-exchange method and configures diffie-hellman-group14-sha1 as the key-exchange method. <pre> device(config)# ip ssh key-exchange-method dh-group14-sha1</pre> <div>---------- Note: This command was introduced on software release 08.0.30f ----------</div>

Diffie-Hellman is a protocol for creating a shared secret between two sides of a communication, whether IKE, TLS, SSH and some others.

2019-05-29T10:08:29-0700 2019-05-29T12:00:12-0700 https://support.ruckuswireless.com/articles/000007861 2019-05-29T10:50:19-0700 monthly 0.8 admin,premium knowledge_article_3310 knowledge_article_3310 2018-05-18T15:18:49-0700 000007861 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway How many DVLANs can be assigned per AP or WLAN? SZ as per 3.6 release notes: In previous releases, Ruckus APs have supported up to 32 VLANs for clients. In this release, for ONLY 11ac Wave2 APs, will support 64 dynamic VLANs per AP. The purpose of this functionality is to improve scale and flexibility for large deployments, or custom deployments with many VLAN policy assignments. In this implementation, the VLANs can be assigned by dynamic connectivity policy (RADIUS, DPSK, OS, etc) or they can be assigned by VLAN pooling functionality. NOTE Only 64 VLANs are supported on 11ac Wave2 APs. Configuring more than 32 VLANs on older AP models may cause AP instability and have adverse effects on AP operations. It is strongly recommended to refrain from configuring more than 32 VLANs on those APs.

A maximum of 64 VLANS are supported on 11ac Wave2 model APs, maximum of 32 VLANs on older models.

2019-05-29T10:50:19-0700 2019-05-29T12:00:09-0700 https://support.ruckuswireless.com/articles/000001249 2019-05-29T10:57:06-0700 monthly 0.8 admin,premium knowledge_article_3526 knowledge_article_3526 2012-03-21T12:01:35-0700 000001249 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What is DTIM and how do I change its value? The DTIM option is the number of Beacon Intervals that an Access Point will buffer broadcast traffic allowing devices in power save mode to remain dormant for longer periods of time to save on battery power. By default it is set to 1, so the power save devices will have to wake up each beacon interval (typically 100msec) to receive broadcast traffic. Please note power save mode will drastically reduce the throughput available for the power save client and introduce latencies to the traffic. To increase the DTIM period you must execute a command on the Access Point using the CLI command: set dtim-period : set dtim-period <wlan name> [1..255] -- Configure DTIM (Delivery Traffic Information Map) Period The wlan name is the interface name – wlan0 – wlan15 – use the 'get wlanlist' cmd to list all configured WLANs on the AP. You can run a global command from the Zone Director – ruckus> en ruckus# config ruckus(config)# ruckus(debug)# remote_ap_cli -A "set dtim-period wlan0 3" ---- Command 'rkscli -c "set dtim-period wlan0 3 "' executed at 00:1f:41:28:b6:20 ---- Command 'rkscli -c "set dtim-period wlan0 3 "' executed at 00:25:c4:13:a5:80 ---- Command 'rkscli -c "set dtim-period wlan0 3 "' executed at 00:24:82:26:09:20 ---- Command Execution Summary: success: 3 failure: 0 total: 3 remote_ap_cli -A "set dtim-period wlan0 3" ruckus(debug)# remote_ap_cli -A "get dtim-period wlan0" ---- Command 'rkscli -c "get dtim-period wlan0 "' executed at 00:1f:41:28:b6:20 wlan0 DTIM Period: 3 ---- Command 'rkscli -c "get dtim-period wlan0 "' executed at 00:25:c4:13:a5:80 wlan0 DTIM Period: 3 ---- Command 'rkscli -c "get dtim-period wlan0 "' executed at 00:24:82:26:09:20 wlan0 DTIM Period: 3 ---- Command Execution Summary: success: 3 failure: 0 total: 3 remote_ap_cli -A "get dtim-period wlan0" The remote_ap_cli command is used to run AP CLI commands from the ZD CLI on all connected AP’s. It will not run on any AP that is not connected. The –A option runs the command on all connectected AP’s, alternatively you can run –a<ap MAC address> to run the command on a specific AP. The command in the quotations “” is the same command that can be run directly on the AP CLI.

What DTIM represents and how to change the value

2019-05-29T10:57:06-0700 2019-05-29T12:00:07-0700 https://support.ruckuswireless.com/articles/000009309 2019-05-29T01:40:42-0700 monthly 0.8 admin,premium knowledge_article_3725 knowledge_article_3725 2019-05-27T07:56:23-0700 000009309 Validated (External) Premium Virtual smartcell gateway Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, virtual SmartCell Gateway Why wireless clients are still receiving multicast traffic, even when client isolation is enabled with Isolate unicast packets and Isolate multicast packets? There are some packet types that will not be filtered by the multicast filter as per design (same for unicast filter). Regarding multicast filter, these packets bypass the filter: - ARP request packets (from client/network) (including GARP) - Multicast NS packets (from client/network) - Multicast RS packets (from client/network) - Multicast NA packets (from client/network) - Multicast RA packets (from network; RA is not sent by clients) - DHCP request packets from client (DHCPv4 and DHCPv6) - HSRPv2 hello packets.

There are some packet types that will not be filtered by the multicast filter as per design.

2019-05-29T01:40:42-0700 2019-05-29T06:00:08-0700 https://support.ruckuswireless.com/articles/000006064 2019-05-28T16:14:41-0700 monthly 0.8 admin,premium knowledge_article_3726 knowledge_article_3726 2016-10-05T17:13:22-0700 000006064 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) System network management System Network Management, SmartCell Insight How to login to SCI via SSH in 2.0 and above? In SCI 2.0 and above, there is a slight modification on how to access the SCI via SSH. We cannot access SCI using SSH using same admin login credentials. Below are the steps that we need to be followed to get SSH access to the SCI: 1. First of all we need to get the Node Token from the SCI GUI. To get this, login to the SCI's GUI and Navigate to Admin>Status and Update. Copy/Note the Node Token listed here: <img alt="" height="205" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SP8&feoid=00N50000002Cf3M&refid=0EM50000000YVLR" width="898"></img> 2. Open a Putty window and try to SSH to the SCI IP. 3. In the login name enter "rsa" and for password enter node token. login as: rsa rsa@10.10.0.129password: Last login: Thu Sep 8 10:08:24 2016 from 61.95.174.180 ******************************************************************** * * * Ruckus Smart Analytics * * Copyright 2015, Ruckus Wireless Inc. * * * * This system is for the use of authorized users only. * * Unauthorized access strictly prohibited. * * * ******************************************************************** master-42a1117e:~$

How to SSH into SCI 2.0 and above

2019-05-28T16:14:41-0700 2019-05-28T18:00:07-0700 https://support.ruckuswireless.com/articles/000009289 2019-05-24T07:22:01-0700 monthly 0.8 admin,premium knowledge_article_3722 knowledge_article_3722 2019-05-24T07:22:01-0700 000009289 Validated (External) Premium Virtual smartcell gateway Performance;Troubleshooting Performance, Troubleshooting, virtual SmartCell Gateway Why am I seeing notification that my VSZ node physical interface down Manually clear the Notification

Notification VSZ node physical interface down

2019-05-24T07:22:01-0700 2019-05-24T12:00:09-0700 https://support.ruckuswireless.com/articles/000009297 2019-05-24T03:47:25-0700 monthly 0.8 admin,premium knowledge_article_3721 knowledge_article_3721 2019-05-24T03:47:25-0700 000009297 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;Troubleshooting;Known issues and workarounds Performance, Configuration, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway Why can't I activate load balancing feature inside a zone? When in a particular zone, we try to activate the load balancing feature but we get an error, <img alt="User-added image" height="255" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SNl&feoid=00N50000002Cf3M&refid=0EM2J000000qMNk" width="500"></img> The zone does not have mesh enable and all APs are connected, so the the zone configuration has encountered corruption. A possible reason is the historically the zone has had mesh enabled, and the configuration has not been properly updated. This issue can be solved by either creating a new zone and moving all APs from current zone to new one, or contacting with Ruckus Support so that a KSP can be created to fix the corrupted zone.

An issue when trying to activate load balancing inside a zone. There's a workaround provided.

2019-05-24T03:47:25-0700 2019-05-24T06:00:07-0700 https://support.ruckuswireless.com/articles/000009295 2019-05-23T10:53:10-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3720 knowledge_article_3720 2019-05-23T10:53:10-0700 000009295 Validated (External) Public Unleashed;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Installation;Known issues and workarounds Installation, Known Issues and Workarounds, Unleashed, ZoneFlex Indoor, ZoneFlex Outdoor Do Ruckus APs interfere with a Pacemaker? It seems to be a new regulation (thanks EU)… The regulation is IEC/EN 60601-1-2 <a href="https://e-ssentials.meddev.tuv-sud.com/en/its-getting-serious-iec-en-60601-1-2-will-become-mandatory-in-2019/" target="_blank">https://e-ssentials.meddev.tuv-sud.com/en/its-getting-serious-iec-en-60601-1-2-will-become-mandatory-in-2019/</a> From the R720 datasheet: <img alt="User-added image" height="176" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SNW&feoid=00N50000002Cf3M&refid=0EM2J000000qM6A" width="500"></img>

Ruckus APs have IEC/EN 60601-1-2 certification that our APs do NOT interfere with Pacemakers.

2019-05-23T10:53:10-0700 2019-05-24T00:00:08-0700 https://support.ruckuswireless.com/articles/000008943 2019-03-26T03:02:16-0700 monthly 0.8 admin,premium knowledge_article_3636 knowledge_article_3636 2019-03-26T03:02:16-0700 000008943 Validated (External) Premium Vriot Installation;Known issues and workarounds Installation, Known Issues and Workarounds, vRIoT What IKEA devices are supported by Ruckus IoT I100? The whole list of Ikea smart bulbs with the name Tradfri works with the Ruckus I100 when set to Zigbee. The following bulbs and smart switch are tested with Ruckus IoT version 1.2 Smart Switch: E1603 Bulb GU10 Bulb E27 color Bulb E27 white Bulb E14 white All models of the Tradfri range. The color bulb you can fully control the color when add to the system. The connection hub of IKEA is not used, instead of that you need the AP with the I100 IoT module.

This article provides the list of IKEA devices that we support on IoT I100 using Zigbee.

2019-03-26T03:02:16-0700 2019-05-22T04:38:11-0700 https://support.ruckuswireless.com/articles/000009279 2019-05-21T05:29:59-0700 monthly 0.8 admin,premium knowledge_article_3717 knowledge_article_3717 2019-05-21T05:29:59-0700 000009279 Validated (External) Premium Virtual smartcell gateway Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, virtual SmartCell Gateway How to deploy/form a cluster of VSZ Nodes in AWS that are in different region Create a VPC Peering. Below is how to. After creating VPC Peering, cluster on different region able to form successfully. <ul><li><a href="https://docs.aws.amazon.com/vpc/latest/peering/vpc-peering-basics.html" target="_blank">https://docs.aws.amazon.com/vpc/latest/peering/vpc-peering-basics.html</a></li><li><a href="https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html" target="_blank">https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html</a></li></ul>

How to deploy/form a cluster of VSZ Nodes in AWS that are in different region

2019-05-21T05:29:59-0700 2019-05-21T06:00:08-0700 https://support.ruckuswireless.com/articles/000005627 2016-05-19T09:36:25-0700 monthly 0.8 admin,premium knowledge_article_2323 knowledge_article_2323 2016-05-18T14:05:12-0700 000005627 Validated (External) Premium T300;T301;P300;Ruckus T300;Ruckus T301n;Ruckus T301s;Ruckus P300 Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, T300, T301, P300 Is water seen leaking/dripping from an Outdoor AP a product fault? Refer to <a href="https://ruckus-support.s3.amazonaws.com/private/documents/526/zf-T300-mg-800-70492-001-revD-20140904.pdf?AWSAccessKeyId=AKIAJM3QLNNKLOV235TQ&Expires=1458521393&Signature=jOVYm91s2Z9lIL41uJi5AWcjgIo%3D" target="_blank">"T300 Access Point Mounting Guide"</a> on support site for details of original mention of this issue under the trouble shooting section and to review proper AP mounting

Water can get held inside T300 external shell, outside it's internal water tight gasket. Water can be seen leaking and appears to be a faulty seal - however this is normal behaviour described in the AP mounting guides

2016-05-19T09:36:25-0700 2019-05-20T16:14:05-0700 https://support.ruckuswireless.com/articles/000007770 2019-05-20T06:45:25-0700 monthly 0.8 admin,premium knowledge_article_3303 knowledge_article_3303 2018-04-27T13:37:49-0700 000007770 Validated (External) Premium Ruckus cloud wifi Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, Ruckus Cloud WiFi Why can I only add 7 networks to my Cloud Venues? This is the design and it is noted in the Release notes under the Key Consideration Going Forward Section. Limitation was mainly introduced because R310 APs cannot simultaneously beacon 8 SSIDs. We reserve one SSID for recover-me SSID. That brings max available SSIDs to 7. <a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.ruckuswireless.com%2Fdocuments%2F2233-ruckus-cloud-wi-fi-version-17-02a-release-notes-and-documentation&data=01%7C01%7CMichael.Brado%40arris.com%7C4479ffc331d9458557b208d5ac76f360%7Cf27929ade5544d55837ac561519c3091%7C1&sdata=pe8F6kbXIpSQGHwY9VtW8JLu6lm8Esoq6hD2Lp89N7w%3D&reserved=0" target="_blank">https://support.ruckuswireless.com/documents/2233-ruckus-cloud-wi-fi-version-17-02a-release-notes-and-documentation</a> <img alt="User-added image" height="465" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SKw&feoid=00N50000002Cf3M&refid=0EM500000011H3U" width="594"></img> Key Consideration Going Forward For a better Wi-Fi experience overall, we are restricting total advertised WLANs by the APs in any venue to a maximum of 7. Our recommendation is to advertise no more than three WLANs in any venue. This new restriction provides APs with more time to service Wi-Fi clients than engaging in airtime-consuming management frames. Customer can still create as many WLANs (networks) as they prefer, just like before. The only condition is when enabling the WLAN in a venue, system will check the total WLANs advertised and will restrict that number to a maximum of 7.

Ruckus Wi-Fi cloud limits the number of WLAN / Networks per Venue to 7, because R310 has 8 SSID maximum.

2019-05-20T06:45:25-0700 2019-05-20T12:00:19-0700 https://support.ruckuswireless.com/articles/000007703 2019-05-20T06:48:49-0700 monthly 0.8 admin,premium knowledge_article_3295 knowledge_article_3295 2018-03-12T11:06:25-0700 000007703 Validated (External) Premium Ruckus icx switches;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway Do we have a Wireshark Tips sheet? See attached Wireshark Tips sheet for useful settings.

The following sheet provides symbols and tips for using Wireshark utility to analzye packet captures.

2019-05-20T06:48:49-0700 2019-05-20T12:00:18-0700 http://support.ruckuswireless.com/article_attachments/kA250000000TwOSCA0?attachment_index=0 2019-05-20T12:00:18-0700 monthly admin,premium knowledge_article_3295 knowledge_article_3295_attachment_1 Wireshark_tips_v01.pdf 64063.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000TwOSCA0?attachment_index=1 2019-05-20T12:00:18-0700 monthly admin,premium knowledge_article_3295 knowledge_article_3295_attachment_1 Wireshark_tips_v01.pptx 86181.0 application/vnd.openxmlformats-officedocument.presentationml.presentation https://support.ruckuswireless.com/articles/000006409 2019-05-20T06:52:05-0700 monthly 0.8 admin,premium knowledge_article_3716 knowledge_article_3716 2017-07-21T16:44:20-0700 000006409 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneDirector Is Guest Pass case-sensitive? ZD doesn’t distinguish lower or upper case for guest passphrase, so it is displayed in all upper case.

ZD doesn't distinguish upper/lower case for Guest Pass phrase.

2019-05-20T06:52:05-0700 2019-05-20T12:00:17-0700 https://support.ruckuswireless.com/articles/000006481 2019-05-20T07:51:17-0700 monthly 0.8 admin,premium knowledge_article_2680 knowledge_article_2680 2017-11-03T16:13:43-0700 000006481 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App System network management System Network Management, Unleashed Why does SNMP work only on master AP but not on Member AP? Master has all the information of every member AP which is why the polling does not work and this is as per product design.

SNMP works only on master AP but not on Member AP

2019-05-20T07:51:17-0700 2019-05-20T12:00:12-0700 https://support.ruckuswireless.com/articles/000002880 2019-05-20T08:06:52-0700 monthly 0.8 admin,premium knowledge_article_877 knowledge_article_877 2014-04-02T06:29:56-0700 000002880 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Why does the ZD not redirect to my specific URL when it is acting as the captive portal for the Hotspot WLAN? Create External Authentication Portal or Avoid setting a directed URL in ZD configuration. ZD 9.7.0.0.220

ZD configured as Captive Portal - while redirect is desired to external web portal, instead of users intentional URL

2019-05-20T08:06:52-0700 2019-05-20T12:00:10-0700 https://support.ruckuswireless.com/articles/000006414 2019-05-20T08:14:22-0700 monthly 0.8 admin,premium knowledge_article_3488 knowledge_article_3488 2017-08-14T16:09:40-0700 000006414 Validated (External) Premium Virtual smartcell gateway Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, virtual SmartCell Gateway How to Migrate Zone/WLAN configuration from regular Domain to a Partner Domain? Follow the steps below to manually migrate a regular Zone/WLAN configuration to a Partner Domain. 1. Create a new domain, AP zone, and WLAN which includes DPSK configurations, and then extract zone and WLAN as a template. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW0r"></img> <img alt="User-added image" height="116" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW0w" style="width: 839px; height: 301px;" width="500"></img> <img alt="User-added image" height="104" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW11" style="width: 810px; height: 269px;" width="500"></img> 2. Create a new partner domain >> PASS <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW16"></img> 3. Create a new zone from template under partner domain >> PASS <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW1B"></img> 4. Apply WLAN template to the zone managed by partner domain >> PASS <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW1G"></img> 5. Move AP from 3.5 domain to partner domain >> PASS <img alt="User-added image" height="148" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW1L" style="width: 802px; height: 287px;" width="500"></img> 6. Export CSV from 3.5 zone under regular domain and import CSV to the new zone under partner domain >> PASS <img alt="User-added image" height="165" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW1a" style="width: 773px; height: 357px;" width="500"></img> <img alt="User-added image" height="165" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW1p" style="width: 767px; height: 284px;" width="500"></img> 7. Make sure wireless clients can associate with this AP via existing DPSK >> PASS <img alt="User-added image" height="200" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW1u" style="width: 804px; height: 353px;" width="500"></img> ---------- Note1: If you want to migrate regular 3.4 AP zone to partner domain, please remember to change zone firmware from 3.4 to 3.5, otherwise you will encounter limitation in Note2 below. <img alt="User-added image" height="136" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW2E" style="width: 654px; height: 234px;" width="500"></img> ---------- Note2: We do not support to import 3.4 zone/wlan template to 3.5 AP zone please see below warning messages: <img alt="User-added image" height="315" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW2T" width="500"></img> <img alt="User-added image" height="284" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SLu&feoid=00N50000002Cf3M&refid=0EM50000000BW2Y" width="500"></img>

Steps to manually migrate Zone/WLAN configuration to a Partner Domain

2019-05-20T08:14:22-0700 2019-05-20T12:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA2500000004yWvCAI?attachment_index=0 2019-05-20T12:00:10-0700 monthly admin,premium knowledge_article_3488 knowledge_article_3488_attachment_1 TechTip-migrateDomain.pdf 1509149.0 application/pdf https://support.ruckuswireless.com/articles/000005825 2016-06-13T11:03:34-0700 monthly 0.8 admin,premium knowledge_article_2341 knowledge_article_2341 2016-06-09T16:00:40-0700 000005825 Validated (External) Premium R700;Ruckus R700 Performance;System network management;Troubleshooting Performance, System Network Management, Troubleshooting, R700 What are the flashing lights on R700 model APs? Ruckus 802.11ac model R700 AP has colored LEDs that can be used to determine proper functionality. These tables describe the LED and meaning of on/off, blink speed, and color to describe the conditions at the present time. R700 Front Panel LEDs: LED Description PWR Off: Off Red: Boot up in process Green: On DIR Off: The AP is not being managed by a controller (Standalone mode) Green: The AP is being managed by a controller Slow flashing green (one flash every two seconds): The AP is managed by a controller but is currently unable to communicate with it. Fast flashing green (two flashes every second): The AP is managed by a controller and is currently receiving configuration settings or an image update. AIR Off: The AP is operating in standalone mode or as a Root AP (RAP) or non-Mesh AP. Green: The AP is functioning as a Mesh AP (MAP), and the wireless uplink signal is good. Fast flashing green (two flashes every second): The AP is functioning as a Mesh AP (MAP), and the wireless uplink signal is fair. Slow flashing green (one flash every two seconds): Mesh networking is enabled, but the AP is still searching for a mesh uplink. 2.4G Off: The WLAN service is down. Green: The WLAN is up and at least one client is associated. Amber: The WLAN is up. No clients are associated. 5G Off: The WLAN service is down. Green: The WLAN is up and at least one client is associated. No downlink MAPs are connected. Slow flashing green (one flash every two seconds): The WLAN is up and at least one downlink MAP is connected. No clients are associated. Fast flashing green (two flashes every second): The WLAN is up, at least one downlink MAP is connected and at least one client is associated. R700 Rear Panel Elements: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000009lO&feoid=00N50000002Cf3M&refid=0EM50000000Ep2H"></img> LEDs Description Off Not Connected Amber + Green Connected to 10Mbps device Amber Connected to 100Mbps device Green Connected to 1000Mbps device

Viewing the combination of front panel LEDs and rear panel Ethernet LEDs can determine proper function of R700 APs.

2016-06-13T11:03:34-0700 2019-05-20T09:58:18-0700 https://support.ruckuswireless.com/articles/000006429 2019-05-20T05:09:55-0700 monthly 0.8 admin,premium knowledge_article_2661 knowledge_article_2661 2017-09-26T15:37:45-0700 000006429 Validated (External) Premium Cloud services Configuration Configuration, Cloud Services What could cause WLAN to disappear from Cloud portal when customized WLAN scheduling is turned ON? Configured Time zone under User profile

WLAN/SSID disappeared from the cloud portal as soon as customize WLAN scheduling is enabled, however SSIDs are seen in client devices and they were able to connect

2019-05-20T05:09:55-0700 2019-05-20T06:00:11-0700 https://support.ruckuswireless.com/articles/000006431 2019-05-20T05:13:54-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2660 knowledge_article_2660 2017-09-26T15:39:47-0700 000006431 Validated (External) Public Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why vSZ-H 3.5.1.0.296 - Reports do not have CSV option to choose as Output Format? Design intended. Use workaround.

While generating report on vSZ-H 3.5.1.0.296 we do not have an option to choose CSV as Output Format.

2019-05-20T05:13:54-0700 2019-05-20T06:00:10-0700 https://support.ruckuswireless.com/articles/000006462 2019-05-20T05:33:25-0700 monthly 0.8 admin,premium knowledge_article_2666 knowledge_article_2666 2017-09-29T14:30:51-0700 000006462 Validated (External) Premium Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Firmware Firmware, SPoT Do we have any documentation on SPoT / LBS for SZ and GPB / MQTT interface? Ruckus Wireless Smart Positioning Technology (SPoT) measures clients’ received signal strengths and reports the measurements to one or more location servers (LS), which determine each client’s location. The SPoT technology supports Ruckus Wireless location servers and third-party location servers. This document specifies the application programming interface between the Ruckus Wireless network and Ruckus location servers as well as compatible third-party location servers. <img alt="User-added image" height="198" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SKN&feoid=00N50000002Cf3M&refid=0EM50000000VTKi" width="676"></img>

Ruckus Wireless Smart Positioning Technology (SPoT) measures clients’ received signal strengths and reports the measurements to one or more location servers (LS), which determine each client’s location. The SPoT technology supports Ruckus Wireless location servers and third-party location servers.

2019-05-20T05:33:25-0700 2019-05-20T06:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA250000000TvjfCAC?attachment_index=0 2019-05-20T06:00:09-0700 monthly admin,premium knowledge_article_2666 knowledge_article_2666_attachment_1 GSG-SZ-GPB-MQTT-Interface-20170828.pdf 724750.0 application/pdf https://support.ruckuswireless.com/articles/000004233 2019-05-20T05:49:17-0700 monthly 0.8 admin,premium knowledge_article_1861 knowledge_article_1861 2015-05-12T15:31:38-0700 000004233 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why is my ZD managed AP server list empty when it connects to the VSCG following the command set director ip <vSZ IP> ? The feature is working as intended since User enabled the Automatic reset factory from the VSCG setup wizard.

vSCG: Although originally pointed with 'set director ip' command, after AP joins vSCG and reboots with factory default, it's server list will become empty.

2019-05-20T05:49:17-0700 2019-05-20T06:00:06-0700 https://support.ruckuswireless.com/articles/000004904 2019-05-17T14:12:55-0700 monthly 0.8 admin,premium knowledge_article_3714 knowledge_article_3714 2015-07-20T14:03:26-0700 000004904 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Where can't I use WW world-wide APs? International companies may acquire Ruckus APs for deployment in multiple countries. A World-Wide ordering part number AP can be set for use in the intended countries, except for USA, Israel, Japan, that must buy country-code specific APs. It is not legal to ship/sell/use a WW AP in the United States, per FCC regulation.

It is not legal to sell/use WW world-wide APs in the United States, Israel or Japan.

2019-05-17T14:12:55-0700 2019-05-17T18:00:17-0700 https://support.ruckuswireless.com/articles/000001915 2019-05-17T15:58:12-0700 monthly 0.8 admin,premium knowledge_article_3713 knowledge_article_3713 2014-02-18T13:51:46-0800 000001915 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor Q: Can we set a standlone AP to use 802.11n only? Q: Does anyone remember how to set OFDM only (or 11n only) through SSH for standalone AP? ZD Method: ruckus> en ruckus# config ruckus(config)#show wlan - Shows the list of all WLANs ruckus(config)#wlan 'Name of the WLAN' ruckus(config-wlan)#ofdm-only A: set mode <wlan-name> [auto | 11g | 11b] get mode <wlan-name> The default is auto. We had an earlier question about setting ofdm-only on the standalone AP. You can do the following command: set ofdm-only wlanX enable However, this command was not recognized by my 7363 running 9.4.2.0.29. That same email references another command that does the same thing: set pureg wlanX enable This command worked and it's per radio interface (wifi0 and/or wifi1, not VAP).

Q: Can we set a standlone AP to use 802.11n only?

2019-05-17T15:58:12-0700 2019-05-17T18:00:14-0700 https://support.ruckuswireless.com/articles/000003337 2019-05-17T16:34:25-0700 monthly 0.8 admin,premium knowledge_article_3711 knowledge_article_3711 2014-08-29T10:33:53-0700 000003337 Validated (External) Premium Zonedirector;Zoneflex outdoor;Smartcell gateway;Smartcell ap;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, ZoneDirector, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP Is there any reason some APs show GPS coordinates (SNMP/FlexMaster) but some don't?

Most of a customer's 7762-S model APs are showing GPS coordinates, but not all.

2019-05-17T16:34:25-0700 2019-05-17T18:00:12-0700 https://support.ruckuswireless.com/articles/000002691 2019-05-17T16:38:18-0700 monthly 0.8 admin,premium knowledge_article_766 knowledge_article_766 2014-02-21T15:33:15-0800 000002691 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why might new APs be unable to connect to ZoneDirector? Employ L2/L3 switches with multiple VLAN capbility and inter-VLAN routing. Configure the management/native VLAN used by ZD/APs, and any additional client VLANs used by WLANs, using trunk ports to the APs. If new APs are connected to the same VLAN as the ZD, and they pull IPs from the same subnet, they should be able to connect.

New APs are not seen/connecting to ZoneDirector

2019-05-17T16:38:18-0700 2019-05-17T18:00:11-0700 https://support.ruckuswireless.com/articles/000002492 2019-05-17T16:46:30-0700 monthly 0.8 admin,premium knowledge_article_3710 knowledge_article_3710 2014-01-08T12:06:48-0800 000002492 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector What if the ZD won't open Browser or SSH session? Further testing to eliminate a possible server Broadcom NIC causing LWAPP re-broadcast storm, customer disconnected servers' switch from the ZD/AP switch, and determined they have a bad switch, not a defective ZoneDirector

ZD status LED goes Green, and ZD answers ping to IP, but won't open Browser or SSH session

2019-05-17T16:46:30-0700 2019-05-17T18:00:10-0700 https://support.ruckuswireless.com/articles/000006324 2019-05-17T16:56:11-0700 monthly 0.8 admin,premium knowledge_article_3708 knowledge_article_3708 2017-03-30T00:25:32-0700 000006324 Validated (External) Premium Widgets not showing info on ZD dashboard Need to change log settings and Application Visibility. on ZD.

Widgets not showing info on ZD dashboard

2019-05-17T16:56:11-0700 2019-05-17T18:00:07-0700 https://support.ruckuswireless.com/articles/000002260 2019-05-17T16:58:26-0700 monthly 0.8 admin,premium knowledge_article_3707 knowledge_article_3707 2013-09-26T15:21:23-0700 000002260 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Customer found that Airplay mirroring to another VLAN's AppleTV, would list the AppleTVs for iOS devices (iPad/iPhone), but they could not mirror to one, while MacBooks had no problem. Customer found that Airplay mirroring to another VLAN's AppleTV, would list the AppleTVs for iOS devices (iPad/iPhone), but they could not mirror to one, while MacBooks had no problem, until a DNS server was included in the DHCP offers to the iOS devices.

Customer found that Airplay mirroring to another VLAN's AppleTV, would list the AppleTVs for iOS devices (iPad/iPhone), but they could not mirror to one, while MacBooks had no problem.

2019-05-17T16:58:26-0700 2019-05-17T18:00:06-0700 https://support.ruckuswireless.com/articles/000009271 2019-05-17T09:12:55-0700 monthly 0.8 admin,premium knowledge_article_3705 knowledge_article_3705 2019-05-17T09:12:55-0700 000009271 Validated (External) Premium Virtual smartcell gateway Performance;Configuration Performance, Configuration, virtual SmartCell Gateway Why does the API to get Zone information fail on the Staging zone? When we try to launch the API to get information on an specific AP to see the zone it belongs to, <a href="https://10.150.181.131:8443/wsg/api/public/v6_0/aps/EC:8C:A2:36:A1:A0" target="_blank">https://10.150.181.131:8443/wsg/api/public/v6_0/aps/[AP_MAC]</a> we get the zoneId inside all the lines of the output { ...... "zoneId": "XXXXXX-XXXX-XXXX-XXXX-XXXXXX", ...... } then we launch the API to get information for that zone, <a href="https://10.150.181.131:8443/wsg/api/public/v6_0/rkszones/b4187899-38ae-4ace-8e40-0bc444455156" target="_blank">https://10.150.181.131:8443/wsg/api/public/v6_0/rkszones/[zoneId]</a> when zoneId would be the above value XXXXXX-XXXX-XXXX-XXXX-XXXXXX If the zone is not the Staging zone the output will give the information for that zone, but if the zone is the Staging zone, we will get this error, { "message": "Getting information for Staging Zone is not supported!", "errorCode": 302, "errorType": "Business rule violation" } This is happening because the Staging zone is not really a zone but temporary location where the APs are placed until approved. Note: It is important to notice that in the vSZ-E architecture there's no staging zone but default zone, and in this case we will get the info for this zone without that warning.

When we try to get information on a Zone but that zone is the Staging zone, there's a warning message as response.

2019-05-17T09:12:55-0700 2019-05-17T12:00:15-0700 https://support.ruckuswireless.com/articles/000001816 2019-05-17T09:23:15-0700 monthly 0.8 admin,premium knowledge_article_2533 knowledge_article_2533 2013-03-19T11:27:08-0700 000001816 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Can I connect an AP to a ZD through a VPN connection? <ul><li>An AP that is pre-provisioned with the ZD and then placed behind the firewall can find its way to the ZD.</li><li>LWAPP ports on the firewall which is behind the ZD should be opened and allowed through the tunnel.</li><li>Ports 12222, 12223, 21 (for firmware upgrade) must be configured to the ZD’s private IP address for NAT port mapping table.</li><li>Latency through the tunnel should be less than 100ms when pinging from AP to the ZD after placing them behind the firewall</li><li>Ruckus uses full size packets to provision the AP’s that cannot be fragmented (DF bit unset).</li><li>The problem may be the MTU settings on the intermediate routers.</li></ul> <div> </div> <div>You can either increase the MTU settings on the Routers or decrease the MTU setting for AP configuration from the Configure::Access Point page – try reducing it to 1425 first – then reduce it further if the AP’s still disconnected.</div>

There are factors to consider with APs remote from ZD, including FW ports and VPN MTU settings to insure RTT and provisioning.

2019-05-17T09:23:15-0700 2019-05-17T12:00:13-0700 https://support.ruckuswireless.com/articles/000006376 2019-05-16T10:01:50-0700 monthly 0.8 admin,premium knowledge_article_2643 knowledge_article_2643 2017-07-17T11:23:02-0700 000006376 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security Configuration, Security, SmartCell Gateway, virtual SmartCell Gateway Can the Smartzone 100 version 3.5.0.0.808 appliance do Zero-IT? If so, how do I enable it? Smartzone Zero-IT, the mechanism, with automatic scripts to create secure WLAN's in some client devices, was dropped from the SZ/SCG product line after 3.2.1 (no longer available in 3.4 and above) The SZ version of Zero-IT only supported 802.1x secure WLAN creation and never supported auto provisioning of DPSK key secured WLAN's The SZ does support DPSK (per device PSK keys bound to device MAC) that can be generated for a batch of users and provide the keys to users either manually or pushed to their email or phone via SMS assuming you’ve configured SMTP and SMS gateway. Details on setting up DPSK for SZ can be found in the Administrators guide starting on page 147: https://support.ruckuswireless.com/documents/1360-smartzone-3-5-ga-administrator-guide-sz100-vsz-e Auto provisioning of client devices is now best handled by Ruckus Cloud Path server. This server uses workflows to automate creating secure WLAN's in client devices, in particular 802.1x TLS using digital certificates (the most secure). Please contact your Ruckus Sales rep for more details on Cloud Path To find out more info about Ruckus CLOUDPATH ENROLLMENT SYSTEM, please refer below link: <a href="https://www.ruckuswireless.com/products/smart-wireless-services/cloudpath" target="_blank">https://www.ruckuswireless.com/products/smart-wireless-services/cloudpath</a>

Zero-IT support was removed from product in 3.4

2019-05-16T10:01:50-0700 2019-05-16T12:00:10-0700 https://support.ruckuswireless.com/articles/000006798 2019-05-16T02:49:01-0700 monthly 0.8 admin,premium knowledge_article_3149 knowledge_article_3149 2017-12-12T14:11:54-0800 000006798 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to connect an ICX switch to BSC over SSL? 1. CA setup and Generating/Signing the Certificates <div> This part will vary greatly, depending on CA used; the below PKI Tools included with OVS are used. Details on it are here: <a href="http://openvswitch.org/support/dist-docs/ovs-pki.8.txt" target="_blank">http://openvswitch.org/support/dist-docs/ovs-pki.8.txt</a></div> <div> ovs-pki init</div> <div> </div> <div>This should generate 4 files in:</div> <div> </div> <div>ls/var/lib/openvswitch/pki</div> <div> </div> <div>As a rule of thumb:</div> <div>- The files pki/controllerca/cacert.pem and pki/switchca/cacert.pem that it produces will need to be copied over to the OpenFlow switches and controllers, respectively. Their contents may safely be made public. </div> <div>- Other files generated by init may remain on the CA machine. The files pki/controllerca/private/cakey.pem and pki/switchca/private/cakey.pem have particularly sensitive contents that should not be exposed.</div> <div> </div> <div>ovs-pki req+sign ctl controller</div> <div>ovs-pki req+sign sc switch</div> <div> </div> <div>This should generate 3 files each in the directory where you run the command:</div> <div> </div> <div>root@h-ubuntu-04:/opt/bvc# ls -l</div> <div>-rw-r--r-- 1 root root 4063 Jul 30 05:46 ctl-cert.pem</div> <div>-rw------- 1 root root 1675 Jul 30 05:46 ctl-privkey.pem</div> <div>-rw-r--r-- 1 root root 3606 Jul 30 05:46 ctl-req.pem</div> <div>-rw-r--r-- 1 root root 4042 Jul 30 05:50 sc-cert.pem</div> <div>-rw------- 1 root root 1679 Jul 30 05:50 sc-privkey.pem</div> <div>-rw-r--r-- 1 root root 3601 Jul 30 05:50 sc-req.pem</div> <div> </div> <div>In theory/alternatively, a certificate request should have been generated on switch/controller and then sent to CA for signing, but we’re taking some shortcuts here. The resulting name-privkey.pem and name-cert.pem files must be copied securely to the switch or controller.</div> <div> At this point, after certificate and private key files are generated, the rest of the steps should be the same regardless of CA.</div> <div> </div> <div> 2. Controller Setup</div> <div> </div> <div>Create PKCS#12 archive file container for certificate and private key, where h-ubuntu-04 was the hostname:</div> <div> </div> <div>openssl pkcs12 -export -in ctl-cert.pem -inkey ctl-privkey.pem -out ctl.p12 -name h-ubuntu-04 -CAfile /var/lib/openvswitch/pki/controllerca/cacert.pem -caname CANAME -chain </div> <div> </div> <div>Enter Export Password: opendaylight </div> <div>ls -l </div> <div>-rw-r--r-- 1 root root 3572 Jul 30 06:05 ctl.p12</div> <div> </div> <div>Use keytool to convert PKSC#12 to Java KeyStore and to create/add switch certificate to TrustStore:</div> <div> </div> <div>keytool -importkeystore -deststorepass opendaylight -destkeypass opendaylight -destkeystore ctl.jks -srckeystore ctl.p12 -srcstoretype PKCS12 -srcstorepass opendaylight -alias h-ubuntu-04</div> <div> </div> <div>ls- l </div> <div>-rw-r--r-- 1 root root 3182 Jul 30 06:08 ctl.jks</div> <div> </div> <div>keytool -importcert -file sc-cert.pem -keystore truststore.jks -storepass opendaylight</div> <div> </div> <div>ls -l </div> <div>-rw-r--r-- 1 root root 960 Jul 30 06:10 truststore.jks</div> <div> </div> <div>Move the files generated by keytool to opendaylight/BVC:</div> <div> </div> <div>cp ctl.jks truststore.jks /opt/bvc/controller/configuration/ssl/</div> <div> </div> <div>Modify controller config to use TLS on port 633 (or use other port):</div> <div> </div> <div>cd /opt/bvc/controller/etc/opendaylight/karaf/ ; vi 42-openflowplugin.xml</div> <div> </div> <div> <port>6633</port></div> <div> <transport-protocol>TLS</transport-protocol></div> <div> <switch-idle-timeout>15000</switch-idle-timeout></div> <div> <tls></div> <div> <keystore>/opt/bvc/controller/configuration/ssl/ctl.jks</keystore></div> <div> <keystore-type>JKS</keystore-type></div> <div> <keystore-path-type>PATH</keystore-path-type></div> <div> <keystore-password>opendaylight</keystore-password></div> <div> <truststore>/opt/bvc/controller/configuration/ssl/truststore.jks</truststore></div> <div> <truststore-type>JKS</truststore-type></div> <div> <truststore-path-type>PATH</truststore-path-type></div> <div> <truststore-password>opendaylight</truststore-password></div> <div> <certificate-password>opendaylight</certificate-password></div> <div> </tls></div> <div> </div> <div>Stop/Start BSC at this point and you can test if SSL connectivity works with:</div> <div> </div> <div>openssl s_client -connect 10.17.163.14:6633</div> <div> </div> <div> 3. Switch Setup </div> <div> </div> <div>Optionally, install a tftp server to transfer files; below is a Ubuntu example, that uses the same Linux machine, where an SDN controller is setup:</div> <div> </div> <div>sudo apt-get install xinetd tftpd tftp vi /etc/xinetd.d/tftp</div> <div>service tftp</div> <div>{</div> <div>protocol = udp</div> <div>port = 69</div> <div>socket_type = dgram</div> <div>wait = yes</div> <div>user = nobody</div> <div>server = /usr/sbin/in.tftpd</div> <div>server_args = /tftpboot</div> <div>disable = no</div> <div>}</div> <div> </div> <div>mkdir /tftpboot</div> <div> </div> <div>sudo chmod -R 777 /tftpboot</div> <div>sudo chown -R nobody /tftpboot</div> <div>sudo service xinetd restart</div> <div> </div> <div>Copy switch certificate and private key to tftp folder:</div> <div> </div> <div>cp sc-cert.pem sc-privkey.pem /tftpboot/</div> <div> </div> <div>Transfer the files to the switch. TFTP should be used for that; SCP was tried, but the command did not seem to recognize client-private-key/client-certificate options:</div> <div> </div> <div>copy tftp flash 10.17.163.14 sc-privkey.pem client-private-key</div> <div>copy tftp flash 10.17.163.14 sc-cert.pem client-certificate </div> <div> </div> <div>Configure OpenFlow on ICX:</div> <div> </div> <div>conf t</div> <div>openflow enable ofv130</div> <div>openflow controller ip-address 10.17.163.14</div> <div> </div> <div>Check the connectivity to the controller:</div> <div> </div> <div>telnet@1465517_hchen_Aug05_ICX7750-48F#sh open </div> <div>Administrative Status: Enabled</div> <div>SSL Status: Enabled</div> <div> </div> <div>Controller Type: ofv130</div> <div>Number of Controllers: 1</div> <div> </div> <div>Controller 1:</div> <div>Connection Mode: active, SSL </div> <div>Controller Address: 10.17.163.14</div> <div>Connection Port: 6633</div> <div>Connection Status: OPENFLOW_ESTABLISHED</div> <div>Role: EQUAL</div> <div>Packet-in config: no-match, action</div> <div>Port-status config: add, delete, modify</div> Flow-removed config: delete, group-delete

How to connect an ICX switch to BSC over SSL

2019-05-16T02:49:01-0700 2019-05-16T06:00:06-0700 https://support.ruckuswireless.com/articles/000002377 2019-05-15T05:58:20-0700 monthly 0.8 admin,premium knowledge_article_3495 knowledge_article_3495 2013-11-26T07:13:26-0800 000002377 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to customize the Hotspot login page with pre-loaded credentials <div>When a client device connects to the Hotspot WLAN, the client will be redirected to a login page where the client needs to prove it's authorization. </div> <div> </div> <div>Use Case: </div> <div>If a customer does not want to prompt a wireless client to enter a username and password and just want to display 'Terms and conditions' then we can pre-program the username and password in the html code itself. Please refer the sample html code furnished below, in the web server:</div> <div> Sample Code # </div> <div><html></div> <div><head><title>Wireless Internet Service</title></head></div> <div><body></div> <div><center></div> <div> <h2>Wireless Internet Service</h2> </div> <div><form method=POST action="http://<zd-ip>:9997/login"></div> <div><input type="hidden" name="username" value="user1"></div> <div><input type="hidden" name="password" value="user1"></div> <div></div> <div><input type="submit" value="Accept Terms & Conditions"></div> <div></form></div> <div></center></div> <div></body></div> <div></html></div>

Scripting can be used to launch hotspot user with pre-defined credentials.

2019-05-15T05:58:20-0700 2019-05-15T06:00:08-0700 https://support.ruckuswireless.com/articles/000009213 2019-05-14T12:59:14-0700 monthly 0.8 admin,premium knowledge_article_3701 knowledge_article_3701 2019-05-14T12:59:14-0700 000009213 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Cloudpath How can we customize favicon on CloudPath server? * Favicon is not customizable in the multi-tenant / cloud-hosted CloudPath web server as it is shared with multiple tenants. * Below screenshot shows the Favicon symbol. <img alt="User-added image" height="248" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SDC&feoid=00N50000002Cf3M&refid=0EM2J000000qIRx" width="500"></img> * Favicon can be customzied on on-premise CloudPath web server under Configuration--> Workflow --> Look and feel. <img alt="User-added image" height="782" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SDC&feoid=00N50000002Cf3M&refid=0EM2J000000qIRs" width="500"></img>

This article provides information on how to customize the Favicon on CloudPath server.

2019-05-14T12:59:14-0700 2019-05-14T18:00:08-0700 https://support.ruckuswireless.com/articles/000009249 2019-05-14T13:32:06-0700 monthly 0.8 admin,premium knowledge_article_3700 knowledge_article_3700 2019-05-14T13:32:06-0700 000009249 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Can SCG200 on SZ 3.6.2 load latest SZ 5.1 Sigpack file? Ruckus ARC (Application Recognition & Control) filtering is based on a signature package provided by a 3rd party (TrendMicro and now QOSMOS) who do DPI (Deep Packet Inspection) on traces to identify applications and new/latest DNS hostname changes, etc. The last TrendMicro sigpack was version 1.106, and new sigpack files will come from QOSMOS for use with SZ 5.1 and higher. The flavor of sigpack running on APs depends on the SZ version running on the AP, so if an SZ controller has Zones running 3.6 and 5.1, it will need the sigpack image from both vendors.

ARC signature packages are designed to work with the version of SmartZone that they are released with, not earlier/later versions.

2019-05-14T13:32:06-0700 2019-05-14T18:00:06-0700 https://support.ruckuswireless.com/articles/000009148 2019-05-13T15:08:45-0700 monthly 0.8 admin,premium knowledge_article_3696 knowledge_article_3696 2019-04-30T21:56:49-0700 000009148 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;System network management;Troubleshooting Configuration, Security, System Network Management, Troubleshooting, ZoneDirector How to restrict the WLAN subnet from accessing other subnets in the network using ACL? Create a Standard WLAN with desired Encryption and VLAN settings. Once created, make sure that the clients are connecting and getting the IP address (192.168.2.0/24 in this scenario). Now on the controller GUI under >> Services & Profiles >> Access Control >> L3/4/IP Address Access Control >> Click on Create. The ACL rule always works on "TOP-DOWN" fashion. First the first entry, allow DNS and DHCP as exception. Allowing the ports rather than the IP is more convenient. Now restrict the rest of the networks 192.168.0.0, 192.168.1.0, 192.168.3.0 on each entry as deny. All ACLs have an implicit “deny all” statement at the end. Therefore, every ACL must have at least one permit statement to allow any traffic to pass at the end. Below is the screen shot of the ACL rules. <img alt="User-added image" height="171" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SDv&feoid=00N50000002Cf3M&refid=0EM2J000000qFZd" width="500"></img> Apply the ACL created to the WLAN under Wireless LANs >> Select WLAN and click on Edit >> Advanced Options >> Access Control >> L3/4/IP Address. <img alt="User-added image" height="282" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SDv&feoid=00N50000002Cf3M&refid=0EM2J000000qFZs" width="500"></img> Below is the link for the ZD user guide (10.2v) and refer page number 211 for the topic "Creating Layer 3/Layer 4/IP Address Access Control Lists" https://support.ruckuswireless.com/documents/2487-zonedirector-10-2-ga-user-guide/download

This article will provide solution on how to restrict WLAN subnet from accessing the other subnets in the network.

2019-05-13T15:08:45-0700 2019-05-13T18:00:13-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000000OE9SAM?attachment_index=0 2019-05-13T18:00:13-0700 monthly admin,premium knowledge_article_3696 knowledge_article_3696_attachment_1 Access list.jpg 183485.0 image/jpeg http://support.ruckuswireless.com/article_attachments/kA22J0000000OE9SAM?attachment_index=1 2019-05-13T18:00:13-0700 monthly admin,premium knowledge_article_3696 knowledge_article_3696_attachment_1 WLAN.PNG 36460.0 image/png https://support.ruckuswireless.com/articles/000008891 2019-05-13T15:10:14-0700 monthly 0.8 admin,premium knowledge_article_3695 knowledge_article_3695 2019-04-30T13:56:59-0700 000008891 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Does Fastiron support ECN? Fastiron Switches as Enterprise devices won't support Explicit Congestion Notification. There is a similar feature in version 08090, however, it will simply be a congestion avoidance feature. http://docs.ruckuswireless.com/fastiron/08.0.90/fastiron-08090-trafficguide/GUID-BB2BA51A-74A3-47F6-B5D2-0E04BE73DC2C.html The PFC feature is supported only on Ruckus ICX 7250, ICX 7450, and ICX 7750 devices. The ICX 7150, ICX 7650 and ICX 7850 devices do not support PFC. PFC in a switch port extender (SPX) environment is only supported on stack units. It is not supported on a Ruckus ICX 7450 switch in an SPX environment. PFC is disabled by default. It can be enabled by executing the priority-flow-control enable command.

Does Fastiron support ECN?

2019-05-13T15:10:14-0700 2019-05-13T18:00:12-0700 https://support.ruckuswireless.com/articles/000009199 2019-05-13T06:03:52-0700 monthly 0.8 admin,premium knowledge_article_3692 knowledge_article_3692 2019-05-13T05:40:45-0700 000009199 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Can I configured port forwarding on the AP? The AP CLI port forward command (set portfwd) is not supported within the SZ/vSZ/SCG AP firmware. It was introduced in the standalone code like 1xx.x.x.x. example command: set portfwd cssh 2222 2222 both 192.168.168.50 22

Port forwarding can be configured on the AP via CLI commands, but it doesn't work.

2019-05-13T06:03:52-0700 2019-05-13T12:00:10-0700 https://support.ruckuswireless.com/articles/000009212 2019-05-13T06:03:12-0700 monthly 0.8 admin,premium knowledge_article_3691 knowledge_article_3691 2019-05-13T06:02:38-0700 000009212 Validated (External) Premium Ruckus icx switches;Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, Ruckus ICX Switches, SmartCell Gateway, virtual SmartCell Gateway Can I use the SNMP MIBs for SZ/vSZ to monitor ICX?

Can I use the MIB files from the SZ platform to monitor ICX?

2019-05-13T06:03:12-0700 2019-05-13T12:00:08-0700 https://support.ruckuswireless.com/articles/000007449 2019-05-13T08:46:25-0700 monthly 0.8 admin,premium knowledge_article_2723 knowledge_article_2723 2017-12-12T16:13:38-0800 000007449 Validated (External) Premium Ruckus icx switches System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches ICX 7450 crashing when plugging/unplugging phone by LLDP <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">Upgrade to a version of code that contains the fix.

FI device may unexpectedly reload when plugging/unplugging phone by LLDP.

2019-05-13T08:46:25-0700 2019-05-13T12:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tw5ECAS?attachment_index=0 2019-05-13T12:00:07-0700 monthly admin,premium knowledge_article_2723 knowledge_article_2723_attachment_1 ka25B000000Cc0SQAS_Attachment__c.pdf 2601951.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000Tw5ECAS?attachment_index=1 2019-05-13T12:00:07-0700 monthly admin,premium knowledge_article_2723 knowledge_article_2723_attachment_1 ka25B000000Cc0SQAS_Attachment2__c.pdf 585005.0 application/pdf https://support.ruckuswireless.com/articles/000003461 2016-11-17T13:42:06-0800 monthly 0.8 admin,premium knowledge_article_2478 knowledge_article_2478 2014-09-29T22:48:35-0700 000003461 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How frequently is the syslog message "repeatedly fails authentication when joining WLAN" generated upon client authentication failure? For 802.1x/MAC authentication, if wrong/inappropriate authentication requests exceed 2 times in a 5 minute interval, this log message is triggered. For Open PSK (WPA2/AES) and Web auth, if wrong/inappropriate authentication requests exceed 10 times in a 5 minute interval, this log message is generated.

2016-11-17T13:42:06-0800 2019-05-13T02:12:28-0700 https://support.ruckuswireless.com/articles/000006109 2019-05-10T18:16:09-0700 monthly 0.8 admin,premium knowledge_article_2433 knowledge_article_2433 2016-10-19T10:57:17-0700 000006109 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, Unleashed What could cause Apple CNA not to bypass Safari under Unleashed 200.2/200.3/200.5? No resolution, refer workaround.

New feature allowing Guest WLAN redirection with HTTPS URLs, breaks Apple CNA pre-auth browser, requires Safari to complete authentication.

2019-05-10T18:16:09-0700 2019-05-11T00:00:25-0700 https://support.ruckuswireless.com/articles/000005081 2019-05-10T18:35:24-0700 monthly 0.8 admin,premium knowledge_article_2462 knowledge_article_2462 2015-09-02T16:46:23-0700 000005081 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway What are possible values for 'sip' parameter in WISPr URL redirection? When an UE connects to a WISPr SSID, it is redirected to the portal. In that operation, a number of parameters are added to the URL and one of them is 'sip'. The value of this parameter has changed between versions, which is explained below: <ol><li>In Release 3.0.x or earlier the value could be: <ul><li>UDI (User Defined Interface) in case of a local breakout from AP.</li><li>Internal D-Blade IP address in case of a proxy request to the SCG. </li></ul> </li><li>In Release 3.1.x the value could be: <ul><li>FQDN of the uploaded SCG/SZ Web UI certificate. In case the uploaded certificate’s CN (Common Name) is not FQDN (meaning it includes wildcard) sip’s value will be concatenation of SCG/SZ Cluster Name with the CN’s value after the wildcard. In case Certificate was not uploaded at all its value will be “scg.ruckuswireless.com” which is the FQDN of the self-signed certificate which SCG/SZ is coming with.??</li><li>Internal D-Blade IP address in case of a proxy request to the controller.</li></ul> </li><li>In Release 3.2 the value is (both for local breakout and proxy request to the SCG): <ul><li>??FQDN of the uploaded SCG/SZ Web UI certificate. In case the uploaded certificate’s CN (Common Name) is not FQDN (meaning it includes wildcard) sip’s value will be concatenation of SCG/SZ Cluster Name with the CN’s value after the wildcard. In case Certificate was not uploaded at all its value will be “scg.ruckuswireless.com” which is the FQDN of the self-signed certificate which SCG/SZ is coming with.</li></ul> </li></ol>

Value for 'sip' parameter in URL redirection in SZ WISPr scenario

2019-05-10T18:35:24-0700 2019-05-11T00:00:24-0700 https://support.ruckuswireless.com/articles/000006091 2019-05-10T18:37:38-0700 monthly 0.8 admin,premium knowledge_article_2432 knowledge_article_2432 2016-10-18T14:16:06-0700 000006091 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) System network management System Network Management, SmartCell Gateway, virtual SmartCell Gateway How to check memory on vSZ using MIBs? We get the memory information of the vSZ from UCD MIB. The UCD SNMP MIB contains system performance data, which was designed for ease of numerical management routines. This MIB is no longer maintained by the University of California. It is now on life support-mode and maintained by the NETSNMP project. Please visit the below site, copy the data to a text file and load it on your MIB browser. http://www.net-snmp.org/docs/mibs/UCD-SNMP-MIB.txt Attached is the same file.

This article gives you information on how to check the memory on a vSZ using SNMP MIBs

2019-05-10T18:37:38-0700 2019-05-11T00:00:23-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Lb4yCAC?attachment_index=0 2019-05-11T00:00:23-0700 monthly admin,premium knowledge_article_2432 knowledge_article_2432_attachment_1 ucd mib.txt 50656.0 text/plain https://support.ruckuswireless.com/articles/000004735 2019-05-10T19:05:42-0700 monthly 0.8 admin,premium knowledge_article_2541 knowledge_article_2541 2015-06-18T15:03:53-0700 000004735 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware Configuration, Firmware, ZoneDirector What can cause Map View to not work correctly after recent ZoneDirector or Java upgrade? During product development, later versions of ZoneDirector firmware utilize later versions of Java in the WebUI for Map View, however, latest Java versions may not be compatible with earlier ZD. Customer Admins can determine which ZD release requires what matching Java version if they utilize Map View. 1. Java version 6 b31 required on ZD 9.4 and earlier. link to Java 6 b31 : <a href="http://www.oldapps.com/java.php?old_java=7272" target="_blank">http://www.oldapps.com/java.php?old_java=7272</a> alt link to Java 6: http://www.java.com/en/download/manual_v6.jsp If you are using a 64-bit system the we suggest you install 64-bit java: <a href="http://www.oracle.com/technetwork/java/javase/downloads/jre-6u31-download-1501637.html" target="_blank">http://www.oracle.com/technetwork/java/javase/downloads/jre-6u31-download-1501637.html</a> Please check whether Java has been successfully installed or not using the link below: <a href="http://www.java.com/en/download/installed.jsp" target="_blank">http://www.java.com/en/download/installed.jsp</a> If the link shows that “Java is running with particular software” you are good to go. 2. Java version 7 required in ZD 9.5 to 9.8+. Java 7/8 introduced a new medium security setting which allows only trusted websites, and ZD(s) need to be added to the database. Updating the Java Security tab with ZD URL is needed. a. Open Java under Windows Control Panel b. Navigate to Security tab c. Click on Edit site list and add the URL for your ZD https://[zd-ip-address]/admin/mon_map.jsp d. Click Ok to update Java application settings. (see attached)

Upgrading ZD or Java firmware may result in Map View compatibility issues.

2019-05-10T19:05:42-0700 2019-05-11T00:00:19-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PJ25CAG?attachment_index=0 2019-05-11T00:00:19-0700 monthly admin,premium knowledge_article_2541 knowledge_article_2541_attachment_1 KBA-Map view_Java error.pdf 456903.0 application/pdf https://support.ruckuswireless.com/articles/000006188 2019-05-10T19:26:37-0700 monthly 0.8 admin,premium knowledge_article_2518 knowledge_article_2518 2016-12-14T10:14:57-0800 000006188 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Configuration;Firmware;Security Performance, Configuration, Firmware, Security, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway How can I best understand ZoneDirector and SmartZone WLAN architecture? A detailed analysis of ZoneDirector versus SmartZone WLAN architecture, written by Ruckus employee Robert Krumm is available for View at this Link: <a href="https://robrobstation.com/2016/06/21/ruckus-wireless-zone-director-vs-smartzone-wlan-architecture-review/" target="_blank">https://robrobstation.com/2016/06/21/ruckus-wireless-zone-director-vs-smartzone-wlan-architecture-review/</a>

Detailed descriptions to understand WLAN architecture from ZoneDirector to SmartZone platform.

2019-05-10T19:26:37-0700 2019-05-11T00:00:17-0700 https://support.ruckuswireless.com/articles/000005912 2019-05-10T19:30:07-0700 monthly 0.8 admin,premium knowledge_article_2482 knowledge_article_2482 2016-11-18T15:11:44-0800 000005912 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway Are guest passes also logged in a log file ? When guest passes are created they are visible in the web GUI. If you also want to be able to see them in a log file, then you need to change the web log to debug. After setting the web log to debug you can find the guest passes created in there. <img alt="User-added image" height="383" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SBf&feoid=00N50000002Cf3M&refid=0EM500000001kqd" width="500"></img> On 3.5 and above version, please refer below. <img alt="enablewebdebug" height="378" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000SBf&feoid=00N50000002Cf3M&refid=0EM2J000000m26s" width="500"></img>

Can I find back which guest passes are created, outside the web GUI?

2019-05-10T19:30:07-0700 2019-05-11T00:00:16-0700 https://support.ruckuswireless.com/articles/000004048 2019-05-10T19:31:15-0700 monthly 0.8 admin,premium knowledge_article_2468 knowledge_article_2468 2015-04-10T07:12:51-0700 000004048 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway How to change the IP address on the vSCG/vSZ/SZ interface? Use the commands below to change the IP address of the vSCG interface. Login to the vSCG CLI : ruckus> en ruckus# config ruckus(config)# interface <Cluster / Control / Management> ruckus(config-if)# ip address<IP address> <subnet mask> <gateway>

This article helps to know how to change the Ip address on the vSCG interfaces(Management/Cluster/Control).

2019-05-10T19:31:15-0700 2019-05-11T00:00:15-0700 https://support.ruckuswireless.com/articles/000003026 2019-05-10T20:10:20-0700 monthly 0.8 admin,premium knowledge_article_3690 knowledge_article_3690 2014-05-16T09:51:13-0700 000003026 Validated (External) Premium Zonedirector;Zoneflex 7055;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex 7055 What to do when ZF 7055 connected to IPTVs stops passing IGMP streams? 1. SSH into a 7055 and execute “get eth” command to know which ethernet interface the Iptvs are connected corresponding to Label. So if the IPtvs are connected to LAN1 port on the 7055s, its corresponding Ethernet port would be eth1. 2. Now SSH into the zd and go into “enable” mode by doing an enable. 3. Now go into “debug” mode by executing debug. 4. Once you’re in debug mode, execute the following command-: rksap_cli –A “set qos eth1 directed multicast disable" NOTE: eth1 in the above command is just as example. You’ll have to put the Ethernet interface to which IPtvs are connected in the hotel rooms. - For further explanation, please refer to Article: 000001236

2019-05-10T20:10:20-0700 2019-05-11T00:00:13-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PFXcCAO?attachment_index=0 2019-05-11T00:00:13-0700 monthly admin,premium knowledge_article_3690 knowledge_article_3690_attachment_1 Screenshots.docx 171463.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000005052 2019-05-10T20:20:10-0700 monthly 0.8 admin,premium knowledge_article_2110 knowledge_article_2110 2015-08-20T13:53:43-0700 000005052 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, ZoneDirector Do ZoneDirectors support Spanning Tree (STP)? Spanning Tree Protocol (STP) typically runs on network switches and will block a path to prevent loops. https://en.wikipedia.org/wiki/Spanning_Tree_Protocol As ZoneDirectors have two Eth ports, customers may connect them both to one switch, or to two different switches for hardware failover redundancy. It is typically up to the switches running STP to block one path to the ZD(s). If the switch(es) do not support or have STP running, you can enable STP on a ZoneDirector thru the CLI, as follows: Use any SSH application (ie putty) and SSH to ZD#1 IP address, then: 1. Login w/ admin credentials. 2. Type/enter the command ‘en’, to get into enable mode. 3. Type/enter the command ‘config’, to get into configuration mode. 4. Type/enter the system level config command ‘stp’, to enable STP mode. 5. Type/enter the command ‘end’ to leave configuration mode. 6. Type/enter the command ‘quit’ to end your SSH session. If using ZDs in Smart Redundancy, repeat on ZD#2.

Only necessary if both Eth ports of ZoneDirectors are connected to switch(es), ZDs do have STP support.

2019-05-10T20:20:10-0700 2019-05-11T00:00:12-0700 https://support.ruckuswireless.com/articles/000006271 2019-05-10T20:54:40-0700 monthly 0.8 admin,premium knowledge_article_2575 knowledge_article_2575 2017-02-13T15:18:46-0800 000006271 Validated (External) Premium Unleashed;Zonedirector;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, Unleashed, ZoneDirector Why am I seeing Unleashed APs in my ZoneDirector as 'Approval Pending'? When available, upgrade ZD to version 10.0+.

Unleashed APs will not join ZD or SZ controllers, but ZD's did see the 'pending approval' until version 10.0

2019-05-10T20:54:40-0700 2019-05-11T00:00:08-0700 https://support.ruckuswireless.com/articles/000005698 2019-05-10T21:07:33-0700 monthly 0.8 admin,premium knowledge_article_3688 knowledge_article_3688 2016-04-29T10:11:03-0700 000005698 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;System network management;Known issues and workarounds;Website issues Firmware, System Network Management, Known Issues and Workarounds, Website Issues, ZoneDirector Why does error "ERR_SSL_VERSION_OR_CIPHER_MISMATCH" show up when accessing ZD Web GUI Newer versions of web browser do not support TLS version 1.0 and ZD supports only TLS version 1.0, hence the error. This issue is resolved on version 9.7 and above. Upgrade controller to 9.7.2.0.32

This article explains the workaround/solution to access ZD when error message "ERR_SSL_VERSION_OR_CIPHER_MISMATCH" crops up accessing ZD

2019-05-10T21:07:33-0700 2019-05-11T00:00:07-0700 https://support.ruckuswireless.com/articles/000004154 2019-05-10T17:40:34-0700 monthly 0.8 admin,premium knowledge_article_3687 knowledge_article_3687 2015-03-10T15:14:14-0700 000004154 Validated (External) Premium Virtual smartcell gateway Configuration;Firmware;Installation;System network management;Known issues and workarounds Configuration, Firmware, Installation, System Network Management, Known Issues and Workarounds, virtual SmartCell Gateway What steps can be followed to gracefully upgrade from vSCG v2.5.0.1 to v3.x The attached document provides detailed steps for vSCG 2.5.0.1 to migrate to vSCG 3.x with configuration from vSCG 2.5.0.1 or ZD 9.8*. There is no in-place upgrade path from vSCG 2.5. *The vSCG migration guide outlines the v3.0.3 concept of Enterprise (single-tenant) or Carrier (multi-tenant) profiles and the matrix of supported migration platforms. The process will help REPLACE the existing vSCG instance, with a v3.x one using the SAME IP and MAC address. This simplifies AP discovery for present and future access points. Ensure that all required Ports are opened as per the <a href="https://support.ruckuswireless.com/documents?filter=63#documents" target="_blank">vSCG Enterprise or Carrier </a><a href="https://support.ruckuswireless.com/documents?filter=63#documents" target="_blank">Administrators guides</a> for your environment : Open ports required for AP - Controller communication : <table border="0" cellpadding="0" cellspacing="0" style="width: 685px;" width="684"><colgroup><col style="width: 77px;"></col><col style="width: 81px;"></col><col style="width: 79px;"></col><col style="width: 119px;"></col><col style="width: 51px;"></col><col style="width: 279px;"></col></colgroup><tbody><tr height="38" style="height: 38px;"><td colspan="1" rowspan="1" height="38" style="height: 38px; width: 77px; background-color: rgb(0, 153, 255);">Port Number</td><td colspan="1" rowspan="1" style="width: 81px; background-color: rgb(0, 153, 255);">Layer 4 Protocol</td><td colspan="1" rowspan="1" style="width: 79px; background-color: rgb(0, 153, 255);">Source</td><td colspan="1" rowspan="1" style="width: 119px; background-color: rgb(0, 153, 255);">Destination</td><td colspan="1" rowspan="1" style="width: 51px; background-color: rgb(0, 153, 255);">From Web UI ?</td><td colspan="1" rowspan="1" style="width: 279px; background-color: rgb(0, 153, 255);">Purpose</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">21</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">AP</td><td colspan="1" rowspan="1" style="">Controller</td><td colspan="1" rowspan="1" style="">Yes</td><td colspan="1" rowspan="1" style="">FTP Upload of reports, statistics and configuration backups</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">22</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">AP</td><td colspan="1" rowspan="1" style="">Controller (control plane)</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">SSH Tunnel</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">49</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">TACACS + server</td><td colspan="1" rowspan="1" style="">Controller</td><td colspan="1" rowspan="1" style="">Yes</td><td colspan="1" rowspan="1" style="">TACACS+ based authentication of controller administrators</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">91</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">AP</td><td colspan="1" rowspan="1" style="">Controller (control plane)</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">AP Firmware upgrade</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">123</td><td colspan="1" rowspan="1" style="">UDP</td><td colspan="1" rowspan="1" style="">AP</td><td colspan="1" rowspan="1" style="">Controller (control plane)</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">NTP sync</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">443</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">AP</td><td colspan="1" rowspan="1" style="">Controller (control plane)</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">Access to SCG/vSCG/SZ web interface via HTTPS</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">1812 / 1813</td><td colspan="1" rowspan="1" style="">UDP</td><td colspan="1" rowspan="1" style="">AP</td><td colspan="1" rowspan="1" style="">RADIUS</td><td colspan="1" rowspan="1" style="">Yes</td><td colspan="1" rowspan="1" style="">AAA Authentication and accounting</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">8022</td><td colspan="1" rowspan="1" style="">No (SSH)</td><td colspan="1" rowspan="1" style="">Any</td><td colspan="1" rowspan="1" style="">Management Interface</td><td colspan="1" rowspan="1" style="">Yes</td><td colspan="1" rowspan="1" style="">Management ACL for one-port configuration</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">8090</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">Any</td><td colspan="1" rowspan="1" style="">Controller</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">Allows unauthorized UEs to browse to an HTTP website</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">8099</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">Any</td><td colspan="1" rowspan="1" style="">Controller</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">Allows unauthorized UEs to browse to an HTTPS website</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">8100</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">Any</td><td colspan="1" rowspan="1" style="">Controller</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">Allows unauthorized UEs to browse to browse using a proxy UE</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">8111</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">Any</td><td colspan="1" rowspan="1" style="">Controller</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">Allows authorized UEs to browse to browse using a proxy UE</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">8443</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">Any</td><td colspan="1" rowspan="1" style="">Controller (control plane)</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">Access to SCG/vSCG/SZ web interface via HTTPS</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">9080</td><td colspan="1" rowspan="1" style="">HTTP</td><td colspan="1" rowspan="1" style="">Any</td><td colspan="1" rowspan="1" style="">Controller</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">Northbound Portal Interface for Hotspots</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">9443</td><td colspan="1" rowspan="1" style="">HTTPS</td><td colspan="1" rowspan="1" style="">Any</td><td colspan="1" rowspan="1" style="">Controller</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">Northbound Portal Interface for Hotspots</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">9998</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">Any</td><td colspan="1" rowspan="1" style="">Controller</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">Internal WISPr portal</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">12222 / 12223</td><td colspan="1" rowspan="1" style="">UDP</td><td colspan="1" rowspan="1" style="">AP</td><td colspan="1" rowspan="1" style="">Controller</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">LWAPP discovery</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">23232</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">AP</td><td colspan="1" rowspan="1" style="">SCG/vSCG (data plane)</td><td colspan="1" rowspan="1" style="">No</td><td colspan="1" rowspan="1" style="">GRE Tunnel</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">23233</td><td colspan="1" rowspan="1" style="">UDP</td><td colspan="1" rowspan="1" style="">AP</td><td colspan="1" rowspan="1" style="">SCG/vSCG (data plane)</td><td colspan="1" rowspan="1" style="">Yes</td><td colspan="1" rowspan="1" style="">GRE tunnel (required only when tunnel mode is GRE over UDP)</td></tr></tbody></table> Port Forwarding required if vSCG is behind NAT : <table border="0" cellpadding="0" cellspacing="0" style="width: 320px;" width="320"><colgroup><col style="width: 64px;"></col><col style="width: 192px;"></col></colgroup><tbody><tr height="29" style="height: 29px;"><td colspan="1" rowspan="1" height="29" style="height: 29px; width: 64px; background-color: rgb(0, 153, 255);">Port Number</td><td colspan="1" rowspan="1" style="width: 64px; background-color: rgb(0, 153, 255);">Layer 4 Protocol</td><td colspan="1" rowspan="1" style="width: 192px; background-color: rgb(0, 153, 255);">Purpose</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">123</td><td colspan="1" rowspan="1" style="">UDP</td><td colspan="1" rowspan="1" style="">AP Sync ntp with SCG</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">161</td><td colspan="1" rowspan="1" style="">UDP</td><td colspan="1" rowspan="1" style="">SNMP Query</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">12223</td><td colspan="1" rowspan="1" style="">UDP</td><td colspan="1" rowspan="1" style="">ZD AP Using LWAPP join</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">21</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">ZD AP fw update via FTP</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">91</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">SCG AP fw update via HTTP</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">443</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">Let SCG AP get SSH private key</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">8080</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">SCG Setup wizard GUI</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">8443</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">SCG GUI</td></tr><tr height="42" style="height: 42px;"><td colspan="1" rowspan="1" height="42" style="height: 42px; width: 64px;">8090, 8099, 8100, 8111, 9997, 9998</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">WISPr</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">9080, 9443</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">Northbound API (NBI)</td></tr><tr height="19" style="height: 19px;"><td colspan="1" rowspan="1" height="19" style="height: 19px;">16384-65000</td><td colspan="1" rowspan="1" style="">TCP</td><td colspan="1" rowspan="1" style="">ZD AP firmware update via FTP</td></tr></tbody></table>

What steps can be followed to gracefully upgrade from vSCG v2.5.0.1 to v3.x

2019-05-10T17:40:34-0700 2019-05-10T18:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PIIkCAO?attachment_index=0 2019-05-10T18:00:07-0700 monthly admin,premium knowledge_article_3687 knowledge_article_3687_attachment_1 vSCG 2.5.0.1 to vSCG 3.x Migration.pdf 807925.0 application/pdf https://support.ruckuswireless.com/articles/000009196 2019-05-10T03:44:19-0700 monthly 0.8 admin,premium knowledge_article_3684 knowledge_article_3684 2019-05-10T03:26:58-0700 000009196 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Security Configuration, Installation, Security, SmartCell Gateway Why does the web-based setup wizard fail to connect using HTTP protocol? There is no specific resolution for this release. Support for HTTP was re-introduced in release 5.1.1 onwards.

Description of a known issue in SZ 5.1.0.0.496

2019-05-10T03:44:19-0700 2019-05-10T06:00:08-0700 https://support.ruckuswireless.com/articles/000005877 2016-07-11T13:50:17-0700 monthly 0.8 admin,premium knowledge_article_2374 knowledge_article_2374 2016-07-11T13:50:17-0700 000005877 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Installation Firmware, Installation, SmartCell Gateway, virtual SmartCell Gateway What are the order of steps in SmartZone AP Zone upgrades? 1. AP will send the get configuration requests to SCG with its current firmware version, and when AP is put into an SCG AP zone, 2. SCG will check if the AP's firmware version matches the zone's firmware version. 3. If not, SCG will push configuration with firmware upgrade parameters to AP, and AP will use this info to get image from the firmware server. 4. After image is downloaded, AP will reboot and comes up again using the new firmware image. <img alt="User-added image" height="445" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000CgtT&feoid=00N50000002Cf3M&refid=0EM500000001asX" width="500"></img>

APs exchange information with SmartZone, triggering firmware download, reboot, configuration.

2016-07-11T13:50:17-0700 2019-05-09T06:32:02-0700 https://support.ruckuswireless.com/articles/000007005 2017-12-12T14:27:18-0800 monthly 0.8 admin,premium knowledge_article_3086 knowledge_article_3086 2017-12-12T14:27:18-0800 000007005 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration;Troubleshooting Configuration, Troubleshooting, ICX 7250, ICX 7450, ICX 7750 How to use ACL accounting to troubleshoot packet loss on ICX7750, ICX7450, ICX7250? IP ACL accounting on ICX7750,7250,7450 may work on older switches that can run newer software. Create access list to match certain type of traffic or from certain source and destination IP address: access-list 101 permit ip any host 1.1.1.1 access-list 101 permit ip any any access-list 101 enable-accounting <-------------------------------Enable ACL accounting on this access list interface ethernet 1/1/1 ip access-group 101 in No out bound access list on these switches show access-list accounting ethernet 1/1/1 in <--------------Output will show packets matching each access list line clear access-list accounting e 1/1/1 To clear ACL accounting stats

ACL accounting on ICX7750,7250,7450

2017-12-12T14:27:18-0800 2019-05-08T07:44:05-0700 https://support.ruckuswireless.com/articles/000008998 2019-05-07T15:21:19-0700 monthly 0.8 admin,premium knowledge_article_3682 knowledge_article_3682 2019-04-10T17:45:35-0700 000008998 Validated (External) Premium Cloudpath;Cloudpath Enrollment System (ES);BPG_Cloudpath Firmware;Troubleshooting Firmware, Troubleshooting, Cloudpath Why is Cloudpath failing to upgrade? As this is a known issues, Cloudpath Engineering Team has provided a patch File which helps to clear the unwanted files from the boot filesystem. Please download the Support File from the Attachment with filename "Clean-BootPartition-5941.bin" Steps to Apply the Patch File: From Cloudpath Web Interface, Navigate to Support->"Upload Support File" (as below mentioned screenshot) in the Cloudpath GUI and upload the file. Click on "Apply". It will take 5 to 10 minutes to apply the patch. <img alt="User-added image" height="223" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000S6Q&feoid=00N50000002Cf3M&refid=0EM2J000000qAIw" width="500"></img> Note that, the patch applied on Cloudpath version 5.2.3585. However the patch works on latest release as well.

This article explains about a scenario when Cloudpath failed to upgrade due to disk requirement error and how to recover the same.

2019-05-07T15:21:19-0700 2019-05-07T18:00:06-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000000O65SAE?attachment_index=0 2019-05-07T18:00:06-0700 monthly admin,premium knowledge_article_3682 knowledge_article_3682_attachment_1 Clean-BootPartition-5941.bin 1669.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000005645 2016-04-01T10:29:21-0700 monthly 0.8 admin,premium knowledge_article_2299 knowledge_article_2299 2016-04-01T10:29:21-0700 000005645 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware;Troubleshooting;Known issues and workarounds Configuration, Firmware, Troubleshooting, Known Issues and Workarounds, Unleashed Unleashed: How long will a Standby Master AP wait to take over if no reply from Master AP? Unleashed Master AP sends Heartbeats every 6 sec to Standby Master AP, who will wait for 10 missed Heartbeats (1 min) before assuming Master AP role. This means Standby will likely not assume Master AP role, if Master AP only reboots.

Unleashed Master/Standby APs exchange heartbeats every 6 seconds, and Standby won't take over unless 1 minute w/o Heartbeat.

2016-04-01T10:29:21-0700 2019-05-07T12:06:07-0700 https://support.ruckuswireless.com/articles/000009169 2019-05-06T06:52:14-0700 monthly 0.8 admin,premium knowledge_article_3681 knowledge_article_3681 2019-05-06T06:52:14-0700 000009169 Validated (External) Premium Ruckus network director rnd;Ruckus icx switches;Zonedirector;Smartcell insight;Smart wireless services;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Insight (SCI) Configuration;Installation;Website issues Configuration, Installation, Website Issues, Ruckus Network Director RND, Ruckus ICX Switches, ZoneDirector, SmartCell Insight, Smart Wireless Services, virtual SmartCell Gateway How to report an error or type in a support document or guide? Documentation Feedback Ruckus Networks is interested in improving its documentation and welcomes your comments and suggestions. You can email your comments to Ruckus Networks at: ruckus-docs@arris.com When contacting us, please include the following information: • Document title • Document part number (on the cover page) • Page number (if appropriate) For example: • ICX, SCG200, SZ300 and vSZ-H SNMP Reference Guide for SmartZone 3.5.1 • Part number: 800-71533-001 • Page 88

How to report an error or type in a support document or guide?

2019-05-06T06:52:14-0700 2019-05-06T12:00:07-0700 https://support.ruckuswireless.com/articles/000009166 2019-05-02T06:57:34-0700 monthly 0.8 admin,premium knowledge_article_3680 knowledge_article_3680 2019-05-02T06:57:34-0700 000009166 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Installation Configuration, Installation, SmartCell Insight When sending emails on SCI with master and data nodes, via which node emails will be send? SCI with a master and data node(s) will always use the master node to send out emails. Make sure that the firewall has SMTP enabled for the master node.

When sending emails on SCI with master and data nodes, via which node emails will be send?

2019-05-02T06:57:34-0700 2019-05-02T12:00:11-0700 https://support.ruckuswireless.com/articles/000009122 2019-04-30T15:37:40-0700 monthly 0.8 admin,premium knowledge_article_3678 knowledge_article_3678 2019-04-24T14:43:23-0700 000009122 Validated (External) Premium Virtual smartcell gateway Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, virtual SmartCell Gateway Why are the VSZ's unable to form a cluster in AWS cloud platform? From Security Group, add a rule to allow all traffic for AWS internal traffic. <img alt="User-added image" height="162" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000S53&feoid=00N50000002Cf3M&refid=0EM2J000000qDz5" width="1315"></img>

VSZ unable to form a cluster in AWS cloud platform without permitting AWS internal traffic.

2019-04-30T15:37:40-0700 2019-04-30T18:00:07-0700 https://support.ruckuswireless.com/articles/000006142 2016-12-07T14:26:28-0800 monthly 0.8 admin,premium knowledge_article_2508 knowledge_article_2508 2016-12-02T13:47:51-0800 000006142 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway, SZ100 How to configure a WLAN with MAC authentication using proxy AAA? Follow the below instructions to configure a WLAN with MAC authentication using vSZ as proxy. Note : The example below is from vSZ-H. The options will differ for vSZ-E/SZ-100 Step 1 : Configure the AAA server under Configuration> Services & Profiles> Authentication Services as shown below and save it. <img alt="User-added image" height="256" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Lj8t&feoid=00N50000002Cf3M&refid=0EM50000000aKfR" style="width: 858px; height: 443px;" width="500"></img> Step 2 : Create an Authentication service profile under Configuration> Services & Profiles> Authentication as shown in the below screenshot and map the above created AAA server to the realms 'No Match' , 'Unspecified' and save it. <img alt="User-added image" height="175" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Lj8t&feoid=00N50000002Cf3M&refid=0EM50000000aKfH" style="width: 859px; height: 373px;" width="500"></img> Step 3 : Create a WLAN with MAC authentication as below and tag the Service profile that we have created in Step 2 <img alt="User-added image" height="246" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Lj8t&feoid=00N50000002Cf3M&refid=0EM50000000aKfM" style="width: 853px; height: 358px;" width="500"></img>

You can configure RADIUS AAA-proxy for MAC address authentication WLAN.

2016-12-07T14:26:28-0800 2019-04-29T10:04:25-0700 https://support.ruckuswireless.com/articles/000009033 2019-04-25T23:56:04-0700 monthly 0.8 admin,premium knowledge_article_3673 knowledge_article_3673 2019-04-07T19:06:58-0700 000009033 Validated (External) Premium Sz300;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal Performance;Troubleshooting Performance, Troubleshooting, SZ300 How to do ping in SZ-300 Run "show summary" to know what interface needed to used. MS-POGO-A# debug MS-POGO-A(debug)# data-plane MS-POGO-A-D1 MS-POGO-A(debug-data-plane)# show summary ----------------- -- interface -- ----------------- pow0.146 Link encap:Ethernet HWaddr C8:08:73:3E:42:38 inet addr:10.91.15.85 Bcast:10.91.15.95 Mask:255.255.255.240 now you can do the ping using that interface: MS-POGO-A# debug MS-POGO-A(debug)# data-plane MS-POGO-A-D1 MS-POGO-A(debug-data-plane)# ping -I pow0.146 10.91.15.81 PING 10.91.15.81 (10.91.15.81) from 10.91.15.85 pow0.146: 56(84) bytes of data. 64 bytes from 10.91.15.81: icmp_seq=1 ttl=255 time=0.756 ms 64 bytes from 10.91.15.81: icmp_seq=2 ttl=255 time=0.700 ms 64 bytes from 10.91.15.81: icmp_seq=3 ttl=255 time=0.753 ms --- 10.91.15.81 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2003ms rtt min/avg/max/mdev = 0.700/0.736/0.756/0.033 ms

There is a need to specify the sub-interface to ping gateway in dataplane

2019-04-25T23:56:04-0700 2019-04-26T00:00:07-0700 https://support.ruckuswireless.com/articles/000006464 2019-04-25T14:05:51-0700 monthly 0.8 admin,premium knowledge_article_2674 knowledge_article_2674 2017-10-03T08:46:20-0700 000006464 Validated (External) Premium Ruckus cloud wifi Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Ruckus Cloud WiFi Does OKTA RADIUS app support WiFi authentication? OKTA RADIUS app does not support WiFi infrastructure at this time. There are three limitations on the Okta RADIUS app. <ol><li>The RADIUS port and shared secret are captured from the Okta Admin Console through any configured RADIUS apps or VPNs. Any information entered from prompts from the RADIUS agent is used for backwards compatibility when an <a href="" target="_blank">org</a> does not have the feature enabled.</li><li>WiFi infrastructure is not supported.</li><li>The RADIUS agent only supports PAP-based authentication. No other protocols are supported.</li></ol> For additional information on OKTA RADIUS app, kindly refer to the below help page. <a href="https://help.okta.com/en/prod/Content/Topics/Security/Okta_Radius_App.htm" target="_blank">https://help.okta.com/en/prod/Content/Topics/Security/Okta_Radius_App.htm</a>

Okta radius app do not support WiFi authentication.

2019-04-25T14:05:51-0700 2019-04-25T18:00:15-0700 https://support.ruckuswireless.com/articles/000004004 2019-04-25T14:07:58-0700 monthly 0.8 admin,premium knowledge_article_1587 knowledge_article_1587 2015-02-04T01:50:51-0800 000004004 Validated (External) Premium Zonedirector;Zoneflex indoor;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector, ZoneFlex Indoor, virtual SmartCell Gateway How does Ruckus detect client's IP address? After a client goes through successful connection, it will go through DHCP process to get an IP. Ruckus APs snoop on the DHCP process to detect the IP address client receives from the network. Assigned IP address for the client will be present in all DHCP packets except in the Discover packet. Clients tend to perform gratuitous ARP to inform other clients about their IP address (also to detect if there is another client with the same IP address). Ruckus APs snoop on this as well to find the client's IP address. IP address detected via the snooping will be displayed in the controller's web interface. IF the client uses a static IP address, Ruckus APs will have to wait until it transmits any data. Then Ruckus APs will look at the IP address field in the data packet and will display that information through controller's web interface. If the client is not transmitting any data, pinging it can cause it to respond (if its IP address is known). Ultimately this should help to show IP information in the controller. Please note that IP displayed for smartphones can be wrong at time. Smartphones can have an active 3G/4G connections along with an active WiFi connection. Sometimes they are known to use IP belonging to 3G/4G interface on the WiFi interface. This will overwrite IP displayed with a wrong one. If you see out-of-scope IPs displayed on the Ruckus interface, please cross-check if it is from a smartphone and if the IPs displayed on the smartphone for both interfaces.

Ruckus controllers show client's IP address under clients monitoring page. This article explains how it gets detected to show under this page.

2019-04-25T14:07:58-0700 2019-04-25T18:00:14-0700 https://support.ruckuswireless.com/articles/000004937 2019-04-25T14:10:04-0700 monthly 0.8 admin,premium knowledge_article_2063 knowledge_article_2063 2015-07-29T11:15:22-0700 000004937 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;System network management;Troubleshooting Performance, System Network Management, Troubleshooting, ZoneDirector How can I find out how many clients connect per hour? There are different ways of getting client information. There's a way to enable Real Time Monitoring in the ZD1100/3000/5000. That's done at the Monitor / Real Time Monitoring tab. You would have to enable that. However, ZD1100 is limited on resources and we do not recommend leaving this feature turned on for more than a day as it taxes the system constantly trying to get information. If you're going to enable this feature, make sure that you disable it the next day in the ZD1100. You can turn this feature on, there's no excel output just a graph of live data. Once you have data for a day, you can get the average based on an hour value. You can also simply log in to the ZD GUI every hour, go to the Monitor / Wireless Clients and then you will be able to see the number of clients real time. There are reporting tools that can provide you with hourly reports. Two of these tools Ruckus provides as a reporting solution. One of them is called FlexMaster (FM) and the other is SmartCellInsight (SCI). Both of these solutions can be pricy if the only thing you will be doing is monitoring client totals. For more information on these tools, please contact your Ruckus provider or the company where you purchased your Ruckus equipment. An external tool would be an SNMP monitoring tool. The 4th option is to download the debug info file from the controller on timely increments and use your log analyzer tool found in your Ruckus portal to decrypt it and see how many clients are connected at those different increments. Here's the link to the tool: https://loganalyzer1.ruckuswireless.com/Rowdy/ The debug info file of your Ruckus controller can be found in Adminster / Diagnostics, click on Save Debug Info file button. Once you load the file and it gets decrypted, click on the clients tab and it will provide you with how many clients were connected at the time that one downloaded the debug info file and the wireless statistics for each of the clients. In school and office environments, there are peak times when clients connect. Keep peak times in mind when determining your average per day.

Statistics of clients or APs are found in the ZD and are relayed over from AP to ZD reporting data.

2019-04-25T14:10:04-0700 2019-04-25T18:00:13-0700 https://support.ruckuswireless.com/articles/000006438 2019-04-25T14:54:46-0700 monthly 0.8 admin,premium knowledge_article_2662 knowledge_article_2662 2017-09-28T10:46:11-0700 000006438 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, virtual SmartCell Gateway, SZ100 Why users are failing to authenticate to dot1x SSID on random APs on same floor? To isolate the issue, we completely shutdown those AP's which we do not have uplink connected to avoid any connectivity/authentication failures. We further ran the test throughout the floor and observed no further authentication failures.

This article explains a scenario where clients will fail to join/authenticate with random APs on dot1x WLAN

2019-04-25T14:54:46-0700 2019-04-25T18:00:09-0700 https://support.ruckuswireless.com/articles/000005344 2019-04-25T14:56:18-0700 monthly 0.8 admin,premium knowledge_article_2635 knowledge_article_2635 2015-12-07T11:00:04-0800 000005344 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Firmware;Troubleshooting Performance, Firmware, Troubleshooting, ZoneDirector How can I identify Wireless Client Capabilities? Client capabilities (CAPS) and state (STATE) fields indicate the capabilities determined from beacon responses and the state of capabilities that are available, including HT. Connected client station capabilites and reported signal strength is found in AP support info files, and can also be displayed from an AP CLI. The ‘get station wlanX list’ command interprets client capabilities into a string format. rkscli: get station wlan0 list all ADDR AID VLAN CHAN RSSI IDLE CAPS STATE HTCAPS/VHTCAPS ADMITTEDBW 1c:99:4c:fe:ed:70 1Y 16 1 50 0 ESS SHTPRE SHTS QOS ERP HT PWRMGT HS20 LDPC SGI20 0 WME a0:b4:a5:81:c5:9e 2Y 16 1 42 0 ESS SHTPRE SHTS QOS ERP HT PWRMGT SGI20 RXSTBC 0 WME fc:c2:de:c5:bf:45 3Y 16 1 31 0 ESS SHTPRE SHTS QOS ERP HT PWRMGT LDPC SGI20 0 WME Client Capabilites: #define IEEE80211_CAPINFO_ESS 0x0001 #define IEEE80211_CAPINFO_IBSS 0x0002 #define IEEE80211_CAPINFO_CF_POLLABLE 0x0004 #define IEEE80211_CAPINFO_CF_POLLREQ 0x0008 #define IEEE80211_CAPINFO_PRIVACY 0x0010 #define IEEE80211_CAPINFO_SHORT_PREAMBLE 0x0020 #define IEEE80211_CAPINFO_PBCC 0x0040 #define IEEE80211_CAPINFO_CHNL_AGILITY 0x0080 /* bits 8-9 are reserved (8 now for specturm management) */ #define IEEE80211_CAPINFO_SPECTRUM_MGMT 0x0100 #define IEEE80211_CAPINFO_SHORT_SLOTTIME 0x0400 #define IEEE80211_CAPINFO_RSN 0x0800 #define IEEE80211_CAPINFO_DSSSOFDM 0x2000 Client "State" info: #define IEEE80211_NODE_AUTH 0x0001 /* authorized for data */ #define IEEE80211_NODE_QOS 0x0002 /* QoS enabled */ #define IEEE80211_NODE_ERP 0x0004 /* ERP enabled */ #define IEEE80211_NODE_HT 0x0008 /* HT enabled */ #define IEEE80211_NODE_PWR_MGT 0x0010 /* power save mode enabled */ #define IEEE80211_NODE_AREF 0x0020 /* authentication ref held */ #define IEEE80211_NODE_UAPSD 0x0040 /* U-APSD power save enabled */ #define IEEE80211_NODE_UAPSD_TRIG 0x0080 /* U-APSD triggerable state */ #define IEEE80211_NODE_UAPSD_SP 0x0100 /* U-APSD SP in progress */ #define IEEE80211_NODE_OWL 0x0200 /* Owl or subsequent device */ #define IEEE80211_NODE_DVLAN 0x0400 /* DVlan node */ #define IEEE80211_NODE_VAP 0x1000 /* "special" VAP node alloc (Ta) */ #define IEEE80211_NODE_TAC_NODE_JOIN 0x0800 #define IEEE80211_NODE_TAC_NODE_LEAVE 0x2000 For HT clients, there's additional information: /* HT capability flags */ #define IEEE80211_HTCAP_C_ADVCODING 0x0001 #define IEEE80211_HTCAP_C_CHWIDTH40 0x0002 #define IEEE80211_HTCAP_C_SMPOWERSAVE_STATIC 0x0000 /* Capable of SM Power Save (Static) */ #define IEEE80211_HTCAP_C_SMPOWERSAVE_DYNAMIC 0x0004 /* Capable of SM Power Save (Dynamic) */ #define IEEE80211_HTCAP_C_SM_RESERVED 0x0008 /* Reserved */ #define IEEE80211_HTCAP_C_SM_ENABLED 0x000c /* SM enabled, no SM Power Save */ #define IEEE80211_HTCAP_C_GREENFIELD 0x0010 #define IEEE80211_HTCAP_C_SHORTGI20 0x0020 #define IEEE80211_HTCAP_C_SHORTGI40 0x0040 #define IEEE80211_HTCAP_C_TXSTBC 0x0080 #define IEEE80211_HTCAP_C_RXSTBC 0x0100 /* 2 bits */ #define IEEE80211_HTCAP_C_DELAYEDBLKACK 0x0400 #define IEEE80211_HTCAP_C_MAXAMSDUSIZE 0x0800 /* 1 = 8K, 0 = 3839B */ #define IEEE80211_HTCAP_C_DSSSCCK40 0x1000 #define IEEE80211_HTCAP_C_PSMP 0x2000 #define IEEE80211_HTCAP_C_STBCCTRL 0x4000 #define IEEE80211_HTCAP_C_LSIGTXOPPROT 0x8000

Wireless clients broadcast their capabilities in Beacon responses, and is shown in 'get station' AP CLI output.

2019-04-25T14:56:18-0700 2019-04-25T18:00:07-0700 https://support.ruckuswireless.com/articles/000005304 2019-04-25T14:59:12-0700 monthly 0.8 admin,premium knowledge_article_2214 knowledge_article_2214 2015-11-17T12:09:08-0800 000005304 Validated (External) Premium Zoneflex 7731;P300;Ruckus P300 Performance;Configuration;Installation;Troubleshooting Performance, Configuration, Installation, Troubleshooting, ZoneFlex 7731, P300 Why isn't my PTP P300 stable at close range? Having too much receive power at the radio receiver can leave a PTP P300/7731 with an unstable link. Having a transmit power of -9dB loss and external 21dBi antennas has an RSSI of 85dB at the receiver saturates the receiver. Once we turned down power to Minimum at both locations, lowered the CBW to 40MHz, then the link stabilized at 65dB of RSSI. To get more specific about a link budget or to find an online path calculator: http://www.starmicrowave.com/calculations.aspx

Too much receive power can leave PTP P300 unable to get link stable at very close range.

2019-04-25T14:59:12-0700 2019-04-25T18:00:06-0700 https://support.ruckuswireless.com/articles/000008889 2019-04-25T02:52:55-0700 monthly 0.8 admin,premium knowledge_article_3631 knowledge_article_3631 2019-03-21T03:04:43-0700 000008889 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Configuration;Firmware;System network management;Troubleshooting;Known issues and workarounds Performance, Configuration, Firmware, System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Can we capture IPv6 traffic through Wireshark remote interface? No resolution yet. Workaround Provided.

When we enter the IPv6 address in the remote interface it prompts "Can't get list of interfaces: getaddrinfo()" The requested name is valid, but no data of the requested type was found even the system is configured with IPv6 address.

2019-04-25T02:52:55-0700 2019-04-25T06:00:10-0700 https://support.ruckuswireless.com/articles/000009027 2019-04-24T16:07:48-0700 monthly 0.8 admin,premium knowledge_article_3653 knowledge_article_3653 2019-04-04T14:10:38-0700 000009027 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway Which public API call moves AP from one zone to another ? <code>The following API will obtain the destination zoneid and move the AP without regard to the AP current status such as online, offline, registered, or unregistered.</code> <ul><li><code>Use [GET] /xxxx/rkszones to obtain the destination AP zoneid (zoneUUID)</code></li><li> <code>Use [Patch] /xxxx/aps/{apMac} with destination AP zoneid to move the AP</code> </li><li> Please reference the smart zone public API documentation section access point configuration subsection modify for further details </li></ul>

This article describe the equivalent public API function to move an AP from one zone to another regardless if AP is online, offline, pending, or registered.

2019-04-24T16:07:48-0700 2019-04-24T18:00:07-0700 https://support.ruckuswireless.com/articles/000005692 2019-04-24T11:19:56-0700 monthly 0.8 admin,premium knowledge_article_3669 knowledge_article_3669 2016-06-21T09:08:59-0700 000005692 Validated (External) Premium Cloudpath;Virtual smartcell gateway;Cloudpath Enrollment System (ES);BPG_Cloudpath Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, Cloudpath, virtual SmartCell Gateway How do I configure Cloudpath MAC Registration with a Ruckus Virtual SmartZone controller?

How to set up Cloudpath MAC Registration with a Ruckus vSZ controller

2019-04-24T11:19:56-0700 2019-04-24T12:00:09-0700 https://support.ruckuswireless.com/articles/000005691 2019-04-24T11:20:32-0700 monthly 0.8 admin,premium knowledge_article_3668 knowledge_article_3668 2016-06-21T09:08:19-0700 000005691 Validated (External) Premium Cloudpath;Zonedirector;Cloudpath Enrollment System (ES);BPG_Cloudpath;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, Cloudpath, ZoneDirector How do I configure Cloudpath MAC Registration with a Ruckus ZoneDirector controller?

How to set up Cloudpath MAC Registration with a Ruckus ZoneDirector controller

2019-04-24T11:20:32-0700 2019-04-24T12:00:07-0700 https://support.ruckuswireless.com/articles/000009018 2019-04-23T10:20:44-0700 monthly 0.8 admin,premium knowledge_article_3651 knowledge_article_3651 2019-04-04T07:10:43-0700 000009018 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed How to configure external syslog server on Unleashed AP? First set up an external syslog server and should be reachable from the Unleashed network. Steps to configure syslog server from Master AP CLI: Login to the Master AP CLI. ruckus# config ruckus(config)# system ruckus(config-sys)# syslog ruckus(config-sys-syslog)# server ip address(x.x.x.x) The syslog settings have been updated. ruckus(config-sys-syslog)# facility local0 (set the facility local0-local7) The syslog settings have been updated. ruckus(config-sys-syslog)# priority emerg {sets the syslog priority level (emerg,alert,crit, err,warning,notice,info,debug)} The syslog settings have been updated. ruckus(config-sys-syslog)# ap-facility local0 (set the ap-facility level local0-local7) The syslog settings have been updated. ruckus(config-sys-syslog)# ap-priority emerg {sets the ap syslog priority level (emerg,alert,crit, err,warning,notice,info,debug)} The syslog settings have been updated. ruckus(config-sys-syslog)# end The syslog settings have been updated. Your changes have been saved. ruckus(config-sys)# To configure the event log level, use the following command: ruckus# config You have all rights in this mode. ruckus(config)# sys ruckus(config-sys)# syslog ruckus(config-sys-syslog)# event-log-level <1-3> (1: critical events; 2: warning & critical events; 3: show more) The syslog settings have been updated. ruckus(config-sys-syslog)#

Configuration of external Syslog Server on Unleashed from the CLI

2019-04-23T10:20:44-0700 2019-04-23T12:00:09-0700 https://support.ruckuswireless.com/articles/000008976 2019-04-17T16:12:24-0700 monthly 0.8 admin,premium knowledge_article_3663 knowledge_article_3663 2019-04-05T03:12:35-0700 000008976 Validated (External) Premium Ruckus icx switches Configuration;Installation Configuration, Installation, Ruckus ICX Switches How do I configure encrypted radius on ICX switch? If we use Radius PAP (Password Authentication Protocol) the messages between authenticator and server are partially encrypted. The password will always be encrypted via the 'shared-secret', meanwhile the attributes and their values (except password) are sent in plain text. This is relatively safe since a man-in-the-middle attack could expose the username. We can configure this as stated on the ICX security guide, with the parameter auth-port, highlighted below: radius-server host { ip-addr | ipv6-addr | server-name } [ ssl-auth-port number | auth-port number ] [ acct-port number ] [ authentication-only | authorization-only | accounting-only | default ] [ key { [ 0 | 2 ] string } ] The default parameter causes the server to be used for all AAA functions. If we use Radius CHAP (Challenge-Handshake Authentication Protocol) with EAP-TLS/TTLS/PEAP/MD5 etc, then what happens is we have essentially two parts of the packet. <ul><li>The outer part is still going to be plain text, but there isn't much in there of use in terms of security.</li><li>The inner part is encrypted with strength from relatively weak (EAP-MD5) to very strong (EAP-TLS). Here is where usernames/passwords are generally exchanged for dot1x/mac-authentication.</li></ul> The configuration on ICX switch is with parameter ssl-auth-port, highlighted below: radius-server host { ip-addr | ipv6-addr | server-name } [ ssl-auth-port number | auth-port number ] [ acct-port number ] [ authentication-only | authorization-only | accounting-only | default ] [ key { [ 0 | 2 ] string } ] The default parameter causes the server to be used for all AAA functions. We could also use TACACS for encryption, but it has weaker encryption limitations; it encrypts the whole packet, so the username is not exposed in a man-in-the-middle attack. Radius is an open standard. TACACS is proprietary.

Details of command-line parameters for configuring encrypted RADIUS

2019-04-17T16:12:24-0700 2019-04-17T18:00:11-0700 https://support.ruckuswireless.com/articles/000009009 2019-04-17T16:51:31-0700 monthly 0.8 admin,premium knowledge_article_3661 knowledge_article_3661 2019-04-12T08:27:34-0700 000009009 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Troubleshooting Troubleshooting, Unleashed How do I enable debugging logs for Unleash AP for election process? To enable Debug on Unleash AP's, navigate to Admin & Services > Administer > Diagnostics > Debug Info, and enable the Auto Election debug component. FIGURE 1 Select Auto Election <img alt="Debug info option in Unleashed" height="335" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Rwu&feoid=00N50000002Cf3M&refid=0EM2J000000q8WN" width="500"></img> Alternatively, SSH to an Unleashed AP and manually turn on election log debugging on that particular AP using the following AP CLI command: set election debug X Where X is a number representing the debug level: 1 means to only show error messages. Debug level 8 means to generate all messages for debugging purposes. FIGURE 2 Use "set election debug 8" to generate all messages <img alt="Set election debug" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Rwu&feoid=00N50000002Cf3M&refid=0EM2J000000q8WS"></img>

This article explains how to enable debugging logs for Unleash Master AP for election process.

2019-04-17T16:51:31-0700 2019-04-17T18:00:08-0700 https://support.ruckuswireless.com/articles/000008835 2019-04-17T17:05:51-0700 monthly 0.8 admin,premium knowledge_article_3659 knowledge_article_3659 2019-03-06T14:44:53-0800 000008835 Validated (External) Premium Brocade network advisor;Brocade Network Advisor (BNA) Performance Performance, Brocade Network Advisor How to fix sflow save to database error message? Recommended system requirements for server in Network Advisor installation guide <img alt="User-added image" height="81" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Rx9&feoid=00N50000002Cf3M&refid=0EM2J000000m8c4" width="500"></img> After adding more Processor to the server machine please reboot the server and follow the below steps 1) Open command prompt as administrator and navigate to <BNA_HOME>\bin 2) Type configwizard.bat and hit enter 3) Once configuration wizard open, Give next until finish window The configuration wizard will start up BNA services.

sFlow save to database backlogged error

2019-04-17T17:05:51-0700 2019-04-17T18:00:06-0700 https://support.ruckuswireless.com/articles/000005812 2016-07-13T10:59:25-0700 monthly 0.8 admin,premium knowledge_article_2378 knowledge_article_2378 2016-06-03T13:05:55-0700 000005812 Validated (External) Premium P300;Ruckus P300 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, P300 What's the best practice for using Static IPs on P300 bridge links? The following are best practices when using Static IPs on P300 link APs: 1. Only assign Default Gateway on the Root Bridge AP, not the Non-Root Bridge APs. 2. The Root Bridge needs to be the closest AP to the Default Gateway, or the link will go down. 3. NRB cannot be closest to the DG. Design your network so RB is closest to DG when using Static IPs.

Proper configuration of Static IP addressed P300s is required - RB must be closest to DefGW, and only AP with DG defined.

2016-07-13T10:59:25-0700 2019-04-17T10:48:41-0700 https://support.ruckuswireless.com/articles/000008928 2019-04-16T14:49:43-0700 monthly 0.8 admin,premium knowledge_article_3658 knowledge_article_3658 2019-03-21T04:55:47-0700 000008928 Validated (External) Premium Icx 7450;RUCKUS ICX 7450 Campus Switches Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ICX 7450 Below is the pinout for the Mini USB and the RJ45 connector to be used as console cable for the ICX 7450 <img alt="User-added image" height="499" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Rw1&feoid=00N50000002Cf3M&refid=0EM2J000000mHaa" width="737"></img> And here is the pinout of the RJ45 to DB9 (female) connector <img alt="User-added image" height="312" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Rw1&feoid=00N50000002Cf3M&refid=0EM2J000000mI4f" width="500"></img>

What pins are used on the mini USB to connect to the console RJ45 connector?

2019-04-16T14:49:43-0700 2019-04-16T18:00:07-0700 https://support.ruckuswireless.com/articles/000009072 2019-04-15T03:34:08-0700 monthly 0.8 admin,premium knowledge_article_3657 knowledge_article_3657 2019-04-15T03:34:08-0700 000009072 Validated (External) Premium Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds How can the ICX switch use more memory in show memory task then the amount installed in the switch? From “show memory task” O/P that as seen above : 4703341099 = memory so far allocated by the task appl, not memory hold by the task at that point of time 4633172410 = memory so far freed by the task, which can include memory allocated by ANY task. Total memory used at the time of the command is 954695680 – 441344000 (total-memory - free-memory) bytes, not 4GB. 441344000 bytes (46.22876% , i.e. around 47%) were still free and available. The "show memory task", provides per task memory used, NOT the current memory usage of that task.

How can the ICX switch use more memory in show memory task than the amount installed in the switch?

2019-04-15T03:34:08-0700 2019-04-15T06:00:06-0700 https://support.ruckuswireless.com/articles/000009049 2019-04-12T01:40:29-0700 monthly 0.8 admin,premium knowledge_article_3656 knowledge_article_3656 2019-04-12T01:35:02-0700 000009049 Validated (External) Premium Ruckus icx switches Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches Why can the ICX switch not establish connection with vSZ/SZ Fixed in switch firmware 8.0.90a and higher Upgrade to 8.0.90a or higher.

ICX cannot setup connection so it can be monitored by vSZ/SZ

2019-04-12T01:40:29-0700 2019-04-12T06:00:07-0700 https://support.ruckuswireless.com/articles/000008885 2019-03-11T08:02:25-0700 monthly 0.8 admin,premium knowledge_article_3607 knowledge_article_3607 2019-03-11T08:02:25-0700 000008885 Validated (External) Premium Ruckus support services Firmware;System network management;Known issues and workarounds Firmware, System Network Management, Known Issues and Workarounds, Ruckus Support Services What virtual machine (hypervisor) platforms are supported by Ruckus Diagnostic Dashboard? As at March 2019 the following platforms are supported for deploying Ruckus Diagnostic Dashboard: VMware ESXi 5.5+ KVM (Kernel-based Virtual Machine) Future support for the following platforms is currently under development (no delivery-date stated): MS Hyper-V Note that there are VM conversion tools available such as Microsoft Virtual Machine Converter which can convert .ova format to Hyper-V, but Ruckus has not tested this function. Further information on RDD is available on the Support portal: https://support.ruckuswireless.com/Ruckus_Diagnostic_Dashboard

A summary of the currently supported platforms

2019-03-11T08:02:25-0700 2019-04-11T09:58:33-0700 https://support.ruckuswireless.com/articles/000004212 2016-11-17T14:15:41-0800 monthly 0.8 admin,premium knowledge_article_2474 knowledge_article_2474 2015-03-18T07:28:18-0700 000004212 Validated (External) Premium Virtual smartcell gateway Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, virtual SmartCell Gateway vSCG: Does the vSCG cluster support nodes in different subnets?

2016-11-17T14:15:41-0800 2019-04-05T05:42:42-0700 https://support.ruckuswireless.com/articles/000009015 2019-04-04T07:51:18-0700 monthly 0.8 admin,premium knowledge_article_3650 knowledge_article_3650 2019-04-04T07:50:52-0700 000009015 Validated (External) Premium Sz300;Scg200;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Firmware Configuration, Firmware, SZ300, SCG200, SZ100 Does the Smart Zone controller support Link Aggregation(LAG or LACP) ? The LAG or LACP(Link Aggregation Control Protocol) is NOT supported on the Smart Zone controller at the moment. A Feature Request is already raised for this issue. For reference, the Feature Request ID is FR-1798

Link Aggregation Support on Smart Zone Controllers

2019-04-04T07:51:18-0700 2019-04-04T12:00:08-0700 https://support.ruckuswireless.com/articles/000008975 2019-04-04T11:16:59-0700 monthly 0.8 admin,premium knowledge_article_3649 knowledge_article_3649 2019-04-04T11:16:59-0700 000008975 Validated (External) Premium Zonedirector;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Installation;Troubleshooting;Known issues and workarounds Configuration, Firmware, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Outdoor Why my ZD in 10.1 does not recognize T310c, T310d and T310n APs? When you have T310c, T310d and T310n APs in ZD release 10.1.0, you also need an AP Patch release for these APs to work. You need to download this Patch from Support portal: https://support.ruckuswireless.com/software/1588-zonedirector-10-1-ga-new-model-ap-bundle-support-for-t310-series-b1525-software-release And upload it inside ZD following these indications: <h2>Adding a New AP Model</h2> ZoneDirector 10.1 release supports the registration of new AP models that were not yet available when this ZoneDirector version was released. Before starting this procedure, verify that the controller is running release 10.1 (GA) or later. <div style="margin-left: 40px;">NOTE This procedure will restart ZoneDirector services. During the upgrade process, service outage will occur as the ZoneDirector will restart automatically to complete the upgrade. </div> Follow these steps to register a new AP model with the controller, as stated in document https://ruckus-support.s3.amazonaws.com/private/documents/2171/ZoneDirector-10.1-ReleaseNotes-For-T310-Series-RevA-20180129.pdf?AWSAccessKeyId=AKIAJM3QLNNKLOV235TQ&Expires=1553785711&Signature=5LdqqcCiRnZHiAZi3mtp5cX26WE%3D. Here is a summary: <ol><li>Contact Ruckus for the AP patch file that will enable the controller to support the new AP model (for example, T310-10.1.0.0.1525.encrypted.patch). </li><li>Get the AP patch file, and then save or move the patch file to a location that you can access from the computer that you are using to access the controller's web interface. </li><li>Log on to the controller's web interface as Super Admin. </li><li>Go to the Administer > Upgrade page, and then click Choose File under AP Patch Firmware. Select the AP Patch file to upload. </li><li>Click Upgrade </li><li>The controller adds the T310 series (T310c, T310d, T310n, T310s) to AP release 10.1.0.0.1525. (New AP models are added into Administer > Upgrade page under Current Software.) </li><li>After the controller completes upgrading, connect the new AP model to the network. The new AP model registers with the controller, and then the controller upgrades the AP firmware to release 10.1.0.0.1525. </li><li>Go to the Access Points page, and then verify that the new AP model you added to the controller is listed under Currently Managed APs. </li><li>Under the Status column, verify that new AP model isn’t Approval Pending. Allow it from the Action column if it is Approval Pending.</li></ol>

When you have T310c, T310d and T310n APs in ZD release 10.1, you also need an AP Patch release for these APs to work.

2019-04-04T11:16:59-0700 2019-04-04T12:00:07-0700 https://support.ruckuswireless.com/articles/000008381 2019-04-01T15:18:31-0700 monthly 0.8 admin,premium knowledge_article_3379 knowledge_article_3379 2018-10-11T16:15:03-0700 000008381 Validated (External) Premium Zonedirector 3000;Zonedirector 5000;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Installation Configuration, Firmware, Installation, ZoneDirector 3000, ZoneDirector 5000 How can I estimate the time it will take to upgrade a ZD3000 pair network? Customers with a fully loaded ZD3000 may require a couple hours to completely upgrade the controller(s) and all Access Points. When upgrading a pair of ZD3000s in Active/Standby mode, the Standby controller is upgraded first, then the original Active controller. When the upgraded Standby controller comes back up, it becomes Active, and it pushes firmware to 50 APs at a time, which then reset and rejoin the network. Having a Mesh network will require more time as the farthest MAPs are upgraded first. Overall upgrade time will vary with number of Mesh hops in the overall network. <img alt="User-added image" height="650" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Rnn&feoid=00N50000002Cf3M&refid=0EM50000000lpNW" width="705"></img>

The time it takes for the ZD3000s to upgrade themselves and all APs depends on number of APs and if Mesh is enabled.

2019-04-01T15:18:31-0700 2019-04-01T18:00:07-0700 https://support.ruckuswireless.com/articles/000004349 2019-03-29T14:49:59-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2644 knowledge_article_2644 2017-07-17T13:22:33-0700 000004349 Validated (External) Public Virtual smartcell gateway Configuration;Security;Troubleshooting;Known issues and workarounds Configuration, Security, Troubleshooting, Known Issues and Workarounds, virtual SmartCell Gateway Does vSCG support 802 dot1x authentication using LDAP Server? Yes, since SZ 3.2 release Before version 3.2, vSZ does not support LDAP Server for 802.1x Authentication. We could alternatively use Radius Server as AAA Servers for 802.1x Authentication. Since SZ 3.2, LDAP is now supported for 802.1x. <img alt="User-added image" height="525" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J0000000Rm6&feoid=00N50000002Cf3M&refid=0EM2J000000q81A" width="819"></img> Note: In LDAP, the User password must be in clear text.

Does vSCG support 802 dot1x authentication using LDAP Server? Yes, since SZ 3.2 release.

2019-03-29T14:49:59-0700 2019-03-29T18:00:06-0700 https://support.ruckuswireless.com/articles/000003634 2014-11-17T00:43:44-0800 monthly 0.8 admin,premium knowledge_article_1435 knowledge_article_1435 2014-11-17T00:43:44-0800 000003634 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What are the recommended best practice for assigning VLAN Tagging <div> Virtual Local Area Networks, or VLANs, segregate traffic within a network. VLANs keep traffic from different networks separated when traversing shared links and devices within a topology. This process, also known as VLAN tagging, is invaluable to limiting broadcast network traffic, and securing network segments. VLAN tagging is an integral part of networks of all sizes and is supported on the Ruckus ZD and AP This can be done for both data, and management traffic VLAN enabled ports are generally categorized in one of two ways, tagged or untagged. These may also be referred to as "trunk" or "access" respectively. The purpose of a tagged or "trunked" port is to pass traffic for multiple VLAN's, whereas an untagged or "access" port accepts traffic for only a single VLAN. Generally speaking, trunk ports will link switches, and access ports will link to end devices.</div> <div> </div> <div> <div>Trunk ports require more steps to successfully negotiate as a trunk.</div> <div>Both ends of the link must have the following in common:</div> <div>- Encapsulation</div> <div>- Allowed VLAN's</div> <div>- Native VLAN</div> <div> </div> <div>While a link may successfully establish as up with mismatched allowed or native VLAN's, it is best practice to have both sides of the link configured identically. Mismatched native VLAN's or allowed VLAN's can have unforeseen consequences. Recall that the native VLAN is the VLAN associated with untagged traffic. Mismatched native VLAN's on opposite sides of a trunk can inadvertently create "VLAN hopping". This is often a method of intentional attack used to sneak into a network and is an open security risk. </div> </div>

How to correctly assign VLAN 802.1Q tagging (trunking) explained

2014-11-17T00:43:44-0800 2019-03-28T22:16:01-0700 https://support.ruckuswireless.com/articles/000008973 2019-03-28T12:43:41-0700 monthly 0.8 admin,premium knowledge_article_3640 knowledge_article_3640 2019-03-28T11:59:53-0700 000008973 Validated (External) Premium Ruckus icx switches Security Security, Ruckus ICX Switches ICX FastIron OS is susceptible to this? ICX FastIron OS is not susceptible to the vulnerability OpenSSL, vulnerability, CVE-2018-0734., security warning. As per vulnerability details, The Affected versions of OpenSSL are 1.1.0-1.1.0i and 1.0.2-1.0.2p. ICX is using the openssl versions 1.0.1e and fips_2.0.5. So this vulnerability is not applicable to ICX. There is no applicable mitigation.

ICX FastIron OS is susceptible to this vulnerability?

2019-03-28T12:43:41-0700 2019-03-28T18:00:07-0700 https://support.ruckuswireless.com/articles/000002756 2019-03-27T12:08:06-0700 monthly 0.8 admin,premium knowledge_article_3639 knowledge_article_3639 2014-03-06T13:37:43-0800 000002756 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Why does the GUI take a longer time to respond on ZoneDirector? Ping from local subnet switches and nearby switches does not show delay isolating the issue to an intermediate switch in the network.

Slow GUI response on ZoneDirector

2019-03-27T12:08:06-0700 2019-03-27T18:00:11-0700 https://support.ruckuswireless.com/articles/000002842 2019-03-27T14:19:48-0700 monthly 0.8 admin,premium knowledge_article_815 knowledge_article_815 2014-03-25T16:04:01-0700 000002842 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to enable Zero-IT activiation using On-boarding portal? Accompanying screenshots are located in the attached document: 1.) After creating a WLAN with Zero-IT activation enabled. Please create another Guest WLAN as indicated in the below screen-shot. 2.) Navigate to Configure-->Guest access, and enable the “Onboarding portal” option for Zero-IT device registration from Guest portal. 3.) When a client connects to the Open Guest WLAN for the first time, the Onboarding Portal page is displayed. The screen displays the following two options: • Guest Access • Register Device (download Zero-IT activation file) 4.) If the user clicks the Register Device button, the web page will be redirected to the WLAN Connection Activation page, from which the user can enter user name and password to activate this device. A Zero-IT activation file is generated for download once the client is registered with ZoneDirector. After running the downloaded Zero-IT file, the device will be configured with the settings to automatically connect to the secure internal/corporate WLAN. NOTE: You may need to manually switch from the guest WLAN to the secure WLAN after activation (on some mobile devices). NOTE: You may need to manually delete any previously installed Zero-IT activation files before a new one can be run. On some devices (including some Android versions), the activation file will not run if an older an existing package of the same name with a conflicting signature is already installed.

Process of enabling the Zero-IT device registration from the Guest portal page using the On-boarding portal option.

2019-03-27T14:19:48-0700 2019-03-27T18:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PF1XCAW?attachment_index=0 2019-03-27T18:00:10-0700 monthly admin,premium knowledge_article_815 knowledge_article_815_attachment_1 Zero-IT over On-Boarding portal.pdf 276795.0 application/pdf https://support.ruckuswireless.com/articles/000003067 2019-03-27T14:42:32-0700 monthly 0.8 admin,premium knowledge_article_3638 knowledge_article_3638 2014-05-22T19:02:41-0700 000003067 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Can we assign multiple VLANs for the same SSID? <div style="color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-weight: 400; margin-left: 0px; text-align: left; text-decoration: none; white-space: normal;">We cannot create multiple wlan's with the same name. This cannot be achieved directly. Here is the configuration you need to do on Zone Director to achieve the same SSID should be broadcast on multiple vlan's.</div> <div style="color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-weight: 400; margin-left: 0px; text-align: left; text-decoration: none; white-space: normal;"> </div> <div style="color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-weight: 400; margin-left: 0px; text-align: left; text-decoration: none; white-space: normal;">1. Clone the WLAN you wanted to broadcast and just change the wlan name "Name of the WLAN" keeping ESSID field as it is.</div> <div style="color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-weight: 400; margin-left: 0px; text-align: left; text-decoration: none; white-space: normal;"> </div> <div style="color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-weight: 400; margin-left: 0px; text-align: left; text-decoration: none; white-space: normal;">2. Create a separate WLAN Group and map the new WLAN to it.</div> <div style="color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-weight: 400; margin-left: 0px; text-align: left; text-decoration: none; white-space: normal;"> </div> <div style="color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-weight: 400; margin-left: 0px; text-align: left; text-decoration: none; white-space: normal;">3. Create a new Access Point group and keep all the access points on which you like to broadcast the WLAN.</div> <div style="color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-weight: 400; margin-left: 0px; text-align: left; text-decoration: none; white-space: normal;"> </div> <div style="color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-weight: 400; margin-left: 0px; text-align: left; text-decoration: none; white-space: normal;">4. In the new AP group under "Radio settings" >> WLAN group assign newly created WLAN group containing WLAN on both the radios.</div> <div style="color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-weight: 400; margin-left: 0px; text-align: left; text-decoration: none; white-space: normal;"> </div> <div style="color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-weight: 400; margin-left: 0px; text-align: left; text-decoration: none; white-space: normal;">5. Create a WLAN group based on the requirement and tag the van to the SSID, so that whenever the clients get connected to the Wlan will get the IP Address from the respective Vlan.</div>

Here is the configuration you need to do on ZoneDirector to achieve the same SSID should be broadcast on multiple vlan's.

2019-03-27T14:42:32-0700 2019-03-27T18:00:09-0700 https://support.ruckuswireless.com/articles/000002953 2019-03-27T15:26:07-0700 monthly 0.8 admin,premium knowledge_article_3637 knowledge_article_3637 2014-04-25T14:40:58-0700 000002953 Validated (External) Premium Zoneflex 7731 Configuration Configuration, ZoneFlex 7731 How to reset ZF7731 bridge to factory settings? <div>There are two ways which can be referred for resetting ZF7731 bridge :</div> <div> </div> <div>1.Using web administration (Soft Reset)</div> <div>2.Hard reset </div> <div> </div> <div>Using Web administration : </div> <div> </div> <div>Log-in to Web GUI of ZF7731 bridge >>Maintenance > Reboot/Reset>>Reset now </div> <div> </div> <div>Hard Reset : </div> <div> </div> <div>To restore the Wireless Bridge to factory defaults, press and hold the Reset button (located underneath the bridge ,next to power supply )for six (6) seconds.</div> <div> </div> <div>Please find the picture attached to this article which shows reset button provided in the bridge.</div> <div> </div>

This article can be referred to for resetting the ZF7731 to factory default settings.

2019-03-27T15:26:07-0700 2019-03-27T18:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PFJJCA4?attachment_index=0 2019-03-27T18:00:08-0700 monthly admin,premium knowledge_article_3637 knowledge_article_3637_attachment_1 Zf7731 Reset button.PNG 62983.0 image/png https://support.ruckuswireless.com/articles/000006804 2018-08-30T13:57:11-0700 monthly 0.8 admin,premium knowledge_article_3152 knowledge_article_3152 2017-12-12T14:11:54-0800 000006804 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to use debug Commands? When enabled, many debug commands can significantly impact system performance. Many debug commands provide options for brief or detailed reporting. Generating detailed output places an additional burden on system performance, and in many cases the results may be more difficult to interpret than output generated using the brief option. To conserve performance and prevent system disruption, use the brief option whenever possible. <h4>Generic debug commands</h4> The following generic debug commands perform functions related to all debugging actions: <ul><li>debug ?—Generates a list of debug options.</li><li>[no] debug all—Enables or disables all debug functions.</li><li>debug destination—Allows you to select an output destination; Telnet, SSH, console, or logging (default).</li><li>show debug—Shows all enabled debug settings.</li></ul> <h4>debug all</h4> Syntax: [no] debug all This command enables all the debug functions, and should be used only during a troubleshooting session with a Brocade technician. Brocade# debug all Warning! This may severely impact network performance! All possible debuggings have been turned on Enter the no form of the command to cancel the setting. Brocade# no debug all Debug message destination: default (console) All possible debuggings have been turned off tracking is off and all results are cleared Disabling ACL log Don't monitor port <h4>debug destination</h4> Syntax: [no] debug destination [ console | logging | telnet num | ssh num ] <ul><li>console Directs output to the system console.</li><li>logging Directs output to the syslog buffer and to the syslog server (default).</li><li>telnet num Directs output to a specified Telnet session (ranges from 1 through 5).</li><li>ssh num Directs output to a specified Secure Shell (SSH) session (ranges from 1 through 5).</li></ul> This command allows you to specify a destination for debugging output. The default destination is the system console, but you can redirect output to a syslog buffer, Telnet session, or SSH session. To send debug output to a Telnet session, first determine your session number using the show who command. This example indicates that you are connected through active Telnet session 1. To redirect the debug output to your Telnet session, enter the following command. Brocade# debug destination telnet 1 <h4>show debug</h4> Syntax: show debug This command displays all the enabled debug functions. The output resembles the following example, which shows that ACL log and IPv6 debugging are enabled, with the console as the output destination. Brocade# show debug Debug message destination: Console Enabling ACL log IPv6 Routing: ipv6: icmp debugging is on

How to use debug Commands?

2018-08-30T13:57:11-0700 2019-03-27T11:45:19-0700 https://support.ruckuswireless.com/articles/000003327 2019-03-25T16:10:09-0700 monthly 0.8 admin,premium knowledge_article_1238 knowledge_article_1238 2014-08-25T01:45:51-0700 000003327 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector How many log messages can be stored in the Zone director. ZD1000 will record up to 1250 lines. ZD1100 will record up to 5000 lines. ZD1200 will record up to 20000 lines. ZD3000 will record up to 20000 lines. ZoneDirector maintains an internal log of current events and alarms. This file has a fixed capacity; at a certain level, ZoneDirector will start deleting the oldest entries to make room for the newest. This log is volatile, and the contents will be deleted if ZoneDirector is powered down. If you want a permanent record of all logging activities, you can set up your syslog server to receive log contents from ZoneDirector, and then use the Web interface to direct all logging to the syslog server.

Maximum capacity of log messages stored in Zone director

2019-03-25T16:10:09-0700 2019-03-25T18:00:07-0700 https://support.ruckuswireless.com/articles/000003287 2019-03-22T09:18:30-0700 monthly 0.8 admin,premium knowledge_article_1911 knowledge_article_1911 2014-08-12T13:56:32-0700 000003287 Validated (External) Premium Zonedirector;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Outdoor Can the distance between APs affect their ability to form Mesh? Adjust default wifiX (depending on single/dual-band AP model) radio used for mesh distance, for actual Root/Mesh AP distances.

Why doesn't my Mesh AP join the Root AP I want it to?

2019-03-22T09:18:30-0700 2019-03-22T12:00:09-0700 https://support.ruckuswireless.com/articles/000008591 2019-03-22T11:03:01-0700 monthly 0.8 admin,premium knowledge_article_3635 knowledge_article_3635 2019-03-21T15:48:37-0700 000008591 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches Why wouldn't Local DB user authentication work for Web Auth on Ruckus ICX? There is no aaa dot1x configuration in your configuraiton. You have to configure "aaa dot1x" configuration as seen below. [sample configuration] vlan 3 untagged ethe 1/1/1 to 1/1/3 router-interface ve 3 webauth attempt-max-num 3 cycle-time 60 reauth-time 128000 block duration 0 auth-mode username-password auth-methods local auth-mode username-password local-user-database test no secure-login enable aaa authentication dot1x default radius local-userdb test username user1 password $e$&I19&J&+ username user2 password $e$&I19&J2+ ------------------------------------------------------------------ Even If you do not use Radius for web auth, aaa dot1x configuration should be added.

Local DB user authentication does not work for Web Auth

2019-03-22T11:03:01-0700 2019-03-22T12:00:08-0700 https://support.ruckuswireless.com/articles/000008935 2019-03-21T14:37:43-0700 monthly 0.8 admin,premium knowledge_article_3633 knowledge_article_3633 2019-03-21T14:37:43-0700 000008935 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation;Known issues and workarounds Configuration, Firmware, Installation, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway How do I execute the utility patch to Disabel Data Plane Certificate Check in SZ 5.1? 1) Follow steps to install <a href="http://support.ruckuswireless.com/software/1996-smartzone-5-1-ga-cluster-data-plane-certificate-check-patch-ksp" target="_blank">SmartZone 5.1 Cluster Data Plane certificate check Patch (.ksp)</a> following instructions in <a href="http://support.ruckuswireless.com/articles/000004058" target="_blank">KBA-4058: How to load a patch (.ksp) script to SCG / vSZ / SZ</a>. 2) Execute the commands to Disable data plane certificate check, when installing the .ksp script. Enter "0" to Disable DP Cert Check <img alt="User-added image" height="300" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095sZ&feoid=00N50000002Cf3M&refid=0EM2J000000mIGl" width="500"></img> Use "tunnelmgr_cli -g -cb" command to verify the Tunnelmgr Control Block shows Certificate Validation: Disable

SmartZone 5.1 software release recommends that customers with Tunneled WLANs execute a Data Plane Certificate check script to disable AP to DP certificate check.

2019-03-21T14:37:43-0700 2019-03-21T18:00:07-0700 https://support.ruckuswireless.com/articles/000006435 2019-03-21T03:43:57-0700 monthly 0.8 admin,premium knowledge_article_3630 knowledge_article_3630 2017-09-15T06:06:58-0700 000006435 Validated (External) Premium Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Installation;Troubleshooting Installation, Troubleshooting, SPoT Why the errors are happening with valid URL and login credentials? To fix all these issues the solution is to add signed certificates on the vSPoT and then the apps will have unrestricted access to the server. Prerequisites 1. Network port 443 needs to be open on the corporate firewall. 2. Valid SSL certificate files (*.key, *.crt) are required. 3. Valid intermediate CA certificates (*.crt) if any. Update the SSL Certificate Follow the below steps to update the SSL certificate. 1. Check vSPoT 3.3.x docker container is running by using the below command. admin@vspotappliance:~$ spot list 2. If you have a domain SSL certificate with intermediate CA certificates, you would need to merge them as one certificate file using your local machine. bash:~$ cat vspot.client.com.crt intermediate_ca.crt > my.crt This merged certificate file (in this example, my.crt) should be used as the *.crt file in the next step. NOTE If the intermediate certificates are not merged with the issued SSL certificate, the trusted-chain certificate might not be established. This means that when users attempt to access the site, errors such as Security Alert or Not Secure can been seen in the site's certificate chain. 3. From your local machine, copy the SSL certificate files *.key and *.crt file (merged certificate file in case of intermediate CA's) to the vSPoT host machine's home directory. For example, /home/admin/ssl/. bash:~$ scp my.crt admin@VSPOT_IP_ADDR:/home/admin/ssl bash:~$ scp my.key admin@VSPOT_IP_ADDR:/home/admin/ssl 4. SSH into your vSPoT host machine to run the following command to update the SSL certificate. Ensure the order of the files as per the below example. admin@vspotappliance:~$ spot config ssl-upload /home/admin/ssl/my.crt /home/admin/ssl/my.key 5. Open the vSPoT URL (in this example, https://54.206.20.234) in a web browser to verify whether the nginx server is working with the updated certificate. 6. For vSPoT installations accessed with FQDN or DNS hostname (for example, https://www.vspot.ruckuslbs.com), access the domain name in a web browser to verify if the browser accepts the updated SSL certificate as a valid certificate. For example, on Google Chrome it is seen as a green lock icon. Other browser exhibit it differently. 7. You should be able to view the vSPoT login page to login using the user credentials.

Apple iOS users when launching the Calibrator app seeing issues with Login. they see the following display message: "Error - Did you enter a valid SPoT server API URL into the app's settings? Don't know? Contact your SPoT admin. If you know it, go to app's settings and enter the valid URL"

2019-03-21T03:43:57-0700 2019-03-21T06:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000TvgCCAS?attachment_index=0 2019-03-21T06:00:08-0700 monthly admin,premium knowledge_article_3630 knowledge_article_3630_attachment_1 Spot AP Login failure.JPG 72881.0 image/jpeg https://support.ruckuswireless.com/articles/000008887 2019-03-20T15:36:45-0700 monthly 0.8 admin,premium knowledge_article_3628 knowledge_article_3628 2019-03-20T15:36:45-0700 000008887 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway Wireshark version 2.6.8 works I installed the Wireshark 3.0 on my windows10 PC. Before installing Wireshark 3.0, I have Wireshark 2.0 and everything worked fine.

After upgrading Windows PC to Wireshark version 3.0 Packet Capture Stream from Ruckus AP failed

2019-03-20T15:36:45-0700 2019-03-20T18:00:07-0700 https://support.ruckuswireless.com/articles/000006396 2019-03-20T10:12:21-0700 monthly 0.8 admin,premium knowledge_article_3627 knowledge_article_3627 2018-09-25T16:11:18-0700 000006396 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Configuration Performance, Configuration, ZoneFlex Indoor, ZoneFlex Outdoor What do I do if I have a high density WiFi environment and I get false radar detections? A new command has been introduced for the 11ac APs in order to minimize the occurrence of these false radar detections. ZD: Since 10.0 SZ: Since 3.5 To check if this command is available on the AP: "get dfs-high-density wifi1", if reading is 1, means enabled, 0 means disabled. To enable it: "set dfs-high-density wifi1 1".

A new AP command has been introduced on 11ac APs for high density environments since 3.5, to help prevent false DFS radar detection notices.

2019-03-20T10:12:21-0700 2019-03-20T12:00:08-0700 https://support.ruckuswireless.com/articles/000008762 2019-03-19T14:33:21-0700 monthly 0.8 admin,premium knowledge_article_3624 knowledge_article_3624 2019-03-19T14:33:21-0700 000008762 Validated (External) Premium Ruckus icx switches;Zoneflex indoor;Zoneflex outdoor Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches, ZoneFlex Indoor, ZoneFlex Outdoor How to troubleshoot R610 PoE on switch, and with power injectors? When using PoE injector (802.3at 25.0 W) set the configuration on the ICX-7250 24P as show as following: -Class 4 (100-30000) 802.3at PoE injector. we can support just 12 ports 100% PoE Load

ICX-7250-24P Config necessary for providing PoE to Ruckus R610 on all ports.

2019-03-19T14:33:21-0700 2019-03-19T18:00:06-0700 https://support.ruckuswireless.com/articles/000008927 2019-03-19T05:59:30-0700 monthly 0.8 admin,premium knowledge_article_3623 knowledge_article_3623 2019-03-19T05:59:30-0700 000008927 Validated (External) Premium Unleashed;Flexmaster;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;FlexMaster Configuration;Firmware;Installation Configuration, Firmware, Installation, Unleashed, FlexMaster Which devices are supported on UMM? UMM supports the Zone Directors and Unleashed APs but not Standalone/SOLO APs. However, we have some limitations here as mentioned below. UMM 2.0 : - Supports ZD1200, ZD3000 and ZD5000. It does not support ZD1000 and ZD1100 as they are EoL. - Supports all Unleashed APs running on 200.5. - No support for standalone APs. UMM 2.1 : - Supports only ZD1200 and ZD3000. - Supports all Unleashed APs running on 200.5 and 200.6. - No support for Standalone APs. - P300 bridges are also supported from this release. Note : - Please check the release notes for more details on supported platforms w.r.t firmware as well. - If you have ZD1000/ZD1100, it is *NOT* recommended to upgrade to UMM as they are no longer supported. Even, ZD5000 is only supported on the first release(2.0)

This article provides you with the supported platforms information on UMM. It is very important to check this while migrating from FM to UMM

2019-03-19T05:59:30-0700 2019-03-19T06:00:07-0700 https://support.ruckuswireless.com/articles/000001161 2019-03-18T13:10:11-0700 monthly 0.8 admin,premium knowledge_article_34 knowledge_article_34 2012-03-21T12:00:21-0700 000001161 Validated (External) Premium Zoneflex indoor Performance;Troubleshooting Performance, Troubleshooting, ZoneFlex Indoor Traffic-statistics-in-standalone-AP 7363 <h1>Traffic statistics in support info</h1> The main source of information for traffic statistics is the support info file that can be collected at Maintenance::Support info: <img alt="User-added image" height="475" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095pf&feoid=00N50000002Cf3M&refid=0EM50000000L9Ge" width="500"></img> <h2>General traffic information</h2> From this text file, general traffic information can be extracted, such as: <ul><li>Packets received and transmitted for each interface in the AP:</li></ul> <img alt="User-added image" height="143" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095pf&feoid=00N50000002Cf3M&refid=0EM50000000L9Gj" width="500"></img> <img alt="User-added image" height="415" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095pf&feoid=00N50000002Cf3M&refid=0EM50000000L9Go" width="500"></img> <ul><li>Again packets received and transmitted per interface this time also including interface information like MAC address and IP address:</li></ul> <img alt="User-added image" height="203" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095pf&feoid=00N50000002Cf3M&refid=0EM50000000L9Gt" width="500"></img> <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095pf&feoid=00N50000002Cf3M&refid=0EM50000000L9Gy"></img> <ul><li>Again packets received and transmitted per interface this time also including interface information like MAC address and IP address:</li></ul> <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095pf&feoid=00N50000002Cf3M&refid=0EM50000000L9H3"></img> RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) br11 Link encap:Ethernet HWaddr 00:00:00:00:00:00 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) br12 Link encap:Ethernet HWaddr 00:00:00:00:00:00 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) br13 Link encap:Ethernet HWaddr 00:00:00:00:00:00 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) br14 Link encap:Ethernet HWaddr 00:00:00:00:00:00 inet addr:169.254.1.1 Bcast:169.254.255.255 Mask:255.255.0.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:1 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:42 (42.0 B) br4 Link encap:Ethernet HWaddr 50:A7:33:1C:FD:81 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) br5 Link encap:Ethernet HWaddr 50:A7:33:1C:FD:81 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) br6 Link encap:Ethernet HWaddr 50:A7:33:1C:FD:81 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) br7 Link encap:Ethernet HWaddr 50:A7:33:1C:FD:80 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) br8 Link encap:Ethernet HWaddr 50:A7:33:1C:FD:81 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) br9 Link encap:Ethernet HWaddr 00:00:00:00:00:00 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 <div> RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) eth0 Link encap:Ethernet HWaddr 50:A7:33:1C:FD:85 UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) eth1 Link encap:Ethernet HWaddr 50:A7:33:1C:FD:84 UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) eth2 Link encap:Ethernet HWaddr 50:A7:33:1C:FD:83 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:6993 errors:0 dropped:0 overruns:0 frame:0 TX packets:3780 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:953224 (930.8 KiB) TX bytes:1973494 (1.8 MiB) uif0 Link encap:Ethernet HWaddr 50:A7:33:1C:FD:85 UP BROADCAST RUNNING MULTICAST MTU:3000 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) vif0 Link encap:Ethernet HWaddr 50:A7:33:1C:FD:85 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) wifi1 Link encap:Ethernet HWaddr 50:A7:33:1C:FD:8C UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:3323 errors:0 dropped:0 overruns:0 frame:55 TX packets:1857 errors:2 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:300001 (292.9 KiB) TX bytes:385628 (376.5 KiB) Interrupt:49 Memory:b0010000-b0020000 wlan8 Link encap:Ethernet HWaddr 50:A7:33:1C:FD:8C UP BROADCAST RUNNING MULTICAST MTU:2290 Metric:1 RX packets:1081 errors:0 dropped:0 overruns:0 frame:0 TX packets:2155 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:162541 (158.7 KiB) TX bytes:319134 (311.6 KiB) <ul><li>Per radio statistics (2.4GHz and 5GHz) including physical errors, airtime utilization, RSSI values, management values, and 802.11n transmit and receive statistics:</li></ul> <div>### Athstats Radio 1 ### ------ Interrupt Stats ------ 88140 RX interrupts(rx_i) 1786 TX interrupts(tx_i) 14791 beacon alert interrupts(swba) 67 dynamic wmm engaged(dwmm_engaged) 66 dynamic wmm disengaged(dwmm_disengaged) 2 recv eol interrupts(rxeol) <div>4 global txmit timeout interrupts(txto) ------------ TX/RX Stats ------------ 2 tx failed 'cuz too many retries(tx_xretries) 199 long on-chip tx retries(tx_longretry) 16 tx frames with no ack marked(tx_noack) 1079 tx frames with rts enabled(tx_rts) 0% rts fail rate 55 rx failed 'cuz of bad CRC(rx_crcerr) ------------ PHY Error Stats ------------ 96726 PHY errors since clearing all stats (rx_phyerr) 47789 phy radar 1 phy tx interrupt rx 47852 phy ofdm timing 718 phy ofdm signal parity 366 phy ofdm rate illegal 12 PHY errors since clearing delta stats (1 sec) 12 phy ofdm timing Histogram of PHY errors per second (pcttime in each range) 0 1-500 ..1K ..2K ..5K ..10K ..20K ..50K .100K more 6 94 0 0 0 0 0 0 0 0 ------------ Airtime Stats ------------ Airtime utilized (percent) since clearing delta stats (1 sec) Busy: 0 RX: 0 TX: 0 Total: 0 Histograms of airtime (pcttime in each range) since clearing all stats 0 0-10 ..20 ..30 ..40 ..50 ..60 ..70 ..80 ..90 ..100 busy: 100 0 0 0 0 0 0 0 0 0 0 rx: 100 0 0 0 0 0 0 0 0 0 0 tx: 100 0 0 0 0 0 0 0 0 0 0 tot: 100 0 0 0 0 0 0 0 0 0 0 27 periodic calibrations(per_cal) Ack RSSI [combined]: 28 Ack RSSI Ch0: ctl 24, ext -1 Ack RSSI Ch1: ctl 26, ext -1 Ack RSSI Ch2: ctl -1, ext -1 rssi of last rcv[combined]: 24 Rx RSSI Ch0: ctl 21, ext -1 Rx RSSI Ch1: ctl 22, ext -1 Rx RSSI Ch2: ctl -1, ext -1 NF Ch0 -108[-118], ext -88[-50] NF Ch1 -108[-120], ext -88[-50] NF Ch2 -88[0], ext -88[0] Ntimes noise floor exceeded action threshold: 0 Ntimes noise floor was abnormally low: 0 Ntimes ODFM weak detect was disabled: 0 Ntimes CCK weak detect was disabled: 0 65 switched default/rx antenna(ant_defswitch) 9 pre delimiter crc errors(rx_delim_pre_crcerr) 5 post delimiter crc errors(rx_delim_post_crcerr) 9516 decrypt busy errors(rx_decrypt_busyerr) 64 total channel changes(chanchange) 68 channel set calls(chanset) 8279 beacons transmitted(be_xmit) 2 driver init calls(init) 3 driver stop calls(stop) 18 nodes allocated(nodealloc) 8 nodes deleted(nodefree) 8 keys allocated(keyalloc) 6 keys deleted(keydelete) 64 Rx stopped(stoprecv) 312 tx voice frms(tx_voice_cnt) 35353 tx voice len(tx_voice_len) 359 tx video frms(tx_video_cnt) 89947 tx video len(tx_video_len) 575 tx data frms(tx_bsteft_cnt) <div>131564 tx data len(tx_bsteft_len) 409 tx bkgnd frms(tx_bkgnd_cnt) 46225 tx bkbnd len(tx_bkgnd_len) 2224 txq buffers available(txq_buf_cnt) 243 usec average media access for AC 3 ( 80168/ 329) 79 usec average media access for AC 2 ( 31739/ 401) 163 usec average media access for AC 1 ( 96993/ 593) 235 usec average media access for AC 0 ( 107927/ 459) 157 usec average media access ( 208900/ 1323) 11n stats 1871 total tx data packets(tx_pkts) 2 tx drops in wrong state(tx_checks) 1869 tx pkts when h/w queue is busy(tx_queue) 1865 tx completions(tx_comps) 399 tx frames with stbc enabled(tx_stbc) 1730 tx unaggregated frame completions(tx_compunaggr) 2 tx unaggregated excessive retries(txunaggr_xretry) 156 tx unaggregated unacked frames(txunaggr_compretries) 52 tx aggregated completions(tx_compaggr) 199 tx retries of sub frames(tx_retries) 1734 tx frames not aggregated(txaggr_single) 81 tx aggr good completions(txaggr_compgood) 16 tx aggr excessive retries(txaggr_compxretry) 43 tx aggr unacked subframes(txaggr_compretries) 6 data underrun for an aggregate(txaggr_data_urun) 5 delimiter underrun for an aggregate(txaggr_delim_urun) 8 tx aggr: h/w long retries(txaggr_longretries) 3155 rx pkts(rx_pkts) 74 rx aggregated packets(rx_aggr) 2372 rx non qos-data frames(rx_nonqos) 3 rx sequence resets(rx_seqreset) 5 rx old packets(rx_oldseq) 758 rx block ack window advanced(rx_baadvance) 758 rx pkt completions(rx_recvcomp) <h2>Per-STA traffic information</h2> In other hand, useful information can also be extracted from this file related to a particular STA: <ul><li>Media queue statistics where you can find information about traffic classification in the different priority queues, and if any of this has been retransmitted excessively:</li></ul> </div> </div> </div> </div> <img alt="User-added image" height="88" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095pf&feoid=00N50000002Cf3M&refid=0EM50000000L9H8" width="500"></img> <ul><li>STA statistics including transmission rate, throughput, several counters for transmitted and received frames or VLAN assignment:</li></ul> <img alt="User-added image" height="101" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095pf&feoid=00N50000002Cf3M&refid=0EM50000000L9D2" width="500"></img> <img alt="User-added image" height="179" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095pf&feoid=00N50000002Cf3M&refid=0EM50000000L9HD" width="500"></img> where: ‘tx_rate’ indicates transmission rate ‘tx_kbps’ indicates actual throughput ‘VLAN’ column indicates VLAN assigned to this STA <h1>Per-WLAN statistics in WebUI</h1> In each WLAN you can find the list of STA currently associated (Status::Radio 5G or Status::Radio 2.4G and select the tab for the desired WLAN): <img alt="User-added image" height="179" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095pf&feoid=00N50000002Cf3M&refid=0EM50000000L9HI" width="500"></img> Now if you click on the MAC address of the STA, you can see individual traffic statistics: <img alt="User-added image" height="471" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095pf&feoid=00N50000002Cf3M&refid=0EM50000000L9HN" width="500"></img>

This is an introductory article to help find and review general traffic statistics extracted from WebUI to verify performance. for AP 7363

2019-03-18T13:10:11-0700 2019-03-18T18:00:08-0700 https://support.ruckuswireless.com/articles/000008296 2019-03-18T13:57:59-0700 monthly 0.8 admin,premium knowledge_article_3357 knowledge_article_3357 2018-09-20T14:44:08-0700 000008296 Validated (External) Premium Ruckus cloud wifi Firmware Firmware, Ruckus Cloud WiFi What client data is stored by Ruckus Cloud? Ruckus Cloud has an EMEA data center in Belguim. Data is stored at rest and in transit, but stays in Belguim. <ul><li>All networking info about client– Mac, IP, hostname, OS type, applications accessed, duration of session, amount of traffic downloaded, historical client information up to 6 months is stored in Cloud</li><li>For guest users using captive portal – depending on type of portal – Name, phone#, email address,</li><li>For social login Oauth type is stored (FB or Google etc.) BUT credentials are exchanged between client and FB/G+/LinkedIn and not stored or visible to Ruckus Cloud.</li></ul> Example Guest User data: <img alt="" height="441" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095pk&feoid=00N50000002Cf3M&refid=0EM2J000000mHAw" width="943"></img>

Ruckus Cloud has global data centers and stores certain client data there.

2019-03-18T13:57:59-0700 2019-03-18T18:00:07-0700 https://support.ruckuswireless.com/articles/000002831 2019-03-18T09:27:29-0700 monthly 0.8 admin,premium knowledge_article_3620 knowledge_article_3620 2019-03-18T09:27:29-0700 000002831 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance Performance, ZoneDirector, ZoneFlex Indoor Could iPhones on 5G experience lower performance when AP's 2.4G radio is enabled? With only one AP in place, it is also important that your iPhone is similarly in the same general location when we collect the AP support files. The device distance from an AP correlates directly to RSSI, which translates to effective data rates. Rule of Thumb: We consider a “good” client connection to have a PER (packet error rate) < 10%, and RSSI-PER >= 25. From 5G-only: -- wlan32 -- ADDR AID VLAN CHAN RSSI IDLE CAPS STATE HTCAPS ADMITTEDBW ac:fd:ec:7c:6f:5e 1Y 101 149 36 15 ESS PRIV QOS HT PWRMGT OWL 40MHz ST-PS SGI40 0 RSN AES AES PSK WME STA: ac:fd:ec:7c:6f:5e rx_data_frm 19693 rx_mgt_frm 95 rx_bytes 16195353 rx_dup 53 rx_wepfail 3 tx_data_frm 49454 tx_mgmt_frm 36 tx_bytes 64704901 tx_assoc 3 tx_auth 3 good_tx_frms 49490 good_rx_frms 19788 tx_retries 10360 tx_rate 90000 tx_kbps 66666 rx_crc_errs 2259 tx_per 2 ack_rssi 20 rx_rssi 32 The iPhone had fairly good RSSI of 32 = 90mb data rate From AP w/both radios enabled: -- wlan32 -- ADDR AID VLAN CHAN RSSI IDLE CAPS STATE HTCAPS ADMITTEDBW ac:fd:ec:7c:6f:5e 1Y 101 149 23 0 ESS PRIV QOS HT PWRMGT OWL 40MHz ST-PS SGI40 0 RSN AES AES PSK WME STA: ac:fd:ec:7c:6f:5e rx_data_frm 17 rx_mgt_frm 6 rx_bytes 1388 rx_dup 7 tx_data_frm 31 tx_mgmt_frm 8 tx_bytes 2873 tx_assoc 1 tx_auth 1 good_tx_frms 39 good_rx_frms 23 tx_retries 27113 tx_rate 19500 rx_crc_errs 16229 ack_rssi 20 rx_rssi 19 In this case, I suspect the iPhone was farther away from the AP, seeing just 19 RSSI, resulting in just 19.5 data rate.

Could iPhones on 5G experience lower performance when AP's 2.4G radio is enabled?

2019-03-18T09:27:29-0700 2019-03-18T12:00:10-0700 https://support.ruckuswireless.com/articles/000008765 2019-03-18T11:18:50-0700 monthly 0.8 admin,premium knowledge_article_3619 knowledge_article_3619 2019-01-17T16:36:32-0800 000008765 Validated (External) Premium Virtual smartcell gateway Configuration;Installation Configuration, Installation, virtual SmartCell Gateway Does Ruckus vSZ supports encrypted volumes in AWS? Currently Ruckus VSZ in AWS doesn't support encrypted Volumes.

Ruckus vSZ does not OFFICIALLY support encrypted volumes in AWS?

2019-03-18T11:18:50-0700 2019-03-18T12:00:07-0700 https://support.ruckuswireless.com/articles/000003320 2019-01-28T00:25:14-0800 monthly 0.8 admin,premium knowledge_article_1939 knowledge_article_1939 2014-08-21T09:52:59-0700 000003320 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway;Sz100;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartZone 100-D (SZ100-D) Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway, SZ100 What can cause APs to report "stuck beacons" or High Airtime utilization? The resolution will vary with the various environments and AP mounting locations. Resolutions may range from moving interference sources, or relocating APs away from them. Background scanning / Channelfly algorithms can be used, with optional specific channel avoidance to block known/discovered bad channels. Reduce number of WLANs advertised in dense AP deployments.

High interference can cause APs to raise NF and report stuck beacons

2019-01-28T00:25:14-0800 2019-03-15T12:15:45-0700 https://support.ruckuswireless.com/articles/000008515 2019-03-15T10:16:39-0700 monthly 0.8 admin,premium knowledge_article_3397 knowledge_article_3397 2018-10-24T14:01:18-0700 000008515 Validated (External) Premium Ruckus icx switches;Zoneflex indoor;Zoneflex outdoor Configuration;Installation Configuration, Installation, Ruckus ICX Switches, ZoneFlex Indoor, ZoneFlex Outdoor What Eth port Optics are compatible with ICX and AP products? See attached Ruckus Ethernet Optics data sheet of High Quality Tranceivers for ICX Switches and APs. Ruckus Optical Tranceivers Support Guidelines can be found <a href="https://www.ruckusnetworks.com/products/campus-network-switches/ruckus-icx-family-switches/optical-transceivers" target="_blank">Here.</a> Ruckus Optical Tranceivers and Cables for ICX family of switches, can be found <a href="https://www.ruckusnetworks.com/products/campus-network-switches/ruckus-icx-family-switches/optical-transceivers" target="_blank">Here.</a>

Only the listed product sheet listed 100MbE, 1GbE, 10GbE, 40GbE, 100GbE optics are approved and supported by Ruckus.

2019-03-15T10:16:39-0700 2019-03-15T12:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA22J0000008ntmSAA?attachment_index=0 2019-03-15T12:00:10-0700 monthly admin,premium knowledge_article_3397 knowledge_article_3397_attachment_1 ds-ethernet-optics-family.pdf 980970.0 application/pdf https://support.ruckuswireless.com/articles/000006912 2019-03-15T10:46:26-0700 monthly 0.8 admin,premium knowledge_article_2911 knowledge_article_2911 2017-12-12T15:03:21-0800 000006912 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure ICX 6450 optical interface to use SFP optic instead of SFP+ optic? If a 1Gbps optic transceiver (SFP) is inserted into a ICX 6450 device, users must configure the port using the speed-duplex 1000-full-master command at the interface level. Please see the example below: <code style="color: black; font-size: 13px;">ICX6450-24 Router(config)# <code style="color: red; font-size: 13px;">interface ethernet 1/2/2</code> ICX6450-24 Router(config-if-e10000-1/2/2)# </code><code style="color: red; font-size: 13px;">speed-duplex 1000-full-master</code>

How to configure ICX 6450 optical interface to use SFP optic instead of SFP+ optic?

2019-03-15T10:46:26-0700 2019-03-15T12:00:08-0700 https://support.ruckuswireless.com/articles/000005737 2019-03-14T15:54:51-0700 monthly 0.8 admin,premium knowledge_article_3618 knowledge_article_3618 2016-05-12T06:17:13-0700 000005737 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Security;Troubleshooting;Known issues and workarounds Security, Troubleshooting, Known Issues and Workarounds, ZoneDirector "Unable to connect, please contact Administrator." Error message on windows clients when connecting to 802.1X SSID Confirm if certificate is installed on NPS: Policies > Network Policies > open Properties for the policy > Constraints tab > Authentication Methods > Edit PEAP > select the cert under Certificate issued If it's not available, you can generate a self-signed certificate on IIS: --Open IIS Manager and navigate to the level you want to manage. --In Features view, double-click Server Certificates. --In the Actions pane, click Create Self-Signed Certificate. --On the Create Self-Signed Certificate page, type a friendly name for the certificate in the Specify a friendly name for the certificate box, and then click OK. If IIS is not installed, --Click Start, point to Administrative Tools and then click Server Manager. --In Roles Summary, click Add Roles. --Use the Add Roles Wizard to add the Web server role.

This article explains how to resolve client connectivity issue when windows clients are unable to connect to 802.1X SSID

2019-03-14T15:54:51-0700 2019-03-14T18:00:08-0700 https://support.ruckuswireless.com/articles/000004332 2019-03-14T10:46:17-0700 monthly 0.8 admin,premium knowledge_article_3616 knowledge_article_3616 2015-04-21T06:12:13-0700 000004332 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector Why is the configuration of DHCP not possible on AP while it was working in Standalone mode? Since, AP is managed by ZD, no configuration changes can be made on AP. All changes have to be made on ZD. Configuration on AP will be disabled. An alternative is to use local DHCP server on ZD. Log into ZD --> Configure --> system --> DHCP Server --> Allocate IP range. Note: ZD must have a manual IP configured for this to work.

DHCP can be configured on AP when it is on Standalone mode. Unable to configure DHCP server when managed by ZD

2019-03-14T10:46:17-0700 2019-03-14T12:00:10-0700 https://support.ruckuswireless.com/articles/000004331 2019-03-14T10:48:27-0700 monthly 0.8 admin,premium knowledge_article_3615 knowledge_article_3615 2015-04-21T06:22:00-0700 000004331 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Can one port on ZD be used for private network and the other to connect to external interface of router? No this is not possible. The two Eth ports on ZD are bridged ports.

The two Eth ports on a ZoneDirector are one logical interface, cannot be physically connected to two networks.

2019-03-14T10:48:27-0700 2019-03-14T12:00:09-0700 https://support.ruckuswireless.com/articles/000004368 2019-03-14T10:50:44-0700 monthly 0.8 admin,premium knowledge_article_3614 knowledge_article_3614 2015-04-21T06:18:51-0700 000004368 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management;Troubleshooting Configuration, System Network Management, Troubleshooting, ZoneDirector How to change IP addresses of ZDs when they are in smart redundacy mode? Step 1 : Disable smart redundancy on secondary ZD. Step 2 : Disable smart redundancy on primary ZD. Step 3 : Change the static IP address of primary ZD as desired. Login to ZD --> Configure --> System --> IPv4 Configuration --> Manual --> Change IP Address and other fields accordingly --> Click Apply Step 4 : Change the static IP address of secondary ZD as desired. Login to ZD --> Configure --> System --> IPv4 Configuration --> Manual --> Change IP Address and other fields accordingly --> Click Apply Step 5 : Change the Management interface IP address on both ZDs(Has to be the same) Step 6 : Enable Smart Redundancy on Primary ZD. Change Peer Device IP Address (i.e.,new secondary ZD IP Address). Apply Changes. Make sure smart redundancy is enabled on primary ZD first. Login to ZD --> Configure --> System --> Smart Redundancy --> Enter Peer Device IP Address --> Click Apply Step 7 : Enable Smart Redundancy on secondary ZD. Change Peer Device IP Address (i.e.,new primary ZD IP Address). Apply changes. Login to ZD --> Configure --> System --> Smart Redundancy --> Enter Peer Device IP Address --> Click Apply Step 8 : One ZD will be Active(Primary) and the other will be Standby(Secondary). Step 9 : Check if Access Points are connected on the Active ZD.

This article explains how to change Static IP of primary ZD, Secondary ZD and management interface when there are 2 ZDs on smart redundancy.

2019-03-14T10:50:44-0700 2019-03-14T12:00:08-0700 https://support.ruckuswireless.com/articles/000008862 2019-03-14T11:00:45-0700 monthly 0.8 admin,premium knowledge_article_3613 knowledge_article_3613 2019-03-14T11:00:00-0700 000008862 Validated (External) Premium Virtual smartcell gateway Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, virtual SmartCell Gateway Why is Dynamic VLAN option not available (greyed out) on Wired Ethernet Port Profiles Dynamic VLAN on Wired Ports requires RADIUS Authentication. This is available using 802.1x Authentication on the Ethernet ports. Since each client device needs to be put into a specific VLAN specified by standard RADIUS attributes - MAC based Authentication is required as Port Based Authentication only authenticates the first device to connect to the AP Ethernet port. Since RADIUS Authentication is required - first you need to create a RADIUS Authentication profile under Services & Profile > Authentication (the Ethernet profile does not provide the option to add this during configuration) <img alt="User-added image" height="281" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095oD&feoid=00N50000002Cf3M&refid=0EM2J000000mDiY" width="500"></img> Ethernet Port configurations can be created in two locations: 1. from the Services & Profiles > Tunnels & Ports > select Ethernet Port option, then select the Zone where you wish to create this profile and use the + create button <img alt="User-added image" height="149" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095oD&feoid=00N50000002Cf3M&refid=0EM2J000000mDin" width="500"></img> Create the profile - selecting Access Port type, 802.1x Authentication with MAC based Authentication. Once this is selected DVLAN option becomes available. Guest VLAN will be the VLAN clients traffic will be sent into until they are authenticated and assigned a VLAN from the RADIUS server. <img alt="User-added image" height="587" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095oD&feoid=00N50000002Cf3M&refid=0EM2J000000mDjC" width="500"></img> You must select an Authentication Server before the profile can be saved: <img alt="User-added image" height="191" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095oD&feoid=00N50000002Cf3M&refid=0EM2J000000mDjM" width="500"></img> Hit OK to save. The Ethernet profile is Added to the Access Point Model Based Configuration. This can be done at the the AP group level to apply it to only a group of AP's or overwritten at the individual AP level <img alt="User-added image" height="276" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095oD&feoid=00N50000002Cf3M&refid=0EM2J000000mDjR" width="500"></img> Note - there is an option to create the Ethernet Port Profile directly from this page by hitting the + button next to each port. You cannot change the basic configuration of the Ethernet Profile at this level. As stated previously - the Authentication Server profile must already be created before you can create an 802.1x Ethernet profile The same Ethernet Port Profile can be configured on any non-WAN Ethernet port on any model AP in the Zone. The attributes required in RADIUS are: <ul><li>64 – Tunnel-Type</li><li>65 – Tunnel-Medium-Type</li><li>81 – Tunnel-Private-Group-ID</li></ul> Example from RADIUS configuration: Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id = 248 - this is the client device VLAN ID You can find a walk through document on Dynamic VLAN here: <a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.ruckuswireless.com%2Fanswers%2F000001989&data=01%7C01%7CAlbert.Pierson%40arris.com%7C9f8c56ba9ba14685f3fe08d5a4904add%7Cf27929ade5544d55837ac561519c3091%7C1&sdata=O0VBcaQeMPMZqZfkOIMQTKGaDQZVABs0Z87vQxs2Z0A%3D&reserved=0" target="_blank">https://support.ruckuswireless.com/answers/000001989</a> this is based on ZD but the same applies to SZ

Dynamic VLAN option was greyed out on AP model specific Ethernet profiles until 802.1x Authentication was configured with MAC based authentication option

2019-03-14T11:00:45-0700 2019-03-14T12:00:06-0700 https://support.ruckuswireless.com/articles/000008890 2019-03-13T12:22:39-0700 monthly 0.8 admin,premium knowledge_article_3610 knowledge_article_3610 2019-03-13T11:43:31-0700 000008890 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to check ICMP-Redirect is enable? Use the command show ip Global Settings ttl: 64, arp-age: 10, bootp-relay-max-hops: 4 router-id : 0.0.0.0 enabled : UDP-Broadcast-Forwarding Source-Route Load-Sharing RARP VSRP ICMP-Redirect arp-port-move-syslog disabled: Route-Only Directed-Broadcast-Forwarding BGP4 IRDP Proxy-ARP RIP OSPF VRRP VRRP-Extended add-host-route-first In the output above, ICMP-Redirect is marked as in use in the enabled session. If it was disabled on the contrary, it would show in the disabled session.

Verify if ICMP redirect is disabled or enabled on Fastiron devices

2019-03-13T12:22:39-0700 2019-03-13T18:00:09-0700 https://support.ruckuswireless.com/articles/000001806 2015-10-19T16:41:52-0700 monthly 0.8 admin,premium knowledge_article_900 knowledge_article_900 2013-03-19T11:26:55-0700 000001806 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector How to perform a SpeedFlex test between a client and ZD? You can perform the SpeedFlex test between a specific client and AP by going into, Monitor -> Currently Active Clients. In the list of Clients, look for the MAC address of the client that you want to test, and then click the SpeedFlex link on the same row. The SpeedFlex Wireless Performance Test interface loads, showing a speedometer and the IP address of the client. You can test either UDP or TCP traffic at a time by default downlink and uplink option are selected. Hit the start button. The throughput test typically runs for 10-30 seconds after which it will provide the downlink and uplink speed output. <a href="https://wirednot.wordpress.com/2015/10/18/using-speed-tests-to-troubleshoot-wi-fi-understand-what-you-should-be-getting/" target="_blank">https://wirednot.wordpress.com/2015/10/18/using-speed-tests-to-troubleshoot-wi-fi-understand-what-you-should-be-getting/</a>

Speedflex test between a client and ZD

2015-10-19T16:41:52-0700 2019-03-11T14:34:07-0700 https://support.ruckuswireless.com/articles/000003948 2019-03-05T16:07:06-0800 monthly 0.8 admin,premium knowledge_article_3602 knowledge_article_3602 2015-03-17T16:28:48-0700 000003948 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, ZoneDirector Why guest access is redirecting the users to the FQDN of the ZD instead of the IP address of the ZD? - The reason why the guest users are getting redirected to the ZD name instead of the ZD IP address because there is a certificate installed on the ZD which has FQDN tagged to its IP address. For eg; ZD IP address : 192.168.15.70 FQDN : www.ruckuswireless.com So now all the users connecting to the guest WLAN will be redirected to the FQDN always.

An installed Certificate with ZD FQDN will direct Guest Access to the FQDN, not ZD IP address.

2019-03-05T16:07:06-0800 2019-03-05T18:00:10-0800 https://support.ruckuswireless.com/articles/000002658 2019-03-05T16:27:54-0800 monthly 0.8 admin,premium knowledge_article_3601 knowledge_article_3601 2014-02-14T13:06:56-0800 000002658 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor Can the L2TP tunneling option be used to only tunnel AP to ZD controller traffic and still use local internet outbreak from the AP? <div>L2TP tunnel is only a feature on Standalone AP’s. Zone Director uses LWAP tunnel protocol (somewhat similar).</div> <div> </div> <div>Each AP can have 2 different tunnel. The AP’s are controlled using an AES encrypted tunnel on UDP port 12223 … this is automatically created when the AP joins the ZD and is connected and must always function for the AP to be controlled.</div> <div> </div> <div>A second UDP tunnel on port 12222 is used for any WLAN traffic that is configured to be tunneled. The standard Ruckus Architecture is to switch wireless client traffic directly out the Access Point Ethernet port, either untagged or tagged into specific VLAN’s. You can configure tunnel mode per WLAN/SSID so that all client traffic is tunneled from the AP to the ZD and egresses the ZD Ethernet port (untagged or tagged per WLAN configuration). There is only one Data tunnel per AP to the Zone Director for all tunneled WLAN’s. It can be configured as encrypted (AES) or unencrypted (default) in the ZD (Configure::Services > Tunnel Configuration)</div> <div> </div> <div>ZD tunnel operation was originally only implemented to solve Layer 3 mobility issues when the AP’s must be placed in different IP subnets and VLAN’s could not be extended to each AP to keep clients in the same subnet when they roam. </div> <div> </div> <div>The ZD shares Ethernet connections and CPU for both AP control, management and tunnel traffic so tunnel throughput may be less then expected.</div>

L2TP is only available for Standalone APs. ZD managed APs have encrypted Control and Data plane tunnels using LWAPP.

2019-03-05T16:27:54-0800 2019-03-05T18:00:09-0800 https://support.ruckuswireless.com/articles/000001484 2019-03-05T16:29:49-0800 monthly 0.8 admin,premium knowledge_article_3600 knowledge_article_3600 2013-01-22T14:25:43-0800 000001484 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation Configuration, Installation, ZoneFlex Indoor, ZoneFlex Outdoor How do I configure L2TP tunneling on Standalone AP? 1. Go to Configuration > Internet. 2. Under L2TP Connection, click Enable. 3. In L2TP Network Server IP Address, type the IP address of the L2TP network Server (LNS) to which the device will connect. 4. In L2TP Network Server Password, type the L2TP server password. 5. If your network requires PPP authentication, configure the following fields under L2TP/PPP Authentication: a. Username: Type your appropriate PPP user name. b. Password: Type the password appropriate to the account. c. L2TP Tunnel Untag VLAN ID: Enter the Untag VLAN ID for the L2TP tunnel. 6. In Close WLAN When Tunnel Fail, select Enable if you want to disable the WLAN when the tunnel connection is lost. This prevents clients from remaining seemingly connected to the WLAN but without Internet connectivity. 7. Click Update Settings to save your settings.

L2TP tunneling in AP

2019-03-05T16:29:49-0800 2019-03-05T18:00:08-0800 https://support.ruckuswireless.com/articles/000003118 2019-03-05T16:41:26-0800 monthly 0.8 admin,premium knowledge_article_2413 knowledge_article_2413 2014-06-06T14:07:46-0700 000003118 Validated (External) Premium Zonedirector;R710;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;Ruckus R710 Known issues and workarounds Known Issues and Workarounds, ZoneDirector, R710 Can two Eth ports of 802.11ac APs use link aggregation (ie LACP) for higher LAN bandwidth? LACP bonding of two 802.11ac AP Eth ports is available since ZD 9.12 and SCG/vSCG/SZ 3.1.1 releases, but only for the R710 (wave 2 AP models) at this time. <h2>Caveats</h2> <ul><li>As of this writing, the controller and AP webUIs do not expose LACP settings or configuration. If an AP is configured via AP CLI to bond its Ethernet ports then any per-Ethernet port setting in the webUIs will be ignored by the AP.</li></ul> <ul><li>The R710’s 802.3af PoE Operating Mode, which limits AP functionality so as to remain within the standard 802.3af PoE power budget, requires that one Ethernet port be disabled. As such, an AP in 802.3af PoE Operating Mode cannot be configured to bond its Ethernet ports with LACP. </li></ul> This means LACP is supported as long as the AP is powered via: <ul style="list-style-type: circle;"><li>802.3at PoE+</li><li>Passive PoE injector capable of at least 20W</li><li>12V DC power supply</li></ul> Please refer to the ZoneFlex Indoor Access Point 100.x User Guide for further details on features & functionality limitations imposed under 802.3af PoE Operating Mode. <ul><li>In order for the AP to identify an 802.3at / PoE+ switch, the switch must support LLDP power over MDI (802.3p)</li></ul>

Customers ask if two 802.11ac AP Eth ports can be aggregated for increased LAN throughput with their higher WLAN data rates.

2019-03-05T16:41:26-0800 2019-03-05T18:00:07-0800 https://support.ruckuswireless.com/articles/000006461 2019-03-04T14:56:14-0800 monthly 0.8 admin,premium knowledge_article_3599 knowledge_article_3599 2017-09-29T03:06:34-0700 000006461 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Why was Customer unable to delete Maps on ZD 1200 after 10.x upgrade? After replication and investigating this internally, we found that the old maps can be deleted only after deleting all associated AP's (AP's placed on Map's) from the ZD. Login into ZD GUI >> Monitor >> Access Points >> Change Map Filter to Maps (up right corner) >> Placed At above location you will be able to find all AP's associated with the Map's. For Deleting AP's from the ZD : Login into ZD GUI >> Configure >> Access Points >> Select AP MAC and delete the AP. After deleting all above AP's, we were successfully able to delete all AP's from the ZD except for one (old map). The Map was actually the default sample map which will be present on the ZD, adn we suspect that you have mistakenly uploaded you own map file on this sample map and also changed the name. The issue was caused due to change in firmware version from 9.x.x to 10.x.x In 9.X version ZD Maps are dependent on different versions of Java and also have certain criteria of uploading the maps. However starting for 10 version this has been changed and the new UI is completely redesigned with traffic analysis, a new map view interface based on Google maps (default, but can be changed to Microsoft’s Bing if needed). This newly designed UI is not based on Java, customers are no longer required to upgrade their Java version in order to use the Indoor maps. Please go through below link for more info on whats new in 10 version : https://support.ruckuswireless.com/documents/1607-zonedirector-10-0-ga-what-s-new

There are Java changes in ZD 10.x Maps, that prevented deleting 9.x version

2019-03-04T14:56:14-0800 2019-03-04T18:00:12-0800 https://support.ruckuswireless.com/articles/000002122 2019-03-04T15:09:32-0800 monthly 0.8 admin,premium knowledge_article_3598 knowledge_article_3598 2019-03-04T15:09:32-0800 000002122 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor How to give Secondary RADIUS setting on a Standalone AP? Problem: Secondary RADIUS server feature on standalone AP WORKAROUND : This feature is applicable only on Hotspot service type of WLAN. We do not have on standard type of WLAN.

Secondary RADIUS server is only available while creating a HotSpot WLAN on Standalone APs.

2019-03-04T15:09:32-0800 2019-03-04T18:00:10-0800 https://support.ruckuswireless.com/articles/000004298 2019-03-04T15:20:55-0800 monthly 0.8 admin,premium knowledge_article_3596 knowledge_article_3596 2019-03-04T15:20:55-0800 000004298 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How to configure Hostpot Service when using Smart Redundancy on Management IP To make HotSpot services work, please enable the Walled Garden Option and allow port 9997 & 9998.

Customers must enable HotSpot ports 9997 and 9998 in a Walled Garden in multi-VLAN environment.

2019-03-04T15:20:55-0800 2019-03-04T18:00:08-0800 https://support.ruckuswireless.com/articles/000002550 2019-03-04T15:52:33-0800 monthly 0.8 admin,premium knowledge_article_3595 knowledge_article_3595 2014-01-26T11:15:43-0800 000002550 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Why clients are not seeing / connecting to the Guest network ? Be sure WLAN Service Schedule time period is valid / active.

2019-03-04T15:52:33-0800 2019-03-04T18:00:07-0800 https://support.ruckuswireless.com/articles/000008851 2019-02-27T13:47:39-0800 monthly 0.8 admin,premium knowledge_article_3594 knowledge_article_3594 2019-02-27T13:46:29-0800 000008851 Validated (External) Premium Ruckus cloud wifi Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud WiFi Why am I not allowed to change the address on default Venue named "My Venue"

Reason and workaround for a known issue WIFI-14785

2019-02-27T13:47:39-0800 2019-02-27T18:00:12-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000008oAdSAI?attachment_index=0 2019-02-27T18:00:12-0800 monthly admin,premium knowledge_article_3594 knowledge_article_3594_attachment_1 myvenue.pdf 101165.0 application/pdf https://support.ruckuswireless.com/articles/000002602 2019-02-27T16:16:25-0800 monthly 0.8 admin,premium knowledge_article_3593 knowledge_article_3593 2014-02-07T08:47:05-0800 000002602 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why APs are not connecting to the ZD after upgrading the Zone Director The error message when AP tried to join ZD after the upgrade: "Model [7372] is not supported; connection request from AP [MAC address] refused" After changing the Language back to the original settings, AP was successfully able to join the controller. NOTE: Review intended upgrade versions' Release Notes, to see if all current AP models are still supported.

After upgrading ZD from 9.6.1.0.50 to 9.7.0.0.220, not all model APs are joining to the ZD

2019-02-27T16:16:25-0800 2019-02-27T18:00:10-0800 https://support.ruckuswireless.com/articles/000002683 2019-02-27T16:19:21-0800 monthly 0.8 admin,premium knowledge_article_1244 knowledge_article_1244 2014-02-25T09:20:36-0800 000002683 Validated (External) Premium Zonedirector 1000;ZoneDirector 1000 Configuration;Firmware;Installation;Known issues and workarounds Configuration, Firmware, Installation, Known Issues and Workarounds, ZoneDirector 1000 What is the Upgrade path for ZD1000? Refer to the following upgrade path for Zone Director 1000 from any lower version to the latest/finally available version should follow this process : Note:- Before Upgrade please check if the current Access Points could be managed by the ZD1000 after upgrading. For example the APs that are supported from 9.4 and above version could not be managed by the ZD1000 like 7982, 7351 etc... 2.0.1 > 3.0.5.0.160 > 6.0.3.0.19 > 7.1.0.0.63 > 8.2.2.0.7 > 9.1.2.0.8 > 9.3.4.0.17 or 9.3.4.0.21(its Maintenance Release for ZD1000) Upgrade Procedure:- > Visit ZD's GUI à Administer à Upgrade à Browse the image file and click Upgrade button. > Once the ZD is upgraded to new firmware connect all APs to ZD to upgrade automatically. To download image files please find URL links below. Image 3.0 : <a href="https://support.ruckuswireless.com/software/51-zd1000-3-0-5-0-160-firmware-release" target="_blank">https://support.ruckuswireless.com/software/51-zd1000-3-0-5-0-160-firmware-release</a> Image 6.0 : <a href="https://support.ruckuswireless.com/software/41-zd1000-6-0-3-0-19-firmware-release" target="_blank">https://support.ruckuswireless.com/software/41-zd1000-6-0-3-0-19-firmware-release</a> Image 7.1 : <a href="https://support.ruckuswireless.com/software/61-zd1000-7-1-0-0-57-firmware-release" target="_blank">https://support.ruckuswireless.com/software/61-zd1000-7-1-0-0-57-firmware-release</a> Image 8.2 : <a href="https://support.ruckuswireless.com/software/79-zd1000-8-2-2-0-7-firmware-release" target="_blank">https://support.ruckuswireless.com/software/79-zd1000-8-2-2-0-7-firmware-release</a> Image 9.1 : <a href="https://support.ruckuswireless.com/software/111-zd1000-9-1-2-0-8-firmware-release" target="_blank">https://support.ruckuswireless.com/software/111-zd1000-9-1-2-0-8-firmware-release</a> Image 9.3 : <a href="https://support.ruckuswireless.com/software/374-zd1000-9-3-4-0-21-mr4-refresh-2-software-release" target="_blank">https://support.ruckuswireless.com/software/374-zd1000-9-3-4-0-21-mr4-refresh-2-software-release</a> Note :- 9.3.4.0.21 is the last planned release for ZD1000. If you have configured the ZoneDirector prior to upgrades, it is best practice to save a Backup configuration, and embed version-specific digits (ie '820053') to remind you what version it's saved from. If you ever Downgrade (Upgrade to a lower version), you will lose ZD Configration unless you have a previously saved Backup from that version. Save a backup before each upgrade, and add the digits from the version to the filename, to identify which one it came from, ie. ZD_debug_v710057_081815_09_23.dbg to remind you, in case you ever decide to roll back. <div id="cke_pastebin" style="width: 1px; height: 1px;"> </div>

This article provides version details for ZD1000 upgrade to last supported firmware image.

2019-02-27T16:19:21-0800 2019-02-27T18:00:09-0800 https://support.ruckuswireless.com/articles/000005314 2019-02-26T14:14:35-0800 monthly 0.8 admin,premium knowledge_article_3591 knowledge_article_3591 2015-11-24T15:17:06-0800 000005314 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware;Troubleshooting Configuration, Firmware, Troubleshooting, Unleashed Unleashed: Manual Process to check Firmware availabilty, and supported AP models? 1. Ping the host unleashedsupport.ruckuswireless.com. This will tell you if there is connectivity to the server, but won't tell you if there are images available. 2. To see if images are available point a browser to the URL below, with the desired AP model, ie "R500". <img alt="URL of server" height="17" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095eI&feoid=00N50000002Cf3M&refid=0EM500000005T1J" width="500"></img> <a href="https://unleashedsupport.ruckuswireless.com/unleashed/source.xml?model=R500&sn=123" target="_blank">https://unleashedsupport.ruckuswireless.com/unleashed/source.xml?model=R500&sn=123</a> 3. You should see output that looks like... <pre> {"xml":"\u003Cmodel name=\"R600\"\u003E\n\t\u003Cversion number=\"200.0.9.9.483\" proto=\"http\" ip=\"unleashedupdate.ruckuswireless.com\" port=\"80\" path=\"200.0.9.9/unleashed_r500_r600_200.0.9.9.483.bl7\" image_size=\"17944576\" /\u003E\n\t\u003Cversion number=\"200.0.9.9.544\" proto=\"https\" ip=\"unleashedupdate.ruckuswireless.com\" port=\"443\" path=\"200.0.9.9/unleashed_r500_r600_200.0.9.9.544.bl7\" image_size=\"18296832\" /\u003E\n\t\u003Cversion number=\"200.0.9.9.565\" proto=\"https\" ip=\"unleashedupdate.ruckuswireless.com\" port=\"443\" path=\"200.0.9.9/unleashed_r500_r600_200.0.9.9.565.bl7\" image_size=\"17293312\" /\u003E\n\t\u003Cversion number=\"200.0.9.9.607\" proto=\"https\" ip=\"unleashedupdate.ruckuswireless.com\" port=\"443\" path=\"200.0.9.9/unleashed_r500_r600_200.0.9.9.607.bl7\" image_size=\"17297408\" /\u003E\n\t\u003Cversion number=\"200.0.9.9.608\" proto=\"https\" ip=\"unleashedupdate.ruckuswireless.com\" port=\"443\" path=\"200.0.9.9/unleashed_r500_r600_200.0.9.9.608.bl7\" image_size=\"17297408\" is_latest=\"true\" /\u003E\n \u003C/model\u003E","isSuccess":true,"message":""}</pre> 4. Make sure you see images loaded and you see the message which I highlighted for you. <pre> _latest=\"true\</pre> 5. If you see this message the server is up and running. Note: You can check to see which models are currently supported by Unleashed using the above URL and changing AP model numbers. An example screen shot message returned for an Unsupported AP model is like below: <a href="https://unleashedsupport.ruckuswireless.com/unleashed/source.xml?model=7372&sn=123" target="_blank">https://unleashedsupport.ruckuswireless.com/unleashed/source.xml?model=7372&sn=123</a> <pre> {"xml":null,"isSuccess":false,"message":"Model number is not valid"}</pre>

This article contains manual instructions to determine if the Unleashed firmware server is available, and what models of Unleashed AP are supported.

2019-02-26T14:14:35-0800 2019-02-26T18:00:08-0800 https://support.ruckuswireless.com/articles/000008848 2019-02-22T15:24:31-0800 monthly 0.8 admin,premium knowledge_article_3587 knowledge_article_3587 2019-02-22T15:23:17-0800 000008848 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, Unleashed Why are the RADIUS in my Unleashed radio getting disabled when no Default Gateway is configured. Disable MESH Configure Default Gateway to some device that will respond to pings on Wired Network A simple rasberry-pi device has been suggested as cheap device to reply to this test

Unleashed Access Points become unreachable if no Default gateway is configured with MESH enabled

2019-02-22T15:24:31-0800 2019-02-22T18:00:07-0800 https://support.ruckuswireless.com/articles/000003060 2019-01-26T18:47:48-0800 monthly 0.8 admin,premium knowledge_article_1557 knowledge_article_1557 2014-05-19T10:23:36-0700 000003060 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway SCG services cannot start unless they are configured correctly and active. Make sure all three network planes are connected and reachable. Same logic applies when you see cluster out of service error during the SCG setup wizard. You first need to connect the cluster interface to the network and make sure corresponding IP is reachable. Check the network configuration of the SCG: <div>SCG-1# show interface</div> <div> Interfaces</div> <div> ----------------------------------------------------------------</div> <div> Interface : Control</div> <div> IP Mode : Static</div> <div> IP Address : 10.9.175.2</div> <div> Subnet Mask : 255.255.255.0</div> <div> Gateway : 10.9.175.254</div> <div> </div> <div> Interface : Cluster</div> <div> IP Mode : Static</div> <div> IP Address : 10.9.176.2</div> <div> Subnet Mask : 255.255.255.0</div> <div> Gateway : 10.9.176.254</div> <div> </div> <div> Interface : Management</div> <div> IP Mode : Static</div> <div> IP Address : 10.9.0.60</div> <div> Subnet Mask : 255.255.255.0</div> <div> Gateway : 10.9.0.254</div> <div> </div> <div> </div> <div> Default Gateway Interface : Management</div> <div> Primary DNS Server : 8.8.8.8</div> <div> Secondary DNS Server : 4.4.4.4</div> <div> </div> <div> User Defined Interfaces</div> <div> ----------------------------------------------------------------</div> <div> IP Address : 10.9.175.100</div> <div> Subnet Mask : 255.255.255.0</div> <div> Gateway : 10.9.175.254</div> <div> VLAN : 40</div> <div> Physical Interface : Control</div> <div> Service : Hotspot</div> <div> </div> <div>SCG-1#</div> <div> Ping each gateway for each interface from the SCG CLI and also ping each SCG interface from devices on the network in the appropriate subnet. Also note: Control, Management and Cluster Planes must be in DIFFERENT IP subnets and VLAN's. The control plane can be in the same subnet as the Data Plane.</div>

After initial configuration or reconfiguration after Factory Default - SCG services will not start

2019-01-26T18:47:48-0800 2019-02-14T16:21:08-0800 https://support.ruckuswireless.com/articles/000004377 2019-01-26T19:25:44-0800 monthly 0.8 admin,premium knowledge_article_2527 knowledge_article_2527 2015-04-15T11:24:44-0700 000004377 Validated (External) Premium Virtual smartcell gateway Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, virtual SmartCell Gateway Why is my vSCG showing "Plane out of service" Typically, it takes about 10 minutes for the WEB to come Online and another 5 minutes for the Cassandra database to come online after powering up the vSCG.

VSCG: Why is my vSCG showing "Plane out of service"

2019-01-26T19:25:44-0800 2019-02-14T15:10:24-0800 https://support.ruckuswireless.com/articles/000008842 2019-02-13T09:33:02-0800 monthly 0.8 admin,premium knowledge_article_3583 knowledge_article_3583 2019-02-13T09:30:57-0800 000008842 Validated (External) Premium Virtual smartcell gateway Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, virtual SmartCell Gateway How often does the AP ARP for its GW? Design intent

Customer is seeing AP ARP for its GW every second.

2019-02-13T09:33:02-0800 2019-02-13T12:00:07-0800 https://support.ruckuswireless.com/articles/000006015 2019-02-04T08:20:21-0800 monthly 0.8 admin,premium knowledge_article_3576 knowledge_article_3576 2016-08-31T11:56:47-0700 000006015 Validated (External) Premium Zonedirector;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartZone 100-D (SZ100-D) Performance Performance, ZoneDirector, SZ100 what is maximum power consumption of ZD/SZ100 device Power consumption information.

Power consumption

2019-02-04T08:20:21-0800 2019-02-04T12:00:07-0800 https://support.ruckuswireless.com/articles/000001146 2019-02-03T18:10:09-0800 monthly 0.8 admin,premium knowledge_article_429 knowledge_article_429 2012-03-21T12:00:13-0700 000001146 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Flexmaster;FlexMaster Performance;Configuration;Firmware;Installation;Troubleshooting Performance, Configuration, Firmware, Installation, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor, FlexMaster How do I push firmware upgrades to my standalone APs at a certain time? Are there any ports I need to open if the FM is behind a firewall? You can perform upgrades and push configuration templates by going to configure section in the FM. follow these steps to perform an upgrade: <ul><li>Make sure the firmware for your particular AP model is already uploaded to the FM</li><li>Create a new firmware upgrade task by going to “Firmware Upgrade” page</li><li>This page will give you an option to choose devices and schedule the upgrade to happen at a certain time</li></ul> AP uses web port as the destination for firmware upgrades once it is under FM control. If the FM is behind a firewall you need to open web port so APs can download the firmware. This will be port # 80 using TCP. You might have already opened it if you wanted to manage FM from outside the company firewall.

How do I push firmware upgrades to my standalone APs at a certain time? Are there any ports I need to open if the FM is behind a firewall?

2019-02-03T18:10:09-0800 2019-02-04T00:00:08-0800 https://support.ruckuswireless.com/articles/000002233 2019-02-03T18:31:56-0800 monthly 0.8 admin,premium knowledge_article_3575 knowledge_article_3575 2014-03-27T15:05:44-0700 000002233 Validated (External) Premium Ruckus icx switches;Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Mediaflex;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;MediaFlex 2501;MediaFlex 2900;MediaFlex 2811;MediaFlex 5811;MediaFlex 7811;MediaFlex 7211;SmartCell Gateway 200 (SCG200) Installation;Known issues and workarounds Installation, Known Issues and Workarounds, Ruckus ICX Switches, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, MediaFlex, SmartCell Gateway How do I dispose of my old Ruckus electronic waste? Ruckus Wireless strongly suggests our customers to dispose of all electronic waste properly and legally. Laws and regulations vary between States and Countries. Please consult with the local waste removal facility in your area concerning the laws and regulations. For US, additional information can be found at https://www.epa.gov/recycle

How do I dispose of my Ruckus e-waste?

2019-02-03T18:31:56-0800 2019-02-04T00:00:06-0800 https://support.ruckuswireless.com/articles/000003946 2019-02-03T16:35:42-0800 monthly 0.8 admin,premium knowledge_article_1549 knowledge_article_1549 2015-01-19T00:51:19-0800 000003946 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector Why does Guest Pass fail to print using IE 11 Window IE 11 has a specific compatibility mode which can cause issues with some browser operations and java based functions. If the "Use compatibility view for intranet sites" is checked, this makes IE pretend, or act like, it is an earlier version of IE. Unticking the check box fixes this issue in most every case and restores the java content to allow printing.

When printing Guest passes with IE 11, the print option is not displayed properly - causing issues with printing the generated Guest Pass or sending it via SMS_email. Other browsers work fine, so this issue is only appearing with Internet Explorer.

2019-02-03T16:35:42-0800 2019-02-03T18:00:10-0800 https://support.ruckuswireless.com/articles/000006333 2019-02-03T17:48:22-0800 monthly 0.8 admin,premium knowledge_article_2665 knowledge_article_2665 2017-05-15T11:13:47-0700 000006333 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Why SCG could not communicate to the SPoT Server? Since there was no traffic leaving the SCG to the external world, we suspected that there is some internal firewall restriction. We checked the outbound firewall on SCG and found it was enabled: SCG01# show running-config outbound-firewall outbound firewall enable We created a rule allowing 8883 port on the outbound firewall: SCG01(config-outbound-firewall)# ip-rule SPoT out tcp dport 8883 SCG01(config-outbound-firewall)# exit SCG01(config)# exit SCG01# show running-config outbound-firewall outbound firewall enable description=user define ud_SPoT service=out=dport/8883/tcp interface=all We could also disable outbound firewall if it is not being used: SCG01(config)# no outbound-firewall Do you want to continue to disable (or input 'no' to cancel)? [yes/no] yes Moment we created a rule to allow 8883, SCG could talk to the SPoT server: <img alt="User-added image" height="272" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Xb&feoid=00N50000002Cf3M&refid=0EM50000000hZLY" width="979"></img>

This article explains a scenario on why SCG could not communicate to the SPoT Server

2019-02-03T17:48:22-0800 2019-02-03T18:00:09-0800 https://support.ruckuswireless.com/articles/000001814 2019-02-03T15:48:21-0800 monthly 0.8 admin,premium knowledge_article_3557 knowledge_article_3557 2013-03-19T11:26:55-0700 000001814 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation;System network management Configuration, Installation, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor Is it possible to restrict users connecting to a Standalone AP from accessing Internal devices? We can separate guest network from other traffic by using VLAN's and following below steps: <ol><li align="LEFT" style="">Customer needs to set up internal network in one VLAN and then have another VLAN(s) for Wireless guest network; and disable Inter-VLAN routing between the two subnets. </li><li align="LEFT" style="">AP should be connected to a trunk port allowing the multiple VLANs.</li><li align="LEFT" style="">Tag SSID's with appropriate VLAN ID. </li></ol> For example: The Internal network is in VLAN 10 and there are two SSIDs in the Wireless network which are supposed to be in VLAN 20 and VLAN 30. So AP should be connected to a tagged port allowing VLAN 20 and VLAN 30 and have the AP in Management VLAN 10. In order to tag SSID 1 for VLAN 20 and SSID 2 for VLAN 30, go to Configuration :: Wireless and select the WLANs one by one and mention the Access VLAN 20 and 30 for SSID 1 and SSID 2 respectively. <img alt="Configuring Vlan 20 for Guest SSID" height="460" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095XC&feoid=00N50000002Cf3M&refid=0EM50000000LqRu" width="707"></img> Note: There should be separate IP pools configured on the External DHCP server for each VLAN which provides IP address to the clients. Also this setup won't work with Local Subnets on the AP without a Wired network router.

Restrict users connecting to a guest SSID from accessing Internal Network

2019-02-03T15:48:21-0800 2019-02-03T18:00:08-0800 https://support.ruckuswireless.com/articles/000002466 2019-02-03T17:58:37-0800 monthly 0.8 admin,premium knowledge_article_3574 knowledge_article_3574 2014-01-14T12:30:25-0800 000002466 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Configuration;System network management Performance, Configuration, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor Can local subnet users from a standalone AP access other clients in the LAN? If the Local Subnet option is enabled on the WLAN, the users gets an IP address from AP and that IP gets NATed to AP's IP and reaches the gateway. As the packet comes out with the AP's IP address it can communicate with LAN and other resources. So the workaround is don't enable Local Subnet in this case, you should configure a WLAN with vlan and map it to External DHCP so the clients wont communicate with internal resources and if you can configure ACL on the Router to block ICMP packet for this vlan, even the users cant get ping response from the Default Gateway.

This article explains how the Client Isolation works when Local Subnet is enabled for a wlan on Standalone AP

2019-02-03T17:58:37-0800 2019-02-03T18:00:06-0800 https://support.ruckuswireless.com/articles/000004689 2015-06-12T08:02:20-0700 monthly 0.8 admin,premium knowledge_article_1935 knowledge_article_1935 2015-06-12T08:02:20-0700 000004689 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Known issues and workarounds Known Issues and Workarounds, SZ100 How to add the control Nat Ip for SZ-100 device The current version of 3.1.0 wont support the cli command to set "Control NAT" feature on the SZ-100. RuckOS 3.1.1 will support SZ100 behind NAT for control plane only. RuckOS 3.2 will support SZ100 behind NAT for control and data plane.

Unable to add Control-Nat IP on SZ-100 device

2015-06-12T08:02:20-0700 2019-02-02T14:05:59-0800 https://support.ruckuswireless.com/articles/000001595 2019-01-31T14:11:49-0800 monthly 0.8 admin,premium knowledge_article_2601 knowledge_article_2601 2013-02-08T07:07:58-0800 000001595 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to find the Transmit power (TX power) of an AP in Solo or ZD managed mode? There are two different ways to find the TX power of an AP, one is by logging into the CLI of AP and the second is by using ZD CLI. Please find the attached document for both the cases. A radio Tx power setting of Max = Full power, Half = -3dB from Full, 1/4 = -6dB from Full, 1/8 = -9dB from Full.

How to find the TX transmit power for Standalone AP and ZD managed AP.

2019-01-31T14:11:49-0800 2019-01-31T18:00:06-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PCk4CAG?attachment_index=0 2019-01-31T18:00:06-0800 monthly admin,premium knowledge_article_2601 knowledge_article_2601_attachment_1 Tx Power - AP & ZD CLI.pdf 217677.0 application/pdf https://support.ruckuswireless.com/articles/000006593 2017-12-12T16:04:05-0800 monthly 0.8 admin,premium knowledge_article_2817 knowledge_article_2817 2017-12-12T16:04:05-0800 000006593 Validated (External) Premium Icx 6450;Icx 6610;Icx 6650;Icx 7450;Icx 7750;Fastiron gs series;Fastiron cx series;Ruckus ICX 6610 Campus Switches;Brocade ICX 6650 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches;Brocade FastIron CX Series Switches Configuration Configuration, ICX 6450, ICX 6610, ICX 6650, ICX 7450, ICX 7750, FastIron GS Series, FastIron CX Series How to configure multicast? Enable IGMP snooping and MLD snooping under VLANs on the access switches in the school and district office. ! Configure IGMP snooping on per-VLAN basis. SCH-ACCESS-101(config)# vlan 1011 SCH-ACCESS-101(config-vlan-1011)# multicast passive ! Configuration for enabling MLD snooping on per-VLAN basis. SCH-ACCESS-101(config)# vlan 1011 SCH-ACCESS-101(config-vlan-1011)# multicast6 passive ! A passive configuration means that the device is a non-querier, which means that it listens for IGMP/MLD queries and forwards them to the entire VLAN, which eventually reaches the PIM-enabled router. Enable the IPv4 and IPv6 PIM Sparse protocols on the distribution switch in the school and district office. ! Configure PIM on the school’s distribution switch. All PIM-enabled routers use the district office’s distribution switch as the RP. The RP is statically configured on all PIM routers. SCH-DIST-201(config)# router pim SCH-DIST-201(config-pim-router)# rp-address 10.1.1.5 SCH-DIST-201(config)# ipv6 router pim SCH-DIST-201(config-ipv6-pim-router)# rp-address fdd7:b215:19cb:4552:10:1:1:5 ! Configure PIM on the Layer 3 interfaces on all PIM-enabled routers. SCH-DIST-201(config)# interface ve 1011 SCH-DIST-201(config-vif-1011)# ip pim-sparse SCH-DIST-201(config-vif-1011)# ipv6 pim-sparse SCH-DIST-201(config)# interface ethernet 1/2/2 SCH-DIST-201(config-vif-3921)# ip pim-sparse SCH-DIST-201(config-vif-3921)# ipv6 pim-sparse ! Configure a loopback address to be used as the multicast RP on the district office’s distribution switch. DO-DIST-301(config)# interface loopback 1 DO-DIST-301(config-lbif-1)# ip address 10.1.1.5 255.255.255.255 DO-DIST-301(config-lbif-1)# ip pim-sparse DO-DIST-301(config-lbif-1)# ip ospf area 0 DO-DIST-301(config-lbif-1)# ipv6 address fdd7:b215:19cb:4552:10:1:1:5/128 DO-DIST-301(config-lbif-1)# ipv6 ospf area 0 DO-DIST-301(config-lbif-1)# ipv6 pim-sparse ! Configure static RPs on the district office’s distribution switch for IPv4 and IPv6 multicast. DO-DIST-301(config)# router pim DO-DIST-301(config-pim-router)# rp-address 10.1.1.5 DO-DIST-301(config-pim-router)# ipv6 router pim DO-DIST-301(config-ipv6-pim-router)# rp-address fdd7:b215:19cb:4552:10:1:1:5 ! Show command to verify the RP configuration. DO-DIST-301# show ip pim rp-set Static RP --------- Static RP count: 1 10.1.1.5 Number of group prefixes Learnt from BSR: 0 No BSR RP-Set present. DO-DIST-301# show ipv6 pim rp-set Static RP --------- Static RP count: 1 fdd7:b215:19cb:4552:10:1:1:5 Number of group prefixes Learnt from BSR: 0 No BSR RP-Set present. ! Show command to verify PIM neighbors. DO-DIST-301# show ip pim neighbor --------+---------+---------------+--------+---+---------+---------+-----+----------------+-----------+----+ Port |PhyPort |Neighbor |Holdtime|T |PropDelay|Override |Age |UpTime |VRF |Prio | | |sec |Bit|msec |msec |sec| | | --------+---------+---------------+--------+---+---------+---------+-----+----------------+-----------+----+ v3931 e2/1/24 172.25.3.1 105 1 500 3000 25 6d 00:20:28 default 1 v3932 e1/1/25 172.25.9.2 105 1 500 3000 23 00:20:23 default 1 Total Number of Neighbors : 2 ! Show command to verify multicast routes. DO-DIST-301# show ip pim mcache IP Multicast Mcache Table Entry Flags : SM - Sparse Mode, SSM - Source Specific Multicast, DM - Dense Mode RPT - RPT Bit, SPT - SPT Bit, LSRC - Local Source, LRCV - Local Receiver HW - HW Forwarding Enabled, FAST - Resource Allocated, TAG - Need For Replication Entry REGPROB - Register In Progress, REGSUPP - Register Suppression Timer MSDPADV - Advertise MSDP, NEEDRTE - Route Required for Src/RP, PRUN - DM Prune Upstream Interface Flags: IM - Immediate, IH - Inherited, WA - Won Assert, MCTPEERF - Traffic Forw By Cluster Peer CCEP MJ - Membership Join, MI - Membership Include, ME - Membership Exclude BR - Blocked RPT, BA - Blocked Assert, BF - Blocked Filter, BI - Blocked IIF Total entries in mcache: 10 1 (*, 225.1.1.1) RP 10.1.1.5, in NIL (NIL), Uptime 00:00:11 (SM) No upstream neighbor because RP 10.1.1.5 is itself Flags (0x00220480) SM RPT slow ports: ethe 2/1/24 AgeSltMsk: 0, IPMC: NotReq, RegPkt: 0, profile: none Forwarding_oif: 1, Immediate_oif: 1, Blocked_oif: 0 L3 (SW) 1: e2/1/24(VL3931), 00:00:11/199, Flags: IM 2 (172.25.33.220, 225.1.1.1) in e2/1/48 (e2/1/48), Uptime 00:05:36, Rate 0 (SM) Source is directly connected. RP 10.1.1.5 Flags (0x2042c4c1) SM SPT LSRC HW FAST fast ports: ethe 2/1/24 AgeSltMsk: 1, IPMC: 44 , RegPkt: 0, AvgRate: 0, profile: none Forwarding_oif: 1, Immediate_oif: 1, Blocked_oif: 0 L3 (HW) 1: e2/1/24(VL3931), 00:00:11/199, Flags: IM IH Src-Vlan: 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 (172.25.33.224, 225.1.1.5) in e2/1/48 (e2/1/48), Uptime 00:05:13, Rate 0 (SM) Source is directly connected. RP 10.1.1.5 Flags (0x2042c4c1) SM SPT LSRC HW FAST fast ports: ethe 2/1/24 AgeSltMsk: 1, IPMC: 44 , RegPkt: 0, AvgRate: 0, profile: none Forwarding_oif: 1, Immediate_oif: 1, Blocked_oif: 0 L3 (HW) 1: e2/1/24(VL3931), 00:00:11/199, Flags: IM IH Src-Vlan: 1 Number of matching entries: 10

Enable IGMP snooping and MLD snooping under VLANs on the access switches in the school and district office.

2017-12-12T16:04:05-0800 2019-01-30T01:32:39-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tvr3CAC?attachment_index=0 2019-01-30T01:32:39-0800 monthly admin,premium knowledge_article_2817 knowledge_article_2817_attachment_1 ka25B000000CdGWQA0_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000008810 2019-01-28T10:10:31-0800 monthly 0.8 admin,premium knowledge_article_3571 knowledge_article_3571 2019-01-28T10:10:01-0800 000008810 Validated (External) Premium Virtual smartcell gateway Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, virtual SmartCell Gateway Why is the HS2.0 Friendly name not available on some AP that are in the same Zone/WLAN There is no permanent resolution. An ER-6950 was open but has been close since unable to replicate after 1 month of monitoring.

Hotspot 2.0 Friendly name not available on some AP in the same Zone/WLAN

2019-01-28T10:10:31-0800 2019-01-28T12:00:06-0800 https://support.ruckuswireless.com/articles/000002108 2019-01-28T00:30:58-0800 monthly 0.8 admin,premium knowledge_article_490 knowledge_article_490 2013-06-13T16:26:29-0700 000002108 Validated (External) Premium Zoneflex 7025 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneFlex 7025 Why does my Telematrix/Cetis 9600IP VoIP phone not work with my 7025? Ruckus Engineering has investigated the problem of the 7025 failing to power the Telematrix 9600IP phone. Testing has revealed that the in-rush current of this particular VoIP phone is very high and violates the IEEE specification. It reaches 537mA where the IEE specified limit is 450mA. Please refer to the magenta trace in the screenshot below which is a meaurement that was performed on the device. The out-of-spec in-rush current of the phone is believed to cause the PoE controller chip on the 7025 to reject the device. This is not believed to be a 7025 product problem. As far as Ruckus is aware, this is the only phone model where this failure on 7025 PoE output (LAN4) has been observed. An effective work-around for this issue is to power the 7025 with either PoE injector or DC adapter. The PoE controller chip itself sources its power from the PoE or DC input of the AP and references everything it measures from this power source. Voltage from PoE injector or DC adapter is typically more stable than that from a PoE switch and it appears that the PoE controller is able to tolerate the phone’s in-rush current when powered by one of these more stable sources. <img alt="Telematrix inrush surge" height="314" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Sg&feoid=00N50000002Cf3M&refid=0EM50000000LJ47" width="500"></img> An additional consideration but not directly related, is that the 7025 AP doesn’t recognize the power class of connected PoE Out devices. It also doesn’t know the Classification (Class3 versus Class4) of the PoE switch that it is being powered from. This means that it is up to the PoE switch to decide to allocate 15.4w or 30w. If the total power consumption out of AP and attached PoE Out device violates the power limit of the PoE switch, the switch will cut power.

Telematrix and Cetis 9600IP VoIP phones do not power on when connected to the PoE LAN 4 Port of a 7025.

2019-01-28T00:30:58-0800 2019-01-28T06:00:18-0800 https://support.ruckuswireless.com/articles/000004751 2019-01-28T02:02:15-0800 monthly 0.8 admin,premium knowledge_article_2393 knowledge_article_2393 2015-06-23T04:21:15-0700 000004751 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Firmware;Installation Firmware, Installation, SZ100 What to check before upgrading SZ-100? Please review the following points carefully before proceeding with the upgrade procedure: • Although the software upgrade process has been designed to preserve all controller settings, Ruckus Wireless strongly recommends that you back up the cluster before performing an upgrade. Having a cluster backup will ensure that you can easily restore the system if the upgrade process fails for any reason. For information on how to back up the cluster, refer to Creating a Cluster Backup in Administration Guide. • Ruckus Wireless strongly recommends that you ensure that controller interface cables are not altered during the upgrade procedure. • Ruckus Wireless strongly recommends that you ensure that the power supply is not disrupted during the upgrade procedure. • Before upgrading the controller, verify that the timestamp of the most recent upgrade or fresh installation process is correct and not later than the current date and time. You can find this information in the System Upgrade History section of the Administration > Upgrade page. If the timestamp is later than the current date and time, DO NOT upgrade the controller. Contact Ruckus Wireless Support for more information. • **It is also strongly recommended to thoroughly review the software Release Notes before upgrading**. There is always important useful information to ensure the upgrade goes smoothly. For example, Performing Preupgrade Validation and using the "Extend Upload Precheck Timeout" Script. Also be sure to refer to the Release Notes and verify you are following the recommended/supported upgrade path specific the software release.

What to check before upgrading SZ-100?

2019-01-28T02:02:15-0800 2019-01-28T06:00:13-0800 https://support.ruckuswireless.com/articles/000003605 2019-01-28T00:17:37-0800 monthly 0.8 admin,premium knowledge_article_1371 knowledge_article_1371 2014-11-06T12:25:39-0800 000003605 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How do I configure FreeRADIUS to return a Group attribute for role assignment on the ZD Make sure that basic radius authentication works with FreeRADIUS then make the following modification: FreeRADIUS files that need to be modified: /etc/raddb/dictionary /etc/raddb/users <img alt="User-added image" height="487" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095SR&feoid=00N50000002Cf3M&refid=0EM50000000LaaP" width="500"></img> Add the ruckus attribute to the FreeRADIUS dictionary file: <div style="margin-left: 40px;">############################################################################ # -*- text -*- # # dictionary.ruckus # # place the following line into the "dictionary" file of your FreeRadius installation # $INCLUDE dictionary.ruckus # # For use with FreeRadius and ZoneDirector # # rm, 17.09.2008 # # Vendor-ID for Ruckus Wireless, Inc.: 25053 # VENDOR Ruckus 25053 BEGIN-VENDOR Ruckus ATTRIBUTE Ruckus-User-Manager-Groups 1 string # Value Format: group_attr1,group_attr2,... ATTRIBUTE Ruckus-User-Groups 1 string ATTRIBUTE Ruckus-Sta-RSSI 2 integer ATTRIBUTE Ruckus-SSID 3 string ATTRIBUTE Ruckus-WlanID 4 integer ATTRIBUTE Ruckus-Location 5 string ATTRIBUTE Ruckus-Grace-Period 6 integer ATTRIBUTE Ruckus-SCG-CBlade-IP 7 integer ATTRIBUTE Ruckus-SCG-DBlade-IP 8 integer ATTRIBUTE Ruckus-Session-Type 125 integer ATTRIBUTE Ruckus-Acct-Status 126 integer END-VENDOR Ruckus ############################################################################</div> <div style="margin-left: 40px;"> </div> Original (default) dictionary file: <img alt="User-added image" height="482" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095SR&feoid=00N50000002Cf3M&refid=0EM50000000LaaU" width="500"></img> FreeRADIUS dictionary file modified to include Ruckus Attribute: <img alt="User-added image" height="787" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095SR&feoid=00N50000002Cf3M&refid=0EM50000000LaaZ" width="500"></img> Add the "Ruckus-User-Groups" and the value to the user's profile: <img alt="User-added image" height="305" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095SR&feoid=00N50000002Cf3M&refid=0EM50000000Laae" width="500"></img> Create a role in the Roles and Policy with the exact string value, "staff" in this example: <img alt="User-added image" height="498" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095SR&feoid=00N50000002Cf3M&refid=0EM50000000Laaj" width="500"></img> Test the FreeRADIUS AAA and the Group return attribute should be returned and used to assign the user to the "staff" role: <img alt="User-added image" height="277" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095SR&feoid=00N50000002Cf3M&refid=0EM50000000Laao" width="500"></img>

2019-01-28T00:17:37-0800 2019-01-28T06:00:12-0800 https://support.ruckuswireless.com/articles/000004970 2019-01-28T01:00:24-0800 monthly 0.8 admin,premium knowledge_article_2076 knowledge_article_2076 2015-08-03T22:43:05-0700 000004970 Validated (External) Premium Zonedirector;Zoneflex 7025;H500;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;Ruckus H500 Configuration;Installation Configuration, Installation, ZoneDirector, ZoneFlex 7025, H500 Can I manage 7025 and H500 APs simultaneously with a ZD running on 9.10 version? ZF7025 APs are not supported on version 9.10 and H500 APs need minimum 9.10 version to be supported by ZD. So, we cannot manage 7025 and H500 APs simultaneously with a ZD running on 9.10 version. Also, H500 is not supported on ZD 1100.

Is it possible to manage 7025 and H500 APs simultaneously with a ZD running on 9.10 version?

2019-01-28T01:00:24-0800 2019-01-28T06:00:11-0800 https://support.ruckuswireless.com/articles/000004363 2019-01-28T02:41:31-0800 monthly 0.8 admin,premium knowledge_article_1743 knowledge_article_1743 2015-04-14T14:48:26-0700 000004363 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance Performance, ZoneDirector How does ZD learn's client host name? You would see the client host name in DHCP request packet, you would need to extend bootstrap protocol request packet and check for option 12 which specifies the client host name.

2019-01-28T02:41:31-0800 2019-01-28T06:00:08-0800 https://support.ruckuswireless.com/articles/000001215 2019-01-27T20:44:30-0800 monthly 0.8 admin,premium knowledge_article_384 knowledge_article_384 2012-03-21T12:01:04-0700 000001215 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector How can I discover the Ruckus ZoneDirector so I can use a Web browser to see the Web UI? You can locate the Ruckus ZoneDirector using a UPnP client application, which is available on all Windows systems. Go to the ‘My Network Places’ window and make sure the ‘Show icons for networked UPnP devices’ is enabled. Once the Ruckus ZoneDirector icon appears, double-click the icon to start your default browser to connect to the management page. Or, right-click on the Ruckus ZoneDirector icon, select Properties and find the Device Address. And then manually enter the IP address onto the address bar of your browser. Note that UPnP requires that your administrative PC be on the same IP subnet of the Ruckus ZoneDirector. Also note that in factory default state, and in case the ZoneDirector is NOT connected to a network with a DHCP server, ZoneDirector assigns itself the address of 192.168.0.2.

How can I discover the Ruckus ZoneDirector so I can use a Web browser to see the Web UI?

2019-01-27T20:44:30-0800 2019-01-28T00:00:21-0800 https://support.ruckuswireless.com/articles/000004180 2019-01-27T18:08:10-0800 monthly 0.8 admin,premium knowledge_article_1633 knowledge_article_1633 2015-03-13T01:25:55-0700 000004180 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Why is rogue detection apparently not activated on my APs 5GHZ Interface? Known issue on 9.8 SW - upgrade SW

I enabled rouge AP detection, and I see rouges listed on the 2.4 band, and I am sure I should see detection on the 5GHz band, but its not there while it seems to be enabled correctly.

2019-01-27T18:08:10-0800 2019-01-28T00:00:20-0800 https://support.ruckuswireless.com/articles/000003012 2019-01-27T20:00:18-0800 monthly 0.8 admin,premium knowledge_article_2064 knowledge_article_2064 2014-05-08T13:02:03-0700 000003012 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why would Mesh APs not connect with expected Root APs? Analysis shows MAP sees other Mesh AP as better RSSI connection choice.

AP's failing to mesh with Root AP's but will mesh with another Mesh AP?

2019-01-27T20:00:18-0800 2019-01-28T00:00:18-0800 https://support.ruckuswireless.com/articles/000005872 2019-01-27T21:12:42-0800 monthly 0.8 admin,premium knowledge_article_2365 knowledge_article_2365 2016-06-30T16:46:26-0700 000005872 Validated (External) Premium P300;Ruckus P300 Performance;Known issues and workarounds Performance, Known Issues and Workarounds, P300 Is there a fix for P300 not passing VTP between Cisco VLAN Trunk Protocol enabled switches? Contact Ruckus Tech Support and request the patch for ER-3592: P300 ptp backhaul not passing VTP between Cisco VLAN Trunk Protocol enabled switches.

Version 100.1.0.9.46 appears to have problem passing VTP between Cisco switches on both sides, fixed with a bug patch.

2019-01-27T21:12:42-0800 2019-01-28T00:00:17-0800 https://support.ruckuswireless.com/articles/000006432 2019-01-27T21:50:07-0800 monthly 0.8 admin,premium knowledge_article_3492 knowledge_article_3492 2017-09-26T15:40:59-0700 000006432 Validated (External) Premium Spot lbs;Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Security;Known issues and workarounds Security, Known Issues and Workarounds, SPoT LBS, SPoT Why are we seeing SSL error on the SPoT calibrator app? - Issue is with the unsigned certificate on the vSPoT. The unsigned SSL certs are rejected by the iOS framework and hence login fails on the mobile app. - On the browser you see the alert "Your connection is not private" OR "The site security certificate is not trusted" which from the browser you can circumvent by proceeding anyways. - From the app the iOS blocks the connection. Also, since Android is tightening up it's security we are seeing similar issues on latest versions of the Android OS. - To fix all these issues the solution is to add signed certificates on the vSPoT.

SPoT calibrator app on iOS doesn't let the user login to the vSPoT if there is no valid signed certificate on it.

2019-01-27T21:50:07-0800 2019-01-28T00:00:15-0800 https://support.ruckuswireless.com/articles/000005313 2019-01-27T21:22:24-0800 monthly 0.8 admin,premium knowledge_article_2223 knowledge_article_2223 2015-11-24T23:05:59-0800 000005313 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Known issues and workarounds Known Issues and Workarounds, SmartCell Insight Why do I get the message "Google maps are not available right now" when downloading PDF reports? Upgrade to SCI 2.0 where support for embedding Google maps in PDF output is supported

This article explains why when downloading the PDF of the Network Health Dashboard in SCI 1.x, no Google maps are included.

2019-01-27T21:22:24-0800 2019-01-28T00:00:12-0800 https://support.ruckuswireless.com/articles/000002562 2019-01-27T21:38:27-0800 monthly 0.8 admin,premium knowledge_article_708 knowledge_article_708 2014-01-28T15:38:33-0800 000002562 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why am I only able to generate DPSK keys for one of my WLANs when I have multiple DPSK WLANs configured? 1. Check and make sure that "Zero-IT Activation" and "Dynamic PSK" is checked for all desired WLANs: DPSK-WLAN1: <img alt="User-added image" height="652" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Qu&feoid=00N50000002Cf3M&refid=0EM50000000LQKq" width="500"></img> DPSK-WLAN2: <img alt="User-added image" height="654" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Qu&feoid=00N50000002Cf3M&refid=0EM50000000LQKv" width="500"></img> 2. Make sure that the Roles and Policies is configured properly: Note: For firmware 10.x and above, navigate to Services & Profiles > Roles <img alt="User-added image" height="420" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Qu&feoid=00N50000002Cf3M&refid=0EM50000000LQL0" width="500"></img> 3. Now check the DPSK key generation drop down list again: <img alt="User-added image" height="75" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Qu&feoid=00N50000002Cf3M&refid=0EM50000000LQL5" width="500"></img>

*One Guest WLAN *Two DPSK wlan *DPSK batch generation only showing one target WLAN

2019-01-27T21:38:27-0800 2019-01-28T00:00:11-0800 https://support.ruckuswireless.com/articles/000004232 2019-01-27T21:42:18-0800 monthly 0.8 admin,premium knowledge_article_1664 knowledge_article_1664 2015-03-20T15:59:27-0700 000004232 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector What is the baud rate to access Zone Director's console? When trying to access ZD via console cable these value's needs to be as mentioned. Ruckus Zone Director Console baud rate is 115200. and we use 1 stopbit, 1 data bit, no parity, no flowcontrol.

2019-01-27T21:42:18-0800 2019-01-28T00:00:10-0800 https://support.ruckuswireless.com/articles/000006486 2019-01-27T21:51:57-0800 monthly 0.8 admin,premium knowledge_article_2684 knowledge_article_2684 2017-11-10T09:28:15-0800 000006486 Validated (External) Premium Zonedirector 1100;Zonedirector 3000;Zonedirector 5000;Zonedirector 1200;ZoneDirector 1100;ZoneDirector 3000;ZoneDirector 5000;ZoneDirector 1200 Configuration;System network management Configuration, System Network Management, ZoneDirector 1100, ZoneDirector 3000, ZoneDirector 5000, ZoneDirector 1200 How to enable client IP details export, to Syslog server? After doing this, client IP details will be sent to Syslog server when a client connects to SSID.

Customer wants to see connected client's IP address in his external Syslog server.

2019-01-27T21:51:57-0800 2019-01-28T00:00:09-0800 https://support.ruckuswireless.com/articles/000002687 2019-01-27T22:03:37-0800 monthly 0.8 admin,premium knowledge_article_767 knowledge_article_767 2014-02-21T02:51:35-0800 000002687 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance Performance, ZoneDirector How to limit bandwidth per user based for .1x wlans? Wlan have an option where you can setup the uplink/downlik bandwidth but it is common for the all the user who are connecting to the wlan. If an administrator like to provide different bandwidth limitations to different users who are connecting on the same wlan by using RADIUS attributes, below attributes would be needed to add on Radius server. • WISPr vendor specific attributes (vendor id = 14122) • (7) WISPr Bandwidth-Max-Up: Maximum transmit rate (bits/second) • (8) WISPr Bandwidth-Max-Down: Maximum receive rate (bits/second)

RADIUS attribute to limit the bandwidth on wlan, based on the user profile.

2019-01-27T22:03:37-0800 2019-01-28T00:00:08-0800 https://support.ruckuswireless.com/articles/000004858 2019-01-27T17:39:10-0800 monthly 0.8 admin,premium knowledge_article_2013 knowledge_article_2013 2015-07-09T10:21:00-0700 000004858 Validated (External) Premium Zoneflex outdoor Configuration Configuration, ZoneFlex Outdoor If I add a pair of external 5G antennas to T301e, does it disable internal ones? The T301e outdoor AP offers configuration to select the internal BeamFlex antennas or external antennas for 5G use. External antennas extend range for mesh backhaul purposes.

T301e outdoor AP offers selection of either internal 5G BeamFlex, or external pair of antennas.

2019-01-27T17:39:10-0800 2019-01-27T18:00:10-0800 https://support.ruckuswireless.com/articles/000002113 2019-01-27T15:53:06-0800 monthly 0.8 admin,premium knowledge_article_513 knowledge_article_513 2013-07-01T17:13:29-0700 000002113 Validated (External) Premium Sz300;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Scg200;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, SZ300, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SCG200, virtual SmartCell Gateway, SZ100 How to retrieve the AP's data such as Serial number, MAC address, Antenna info, etc., from the Command Line Interface? Executing the following command will retrieve the Access points information such as serial number,MAC address,Antenna info,etc. From the Access point CLI:- rkscli:get boarddata To know this information from the Zonedirector CLI for all the connected Access points. Please execute the above command in debug mode ruckus>enable ruckus#debug ruckus(debug)#remote_ap_cli -A "get boarddata" To know this information for an individual Access point from ZD CLI:- ruckus(debug)#remote_ap_cli -a <MAC address of an AP> "get boarddata" For a vSZ/SZ managed Access Points, you can only see this information only on one AP at a time from the CLI of vSZ/SZ. Please run the below command. ruckus# remote ap-cli <MAC address of an AP> "get boarddata"

How to retrieve Access Point board information

2019-01-27T15:53:06-0800 2019-01-27T18:00:09-0800 https://support.ruckuswireless.com/articles/000005124 2019-01-27T17:30:08-0800 monthly 0.8 admin,premium knowledge_article_2548 knowledge_article_2548 2015-09-23T01:54:37-0700 000005124 Validated (External) Premium Zonedirector;Virtual smartcell gateway;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, virtual SmartCell Gateway, SZ100 Why iOS9 devices are unable to connect to the SSID? Issue is fixed in ZD firmware version 9.12.2 and vSZ/SZ version 3.2.0.0.790. Client Fingerprinting is working as expected now.

This article gives information on why the iOS9 devices are unable to connect to the WLANs.

2019-01-27T17:30:08-0800 2019-01-27T18:00:07-0800 https://support.ruckuswireless.com/articles/000001240 2019-01-27T08:00:51-0800 monthly 0.8 admin,premium knowledge_article_23 knowledge_article_23 2012-03-21T12:01:27-0700 000001240 Validated (External) Premium Zoneplanner;ZonePlanner Performance;Configuration;Installation;System network management Performance, Configuration, Installation, System Network Management, ZonePlanner How to see or edit AP properties - Ruckus Wireless Airmagnet planner? Overview: After you are finished placing APs where you expect to have them. AP properties options allows to see what is set by default which you can further change if information is known like AP model, selecting appropriate antenna pattern and enabling 802.11 n support. This allows you to determine what number and placement of APs will give you the optimal coverage for your site. <ul><li>Once AP’s are placed on the map, select the cursor button from the toolbar.</li><li>Right click on the AP on the map. See below picture:</li></ul> <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Nb&feoid=00N50000002Cf3M&refid=0EM50000000L9By"></img> <ul><li>Select or click on the properties option. You shall window, popping out.</li></ul> <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Nb&feoid=00N50000002Cf3M&refid=0EM50000000L9C3"></img> <ul><li>You shall be able to make changes for the AP for following option using properties. See below table:</li></ul> <img alt="User-added image" height="346" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Nb&feoid=00N50000002Cf3M&refid=0EM50000000L9C8" width="500"></img> <ul><li>Click OK. Your AP will now be placed. Modify any others you placed earlier following this same procedure.</li><li>Click Refresh button on your toolbar to see your wireless coverage.</li><li>You may move the APs by selecting the cursor tool and dragging them where you wish.</li></ul>

How to see or edit AP properties - Ruckus Wireless Airmagnet planner

2019-01-27T08:00:51-0800 2019-01-27T12:00:23-0800 https://support.ruckuswireless.com/articles/000004153 2019-01-27T07:09:39-0800 monthly 0.8 admin,premium knowledge_article_1629 knowledge_article_1629 2015-03-10T14:47:07-0700 000004153 Validated (External) Premium Zoneflex 7731 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex 7731 7731 What channels can I use in the USA? Country codes control which channels are available for use by 7731 Root Bridges. Use the Configuration::Wireless page, Channel drop-down menu to display outdoor channels available in the USA. Use the Status::Wireless page to view 7731 selected channel and if set manually or by SmartSelect. <img alt="7731 RB Channel Configuration" height="477" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095N2&feoid=00N50000002Cf3M&refid=0EM50000000Lfs6" width="500"></img> <img alt="7731 RB Channel Status" height="393" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095N2&feoid=00N50000002Cf3M&refid=0EM50000000LfsB" width="500"></img>

FCC rules stipulate the 5G 802.11 channels for outdoor AP use in the USA

2019-01-27T07:09:39-0800 2019-01-27T12:00:21-0800 https://support.ruckuswireless.com/articles/000004763 2019-01-27T10:50:26-0800 monthly 0.8 admin,premium knowledge_article_1977 knowledge_article_1977 2015-06-26T03:07:41-0700 000004763 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway What service impact is expected on Ruckus products when a leap second is applied?

This article describes the impact of applying a positive or negative leap second to Ruckus hardware.

2019-01-27T10:50:26-0800 2019-01-27T12:00:20-0800 https://support.ruckuswireless.com/articles/000005744 2019-01-27T10:06:15-0800 monthly 0.8 admin,premium knowledge_article_2319 knowledge_article_2319 2016-05-17T16:42:32-0700 000005744 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Troubleshooting Firmware, Troubleshooting, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway What are the ports/protocols seen in a packet trace for AP communication for SZ connection and conversion? See attached .pdf of AP packet trace ports and protocols used.

See the packet trace of AP port/protocol communiations for SmartZone connection and conversion.

2019-01-27T10:06:15-0800 2019-01-27T12:00:16-0800 http://support.ruckuswireless.com/article_attachments/kA25000000007vKCAQ?attachment_index=0 2019-01-27T12:00:16-0800 monthly admin,premium knowledge_article_2319 knowledge_article_2319_attachment_1 SZ_AP_BootSequence&Ports-3-2-1.pdf 279664.0 application/pdf https://support.ruckuswireless.com/articles/000004804 2019-01-27T09:11:58-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_2542 knowledge_article_2542 2015-07-01T05:15:53-0700 000004804 Validated (External) Public Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware Configuration, Firmware, SmartCell Gateway, virtual SmartCell Gateway How to restrict FTP passive method based upgrade method to use limited number of ports? APs use passive FTP mode for their firmware upgrade. During the upgrade process, AP will get a list of ports to use from the controller. This number can vary anywhere from 1024 to 65535 (in case of SmartZone controllers, ports from 16384 to 65000 are considered to be ephemeral ports so they will be used for passive FTP). Some firewalls read this input from controller and open the corresponding ports automatically. If you don't want this or you want to restrict this port range to certain range, use the following command sequence: TestSCG> en Password: ********** TestSCG# conf TestSCG(config)# lwapp2scg TestSCG(config-lwapp2scg)# pasv-port 20000 20001 You can type same port number for both minimum port and the maximum port. Once this done, controller will push this port list to AP each time there is an upgrade. You simply need to keep the corresponding TCP ports opened on your firewall.

This article contains the command to use if you would like to restrict list of ports for FTP download of AP firmware from the controller.

2019-01-27T09:11:58-0800 2019-01-27T12:00:15-0800 https://support.ruckuswireless.com/articles/000006240 2019-01-27T06:35:59-0800 monthly 0.8 admin,premium knowledge_article_2578 knowledge_article_2578 2017-02-06T16:23:57-0800 000006240 Validated (External) Premium Flexmaster;FlexMaster Configuration;Firmware Configuration, Firmware, FlexMaster How to install jemalloc on linux? FM 9.13, introduces MariaDB. So operators must install jemalloc before they can install/upgrade Steps to install jemalloc: 1. Download jemalloc based on your linux version from http://pkgs.org/download/libjemalloc.so.1()(64bit) 2. Upload jemalloc to the FM server and install it with command rpm -Uvh jemalloc-3.6.0-1.el6.x86_64.rpm 3. You can now proceed with the FM installation or upgrade to 9.13 from below versions.

9.13 version of FM requires installation of jemalloc before installing FlexMaster on any supported platforms

2019-01-27T06:35:59-0800 2019-01-27T12:00:14-0800 http://support.ruckuswireless.com/article_attachments/kA250000000LbLfCAK?attachment_index=0 2019-01-27T12:00:14-0800 monthly admin,premium knowledge_article_2578 knowledge_article_2578_attachment_1 jemalloc-3.6.0-1.el6.x86_64.rpm 102624.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000001217 2019-01-27T06:25:09-0800 monthly 0.8 admin,premium knowledge_article_373 knowledge_article_373 2012-03-21T12:01:11-0700 000001217 Validated (External) Premium Unleashed;Zonedirector;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, Unleashed, ZoneDirector What is Zero-IT Wireless Activation? If Zero-IT Activation is enabled for a WLAN, when a user connects to the Wireless Connection Activation page (https://ZoneDirector IP or URL/activate) using their web browser and enters a valid user name and password, the Ruckus ZoneDirector automatically generates a custom-provisioned configuration installer (including the SSID and a unique passcode), and certificate if needed, for the user to download. Once the user executes the configuration installer, the PC will automatically connect to the provisioned wireless network with the correct policies. By default, Ruckus ZoneDirector has Zero-IT Activation enabled for the WLAN created by the ZoneDirector Setup Wizard. Zero-IT Wireless Activation is compatible with most Windows and Mac OS clients as well as many mobile devices including iPhone, iPad, Windows Mobile and Android OS devices.

What is Zero-IT Wireless Activation?

2019-01-27T06:25:09-0800 2019-01-27T12:00:12-0800 https://support.ruckuswireless.com/articles/000001392 2019-01-27T07:24:07-0800 monthly 0.8 admin,premium knowledge_article_3567 knowledge_article_3567 2013-01-16T19:33:40-0800 000001392 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Troubleshooting Configuration, Firmware, Troubleshooting, ZoneDirector How to force an AP to upgrade the firmware from the ZD using a CLI command? <div>Login to the AP CLI using PUTTY application.</div> <div> </div> <div>Execute the below command from the AP CLI.</div> <div> </div> <div>rkscli: fw force-update <ZD IP address></div>

CLI command which forces AP to upgrade the firmware from the ZD

2019-01-27T07:24:07-0800 2019-01-27T12:00:11-0800 https://support.ruckuswireless.com/articles/000003150 2019-01-27T07:47:21-0800 monthly 0.8 admin,premium knowledge_article_3566 knowledge_article_3566 2014-06-18T15:12:14-0700 000003150 Validated (External) Premium Sz300;Unleashed;Zonedirector;Scg200;Virtual smartcell gateway;Sz100;SmartZone 300 (SZ300);SmartZone 300 (SZ300) - Federal;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Performance;Configuration;Security Performance, Configuration, Security, SZ300, Unleashed, ZoneDirector, SCG200, virtual SmartCell Gateway, SZ100 What is 802.11k and how it works? Radio Resource Management (802.11k) The 802.11k protocol provides mechanisms for APs and clients to dynamically measure the available radio resources. In an 802.11k enabled network, APs and clients can send neighbor reports, beacon reports, and link measurement reports to each other. This allows the APs and clients to take appropriate connection actions. To facilitate roaming, an 11k capable client associated with an AP sends a request for a list of neighbor APs. The request is in the form of an 802.11 management frame known as an action packet. The AP responds with a list of neighbor APs on the same WLAN with their Wi-Fi channel numbers. The AP response is also an action packet. From the response frame, the client knows which APs are candidates for the next roam. The use of 802.11k radio resource management (RRM) processes allows the client to roam efficiently and quickly. With the neighbor list information, the 11k capable client does not need to probe all of the 2.4 GHz and 5 GHz channels to find an AP it can roam to. Not having to probe all of the channels reduces channel utilization on all channels, thereby increasing bandwidth on all channels. It also reduces roam time and improves the decisions made by the client. Additionally, it increases battery life of the device because it is neither changing the radio configuration for each channel nor sending probe requests on each channel. It avoids the device having to process all of the probe response frames.

What is 802.11k and how it works?

2019-01-27T07:47:21-0800 2019-01-27T12:00:10-0800 https://support.ruckuswireless.com/articles/000002925 2019-01-27T09:26:47-0800 monthly 0.8 admin,premium knowledge_article_911 knowledge_article_911 2014-04-16T00:25:22-0700 000002925 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation Configuration, Installation, ZoneFlex Indoor, ZoneFlex Outdoor What commands should I use to enable local subnet on a standalone AP? First you need to create a subnet using "set subnet" command. Then you have to enable the DHCP server using the same command but using different options. 1. Creating a subnet. This requires you to specify a name like "local-subnet1", IP address and subnet mask for the network, and access VLAN ID. Please see the sample below. <div> rkscli: set subnet local-subnet1 enable ipaddr 192.168.10.1 mask 255.255.255.128 untag 1</div> <div>+ /etc/init.d/nat enable br1 192.168.10.1 255.255.255.128</div> <div>Loading NAT/Firewall modules...</div> <div>Enabling NAT...exec _add_nat for br0</div> <div>+ /etc/init.d/nat hotspot br0 10.1.0.1</div> <div>OK</div> <div>rkscli: </div> 2. Enable a DHCP server to hand-out IP addresses. This requires specifying starting IP and number of DHCP IPs to hand-out. Please see the sample below. <div>rkscli: set subnet local-subnet2 dhcps enable starting-ipaddr 192.168.10.2 user-number 50</div> <div>Stopping dnsmasq ...</div> <div>Stopping dnsmasq ...</div> <div>Starting dnsmasq ...</div> <div>OK</div> <div>rkscli:</div>

This article talks about commands to use to create local subnet on a standalone AP

2019-01-27T09:26:47-0800 2019-01-27T12:00:09-0800 https://support.ruckuswireless.com/articles/000002088 2019-01-27T10:01:02-0800 monthly 0.8 admin,premium knowledge_article_460 knowledge_article_460 2013-06-06T08:34:13-0700 000002088 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Security Security, ZoneDirector Is user/AP database stored internally within the ZoneDirector partition encrypted? The data within the ZoneDirector is not encrypted and the information will be stored in similar fashion of a linux partition. However, it is not possible to modify/view the content without a SSH or https access to it.

ZoneDirector's Internal database security

2019-01-27T10:01:02-0800 2019-01-27T12:00:08-0800 https://support.ruckuswireless.com/articles/000005567 2019-01-26T18:22:26-0800 monthly 0.8 admin,premium knowledge_article_3476 knowledge_article_3476 2016-04-27T16:30:57-0700 000005567 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security Configuration, Security, SmartCell Gateway, virtual SmartCell Gateway How to get rid of the certificate error presented to Users when they connect to an SSID using WEB authentication? There is a page in the SCG WEB UI under Configure Systems where you can upload CA signed certificates and assign them to the appropriate service. For WEB-Authentication, the actual login page is hosted by the AP so you need to apply the well known CA certificate to the AP portal Service: If you have an existing Wild Card certificate make sure you have all intermediate certificates back to the root and upload these from the upload section. Please use the Certificate Request CSR to request a new certificate based on the existing identity of the SCG if you are not trying to use an existing wildcard certificate.

Installing a certificate signed by a Well Known CA for Web Authentication

2019-01-26T18:22:26-0800 2019-01-27T00:00:46-0800 https://support.ruckuswireless.com/articles/000006437 2019-01-26T18:26:43-0800 monthly 0.8 admin,premium knowledge_article_3333 knowledge_article_3333 2017-09-17T19:58:08-0700 000006437 Validated (External) Premium P300;Ruckus P300 System network management System Network Management, P300 Does P300 bridge supports LACP. <img alt="User-added image" height="273" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Hd&feoid=00N50000002Cf3M&refid=0EM50000000VG7G" width="500"></img> LACP will work on P300 APs when Gateway detection and Loop detection is disabled. Disable Gateway Detection: Disabling Mesh gateway detection can be useful in situations where the customer wants to deploy P300s with the gateway located on the NRB side. In the original mesh implementation, if a MAP detects the gateway through its Ethernet port, it will disconnect its uplink connection. Use this command to disable the mesh gateway detection mechanism on the NRB side to support this scenario. Command: rkscli: set meshcfg gw_detect disable. OK Disable Loop Detection: Disabling loop detection features can be useful in situations where the customer wants to install an additional pair of P300 bridges for redundancy. The original Ruckus mesh loop detection mechanism will prevent Spanning Tree Protocol (STP) from working properly. Although redundancy can still be achieved, some customers prefer to rely on STP to make the decisions. To support this scenario, a new AP CLI command allows customers to disable all P300 loop detection mechanisms in both the RB and NRB. Use the following command to disable the following features for loop detection: • Disable mesh eBeacon • Disable loop guard in bridge • Disable STP filter in mesh WLAN interface Command: rkscli: set meshcfg loop_detect disable OK OUTPUT: rkscli: get meshcfg Gateway Detection Timeout: 30 No ethernet neighbor communication Status: Disabled Loop Detection Status: Disabled Gateway Detection Status: Enabled For more information please go through the following given link: <a href="https://support.ruckuswireless.com/documents/1924-zoneflex-p300-version-100-1-0-9-57-ga-refresh-3-release-notes" target="_blank">https://support.ruckuswireless.com/documents/1924-zoneflex-p300-version-100-1-0-9-57-ga-refresh-3-release-notes</a>

P300 supports LACP after disabling 1) Mesh gateway detection 2) loop detection features

2019-01-26T18:26:43-0800 2019-01-27T00:00:45-0800 https://support.ruckuswireless.com/articles/000001905 2019-01-26T18:29:02-0800 monthly 0.8 admin,premium knowledge_article_278 knowledge_article_278 2013-04-02T10:15:34-0700 000001905 Validated (External) Premium Flexmaster;FlexMaster Performance;Configuration;System network management Performance, Configuration, System Network Management, FlexMaster Does FM support API ? Yes API is supported by FlexMaster. <div>FM currently supports read-only API operations, which means that NBI clients can receive information from FlexMaster but they cannot configure FlexMaster settings or control FlexMaster managed devices. Please refer to attached API guide for FM.</div>

API Guide is attached.

2019-01-26T18:29:02-0800 2019-01-27T00:00:43-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PDYTCA4?attachment_index=0 2019-01-27T00:00:43-0800 monthly admin,premium knowledge_article_278 knowledge_article_278_attachment_1 NBI API guide for FM.pdf 222365.0 application/pdf https://support.ruckuswireless.com/articles/000002112 2019-01-26T18:30:44-0800 monthly 0.8 admin knowledge_article_3565 knowledge_article_3565 2013-07-01T17:11:22-0700 000002112 Validated (External) Internal Zoneflex 7363;Zoneflex 7352 Known issues and workarounds Known Issues and Workarounds, ZoneFlex 7363, ZoneFlex 7352 Why is my PoE switch not able to power all of our 7352 or 7372 APs? INTERNAL ONLY - DO NOT DISTRIBUTE When ZoneFlex 7352 or 7372 APs are plugged in to adjacent ports on certain PoE switch models, some AP’s fail to power up. On specific PoE switches which have out-of-spec DC isolation between ports, some APs may fail to power up when plugged in to adjacent ports. The effective work-around is to move APs to non-adjacent ports. Please note that the problem does not occur with the majority of PoE switch models. Ruckus has investigated the issue in depth and has developed a hardware fix that resolves the interoperability issue. Here are the starting serial numbers for the 7372, 7372-E and 7352 that have the hardware fix are not susceptible to this adjacent port PoE issue. 7372: 211302002240 7372-E: 231302005984 7352: 231302008761 Any serial numbers equal to or higher than this indicate newer APs that have the hardware fix. If a Customer reports this particular issue and wants to RMA the device for this issue, it does not mean that an AP from before this starting serial number range has to be automatically replaced as an RMA. Escalate the case to a Team Lead or a Ruckus TSM for guidance.

This indicates the starting serial numbers for the 7352, 7372 and the 7372-E units that are not susceptible to the adjacent PoE Port power on issue

2019-01-26T18:30:44-0800 2019-01-27T00:00:42-0800 https://support.ruckuswireless.com/articles/000005967 2019-01-26T18:34:27-0800 monthly 0.8 admin,premium knowledge_article_2397 knowledge_article_2397 2016-08-05T13:24:52-0700 000005967 Validated (External) Premium Zoneplanner;ZonePlanner Configuration Configuration, ZonePlanner Does Ruckus Zone Planner supports floor plans in PDF format? Ruckus Planner is a OEM limited version of Air Magnet survey tool (now owned by Net Scout), limited to the offline planning feature. Unfortunately - you cannot import MAP's in PDF format. They must be in a basic graphic format .bmp, dib, dwg, dxf, emf, gif, vsd, jpg or wmf. <img alt="User-added image" height="306" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095IR&feoid=00N50000002Cf3M&refid=0EM500000009hoC" width="500"></img> Ruckus only licensed one version of this product - 8.7.2 ( the version available on your My Airmagnet site when you login using the Ruckus provided license). It cannot be upgraded. Please see the Ruckus Knowledge Base article: <a href="https://support.ruckuswireless.com/answers/000003529" target="_blank" title="https://support.ruckuswireless.com/answers/000003529">https://support.ruckuswireless.com/answers/000003529</a>

Please I need a confirmation if Ruckus Zone Planner supports floor plans in PDF format? I can't import PDF files. Maybe I need to do an upgrade to be able to use PDF files. Please help.

2019-01-26T18:34:27-0800 2019-01-27T00:00:37-0800 https://support.ruckuswireless.com/articles/000004306 2019-01-26T18:38:01-0800 monthly 0.8 admin,premium knowledge_article_1699 knowledge_article_1699 2015-04-03T14:19:05-0700 000004306 Validated (External) Premium Scg200;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Security Security, SCG200, virtual SmartCell Gateway How to separate certificate (public key) and private key from the .pfx file? Private key mismatch. Using OpenSSL converted .pfx to public key and private key.

Uploading the Wildcard certificate gives error “Unable to upload the private key. Reason: The key file is not valid”

2019-01-26T18:38:01-0800 2019-01-27T00:00:33-0800 https://support.ruckuswireless.com/articles/000001453 2019-01-26T18:48:39-0800 monthly 0.8 admin,premium knowledge_article_3383 knowledge_article_3383 2013-01-18T16:12:49-0800 000001453 Validated (External) Premium Zoneflex 7762;Zoneflex 7762 s Installation Installation, ZoneFlex 7762, ZoneFlex 7762 S How to hard reset a 7762 Please follow below steps to perform factory reset to the AP 1. Verify that the Access Point is using PoE as its power source. 2. Take out the electrical shunt that is supplied with the Access Point. 3. If the DC connector on the Access Point is protected by its cap, remove the cap. Take note of the location of pins 3 and 4 (Please see the attached document for image). 4. Install the shunt on pins 3 and 4 and hold it for 10 seconds, and then remove the shunt. 5. Verify that the STATUS LED on the Access Point is off. If the STATUS LED is off, it indicates that the reset process is complete

7762 Reset Procedure

2019-01-26T18:48:39-0800 2019-01-27T00:00:25-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PCYhCAO?attachment_index=0 2019-01-27T00:00:25-0800 monthly admin,premium knowledge_article_3383 knowledge_article_3383_attachment_1 How to Reset 7762.pdf 62246.0 application/pdf https://support.ruckuswireless.com/articles/000003973 2019-01-26T18:49:45-0800 monthly 0.8 admin,premium knowledge_article_2104 knowledge_article_2104 2015-01-29T14:18:46-0800 000003973 Validated (External) Premium Performance;Configuration;Known issues and workarounds Performance, Configuration, Known Issues and Workarounds How can I make 7731 RB change channels when interference is affecting links? rkscli: set blacklist wifi0 Usage: set blacklist <wifi name> {options} -> [ {enable|disable|warnonly} ] -> [ clear ] -> [ <chan> {1|0|-1} (1=temporary, 0=clear, -1=permanent) -> [ {rx_phyerr|util_busy|nf0hi|nf0lo|nfcap0hi|nfcap0lo} <val> ] Available channel list: * 52 (5260 MHz) HT40 HT20 * 56 (5280 MHz) HT40 HT20 * 60 (5300 MHz) HT40 HT20 * 64 (5320 MHz) HT40 HT20 * 100 (5500 MHz) HT40 HT20 * 104 (5520 MHz) HT40 HT20 * 108 (5540 MHz) HT20 HT40 * 112 (5560 MHz) HT40 HT20 * 116 (5580 MHz) HT20 * 132 (5660 MHz) HT40 HT20 * 136 (5680 MHz) HT40 HT20 * 140 (5700 MHz) HT20 * 149 (5745 MHz) HT40 HT20 * 153 (5765 MHz) HT40 HT20 * 157 (5785 MHz) HT40 HT20 * 161 (5805 MHz) HT40 HT20 * 165 (5825 MHz) HT20 rkscli: Enable SmartSelect channel changes over warn-only message with this command: set blacklist wifi0 enable and optionally, blacklist DFS channels with these commands: set blacklist wifi0 52 -1 set blacklist wifi0 56 -1 set blacklist wifi0 60 -1 set blacklist wifi0 64 -1 set blacklist wifi0 100 -1 set blacklist wifi0 104 -1 set blacklist wifi0 108 -1 set blacklist wifi0 112 -1 set blacklist wifi0 116 -1 set blacklist wifi0 132 -1 set blacklist wifi0 136 -1 set blacklist wifi0 140 -1

By default 7731 RB will only issue warn-only when interference is affecting PtP link. CU can enable SmartSelect with or without blocking DFS channels, to allow RB to change channels.

2019-01-26T18:49:45-0800 2019-01-27T00:00:24-0800 https://support.ruckuswireless.com/articles/000006008 2019-01-26T18:52:45-0800 monthly 0.8 admin,premium knowledge_article_3269 knowledge_article_3269 2016-08-22T10:16:20-0700 000006008 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Installation;Troubleshooting;Known issues and workarounds Firmware, Installation, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway Why does my AP with 104.0.0.0.1306 software fail to connect to my SmartZone Controller ? Ruckus Corrective Action: A fix has been identified and is being implemented in the standalone 104.x software, and will be cut into AP production ASAP. The issue exposure is therefore limited to R510 AP’s which have shipped from Ruckus to date. Future AP shipments from Ruckus warehouses will be clear of this issue. An update will be provided as soon as the fix cut-in date is confirmed, and will include cut-in serial number/date code.

AP104 Field Advisory

2019-01-26T18:52:45-0800 2019-01-27T00:00:21-0800 https://support.ruckuswireless.com/articles/000001172 2019-01-26T18:54:52-0800 monthly 0.8 admin,premium knowledge_article_1110 knowledge_article_1110 2012-03-21T12:00:29-0700 000001172 Validated (External) Premium Flexmaster;FlexMaster Configuration;Firmware Configuration, Firmware, FlexMaster How do I push firmware upgrades to my standalone APs at a specific time? Are there any ports I need to open if the FlexMaster is behind a firewall? You can perform upgrades and push configuration templates by going to configure section in the FM. Follow the below mentioned steps to perform an upgrade: - Download the AP firmware from Ruckus Wireless Support website. It can reached at <a href="http://support.ruckuswireless.com/" target="_blank">http://support.ruckuswireless.com/</a> - Upload the firmware of the AP on FM, Lo-gin to FM GUI :: Go to Configure tab :: Common :: Manage Firmware Files :: Upload the new firmware file. - Once after uploading the desired AP model firmware version on the FlexMaster you need to create a task to perform an upgrade. - Create a new firmware upgrade task by going to “Firmware Upgrade” page where this page will give you an option to choose devices and schedule the upgrade to happen at certain time Lo-gin to FM GUI :: Go to Configure tab :: Common :: Create a task AP uses web port as the destination for firmware upgrades once it is under FM control. If the FM is behind a firewall you need to open web port so APs can download the firmware. This will be port # 80 using TCP.

Pushing firmware upgrades to standalone APs at a specific time and the ports that need to be opened for if FM is behind a firewall

2019-01-26T18:54:52-0800 2019-01-27T00:00:17-0800 https://support.ruckuswireless.com/articles/000002511 2019-01-26T19:26:16-0800 monthly 0.8 admin,premium knowledge_article_3292 knowledge_article_3292 2014-01-17T14:08:25-0800 000002511 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector Why will my external DHCP server not hand out addresses for clients on VLAN's? If DHCP option 82 is checked on the WLAN make sure that the DHCP server has the IP helper address defined for option 82. Or you can define the IP helper address at the VLANs router and will not need option 82 configured on the WLAN. If the WLAN has DHCP option 82 checked and an IP helper address is not defined in the DHCP server option 82, then the DHCP server will drop the DHCP requests.

Using an external DHCP server on a different subnet for WLAN's that are using multiple VLAN's, Clients are unable to get an address. Native VLAN (1) works fine. If DHCP option 82 is checked on the ZD config for that VLAN then the DHCP server option 82 needs to have the IP helper address configured.

2019-01-26T19:26:16-0800 2019-01-27T00:00:14-0800 https://support.ruckuswireless.com/articles/000003106 2019-01-26T19:27:15-0800 monthly 0.8 admin,premium knowledge_article_1617 knowledge_article_1617 2014-06-04T03:43:43-0700 000003106 Validated (External) Premium Zoneflex indoor Configuration Configuration, ZoneFlex Indoor Can we reduce the number of supported concurrent client connections on a standalone AP? <div> Yes. We can reduce the number of concurrent client connections on the Standalone AP. </div> <ul><li>The maximum number of concurrent clients per WLAN is 512 and by default it is set to maximum on the AP. </li></ul> <div> We can reduce this value only through CLI of the AP using the below command. </div> <div> </div> <div>rkscli: set max-aid <wlan interface> <value> </div> <div> You can get the wlan name for the wlan interface using the below command. </div> <div>rkscli: get ssid <wlan interface></div> <div> <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095La&feoid=00N50000002Cf3M&refid=0EM50000000LVGF"></img> When you attempt to give a number more than the maximum value 512, AP will throw an error shown below. So, the value should be below 512. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095La&feoid=00N50000002Cf3M&refid=0EM50000000LVGK"></img></div>

When configuring an AP in a ZD I have the option to select the number of supported concurrent connections (default value is 100). Where can I find this option when I'm configuring an AP as stand alone?

2019-01-26T19:27:15-0800 2019-01-27T00:00:12-0800 https://support.ruckuswireless.com/articles/000006445 2019-01-26T19:52:49-0800 monthly 0.8 admin,premium knowledge_article_3561 knowledge_article_3561 2017-09-19T04:36:52-0700 000006445 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What are the channels allowed in different countries Important website: https://www.fcc.gov/ http://www.trai.gov.in/ http://www.dot.gov.in/ https://www.ofcom.org.uk/ http://www.soumu.go.jp/english/

This article provides details about the allowed/ legal channels country wise.

2019-01-26T19:52:49-0800 2019-01-27T00:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tvh5CAC?attachment_index=0 2019-01-27T00:00:09-0800 monthly admin,premium knowledge_article_3561 knowledge_article_3561_attachment_1 Country wise channel list.xlsx 22654.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000004044 2019-01-26T19:53:20-0800 monthly 0.8 admin,premium knowledge_article_1611 knowledge_article_1611 2015-03-03T01:04:42-0800 000004044 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Installation;Known issues and workarounds Installation, Known Issues and Workarounds, SmartCell Insight Why are a few of the dependencies failing during the SCI setup? Minimum system requirements for each SCI version install are listed inside both "Installation Guide" and "ISO Package Installation Guide". Please visit the Ruckus Support website for obtaining these docs. Cross-check your setup across these recommended specifications.

Troubleshooting steps to follow if you encounter dependency installation failure during the SCI setup.

2019-01-26T19:53:20-0800 2019-01-27T00:00:08-0800 https://support.ruckuswireless.com/articles/000001171 2019-01-25T15:47:20-0800 monthly 0.8 admin,premium knowledge_article_3560 knowledge_article_3560 2012-03-21T12:00:29-0700 000001171 Validated (External) Premium Zoneflex outdoor Performance;Configuration;Installation;System network management;Troubleshooting Performance, Configuration, Installation, System Network Management, Troubleshooting, ZoneFlex Outdoor Ruckus AP's Troubleshooting Follow the debugging procedure.

Ruckus AP Troubleshooting

2019-01-25T15:47:20-0800 2019-01-25T18:00:12-0800 https://support.ruckuswireless.com/articles/000001208 2019-01-25T15:47:57-0800 monthly 0.8 admin,premium knowledge_article_3559 knowledge_article_3559 2012-03-21T12:01:04-0700 000001208 Validated (External) Premium Flexmaster;FlexMaster Configuration Configuration, FlexMaster Do you have a sample for DHCP option 43 setup to configure FlexMaster’s URL? DHCP option 43 setup to configure FlexMaster’s URL Sample configuration.

Do you have a sample for DHCP option 43 setup to configure FlexMaster’s URL?

2019-01-25T15:47:57-0800 2019-01-25T18:00:11-0800 https://support.ruckuswireless.com/articles/000001309 2019-01-25T15:49:49-0800 monthly 0.8 admin,premium knowledge_article_3558 knowledge_article_3558 2012-04-03T14:09:27-0700 000001309 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Security;Troubleshooting Security, Troubleshooting, ZoneDirector My neighbor’s AP keeps showing up as a Rogue AP. Is there a way to change that? Click the Monitor tab on the ZoneDirector Web UI, and then click Rogue Devices in the left-side column. In the Currently Active Rogue Devices table, click Mark as Known for the desired rogue AP entry. The foreign device won’t be logged or show up on the Map View page as a rogue AP any more

My neighbor’s AP keeps showing up as a Rogue AP. Is there a way to change that?

2019-01-25T15:49:49-0800 2019-01-25T18:00:10-0800 https://support.ruckuswireless.com/articles/000007139 2019-01-25T08:52:51-0800 monthly 0.8 admin,premium knowledge_article_3111 knowledge_article_3111 2017-12-12T14:12:09-0800 000007139 Validated (External) Premium Brocade eos products Security;Troubleshooting Security, Troubleshooting, Brocade EOS Products How to troubleshoot Flexible authentication? How to troubleshoot Flexible authentication Step to troubleshoot: <ol><li> Determine the sequence of Flexible Authentication </li><li> Use Troubleshooting 802.1x authentication guide and Troubleshooting MAC authentication guide to further troubleshoot flex authentication issues. </li></ol> Step 1. Determine the sequence of Flexible Authentication. <div> Request a show dot1x configuration.</div> <div> Once the sequence of Flex authentication is determined:</div> <ul><li>use Table 7 for 802.1X authentication followed by MAC authentication</li><li>use Table 8 for MAC authentication followed by 802.1X authentication</li></ul> Authentication sequence - 802.1X authentication followed by MAC authentication When 802.1X authentication and MAC authentication methods are enabled on the same port, by default the authentication sequence is set to perform 802.1X authentication followed by MAC authentication (refer to Figure 7 ). <img alt="User-added image" height="478" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Gf&feoid=00N50000002Cf3M&refid=0EM50000000XH4N" width="755"></img> Authentication sequence - MAC authentication followed by 802.1X authentication When the authentication sequence is set to perform MAC authentication followed by 802.1X authentication, by default, 802.1X authentication is performed even if MAC authentication is successful(refer to Figure 8 ). Upon successful 802.1X authentication, the client is authenticated and the policies returned by the RADIUS server are applied and on authentication failure, the configured failure action is applied. The default behavior can be changed by specifying the RADIUS attribute, to prevent the 802.1X authentication from being performed after successful MAC authentication. In this case, the client is authenticated and the policies returned by the RADIUS server are applied after successful MAC authentication. <img alt="User-added image" height="482" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Gf&feoid=00N50000002Cf3M&refid=0EM50000000XH4S" width="819"></img> Step 2. Follow Figure 7 or 8 above and the 802.1x and MAC authentication troubleshooting guide to: <ol><li>Verify and define the problem</li><li>Isolate the problem</li><li>Identify and debug the problem</li></ol>

Flexible authentication provides a means to set the sequential order in which 802.1X authentication and MAC authentication methods need to be executed

2019-01-25T08:52:51-0800 2019-01-25T12:00:07-0800 https://support.ruckuswireless.com/articles/000008808 2019-01-23T15:18:02-0800 monthly 0.8 admin,premium knowledge_article_3552 knowledge_article_3552 2019-01-23T11:14:38-0800 000008808 Validated (External) Premium Ruckus icx switches Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, Ruckus ICX Switches What are Ruckus ICX switch cable specification recommendations to support 10GE port aggregation? We recommend/support using Cat6A cabling for 10GE for all runs, up to 100 meters. Below is a chart that shows which type of twisted pair supports which speeds: <img alt="User-added image" height="234" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095G6&feoid=00N50000002Cf3M&refid=0EM2J000000m5rI" width="687"></img> <img alt="User-added image" height="54" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095G6&feoid=00N50000002Cf3M&refid=0EM2J000000m5rX" width="681"></img> Reference: https://en.wikipedia.org/wiki/10_Gigabit_Ethernet

Cat6A cable is recommended for 10GBASE-T speeds up to 100 meters for port aggregation on ICX 7650-48ZP.

2019-01-23T15:18:02-0800 2019-01-23T18:00:07-0800 https://support.ruckuswireless.com/articles/000008809 2019-01-23T15:39:39-0800 monthly 0.8 admin,premium knowledge_article_3553 knowledge_article_3553 2019-01-23T14:15:29-0800 000008809 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches How can 802.1X and MAC_Authentication work if multiple untagged clients need to be authenticated on the same port? In multiple untagged mode, different clients on the same port can be placed into different untagged VLANs. The authentication-enabled ports or a specific port can be configured to be a member of multiple untagged VLANs (multiple untagged mode) using the auth-vlan-mode command at the global level or using the authentication auth-vlan-mode command from the interface configuration mode.

Authenticating multiple hosts behind an unmanaged switch using dot1x/mac-auth

2019-01-23T15:39:39-0800 2019-01-23T18:00:06-0800 https://support.ruckuswireless.com/articles/000008609 2019-01-22T14:28:29-0800 monthly 0.8 admin,premium knowledge_article_3551 knowledge_article_3551 2019-01-22T14:27:18-0800 000008609 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Security;System network management Security, System Network Management, SmartCell Insight Is the data in SCI fully encrypted? SCI uses the Hadoop Distributed File System (HDFS) to store indexed data within the DB. HDFS uses end-to-end encryption to store data. However, before data is indexed, it is stored in raw data files, which are not encrypted. The raw data files cannot be easily read using a text editor; it requires some further code in order to open them. However, it should be understood that the raw data files are not encrypted. If further data security is required, the VM hyper-visor disks should use native disk encryption.

Information on the data encryption used within SCI

2019-01-22T14:28:29-0800 2019-01-22T18:00:06-0800 https://support.ruckuswireless.com/articles/000002778 2019-01-21T00:46:03-0800 monthly 0.8 admin,premium knowledge_article_846 knowledge_article_846 2014-03-11T23:30:21-0700 000002778 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector Why the Guest users are failing to ping the gateway? <div>Guest authentication will come under L3 authentication, here the clients will receive IP address before the authentication. Guest clients will only reach Gateway after providing the valid guest pass key and gets authenticated successfully.</div>

Guest users unable to ping the default gateway before adding the guest pass key

2019-01-21T00:46:03-0800 2019-01-21T06:00:19-0800 https://support.ruckuswireless.com/articles/000003468 2019-01-21T01:18:20-0800 monthly 0.8 admin,premium knowledge_article_1323 knowledge_article_1323 2014-10-01T06:50:46-0700 000003468 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How do I import a high entropy ssl certificate ? The attached document has instructions on how to import high entropy SSL certificates into ZoneDirector, ZoneFlex access points and wireless bridges.

Describes how to import high entropy SSL certificates into ZoneDirector and ZoneFlex access points and wireless bridges.

2019-01-21T01:18:20-0800 2019-01-21T06:00:17-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PHYDCA4?attachment_index=0 2019-01-21T06:00:17-0800 monthly admin,premium knowledge_article_1323 knowledge_article_1323_attachment_1 High Entropy Certificate Import.pdf 698352.0 application/pdf https://support.ruckuswireless.com/articles/000002901 2019-01-21T03:10:27-0800 monthly 0.8 admin,premium knowledge_article_1700 knowledge_article_1700 2014-04-07T09:20:32-0700 000002901 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can we judge what is a good client connection? An AP collects a rolling 2 minute window of RF conditions seen in a Histogram under Athstats in the support info file. Associated client statistics are shown under the 2.4 and 5G WLANs. We consider a "good" client connection to have a PER (packet error rate) < 10%, and when RSSI - PER >= 25. - RSSI is directly proportional to data rates, the higher the better, and is often tied to client distance from the AP. - PER is reported to the AP by the client, indicating that clients are near to an interference source. STA: 00:11:d9:42:7f:f2 rx_data_frm 2 rx_mgt_frm 6809 rx_bytes 104 tx_data_frm 123689 tx_mgmt_frm 46 tx_bytes 10875503 good_tx_frms 123735 good_rx_frms 6811 tx_retries 469124 tx_rate 36000 tx_per 88 ack_rssi 29 rx_rssi 28 STA: cc:08:e0:0d:be:19 rx_data_frm 20809 rx_mgt_frm 10 rx_bytes 4428421 rx_dup 1247 tx_data_frm 166910 tx_mgmt_frm 9 tx_bytes 15693421 good_tx_frms 166919 good_rx_frms 20819 tx_retries 9320 tx_rate 65000 tx_kbps 45534 ack_rssi 31 rx_rssi 30 ### Radio 0 Config ### 2422-1048 (channel 3) Histogram of PHY errors per second (pcttime in each range) 0 1-500 ..1K ..2K ..5K ..10K ..20K ..50K .100K more 0 98 1 0 0 0 0 0 0 0 ### Radio 1 Config ### 5220-1036 (channel 44) Histogram of PHY errors per second (pcttime in each range) 0 1-500 ..1K ..2K ..5K ..10K ..20K ..50K .100K more 100 0 0 0 0 0 0 0 0 0 In this example, both 2.4 and 5Ghz AP radios are reporting low interference seen. [PHY errors are packets that radio cannot decipher OFDM headers] You don't want to see more than 5K PHY errors per second, or there may be a source of interference near the particular AP.

How can we judge what is a good client connection?

2019-01-21T03:10:27-0800 2019-01-21T06:00:16-0800 https://support.ruckuswireless.com/articles/000004388 2019-01-21T00:10:14-0800 monthly 0.8 admin,premium knowledge_article_1752 knowledge_article_1752 2015-04-16T11:22:19-0700 000004388 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway How can I configure a DHCP scope on Juniper switch/router for Ruckus controller managed APs? ZoneFlex and RuckOS APs look for a Hex string containing sub-code 03 in Option 43 with ZD IP address(es). Previous ZD managed AP that has been factory defaulted, or new AP on 100.x base image. SCG and vSCG firmware APs look for a Hex string containing sub-code 06 in Option 43 with SCG/vSCG IP address(es). Previous SCG/vSCG managed AP that has been factory defaulted, or user loaded SCG AP image. Decimal-HEX calculator: <a href="http://shimi.net/services/opt43/index.php" target="_blank">http://shimi.net/services/opt43/index.php</a> Use Vendor dropdown to select Ruckus Wireless(ZD) for sub-code 03 Use Vendor dropdown to select Ruckus Wireless(SCG) for sub-code 06 Juniper Switch Example: This is the correct syntax for a ZONE DIRECTOR on a JunOS device. Please note the vendor code is 03. The vendor code for an SCG which is 06. I used this as a reference for generating the HEX: http://shimi.net/services/opt43/index.php set system services dhcp pool 10.250.3.0/24 option 43 byte-stream "0x03 0x0a 0x31 0x30 0x2e 0x35 0x33 0x2e 0x34 0x39 0x2e 0x31"

How to configure DHCP scope on Juniper switch/router for Ruckus controller managed APs

2019-01-21T00:10:14-0800 2019-01-21T06:00:15-0800 https://support.ruckuswireless.com/articles/000004538 2019-01-21T00:05:31-0800 monthly 0.8 admin,premium knowledge_article_1849 knowledge_article_1849 2015-05-12T10:05:41-0700 000004538 Validated (External) Premium Smartcell ap Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell AP Why am I unable to bridge multiple VLANs over a wireless link? You cannot configure an ethernet port facing a wifi bridge as a trunk and expect all VLAN information to be intact when it reaches the other side. It is recommended that each VLAN be broadcast using a separate WLAN interface (SSID), or alternatively that an L2 tunnel be established between the edge routers on either side. An L2oGRE tunnel, for example, adds an additional 24 bytes of overhead, however is capable of encapsulating ethernet traffic, allowing all attributes (including VLANID) to be retained when traversing 802.11 networks.

This article explains why VLAN IDs are stripped from ethernet frames when these frames traverse a wireless link.

2019-01-21T00:05:31-0800 2019-01-21T06:00:14-0800 https://support.ruckuswireless.com/articles/000004576 2019-01-21T00:00:14-0800 monthly 0.8 admin,premium knowledge_article_1879 knowledge_article_1879 2015-05-19T01:46:38-0700 000004576 Validated (External) Premium Scg200;SmartCell Gateway 200 (SCG200) Installation;Known issues and workarounds Installation, Known Issues and Workarounds, SCG200 Can I swap an AC power supply with a DC power supply on the SCG? The SCG can be ordered with either DC or AC dual power modules. Due to internal hardware differences, you cannot change your model from AC to DC or vice-versa without assistance from a Ruckus engineer. It is therefore not recommended to replace your power supplies with any other than the type originally shipped with the SCG. If you order an advanced replacement please make sure you mention if you have an AC or DC model.

The SCG has two power modules, these can be either DC or AC. You may not swap an SCG's power supplies with AC power supplies if it was originally shipped with DC power supplies and vice-versa.

2019-01-21T00:00:14-0800 2019-01-21T06:00:13-0800 https://support.ruckuswireless.com/articles/000004921 2019-01-21T03:07:13-0800 monthly 0.8 admin,premium knowledge_article_2149 knowledge_article_2149 2015-07-24T09:22:06-0700 000004921 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor What is the minimum supported firmware version for H500 Access Point? The H500 requires a minimum firmware of 9.10.0.0.218 GA running on the ZoneDirector and minimum RuckOS 3.0.3 to operate on SCG, SZ-100, vSZ-H, vSZ-E platforms. Note: H500 is not supported on ZoneDirector 1100.

Minimum supported firmware version for H500 Access Point

2019-01-21T03:07:13-0800 2019-01-21T06:00:12-0800 https://support.ruckuswireless.com/articles/000005544 2019-01-21T03:16:11-0800 monthly 0.8 admin,premium knowledge_article_3550 knowledge_article_3550 2016-02-26T11:59:33-0800 000005544 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation;System network management;Troubleshooting Configuration, Firmware, Installation, System Network Management, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway How do I install KSP from SmartZone CLI? The following steps allow you to load a .KSP script from the SZ CLI, without need of WebUI. You will need to setup an FTP Server that the vSZ/SZ can reach. Copy KSP file to the FTP Server tftp-root directory. 1. Log into the vSZ/SZ via SSH as admin Enter enable mode. Go to Debug Go to Diagnostic vSZ-E-SalesPoC-4# debug vSZ-E-SalesPoC-4(debug)# diagnostic vSZ-E-SalesPoC-4(debug-diagnostic)# From debug-diagnostic run "upload ftp://username:password@ftp.ip.addr/<filename.ksp>" (with proper name/pw, IP addr, filename) Example: vSZ-E-SalesPoC-4(debug-diagnostic)# upload ftp://username:password@12.13.14.15/filename.ksp Starting to install the script from remote FTP server... Succeed to install the script (filename.ksp) 2. Once installed successfully, you need to "execute" the ksp. (Note: you do not need to add the ".ksp" extension to the command vSZ-E-SalesPoC-4(debug-diagnostic)# execute filename

Instructions on how to upload KSP via CLI when WebUI is not an option.

2019-01-21T03:16:11-0800 2019-01-21T06:00:11-0800 https://support.ruckuswireless.com/articles/000005752 2019-01-21T02:42:01-0800 monthly 0.8 admin,premium knowledge_article_2362 knowledge_article_2362 2016-06-23T16:51:47-0700 000005752 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway Can I configure SCG Control and Data plane tunnel timeout values? SCG, vSCG, SZ, vSZ Access Points maintain two tunnels 1. AP to SCG control tunnel using SSH port 22 2. AP to SCG data plane using Ruckus GRE port 23233, For a production network I would recommend leaving the default values that have been tested by Ruckus QA. The AP control tunnel is verified and configured by the set/get scg command. rkscli: get scg ------ SCG Information ------ SCG Service is enabled. AP is managed by SCG. AP is registered in SCG. State: CONNECTED ... Server List: 71.99.239.67 SSH tunnel connected to 71.99.239.67 ... SCG config|heartbeat|mesh status|status intervals: 300|30|300|900 SCG gwloss|serverloss timeouts: 1800|7200 The control tunnel uses the AP heartbeat mechanism sent within the SSH tunnel. By default the AP sends a heartbeat every 30 seconds. It waits 30 seconds for a response from the SCG. If the heartbeat response is not received from the SCG it sends the next heartbeat at 5 seconds. If 12 heartbeat retries do not get a response from the SCG then the AP goes into SCG discovery and uses https port 443 to try and join the next SCG control blade (for multi node clusters). The time to go into discovery is 90 seconds (original 30 seconds + 12 x 5 seconds) after which the AP will try to be controlled by another node if present. On the SCG side. the SCG Control Planet will wait 1 minute before posting a heartbeat loss and 5 minutes until it declares the AP disconnected: Heartbeat lost event trigger time: 30 sec (Heartbeat lost time) + 30 sec (Tolerance sec) = 60 sec Disconnect time event trigger time = 5 minutes You can change the AP control tunnel heartbeat timer using the AP CLI command (or AP CLI script tool to change all timers in a Zone): rkscli: set scg heartbeat interval xx (from 30-300) DEFAULT 30 is recommended The AP Data tunnel (ruckusGRE to Data Plane) is verified and configured by: rkscli: get tunnelmgr ------ TUNNELMGR Information ------ tunnelmgr Service: Enabled Tunnel Establishment: Enabled Tunnel Authentication: Enabled Tunnel Cipher: Disabled PMTU Discovery: Enabled Node Affinity: Disabled Tunnel Type: Ruckus-GRE SCG-D IP List: +1@[71.99.239.67]:23233,[10.1.5.2]:23233 GRE over UDP: AP/SCG-D UDP port # 23233/23233 Keep Alive Interval/Retry-limit: 10/6 Keep Alive Interval2: N/A Keep Alive Count: N/A Force Primary Interval: N/A ------- Run Time Status (Debug) ------- Current tunnel ID: 38 Current failover mode: 0 Current connected SCG-D: [71.99.239.67]:23233 Current Session UpTime: 2 days 9 hrs 42 secs Current Keep Alive retry:0 sent:19849 lost: 3 Number of tunnel (re)establishment: 4 Reason on last re-establishment: fail to authenticate Ping default gateway from last disconnection: The keep alive is a ping sent from the AP to the SCG Data Plane. If the AP does not recieve a response to the first ping it will cut the timer in 1/2, so the second ping goes out at 5 seconds, and 1/2 again for each subsequent failure to get response. The default setting of tunnelmgr retry interval is 10 seconds, 6 retries ( 10+5+2+1+1+1 + retry timeout ) , so total time should be less 30 secs and it will try to connect to next DP. The AP will try to establish a data tunnel to another Data Plane (if available) after 30 seconds of connectivity loss. To change this configuration use: rkscli: set tunnelmgr kinterval xx (I tested 1 and 100 both appeared to work) rkscli: set tunnelmgr kcount xx (I tested 1 and 100 both appeared to work) It is recommended NOT to change these default values.

SCG control plane and data plane tunnels keepalive timers are configurable.

2019-01-21T02:42:01-0800 2019-01-21T06:00:10-0800 https://support.ruckuswireless.com/articles/000002456 2019-01-21T02:55:12-0800 monthly 0.8 admin,premium knowledge_article_2640 knowledge_article_2640 2014-01-14T12:27:17-0800 000002456 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Security Performance, Configuration, Security, ZoneDirector, ZoneFlex Indoor Is Opportunistic Key Caching(OKC) supported on ZD? Using 802.1x Authentication EAPOL STA supporting Opportunistic Key Caching (OKC/OPC) <h2>Opportunistic Key Caching</h2> <ul><li>Works in a controller based environment</li><li>Enhancement of PMK Caching</li><li>OKC doesn't mandate how a PMK arrives at the target AP</li><li>OKC allows the client to use a single shared PMK shared among multiple APs.</li><li>The steps that are followed are as follows: <ul><li>The client authenticates with the first AP and creates the PMK and the PMKID, and they perform the 4-way handshake</li><li>The PMK#1 is cached on the WLAN Controller. The controloler sends this over to the target AP</li><li>The client calculates the PMKID#2 using the PMKID calculation formula and sends this over the target AP in the RSN IE.</li><li>The target AP looks at the client MAC and calculates the PMKID#2.</li><li>Because the PMKID#2 sent by the client is the same as the PMKID#2 calculated by the AP, 802.1X/EAP is not needed.The client uses the same old PMK</li><li>The target AP sends the reassociation response frame and the 4-way handshake now begins</li></ul> </li><li>This situation becomes controller if it's an inter-controller roaming activity. </li></ul> The standard allows the client STA to specify more than 1 PMK-ID. A count of 0 means the client doesn't have any cached PMK - so it will not try to bypass 802.1X authentication to the AS. Also, regardless of the presence of PMK in assoc request from any client STA, if the station follows this up with an EAPOL-START The result will be full authentication to the AS EAPOL-START is then acting to in fact reset the authentication process each time. In the current implementation the AP never includes RSN Elements in its responses to STA The AP just goes ahead with the key exchange frame if matching PMKID #1 is found in the RSN info of the STAs association Request. Even when OCK is enabled on a STA , the AP only includes the RSN Info Element - when any STA gives the green light in its association request by setting this bit to 1 ( True ) wlan.fc.type_subtype==2 .... ..0. .... .... = PeerKey Enabled: False ZD Config Mode WLAN command syntax: pmk-cache timeout <NUMBER> Enables PMK cache with timeout {NUMBER} minutes. pmk-cache-for-reconnect Applies PMK cache when client reconnects.

Provide details of OKC in action during a STA roaming event - how does this work prior to 802.11r support in SW.

2019-01-21T02:55:12-0800 2019-01-21T06:00:09-0800 https://support.ruckuswireless.com/articles/000001167 2019-01-20T18:16:49-0800 monthly 0.8 admin,premium knowledge_article_418 knowledge_article_418 2012-03-21T12:00:29-0700 000001167 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Mediaflex;Flexmaster;Zoneswitch;Zoneplanner;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;MediaFlex 2501;MediaFlex 2900;MediaFlex 2811;MediaFlex 5811;MediaFlex 7811;MediaFlex 7211;FlexMaster;ZonePlanner Performance;Configuration;Firmware;Installation;Security;System network management;Troubleshooting;Known issues and workarounds Performance, Configuration, Firmware, Installation, Security, System Network Management, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, MediaFlex, FlexMaster, ZoneSwitch, ZonePlanner What information I need to provide when contacting Ruckus Wireless technical support when there is an FM issue? You need to retrieve the logs from FM before contacting technical support team. All the required logs are retrievable by clicking on the “Download Full Logs” button under the Administer > Support page. Support team might ask you to provide remote access to the machine. If the FM is behind a firewall please be prepare to open following ports: Ports 80/443 – for web interface access Port 22 – for SSH access Please note that FM username/password and machine username/password are not the same. Be prepared to give root level user privileges to the machine for troubleshooting.

What information I need to provide when contacting Ruckus Wireless technical support when there is an FM issue?

2019-01-20T18:16:49-0800 2019-01-21T00:00:25-0800 https://support.ruckuswireless.com/articles/000004525 2019-01-20T18:11:02-0800 monthly 0.8 admin,premium knowledge_article_1841 knowledge_article_1841 2015-05-07T02:19:02-0700 000004525 Validated (External) Premium Zonedirector;Smartcell gateway;Smartcell ap;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration Configuration, ZoneDirector, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway Do I need to load certificates on Ruckus controllers and APs for successful EAP-TTLS authentication? TLS based exchanges are performed between the UE and AAA server directly. These exchanges are encapsulated in the EAP-Message RADIUS attribute. With EAP-TTLS, the client authenticates the AAA server (outer), forming a tunnel between the UE and the server (not the AP or controller). Within this tunnel, the server authenticates the client (inner). The outer authentication (the tunnel) between the UE and AAA server would therefore be compromised if the AP or controller were to intercept or otherwise alter the TLS messages, destroying the inherent trust between the server and the UE. For this reason, certificates do not need to be loaded on the AP or Controller for successful EAP-TTLS authentication to occur.

This article asserts that it is not a requirement to load certificates on Ruckus APs and Controllers to successfully implement EAP-TTLS authentication

2019-01-20T18:11:02-0800 2019-01-21T00:00:20-0800 https://support.ruckuswireless.com/articles/000004668 2019-01-20T23:56:19-0800 monthly 0.8 admin,premium knowledge_article_3548 knowledge_article_3548 2015-07-01T04:37:56-0700 000004668 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to troubleshoot Web UI access issue of ZoneDirector Managed AP Enable both HTTP and HTTPS access for these AP(s) using following commands: rkscli: set http enable OK rkscli: set https enable OK To confirm if http/https service is active, execute below commands: rkscli: get http HTTP access is enabled OK rkscli: get https HTTPs access is enabled OK

How to troubleshoot Web UI access issue of ZoneDirector Managed AP

2019-01-20T23:56:19-0800 2019-01-21T00:00:19-0800 https://support.ruckuswireless.com/articles/000001971 2019-01-20T23:30:15-0800 monthly 0.8 admin,premium knowledge_article_2066 knowledge_article_2066 2013-04-25T13:44:32-0700 000001971 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Channel selection for iPhone5 or to avoid radar? Q: We’ve got customers using Apple computers that can’t use all 5G channels, and other customers who are concerned about the effects of Radar. Do we have a solution for this? A: There are some possible issues for Apple (and other clients) with the middle range 5G (DFS) channels. We'd like to suggest that the setting be set to the lowest Optimize for Compatibility, which has 8 x channels and can service all types of 5G capable wireless clients. This can help rule out such issues, if it's the type of client who's passing by an AP on a channel they can't use. Here's the list of channels for each setting under Configure/System, Country Code, Channel Optimization, and when to use each setting. Optimize for Compatibility ZoneFlex indoor/outdoor APs are limited to the same channels as all other APs (non-DFS channels only). You may have a mixture of indoor/outdoor APs and other Ruckus dual-band 802.11n APs in a Smart Mesh configuration. [ channels: 36, 40, 44, 48, 149, 153, 157, 161 ] (and 165 in some country codes) Optimize for Interoperability ZoneFlex APs are limited to non-DFS channels, plus four DFS channels supported by Centrino systems (may not be compatible with other wireless NICs). You have only indoor APs in your network, or Smart Mesh is not enabled, and you are confident that all wireless clients support DFS channels. [ add DFS channels 52, 56, 60, 64 ] Optimize for Performance ZoneFlex indoor/outdoor APs can use all available DFS and non-DFS channels, without regard for compatibility or interoperability, you are not concerned with DFS compatibility of client devices, and you want to make the maximum use of all possible available channels. [ add DFS channels 100, 104, 108. 112, 116, 132, 136, 140 ]

ZoneDirector allows control of DFS/Radar and 5G channel selection

2019-01-20T23:30:15-0800 2019-01-21T00:00:18-0800 https://support.ruckuswireless.com/articles/000005024 2019-01-20T19:57:52-0800 monthly 0.8 admin,premium knowledge_article_2105 knowledge_article_2105 2015-08-14T09:42:01-0700 000005024 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;System network management;Known issues and workarounds Performance, System Network Management, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway Why do we have issues with client roaming/connectivity on APs backhauled on GPON & DOCSIS switched infrastructure? The solution for both cases is to use tunnelled SSIDs.

Classic switched infrastructure (GPON & DOCSIS in particular) for AP backhaul may not handle Wifi client "fast roaming" well, so use tunneled SSIDs.

2019-01-20T19:57:52-0800 2019-01-21T00:00:18-0800 https://support.ruckuswireless.com/articles/000005483 2019-01-20T23:39:15-0800 monthly 0.8 admin,premium knowledge_article_2271 knowledge_article_2271 2016-02-03T18:39:12-0800 000005483 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Installation;Troubleshooting;Known issues and workarounds Performance, Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why can't Chromecast connect to Wi-Fi? Configured a new SSID only on 2.4Ghz and after that Chromecast connected fine again, this time it was able to complete the setup process.

Chromecast will not connect to Wi-Fi. It says that it cannot find the network.

2019-01-20T23:39:15-0800 2019-01-21T00:00:15-0800 https://support.ruckuswireless.com/articles/000006424 2019-01-20T19:31:34-0800 monthly 0.8 admin,premium knowledge_article_2653 knowledge_article_2653 2017-08-22T16:43:11-0700 000006424 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Firmware Firmware, SZ100 Does SZ 3.4 on SZ-100 support DVLAN with Tunnel SSID on R710? Yes it is supported in SZ 3.4 with SZ-100 / R710 (tunnel / local ). Please find the details below. Tunnel mode wlan in SZ104 =========================== <img alt="User-added image" height="406" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Bz&feoid=00N50000002Cf3M&refid=0EM50000000BkXP" width="724"></img> I have configured wlan qa-azi-abd-dvlan to VLAN 1401 , if radius does not send any VLAN attribute =================================================== <img alt="User-added image" height="391" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Bz&feoid=00N50000002Cf3M&refid=0EM50000000BkXU" width="734"></img> Configured the DVLAN in RADIUS server and Radius server assigns VLAN 1420 to client, please find the details =========================================================== <img alt="User-added image" height="384" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095Bz&feoid=00N50000002Cf3M&refid=0EM50000000BkXj" width="892"></img> AP debug logs shows that the client is assigned to vlan 1420 =================================================== Jul 20 22:53:01 RuckusAP daemon.info hostapd: @@202,clientJoin,"apMac"="58:b6:33:16:02:20","clientMac"="70:3e:ac:44:d9:c6","ssid"="qa-azi-abd-dvlan","bssid"="58:b6:33:16:02:2c","userId"="","wlanId"="55","tenantUUID"="839f87c6-d116-497e-afce-aa8157abd30c","apName"="RuckusAP","userName"="student","vlanId"="1420","radio"="a/n/ac","encryption"="WPA2-AES","Instantaneous rssi"="0","Xput"="0"

SmartZone 3.4+ has SZ-100 Tunnel SSID support for DVLAN on R710 model APs.

2019-01-20T19:31:34-0800 2019-01-21T00:00:14-0800 https://support.ruckuswireless.com/articles/000005806 2019-01-20T19:41:23-0800 monthly 0.8 admin,premium knowledge_article_2677 knowledge_article_2677 2016-06-01T10:16:19-0700 000005806 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What has precedence - Max Clients per AP, or Max Clients per WLAN? Answer: The AP Group takes the precedence. That is, if customer has changed the Max Client only on WLAN and NOT on AP Group. Then the Max number of Clients, that can be connected will be 100 (default value for the AP). Hence if CU want more than 100 clients to be connected on the AP, they have to modify settings in the AP Group. Configure >> Access points >> Access Point Groups >> Edit >> Under Model Specific Control --> Max Clients (Allow Max ___ clients to associate with this AP) or Configure >> WLANs >> Edit >> Advanced Option >> Max clients (Allow only up to ___ clients per AP radio to associate with this WLAN). Note: It is important to select proper AP model for the modification. For example, if you have AP-T301n for which you want to increase the Max number of clients, then make sure you select AP-T301n under the 'Model Specific Control' as shown in the attached screenshot. -- This was found in one of the customer site. He just modified on the WLAN however did not modify on the AP group. So even though he had set the Max Client to 250 in the WLAN still the AP did not allow more than 100 clients to connect to the AP, it showed 'Unauthorized' on the controller. After modifying the AP Group for his Model specific, more than 100 clients were able to connect to the AP. Verified in Version 10.0.0 (ZD-1200)

Additional clients will be rejected when either maximum Clients per WLAN or per AP has been exceeded. One does not supercede the other.

2019-01-20T19:41:23-0800 2019-01-21T00:00:13-0800 http://support.ruckuswireless.com/article_attachments/kA25000000007z7CAA?attachment_index=0 2019-01-21T00:00:13-0800 monthly admin,premium knowledge_article_2677 knowledge_article_2677_attachment_1 MaxClientonAP.JPG 129326.0 image/jpeg https://support.ruckuswireless.com/articles/000005987 2019-01-20T18:00:59-0800 monthly 0.8 admin,premium knowledge_article_3547 knowledge_article_3547 2016-08-08T13:34:59-0700 000005987 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, Unleashed Why can I not apply an Unleashed Access Control policy? <div class="author">Try deleting the ACL and create new from the Admin&Services >> Services >>Access Control >> Device Access Policy tab instead of directly creating New from the WLAN advanced settings. Other customers have reported a similar issue. <img alt="User-added image" height="272" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000095BV&feoid=00N50000002Cf3M&refid=0EM500000009mPv" style="width: 681px; height: 386px;" width="500"></img></div>

Have Ruckus Unleashed R500 version 200.1.9.12.55, however cannot apply device access policy to block Android and IOS phones.

2019-01-20T18:00:59-0800 2019-01-21T00:00:12-0800 https://support.ruckuswireless.com/articles/000003876 2019-01-20T21:52:35-0800 monthly 0.8 admin,premium knowledge_article_1576 knowledge_article_1576 2015-01-09T04:18:40-0800 000003876 Validated (External) Premium Scg200;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, SCG200, virtual SmartCell Gateway How do I configure the tac_plus TACACS+ server on a linux host for vSCG/SCG integration? Introduction The TACACS (<a href="https://tools.ietf.org/html/rfc1492" target="_blank">RFC1492</a>) and, more recently, TACACS+ protocol is useful for providing external authentication support for many network devices, including routers, switches and Ruckus controllers. TACACS+ integration with a vSCG or SCG-200 (hereafter referred to as an "SCG") provides TACACS+ users access to the administrative Web User Interface (UI) of the SCG. This article describes the configuration required to successfully integrate the SCG with the <a href="http://www.pro-bono-publico.de/projects/tac_plus.html" target="_blank">tac_plus</a> TACACS+ daemon. Download and install the TACACS+ Daemon The first step is to download and install the latest version of tac_plus: <table border="0" style="width: 750px;"><thead><tr><th colspan="1" rowspan="1">Step</th><th colspan="1" rowspan="1" style="text-align: left;">Instruction</th><th colspan="1" rowspan="1" style="text-align: left;">Example</th></tr></thead><tbody><tr><td colspan="1" rowspan="1" style="text-align: center;">1</td><td colspan="1" rowspan="1">Retrieve the latest source snapshot (<a href="http://www.pro-bono-publico.de/projects/index.html" target="_blank">HERE</a>), using wget or your favourite http file retrieval tool</td><td colspan="1" rowspan="1"># cd /usr/src && wget http://www.pro-bono-publico.de/projects/src/DEVEL.201410271902.tar.bz2</td></tr><tr><td colspan="1" rowspan="1" style="text-align: center;">2</td><td colspan="1" rowspan="1">Unzip the source package</td><td colspan="1" rowspan="1"># tar jxvf DEVEL.201410271902.tar.bz2</td></tr><tr><td colspan="1" rowspan="1" style="text-align: center;">3</td><td colspan="1" rowspan="1">Change to the newly extracted "Projects" directory</td><td colspan="1" rowspan="1"># cd Projects/</td></tr><tr><td colspan="1" rowspan="1" style="text-align: center;">4</td><td colspan="1" rowspan="1">Configure the build environment, specifying the target installation directory</td><td colspan="1" rowspan="1"># ./configure –prefix=/usr/local/tacacs/</td></tr><tr><td colspan="1" rowspan="1" style="text-align: center;">5</td><td colspan="1" rowspan="1">Build the binaries</td><td colspan="1" rowspan="1"># make</td></tr><tr><td colspan="1" rowspan="1" style="text-align: center;">6</td><td colspan="1" rowspan="1">Install the application into the target installation directory</td><td colspan="1" rowspan="1"># make install</td></tr><tr><td colspan="1" rowspan="1" style="text-align: center;">7</td><td colspan="1" rowspan="1">Create a directory in the tac_plus target installation directory for the configuration files</td><td colspan="1" rowspan="1"># mkdir /usr/local/tacacs/etc</td></tr></tbody></table> At this point, a fully functional TACACS+ daemon should have been installed. Configuration for SCG integration The SCG requires the TACACS+ server include, at the very least, the following two key value pairs (KvP): <table border="0" style="width: 750px;"><thead><tr><th colspan="1" rowspan="1" style="text-align: left;">Key</th><th colspan="1" rowspan="1">Status</th><th colspan="1" rowspan="1" style="text-align: left;">Description</th><th colspan="1" rowspan="1" style="text-align: left;">Example Value</th></tr></thead><tbody><tr><td colspan="1" rowspan="1">service</td><td colspan="1" rowspan="1">MANDATORY</td><td colspan="1" rowspan="1">The service name configured on the SCG</td><td colspan="1" rowspan="1">tacacs</td></tr><tr><td colspan="1" rowspan="1">user-name</td><td colspan="1" rowspan="1">MANDATORY</td><td colspan="1" rowspan="1">The local SCG username from which to infer settings for this TACACS+ user</td><td colspan="1" rowspan="1">admin</td></tr></tbody></table> Each user group defined in the TACACS+ configuration should include values for these attributes. Multiple groups may be defined, where the value returned in the user-name parameter may be altered to affect the access entitlement of group members. Copy the configuration file to the configuration directory created in step 7 above. A complete, annotated example configuration is attached to this article. Starting the tac_plus daemon The tac_plus binary is located in the sbin directory of your target installation path. To start the TACACS+ server, simply execute this binary as root, specifying the path to the configuration file you created. E.g: /usr/local/tacacs/sbin/tac_plus /usr/local/tacacs/etc/scg.cfg The tac_plus daemon may also be configured to start automatically by defining an init script, or amending the host machine's rc.local file. Troubleshooting <ul><li>Compilation errors may occur if you do not have the right build environment on the host machine. <ul><li>Debian/ubuntu: sudo apt-get install build-essential </li><li>Centos: sudo yum groupinstall 'Development Tools'</li></ul> </li></ul>

TACACS+ protocol is useful for providing external authentication support for many network devices

2019-01-20T21:52:35-0800 2019-01-21T00:00:11-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PI1yCAG?attachment_index=0 2019-01-21T00:00:11-0800 monthly admin,premium knowledge_article_1576 knowledge_article_1576_attachment_1 scg.cfg 2234.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000002271 2019-01-20T20:09:20-0800 monthly 0.8 admin,premium knowledge_article_3546 knowledge_article_3546 2013-10-01T08:46:23-0700 000002271 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Known issues and workarounds Performance, Known Issues and Workarounds, ZoneDirector Why the Rate limiting is causing Airplay issues? Airplay works but there are some QoS issues with Rate-limiting enabled. The exact issue is when an Ipad or Iphone etc., with Airplay then there will be some sort of weird noise (static) that comes out as the video is being played. The only way to make it work is to disable Rate-limiting. This is only a workaround.

Airplay works but there are some QoS issues with rate-limiting enabled. The exact issue is when an Ipad or Iphone etc., with Airplay then there will be some sort of weird noise (static) that comes out as the video is being played.

2019-01-20T20:09:20-0800 2019-01-21T00:00:10-0800 https://support.ruckuswireless.com/articles/000002333 2019-01-20T17:13:05-0800 monthly 0.8 admin,premium knowledge_article_718 knowledge_article_718 2014-01-23T09:55:14-0800 000002333 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to view the ethernet interfaces for an Access point? A brief overview of all the available Ethernet interfaces for an Access point can be examined by executing a command from the command line interface of an Access point. From the Access point's CLI, execute the following command:- rkscli:get eth Eg:- rkscli: get eth Port Interface 802.1X Logical Link Physical Link Label ----------------------------------------------------------------- 0 eth0 None Up Up 1000Mbps full 1 eth1 None Down Down OK Similarly, we can also verify the above command by executing the command from ZoneDirector's CLI in debug mode. ruckus>en ruckus#debug ruckus(debug)#remote_ap_cli -A "get eth" ----> This command will get executed across all the connected Access points and displays the output for each Access point.

How to view the ethernet interfaces for a Standalone AP or ZD managed AP's

2019-01-20T17:13:05-0800 2019-01-20T18:00:07-0800 https://support.ruckuswireless.com/articles/000005111 2019-01-20T17:47:42-0800 monthly 0.8 admin,premium knowledge_article_2154 knowledge_article_2154 2015-09-11T09:10:56-0700 000005111 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management;Troubleshooting System Network Management, Troubleshooting, ZoneDirector How do I save a Debug Info from ZD's GUI? On version 9.10.x and below, to retrieve Debug Info: - Log into ZD WebUI. - Select "Administer" Tab - Under Administer, select "Diagnostics" - In Diagnostics click the button "Save Debug Info" On version 10.x and above, navigate to Troubleshooting >> Diagnostics >> Click "Save Debug Info"

Customer wants to know how to save a debug info from the ZD

2019-01-20T17:47:42-0800 2019-01-20T18:00:06-0800 https://support.ruckuswireless.com/articles/000002539 2019-01-19T21:45:51-0800 monthly 0.8 admin,premium knowledge_article_716 knowledge_article_716 2014-01-24T07:12:26-0800 000002539 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How to collect ZoneDirector status information when the GUI is unresponsive? Copy the information from the above output and paste into your support case (or provide it in a subsequent email update)

CLI command to gather important diagnostic information

2019-01-19T21:45:51-0800 2019-01-20T00:00:13-0800 https://support.ruckuswireless.com/articles/000005324 2019-01-19T21:45:53-0800 monthly 0.8 admin,premium knowledge_article_2367 knowledge_article_2367 2015-12-01T12:42:08-0800 000005324 Validated (External) Premium Zonedirector 3000;Zonedirector 5000;Zonedirector 1200;ZoneDirector 3000;ZoneDirector 5000;ZoneDirector 1200 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector 3000, ZoneDirector 5000, ZoneDirector 1200 How to allow MS Surface Pro 3/4 to connect to 802.1X SSID on 5ghz radio? Disable 802.11w on the WLANs on all APs that are broadcasting that WLAN/SSID. Initiate an SSH session and login to ZD CLI: ruckus> enable ruckus# debug ruckus(debug)# remote_ap_cli -A set pmf wlanX mode 0 where X is the wlanID of the wlan on which 802.11w should be disabled. To find out the wlan ID, ruckus> enable ruckus# show wlan all FYI: "set pmf wlanx mode 0" for disabling 802.11w "set pmf wlanx mode 1" for enabling 802.11w

Surface Pro 3/4 connects on a standard SSID without any issue, and also connects on 2.4ghz radio to an 802.1X SSID. However, issue with client devices attempting to connect to 5ghz radio.

2019-01-19T21:45:53-0800 2019-01-20T00:00:12-0800 https://support.ruckuswireless.com/articles/000006139 2019-01-19T06:20:59-0800 monthly 0.8 admin,premium knowledge_article_2440 knowledge_article_2440 2016-10-31T09:38:38-0700 000006139 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway Could my browser cause AP Certificate Refresh problems? Use non-IE browser (e.g. Chrome, Firefox etc).

Customer unable to upload new certificates file. Confirmed valid filename (no illegal characters). When import fails, error = "Unable to update AP Certificate. Reason: Handling certificate file failed".

2019-01-19T06:20:59-0800 2019-01-19T12:00:10-0800 https://support.ruckuswireless.com/articles/000004311 2019-01-19T07:19:03-0800 monthly 0.8 admin,premium knowledge_article_1697 knowledge_article_1697 2015-04-03T10:53:57-0700 000004311 Validated (External) Premium Flexmaster;Virtual smartcell gateway;FlexMaster Configuration;Installation Configuration, Installation, FlexMaster, virtual SmartCell Gateway There is no option to point the Flexmaster managed APs to a vSCG/vSZ from Flexmaster UI or CLI.

Is it possible to point the Flexmaster managed APs to vSCG?

2019-01-19T07:19:03-0800 2019-01-19T12:00:08-0800 https://support.ruckuswireless.com/articles/000006053 2019-01-19T05:41:29-0800 monthly 0.8 admin,premium knowledge_article_2422 knowledge_article_2422 2016-09-23T14:20:00-0700 000006053 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What might cause new ZD managed APs to lose network connectivity after it's provisioned? Configure AP model specific settings not to override group settings or as Trunk port for uplink port connecting AP to network <img alt="User-added image" height="155" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000959K&feoid=00N50000002Cf3M&refid=0EM50000000YNJN" width="500"></img>

ZD controlled AP loses connectivity as soon as it gets provisioned by Zone Director. Switch port no longer detects AP MAC.

2019-01-19T05:41:29-0800 2019-01-19T06:00:07-0800 https://support.ruckuswireless.com/articles/000004513 2019-01-18T14:56:29-0800 monthly 0.8 admin,premium knowledge_article_3543 knowledge_article_3543 2015-05-06T10:11:02-0700 000004513 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Is it possible to configure Northbound Portal Interface in Zone Director 1000 running firmware version 9.3.4.0.21 and above? Enabling Northbound Portal Interface Support. The Northbound Portal interface allows the use of DPSKs on open authentication WLANs meant for public access. By enabling the Northbound Portal Interface, a wireless service provider can provide simple but secure Wi-Fi access without pre-registration, account setup or authentication. ZoneDirector redirects authentication requests to an outside portal. If access is granted, ZoneDirector 67 Configuring System Settings Enabling Network Management Systems provides a unique dynamic PSK. The DPSK can be delivered in a prov.exe file, which automatically configures the user’s device with the relevant wireless settings or displayed on the portal screen for manual entry. To enable Northbound Portal interface support for 9.13 and below version : 1. Go to Configure > System > Network Management. 2. Click Enable northbound portal interface support. 3. Enter a Password for API to portal communication. 4. Click Apply in the same section to save changes. 5. Configure the portal to display the key to the user or to push the prov.exe file to the client. To enable Northbound Portal interface support for 10.0 and above version : 1. Go to system > system setting >> Network Management (expand) 2. Click Enable northbound portal interface support. 3. Enter a Password for API to portal communication. 4. Click Apply in the same section to save changes.

The Northbound Portal Interface feature is available in Zone Director firmware version 9.4.0 and later versions.

2019-01-18T14:56:29-0800 2019-01-18T18:00:10-0800 https://support.ruckuswireless.com/articles/000002897 2019-01-18T15:50:52-0800 monthly 0.8 admin,premium knowledge_article_892 knowledge_article_892 2014-04-06T23:39:11-0700 000002897 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How to configure multiple domain Active Directory Authentication on ZD? <div>To enable Active Directory authentication for multiple domains: </div> <div>1. On the Configure > AAA Servers page, in the Editing (Active Directory) form, select the Global Catalog check box next to Enable Global Catalog support. </div> <div>2. The default port changes to 3268, and the fields for Admin DN and password appear. The default port number (3268) should not be changed unless you have configured your AD server to use a different port.</div> <div> • Global Catalog queries are directed to port 3268, while ordinary searches are received through port 389. If the port binds to 389, even with Global Catalog server, the search includes only a single domain directory partition. If the port binds to port 3268, the search includes all directory partitions in the forest. If the server attempting to bind over port 3268 is not a Global Catalog server, the server refuses the bind.</div> <div> 3. Leave the Windows Domain Name field empty to search all domains in the forest. <div>4. Enter an Admin DN (distinguished name) in Active Directory format (name@xxx.yyy). </div> <div>5. Enter the admin Password, and re-enter the same password for confirmation.</div> </div> <div>6. Click OK to save changes. </div> <div>7. Test your authentication settings using Test Authentication option under Configure ==> AAA servers. ---------- <div>Note: DO NOT enter anything in the Windows Domain Name field. If you enter a Windows Domain Name, the search will be limited to that domain, rather than the whole forest. The Admin account need not have write privileges, but must be able to read and search all users in the database. ----------</div> </div>

Steps to enable Active Directory authentication for multiple domains

2019-01-18T15:50:52-0800 2019-01-18T18:00:08-0800 https://support.ruckuswireless.com/articles/000004765 2018-12-25T11:26:38-0800 monthly 0.8 admin,premium knowledge_article_1974 knowledge_article_1974 2015-06-25T14:39:38-0700 000004765 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;System network management;Known issues and workarounds Configuration, Security, System Network Management, Known Issues and Workarounds, ZoneDirector Can I use ZoneDirector for AAA 802.1x secure WLAN authentication? ZoneDirectors local database can be used for AAA, with user ID WLAN restrictions. How to setup a secure 802.1x WLAN using the ZoneDirector local database. 1. Define a WLAN a. using Authentication Method = 802.1x, b. and Authentication Server = Local Database <img alt="User-added image" height="466" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094d9&feoid=00N50000002Cf3M&refid=0EM50000000LmkJ" width="500"></img> 2. Define a Role a. with only the created WLAN access. <img alt="User-added image" height="458" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094d9&feoid=00N50000002Cf3M&refid=0EM50000000LmkO" width="500"></img> 3. Create Users a. Define a UserID/Password in the local db, b. with the Role that can only access the specific WLAN. <img alt="User-added image" height="441" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094d9&feoid=00N50000002Cf3M&refid=0EM50000000LmkT" width="500"></img> --- Maximum number of AAA UserIDs depend upon ZD local database limits, shared with DPSK, Guest Pass, and Local admin clients to maximum limitations: ZD1100 – 1250 clients ZD1200 – 2000 clients ZD3000 – 10,000 clients ZD5000 – 20,000 clients SZ100 – 25,000 clients, 60k per cluster

ZoneDirector local database can support a limited number of userid/pw accounts for secure AAA 802.1x authentication.

2018-12-25T11:26:38-0800 2019-01-18T08:54:35-0800 https://support.ruckuswireless.com/articles/000003090 2014-05-29T23:00:55-0700 monthly 0.8 admin,premium knowledge_article_1035 knowledge_article_1035 2014-05-29T23:00:55-0700 000003090 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Is it possible to broadcast particular SSID only in 5 GHZ --Create a new wlan group with all the SSIDs except with the SSID that is to be broadcasted in 5GHZ. --Now add this Created wlan group under 2.GHZ radio to the system default Access point group . --Allow the default wlan group under 5GHZ radio to the system default Access point group. By doing the above configuration,particular SSID can be broadcasted only in 5GHZ

customer needs particular SSID to be broadcasted only in 5 GHZ

2014-05-29T23:00:55-0700 2019-01-17T13:20:07-0800 https://support.ruckuswireless.com/articles/000002222 2019-01-17T10:20:00-0800 monthly 0.8 admin,premium knowledge_article_562 knowledge_article_562 2013-09-11T10:14:21-0700 000002222 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can I monitor my ZoneDirector or ZoneFlex APs using SNMP? From a Network Management and SNMP perspective, the Ruckus Wireless system offers several hundred parameters and OIDs. From these, we have selected about 60 parameters that represent the KPIs for the system. This document details the same. The parameters are organized in a hierarchical fashion with the highest ZD level offering an aggregated, consolidated view of the overall network. Views of various subsystems are available at the Access Point, WLAN, Radio and individual client levels. You can download the SNMP guide for different ZD major version (As of Jan 2019) from below links: https://support.ruckuswireless.com/documents/2484-zonedirector-10-2-ga-snmp-reference-guide/download https://support.ruckuswireless.com/documents/2151-zonedirector-10-1-0-ga-snmp-reference-guide/download https://support.ruckuswireless.com/documents/1133-zonedirector-9-13-1-mr1-snmp-reference-guide/download https://support.ruckuswireless.com/documents/691-zonedirector-9-10-ga-snmp-reference-guide/download To download the guide for any other firmware versions, please go to https://support.ruckuswireless.com/ choose your product model, go to Document section and choose what version SNMP guide you want. Note: MIB file specific to attached 60 KPI OID is not available. Attached guide is only for reference purpose, please use regular MIB files which has all supported OID's in it.

SNMP supportec on ZD and guides and OID details are available on support site.

2019-01-17T10:20:00-0800 2019-01-17T12:00:06-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PE61CAG?attachment_index=0 2019-01-17T12:00:06-0800 monthly admin,premium knowledge_article_562 knowledge_article_562_attachment_1 SNMP Guide v3 for KPI.pdf 481889.0 application/pdf https://support.ruckuswireless.com/articles/000008763 2019-01-16T13:59:44-0800 monthly 0.8 admin,premium knowledge_article_3538 knowledge_article_3538 2019-01-16T13:51:27-0800 000008763 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway I am trying to connect a new Access Point to a controller using set scg ip <control_ip> but the AP keeps getting configured with another SZ's IP addreses. Solution is to run the 'set scg ip' command immediately after 'set scg init' and before AP can reboot. This will boot the AP with the correct discovery IP, preventing DNS lookup and automatic discovery. After this the AP connects to the correct SZ cluster and not the existing cluster. This procedure will be needed for all new AP's in this network or if AP is factory defaulted.

How to manually configure an SZ AP to connect to a desired SZ controller when DNS server on network specified a different controller.

2019-01-16T13:59:44-0800 2019-01-16T18:00:08-0800 https://support.ruckuswireless.com/articles/000002145 2019-01-16T14:38:29-0800 monthly 0.8 admin,premium knowledge_article_960 knowledge_article_960 2014-05-02T02:12:55-0700 000002145 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Can I tell if a ZoneDirector is managing my AP? A ZD-managed AP WebUI should: 1) Require a ZD’s admin credentials for login 2) Should show a message that states “A Ruckus ZoneDirector is managing this device” at the bottom of the Status::Device page when you login 3) On the Maintenance::Support Info page, scroll down a couple dozen clicks to the AP identification paragraph: ### ZoneDirector Status ### AP: 54:3d:37:2d:63:b0 / 192.168.0.61 / fc00::1 Name : mb7372_63-B0 Tunnel/Sec Mode : L3 (IPv4) / PSK State : RUN Mesh Role : ROOT AP PSK : 2N(rc/AopHsd0:L#~mYV;AjPuz|~VV,# Timer : HeartBeat, expires in 8 secs KeyLife, expires in 30 mins 39 secs Statistics, expires in 17 secs RogueAP_2.4G, expires in 17 secs RogueAP_5G, expires in 17 secs RF Statistics, expires in 39 secs channel status, expires in 39 secs HW/SW Version : 25.0.0.0 / 9.7.0.0.84 Model/Serial Num : zf7372 / 981302000141 ZoneDirector Addr : 50:a7:33:3c:52:58 / 192.168.0.100 4) If you SSH to a ZD-managed AP, you can issue the CLI command: get director ip to verify which ZoneDirector(s) are known to the AP. 5) You can also configure an AP to search for up to two ZoneDirectors with the CLI command: set director ip a.b.c.d a.b.c.e (where a.b.c.d and a.b.c.e are ZD IP addresses) when they are not on the same subnet as the ZD.

In an AP's WebUI or CLI, can I tell if a ZoneDirector is managing my AP?

2019-01-16T14:38:29-0800 2019-01-16T18:00:06-0800 https://support.ruckuswireless.com/articles/000008716 2019-01-15T01:19:27-0800 monthly 0.8 admin,premium knowledge_article_3537 knowledge_article_3537 2019-01-15T01:19:27-0800 000008716 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security;Troubleshooting;Known issues and workarounds Configuration, Security, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway The Username Attribute should carry the 'Username Value' and not the MAC address -- Upgrade the SmartZone to 3.6.2 and the issue is fixed. The 'User-Name' attribute value has the correct Value as the 'Username' and the packet also includes the 'Framed-IP-Address' as one of the Attributes. As shown below: <img alt="User-added image" height="438" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094pt&feoid=00N50000002Cf3M&refid=0EM2J000000m2Jh" width="500"></img> -- Waited for the Interim update for the Accounting to expire and found that the subsequent packet also includes the correct attribute value for the 'User-Name' and also has the 'Framed-IP-Address' as shown below:- Note: The Interim update was set to 1 min for the lab testing. <img alt="User-added image" height="426" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094pt&feoid=00N50000002Cf3M&refid=0EM2J000000m2Jr" width="500"></img>

In 3.6.1 version, the Radius Accounting Packet had the Client MAC address as the 'User-Name' attribute and No Framed-IP-Address packet. This is fixed in 3.6.2 version.

2019-01-15T01:19:27-0800 2019-01-15T06:00:07-0800 https://support.ruckuswireless.com/articles/000004581 2019-01-14T08:57:55-0800 monthly 0.8 admin,premium knowledge_article_3536 knowledge_article_3536 2015-09-08T15:19:35-0700 000004581 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Can a Standalone AP detect rogue devices? No, standalone AP can't detect rogue devices. A Controller is required for rogue detection.

Can a Standalone AP detect rogue devices?

2019-01-14T08:57:55-0800 2019-01-14T12:00:07-0800 https://support.ruckuswireless.com/articles/000002224 2019-01-10T05:08:58-0800 monthly 0.8 admin,premium knowledge_article_613 knowledge_article_613 2013-11-09T08:59:58-0800 000002224 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor The APs revert back to the DHCP address, what can I do to get the APs to connect and stay on the ZD? See attached doc.

7055 static IP address is not staying static after configuring through GUI.

2019-01-10T05:08:58-0800 2019-01-10T06:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PE6BCAW?attachment_index=0 2019-01-10T06:00:09-0800 monthly admin,premium knowledge_article_613 knowledge_article_613_attachment_1 Static IP for AP Connecting to ZD.pdf 186677.0 application/pdf https://support.ruckuswireless.com/articles/000001924 2019-01-10T05:49:00-0800 monthly 0.8 admin,premium knowledge_article_284 knowledge_article_284 2013-04-03T17:36:15-0700 000001924 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How is RADIUS server failover handled by SR pair of ZoneDirectors? Q: How is RADIUS server failover managed in an SR pair of ZoneDirectors? A: Here are some details on how the failover of Radius servers work on ZD, if there are delays in response from both Primary and Secondary, we will see failovers back and forth, we also suspect that inefficiency on ZD in processing AAA responses could cause some failovers. There is a limit of 2048(Queue size) AAA messages ZD can send simultaneously per SSID. We're waiting for more details on if there is a staggering that happens when a large number of APs try to connect back to ZD all at the same time. Case 1: ZDs with only one AAA Server Defined: 1. Every message is tried 6 times (1 + 5 retries at 0, 3, 6, 12, 24 and 48 second intervals) Case 2: ZDs with Primary and Secondary AAA Servers Defined: 1. Assume the ZD and primary AAA interface are working normally and then there is a sudden complete failure of the AAA system, or both primary and secondary responding very slow (both primary and secondary) 2. An accounting message that is queued for delivery to the primary AAA will go through it’s configured step of initial request => 1st retry => 2nd retry => fail 3. Once the message is marked as failed that position in the buffer will be cleared to make room for new requests, and the ZD will switch to the secondary AAA server and direct subsequent accounting messages to that server 4. If no subsequent messages to the secondary server fail, the ZD will continue sending to the secondary server for five minutes and then will automatically switch back to the primary server 5. However, if at any time during the five minute period where the secondary server is active there is a message failure to that server, then the ZD will switch immediately to the primary server for subsequent messages effectively returning to Step 1. Note that the current ZD buffer capacity for handling active requests is 2048 per SSID. If the buffer fills completely, the most recent requests to be received will be dropped until an additional buffer slot is available to service a new request (an earlier request is either completed successfully or timed out).

How is RADIUS server failover handled by SR pair of ZoneDirectors

2019-01-10T05:49:00-0800 2019-01-10T06:00:07-0800 https://support.ruckuswireless.com/articles/000003139 2018-02-26T14:23:02-0800 monthly 0.8 admin,premium knowledge_article_3283 knowledge_article_3283 2014-06-16T09:37:26-0700 000003139 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Does SCG provide Guest Access WLAN service? Guest Access WLAN services, where a user logs into a Captive Portal page using a single "guest pass" token configurable by a Guest Pass Administrator has been available in SCG since version 2.1 Guest Access is a special type of Hotspot service, that requires a Hotspot Service Profile: <img alt="Create A Hotspopt Profile selecting Guest Pass" height="243" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Lj7C&feoid=00N50000002Cf3M&refid=0EM50000000LViY" style="width: 732px; height: 333px;" width="500"></img> ---------- Note: As of version 2.5 - only Internal User Data Base is available. ---------- Guest Access Type WLAN: <img alt="Guest Access Type WLAN" height="78" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Lj7C&feoid=00N50000002Cf3M&refid=0EM50000000LViT" style="width: 745px; height: 191px;" width="500"></img> Select the Guest Access Hotspot Profile: <img alt="Select Guest Access Profile" height="237" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Lj7C&feoid=00N50000002Cf3M&refid=0EM50000000LVid" style="width: 743px; height: 349px;" width="500"></img> Guest Passes are created by an SCG administrator with Guest Pass Creation privileges on the correct Zone Domain <img alt="User-added image" height="246" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Lj7C&feoid=00N50000002Cf3M&refid=0EM50000000LVii" style="width: 822px; height: 392px;" width="500"></img> The Guest Pass Administrator logs into the SCG and can create individual and Batch Guest Pass on the WLAN's in the linked domain <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Lj7C&feoid=00N50000002Cf3M&refid=0EM50000000LVin"></img>

These are steps to configure Guest Access on SmartZone SCG/vSZ controllers.

2018-02-26T14:23:02-0800 2019-01-08T08:43:44-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PFifCAG?attachment_index=0 2019-01-08T08:43:44-0800 monthly admin,premium knowledge_article_3283 knowledge_article_3283_attachment_1 VSCG Guest Pass Configuration.pdf 135446.0 application/pdf https://support.ruckuswireless.com/articles/000006234 2017-01-30T10:21:31-0800 monthly 0.8 admin,premium knowledge_article_2569 knowledge_article_2569 2017-01-30T10:21:31-0800 000006234 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Unleashed Can I disable Directed Multicast on Unleashed AP WLANs? To not change Multicast UDP to TCP for the first 5 clients in an AP's IGMP group, CUs can use AP CLI commands to disable the feature on the particular WLAN. The key is to determine which WLAN interface the Multicast clients are using, then tell all the APs to disable the directed multicast feature. I'll show you how to get this information from SSH to a Member AP, and the Master AP. Say your clients are on my WLAN with SSID = SRO-mic.bra-Unl-PSK. We need to know what WLAN ID is associated with this SSID, on both radio bands of your APs. Once we have this wlanX info, we can send a command to all APs thru the Master AP, that they should disable directed multicast on this SSID, on both radios. Member AP: SSH to any Member AP, login with Admin uid/pw: rkscli: rkscli: get wlanlist Name Status Type wlanID RadioID bssid ssid wlan0 up AP wlan0 0 <mac> SRO-mic.bra-Unl-PSK wlan1 up AP wlan1 0 <mac> Test-guest-access wlan32 up AP wlan32 1 <mac> SRO-mic.bra-Unl-PSK wlan33 up AP wlan33 1 <mac> Test-guest-access Master AP: SSH to your Master AP, login with Admin uid/pw: > en ruckus# debug ruckus (debug): remote_ap_cli -A "set qos wlan0 directed multicast disable" .... ruckus (debug): remote_ap_cli -A "set qos wlan32 directed multicast disable" ... ruckus (debug): quit ruckus# quit

AP CLI commands can be used to disable DM on Unleashed WLANs.

2017-01-30T10:21:31-0800 2019-01-07T09:24:41-0800 https://support.ruckuswireless.com/articles/000006413 2019-01-02T14:21:23-0800 monthly 0.8 admin,premium knowledge_article_3523 knowledge_article_3523 2017-08-09T05:57:40-0700 000006413 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor How to change VLAN on the AP Ethernet port? -Change the VLAN using below commands : set interface eth1 type general untag none vlans 100 (no untag VLAN, only VLAN 100 allowed) *rkscli: set interface eth1 type access untag 302 vlan 302 (untag VLAN 302, on access port) *kscli: set interface eth2 type access untag 302 vlan 302

Changing VLAN on the AP Ethernet port

2019-01-02T14:21:23-0800 2019-01-02T18:00:09-0800 https://support.ruckuswireless.com/articles/000002857 2018-12-30T13:06:58-0800 monthly 0.8 admin,premium knowledge_article_920 knowledge_article_920 2014-04-20T18:52:42-0700 000002857 Validated (External) Premium Zoneflex 7731 Troubleshooting Troubleshooting, ZoneFlex 7731 How to test multicast between two ZF7731 bridges? Refer workaround.

Setup external multicast streaming device and connect on bridges to test multicast.

2018-12-30T13:06:58-0800 2018-12-30T18:00:32-0800 https://support.ruckuswireless.com/articles/000002193 2018-12-30T09:49:13-0800 monthly 0.8 admin,premium knowledge_article_3438 knowledge_article_3438 2018-10-31T10:16:25-0700 000002193 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration Configuration, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway Why can't the outdoor AP mesh with an indoor AP, even though the Indoor AP can mesh to the outdoor AP as a root. <div>Option 1: Use the outdoor channel compatibility option in ZD/Unleashed and Smart Zone (Option is country regulatory dependent, hence only available for selected countries) and not supported on Cloud APs as of today Oct 2018 - For Unleashed <img alt="Unleashed channel settings" height="209" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094vh&feoid=00N50000002Cf3M&refid=0EM2J000000ltUq" width="500"></img> - For ZoneDirector: Go to System >> System settings and then follow below settings <img alt="ZD channel settings" height="66" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094vh&feoid=00N50000002Cf3M&refid=0EM2J000000ltUv" width="500"></img> - For SmartZone or vSZ <img alt="SmartZone channel settings" height="230" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094vh&feoid=00N50000002Cf3M&refid=0EM2J000000ltV0" width="500"></img> Option 2: Statically set the Indoor root AP on any of the outdoor supported channel.</div> <div>Option 3: configure an AP group profile for the Root AP to limit it's channel selection that are in range of the outdoor AP. </div> <div><img alt="User-added image" height="57" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094vh&feoid=00N50000002Cf3M&refid=0EM50000000lnB4" width="500"></img></div>

Outdoor APs cannot mesh with indoor APs if root AP is broadcasting mesh SSID on a channel which is not supported by outdoor APs (Country wise regulatory dependent).

2018-12-30T09:49:13-0800 2018-12-30T12:00:09-0800 https://support.ruckuswireless.com/articles/000006430 2018-12-28T08:46:50-0800 monthly 0.8 admin,premium knowledge_article_2656 knowledge_article_2656 2017-09-11T23:51:04-0700 000006430 Validated (External) Premium Scg200;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SCG200 How to do DNS Based GGSN Selection In the TTG Profile, ensure that "Use APN-OI for DNS Resolution" enabled. By having it enabled, once the AAA sends an Access-Accept which has APN, SCG will append the APN with MCC and MNC values and send a DNS Query to the DNS server configured. Based on the DNS Server response, the GTP Tunnel or in other words the Create PDP Context will be sent to GGSN returned in the DNS Server response.

DNS based GGSN Selection

2018-12-28T08:46:50-0800 2018-12-28T12:00:18-0800 https://support.ruckuswireless.com/articles/000002044 2018-12-28T02:17:46-0800 monthly 0.8 admin,premium knowledge_article_445 knowledge_article_445 2013-06-02T19:21:14-0700 000002044 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Clients getting an error trying to connect via 802.1x ? * Wireless clients are having an issue while authenticating to the Zonedirector configured with 802.1x authentication. Windows server 2012(NPS) is acting as the Radius server for authenticating wireless clients. * Test authentication settings across the Zonedirector shows the success result with appropriate role assigned to the user. * However, client will receive a error message as unable to connect while trying to connect to the 802.1x wlan. * Wireless client(eg:- Win 7 laptop) will still have the issue even after manually creating the wlan profile manually across the device with appropriate settings to accept only user authentication. * The event logs across the radius will show the NPS denied access to the user, then the error code 23 will be displayed across the details tab. * From this, it is evident that the issue resulted because of the possible corruption of the existing certificate across the server. * Once re-building the NPS with the new certificate on the Windows server, everything started working fine with both PEAP and PEAP-TLS authentication.

Windows 2012 NPS RADIUS server authentication issue

2018-12-28T02:17:46-0800 2018-12-28T06:00:09-0800 https://support.ruckuswireless.com/articles/000006269 2018-12-27T11:46:30-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_2584 knowledge_article_2584 2017-02-27T16:39:27-0800 000006269 Validated (External) Public Smartcell insight;SmartCell Insight (SCI) Known issues and workarounds Known Issues and Workarounds, SmartCell Insight Why SCI 2.4 is not showing data under Access Point Tab from previous dates? SCI's Access Point report will only provide data from the date when SCI was upgraded to 2.4. No firewall ports blocking any AP traffic as we could see other data showing up as required.

This Article explains why SCI 2.4 is not showing any Access Point Information from previous older dates.

2018-12-27T11:46:30-0800 2018-12-27T12:00:19-0800 https://support.ruckuswireless.com/articles/000004228 2018-12-27T07:02:11-0800 monthly 0.8 admin,premium knowledge_article_3521 knowledge_article_3521 2015-03-19T14:50:55-0700 000004228 Validated (External) Premium All;Brocade Mobility 6511 Wallplate Access Point Firmware;Installation;Troubleshooting;Known issues and workarounds Firmware, Installation, Troubleshooting, Known Issues and Workarounds, All How can I check an MD5 checksum from Windows PC for my Ruckus product software/firmware? Ruckus developers create MD5 checksums to verify integrity of posted release files. For example: If you have downloaded file for our SCI product, download page will also show you the MD5 signature. The filename is : rks-sci-supportmatrix-1.3.0.0-26.x86_64.rpm MD5 signature: a92faf3c78396d1bc84131b9a19b24ec Ruckus support portal firmware Downloads includes the MD5 checksum for firmware release files. <img alt="User-added image" height="336" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094kK&feoid=00N50000002Cf3M&refid=0EM50000000LgOC" width="573"></img> You can extract an MD5 checksum from a file, to compare to the provided checksum, with a Windows freeware utility. <a href="http://www.winmd5.com/" target="_blank">http://www.winmd5.com/</a> <img alt="User-added image" height="362" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094kK&feoid=00N50000002Cf3M&refid=0EM50000000LgOH" width="500"></img> Note: On the Mac there's the md5 <file> command. On Linux, it's md5sum <file> shimi@matrix ~/Downloads $ md5sum rks-sci-supportmatrix-20150305.rpm a92faf3c78396d1bc84131b9a19b24ec rks-sci-supportmatrix-20150305.rpm

WinMD5Free is a PC version utility

2018-12-27T07:02:11-0800 2018-12-27T12:00:15-0800 https://support.ruckuswireless.com/articles/000004225 2018-12-27T08:20:51-0800 monthly 0.8 admin,premium knowledge_article_2512 knowledge_article_2512 2015-03-19T10:11:11-0700 000004225 Validated (External) Premium Zonedirector;Zoneflex indoor;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Installation;Troubleshooting;Known issues and workarounds Configuration, Firmware, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, virtual SmartCell Gateway Why can't my APs connect to the vSCG, ZD's when I use 192.168.50.0? Issue fixed on 3.1.0, 3.1.1, 3.2.1 and above. Upgrade to any of these firmware or above.

When using 192.168.50.0 subnet on vSCG 3.0.3.0.628 and ZD's, APs will not be able to connect.

2018-12-27T08:20:51-0800 2018-12-27T12:00:09-0800 https://support.ruckuswireless.com/articles/000002740 2018-03-12T11:27:58-0700 monthly 0.8 admin,premium knowledge_article_1728 knowledge_article_1728 2014-03-04T08:03:56-0800 000002740 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Can we have one common record for both controllers in the DNS which helps to discover the ZD for the APs? ZD uses its device IP address for AP management traffic. In SR mode there are two controllers. Both controllers should have separate records in the DNS server if we want APs to discover the controller by its DNS name. When configuring Smart Redundancy, both ZD IPs should be entered in Limited ZD Discovery option on the Configure>Access Points>Policies tab. All connected APs will be updated with both ZD's IP addresses, and DNS will help direct any new/non-connected remote APs. Example: Primary ZD: 192.168.20.1 Secondary ZD: 192.168.20.2 Example DNS: zonedirector1.domain.local -> 192.168.20.1 zonedirector2.domain.local -> 192.168.20.2 Management IP address / its DNS name cannot be used for discovery.

APs discover ZDs by using DNS. Define A-records for both ZDs name in SR setup.

2018-03-12T11:27:58-0700 2018-12-27T06:52:37-0800 https://support.ruckuswireless.com/articles/000005459 2018-12-26T12:01:22-0800 monthly 0.8 admin,premium knowledge_article_2265 knowledge_article_2265 2016-01-28T14:06:40-0800 000005459 Validated (External) Premium Scg200;SmartCell Gateway 200 (SCG200) Installation;Troubleshooting Installation, Troubleshooting, SCG200 What does the triangle mean on the front panel of the SCG-200 ? The triangle of the front panel of the SCG give the status of the system. <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094hz&feoid=00N50000002Cf3M&refid=0EM500000005x4m"></img> It can be green or amber. <img alt="User-added image" height="130" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094hz&feoid=00N50000002Cf3M&refid=0EM500000005x4w" width="500"></img>

The front panel of the SCG has multiple LEDs what does the triangle LED mean ?

2018-12-26T12:01:22-0800 2018-12-26T18:00:16-0800 https://support.ruckuswireless.com/articles/000005519 2018-12-26T12:49:22-0800 monthly 0.8 admin,premium knowledge_article_2287 knowledge_article_2287 2016-02-29T15:24:53-0800 000005519 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed Unleashed: How many DPSKs, WLANs, ACLs and Guest Passes are supported on 200.1? Unleashed 200.1 AP maximum supported: - 512 DPSKs and 512 Guest Passes can be generated. - 16 WLANs at maximum are supported. - 32 ACLs can be created. - 64 Bonjour rules can be created

This articles describes the maximum number of DPSKs, WLANs, ACLs and Guest Passes supported on Unleashed 200.1 APs

2018-12-26T12:49:22-0800 2018-12-26T18:00:15-0800 https://support.ruckuswireless.com/articles/000005742 2018-12-26T13:14:40-0800 monthly 0.8 admin,premium knowledge_article_3518 knowledge_article_3518 2016-05-17T07:48:02-0700 000005742 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Is it possible to Export list of active clients from ZD No, ZD web GUI does not provide this option. However, this is possible from Command Line Interface: ruckus>enable ruckus#show current-active-clients all

This article explains how to extract currently active client list from ZD

2018-12-26T13:14:40-0800 2018-12-26T18:00:11-0800 https://support.ruckuswireless.com/articles/000005694 2018-12-26T13:07:29-0800 monthly 0.8 admin,premium knowledge_article_2311 knowledge_article_2311 2016-04-27T16:25:48-0700 000005694 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway Why am I unable to modify an AP's GPS coordinates? Upgrade to 3.4.1 or higher and you can overwrite location on individual APs.

Trying to make changes to AP configuration to include GPs Coordinates, but they cant be changed from an existing set of coordinates, any attempt gets reverted back.

2018-12-26T13:07:29-0800 2018-12-26T18:00:08-0800 https://support.ruckuswireless.com/articles/000005153 2018-12-26T11:38:15-0800 monthly 0.8 admin,premium knowledge_article_2172 knowledge_article_2172 2015-10-05T10:19:28-0700 000005153 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware Configuration, Firmware, ZoneDirector What is the maximum number of characters in Guest Access Terms and Conditions T&C page? What is the maximum number of characters allowed for Guest Access Terms and Conditions? <img alt="User-added image" height="281" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094h1&feoid=00N50000002Cf3M&refid=0EM50000000HL1I" width="500"></img> ZD1200 running 9.12.0.0.140 displays 8000 character maximum. <img alt="User-added image" height="181" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094h1&feoid=00N50000002Cf3M&refid=0EM50000000HL1N" width="500"></img>

2018-12-26T11:38:15-0800 2018-12-26T12:00:17-0800 https://support.ruckuswireless.com/articles/000005236 2018-12-26T11:49:53-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_2191 knowledge_article_2191 2015-10-28T14:38:22-0700 000005236 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Firmware Firmware, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, virtual SmartCell Gateway SmartMesh: Q&A technology information video - What do you need to know? The following link is Sr. SW developer Wilson So, providing underlying technology details related to Ruckus SmartMesh, from a taped Q&A session. Terms used include RAP (root AP), MAP (mesh AP), and eMAP (AP extended by Eth from a MAP). <a href="http://ruckus-training.s3.amazonaws.com/SmartMesh/SmartMeshQA_360p.mp4" target="_blank">http://ruckus-training.s3.amazonaws.com/SmartMesh/SmartMeshQA_360p.mp4</a>

The associated video link provides Q&A and info about many topics related to Ruckus SmartMesh technology.

2018-12-26T11:49:53-0800 2018-12-26T12:00:15-0800 https://support.ruckuswireless.com/articles/000005209 2018-12-26T11:48:50-0800 monthly 0.8 admin,premium knowledge_article_2204 knowledge_article_2204 2015-11-03T15:50:53-0800 000005209 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway Why the APs are showing up as registration pending on the SCG/vSZ/SZ? If the AP appears as disconnected in the staging zone then check the registration status. - If it is showing up as "Pending", then check for the approve icon at the end of the line item to approve the AP. If that icon is not there then move the AP to another AP Zone and the AP will get automatically approved. - If it shows as "Rejected", then check the no.of licenses available on vSCG.

This article gives you information on why the APs are showing up as registration pending on the SCG

2018-12-26T11:48:50-0800 2018-12-26T12:00:14-0800 https://support.ruckuswireless.com/articles/000002283 2018-12-26T11:45:18-0800 monthly 0.8 admin,premium knowledge_article_2209 knowledge_article_2209 2013-11-22T14:04:04-0800 000002283 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What is the use of Force DHCP on WLAN? <div>ZoneDirector’s WLAN creation page now includes an option to disallow clients with a manually configured static IP address from connecting to the wireless network. If the Force DHCP option is enabled, any wireless client with a static IP address will not be allowed to access the WLAN.</div> <div> Explaination: If we configure a static IP to the client and try to connect to the WLAN where the Force DHCP option is enabled,then the client will be kicked from that WLAN as this client is configured static IP address. And only the clients which are getting IP address from the DHCP server only will be allowed to this WLAN. This option is available in the firmware version 9.7 and above.</div>

Force DHCP is available from firmware version 9.7 and above

2018-12-26T11:45:18-0800 2018-12-26T12:00:13-0800 https://support.ruckuswireless.com/articles/000005005 2018-12-26T11:43:45-0800 monthly 0.8 admin,premium knowledge_article_2095 knowledge_article_2095 2015-08-10T11:59:48-0700 000005005 Validated (External) Premium Zoneflex indoor Performance;Configuration;Installation;System network management;Troubleshooting;Known issues and workarounds Performance, Configuration, Installation, System Network Management, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor What to do to negotiate 802.3at power between R710 AP and POE+switches There are 3 requirements for the R710s to negotiate 802.3at power between itself and the POE+ switch, two of them are on the POE+ switches and one on the Ruckus R710-: 1. LLDP must be enabled on the POE+ switches. 2. LLDP Power via MDI must be enabled on the POE+ switches. The command to enable LLDP and LLDP power via MDI will vary depending on the make of the switch. 3. LLDP and LLDP POE setting must be enabled on the R710s. R710s received with 100.2.0.0.336 have both LLDP and LLDP POE setting ENABLED by default. However, R710s received with firmware prior to 100.2.0.0.336 DON'T have LLDP and LLDP POE setting enabled by default. These settings WON'T be enabled even after upgrading to 100.2.0.0.336 or RuckOS 3.1.1.x.x or later. So if R710s received with firmware prior to 100.2.0.0.336, then later upgraded to 100.2.0.0.336 or 3.1.1.x.x, still need to have LLDP and LLDP POE enabled. This can be done via CLI on the R710. rkscli: set lldp enable rkscli: set lldp poe enable You can do a get lldp to make sure the ap took the two config changes. rkscli: get lldp LLDP state: Enabled LLDP interval: 30 LLDP holdtime: 120 LLDP mgmt: Enabled LLDP poe: Enabled LLDP power: 25000 LLDP interface: LLDP on eth0 : Enabled LLDP on eth1 : Enabled OK PS: Negotiation may take up to 2 minutes after system is up. --- Customers report success after following this example on Juniper switches: <a href="https://www.juniper.net/techpubs/en_US/release-independent/nce/information-products/pathway-pages/nce/nce-152-LAG-Ruckus-configuring.pdf" target="_blank">https://www.juniper.net/techpubs/en_US/release-independent/nce/information-products/pathway-pages/nce/nce-152-LAG-Ruckus-configuring.pdf</a>

This article describes what needs to be done to negotiate 802.3at power between R710 AP and POE+switches

2018-12-26T11:43:45-0800 2018-12-26T12:00:12-0800 https://support.ruckuswireless.com/articles/000001302 2018-12-26T08:52:50-0800 monthly 0.8 admin,premium knowledge_article_2138 knowledge_article_2138 2012-04-03T13:56:33-0700 000001302 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector Are event log entries saved over reboot? <div class="sfdc_richtext">ZD event logs preserved over reboot and power loss. The log is circular – new events will overwrite old ones after the 500 events limit has been reached. Supported number of event ZD model wise: ZoneDirector 1000 = 500 events internally ZoneDirector 1100 = 2500 events internally ZoneDirector 1200 = 2500 events internally ZoneDirector 3000 = 2500 events internally ZoneDirector 5000 = 2500 events internally</div>

Are event log entries saved over reboot?

2018-12-26T08:52:50-0800 2018-12-26T12:00:08-0800 https://support.ruckuswireless.com/articles/000001220 2018-12-26T10:44:06-0800 monthly 0.8 admin,premium knowledge_article_2134 knowledge_article_2134 2012-03-21T12:01:11-0700 000001220 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How AP acts for 802.11a auto channel Selection? 1) If this is a standalone 802.11a band AP, will it make channel changes for interference (and DFS) on it’s own? No, only for DFS events. It does not change channel because of rogue APs or interference. However, right after powering up the AP scans the air and selects the best available channel and it has an algorithm to do it. 2) If APs are managed by ZD, will ZD send the message to change channels to APs (at 600s/10min intervals) for interference, if there is just 1 AP? Yes, ZD will re-calculate channels every 10 minutes or depending upon set time interval for channel scanning (Channel fly or background scanning) and if changes are necessary, the AP will be notified. 3) Does DFS trigger immediately on ZD and standalone APs with 5ghz radios? If the AP detects radar, it changes its channel immediately and notifies the ZD so that that channel is avoided for some period of time, you will see mute logs in AP support info as below. Jul 12 14:08:24 RuckusAP user.warn kernel: ol_ath_mute_dfs;1899: Muting DFS Jul 12 14:08:24 RuckusAP user.warn kernel: ol_if_hal_getDfsRadars: called: domain = 2 Jul 12 14:08:24 RuckusAP user.warn kernel: ol_if_hal_getDfsRadars: DFS_ETSI_DOMAIN_AR9888nol_if_hal_setRadarWaitTime: Set waitTime 0 Jul 12 14:08:24 RuckusAP user.warn kernel: starting mute state

802.11a Channel Selection

2018-12-26T10:44:06-0800 2018-12-26T12:00:07-0800 https://support.ruckuswireless.com/articles/000004826 2018-12-25T12:58:27-0800 monthly 0.8 admin,premium knowledge_article_3515 knowledge_article_3515 2015-07-07T12:02:15-0700 000004826 Validated (External) Premium Virtual smartcell gateway Configuration;Firmware;System network management Configuration, Firmware, System Network Management, virtual SmartCell Gateway Can we have different AP firmware on vSZ managed AP zones? Yes, each and every AP Zone can have a different firmware version in vSZ-H (Any version) and vSZ-E starting from 3.5.1 version. We can push any firmware to any AP zone just by selecting Change AP Firmware in vSZ, using the below configuration steps. 1. Configure-> AP zone-> Select AP zone, we can see a tab called "Change AP Firmware". 2. We can see current AP zone firmware and available firmware in that vSCG. 3. We can select and push firmware to that AP zone based on design and requirement.

Multiple versions of software can be deployed based on AP zones, so now AP's in different AP zones can have different Firmware versions.

2018-12-25T12:58:27-0800 2018-12-25T18:00:21-0800 https://support.ruckuswireless.com/articles/000004873 2018-12-25T12:03:11-0800 monthly 0.8 admin,premium knowledge_article_2023 knowledge_article_2023 2015-07-13T00:46:59-0700 000004873 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, SmartCell Gateway, virtual SmartCell Gateway Why is a user not redirected to the start page set on an SCG hotspot when an external portal is configured? After the external portal receives confirmation that the user has logged in successfully, it should send a 302 header to redirect the user to their start page. In the case where the "startURL" querystring parameter is set, this should be the URL sent, else the "url" setting should be used. EG: <?php header("Location: ".(isset($_GET['startURL']) && $_GET['startURL'] != "")? $_GET["startURL"] : $_GET["url"]); ?>

This article explains that in the case of a WISPr configuration with external portal, the startURL query string parameter is set during the redirect if the start page URL is explicitly set by the operator. The SCG will not perform the redirect, the portal is responsible for this using a 302 header

2018-12-25T12:03:11-0800 2018-12-25T18:00:20-0800 https://support.ruckuswireless.com/articles/000004881 2018-12-25T13:04:09-0800 monthly 0.8 admin,premium knowledge_article_2027 knowledge_article_2027 2015-07-14T08:10:04-0700 000004881 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway What causes wrong locationing on apps that show user location? Mapping tools use various methods to collect location data. Google Street View cars is one such example. Apart from collecting panoramic views, they also collect SSID information of various wireless networks seen on their way. But most popular and cheaper way of collecting SSID data remains same across various mapping tools and their 3rd party location data providers. They usually collect SSID networks seen by the smartphones, etc. and combines it with GPS coordinates submitted by these devices. It enables location databases to map SSID information with user's location. So when a wireless network (that includes multiple APs managed by a controller) is used in Beijing, the mapping tools will map corresponding wireless MAC addresses (called BSSIDs) with a location in Beijing internally in their databases. When the same wireless gear gets used in San Francisco, the mapping tools will recognize the BSSIDs and think the user is in Beijing. This causes wrong locationing when a user pulls up an app that provides location. This data gets purged and straightened once usage goes up at the new location. But this can take a week or two. Until then the problems will persist when users are on this WiFi network. Google and other mapping solutions provide a method to prevent this. This involves using SSIDs with "_nomap" suffix. This will make Google Maps to ignore such wireless networks. This might need to be done only once for a week or so. This will make the tools to exclude if the same BSSIDs seen again.

This article explains what could cause a person in San Francisco to look like he is in Beijing or so.

2018-12-25T13:04:09-0800 2018-12-25T18:00:19-0800 https://support.ruckuswireless.com/articles/000004871 2018-12-25T12:18:57-0800 monthly 0.8 admin,premium knowledge_article_2043 knowledge_article_2043 2015-07-22T11:13:05-0700 000004871 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector How do I integrate a Zone Director controlled AP network in an MDU apartment complex where Access Points can cover more then one apartment Three Options are available: 1. Consult with GPON vendor and disable ONU/ONT isolation 2. Install one or more AP dedicated per apartment/dwelling on dedicated WLAN/SSID and VLAN 3. Tunnel traffic to Zone Director so VLAN's are sent in LWAPP tunnel and borken out at Zone Director Ethernet interface. This solution puts a large burden on ZD architecture

Multi Dwelling Unit installation using GPON fiber transport. Each Apartment has ONU unit but RF design does not need AP per apartment due to Wood Frame construction.

2018-12-25T12:18:57-0800 2018-12-25T18:00:17-0800 https://support.ruckuswireless.com/articles/000004976 2018-12-25T13:09:25-0800 monthly 0.8 admin,premium knowledge_article_2084 knowledge_article_2084 2015-08-05T10:30:54-0700 000004976 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Firmware;Known issues and workarounds Performance, Firmware, Known Issues and Workarounds, SmartCell Gateway What could cause my SCG-200 to become unresponsive? Install patch on affected version, or upgrade firmware to SZ version 3.1.1 or later release.

Certain malformed packets incorrectly handled, can result in dramatically increased system logs, leading to free disk space depletion.

2018-12-25T13:09:25-0800 2018-12-25T18:00:15-0800 https://support.ruckuswireless.com/articles/000003861 2018-12-25T13:07:09-0800 monthly 0.8 admin,premium knowledge_article_2102 knowledge_article_2102 2015-01-09T04:08:23-0800 000003861 Validated (External) Premium Scg200;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, SCG200, virtual SmartCell Gateway How do I configure external TACACS+ authentication of vSCG/SCG administrators Introduction The TACACS (<a href="https://tools.ietf.org/html/rfc1492" target="_blank">RFC1492</a>) and, more recently, TACACS+ protocol is useful for providing external authentication support for many network devices, including routers, switches and Ruckus controllers. TACACS+ integration with a vSCG or SCG-200 (hereafter referred to as an "SCG") provides TACACS+ users access to the administrative Web User Interface (UI) of the SCG. SCG Configuration SCG 2.1.3 / SCG 2.5 / SCG 2.5.1 / RuckOS 3.0? <ol><li>Mouse over the "Configuration" menu and select the "Administrators" option.</li><li>Scroll to the section with heading "AAA Servers for Administrators" *</li><li>Click "Create New".</li></ol> * Note that in SCG 2.1.3, SCG 2.5.0 and SCG 2.5.1, the heading is "RADIUS Servers for Administrators" and not "AAA Servers for Administrators". The new server form requires the completion of a number of parameters: <table border="0" style="width: 600px;"><thead><tr><th colspan="1" rowspan="1" style="text-align: left;">Parameter</th><th colspan="1" rowspan="1" style="text-align: left;">Description</th><th colspan="1" rowspan="1" style="text-align: left;">Example</th></tr></thead><tbody><tr><td colspan="1" rowspan="1">Name:</td><td colspan="1" rowspan="1">Provide a descriptive name for the service</td><td colspan="1" rowspan="1">My TACACS server</td></tr><tr><td colspan="1" rowspan="1">Type:</td><td colspan="1" rowspan="1">The type of authentication service being configured</td><td colspan="1" rowspan="1">TACACS+</td></tr><tr><td colspan="1" rowspan="1">Service:</td><td colspan="1" rowspan="1">Enter a service name, which the user will append to their username when signing in. For example, if the TACACS+ username is "test" and the service name is "tacacs", the user will enter "test@tacacs" as the username at the login prompt.</td><td colspan="1" rowspan="1">tacacs</td></tr><tr><td colspan="1" rowspan="1">IP Address:</td><td colspan="1" rowspan="1">Provide the IP of the TACACS+ server</td><td colspan="1" rowspan="1">192.168.0.100</td></tr><tr><td colspan="1" rowspan="1">Port:</td><td colspan="1" rowspan="1">The port on which the TACACS+ server listens</td><td colspan="1" rowspan="1">49 (default)</td></tr><tr><td colspan="1" rowspan="1">Shared Secret:</td><td colspan="1" rowspan="1">Provide a secret key, one which is known to both the TACACS+ server and the SCG</td><td colspan="1" rowspan="1">TACACS1!</td></tr><tr><td colspan="1" rowspan="1">Confirm Secret:</td><td colspan="1" rowspan="1"> Re-enter the secret to confirm</td><td colspan="1" rowspan="1">TACACS1!</td></tr></tbody></table> Press "OK" to save the new configuration. Testing The new TACACS+ service can be tested by: <ol><li>Mouse over the "Configuration" menu and select the "Administrators" option.</li><li>Scroll to the section with heading "AAA Servers for Administrators"</li><li>Click "Test AAA"</li><li>Select the new TACACS+ server from the "Name:" dropdown list</li><li>Enter the username (as configured on the TACACS+ server) with an "@" character, followed by the service name. E.g: user1@tacacs</li><li>Enter the password as configured on the TACACS+ server</li><li>Press the "Test" button to verify a successful integration</li></ol> Troubleshooting Potential issues include: <ul><li>TACACS+ server is unreachable (no response). Verify by issuing a "ping" from the SCG CLI.</li><li>The shared secret configured on the TACACS+ server does not match the one configured on the SCG</li><li>The username/password pair supplied are invalid on the TACACS+ server</li><li>TACACS+ server is not responding with the correct mandatory fields. It must include:</li></ul> <table border="0" style="width: 500px;"><thead><tr><th colspan="1" rowspan="1" style="text-align: left;">Attribute</th><th colspan="1" rowspan="1" style="text-align: left;">Description</th><th colspan="1" rowspan="1" style="text-align: left;">Example</th></tr></thead><tbody><tr><td colspan="1" rowspan="1">service (MANDATORY)</td><td colspan="1" rowspan="1">The service name configured on the SCG</td><td colspan="1" rowspan="1">mytacacs</td></tr><tr><td colspan="1" rowspan="1">user-name (MANDATORY)</td><td colspan="1" rowspan="1">The local username on the SCG from which to inherit permissions</td><td colspan="1" rowspan="1">admin</td></tr></tbody></table>

This article describes the configuration required on the vSCG/SCG-200 for successful integration with a TACACS+ server

2018-12-25T13:07:09-0800 2018-12-25T18:00:13-0800 https://support.ruckuswireless.com/articles/000004931 2018-12-25T13:08:15-0800 monthly 0.8 admin,premium knowledge_article_2107 knowledge_article_2107 2015-08-17T15:26:08-0700 000004931 Validated (External) Premium Mobile apps;RUCKUS One Mobile Apps;Ruckus Cloud Mobile Apps Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Mobile Apps Why I am not able to connect to vSPoT using SPoT Calibration App ? Login Error if Custom server URL is only IP address of the vSPoT server. <img alt="User-added image" height="889" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094fA&feoid=00N50000002Cf3M&refid=0EM50000000LpfC" width="500"></img> Custom Server URL should be http://<vSPoT IP>:8443 ?or https://<vSPoT IP>:8443 ? <img alt="User-added image" height="1212" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094fA&feoid=00N50000002Cf3M&refid=0EM50000000LpfH" width="500"></img> Android and iOS App download links: https://itunes.apple.com/us/app/ruckus-spot-smart-positioning/id822443884?mt=8 https://play.google.com/store/apps/details?id=com.ruckuswireless.spot&hl=en

SPoT calibration app fails to connect to vSPoT.

2018-12-25T13:08:15-0800 2018-12-25T18:00:12-0800 https://support.ruckuswireless.com/articles/000002827 2018-12-25T13:10:27-0800 monthly 0.8 admin,premium knowledge_article_803 knowledge_article_803 2014-03-27T17:39:09-0700 000002827 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor How can I recover APs lost after changing ZoneDirector VLAN and IP address? Changing ZoneDirector IP address to old IP address while keeping access VLAN to new ID resolved the issue. Note: Customer could also have configured the new VLAN to be AP's management VLAN with AP CLI commands, (the same ones they probably used when assigning static IPs): rkscli: Usage: set ipaddr {wan|video|mgmt} [vlan <vlan id>] {options} -> <ipaddr> <netmask> <gateway> "static IP case" -> dynamic "DHCP case " rkscli: rkscli: so they would enter the new VLAN X info, with: set ipaddr mgmt vlan X

Access Point/ZoneDirector connectivity issue tiggred after changing the ZoneDirectior acess VLAN and IP address.

2018-12-25T13:10:27-0800 2018-12-25T18:00:11-0800 https://support.ruckuswireless.com/articles/000005059 2018-12-25T13:15:07-0800 monthly 0.8 admin,premium knowledge_article_3514 knowledge_article_3514 2015-08-21T14:39:35-0700 000005059 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;System network management Configuration, Firmware, System Network Management, ZoneDirector What are the effects of enabling GuestPass Self-Service on a WLAN? Enabling GuestPass Self-Service disables Admin role privilege to create guest passes for the WLAN.

Enabling GuestPass Self-Service will 1) remove previous Guest Passes, and 2) will not allow Guest Admin role users to create guest passes for this WLAN anymore.

2018-12-25T13:15:07-0800 2018-12-25T18:00:08-0800 https://support.ruckuswireless.com/articles/000001897 2018-12-25T08:21:48-0800 monthly 0.8 admin,premium knowledge_article_1838 knowledge_article_1838 2013-12-29T17:38:32-0800 000001897 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector Working with SNMP without using SNMP traps option on ZD Please see the attached document to understand the SNMP manager setup process for querying and managing ZD. Please use correct read (R) string for querying and read-write (RW) string for querying as well changing configuration on ZD. MIBs can be downloaded from the Ruckus Support website. Ensure you load ROOT and TC MIBs first while loading them into the SNMP manager.

This article provides an example setup for querying ZD using a SNMP manager tool.

2018-12-25T08:21:48-0800 2018-12-25T12:00:23-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PDXkCAO?attachment_index=0 2018-12-25T12:00:23-0800 monthly admin,premium knowledge_article_1838 knowledge_article_1838_attachment_1 SNMP management without Traps (1).pdf 708219.0 application/pdf https://support.ruckuswireless.com/articles/000004338 2018-12-25T08:10:49-0800 monthly 0.8 admin,premium knowledge_article_1892 knowledge_article_1892 2015-04-17T07:39:02-0700 000004338 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Configuration Configuration, SZ100 How to configure VLAN pooling in SZ100? How to configure vlan-pooling? To create or update the VLAN pooling profile configurations, use the following command. ruckus(config)# vlan-pooling <name> Syntax Description This command uses the following syntax: name: Web authentication name Default This command has no default settings. Command Mode Config Example: SZ100-Node1(config)# vlan-pooling vlanorange SZ100-Node1(config-vlan-pooling)# How to delete vlan-pooling? To delete all VLAN pooling profiles, use the following command. ruckus(config)# no vlan-pooling <vlan-pooling ${vlanPoolingName}?> |<name> Syntax Description This command uses the following syntax: vlan-pooling ${vlanPoolingName}? name: Name of the VLAN pooling profile Default This command has no default settings. Command Mode Config Example: SZ100-Node1(config)# no vlan-pooling vlanservice1 Do you want to continue to delete (or input 'no' to cancel)? [yes/no]

These SmartZone CLI commands can be used to configure VLAN pooling

2018-12-25T08:10:49-0800 2018-12-25T12:00:22-0800 https://support.ruckuswireless.com/articles/000004600 2018-12-25T08:16:20-0800 monthly 0.8 admin,premium knowledge_article_1895 knowledge_article_1895 2015-05-25T03:46:20-0700 000004600 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway Why is my WISPr redirect not working on my SCG-200 controller? After creating a UDID on each SCG-200 node and ensuring its reachable by the UEs and the captive portal host, the SCG-200 redirect should be working. If not, it may be prudent to check the UE configuration, including the IP address, gateway and DNS settings.

This article describes common issues which may cause the WISPr redirect to fail on the SCG-200 controller

2018-12-25T08:16:20-0800 2018-12-25T12:00:21-0800 https://support.ruckuswireless.com/articles/000004559 2018-12-25T11:34:45-0800 monthly 0.8 admin,premium knowledge_article_1916 knowledge_article_1916 2015-05-14T20:01:34-0700 000004559 Validated (External) Premium Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, ZoneDirector, SmartCell Gateway I have Internet access, why will my VPN not connect? Typically reducing the GRE MTU in the traffic profile to between 1300 & 1400 should resolve connection issues resulting from MTU mismatches.

This article describes reasons why a VPN may not establish over a wifi network

2018-12-25T11:34:45-0800 2018-12-25T12:00:19-0800 https://support.ruckuswireless.com/articles/000004731 2018-12-25T11:41:15-0800 monthly 0.8 admin,premium knowledge_article_3511 knowledge_article_3511 2015-06-18T02:18:46-0700 000004731 Validated (External) Premium Zonedirector;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance Performance, ZoneDirector, virtual SmartCell Gateway Why doesn't browser Pop-up on its own for Web-Authentication? The feature of a Browser pop-up (Pseudo Browser) is a Client based feature and unless clients initiate Http or Https traffic the Browse will not pop-up on its own. Please also ensure that Bypass CNA is not ticked or Enabled from ZD UI, Configure :: WLANs :: Bypass Apple CNA Feature

The Browser does not Pop-up on its own when connecting to a SSID configured for Web-authentication like Guest Access, Hotspot service, Zero IT, Captive Portal authentication against ZD

2018-12-25T11:41:15-0800 2018-12-25T12:00:14-0800 https://support.ruckuswireless.com/articles/000004693 2018-12-25T08:36:46-0800 monthly 0.8 admin,premium knowledge_article_3510 knowledge_article_3510 2015-06-18T01:41:43-0700 000004693 Validated (External) Premium Scg200;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SCG200 How do I define search filters in the SCG-200 controller? On the SCG-200 WebUI, you can define various search criteria in the Monitor >> Client section: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094ck&feoid=00N50000002Cf3M&refid=0EM50000000Llpd"></img> These filter options are case sensitive. For example, 'Client MAC' value needs to be entered in capital letters as shown in the next figure: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094ck&feoid=00N50000002Cf3M&refid=0EM50000000Llpi"></img>

This article explains how to accurately define search filter options in SCG-200

2018-12-25T08:36:46-0800 2018-12-25T12:00:13-0800 https://support.ruckuswireless.com/articles/000002207 2018-12-25T06:25:52-0800 monthly 0.8 admin,premium knowledge_article_2118 knowledge_article_2118 2013-08-30T03:31:15-0700 000002207 Validated (External) Premium Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Security;System network management Configuration, Security, System Network Management, ZoneDirector, SmartCell Gateway What are the RADIUS Authentication and Accounting attribute supported by Ruckus Controller? Please refer to the attached Tech note for detailed explanation regarding Radius attributes and Ruckus vendor specific attributes.

Tech note: Working with Radius Attributes and Accounting

2018-12-25T06:25:52-0800 2018-12-25T12:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PE4UCAW?attachment_index=0 2018-12-25T12:00:09-0800 monthly admin,premium knowledge_article_2118 knowledge_article_2118_attachment_1 Radius-attributes-and-accounting.pdf 821868.0 application/pdf https://support.ruckuswireless.com/articles/000005066 2018-12-25T02:00:43-0800 monthly 0.8 admin,premium knowledge_article_2123 knowledge_article_2123 2015-09-02T16:39:37-0700 000005066 Validated (External) Premium Virtual smartcell gateway Performance;Known issues and workarounds Performance, Known Issues and Workarounds, virtual SmartCell Gateway why the APs GUI access is disabled when it joins vSZ? When an AP joins the vSZ, its http /https service will be disabled by default and cannot be accessible via GUI but the access will still be enabled. The service is turned off to save memory once AP is managed by vSZ. If the GUI service is needed, we can enable it using the below commands. rkscli: set http/https enable.

This articles gives you the information on why the APs GUI access is disabled when it joins vSZ

2018-12-25T02:00:43-0800 2018-12-25T06:00:11-0800 https://support.ruckuswireless.com/articles/000001894 2018-12-25T02:14:06-0800 monthly 0.8 admin,premium knowledge_article_2550 knowledge_article_2550 2014-02-11T23:31:12-0800 000001894 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;System network management Configuration, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor Is it possible to use both TR-069 & SNMP management option in stand alone AP simultaneously? Solution: The answer is No. We cannot use the TR-069 & SNMP management option in stand alone AP simultaneously. It works as follows. Find the details below. <div style="font-family: Arial; font-size: 13px;">TR069 / SNMP Management Choice These radio buttons determine the remote management access options. With Auto, the DSLForum.org TR-069 protocol will be tried first to make contact with the configured Automated Configuration Server (ACS); SNMP support will be turned on if TR-069 fails to find the ACS.</div> <div style="font-family: Arial; font-size: 13px;"> </div> You can select SNMP only option and can configure the SNMP based credentials. After that you can select the Auto option. Now whenever the TR-069 fails, The SNMP option will be turned on.

Is it possible to use both TR-069 & SNMP management option in stand alone AP simultaneously ?

2018-12-25T02:14:06-0800 2018-12-25T06:00:09-0800 https://support.ruckuswireless.com/articles/000002479 2018-12-24T13:02:24-0800 monthly 0.8 admin,premium knowledge_article_3504 knowledge_article_3504 2014-01-09T08:34:11-0800 000002479 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to apply ACL to allow specific SNMP server to communicate with APs? SNMP ACL on the Controller: There is no SNMP ACL on the controller but snmp mgmt can be controlled through the mgmt ACL(configure>system> mgmt acl). And it is not applicable for the APs snmp mgmt and we can still query AP if you just know its address. If we want to control APs snmp mgmt in above scenario. We need apply snmp acl on the AP from the controller. Here are the example syntax of the commands: <div>ruckus(debug)# remote_ap_cli -A set snmp-acl </div> <div>Commands starting with 'set snmp-acl' :</div> <div>set snmp-acl : set snmp-acl {options}</div> <div> -> {enable|disable}</div> <div> -> {add|del} <ipaddr></div> <div> -> clear -- delete all entries</div> <div> -- Modify SNMP ACL Settings</div> <div> </div> Example: <div>ruckus(debug)# remote_ap_cli -A set snmp-acl enable ruckus(debug)# remote_ap_cli -A set snmp-acl add < ip address of snmp server ></div>

SNMP ACL on the ZD and APs

2018-12-24T13:02:24-0800 2018-12-24T18:00:13-0800 https://support.ruckuswireless.com/articles/000004353 2018-12-24T12:32:58-0800 monthly 0.8 admin,premium knowledge_article_1731 knowledge_article_1731 2015-04-10T02:01:51-0700 000004353 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why is iOS8 client failing to redirect when other clients are not failing? Configure the domain name to use something other than .local - to allow iOS8 to do proper DNS lookup for redirect. <a href="https://support.apple.com/en-in/TS3389" style="color: rgb(59, 115, 175); text-decoration: none;" target="_blank">See Apple info on this: https://support.apple.com/en-in/TS3389</a> & <a href="http://blog.h2consultants.com/2015/name-resolution-issues-with-local-domains-in-yosemite-and-ios-8" style="color: rgb(59, 115, 175); text-decoration: none;" target="_blank">http://blog.h2consultants.com/2015/name-resolution-issues-with-local-domains-in-yosemite-and-ios-8</a>

Web redirect is failing to occur on my portal setup, but only with iOS8 clients. All the other clients are working fine, and iOS7 also working with out any issues. Enabled Apple Bypass CNA for Guest Access but this made no difference in the redirect for that OS.

2018-12-24T12:32:58-0800 2018-12-24T18:00:10-0800 https://support.ruckuswireless.com/articles/000004183 2018-12-24T12:50:31-0800 monthly 0.8 admin,premium knowledge_article_1641 knowledge_article_1641 2015-03-17T13:44:19-0700 000004183 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;System network management Configuration, Installation, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why are my APs getting disconnected with this message "[Get Configurations Fault]" If the ZD is running any code prior to 9.8, simply change the Admin password to something that does not have the noted special characters then upgrade. If the ZD has already been upgraded to 9.8 and the APs are disconnected, downgrade the ZD to the previous code, wait for the APs to re-connect, then change the admin password to something that does not have the noted special characters, and upgrade again.

Upgrading from older code to 9.8 causes AP to stay disconnected with this message "[Get Configurations Fault]"

2018-12-24T12:50:31-0800 2018-12-24T18:00:09-0800 https://support.ruckuswireless.com/articles/000003376 2018-12-24T09:35:56-0800 monthly 0.8 admin,premium knowledge_article_3502 knowledge_article_3502 2014-09-11T05:57:04-0700 000003376 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Installation;System network management Firmware, Installation, System Network Management, ZoneDirector What is ZD remote control application and requirements to install it? <div>ZoneDirector Remote Control is an application that enables users to configure & monitor Ruckus ZoneDirectors (ZDs) and Access Points (APs). <div> </div> <div> <div>Requirements:</div> <div> </div> <div>Requires Android OS version 4.1 and onwards and a Ruckus ZoneDirector running firmware 9.5 or later.</div> </div> </div> <div> </div> <div>How to install on your device:</div> <div> </div> <div>> Login to your Google account and install this app on to your device which is mapped to your Google account. Below is the link to download the app from Google Play. https://play.google.com/store/apps/details?id=com.ruckuswireless.remote&hl=en</div> <div> </div> <div>> Once the app is installed, login to the ZD by giving the its IP address and credentials.</div> <div> </div> <div>The following tasks can be created from the client tablet or phone.</div> <div> </div> <div>- Adding / removing & monitoring WLANs</div> <div>- Adding & monitoring new APs</div> <div>- Viewing which clients are using Wi-Fi, which APs they’re on and how much traffic they’re using</div> <div>- Seeing how much traffic is on Wi-Fi</div> <div>- Add, modify & remove Guest Pass</div> <div> </div>

Monitoring and configuring the ZoneDirector from a remote application.

2018-12-24T09:35:56-0800 2018-12-24T12:00:22-0800 https://support.ruckuswireless.com/articles/000001692 2018-12-24T09:22:15-0800 monthly 0.8 admin,premium knowledge_article_1441 knowledge_article_1441 2013-02-28T17:23:39-0800 000001692 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector If AD Group is mapped with two or more Roles in the ZD, which role the ZD will use first? Use the least number of group attributes (one if possible) for the role lookup. The algorithm is a best match/first match – if more than one attribute is matched then the role that matches the MOST is chosen. If two roles match the same number of attributes then the first role that matches is chosen.

Role mapping for AD based authentication and preferred role if multiple roles are found

2018-12-24T09:22:15-0800 2018-12-24T12:00:19-0800 https://support.ruckuswireless.com/articles/000003382 2018-12-24T09:27:00-0800 monthly 0.8 admin,premium knowledge_article_1457 knowledge_article_1457 2014-11-25T13:10:37-0800 000003382 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why syslog server has different timestamp when the external server is mapped to ZD? - In an external syslog server debugging logs, kernel logs, event logs and all the system logs always use GMT system time . They cannot be changed at all. - All the other information logs like AP-ZD connectivity, client connectivity, redundancy setup logs, roaming will use either pc time or browser UTC time.

Some logs have correct local time, others have unasjusted GMT

2018-12-24T09:27:00-0800 2018-12-24T12:00:18-0800 https://support.ruckuswireless.com/articles/000003717 2018-12-24T09:42:54-0800 monthly 0.8 admin,premium knowledge_article_1468 knowledge_article_1468 2014-12-01T07:37:54-0800 000003717 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway Why does my iOS client fail to reconnect when exiting sleep mode ? Upgrade the iOS clients to 8.1.1 or higher as this is solved by Apple SW fix - customer confirmed this.

I have R700's and many different wireless clients. I am using iOS 8.1 , and 802.11r is activated on the WLAN. The iPad Air 2 connects fine to start with but after it has been in sleep mode for an extended time it does not reconnect. To fix this I need to reboot the iPad Air and then it connects perfectly. This issue does not happen on any other client. It only happens on new iPad Air 2, all other iPad's and iPhones work fine. Even iPhone 6 and 6 + work fine. I see 'reason code 1' in the syslogs for the client.

2018-12-24T09:42:54-0800 2018-12-24T12:00:16-0800 https://support.ruckuswireless.com/articles/000002768 2018-12-24T09:44:44-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_1153 knowledge_article_1153 2014-03-11T01:05:17-0700 000002768 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Why don't I see any role under the Role dropdown when I tried to create a batch of DPSKs?

This article explains how to make roles available under the DPSK generation section.

2018-12-24T09:44:44-0800 2018-12-24T12:00:14-0800 https://support.ruckuswireless.com/articles/000004021 2018-12-24T11:34:37-0800 monthly 0.8 admin,premium knowledge_article_1582 knowledge_article_1582 2015-02-04T01:20:14-0800 000004021 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector How to change NTP server sync interval on APs? Current NTP settings can be seen by running "get ntp" command from AP's CLI. It will show the NTP server currently being used, current data and time, and the sycn interval with the NTP server. Here is an example: rkscli: get ntp Device GMT time : Wed Feb 4 05:25:46 2015 Active NTP Server : ntp.ruckuswireless.com Backup NTP Server : ntp.ruckuswireless.com NTP Sync Interval : 60 minutes NTP enabled: yes OK rkscli: Like explained in the summary section above, if the default sync interval is not enough to keep the AP's clock within the tolerable 10 seconds for LBS to work correctly, you can lower the sync interval via ZD's CLI. Below is the command sequenc to run: Please login: admin Password: Welcome to the Ruckus Wireless ZoneDirector 3000 Command Line Interface ruckus> en ruckus# debug You have all rights in this mode. ruckus(debug)# remote_ap_cli -A "set ntp sync_interval 15" ---- Command 'rkscli -c "set ntp sync_interval 15 "' executed at 2c:5d:93:0e:4b:60 OK ---- Command Execution Summary: success: 1 failure: 0 total: 1 ruckus(debug)# You can cross-check the new setting by logging into AP CLI and by running the "get ntp" command.

LBS requires tight integration with the standard NTP clock. APs constantly send client data to LBS for it to show location data on a map. If the data sent by APs is more than 10 seconds (from correct time), LBS will discard the data. On a standard deployment APs clock can drift over time. It will get corrected after a sync with the NTP server. If the time drift is more common, it is suggested to perform sync with the NTP server more frequently. This article explains how this can be done using the ZD's CLI.

2018-12-24T11:34:37-0800 2018-12-24T12:00:13-0800 https://support.ruckuswireless.com/articles/000004101 2018-12-24T11:36:57-0800 monthly 0.8 admin,premium knowledge_article_1609 knowledge_article_1609 2015-02-27T09:43:32-0800 000004101 Validated (External) Premium Zonedirector;Sams;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;Smart Access Management (SAMs) Configuration;Installation Configuration, Installation, ZoneDirector, SAMs What does session configuration mean in SAMs Find the details below. Session configuration is done on a per User basis. Assume that session is configured as following on SAMs: - Session length of 15mins - Total no of sessions: 2 - Time period of 1 day As per the above configuration, a Single User can have 2 sessions per day with a single session length of 15 mins.

2018-12-24T11:36:57-0800 2018-12-24T12:00:12-0800 https://support.ruckuswireless.com/articles/000004111 2018-12-24T11:39:33-0800 monthly 0.8 admin,premium knowledge_article_3501 knowledge_article_3501 2015-03-02T10:07:35-0800 000004111 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector How does Ruckus work with Barracuda FW? Barracuda systems have a check-box to identify the wireless platform as Ruckus. It tells the Barracuda Web filter product to capture the syslog from Ruckus and use it to identify username and IP address for each user connecting over the Wi-Fi. This allows the Barracuda Web filter to apply the same granular policies for Wi-Fi users as it does for users connecting over the wired network. Without this, Barracuda, and other web content filter vendors, can only apply generic policies to users coming in over the Wi-Fi.

Ruckus provides syslog to Barracuda, filtering username/IP address, to apply ACL policies

2018-12-24T11:39:33-0800 2018-12-24T12:00:10-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PIGACA4?attachment_index=0 2018-12-24T12:00:10-0800 monthly admin,premium knowledge_article_3501 knowledge_article_3501_attachment_1 Ruckus-Barracuda Interop.pdf 562599.0 application/pdf https://support.ruckuswireless.com/articles/000004209 2018-12-24T11:47:51-0800 monthly 0.8 admin,premium knowledge_article_1668 knowledge_article_1668 2015-03-25T05:41:25-0700 000004209 Validated (External) Premium Flexmaster;FlexMaster Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, FlexMaster 1-Open network config to check the host name used: etc/sysconfig/network <img alt="hostname of FM" height="184" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Z7&feoid=00N50000002Cf3M&refid=0EM50000000HG0P" width="500"></img> 2- Open the host file to edit_verify etc/host file <img alt="wrong order" height="125" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Z7&feoid=00N50000002Cf3M&refid=0EM50000000HG0U" width="500"></img> 3- Edit file and restart FM - shown here in correct format <img alt="User-added image" height="114" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Z7&feoid=00N50000002Cf3M&refid=0EM50000000HG0Z" width="500"></img> 4- ./restart.sh 5- Consult with TechSupport if the issue persists after making this change.

I can't see any data in my reports in FlexMaster. This was working fine before I upgraded the FM version.

2018-12-24T11:47:51-0800 2018-12-24T12:00:09-0800 https://support.ruckuswireless.com/articles/000004206 2018-12-24T11:43:56-0800 monthly 0.8 admin,premium knowledge_article_3384 knowledge_article_3384 2018-09-19T23:24:11-0700 000004206 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What to do when the "Enable Smart Redundancy" option is not available on the Zone Director (Grayed out). Disable Limited ZD Discovery option on Zone director to enable Smart Redundancy feature.

What is to be done when the "Enable Smart Redundancy" option is not available on the Zone Director (Grayed out).

2018-12-24T11:43:56-0800 2018-12-24T12:00:08-0800 https://support.ruckuswireless.com/articles/000005880 2016-07-12T14:15:00-0700 monthly 0.8 admin,premium knowledge_article_2377 knowledge_article_2377 2016-07-12T14:15:00-0700 000005880 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;Virtual smartcell gateway;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway, SZ100 What's the best way to setup Mesh APs? Begin with all your APs connected to the ZD/SZ controller by wire, so they get fully configured first, then detach their Eth cables and deploy where you need them to Mesh from.

Begin with all your APs connected to the ZD/SZ controller by wire, so they get fully configured first, then detach their Eth cables and deploy where you need them to Mesh from.

2016-07-12T14:15:00-0700 2018-12-11T15:46:43-0800 https://support.ruckuswireless.com/articles/000006741 2018-12-10T15:53:13-0800 monthly 0.8 admin,premium knowledge_article_3491 knowledge_article_3491 2017-12-12T14:34:11-0800 000006741 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products What are the requirements and best practices for hitless-failover on FastIron switch stacks? Hitless failover in the event that stack master crashes, loses power, or has a system failure: To prepare for this, there are only two requirements. 1) Have a functioning stack 2) Enable hitless failover with the single global configuration command: <code>FastIron# config ter FastIron(config)# hitless-failover enable FastIron(config)# end FastIron# write mem</code> This configuration is very limited. It does not allow the administrator to failover roles by CLI and a failover event can be very disruptive once it occurs for reasons described in the next section. Hitless failover that allows for switching over active and standby roles by CLI: To prepare for this, there are four requirements: 1) Have a functioning stack 2) Enable hitless failover 3) Units with the active and standby roles must have the same priority 4) A stack mac must be configured A sample configuration would look like this: FastIron# config ter FastIron(config)#! FastIron(config)# hitless-failover enable FastIron(config)#! FastIron(config)# stack mac 748e.f8de.a89a FastIron(config)#! FastIron(config)# stack unit 1 FastIron(config-unit-1)# priority 200 FastIron(config-unit-1)#! FastIron(config-unit-1)# stack unit 2 FastIron(config-unit-2)# priority 200 FastIron(config-unit-2)#! FastIron(config-unit-2)# stack unit 3 FastIron(config-unit-3)# priority 100 FastIron(config-unit-3)#! FastIron(config-unit-3)# stack unit 4 FastIron(config-unit-4)# priority 100 FastIron(config-unit-4)#! FastIron(config-unit-4)# end FastIron#! FastIron# write mem FastIron#! If the requirements for priority have not been met, a warning is printed to the terminal after an attempt to failover by CLI: <code>FastIron# stack switch-over </code> <code>My priority = 200 is not equal to standby priority 100. abort</code> The best practice is to enable the second version of hitless failover due to its many advantages. The stack mac causes less disruption in other points of the network when there is a failover within the stack, whatever the cause. It allows the stack to maintain consistency at layer two for multiple protocols. For example LACP, 802.1d or 802.1w. Otherwise the system ID or bridge ID changes due to failover and this is disruptive. At layer three, If the stack is performing routing, connected hosts can continue to use the same ARP cache.

What are the requirements and best practices for hitless-failover on FastIron switch stacks?

2018-12-10T15:53:13-0800 2018-12-10T18:00:21-0800 https://support.ruckuswireless.com/articles/000007666 2018-12-10T15:17:25-0800 monthly 0.8 admin,premium knowledge_article_3481 knowledge_article_3481 2018-03-08T14:20:39-0800 000007666 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches Customer deployed an ICX7450 and uses connected to this ICX7450 were unable to receive the multicast stream Solution: Remove the existing route in the ICX7450 going to the VIP and create new routes to the Ve251 as follow: no ip route 10.100.0.0/16 10.50.101.1 ip route 10.100.0.0/16 10.50.101.3 ------> going to ICX7750-South ip route 10.100.0.0/16 10.50.101.2 ------> going to ICX7750-North

Customer deployed an ICX7450 and uses connected to this ICX7450 were unable to receive the multicast stream

2018-12-10T15:17:25-0800 2018-12-10T18:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TwL4CAK?attachment_index=0 2018-12-10T18:00:09-0800 monthly admin,premium knowledge_article_3481 knowledge_article_3481_attachment_1 PIM does not run on VIP.pdf 221660.0 application/pdf https://support.ruckuswireless.com/articles/000006415 2018-12-08T01:39:55-0800 monthly 0.8 admin,premium knowledge_article_3479 knowledge_article_3479 2017-08-15T02:52:25-0700 000006415 Validated (External) Premium Zonedirector;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, virtual SmartCell Gateway Why windows 7 clients are unable to connect with 802.1x SSID The authentication issue with Windows server 2016 is only observed with Windows 7 clients, but the same authentication works fine for all Windows 10 machines. Customer has to upgrade OS on all clients to 10, or roll back to Windows server 2012, as NAP (Network Access Protection) is not supported on windows server 2016.

Customer has migrated all the NPS settings from Windows server 2012 to Windows Server 2016 Standard NPS server

2018-12-08T01:39:55-0800 2018-12-08T06:00:22-0800 https://support.ruckuswireless.com/articles/000002919 2018-12-08T01:47:24-0800 monthly 0.8 admin,premium knowledge_article_1813 knowledge_article_1813 2014-04-14T05:24:44-0700 000002919 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor How do you configure ToS_DSCP on the Ruckus AP? To change these values to match the desired switch port settings use : set qos eth0 tos mark enable <div>set qos tos classify voice 46 set qos tos mark voice 46</div> <div>exit use get qos again to verify</div> <div> This enables and sets the Ethernet port for ToS_DSCP marking.</div> <div> </div> <div>Refer to this chart for DSCP Decimal and Hex values to affect changes. <img alt="User-added image" height="482" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094RD&feoid=00N50000002Cf3M&refid=0EM50000000LSvo" width="500"></img> </div>

I want to configure the APs to mark the IP traffic with DSCP specifics for VoIP, but am not sure how to do this.

2018-12-08T01:47:24-0800 2018-12-08T06:00:20-0800 https://support.ruckuswireless.com/articles/000001917 2018-12-08T02:26:01-0800 monthly 0.8 admin,premium knowledge_article_943 knowledge_article_943 2014-02-03T15:36:45-0800 000001917 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Is there any way to block certain MAC addresses without those clients being currently on the network? Using the Access Controls configuration options, you define Layer2/MAC address ACLs, which can then be applied to one or more WLANs (upon WLAN creation or edit). ACLs are either allow-only or deny-only; that is, an ACL can be set up to allow only specified clients or to deny only specified clients. MAC addresses that are in the deny list are blocked at the AP, not at the ZoneDirector. To configure an L2/MAC ACL: 1. Go to Configure > Access Control. 2. In L2/MAC Access Control, click Create New. a. Type a Name for the ACL. b. Type a Description of the ACL. c. Select the Restriction mode as either allow or deny. d. Type a MAC address in the MAC Address text box, and then click Create New to save the address. The new MAC address that you added appears next to the Stations field. You can enter up to 128 MAC addresses. 3. Click OK to save the L2/MAC based ACL. You can create up to 32 L2/MAC ACL rules and each rule can contain up to 128 MAC addresses. You can apply the ACL for a specific WLAN in Configure>WLAN>Create New or Edit a WLAN>Advanced Options>Access Control. We can apply only 1 ACL per WLAN.

How to block certain MAC addresses using Access Control Lists

2018-12-08T02:26:01-0800 2018-12-08T06:00:18-0800 https://support.ruckuswireless.com/articles/000004056 2018-12-08T03:03:40-0800 monthly 0.8 admin,premium knowledge_article_3475 knowledge_article_3475 2015-02-19T13:11:05-0800 000004056 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor How to configure MAC ACL on WLAN for standalone Access Point via CLI ? <div style="text-align: center;">Commands to configure MAC ACL on Access Point</div> Syntax : rkscli: set acl <wlan name> mac <allow / disable> //** Creating ACL on the WLAN **// rkscli: set acl <wlan name> mac add <MAC Address> //** Adding MAC address of the client to the ACL **// rkscli: get acl <wlan name> //** To get the list of MAC addresses added to the ACL **// Example : rkscli: set acl wlan1 mac allow OK rkscli: set acl wlan1 mac add 00:11:22:33:44:55 OK rkscli: get acl wlan1 'wlan1' MAC ACL: white list, access to authorized MACs only ============================================================ 1: 00:11:22:33:44:55 OK

Configuration of MAC ACL on WLAN for standalone Access Point via CLI

2018-12-08T03:03:40-0800 2018-12-08T06:00:14-0800 https://support.ruckuswireless.com/articles/000006371 2018-12-08T03:11:37-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_3474 knowledge_article_3474 2017-05-11T05:00:09-0700 000006371 Validated (External) Public Which port do I connect to on an SCG when initial configuration? When we connect to an SCG from the first time or after a factory reset, we need to connect to a specific port. This will depend on the version of the SCG, but we can find two different situations: Default IP of SCG after factory reset is always 192.168.2.2: <ul><li>Old SZ versions (like 2.1.3): Connect to SCG CONTROL interface, ETH0 (lower down left port)</li><li>New SZ versions (like 3.4.1): Connect to SCG MANAGEMENT interface, ETH2 (upper left port)</li></ul> After this you can continue connecting with a browser to <a href="http://192.168.2.2:8080/" target="_blank">http://192.168.2.2:8080 <img alt="SCG200 ports" height="227" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Rr&feoid=00N50000002Cf3M&refid=0EM50000000FayC" width="500"></img></a>

This KBA summarizes the type of ports we need to connect to an SCG when initial configuration

2018-12-08T03:11:37-0800 2018-12-08T06:00:13-0800 https://support.ruckuswireless.com/articles/000001227 2018-12-08T03:19:03-0800 monthly 0.8 admin,premium knowledge_article_369 knowledge_article_369 2012-03-21T12:01:17-0700 000001227 Validated (External) Premium Flexmaster;FlexMaster Configuration Configuration, FlexMaster I want to upload a device inventory file in Flexmaster before deploying APs in the feild. How do I do that? A device inventory file can be uploaded to FlexMaster well before deploying APs in the field. This file (in XLS format) must contain: <ul><li>serial number</li><li>model number</li></ul> Go to Inventory ? Device Registration page to upload this file.

I want to upload a device inventory file in Flexmaster before deploying APs in the feild. How do I do that?

2018-12-08T03:19:03-0800 2018-12-08T06:00:12-0800 https://support.ruckuswireless.com/articles/000004585 2018-12-08T03:30:35-0800 monthly 0.8 admin,premium knowledge_article_3473 knowledge_article_3473 2015-07-01T04:40:59-0700 000004585 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway How to disable AP Auto-Approval feature via CLI of vSCGe or SZ-100 The below CLI commands in red can be used to disable the Automatic approve. Training-vSCG-Enterprise# config Training-vSCG-Enterprise(config)# no ap-auto-approve Do you want to continue to disable (or input 'no' to cancel)? [yes/no] yes Successful operation Training-vSCG-Enterprise(config)# exit The current configuration can be verified by the command: Training-vSCG-Enterprise# show running-config ap-approval Access Point Policies ---------------------------------------------------------------- AP Approval : Disabled

This article explains how to disable the AP auto approval feature found in the vSCGe or SZ-100 via the CLI interface.

2018-12-08T03:30:35-0800 2018-12-08T06:00:11-0800 https://support.ruckuswireless.com/articles/000001910 2018-12-08T03:35:39-0800 monthly 0.8 admin,premium knowledge_article_279 knowledge_article_279 2013-04-02T10:14:39-0700 000001910 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration Performance, Configuration, ZoneDirector How to resolve performance issue with Airplay We disabled Directed Muticast and IGMP Snooping and it resolved the issue. The following commands are for converting multicast to unicast for optimized and speedier transmissions to connected clients. Some applications cannot handle receiving a multicast frame in a unicast format, so they drop the frames causing application failure. The commands below allow for multicast transmission in original format, i.e. multicast frames. Please login to ZD's CLI mode using a SSH client like Putty or TeraTerm and execute the following commands: Ruckus> Ruckus>en ruckus# config ruckus(config)# wlan [wlan that is used for AirPlay] ruckus(config-wlan)# no qos directed-multicast ruckus(config-wlan)# qos directed-threshold 0 It is often useful to disable IGMP Snooping and the commands below are for that: ruckus> en ruckus# debug ruckus(debug)# remote_ap_cli –A “set qos igmp_query v2 disable” ruckus(debug)# remote_ap_cli –A “set qos igmp_query v3 disable” ruckus(debug)# remote_ap_cli –A “set qos mld_query v1 disable” ruckus(debug)# remote_ap_cli –A “set qos mld_query v2 disable”

Customer was using Airplay with his Apple devices and was having some performance issues with the same.

2018-12-08T03:35:39-0800 2018-12-08T06:00:10-0800 https://support.ruckuswireless.com/articles/000003492 2018-12-08T05:18:48-0800 monthly 0.8 admin,premium knowledge_article_3472 knowledge_article_3472 2014-10-10T14:04:38-0700 000003492 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Installation;System network management;Troubleshooting;Known issues and workarounds Installation, System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway Why is Twitter login credential does not work in SAM? From SAM site management, it doesn't contain the *.twitter.com wildcard. After adding this wildcard in the WALLED GARDEN, client successfully authentication using Twitter login. <img alt="User-added image" height="561" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094SL&feoid=00N50000002Cf3M&refid=0EM50000000LZef" width="500"></img>

Twitter login does not work in Odyssys Captive Portal

2018-12-08T05:18:48-0800 2018-12-08T06:00:09-0800 https://support.ruckuswireless.com/articles/000003895 2018-12-08T05:25:32-0800 monthly 0.8 admin,premium knowledge_article_1572 knowledge_article_1572 2015-01-26T05:20:34-0800 000003895 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway How to change Reboot Timeout configuration settings for Access Points connected to vSCG? Access Point Reboot Timeout configuration settings:- Login to vSCG GUI using admin login credential and navigate to Configuration >> Access Points >> Common Settings > Advance Options >> AP Reboot Timeout. <img alt="User-added image" height="281" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094SQ&feoid=00N50000002Cf3M&refid=0EM50000000Ld1A" width="500"></img> For vSZ 3.5 and later firmware version, please follow below screenshot. Please navigate to SZ GUI >> Access points >> Select the zone and click Edit >> in zone config navigate to Advance options. <img alt="User-added image" height="243" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094SQ&feoid=00N50000002Cf3M&refid=0EM2J000000lzDC" width="500"></img>

Reboot Timeout configuration settings for Access Points connected to vSCG

2018-12-08T05:25:32-0800 2018-12-08T06:00:08-0800 https://support.ruckuswireless.com/articles/000004262 2018-12-07T13:24:00-0800 monthly 0.8 admin,premium knowledge_article_3469 knowledge_article_3469 2015-04-22T19:01:35-0700 000004262 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation;Known issues and workarounds Configuration, Firmware, Installation, Known Issues and Workarounds, SmartCell Gateway How to break/expand multi-node cluster on SCG? <ol><li>Joining cluster (Expand multi-node cluster):</li></ol> Make sure the SCG version is the same as the SCG leader in the cluster. Please note: in a 3 interface configuration (vSCG-H) each of the 3 interface types must be on a separate Subnet/VLAN (Control, Management, Cluster) and each node must be in the same LAN for that interface - ie all Cluster interfaces for each node must be in the same subnet/VLAN, same for Control and Management. With basic network configuration done, we can use the admin portal to setup for joining cluster. At the http://<ip of the SCG>:8080, we can do the cluster joining by choosing “join existing cluster” as below: <img alt="User-added image" height="316" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Qe&feoid=00N50000002Cf3M&refid=0EM50000000LiRN" width="500"></img> Input the “SCG cluster IP”, “Admin Password”, “cluster name” and “controller description” to join: <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Qe&feoid=00N50000002Cf3M&refid=0EM50000000LiQZ"></img> Click “next “ and confirm. <img alt="User-added image" height="370" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Qe&feoid=00N50000002Cf3M&refid=0EM50000000LiRS" width="500"></img> The SCG joining is done as below. <img alt="User-added image" height="294" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Qe&feoid=00N50000002Cf3M&refid=0EM50000000LiQj" width="500"></img> The Cluster can be made of up to 4 nodes of SCG. ---------------------------- <ol><li>Disconnect SCG from the cluster (breaking the cluster)</li></ol> We can disconnect SCG with GUI as below, by clicking the “red minus” button and then confirm it: <img alt="User-added image" height="294" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Qe&feoid=00N50000002Cf3M&refid=0EM50000000LiQo" width="500"></img> <img alt="User-added image" height="268" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Qe&feoid=00N50000002Cf3M&refid=0EM50000000LiQt" width="500"></img> The follower node will be disconnected from the cluster, and it will be erased as factory reset.

SCG configured as cluster (Max. 4 SCGs in a cluster with one SCG leader), this will tell you how to join and break a node from cluster.

2018-12-07T13:24:00-0800 2018-12-07T18:00:07-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PIPqCAO?attachment_index=0 2018-12-07T18:00:07-0800 monthly admin,premium knowledge_article_3469 knowledge_article_3469_attachment_1 KBA_cluster.docx 551871.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000003794 2018-12-06T22:05:33-0800 monthly 0.8 admin,premium knowledge_article_1514 knowledge_article_1514 2014-12-25T06:09:09-0800 000003794 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector Migrating configuration from one Zone Director to another, Configuration from ZD1000 to ZD1100 * Make sure that both the Zone Directors are on the same version. If the new/old Zone Director has managed APs make sure that they are on the same version too. Step 1: Log into the WEB UI of the old Zone Director to save the backup. Step 2: Check the current version running on old Zone Director by selecting Dashboard tab -> System Overview, once we get to know current version click on the Administer tab and then choose Back Up option. Refer the below screen capture. <img alt="Zone Director Back Up page screenshot" height="240" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Pv&feoid=00N50000002Cf3M&refid=0EM50000000LJil" width="584"></img> Step 3: Now click on Back Up option and save the file to your local PC. Step 4: Log into the WEB UI of the Zone Director you want to restore the back up and check the current version running. If we observe the same version proceed to the next step, if not matching upgrade/downgrade the new Zone Director to match the old Zone Director version. Step 5: Click on the Administer tab and then under Restore Configuration, click 'Choose File' button and browse to the saved backup file. Then click upload. Step 7: Once after hitting upload the new Zone Director starts to upload the configuration and after successful restore configuration Zone Director restarts itself to display login screen. Note: If the New/Replaced/Higher version is on the Zone Director that you want to restore the configuration then you could try this too. Regarding ZD1100 upgrade from ZD1000 model, recognize that ZD1000 last supported version is 9.4.3.0.21, and ZD1100 needs to be on this version too for a configuration transfer.

Process to transfer the configuration from old Zone Director to new/higher model/replaced Zone Director

2018-12-06T22:05:33-0800 2018-12-07T00:00:11-0800 https://support.ruckuswireless.com/articles/000004192 2018-12-06T22:15:01-0800 monthly 0.8 admin,premium knowledge_article_1640 knowledge_article_1640 2015-03-17T13:45:24-0700 000004192 Validated (External) Premium Zonedirector 5000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector 5000 How to Factory Reset ZD5000 ? <div style="text-align: center;">Factory Reset procedure for ZD5000</div> <ul><li>Factory Reset / Hard reset button is available on the Control Panel of ZD5000.</li><li>It is located just below the power button. # 7 - NMI pin hole button (factory reset button).</li><li>Press and hold for 10 to 15 seconds using a paper clip. </li><li>ZoneDirector will reboot and you will be able to access it using default IP 192.168.0.2 address.</li></ul> <img alt="User-added image" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Q0&feoid=00N50000002Cf3M&refid=0EM50000000LgG3"></img>

Hard reset / Factory reset procedure for ZD5000

2018-12-06T22:15:01-0800 2018-12-07T00:00:10-0800 https://support.ruckuswireless.com/articles/000001963 2018-12-06T22:20:14-0800 monthly 0.8 admin,premium knowledge_article_298 knowledge_article_298 2013-04-25T13:47:09-0700 000001963 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor How to find the statistics of clients in an AP Log into the AP using SSH and execute the following: get station <wlan name> [list|info|stats] {all|<mac-addr>} list: List stations associated to the WLAN. info: Display station information. stats: Display station statistics.

2018-12-06T22:20:14-0800 2018-12-07T00:00:09-0800 https://support.ruckuswireless.com/articles/000001559 2014-01-11T14:12:21-0800 monthly 0.8 admin,premium knowledge_article_190 knowledge_article_190 2013-01-29T09:36:37-0800 000001559 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell ap Performance Performance, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP Low throughput on performance tests when AP's are adjacent Customer is giving demo and he is placing the APs very near for testing purpose and he reported to us that he was experiencing low throughput issues. There are no other devices or APs which can interfere these APs and the PHY errors are reasonable when I checked the support info file. Test 1: Ran the speed flex tests when the APs are very near. The speed flex results are bad. Test 2: Ran the speed flex tests when the APs are far. The speed flex results are good. Test 3: Ran the speed flex tests by moving the APs some meters away, but still the speed flex results are bad. Solution: Even though there were no other source of interferences around the APs, since these two APs are close to each they were interfering each other. So I have asked customer to reduce the Tx power of the APs and this gave us the positive results.

2014-01-11T14:12:21-0800 2018-12-04T07:36:17-0800 https://support.ruckuswireless.com/articles/000008665 2018-12-03T15:49:01-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_3463 knowledge_article_3463 2018-12-03T15:47:36-0800 000008665 Validated (External) Public Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Installation;Security Configuration, Installation, Security, Unleashed How to I create a Google Social Media WLAN in Unleashed? It's very simple to create a social media google WLAN from an Unleash GUI perspective. But the process is somewhat intricate and confusing configuring this in the Google API for developers section of a Google account. This configuration is done at the https://developers.google.com/products and selecting Google API Console. The process is described in the attached. The beginning process is the following. 1. Go to the create Unleashed Social Media WLAN GUI option 2. Before generating and entering the Google Client ID and Client password, click on the "click here to generate one" to generate Client ID and Client password - this in the Social Media Google WLAN section of the GUI, clicking 'here' will redirect Unleashed administrator to google account Google API Console. ... For complete details, see attached document.

The attached guide will assist to setup a Google Social Media WLAN on Unleashed.

2018-12-03T15:49:01-0800 2018-12-03T18:00:06-0800 http://support.ruckuswireless.com/article_attachments/kA22J0000008o17SAA?attachment_index=0 2018-12-03T18:00:06-0800 monthly admin,premium,warranty,guest knowledge_article_3463 knowledge_article_3463_attachment_1 UnleashedGoogleSocialMediaCreation.pdf 1178746.0 application/pdf https://support.ruckuswireless.com/articles/000008536 2018-11-21T14:22:39-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_3457 knowledge_article_3457 2018-11-14T09:07:21-0800 000008536 Validated (External) Public Ruckus icx switches Security Security, Ruckus ICX Switches Is ICX Product vulnerable to CVE-2018-10933 ? As per Security team, ICX products are not Vulnerable to CVE-2018-10933 for all versions of code released up to 10/30/2018. ICX does not use libssh library. See Ruckus Security Bulletin here: https://support.ruckuswireless.com/security_bulletins/290

ICX does not use libssh library. ICX is NOT vulnerable to CVE-2018-10933.

2018-11-21T14:22:39-0800 2018-11-21T18:00:06-0800 https://support.ruckuswireless.com/articles/000008522 2018-11-12T10:45:53-0800 monthly 0.8 admin,premium knowledge_article_3456 knowledge_article_3456 2018-11-12T10:45:09-0800 000008522 Validated (External) Premium M510;Ruckus M510;Ruckus M510-JP Configuration Configuration, M510 How to configure username and password in M510 AP for SIM Card SZ does not have any option to configure username and password LTE configuration but you can configure username and password from M510 AP CLI. <ul><li>set lte-sim-username : set lte-sim-username {primary|secondary} {User name}</li></ul> Omit the {User name} to disable/set to default <ul><li>set lte-sim-password : set lte-sim-password {primary|secondary} {Password}</li></ul> Omit the {Password} to disable/set to default You can execute "get lte-statistics" to display LTE configuration of M510 AP's.

How to configure username and password in M510 AP for SIM Card

2018-11-12T10:45:53-0800 2018-11-12T12:00:07-0800 https://support.ruckuswireless.com/articles/000008301 2018-09-21T14:45:45-0700 monthly 0.8 admin,premium knowledge_article_3360 knowledge_article_3360 2018-09-21T14:45:45-0700 000008301 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;Firmware Performance, Firmware, SmartCell Gateway, virtual SmartCell Gateway Where can I find SmartZone Scalability - SZ vs vSZ capacity numbers? Customers ask what are the maximum number of Users or WLANs on each SmartZone platform. Some question what are the differences in Virtual SmartZone Essential from High Scale, regarding: vSZ-E: <ul><li>Max number of Domains</li><li>Max number of AP zones</li><li>Max number of AP groups</li><li>Max number of WLAN groups</li></ul> vSZ-H: <ul><li>Max number of Domains</li><li>Max number of AP zones</li><li>Max number of AP groups</li><li>Max number of WLAN groups</li></ul> The following table shows the Scalability Overview of SmartZone products. Note: One correction, SZ300 can do Clients: /node up to 150k, /cluster up to 450k <img alt="User-added image" height="476" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000093St&feoid=00N50000002Cf3M&refid=0EM50000000ljgS" width="991"></img>

SmartZone product vary from large scale appliance or vSZ-H to vSZ-E or SZ-100 single domain services, each with varying number of supported users/features.

2018-09-21T14:45:45-0700 2018-11-09T03:43:52-0800 https://support.ruckuswireless.com/articles/000008593 2018-11-08T13:12:38-0800 monthly 0.8 admin,premium knowledge_article_3451 knowledge_article_3451 2018-11-08T11:30:19-0800 000008593 Validated (External) Premium Ruckus icx switches;Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches, SmartCell Gateway, virtual SmartCell Gateway How many ICX switches can we connect to a SmartZone 5.0 Cluster? Tables in the SZ 5.0 Release Notes detail the AP and Switch resource table: <img alt="User-added image" height="237" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Hm&feoid=00N50000002Cf3M&refid=0EM2J000000luyh" width="848"></img> <img alt="User-added image" height="676" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Hm&feoid=00N50000002Cf3M&refid=0EM2J000000luym" width="833"></img> And what is meant by L1 - L8 notations in the Profile column? It refers to Resource Level assigned to the VM. From the Virtual SmartZone 5.0 Getting Started Guide: <img alt="User-added image" height="345" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000094Hm&feoid=00N50000002Cf3M&refid=0EM2J000000luyc" width="876"></img> SmartZone 5.1 will have increases / improvements in scale.

See details in the Release Notes and Getting Started Guide for ICX switch count per SZ type cluster.

2018-11-08T13:12:38-0800 2018-11-08T18:00:07-0800 https://support.ruckuswireless.com/articles/000008402 2018-11-08T10:49:11-0800 monthly 0.8 admin,premium knowledge_article_3381 knowledge_article_3381 2018-10-15T16:17:26-0700 000008402 Validated (External) Premium Ruckus cloud wifi Configuration Configuration, Ruckus Cloud WiFi How do I setup WISPr / HotSpot / Captive Portal in Ruckus Cloud Wi-Fi environment? See the attached Ruckus Cloud WISPr Configuration for Captive Portal Providers technical tip for pre-requisites and configuration instructions.

The attached guide will help setup Captive Portal (WISPr) in the Ruckus Cloud Wi-Fi environment.

2018-11-08T10:49:11-0800 2018-11-08T12:00:08-0800 http://support.ruckuswireless.com/article_attachments/kA2500000008np6CAA?attachment_index=0 2018-11-08T12:00:08-0800 monthly admin,premium knowledge_article_3381 knowledge_article_3381_attachment_1 Cloud-WiFi-WISPr-Config-1.pdf 704269.0 application/pdf https://support.ruckuswireless.com/articles/000004738 2018-10-30T15:37:24-0700 monthly 0.8 admin,premium knowledge_article_3429 knowledge_article_3429 2018-10-30T15:36:52-0700 000004738 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector Why don't Android 4.4.4 and 5 get to external Hotspot page? This is a known Chrome browser bug/issue. Refer to the below mentioned URL for issue details:- <a href="https://chromiumcodereview.appspot.com/958163004/#ps40001" target="_blank">https://chromiumcodereview.appspot.com/958163004/#ps40001</a> Issue resolved on 43.0.2357.78 version Android Chrome.

Issue with Android client (tested version 4.4.4 and 5) that does not get the hotspot page (hosted on external webserver)

2018-10-30T15:37:24-0700 2018-10-30T18:00:06-0700 https://support.ruckuswireless.com/articles/000003846 2018-10-29T20:40:09-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3422 knowledge_article_3422 2015-05-12T19:18:13-0700 000003846 Validated (External) Public Smartcell gateway;SmartCell Gateway 200 (SCG200) Performance;System network management;Known issues and workarounds;Support license activation Performance, System Network Management, Known Issues and Workarounds, Support License Activation, SmartCell Gateway How does licensing works on SCG in cluster when the RMA is performed? <div style="">When the RMA is processed on a controller which is part of cluster and If there were any licenses associated with the defective unit identified in the RMA, </div> <ol><li style="">Ruckus will send the new LKU files to the customer email address associated with the RMA</li><li> The license file can be manually downloaded by the customer from <a href="https://support.ruckuswireless.com/" target="_blank">Ruckus Support portal</a> </li></ol> Below are the scenarios and the way the licenses work in cluster, when the controller in the cluster fails: For Example: If there are 4 SCG's that are part of cluster SCG-A, SCG-B, SCG-C and SCG-D and the licenses are purchased on SCG-C Scenario 1 – SCG-A, B or D fails: <ol><li> Controller can be replaced with no impact to licensing, since all the licenses are on SCG-C </li><li> Replacement unit can be added anytime and the license are applied across the cluster </li></ol> Scenario 2 – SCG-C fails: <ol><li> SCG-C licenses are still available on the cluster for 45 days, so there will not be any impact on the cluster for 45 days </li><li> A spare SCG (SCG-E) can be added to the cluster and it works fine till the 45th day </li><li> After 45 days, units A, B, D and E will cease operation, if SCG-C is not replaced with Ruckus </li><li> There will not be any impact on the cluster, If SCG-C is replaced with Ruckus and if the replacement SCG is part of cluster </li></ol> Scenario 3 – If the licenses are upgraded on the other controller (SCG-A) part of cluster <ol><li>The below table explains about how the licenses are managed across the cluster, when 100 AP licenses are upgraded on SCG-A, which is part of cluster:</li></ol> <img alt="User-added image" height="85" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J000000946e&feoid=00N50000002Cf3M&refid=0EM2J000000ltIu" width="500"></img>

Article explains about the licensing concept on SCG cluster, when the RMA is performed on a unit which is part of cluster

2018-10-29T20:40:09-0700 2018-10-30T00:00:11-0700 https://support.ruckuswireless.com/articles/000005995 2018-10-29T12:30:00-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_3419 knowledge_article_3419 2016-08-10T16:48:09-0700 000005995 Validated (External) Public Smartcell insight;SmartCell Insight (SCI) Installation;System network management;Known issues and workarounds;Support license activation Installation, System Network Management, Known Issues and Workarounds, Support License Activation, SmartCell Insight What are the FAQs for SCI 1.x to SCI 2.x ? <ol><li> I have SCI 1.x deployed already. Will it stop working if I do not upgrade to newer version? No. You can continue to use SCI 1.x, which is already deployed. However, you cannot deploy any new instances of SCI 1.x. It is recommended to migrate to SCI 2.x as soon as possible </li><li> Can I deploy SCI 1.x? We are no longer issuing the license keys for SCI 1.x..(After 31-Jul 2016), All license keys (Flexera/Smart Licensing/LiMan based) will work only on SCI 2.x., you can download and install SCI 2.x only </li><li> I am interested in upgrading from SCI 1.x to SCI 2.x. Can I re-use the SCI 1.x license keys on SCI 2.x? SCI 1.x license keys do not work on SCI 2.x. You need to swap SCI 1.x licenses with SCI 2.x license keys, so please <a href="https://support.ruckuswireless.com/contact-us" target="_blank">contact us</a> as soon as you upgrade to SCI 2.x. and we will help you with the migration </li><li> If I migrate to SCI 2.x, will I lose my SCI 1.x data? When SCI 2.x is deployed, SCI 1.x data will not be migrated by default. SCI 1.x data has to be migrated explicitly, We can help you migrate your SCI 1.x data successfully Please <a href="https://support.ruckuswireless.com/contact-us" target="_blank">contact us</a>. </li><li> Do I get any licenses by default with SCI 2.x? Each new SCI 2.x installation comes with unlimited Trial AP licenses for a period of 90 days. After 90 days SCI 2.x requires the purchase of RTU and one (1) AP license per physical AP to be analyzed, along with the support on RTU and it's AP Licenses To know what are the basic support and licenses required for SCI, <a href="#">Click here</a> For further details please have a look at <a href="https://support.ruckuswireless.com/documents/1099-smartcell-insight-version-2-0-release-notes" target="_blank">SCI 2.x Release Notes</a> available from the Ruckus Support Website. </li></ol>

SCI 1.x to SCI 2.x Frequently Asked Questions (FAQ)s

2018-10-29T12:30:00-0700 2018-10-29T18:00:18-0700 https://support.ruckuswireless.com/articles/000001572 2018-10-29T15:31:58-0700 monthly 0.8 admin knowledge_article_3415 knowledge_article_3415 2013-02-06T15:49:57-0800 000001572 Validated (External) Partner Zonedirector;Zoneflex indoor;Zoneflex outdoor;Ruckus support services;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Support license activation Performance, Support License Activation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, Ruckus Support Services What is NFR kit? NFR (Not For Resale) kits are made available to all the approved Partners with a discounted price. Equipment's in NFR Kit are only eligible for a 1 year warranty. NFR kit includes: <ul><li>1 ZoneDirector controller</li><li>3 AP's</li></ul> NFR Kits must be purchased with mandatory 1, 3 or 5 year WatchDog support on the ZoneDirector in the bundle. If you would like to purchase support on the APs, you may do so by placing an order with your Distributor. Please do provide the serial number of the AP's when placing the order. You may also renew the support on the ZD and the APs at the end of the original contract.

Article has got information about the NFR kit support

2018-10-29T15:31:58-0700 2018-10-29T18:00:12-0700 https://support.ruckuswireless.com/articles/000001235 2018-10-26T13:36:27-0700 monthly 0.8 admin,premium knowledge_article_41 knowledge_article_41 2012-03-21T12:01:17-0700 000001235 Validated (External) Premium All;Brocade Mobility 6511 Wallplate Access Point Configuration;Security Configuration, Security, All How do you configure 802.1x EAP authentication with DVLAN Please find the attached document for detailed instruction Overview This document describes how to install and configure dynamic VLANs on a RADIUS server. The document is broken into the following main categories: • Introduction and key concepts • Configure dynamic VLANs on Windows NPS • Configure dynamic VLANs on FreeRADIUS • Configure a ZoneDirector to use dynamic VLANs This document is not an exhaustive description of all possible solutions. It focuses on the two most popular RADIUS servers in use today: Windows Server (NPS) and FreeRADIUS. Requirements for this Document In order to successfully follow the steps in this document, the following equipment (at a minimum) is required and assumed: • Windows or Linux server • FreeRADIUS or NPS installation

Document which describes how to configure 802.1x EAP authentication with DVLAN

2018-10-26T13:36:27-0700 2018-10-26T18:00:14-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PBugCAG?attachment_index=0 2018-10-26T18:00:14-0700 monthly admin,premium knowledge_article_41 knowledge_article_41_attachment_1 RTN_Configuring_Dynamic_VLANs_v1.2.pdf 1742982.0 application/pdf https://support.ruckuswireless.com/articles/000001232 2018-10-26T14:20:54-0700 monthly 0.8 admin,premium knowledge_article_363 knowledge_article_363 2012-03-21T12:01:17-0700 000001232 Validated (External) Premium Flexmaster;FlexMaster Configuration Configuration, FlexMaster What ports are required for remote APs to communicate with FlexMaster (FM)? You have to open either port 80 or port 443 on the customer firewall so that APs can communicate the FlexMaster. You have to point the APs to the external IP address (or DNS name) of the FlexMaster server. If your APs are using DHCP to receive an IP address, you can provide the FlexMaster IP address or DNS name using option 43 on your DHCP server. See chapter "Ensuring That APs Can Connect to FlexMaster" of the FlexMaster User Guide on <a href="http://support.ruckuswireless.com/products/12-flexmaster" target="_blank">http://support.ruckuswireless.com/products/12-flexmaster</a>

TCP ports 443 and 80 are required to pass thru Firewalls for AP to FM communication.

2018-10-26T14:20:54-0700 2018-10-26T18:00:10-0700 https://support.ruckuswireless.com/articles/000008518 2018-10-26T09:15:10-0700 monthly 0.8 admin,premium knowledge_article_3406 knowledge_article_3406 2018-10-26T03:16:24-0700 000008518 Validated (External) Premium T710;Ruckus T710;Ruckus T710s Performance;Installation Performance, Installation, T710 How much PoE output power can the T710 provide when connected to 220v AC? The T710 can provide up to 802.3at (25.5 W) to the powered device via the PoE Out connection, when the T710 is connected to 220v AC.

The T710 can provide up to 802.3at (25.5 W) to the powered device via the PoE Out connection, when the T710 is connected to 220v AC.

2018-10-26T09:15:10-0700 2018-10-26T12:00:06-0700 https://support.ruckuswireless.com/articles/000007217 2017-12-12T15:45:08-0800 monthly 0.8 admin,premium knowledge_article_2842 knowledge_article_2842 2017-12-12T15:45:08-0800 000007217 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches BROCADE ICX TROUBLESHOOTING HIGH CPU WITH DM RAW <table class="sectionContent" style="width: 1003.7px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 828.14px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">YouTube video: <a href="https://www.youtube.com/watch?v=6a18tpkE_y4&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=6a18tpkE_y4&feature=youtu.be</a></div> </td></tr></tbody></table> </td></tr></tbody></table>

BROCADE CAMPUS FEATURE EXPLAINER SERIES:

2017-12-12T15:45:08-0800 2018-10-23T20:58:17-0700 https://support.ruckuswireless.com/articles/000005449 2018-10-23T11:46:34-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2256 knowledge_article_2256 2016-01-22T02:13:48-0800 000005449 Validated (External) Public Virtual smartcell gateway Known issues and workarounds;Support license activation Known Issues and Workarounds, Support License Activation, virtual SmartCell Gateway How long are the default vSZ-D licenses valid on vSZ? The 2 vSZ-D default licenses are valid for 90 days from the installation date and you need to purchase permanent vSZ-D licenses within 90 days to avoid service disruption. When the default vSZ-D capacity licenses are expired, vSZ will detect the same and remove the originally managed vSZ-D's. Removed vSZ-D's should connect back to vSZ again with their status as Pending.

Validation time frame and expiration behavior

2018-10-23T11:46:34-0700 2018-10-23T12:00:08-0700 https://support.ruckuswireless.com/articles/000005307 2018-10-18T11:14:45-0700 monthly 0.8 admin,premium knowledge_article_2475 knowledge_article_2475 2015-11-20T11:07:24-0800 000005307 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SZ100 Can I copy my configuration from SZ-104 to SZ-124 platform? The physical architecture of the two controllers (2 x 10G on SZ-124) prevent copying configuration (backup/restore) from an SZ-104 or vice versa.

The physical architecture of the two controllers (2 x 10G on SZ-124) prevent copying configuration from an ZS-104 or vice versa.

2018-10-18T11:14:45-0700 2018-10-23T02:18:02-0700 https://support.ruckuswireless.com/articles/000003422 2018-10-22T15:25:38-0700 monthly 0.8 admin,premium knowledge_article_1307 knowledge_article_1307 2014-09-22T16:51:00-0700 000003422 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Security;Troubleshooting Configuration, Installation, Security, Troubleshooting, ZoneDirector How to tell if a client has been permitted or denied by an access-list? On the ZD click on Monitor/Active wireless clients(Note: For ZD version 10.x and above, go to Clients >> Wireless Clients). In the active clients list look for a field that is labeled "Status". If there are no access-lists, the status will show as Authorized or UnAuthorized. If there is an access-list associated to the WLAN, then the status would be "Authorized(Permit)" or "Authorized(Deny)". <img alt="Screenshot of Active clients" height="56" src="https://c.na89.content.force.com/servlet/rtaImage?eid=ka22J00000093vM&feoid=00N50000002Cf3M&refid=0EM50000000LYtP" width="500"></img>

Where to look to see if a client has been denied or permitted

2018-10-22T15:25:38-0700 2018-10-22T18:00:07-0700 https://support.ruckuswireless.com/articles/000004227 2015-03-19T14:12:00-0700 monthly 0.8 admin,premium knowledge_article_1661 knowledge_article_1661 2015-03-19T14:12:00-0700 000004227 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware Configuration, Firmware, ZoneDirector What are the firmware version considerations before upgrading ZoneDirector/Access Points? ZoneDirector firmware format is as follows: A.B.C.D build E A+B = Version number C= Maintenance release number D= Interm number (not often used) E= The build version of the previous 4 numbers Caveats: C = 0 (Cutting edge, new product/feature support) C = 1+ (More stable, initial bug fixes) Like all technology vendors, we strive to make our "dot zero" GA release solid right out of the gate. Fixes not included and found since the initial release are available in the MR1. If you don't have new model or feature needs, MR1 is often the best recommended version to upgrade to.

What are the considerations before upgrading ZD/APs?

2015-03-19T14:12:00-0700 2018-10-19T12:26:21-0700 https://support.ruckuswireless.com/articles/000008380 2018-10-11T15:53:37-0700 monthly 0.8 admin,premium knowledge_article_3380 knowledge_article_3380 2018-10-11T15:53:37-0700 000008380 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, SZ100 How are SZ-100 ports configured with 1 and 2 port groups? Here are the functional port assignments for SZ-104 and SZ-124 with 1 and 2 port groups: <img alt="User-added image" height="404" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000093im&feoid=00N50000002Cf3M&refid=0EM50000000lpMx" width="740"></img>

See the embedded chart for interface configuration of SZ-100 with 1 and 2 port groups.

2018-10-11T15:53:37-0700 2018-10-11T18:00:08-0700 https://support.ruckuswireless.com/articles/000008365 2018-10-09T13:46:55-0700 monthly 0.8 admin,premium knowledge_article_3375 knowledge_article_3375 2018-10-09T13:46:55-0700 000008365 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;System network management Firmware, System Network Management, SmartCell Gateway, virtual SmartCell Gateway SZ: How do User Traffic Policies (UTP) work, how are they applied? Question: I know how to create and apply UTPs, but I'm wondering how they work. I have an SSID that is not configured to tunnel back to the controller (SmartZone 100). My AP's are on trunks that carry all the VLANS for the different VLAN pools. I can create a traffic policy and apply it to a user role and it works. I thought that would only work if I was tunneling the traffic to the controller and that any restrictions would have to be on the network level through ACL's. Answer: All the UTP actions are performed on the AP so that you can enforce consistent policies on both tunneled and non-tunneled WLANs. In role-based policy scenarios, if you are using the SZ to centralize the authentication process (i.e. SZ is AAA/RADIUS/NAS Client), then the role is resolved on the SZ and sent to the AP for policy mapping. Otherwise, the AP does this locally.

Tunneled WLANs can apply UTPs at central location, else APs apply them locally.

2018-10-09T13:46:55-0700 2018-10-09T18:00:07-0700 https://support.ruckuswireless.com/articles/000006927 2018-08-30T12:50:39-0700 monthly 0.8 admin,premium knowledge_article_3133 knowledge_article_3133 2017-12-12T14:11:59-0800 000006927 Validated (External) Premium Ruckus icx switches;Fastiron ws series;Fastiron cx series;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Troubleshooting Troubleshooting, Ruckus ICX Switches, FastIron WS Series, FastIron CX Series How to troubleshoot SNMP on FastIron devices? For issue # 1: Unable to poll a device: <ul><li>Check to see if you can ping the network management server from the FastIron device.</li><li>Check SNMP statistics as shown below. Look for the number of packets received or sent. i).Received = 0 means the device is not receiving any SNMP packets, check connectivity. ii). If the device is receiving SNMP packets but Sent = 0 means the device doesnt reply back, check for SNMP configuration, enable snmp-server by issuing "snmp-server" in config mode. iii). Look for incorrect SNMP version "bad versions", ensure that the NMS tool and the device are using the same SNMP version, default is version 2 on FastIron devices. iv). Look for incorrect community names, check "bad community names", verify that you are using correct read and write values on the NMS tool as they are configured on the device.</li></ul> #sh snmp SNMP Statistics 0 received, 0 sent Receive Statistics 0 bad versions, 0 bad community names 0 bad community uses, 0 asn parse errors, 0 memory errors 0 too bigs, 0 no such names, 0 bad values 0 read onlys, 0 general errors, 0 total request variables 0 total set variables, 0 get requests, 0 get next requests 0 set requests, 0 get responses, 0 traps Transmit Statistics 0 too bigs, 0 no such names, 0 bad values 0 general errors, 0 get requests, 0 get next requests 0 set requests, 0 get responses, 0 traps For issue # 2: snmpwalk returns incorrect values: <ul><li>Perform a packet capture on the interface connected to the FastIron Device.</li><li>Look at the SNMP request and response packets.</li><li>Ensure that SNMP request has a legitimate Brocade OID. Refer to the MIB reference guide to locate the correct OIDs.</li><li>Ensure that the corresponding SNMP reply has legitimate information as requested in the SNMP request and that there are no malformed packets, or incorrect OID.</li></ul>

How to troubleshoot SNMP on FastIron devices?

2018-08-30T12:50:39-0700 2018-10-08T20:19:05-0700 https://support.ruckuswireless.com/articles/000007331 2018-10-04T06:48:19-0700 monthly 0.8 admin,premium knowledge_article_3372 knowledge_article_3372 2017-12-12T14:36:06-0800 000007331 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches What is the Hitless-reload command used for? Syntax hitless-reload [ primary | secondary ] Parameters: primary Specifies that the management module will be reloaded with the primary image. secondary Specifies that the management module will be reloaded with the secondary image. Can be run on Privileged EXEC mode Usage Guidelines This command is supported on FSX devices only. If you will be using the hitless-reload command to perform the hitless upgrade, you must first copy the software image that supports hitless software upgrade onto the flash memory of the active and standby management modules. NOTE: The hitless-reload command is accepted only when the running configuration and startup configuration files match. If the configuration file has changed, you must first save the file (write mem) before executing a hitless reload. This command can be used in the following scenarios: <ul><li>In order to hitless upgrade, described above, without reloading completely the entire device.</li><li> Depending on the network environmental condition, hitless reload can be used as a troubleshooting step in the scenario in which the device can be affected by a possible defect, high cpu, or a scenario in which the user can resolve the problem with a reload, hitless reload can be used as a workaround without reloading the entire unit and preventing a complete downtime.</li></ul>

Hitless-reload command usage

2018-10-04T06:48:19-0700 2018-10-04T18:00:09-0700 https://support.ruckuswireless.com/articles/000002432 2018-09-30T23:23:17-0700 monthly 0.8 admin,premium knowledge_article_666 knowledge_article_666 2013-12-18T10:33:09-0800 000002432 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why was I unable to login to the Access point's web user interface managed by the zonedirector despite providing zonedirector's login credentials? The actual default administrator credentials of the Zone Director is used, which was configured during the initial setup wizard (or) from the Administer-->Preferences, then the logging to either Access point's Web User Interface (or) command line interface and Zonedirector's command line interface should be successful.

By default, any access point being managed by the zone-director can be accessed by logging with the zonedirector's login credentials. Same applies for the Command line interface as well. In this scenario, Access point will not allow to gain access even though the zonedirector login credentials are provided correctly while at the same time, you were successfully able to manage the zonedirector with the same user credentials. Even trying with the default Access point's login credentials will not help.

2018-09-30T23:23:17-0700 2018-10-01T18:00:06-0700 https://support.ruckuswireless.com/articles/000006600 2018-09-27T19:22:27-0700 monthly 0.8 admin,premium knowledge_article_3095 knowledge_article_3095 2017-12-12T14:27:14-0800 000006600 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration Configuration, ICX 7250, ICX 7450, ICX 7750 How to configure Uni-Directional Link Detection? <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div">! Configuration for UDLD on the access switch. SCH-ACCESS-101(config)# link-keepalive ethernet 1/1/18 vlan 22 SCH-ACCESS-101(config)# link-keepalive interval 4 SCH-ACCESS-101(config)# link-keepalive retries 10 ! Configuration for UDLD on the distribution switch. SCH-DIST-201(config)# link-keepalive ethernet 1/1/19 ethernet 1/2/1 ethernet 2/1/19 ethernet 2/2/2 ethernet 3/1/19 ethernet 3/2/2 vlan 1021 SCH-DIST-201(config)# link-keepalive interval 4 SCH-DIST-201(config)# link-keepalive retries 10 SCH-ACCESS-102# show link-keepalive Total link-keepalive enabled ports: 6 Keepalive Retries: 10 Keepalive Interval: 4 * 100 MilliSec. Port Physical Link Logical Link State Link-vlan 2/2/1 up up FORWARDING 1021 3/2/1 up up FORWARDING 1021 1/2/1 up up FORWARDING 1021 2/1/13 up up FORWARDING 1021 3/1/13 up up FORWARDING 1021 1/1/13 up up FORWARDING 1021 </div>

Uni-Directional Link Detection (UDLD) monitors a link between two Brocade devices that are not directly connected.

2018-09-27T19:22:27-0700 2018-09-28T06:00:37-0700 http://support.ruckuswireless.com/article_attachments/kA250000000TvrACAS?attachment_index=0 2018-09-28T06:00:37-0700 monthly admin,premium knowledge_article_3095 knowledge_article_3095_attachment_1 ka25B000000CdFTQA0_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000006584 2018-09-27T15:51:02-0700 monthly 0.8 admin,premium knowledge_article_3048 knowledge_article_3048 2017-12-12T14:34:05-0800 000006584 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Performance;Configuration Performance, Configuration, ICX 7250, ICX 7450, ICX 7750 What is QoS (Quality of Service) and what are some guidelines for its use and implementation in a K-12 Network? QoS Implementation Guidelines for the K-12 Network 1. Re-mark the traffic coming with COS value 6/7 to COS value 5 as COS 6/7 maps internally for control protocols. 2. Configure Trust DSCP on the ingress ports of the access switches where the end-user devices are connected. 3. Re-mark the DSCP in voice packets to 46 based on the UDP port number. 4. Re-mark the voice-control packets that normally arrive marked with DSCP 24/26 to 46. 5. Perform internal priority marking using ACL clauses. ! Configure QoS on the access switches. ! Configure Trust DSCP on the ingress ports. SCH-ACCESS-102(config-if-e10000-1/2/4)# trust dscp ! Configure an extended access list for traffic marking. SCH-ACCESS-102(config)# ip access-list extended MARK-DVLAN-TRAFFIC ! Clause to match the UDP port for Lync services. SCH-ACCESS-102(config-ext-nacl)# permit udp any any range 30000 30100 dscp-matching 46 dscp-marking 46 802.1p-and-internal-marking 5 ! Clause to match the TCP port of Skinny client (IP phone, SCCP) service. SCH-ACCESS-102(config-ext-nacl)# permit tcp any any eq 2000 dscp-marking 46 802.1p-and-internal-marking 5 ! Clauses to match the TCP/UDP port of H.323 services. SCH-ACCESS-102(config-ext-nacl)# permit tcp any any range 1719 1720 dscp-marking 46 802.1p-and-internal-marking 5 SCH-ACCESS-102(config-ext-nacl)# permit udp any any range 1719 1720 dscp-marking 46 802.1p-and-internal-marking 5 ! Clauses to match the TCP/UDP port of MS-ICCP (Audio Call Control Protocol, NetMeeting) services. SCH-ACCESS-102(config-ext-nacl)# permit tcp any any eq 1731 dscp-marking 46 802.1p-and-internal-marking 5 SCH-ACCESS-102(config-ext-nacl)# permit udp any any eq 1731 dscp-marking 46 802.1p-and-internal-marking 5 ! Clauses to match the TCP/UDP port for SIP services. SCH-ACCESS-102(config-ext-nacl)# permit tcp any any eq 5060 dscp-marking 46 802.1p-and-internal-marking 5 SCH-ACCESS-102(config-ext-nacl)# permit udp any any eq 5060 dscp-marking 46 802.1p-and-internal-marking 5 ! Clauses to re-mark the voice-control/video-control packets that normally arrive marked with DSCP 24 to 46. SCH-ACCESS-102(config-ext-nacl)# permit udp any any dscp-matching 24 dscp-marking 46 802.1p-and-internal-marking 5 SCH-ACCESS-102(config-ext-nacl)# permit tcp any any dscp-matching 24 dscp-marking 46 802.1p-and-internal-marking 5 ! Clause to match the UDP port for Cisco unified services. SCH-ACCESS-102(config-ext-nacl)# permit udp any any eq 5445 dscp-marking 34 802.1p-and-internal-marking 4 ! Clauses to match the TCP/UDP port for remote file transfer services. SCH-ACCESS-102(config-ext-nacl)# permit tcp any any dscp-matching 34 dscp-marking 34 802.1p-and-internal-marking 4 SCH-ACCESS-102(config-ext-nacl)# permit udp any any dscp-matching 34 dscp-marking 34 802.1p-and-internal-marking 4 ! Clauses to match the TCP/UDP port for Polycom voice and video services. SCH-ACCESS-102(config-ext-nacl)# permit tcp any any range 3230 3247 dscp-marking 34 802.1p-and-internal-marking 4 SCH-ACCESS-102(config-ext-nacl)# permit udp any any range 3230 3247 dscp-marking 34 802.1p-and-internal-marking 4 ! Clauses to re-mark the traffic arriving with different COS values with appropriate DSCP values. SCH-ACCESS-102(config-ext-nacl)# permit ip any any 802.1p-priority-matching 0 dscp-marking 0 802.1p-and-internal-marking 0 SCH-ACCESS-102(config-ext-nacl)# permit ip any any 802.1p-priority-matching 1 dscp-marking 8 802.1p-and-internal-marking 1 SCH-ACCESS-102(config-ext-nacl)# permit ip any any 802.1p-priority-matching 2 dscp-marking 16 802.1p-and-internal-marking 2 SCH-ACCESS-102(config-ext-nacl)# permit ip any any 802.1p-priority-matching 3 dscp-marking 24 802.1p-and-internal-marking 3 SCH-ACCESS-102(config-ext-nacl)# permit ip any any 802.1p-priority-matching 4 dscp-marking 34 802.1p-and-internal-marking 4 SCH-ACCESS-102(config-ext-nacl)# permit ip any any 802.1p-priority-matching 5 dscp-marking 46 802.1p-and-internal-marking 5 ! Clauses to re-mark the traffic arriving with COS value 6/7 to COS value 5 since COS 6/7 maps internally for control protocols. SCH-ACCESS-102(config-ext-nacl)# permit ip any any 802.1p-priority-matching 6 dscp-marking 46 802.1p-and-internal-marking 5 SCH-ACCESS-102(config-ext-nacl)# permit ip any any 802.1p-priority-matching 7 dscp-marking 46 802.1p-and-internal-marking 5 ! Permit clause for any other IP traffic. SCH-ACCESS-102(config-ext-nacl)# permit ip any any ! Apply QoS marking on the ingress interface. SCH-ACCESS-102(config-if-e10000-1/2/4)# per-vlan 1021 SCH-ACCESS-102(config-if-e10000-1/2/4-vlan-1021)# ip access-group MARK-DVLAN-TRAFFIC in SCH-ACCESS-102(config-if-e10000-1/2/4-vlan-1021)# exit SCH-ACCESS-102(config-if-e10000-1/2/4)# per-vlan 1022 SCH-ACCESS-102(config-if-e10000-1/2/4-vlan-1022)# ip access-group MARK-DVLAN-TRAFFIC in ! Configure QoS on the distribution switch. SCH-DIST-201(config)# interface ethernet 1/1/19 SCH-DIST-201(config-if-e1000-1/1/19)# trust dscp ! Clauses to re-mark the traffic arriving with different COS values with appropriate DSCP values. SCH-DIST-201(config)# ip access-list extended MARK-DVLAN-TRAFFIC SCH-DIST-201(config-ext-nacl)# permit ip any any 802.1p-priority-matching 0 dscp-marking 0 802.1p-and-internal-marking 0 SCH-DIST-201(config-ext-nacl)# permit ip any any 802.1p-priority-matching 1 dscp-marking 8 802.1p-and-internal-marking 1 SCH-DIST-201(config-ext-nacl)# permit ip any any 802.1p-priority-matching 2 dscp-marking 16 802.1p-and-internal-marking 2 SCH-DIST-201(config-ext-nacl)# permit ip any any 802.1p-priority-matching 3 dscp-marking 24 802.1p-and-internal-marking 3 SCH-DIST-201(config-ext-nacl)# permit ip any any 802.1p-priority-matching 4 dscp-marking 34 802.1p-and-internal-marking 4 SCH-DIST-201(config-ext-nacl)# permit ip any any 802.1p-priority-matching 5 dscp-marking 46 802.1p-and-internal-marking 5 ! Clauses to re-mark the traffic arriving with COS value 6/7 to COS value 5 since COS 6/7 maps internally for control protocols. SCH-DIST-201(config-ext-nacl)# permit ip any any 802.1p-priority-matching 6 dscp-marking 46 802.1p-and-internal-marking 5 SCH-DIST-201(config-ext-nacl)# permit ip any any 802.1p-priority-matching 7 dscp-marking 46 802.1p-and-internal-marking 5 ! Permit clause for any other IP traffic. SCH-DIST-201(config-ext-nacl)# permit ip any any SCH-DIST-201(config)# interface ve 1021 SCH-DIST-201(config-vif-1021)# ip access-group MARK-DVLAN-TRAFFIC in ! Note: The port numbers mentioned here are not an exhaustive list of all the ports. There can be multiple other applications that may require a better QoS, and, accordingly, more ACL clauses with appropriate marking may need to be added in production environments. SCH-ACCESS-102# show ip access-lists MARK-DVLAN-TRAFFIC Extended IP access list MARK-DVLAN-TRAFFIC: 24 entries permit udp any any range 30000 30100 dscp-matching 46 dscp-marking 46 802.1p-and-internal-marking 5 permit tcp any any eq 2000 dscp-marking 46 802.1p-and-internal-marking 5 permit tcp any any range 1719 1720 dscp-marking 46 802.1p-and-internal-marking 5 permit udp any any range 1719 1720 dscp-marking 46 802.1p-and-internal-marking 5 permit tcp any any eq 1731 dscp-marking 46 802.1p-and-internal-marking 5 permit udp any any eq 1731 dscp-marking 46 802.1p-and-internal-marking 5 permit tcp any any eq 5060 dscp-marking 46 802.1p-and-internal-marking 5 permit udp any any eq 5060 dscp-marking 46 802.1p-and-internal-marking 5 permit udp any any dscp-matching 24 dscp-marking 46 802.1p-and-internal-marking 5 permit tcp any any dscp-matching 24 dscp-marking 46 802.1p-and-internal-marking 5 permit udp any any eq 5445 dscp-marking 34 802.1p-and-internal-marking 4 permit udp any any dscp-matching 34 dscp-marking 34 802.1p-and-internal-marking 4 permit tcp any any dscp-matching 34 dscp-marking 34 802.1p-and-internal-marking 4 permit tcp any any range 3230 3247 dscp-marking 34 802.1p-and-internal-marking 4 permit udp any any range 3230 3247 dscp-marking 34 802.1p-and-internal-marking 4 permit ip any any 802.1p-priority-matching 0 dscp-marking 0 802.1p-and-internal-marking 0 permit ip any any 802.1p-priority-matching 1 dscp-marking 8 802.1p-and-internal-marking 1 permit ip any any 802.1p-priority-matching 2 dscp-marking 16 802.1p-and-internal-marking 2 permit ip any any 802.1p-priority-matching 3 dscp-marking 24 802.1p-and-internal-marking 3 permit ip any any 802.1p-priority-matching 4 dscp-marking 34 802.1p-and-internal-marking 4 permit ip any any 802.1p-priority-matching 5 dscp-marking 46 802.1p-and-internal-marking 5 permit ip any any 802.1p-priority-matching 6 dscp-marking 46 802.1p-and-internal-marking 5 permit ip any any 802.1p-priority-matching 7 dscp-marking 46 802.1p-and-internal-marking 5 SCH-ACCESS-102# show qos-profiles all bandwidth scheduling mechanism: mixed weighted priority with strict priority Unicast Traffic Profile qosp7 : Priority7(Highest) Set as strict priority Profile qosp6 : Priority6 Set as strict priority Profile qosp5 : Priority5 bandwidth requested 25% calculated 25% Profile qosp4 : Priority4 bandwidth requested 15% calculated 15% Profile qosp3 : Priority3 bandwidth requested 15% calculated 15% Profile qosp2 : Priority2 bandwidth requested 15% calculated 15% Profile qosp1 : Priority1 bandwidth requested 15% calculated 15% Profile qosp0 : Priority0(Lowest) bandwidth requested 15% calculated 15 Multicast Traffic Profile qosp7+qosp6 : Priority7(Highest),6 Set as strict priority Profile qosp5 : Priority5 bandwidth requested 25% calculated 25% Profile qosp4+qosp3+qosp2 : Priority4,3,2 bandwidth requested 45% calculated 45% Profile qosp1+qosp0 : Priority1,0(Lowest) bandwidth requested 30%calculated 30%

Quality of Service (QoS) features are used to prioritize the use of bandwidth on a switch.

2018-09-27T15:51:02-0700 2018-09-28T06:00:32-0700 http://support.ruckuswireless.com/article_attachments/kA250000000TvquCAC?attachment_index=0 2018-09-28T06:00:32-0700 monthly admin,premium knowledge_article_3048 knowledge_article_3048_attachment_1 ka25B000000CdGgQAK_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000006643 2018-09-27T18:22:13-0700 monthly 0.8 admin,premium knowledge_article_3041 knowledge_article_3041 2017-12-12T14:34:07-0800 000006643 Validated (External) Premium Icx 6450;Icx 6610;Icx 6650;Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 6610 Campus Switches;Brocade ICX 6650 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration Configuration, ICX 6450, ICX 6610, ICX 6650, ICX 7250, ICX 7450, ICX 7750 What is an Invalid src ip 0.0.0.0 message with DAI <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:7:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:7:j_id603_00N700000039hEa_div"> <ul><li>Confirm If the end device is in fact using the source address 0.0.0.0 with a packet capture.</li><li>If it is possible, disable duplicate address detection on the clients.</li><li>By default all the ports are set as un-trusted, In case we are completely sure it is a trusted end device, set that port(s) as trusted with the command ‘arp inspection trust’ on the interface configuration mode in order to bypass DAI on the port:</li><li>Interface x/y/z arp inspection trust</li></ul> </div>

Dynamic ARP Inspection (DAI) allows only valid ARP requests and responses to be forwarded.

2018-09-27T18:22:13-0700 2018-09-28T06:00:31-0700 https://support.ruckuswireless.com/articles/000007255 2018-09-27T18:35:30-0700 monthly 0.8 admin,premium knowledge_article_3000 knowledge_article_3000 2017-12-12T14:34:18-0800 000007255 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches Removing Multiple VLANs and Multiple Interfaces from VLAN <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 828.14px; text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">YouTube video: <a href="https://www.youtube.com/watch?v=VHxY9ui5WZw&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=VHxY9ui5WZw&feature=youtu.be</a> For further information regarding VLAN configuration, please watch these helpful videos on our Brocade Community Board: Adding and Configuring Multiple VLANs: <a href="https://community.brocade.com/t5/Ethernet-Switches-Routers/Creating-and-Configuring-Multiple-VLANs/ta-p/87187" style="color: rgb(51, 52, 53);" target="_blank">https://community.brocade.com/t5/Ethernet-Switches-Routers/Creating-and-Configuring-Multiple-VLANs/ta-p/87187</a> Configuring VLAN Topology Groups: <a href="https://community.brocade.com/t5/Ethernet-Switches-Routers/Configuring-VLAN-Topology-Groups/ta-p/87185" style="color: rgb(51, 52, 53);" target="_blank">https://community.brocade.com/t5/Ethernet-Switches-Routers/Configuring-VLAN-Topology-Groups/ta-p/87185</a> Creating and Configuring Multiple VLANs: <a href="https://community.brocade.com/t5/Ethernet-Switches-Routers/Adding-and-Configuring-Multiple-VLANs/ta-p/87180" style="color: rgb(51, 52, 53);" target="_blank">https://community.brocade.com/t5/Ethernet-Switches-Routers/Adding-and-Configuring-Multiple-VLANs/ta-p/87180</a></div> </td></tr></tbody></table>

REMOVING MULTIPLE VLANS FROM INTERFACE AND MULTIPLE INTERFACES FROM VLAN

2018-09-27T18:35:30-0700 2018-09-28T06:00:29-0700 https://support.ruckuswireless.com/articles/000006872 2018-09-27T18:05:37-0700 monthly 0.8 admin,premium knowledge_article_2967 knowledge_article_2967 2017-12-12T14:35:55-0800 000006872 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products How to configure ACL counting using Traffic Policies? 1. Below is an example of a Traffic Policy for counting traffic (currently works for incoming traffic only): traffic-policy resv7 count traffic-policy resv6 count traffic-policy voice count traffic-policy video count traffic-policy tp count traffic-policy callsig count traffic-policy none count traffic-policy allother count 2. ACL for the traffic policy and to identify marking: ip access-list extended traffic permit ip any any dscp-matching 56 traffic-policy resv7 permit ip any any dscp-matching 48 traffic-policy resv6 permit ip any any dscp-matching 46 traffic-policy voice permit ip any any dscp-matching 34 traffic-policy video permit ip any any dscp-matching 32 traffic-policy tp permit ip any any dscp-matching 24 traffic-policy callsig permit ip any any dscp-matching 0 traffic-policy none permit ip any any traffic-policy allother 3. Example interface for test: interface ethernet 1/1/29 port-name TEST ip access-group traffic in trust dscp 4. Show Stats for marking verification: sh stat traffic-policy resv7 sh stat traffic-policy resv6 sh stat traffic-policy voice sh stat traffic-policy video sh stat traffic-policy tp sh stat traffic-policy callsig sh stat traffic-policy none sh stat traffic-policy allother 5. Clear stat (need to do for each traffic policy): clear stat traffic-policy resv7 clear stat traffic-policy resv6 clear stat traffic-policy voice clear stat traffic-policy video clear stat traffic-policy tp clear stat traffic-policy callsig clear stat traffic-policy none clear stat traffic-policy allother

How to configure ACL counting using Traffic Policies?

2018-09-27T18:05:37-0700 2018-09-28T06:00:28-0700 https://support.ruckuswireless.com/articles/000007298 2018-09-27T19:32:40-0700 monthly 0.8 admin,premium knowledge_article_2881 knowledge_article_2881 2017-12-12T15:03:32-0800 000007298 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Brocade ICX Alias Command YouTube video: <a href="https://www.youtube.com/watch?v=AsgW3D387Fc" target="_blank">https://www.youtube.com/watch?v=AsgW3D387Fc</a>

Brocade ICX Alias Command

2018-09-27T19:32:40-0700 2018-09-28T06:00:24-0700 https://support.ruckuswireless.com/articles/000006755 2018-09-27T19:13:50-0700 monthly 0.8 admin,premium knowledge_article_2873 knowledge_article_2873 2017-12-12T15:44:53-0800 000006755 Validated (External) Premium Fastiron ws series;Fastiron cx series;Turboiron 24x switch;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration Configuration, FastIron WS Series, FastIron CX Series, TurboIron 24X Switch How does the router behave when multiple IP helper address statements are added in the same interface? How does the router manage the request? The router will receive the broadcast in the interface where the helpers are configured and will send a directed unicast to all the IP helper addresses. So the router will send the request, one-by-one, to ALL the IP helper servers configured one-by-one. Then, Protocol will manage the responses,and the client will decide which DHCP offer to accept. There is no alternation or round robin method applicable in this case. A packet will be sent to each IP helper each time a DHCP broadcast is received.

How does the router behave when multiple IP helper address statements are added in the same interface?

2018-09-27T19:13:50-0700 2018-09-28T06:00:22-0700 https://support.ruckuswireless.com/articles/000006594 2018-09-27T18:00:05-0700 monthly 0.8 admin,premium knowledge_article_2820 knowledge_article_2820 2017-12-12T16:04:05-0800 000006594 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products How to enable Network Device Discovery? <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div">! Configure FDP globally. SCH-ACCESS-101(config)# fdp run ! Configure CDP globally. SCH-ACCESS-101(config)# cdp run ! Configure CDP selectively under an interface. SCH-ACCESS-101(config)# interface ethernet 1/2/1 SCH-ACCESS-101(config-if-1/2/1)# cdp enable ! Configure LLDP globally. SCH-ACCESS-101(config)# lldp run ! Configure LLDP selectively under the interface. SCH-ACCESS-101(config)# lldp enable ports ethernet 1/2/4 ethernet 1/2/5 </div>

Brocade devices support various network device discovery protocols, such as FDP (Foundry proprietary), CDP (Cisco proprietary), and LLDP (open standard).

2018-09-27T18:00:05-0700 2018-09-28T06:00:21-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tvr4CAC?attachment_index=0 2018-09-28T06:00:21-0700 monthly admin,premium knowledge_article_2820 knowledge_article_2820_attachment_1 ka25B000000CdFxQAK_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000006701 2018-09-27T19:44:30-0700 monthly 0.8 admin,premium knowledge_article_2794 knowledge_article_2794 2017-12-12T16:04:12-0800 000006701 Validated (External) Premium Ruckus icx switches;Brocade eos products System network management System Network Management, Ruckus ICX Switches, Brocade EOS Products How to disable and enable a real server using SNMP? snL4RealServerCfgAdminStatus - <code style="color: black; font-size: 13px;">brcdIp.1.1.4.19.1.1.3</code> Enables or disables the real server: <code style="color: black; font-size: 13px;"> • disabled(0) • enabled(1)</code> snL4RealServerCfgRowStatus - <code style="color: black; font-size: 13px;">brcdIp.1.1.4.19.1.1.6</code> Controls the management of the table rows. The values that can be written are: <code style="color: black; font-size: 13px;"> • delete(3)</code> – Delete the row <code style="color: black; font-size: 13px;"> • create(4)</code> – Create a new row <code style="color: black; font-size: 13px;"> • modify(5)</code> – Modify an existing row If the row exists, then a <code style="color: black; font-size: 13px;">SET</code> with a value of <code style="color: black; font-size: 13px;">create(4)</code> returns a "bad value" error. Deleted rows are removed from the table immediately. The following values can be returned on reads: <code style="color: black; font-size: 13px;"> • noSuch(0)</code> – No such row <code style="color: black; font-size: 13px;"> • invalid(1)</code> – Row is inoperative <code style="color: black; font-size: 13px;"> • valid(2)</code> – Row exists and is valid <code style="color: black; font-size: 13px;">brcdIp == 1.3.6.1.4.1.1991</code> Steps: Disabling and re-enabling a real server through SNMP is a two part process: 1) You will need to use the OID to disable the real server 2) In this step you will use the OID to modify. This is needed to add "disable" under the real server and port. The format of the request will be: <code style="color: black; font-size: 13px;">brcdIp.<OID>.<real server ip> </code> Please perform following step if you need to disable the real server. <code style="color: red; font-size: 13px;">snmpset -v 2c -c public 10.18.3.185 1.3.6.1.4.1.1991.1.1.4.19.1.1.3.10.18.3.220 i 0 1.3.6.1.4.1.1991.1.1.4.19.1.1.6.10.18.3.220 i 5</code> <code style="color: black; font-size: 13px;">SNMPv2-SMI::enterprises.1991.1.1.4.19.1.1.3.10.18.3.220 = INTEGER: 0 SNMPv2-SMI::enterprises.1991.1.1.4.19.1.1.6.10.18.3.220 = INTEGER: 5 server real rs2 10.18.3.220 port default disable disable port http disable port pop3s disable port pop3 disable</code> Now, if we need to re-enable the real server please perform following step: <code style="color: red; font-size: 13px;">snmpset -v 2c -c public 10.18.3.185 1.3.6.1.4.1.1991.1.1.4.19.1.1.3.10.18.3.220 i 1 1.3.6.1.4.1.1991.1.1.4.19.1.1.6.10.18.3.220 i 5</code> <code style="color: black; font-size: 13px;">SNMPv2-SMI::enterprises.1991.1.1.4.19.1.1.3.10.18.3.220 = INTEGER: 1 SNMPv2-SMI::enterprises.1991.1.1.4.19.1.1.6.10.18.3.220 = INTEGER: 5 server real rs2 10.18.3.220 port http port http url "HEAD /" port pop3s port pop3</code>

How to disable and enable a real server using SNMP?

2018-09-27T19:44:30-0700 2018-09-28T06:00:20-0700 https://support.ruckuswireless.com/articles/000006724 2018-09-27T19:48:44-0700 monthly 0.8 admin knowledge_article_2785 knowledge_article_2785 2017-12-12T16:04:14-0800 000006724 Validated (External) Partner Ruckus icx switches;Brocade eos products Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products Why wr mem failed and how to recover from it? <div>To recover from the<code style="color: black; font-size: 13px;"> wr mem </code>fail conditions, it is a 2-steps procedure.</div> <div><code style="color: black; font-size: 13px;">flash copy startup-config startup-config@</code></div> <div><code style="color: black; font-size: 13px;">flash del startup-config@</code></div> <div><code style="color: black; font-size: 13px;">flash ren startup-config@ startup-config</code></div> <div> </div> <div>The steps should be given time to complete, i.e. wait for a few moment between cli commands.</div> <div>The startup-config@ is needed to frees up the file lock on startup-config.</div> <div>In step 2, deleting startup-config@ will remove startup-config in file system, but startup-config@ remains.</div> <div>Then in step 3, flash rename startup-config@ to startup-config.</div> Then all is good Example: <div> </div> <div><code style="color: black; font-size: 13px;">FCX624SHPOE Switch#conf t</code></div> <div><code style="color: black; font-size: 13px;">FCX624SHPOE Switch(config)#host NOGOOD</code></div> <div><code style="color: black; font-size: 13px;">NOGOOD(config)#end</code></div> <div><code style="color: black; font-size: 13px;">NOGOOD#wr mem</code></div> <div><code style="color: red; font-size: 13px;">Error - failed to create startup-config.</code><code style="color: black; font-size: 13px;"> < ---- Startup-config is locked</code></div> <div><code style="color: black; font-size: 13px;"> </code></div> <div><code style="color: black; font-size: 13px;">NOGOOD#Flash Memory Write (8192 bytes per dot) .</code></div> <div><code style="color: black; font-size: 13px;">Flash to Flash Done.</code></div> <div><code style="color: black; font-size: 13px;">NOGOOD#wr mem</code></div> <div><code style="color: black; font-size: 13px;">Error - failed to create startup-config.</code></div> <div><code style="color: black; font-size: 13px;"> </code></div> <div><code style="color: black; font-size: 13px;"> </code></div> <div><code style="color: black; font-size: 13px;">NOGOOD#flash copy startup-config startup-config@ </code><code style="color: red; font-size: 13px;">< ---- first step</code></div> <div><code style="color: black; font-size: 13px;">Copy startup-config to startup-config@</code></div> <div><code style="color: black; font-size: 13px;">NOGOOD#..</code></div> <div><code style="color: black; font-size: 13px;">NOGOOD#sh file</code></div> <div><code style="color: black; font-size: 13px;"> 87 [dbd1] boot-parameter</code></div> <div><code style="color: black; font-size: 13px;"> 132 [66ba] dhcpsnoop_data</code></div> <div><code style="color: black; font-size: 13px;"> 5365580 [0000] primary</code></div> <div><code style="color: black; font-size: 13px;"> 6905002 [0000] secondary</code></div> <div><code style="color: black; font-size: 13px;"> 2245 [95d3] startup-config</code></div> <div><code style="color: black; font-size: 13px;"> 2245 [95d3] startup-config@</code></div> <div><code style="color: black; font-size: 13px;"> 12275291 bytes 6 File(s)</code></div> <div><code style="color: black; font-size: 13px;"> 52822016 bytes free</code></div> <div><code style="color: black; font-size: 13px;">NOGOOD#flash delete startup-config@ </code><code style="color: red; font-size: 13px;">< --- second step</code></div> <div><code style="color: black; font-size: 13px;">Flash file startup-config@ deleted.</code></div> <div><code style="color: black; font-size: 13px;">NOGOOD#sh file</code></div> <div><code style="color: black; font-size: 13px;"> 87 [dbd1] boot-parameter</code></div> <div><code style="color: black; font-size: 13px;"> 132 [66ba] dhcpsnoop_data</code></div> <div><code style="color: black; font-size: 13px;"> 5365580 [0000] primary</code></div> <div><code style="color: black; font-size: 13px;"> 6905002 [0000] secondary</code></div> <div><code style="color: black; font-size: 13px;"> 2245 [95d3] startup-config@</code></div> <div><code style="color: black; font-size: 13px;"> 12273046 bytes 5 File(s)</code></div> <div><code style="color: black; font-size: 13px;"> 52953088 bytes free</code></div> <div><code style="color: black; font-size: 13px;">NOGOOD#flash ren startup-config@ startup-config </code><code style="color: red; font-size: 13px;"> < ---- third step</code></div> <div><code style="color: black; font-size: 13px;">NOGOOD#conf t</code></div> <div><code style="color: black; font-size: 13px;">NOGOOD(config)#no host NOGOOD</code></div> <div><code style="color: black; font-size: 13px;">FCX624SHPOE Switch(config)#end</code></div> <div><code style="color: black; font-size: 13px;">FCX624SHPOE Switch#wr mem</code></div> <div><code style="color: black; font-size: 13px;">FCX624SHPOE Switch#sh file</code></div> <div><code style="color: black; font-size: 13px;"> 87 [dbd1] boot-parameter</code></div> <div><code style="color: black; font-size: 13px;"> 132 [66ba] dhcpsnoop_data</code></div> <div><code style="color: black; font-size: 13px;"> 5365580 [0000] primary</code></div> <div><code style="color: black; font-size: 13px;"> 6905002 [0000] secondary</code></div> <div><code style="color: black; font-size: 13px;"> 2245 [95d3] startup-config</code></div> <div><code style="color: black; font-size: 13px;"> 12273046 bytes 5 File(s)</code></div> <div><code style="color: black; font-size: 13px;"> 52953088 bytes free</code></div> <div><code style="color: black; font-size: 13px;">FCX624SHPOE Switch#wr mem</code></div> <div><code style="color: black; font-size: 13px;">FCX624SHPOE Switch#</code></div>

Why wr mem failed and how to recover from it?

2018-09-27T19:48:44-0700 2018-09-28T06:00:19-0700 https://support.ruckuswireless.com/articles/000006752 2018-09-27T19:48:15-0700 monthly 0.8 admin,premium knowledge_article_2781 knowledge_article_2781 2017-12-12T16:04:16-0800 000006752 Validated (External) Premium Fastiron ws series;Fastiron cx series;Turboiron 24x switch;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration Configuration, FastIron WS Series, FastIron CX Series, TurboIron 24X Switch How many trunks can be created in FastIron 7.4? The table below shows the maximum number of static trunk groups the user can create per platform: <table border="1" cellpadding="0" cellspacing="1" height="228" width="731"><tbody><tr><td colspan="1" rowspan="1"> Product</td><td colspan="1" rowspan="1" style="width: 286px;"> Max Number of Trunk Groups</td><td colspan="1" rowspan="1" style="width: 233px;"> LACP</td></tr><tr><td colspan="1" rowspan="1">FCX</td><td colspan="1" rowspan="1" style="width: 286px;">124</td><td colspan="1" rowspan="1" style="width: 233px;">64</td></tr><tr><td colspan="1" rowspan="1">ICX 6610</td><td colspan="1" rowspan="1" style="width: 286px;">124</td><td colspan="1" rowspan="1" style="width: 233px;">64</td></tr><tr><td colspan="1" rowspan="1">FESX</td><td colspan="1" rowspan="1" style="width: 286px;">31</td><td colspan="1" rowspan="1" style="width: 233px;">31</td></tr><tr><td colspan="1" rowspan="1">SX - 1st & 2nd generation</td><td colspan="1" rowspan="1" style="width: 286px;">31</td><td colspan="1" rowspan="1" style="width: 233px;">31</td></tr><tr><td colspan="1" rowspan="1">SX - 3rd generation*</td><td colspan="1" rowspan="1" style="width: 286px;">255</td><td colspan="1" rowspan="1" style="width: 233px;">64</td></tr><tr><td colspan="1" rowspan="1">TI</td><td colspan="1" rowspan="1" style="width: 286px;">14</td><td colspan="1" rowspan="1" style="width: 233px;">14</td></tr><tr><td colspan="1" rowspan="1">FWS624</td><td colspan="1" rowspan="1" style="width: 286px; text-align: center;">13</td><td colspan="1" rowspan="1" style="width: 233px; text-align: center;">13</td></tr><tr><td colspan="1" rowspan="1">FWS648</td><td colspan="1" rowspan="1" style="width: 286px; text-align: center;">25</td><td colspan="1" rowspan="1" style="width: 233px; text-align: center;">25</td></tr><tr><td colspan="1" rowspan="1">ICX 6430</td><td colspan="1" rowspan="1" style="width: 286px;">29</td><td colspan="1" rowspan="1" style="width: 233px;">29</td></tr><tr><td colspan="1" rowspan="1">ICX 6450</td><td colspan="1" rowspan="1" style="width: 286px;">124 </td><td colspan="1" rowspan="1" style="width: 233px;">64</td></tr></tbody></table> * SX chassis with only 3rd Generation line cards.

How many trunks can be created in FastIron 7.4?

2018-09-27T19:48:15-0700 2018-09-28T06:00:18-0700 https://support.ruckuswireless.com/articles/000006733 2018-09-27T19:07:48-0700 monthly 0.8 admin,premium knowledge_article_2780 knowledge_article_2780 2017-12-12T16:04:16-0800 000006733 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches Configuration Configuration, FastIron CX Series Why does the order of interfaces displayed under ‘show interface brief’ in an Ironstack, change when changing the stack unit ID? <div>In order to correct this display, users need to start fresh. This will require a maintenance window or down-time in order to correct. (This is one method of correcting this display. Please refer to FastIron 7.4.0 configuration guide for details on other methods of achieving the same result.) 1. Begin by backing up all non-stacking related configuration, on the active controller. </div> <div>2. From enable mode, on the current active controller, issue the command: <code style="color: black; font-size: 13px;">FCX1_SW# <code style="color: red; font-size: 13px;">stack unconfigure all</code></code> 3. Physically disconnect all of the stacking cables on the back of the FCX stack (At this point, users will note that all of the individual stack units are un-configured, but each will still have interface labeling and stack unit id’s corresponding to the original ironstack) 4. For each member of the stack, perform a configuration wipe to re-establish the devices as ‘clean units’ (make sure all non-stacking related configuration that the user wants to save is backed up). <code style="color: black; font-size: 13px;">FCX1_SW# <code style="color: red; font-size: 13px;">erase start</code> Erase startup-config Done. dhcp server lease database is also removed stacking flash file is also removed FCX1_SW# <code style="color: red; font-size: 13px;">reload</code> Are you sure? (enter 'y' or 'n'): y Could not verify if the Running Config data has been changed. Do you want to continue the reload anyway? (enter 'y' or 'n'): y Halt and reboot FCX2_SW# <code style="color: red; font-size: 13px;">erase start</code></code> <--truncated output--> <code style="color: black; font-size: 13px;">FCX2_SW# <code style="color: red; font-size: 13px;">reload</code></code> ---------- Note: All of the units are back to identifying themselves at stack unit ID 1, with the first interface on the device labeled as 1/1/1 ---------- 5. Decide which unit to be active controller and the order in which the user wants the stack unit’s to display. 6. From the unit the user wants to be active controller with the respective modules, stack unit ID’s and priorities (higher priority takes precedence). <code style="color: black; font-size: 13px;">FCX1_SW#<code style="color: red; font-size: 13px;">sh run | begin stack</code> stack unit 1 module 1 fcx-48-port-management-module module 2 fcx-cx4-2-port-16g-module module 3 fcx-xfp-2-port-10g-module FCX1_SW#<code style="color: red; font-size: 13px;"> configuration terminal</code> FCX1_SW(config)#<code style="color: red; font-size: 13px;"> stack unit 1</code> FCX1_SW(config-unit-1)# <code style="color: red; font-size: 13px;">priority 255</code> FCX1_SW(config-unit-1)# <code style="color: red; font-size: 13px;">exit</code> FCX1_SW(config)#</code> ---------- Note: Review the module information for the other member units and add them to the configuration of the active controller ---------- <code style="color: black; font-size: 13px;">FCX2_SW# <code style="color: red; font-size: 13px;">show run | begin stack</code> stack unit 1 module 1 fcx-48-port-management-module module 2 fcx-cx4-2-port-16g-module FCX3_SW# <code style="color: red; font-size: 13px;">show run | begin stack</code> stack unit 1 module 1 fcx-48-port-management-module module 2 fcx-cx4-2-port-16g-module FCX1_SW(config)# <code style="color: red; font-size: 13px;">stack unit 2</code> FCX1_SW(config-unit-2)# <code style="color: red; font-size: 13px;">module 1 fcx-48-port-management-module</code> FCX1_SW(config-unit-2)# <code style="color: red; font-size: 13px;">module 2 fcx-cx4-2-port-16g-module</code> FCX1_SW(config-unit-2)# <code style="color: red; font-size: 13px;">priority 250</code> FCX1_SW(config-unit-2)# <code style="color: red; font-size: 13px;">exit</code> FCX1_SW(config)# <code style="color: red; font-size: 13px;">stack unit 3</code> FCX1_SW(config-unit-3)# <code style="color: red; font-size: 13px;">module 1 fcx-48-port-management-module</code> FCX1_SW(config-unit-3)# <code style="color: red; font-size: 13px;">module 2 fcx-cx4-2-port-16g-module</code> FCX1_SW(config-unit-3)# <code style="color: red; font-size: 13px;">priority 245</code> FCX1_SW(config-unit-3)# <code style="color: red; font-size: 13px;">exit</code> FCX1_SW(config)# </code><code style="color: red; font-size: 13px;">stack enable</code> 7. After the new stack configuration is on the active controller and stacking has been enabled on the active controller, physically connect the cables in the sequential order that the user would like the stack to be configured. For each device after the intial device, enable the stack once the physical connection exists. a. Physically Connect Port 1/2/2 on FCX1 to port 1/2/1 on FCX2 --> <code style="color: black; font-size: 13px;">FCX2_SW(config)# </code><code style="color: red; font-size: 13px;">stack enable</code> b. Stack Election will reoccur; Device 2 will reboot and stack will re-establish. c. Physically connect Port 2/2/2 on FCX2 to port 1/2/1 on FCX3. <code style="color: black; font-size: 13px;">FCX3_SW(config)#</code><code style="color: red; font-size: 13px;">stack enable</code> d. Stack Election will reoccur; Device 3 will reboot and stack will re-establish. 8. At this point, the stack should be fully established with the interface numbering desired.</div>

Order of interfaces displayed under ‘show interface brief’ in an Ironstack, change when changing the stack unit ID.

2018-09-27T19:07:48-0700 2018-09-28T06:00:17-0700 https://support.ruckuswireless.com/articles/000006731 2018-09-27T18:36:49-0700 monthly 0.8 admin,premium knowledge_article_2705 knowledge_article_2705 2017-12-12T16:14:27-0800 000006731 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches Configuration Configuration, FastIron CX Series Why does FCX-2SFPP module disappear after upgrading from 7300e to 7400c release? Users attempting to utilize this module, FCX-2SFPP, must use FI 7300e or later within the 7300 release when available. Users must check the Release Notes to see if Support for the FCX-2SFPP module has been added for all forthcoming releases.

Why does FCX-2SFPP module disappear after upgrading from 7300e to 7400c release?

2018-09-27T18:36:49-0700 2018-09-28T06:00:16-0700 https://support.ruckuswireless.com/articles/000007513 2018-09-27T18:31:36-0700 monthly 0.8 admin,premium knowledge_article_3232 knowledge_article_3232 2018-01-16T11:45:45-0800 000007513 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure IP load-sharing in FastIron switches? Configuring IP load sharing The IP route table can contain more than one path to a given destination. When this occurs, the Layer 3 switch selects the path with the lowest cost as the path for forwarding traffic to the destination. If the IP route table contains more than one path to a destination and the paths each have the lowest cost, then the Layer 3 switch uses IP load sharing to select a path to the destination. IP load sharing uses a hashing algorithm based on the source IP address, destination IP address, and protocol field in the IP header, TCP, and UDP information. ---------- Note: IP load sharing is also called "Equal-Cost Multi-Path (ECMP) load sharing or just ECMP. ---------- Note: IP load sharing is based on next-hop routing, and not on source routing. ---------- Note: The term "path" refers to the next-hop router to a destination, not to the entire route to a destination. Thus, when the software compares multiple equal-cost paths, the software is comparing paths that use different next-hop routers, with equal costs, to the same destination.In many contexts, the terms "route" and "path" mean the same thing. The term "path" is used in this section to refer to an individual next-hop router to a destination, while the term "route" refers collectively to the multiple paths to the destination. Load sharing applies when the IP route table contains multiple, equal-cost paths to a destination. ---------- Note: Brocade devices also perform load sharing among the ports in aggregate links. Refer to "Trunk group load sharing" in the FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide. How multiple equal-cost paths enter the IP route table. ---------- IP load sharing applies to equal-cost paths in the IP route table. Routes that are eligible for load sharing can enter the routing table from any of the following routing protocols: • IP static routes • Routes learned through OSPF • Routes learned through BGP4 Administrative distance for each IP route The administrative distance is a unique value associated with each type (source) of IP route. Each path has an administrative distance. The administrative distance is not used when performing IP load sharing, but the administrative distance is used when evaluating multiple equal-cost paths to the same destination from different sources, such as between static IP routes, OSPF, and BGP4. The value of the administrative distance is determined by the source of the route. The Layer 3 switch is configured with a unique administrative distance value for each IP route source. When the software receives multiple paths to the same destination and the paths are from different sources, the software compares the administrative distances of the paths and selects the path with the lowest administrative distance. The software then places the path with the lowest administrative distance in the IP route table. For example, if the Layer 3 switch has a path learned from OSPF and a path learned from IBGP for a given destination, only the path with the lower administrative distance enters the IP route table. Here are the default administrative distances on the Brocade Layer 3 switch: • Directly connected - 0 (this value is not configurable) • Static IP route - 1 (applies to all static routes, including default routes and default network routes) • Exterior Border Gateway Protocol (EBGP) - 20 • OSPF - 110 • Interior Gateway Protocol (IBGP) - 200 • Local BGP - 200 • Unknown - 255 (the router will not use this route) Lower administrative distances are preferred over higher distances. For example, if the router receives routes for the same network from OSPF and from IBGP, the router will prefer the OSPF route by default. ---------- Note: You can change the administrative distances individually. Refer to the configuration chapter for the route source for information. Since the software selects only the path with the lowest administrative distance, and the administrative distance is determined by the path source. IP load sharing applies only when the IP route table contains multiple paths to the same destination, from the same IP route source. ---------- *IP load sharing does not apply to paths that come from different sources. Path cost The cost parameter provides a common basis of comparison for selecting from among multiple paths to a given destination. Each path in the IP route table has a cost. When the IP route table contains multiple paths to a destination, the Layer 3 switch chooses the path with the lowest cost. When the IP route table contains more than one path with the lowest cost to a destination, the Layer 3 switch uses IP load sharing to select one of the lowest-cost paths. The source of a path cost value depends on the source of the path: • IP static route - The value you assign to the metric parameter when you configure the route. The default metric is 1. • OSPF - The Path Cost associated with the path. The paths can come from any combination of interarea, intra-area, and external Link State Advertisements (LSAs). • BGP4 - The path Multi-Exit Discriminator (MED) value. ---------- Note: If the path is redistributed between two or more of the above sources before entering the IP route table, the cost can increase during the redistribution due to settings in redistribution filters. ---------- Static route, OSPF, and BGP4 load sharing IP load sharing and load sharing for BGP4 routes are individually configured. Multiple equal-cost paths for a destination can enter the IP route table only if the source of the paths is configured to support multiple equal-cost paths. For example, if BGP4 allows only one path with a given cost for a given destination, the BGP4 route table cannot contain equal-cost paths to the destination. Consequently, the IP route table will not receive multiple equal-cost paths from BGP4. The load sharing state for all the route sources is based on the state of IP load sharing. Since IP load sharing is enabled by default on all Brocade Layer 3 switches, load sharing for static IP routes, OSPF routes, and BGP4 routes also is enabled by default. <img alt="User-added image" height="189" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000093ZB&feoid=00N50000002Cf3M&refid=0EM50000000XRJc" width="500"></img> How IP load sharing works When ECMP is enabled, multiple equal-cost paths for the destination IP is installed in the hardware Layer 3 routing table. When an ingress Layer 3 IP traffic matches with the entry in the hardware for Layer 3 routing, one of the paths is selected based on the internal Hardware hashing logic and the packet gets forwarded on that path. Disabling IP load sharing To disable IP load sharing, enter the following commands. device(config)# no ip load-sharing Changing the maximum number of ECMP (load sharing) paths You can change the maximum number of paths the Layer 3 switch supports to a value from 2 through 8. On the Brocade ICX 7750, the value range for the maximum number of load-sharing paths is from 2 through 32. <img alt="User-added image" height="106" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000093ZB&feoid=00N50000002Cf3M&refid=0EM50000000XRJh" width="500"></img> For optimal results, set the maximum number of paths to a value at least as high as the maximum number of equal-cost paths your network typically contains. For example, if the Layer 3 switch you are configuring for IP load sharing has six next-hop routers, set the maximum paths value to six. To change the number of IP load sharing paths, enter a command such as the following. device(config)# ip load-sharing 6 Syntax: [no] ip load-sharing [ num ] The num variable specifies the number of paths and can be from 2 through 8, depending on the device you are configuring. On the Brocade ICX 7750, the value of the num variable can be from 2 through 32. The configuration of the maximum number of IP load sharing paths to a value more than 8 is determined by the maximum number of ECMP paths defined at the system level using the system-max max-ecmp command. You cannot configure the maximum number of IP load sharing paths higher than the value defined at the system level. Also, you cannot configure the maximum number of ECMP paths at the system level to a value less than the configured IP load sharing value. To define the maximum number of ECMP paths at the system level, enter a command such as the following. device(config)# system-max max-ecmp 20 device(config)# write memory device(config)# exit device# reload Syntax: [no] system-max max-ecmp [ num ] The num variable specifies the maximum number of ECMP paths and the value range can be from 8 through 32. This command is supported only on the Brocade ICX 7750. You must save the configuration and reload the device for the maximum ECMP value change to take effect.

How to configure IP load-sharing in FastIron switches?

2018-09-27T18:31:36-0700 2018-09-28T06:00:15-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6YCAS?attachment_index=0 2018-09-28T06:00:15-0700 monthly admin,premium knowledge_article_3232 knowledge_article_3232_attachment_1 ka25B000000CbORQA0_Attachment__c.pdf 4713653.0 application/pdf https://support.ruckuswireless.com/articles/000007328 2018-09-27T15:45:42-0700 monthly 0.8 admin,premium knowledge_article_2936 knowledge_article_2936 2017-12-12T14:36:06-0800 000007328 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How does Dynamic ARP Inspection and DHCP Snooping work? When IP is learned through DHCP and device has DHCP snooping and Dynamic Arp Inspection enabled for that VLAN, DHCP snooping table gets populated automatically, based on the client ip address and mac address and ARP inspection is picked from the snooping table. We need to configure the below static ARP inspections only for the entries that are not present in the snooping. device(config)# arp 10.20.20.12 0000.0002.0003 inspection In the below topology assume that we have 2 Host, Host1 and Host2. <img alt="User-added image" height="235" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000093Xt&feoid=00N50000002Cf3M&refid=0EM50000000XSaK" width="500"></img> - Both ports are in Vlan 100 - DDHCP snooping and DAI is enabled for vlan 100 - Host1 gets the ip from the DDHCP server - Host 2 has a static IP Host1 sends ARP: Before 8.0.40a as the DHCP ip is assigned, ARP table gets added and it will be in pending state (you can check this via "show arp"). When Host1 sends the ARP to Brocade1, the source ip and source mac is validated in the ARP table and ARP gets resolved. ---------- Note: This behavior has changed in 8040a onward. ---------- When the ip is assigned to host the snooping table gets populated and on sending the ARP, its validated against the DHCP snooping table and ARP entry is created in the ARP table. Host2 sends ARP: When Host2 sends the ARP to Brocade1,since the ip and mac address are not present in the ARP/snooping table, ARP resolutions fails. In this case, we need to add the static ARP inspection entry. device(config)# arp 10.20.20.12 0000.0002.0003 inspection After added this entry, arp would get resolved.

How Dynamic ARP Inspection and DHCP Snooping works

2018-09-27T15:45:42-0700 2018-09-28T06:00:14-0700 https://support.ruckuswireless.com/articles/000007475 2018-09-27T19:21:10-0700 monthly 0.8 admin,premium knowledge_article_3249 knowledge_article_3249 2018-01-23T15:23:15-0800 000007475 Validated (External) Premium Icx 7450;RUCKUS ICX 7450 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ICX 7450 Why is Avaya 9608 not negotiating PoE needs properly? Upgrade to a version of code that contains the fix. After code release we added two new commands so that customer can run the commands to support the faulty Avaya PD's: inline power adjust class <0-4> delta inline power adjust class <0-4> minium

Avaya 9608 not negotiating PoE needs properly

2018-09-27T19:21:10-0700 2018-09-28T06:00:13-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tw5sCAC?attachment_index=0 2018-09-28T06:00:13-0700 monthly admin,premium knowledge_article_3249 knowledge_article_3249_attachment_1 ka25B000000CbsbQAC_Attachment__c.pdf 3466324.0 application/pdf https://support.ruckuswireless.com/articles/000007476 2018-09-27T18:20:48-0700 monthly 0.8 admin,premium knowledge_article_3259 knowledge_article_3259 2018-01-24T09:04:15-0800 000007476 Validated (External) Premium Icx 7450;RUCKUS ICX 7450 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ICX 7450 Why is Cisco 2602i AP complaining of LOW power? <div class="sfdc_richtext" id="articleDetail:j_id404:j_id405:sectionRepeat:0:fieldRepeat:7:j_id595articleDetail:j_id404:j_id405:sectionRepeat:0:fieldRepeat:7:j_id595_00N700000039hEa_div">Upgrade to a version of code that contains the fix.</div>

Cisco 2602i AP complaining of LOW power

2018-09-27T18:20:48-0700 2018-09-28T06:00:12-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tw5tCAC?attachment_index=0 2018-09-28T06:00:12-0700 monthly admin,premium knowledge_article_3259 knowledge_article_3259_attachment_1 ka25B000000CbsCQAS_Attachment__c.pdf 585005.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000Tw5tCAC?attachment_index=1 2018-09-28T06:00:12-0700 monthly admin,premium knowledge_article_3259 knowledge_article_3259_attachment_1 ka25B000000CbsCQAS_Attachment2__c.pdf 292849.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000Tw5tCAC?attachment_index=2 2018-09-28T06:00:12-0700 monthly admin,premium knowledge_article_3259 knowledge_article_3259_attachment_1 ka25B000000CbsCQAS_Attachment3__c.pdf 3466324.0 application/pdf https://support.ruckuswireless.com/articles/000007401 2018-09-27T19:41:10-0700 monthly 0.8 admin,premium knowledge_article_2701 knowledge_article_2701 2017-12-12T16:14:27-0800 000007401 Validated (External) Premium Brocade network advisor;Brocade Network Advisor (BNA) Configuration Configuration, Brocade Network Advisor How to use Brocade Network Advisor for event notification? Event Notification From the Brocade Network Advisor main menu, select Monitor > Event Processing > Event Actions to configure the requirement to notify the administrator. From the Brocade Network Advisor main menu, select Monitor > Event Notification > Email to send an email to the network administrator.

Brocade Network Advisor (BNA) customizable dashboards

2018-09-27T19:41:10-0700 2018-09-28T06:00:11-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4PCAS?attachment_index=0 2018-09-28T06:00:11-0700 monthly admin,premium knowledge_article_2701 knowledge_article_2701_attachment_1 ka25B000000CcMpQAK_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000007890 2018-09-27T15:39:03-0700 monthly 0.8 admin,premium knowledge_article_3321 knowledge_article_3321 2018-06-07T07:59:36-0700 000007890 Validated (External) Premium Brocade network advisor;Brocade Network Advisor (BNA) Security;System network management;Troubleshooting Security, System Network Management, Troubleshooting, Brocade Network Advisor How to make authorization credentials work with LDAP using BNA server? Go to Server Management Console/AAA settings/Authorization Preference/Authentication Server Groups

Testing authentication in the LDAP server and receive error message "Verify user privileges The authentication failed for LDAP"

2018-09-27T15:39:03-0700 2018-09-28T06:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA2500000008nOUCAY?attachment_index=0 2018-09-28T06:00:10-0700 monthly admin,premium knowledge_article_3321 knowledge_article_3321_attachment_1 IP_Manual.pdf 18361010.0 application/pdf https://support.ruckuswireless.com/articles/000007795 2018-09-27T19:19:55-0700 monthly 0.8 admin,premium knowledge_article_3367 knowledge_article_3367 2018-09-27T19:19:55-0700 000007795 Validated (External) Premium Icx 7650;Icx 7150;Icx 7250;Icx 7450;Icx 7750;RUCKUS ICX 7650 Campus Switches;RUCKUS ICX 7150 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Performance;Known issues and workarounds Performance, Known Issues and Workarounds, ICX 7650, ICX 7150, ICX 7250, ICX 7450, ICX 7750 The fix will be available in 8061c Patch release. The customer has also tested 8061b and they confirm this version also has the fix.

8.0.60 or above is blocking the EAPOL broadcast addresses from switching no matter which media or ports/plans we use. It clearly works in 8.0.30 or below as shown by the packet captures. Please let us know if anything else is needed.

2018-09-27T19:19:55-0700 2018-09-28T06:00:09-0700 https://support.ruckuswireless.com/articles/000006548 2018-09-27T19:38:57-0700 monthly 0.8 admin,premium knowledge_article_2989 knowledge_article_2989 2017-12-12T14:35:49-0800 000006548 Validated (External) Premium Brocade eos products Configuration;System network management Configuration, System Network Management, Brocade EOS Products Is it possible to add jumbo frames per VLAN on the TurboIron? Jumbo frames per VLAN is NOT supported on the TurboIron. Here are some options: 1. On Switching code you can enable jumbo frames globally. 2. If you are running Router code, you can enable jumbo frames locally on each physical interface with the command ip-port-mtu. When you change the physical interface MTU, ALL the vlans for that physical interface will have the same configured IP MTU. You cannot add the ip-port-mtu command for a ve interface. Changing the Maximum Transmission Unit on an individual port By default, the maximum Ethernet MTU sizes are as follows: • 1500 bytes – The maximum for Ethernet II encapsulation • 1492 bytes – The maximum for SNAP encapsulation When jumbo mode is enabled, the maximum Ethernet MTU sizes are as follows: • 9198 bytes – The maximum for Ethernet II encapsulation • 9190 bytes – The maximum for SNAP encapsulation To change the MTU for interface 5 to 1000, enter the following commands. TurboIron(config)# int e 5 TurboIron(config-if-5)# ip-port-mtu 1000 TurboIron(config-if-5)# write memory TurboIron(config-if-5)# end Syntax: [no] ip-port-mtu <num> The <num> parameter specifies the MTU. Ethernet II packets can hold IP packets from 576 –1500 bytes long. If jumbo mode is enabled, Ethernet II packets can hold IP packets up to 9198 bytes long. Ethernet SNAP packets can hold IP packets from 576 – 1492 bytes long. If jumbo mode is enabled, SNAP packets can hold IP packets up to 9190 bytes long. The default MTU for Ethernet II packets is 1500. The default MTU for SNAP packets is 1492.

Options for jumbo framer per VLAN on TuroIron

2018-09-27T19:38:57-0700 2018-09-28T06:00:08-0700 https://support.ruckuswireless.com/articles/000007158 2018-09-27T19:46:33-0700 monthly 0.8 admin,premium knowledge_article_3072 knowledge_article_3072 2017-12-12T14:27:23-0800 000007158 Validated (External) Premium Brocade eos products Configuration;System network management Configuration, System Network Management, Brocade EOS Products How to disable or enable layer 2 switching? <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 14px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Enabling or Disabling Layer 2 Switching By default, Brocade devices supports routing over Layer 2 switching. You can enable Layer 2 switching globally or on individual port using the no route-only command. The no route-only and route-only commands prompt you to change the route-only behavior. You must enter y if you want to proceed or n if you do not. The prompt is displayed as shown in the following examples of the no route-only and route-only commands. To enable Layer 2 switching globally, enter the following: Brocade(config)# no route-only This will change the route-only behavior at the global level. Are you sure? (enter ‘y’ or ‘n’): y Global ‘route-only’ committed. To enable Layer 2 switching only on a specific interface, go to the Interface configuration level for that interface, and add the no route-only command. The following command shows how to enable Layer 2 switching on port 3/2: Brocade(config)# interface ethernet 3/2 Brocade(config-if-e10000-3/2)# no route-only To globally disable Layer 2 switching on a Brocade device and return to the default (route-only) condition, enter commands such as the following: Brocade(config)# route-only This will change the route-only behavior at the global level. Are you sure? (enter ‘y’ or ‘n’): y Global ‘no route-only committed. For further information, please watch this video form our Brocade Campus Feature Explainer Series - DISABLING LAYER 2 SWITCHING - ROUTE-ONLY:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 14px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><a href="https://www.youtube.com/watch?v=vNwG2ZdEyHA&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=vNwG2ZdEyHA&feature=youtu.be</a>

Configuration information on how to enable/disable layer 2 switching.

2018-09-27T19:46:33-0700 2018-09-28T06:00:07-0700 https://support.ruckuswireless.com/articles/000006851 2018-09-26T20:01:06-0700 monthly 0.8 admin,premium knowledge_article_3142 knowledge_article_3142 2017-12-12T14:11:56-0800 000006851 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure Remote Access Restrictions? Remote Access Restrictions Restricting Telnet access to a specific IP address To allow Telnet access to the Brocade device only to the host with IP address 10.157.22.39, enter the following command: device(config)# telnet client 10.157.22.39 Syntax: [no] telnet client { ip-addr | ipv6-addr } Restricting SSH access to a specific IP address To allow SSH access to the Brocade device only to the host with IP address 10.157.22.39, enter the following command: device(config)# ip ssh client 10.157.22.39 Syntax: [no] ip ssh client { ip-addr | ipv6-addr } Restricting Web management access to a specific IP address To allow Web management access to the Brocade device only to the host with IP address 209.157.22.26, enter the following command: Brocade(config)# web-client 209.157.22.26 Syntax: [no] web-client { ip-addr | ipv6-addr } Restricting SNMP access to a specific IP address To allow SNMP access only to the host with IP address 10.157.22.14, enter the following command: device(config)# snmp-client 10.157.22.14 Syntax: [no] snmp-client { ip-addr | ipv6-addr } Restricting all remote management access to a specific IP address To allow Telnet and SNMP management access to the Brocade device only to the host with IP address 10.157.22.69, enter three separate commands (one for each access type) or enter the following command: device(config)# all-client 10.157.22.69 Syntax: [no] all-client { ip-addr | ipv6-addr } Restricting access to the device based on IP orMAC address You can restrict remote management access to the Brocade device, using Telnet, SSH, HTTP, and HTTPS, based on the connecting client IP or MAC address. Restricting Telnet connection You can restrict Telnet connection to a device based on the client IP address or MAC address. To allow Telnet access to the Brocade device only to the host with IP address 10.157.22.39 and MAC address 0000.000f.e9a0, enter the following command: device(config)# telnet client 10.157.22.39 0000.000f.e9a0 Syntax: [no] telnet client { ip-addr | ipv6-addrmac-addr } The following command allows Telnet access to the Brocade device to a host with any IP address and MAC address 0000.000f.e9a0: device(config)# telnet client any 0000.000f.e9a0 Syntax: [no] telnet client any mac-addr Restricting SSH connection You can restrict SSH connection to a device based on the client IP address or MAC address. To allow SSH access to the Brocade device only to the host with IP address 10.157.22.39 and MAC address 0000.000f.e9a0, enter the following command: device(config)# ip ssh client 10.157.22.39 0000.000f.e9a0 Syntax: [no] ip ssh client { ip-addr | ipv6-addrmac-addr } To allow SSH access to the Brocade device to a host with any IP address and MAC address 0000.000f.e9a0, enter the following command: device(config)# ip ssh client any 0000.000f.e9a0 Syntax: [no] ip ssh client any mac-addr

Remote Access Restrictions

2018-09-26T20:01:06-0700 2018-09-27T12:00:15-0700 https://support.ruckuswireless.com/articles/000008335 2018-09-26T13:28:56-0700 monthly 0.8 admin,premium knowledge_article_3366 knowledge_article_3366 2018-09-26T13:22:36-0700 000008335 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware Configuration, Firmware, SmartCell Gateway, virtual SmartCell Gateway Do we have any Setup info for Wi-Fi Calling in SmartZone 5.0? See attached Technical Tip: How to Setup Wi-Fi Calling on SZ 5.0 document.

The attached guide describes Wi-Fi Calling and requirements, with SZ 5.0 controller side configuration example.

2018-09-26T13:28:56-0700 2018-09-27T12:00:11-0700 http://support.ruckuswireless.com/article_attachments/kA2500000008nl4CAA?attachment_index=0 2018-09-27T12:00:11-0700 monthly admin,premium knowledge_article_3366 knowledge_article_3366_attachment_1 TechTip-WiFiCalling-SZ50.pdf 1188704.0 application/pdf https://support.ruckuswireless.com/articles/000002642 2014-02-18T22:37:55-0800 monthly 0.8 admin,premium knowledge_article_778 knowledge_article_778 2014-02-18T22:37:55-0800 000002642 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector I am unable to see wireless clients authentication logs on ZoneDirector Changed Syslog settings on ZoneDirector : Configure>> System >>Log settings :: Event Log Level was set to "Show More"

Customization of Syslog level on ZoneDirector from GUI

2014-02-18T22:37:55-0800 2018-09-27T04:45:56-0700 https://support.ruckuswireless.com/articles/000008274 2018-09-25T16:15:26-0700 monthly 0.8 admin,premium knowledge_article_3362 knowledge_article_3362 2018-09-25T16:13:38-0700 000008274 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) System network management;Troubleshooting System Network Management, Troubleshooting, SmartCell Insight How do I include SCI in my Disaster Recovery (DR) Plans? SCI versions 1 - 5 do not have in-built disaster-recovery or high-availability features. In order to plan a Disaster Recovery plan for SCI, it is important to understand how the architecture works. The architecture of SCI dictates that the metadata for the cluster is stored in the master node, within the 'HDFS namenode' system. The data node(s) only contain a copy of the raw data. Without the metadata, it is not possible to re-construct the data. So in the event that the master node's HDD fails, the system will be lost. It cannot be recovered just using the data node raw data. To mitigate this, the best solution is to take a scheduled (regular) snapshot of the SCI cluster. Should the system experience a master node failure, the snapshot can be used to recover the system. The frequency of the snapshots will obviously determine how much data would be potentially lost in the event of a HDD failure.

Describes briefly the options for disaster recovery of an SCI cluster

2018-09-25T16:15:26-0700 2018-09-25T18:00:06-0700 https://support.ruckuswireless.com/articles/000008299 2018-09-21T14:30:24-0700 monthly 0.8 admin,premium knowledge_article_3352 knowledge_article_3352 2018-09-20T16:03:57-0700 000008299 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware Firmware, SmartCell Gateway, virtual SmartCell Gateway Can I visualize Airtime Details in SmartZone 3.6 / 5.0 ? Airtime Detail in SmartZone 3.6.1/5.0 What is it: A wonderful GUI based visualization tool that looks at the past 1 hour of airtime usage of an access point. This image provides you a visual break down of what the airtime at that specific access point looks like. It is broken down into different splices depicting the following information; Free Airtime, Tx/Rx (Multicast/Broadcast), interference, non-Wi-Fi interference, MGMT… Which is based on the following metrics: <img alt="User-added image" height="317" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000093Sj&feoid=00N50000002Cf3M&refid=0EM50000000ljLU" width="759"></img> In order for us Humans to understand it, SZ puts this in a pretty sunburst graph, it looks very reminiscent of SCI’s Sunburst Diagram, and even EyePA. In previous versions, we would have a graph such as this: <img alt="User-added image" height="218" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000093Sj&feoid=00N50000002Cf3M&refid=0EM50000000ljLZ" width="1033"></img> Which has meaning, but a little bit harder to diagnose what is using the actual Airtime. If we click the Airtime Detail button, we get a breakdown of previous graph: <img alt="User-added image" height="854" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000093Sj&feoid=00N50000002Cf3M&refid=0EM50000000ljLe" width="777"></img> What does it show us: For the past 1 hour, the AP has spent about 53% of its time free, but it has also spent 40% in Tx, 4% in Rx, and about 3% of its time dealing with Wi-Fi interference. The graph gives you the timeframe to select from (limited to 1 hour today; aggregated), the radio (2.4 or 5 GHz), and an option to export. You can print the graph or export the graph. If you export the graph, keep in mind that the title of the graph may say “Chart Title”. How can I access it: To access the Airtime Client detail button: 1. Click on Access Points 2. Click on a single access point that you want Airtime Details on 3. Select the Health tab at the bottom <img alt="User-added image" height="400" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000093Sj&feoid=00N50000002Cf3M&refid=0EM50000000ljLj" width="914"></img> 4. In the health tab, scroll down to Airtime Utilization graph 5. Select the Airtime Detail button <img alt="User-added image" height="202" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000093Sj&feoid=00N50000002Cf3M&refid=0EM50000000ljLo" width="974"></img> 6. Prepare for glory What can we learn from this graph: Network Overhead - Allows the admin to view the ratio of transmitted and received data vs management, which tells the admin how much overhead is on the network. Impact of Neighbors - Allows the admin to view the airtime impact of managed neighbors that are operating on the same or overlapping channels. This also allows the admin to evaluate the channel selection system. Impact of Rogues - Allows the admin to view the airtime impact from non-managed rogue APs. Uplink / Downlink Ratios - Allows the admin to easily visualize the uplink and downlink airtime ratios, which can be cross-referenced with traffic ratios to evaluate efficiency of up/down links. Impact of Non-Wi-Fi Interference - Allows the admin to view the airtime impact of non-Wi-Fi interference sources. An easy way for our customers/partners/SE’s to understand Airtime Utilization. There are some “limitations”: 1. Only supported on ac wave 2 aps 2. 1 AP at a time 3. 1 hour time frame (aggregated) 4. Need to select 2.4 or 5 GHz 5. Export is capable but displays as “Chart Title” 6. SmartZone version 3.6.1 and up

New SmartZone feature provides graphical representation of Airtime Utilization details.

2018-09-21T14:30:24-0700 2018-09-21T18:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA2500000008njmCAA?attachment_index=0 2018-09-21T18:00:09-0700 monthly admin,premium knowledge_article_3352 knowledge_article_3352_attachment_1 SmartZoneAirtimeClientDetail-0727 18.pdf 902723.0 application/pdf https://support.ruckuswireless.com/articles/000005312 2016-02-25T13:31:54-0800 monthly 0.8 admin,premium knowledge_article_2221 knowledge_article_2221 2015-11-23T00:27:35-0800 000005312 Validated (External) Premium Scg 200;R700;R300;Virtual smartcell gateway;T300;T301;Sz100;R710;Ruckus R700;Ruckus R300;Ruckus T300;Ruckus T301n;Ruckus T301s;SmartZone 100-D (SZ100-D);Ruckus R710 Troubleshooting Troubleshooting, SCG 200, R700, R300, virtual SmartCell Gateway, T300, T301, SZ100, R710 What do the different colors of an Access Point's PWR LED indicate? The power status LED on Ruckus APs has changed as of SZ 3.2.x. This is applicable to all SmartZone controllers running these versions, including the vSZ, SZ100 and SCG-200 controllers. The PWR LED can be in one of the following states: <div> Red: AP is starting up</div> Flashing Green: No routable IP received or assigned. Indication of potential network/configuration issue. If configured for DHCP and the issue persists, check VLAN configuration and status of DHCP server. Solid Green: A routable IP has been assigned to the AP *Note: known bug ER-3317, 3.2.0 R300 PWR LED blinking. This only occurs if Mgt VLAN is configured, and should be fixed by SZ 3.2.2, 3.4.

This article explains that the color of an AP POWER LED may vary, depending on the state of the system.

2016-02-25T13:31:54-0800 2018-09-21T16:06:51-0700 https://support.ruckuswireless.com/articles/000008297 2018-09-20T15:17:48-0700 monthly 0.8 admin,premium knowledge_article_3355 knowledge_article_3355 2018-09-20T15:17:48-0700 000008297 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Where can I find a list of 2 digit Country Codes? Partners who setup ZDs and APs can use CLI commands to configure the chosen country codes: ruckus# config You have all rights in this mode. ruckus(config)# system ruckus(config-sys)# dot11-country-code <COUNTRY-CODE> Enter the country code (for example, US). ruckus(config-sys)# dot11-country-code To identify the 2 digit country codes in use world wide, see this link: Refer to Alpha-2 codes. <a href="https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.iso.org%2Fobp%2Fui%2F%23search%2Fcode%2F&data=01%7C01%7CDan.Lamay%40arris.com%7Cc828baa3f69f4194143208d5a134a5b0%7Cf27929ade5544d55837ac561519c3091%7C1&sdata=m0%2FwKcKGCwv%2BQGChjZXH18XbBEySrtrXL5K8FWzicYA%3D&reserved=0" target="_blank">https://www.iso.org/obp/ui/#search/code/</a>

There are online resources that list 2 digit country codes.

2018-09-20T15:17:48-0700 2018-09-20T18:00:11-0700 https://support.ruckuswireless.com/articles/000008298 2018-09-20T15:28:09-0700 monthly 0.8 admin,premium knowledge_article_3353 knowledge_article_3353 2018-09-20T15:28:09-0700 000008298 Validated (External) Premium Ruckus cloud;RUCKUS Cloud;Ruckus Cloud Mobile Apps Configuration Configuration, Ruckus Cloud Can we configure time based service schedule on Ruckus Cloud managed AP SSID WLANs? There is an icon under Venue, Networks, to setup time based service schedule for SSID WLANs. <img alt="User-added image" height="268" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000093Rq&feoid=00N50000002Cf3M&refid=0EM50000000ljLF" width="1169"></img> On the right side, click the little Clock icon to set the on/off schedule.

There is an icon under Venue, Networks, to setup time based service schedule for SSID WLANs.

2018-09-20T15:28:09-0700 2018-09-20T18:00:09-0700 https://support.ruckuswireless.com/articles/000004051 2018-03-01T13:51:26-0800 monthly 0.8 admin,premium knowledge_article_1598 knowledge_article_1598 2015-02-19T13:11:18-0800 000004051 Validated (External) Premium Zoneflex 7372 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex 7372 What is the description on ZF7372 LED's status? <div>LED status representation for ZF7372 Access Point.</div> <div> </div> <div>Power LED</div> <div> </div> <div> • Off: Off.</div> <div> • Red: Boot up in process.</div> <div> • Green: On.</div> <div> </div> <div> <div>DIR LED </div> <div> </div> <div>• Off: The AP is not being managed by ZoneDirector (standalone mode).</div> <div>• Green: The AP is being managed by ZoneDirector.</div> <div>• Slow flashing green (one flash every two seconds): The AP is being managed by ZoneDirector, but is currently unable to communicate with ZoneDirector.</div> <div>• Fast flashing green (two flashes every second): The AP is being managed by ZoneDirector and is currently receiving configuration settings (provisioning) or a firmware update</div> </div> <div> </div> <div> <div>AIR LED </div> <div> </div> <div>• Off: The Access Point is operating as a Standalone or Root AP (RAP).</div> <div>• Green: The AP is functioning as a Mesh AP (MAP), and the wireless signal to its uplink AP is good.</div> <div>• Fast flashing green (two flashes every second): The AP is functioning as a Mesh AP (MAP), and the wireless signal to its uplink AP is fair.</div> <div>• Slow flashing green (one flash every two seconds): Mesh networking is enabled, but the AP is still searching for a mesh uplink.</div> </div> <div> </div> <div> <div>2.4GHz LED </div> <div> </div> <div>• Off: The WLAN service is down.</div> <div>• Green: The WLAN is up and at least one clients associated.</div> <div>• Amber: The WLAN is up. No clients associated.</div> </div> <div> </div> <div> <div>5GHz LED </div> <div> </div> <div>• Off: The WLAN service is down.</div> <div>• Amber: The WLAN is up, but no clients or downlink MAPs are associated/connected.</div> <div>• Green: The WLAN is up and at least one client is associated. No downlink MAPs are connected.</div> <div>• Slow flashing green (one flash every two seconds): The WLAN is up and at least one downlink MAP is connected. No clients associated.</div> <div>• Fast flashing green (two flashes every second): The WLAN is up, at least one downlink MAP is connected, and at least one client is associated</div> </div>

ZF7372 Access Point LED status description

2018-03-01T13:51:26-0800 2018-09-18T21:45:55-0700 https://support.ruckuswireless.com/articles/000002635 2014-02-12T07:12:11-0800 monthly 0.8 admin,premium knowledge_article_742 knowledge_article_742 2014-02-12T07:11:15-0800 000002635 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What to do if you see ICMPV6 Multicast Listener Report packets in the PCAP on the AP Even after disabling ICMV6 support if you see ICMPV6 Multicast Listener Report packets in the PCAP on the AP then check the firmware and make sure that is 9.5 or above this is a known issue in the older versions.

Even after disabling ICMV6 support we see ICMPV6 Multicast Listener Report packets

2014-02-12T07:12:11-0800 2018-09-12T13:31:01-0700 https://support.ruckuswireless.com/articles/000002493 2014-01-11T13:44:11-0800 monthly 0.8 admin,premium knowledge_article_688 knowledge_article_688 2014-01-08T12:06:08-0800 000002493 Validated (External) Premium Zoneflex indoor Configuration Configuration, ZoneFlex Indoor Can we use standalone AP as Repeater, to extend the signal. We cannot configure standalone AP as Repeater to extent signal, however if it is Zone Director managed AP's then we can configure AP's as mesh, so that we can extent signal. Mesh Topology: ZD---Wired connection ---Root AP---- Wireless connection--- Mesh AP--- Wired connection--- eMesh AP.

Can we use standalone AP as Repeater

2014-01-11T13:44:11-0800 2018-09-06T01:16:00-0700 https://support.ruckuswireless.com/articles/000003209 2018-09-01T07:09:11-0700 monthly 0.8 admin,premium knowledge_article_1178 knowledge_article_1178 2014-07-11T00:49:21-0700 000003209 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance Performance, ZoneDirector Where is the wireless client performance information in 9.8+ SW? The Application Recognition and Control feature allows ZoneDirector to collect and display application usage statistics for many types of traffic. Data is collected and displayed for both online and previously connected clients, and is displayed on dashboard charts as well as an <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255);">enhanced client monitoring display with a rich set of application usage tables. In addition to the pre-defined Applications, administrators can create user-defined Applications by IP address or port number and can create custom application deny policies based on DNS names or port numbers. Access restrictions can be deployed on a per-WLAN basis. </div> <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255);"> </div> <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255);">Note: Not all legacy AP's support application monitoring</div>

After upgrading to 9.8 SW the client monitoring now shows application usage on the main screen of the GUI, but I want to see the bandwidth ( performance) usage of my clients in the graph, where can I see this information now?

2018-09-01T07:09:11-0700 2018-09-01T12:00:08-0700 https://support.ruckuswireless.com/articles/000004177 2018-09-01T07:18:09-0700 monthly 0.8 admin,premium knowledge_article_1660 knowledge_article_1660 2015-03-19T13:03:39-0700 000004177 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why AP shows internal IP of the ZD when the AP is set to external IP address? 1. When a ZD's external IP address is set on an AP using 'set director IP a.b.c.d' command, the internal IP address (if there is any) in the Configure/Access Points, AP Policies > Limited ZD discovery section should be removed as the AP is forced to join only the primary IP address and not the external IP address. 2. 'Reset factory' the AP and then 'set director IP <external IP of the ZD>' followed by a 'reboot' will direct the AP to the external IP address of the ZD. 3. After connection, use 'get director' AP command to see the ZD management with the external IP address and current AP state as RUN.

When ZD is placed behind a firewall with the IP address of the ZD mapped to an external port forwarded IP address, do not specify internal IP address of the ZD in limited ZD discovery, because the AP is forced to join only the internal IP address, though you do a set director ip to an external port forwarded IP address.

2018-09-01T07:18:09-0700 2018-09-01T12:00:07-0700 https://support.ruckuswireless.com/articles/000005529 2018-08-30T23:34:27-0700 monthly 0.8 admin,premium knowledge_article_2284 knowledge_article_2284 2016-02-23T16:10:37-0800 000005529 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed Can Unleashed APs be managed/seen by SCI, SPoT, FM? 5/4/16 - Fixing typos and grammar, adding Question filed, root cause. Is unleashed APs are managed by SCI,SPOT and FM => Can Unleashed APs be managed/seen by SCI, SPoT, FM 8/31/18 - Updated for 200.6, added a Note.

Unleashed APs cannot be managed/seen by SCI, SPoT, FM.

2018-08-30T23:34:27-0700 2018-08-31T00:00:07-0700 https://support.ruckuswireless.com/articles/000007432 2018-08-30T12:57:45-0700 monthly 0.8 admin,premium knowledge_article_2728 knowledge_article_2728 2017-12-12T16:13:34-0800 000007432 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure Mirroring on a traditional stack? Mirroring configuration on a traditional stack You can configure mirroring on a Brocade traditional stack. A traditional stack consists of up to eight FCX and ICX devices. The stack operates as a chassis. The following examples show how to configure mirroring for ports that are on different members of a stack, and for ports that are on the same stack member as the mirror port. Configuration notes for traditional stack mirroring The following mirroring configuration information applies to all FCX and ICX devices connected in a traditional stack topology: • The input or output mirroring port can be on different ports. • All FastIron devices can have one mirroring port that monitors multiple ports, but cannot have multiple mirror ports for one monitored port. • If the mirror port and the monitored ports are on different stack units, only one active mirror port is allowed for the entire traditional stack. • If the mirror port and the monitored ports are on the same port region, multiple active mirror ports are allowed for the entire traditional stack. Devices in a traditional stack support 24 ports per port region. • The maximum number of monitored VLANs on a traditional stack is 8. Configuring mirroring for ports on different members in a traditional stack example In this example, although two ports are configured as active ports, only one active mirror port (port 1/1/24) is allowed for the entire stack because the mirror ports and the monitored ports are on different stack members. device(config)# mirror-port ethernet 1/1/24 device(config)# mirror-port ethernet 2/1/24 device(config)# interface ethernet 1/1/1 device(config-if-e1000-1/1/1)# monitor ethernet 1/1/24 both device(config)# interface ethernet 2/1/1 device(config-if-e1000-2/1/1)# monitor ethernet 1/1/24 both device(config)# interface ethernet 4/1/1 device(config-if-e1000-4/1/1)# monitor ethernet 1/1/24 both Configuring mirroring for ports on the same stack member in a traditional stack example In this example, the mirror ports are assigned to different monitor ports. device(config)# mirror-port ethernet 1/1/24 device(config)# mirror-port ethernet 2/1/24 device(config)# mirror-port ethernet 3/1/24 device(config)# mirror-port ethernet 4/1/24 device(config)# interface ethernet 1/1/1 device(config-if-e1000-1/1/1)# monitor ethernet 1/1/24 both device(config)# interface ethernet 2/1/1 device(config-if-e1000-2/1/1)# monitor ethernet 2/1/24 both device(config)# interface ethernet 4/1/1 device(config-if-e1000-4/1/1)# monitor ethernet 4/1/24 both

Mirroring configuration on a traditional stack

2018-08-30T12:57:45-0700 2018-08-30T18:00:12-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4xCAC?attachment_index=0 2018-08-30T18:00:12-0700 monthly admin,premium knowledge_article_2728 knowledge_article_2728_attachment_1 ka25B000000Cc7iQAC_Attachment__c.pdf 5072835.0 application/pdf https://support.ruckuswireless.com/articles/000007320 2018-08-30T13:00:48-0700 monthly 0.8 admin,premium knowledge_article_2940 knowledge_article_2940 2017-12-12T14:36:02-0800 000007320 Validated (External) Premium Ruckus icx switches Configuration;Security Configuration, Security, Ruckus ICX Switches DSCP marking and CoS marking using ACLs DSCP marking and CoS marking using ACLs If you would like to mark your QoS priorities based on an ACL you have to use the next command: access-list 101 permit ip any any 802.1p-priority-marking 0 Use 802.1p-priority-marking 0 (please replace the ‘0’ with your priority value) after the ACL you would like your traffic to match in order to set the CoS values. access-list 101 permit ip any any dscp-marking 0 Use any dscp-marking 0 (please replace the ‘0’ with your priority value) after the ACL you would like your traffic to match in order to set the DSCP values. You don't have to apply the ACL to a specific interface, the ACL just needs to exist in the configuration. How to track DSCP/CoS marking in the switch: We don't have a command like qos statistics but we can do the following in order to accomplish something like this: * We can use ACL accounting in order to know if how much traffic hits an ACL. device(config)# access-list 10 enable-accounting --- numbered ACL device(config-std-nacl)#enable-accounting --- Inside the prompt of a named ACL. show access list accounting Here are the limitations: •Traffic Policer and ACL accounting cannot coexist. • ACL accounting is not supported on outbound ACLs. • ACL accounting is not supported on dynamic ACLs. • ACL accounting is not supported on ICX 6430 devices and the following FastIron SX device series: SX-FI624HF, SX-FI624C, SX-FI62XG, SX-FIZMRXL6 or their combination. • On FastIron SXR800 and SXR1600 devices, traffic terminating at the devices will not be accounted. ACL accounting to count traffics per port. The below ACL to match any traffic with dscp value =0, or 82.1priority-marking =0. ! ip access-list extended traffic-counter permit ip any any dscp-matching 0 permit ip any any 802.1p-priority-matching 0 permit ip any any enable-accounting ! interface ethernet x/y/z (or int ve X) ip access-group traffic-counter in show access-list accounting e x/y/z in IP based ACLs in a Layer 2 switches behavior *Using IP based ACLs in switching code: You can use IP based ACLs in layer 2 code without any problem. The switch will check the packet and will see the IP address in order to decide what to do with it, but it is going to forward the packet based on MAC addresses. *Global ACLs: If you do not apply an ACL to a port the ACL is not going to do anything, the only exception to this rule is while you are using them to set dscp or 802.1p priorities. We can apply the ACL to a set of ports by doing an interface range.

DSCP marking and CoS marking using ACLs

2018-08-30T13:00:48-0700 2018-08-30T18:00:11-0700 https://support.ruckuswireless.com/articles/000007125 2018-08-30T13:02:30-0700 monthly 0.8 admin,premium knowledge_article_3115 knowledge_article_3115 2017-12-12T14:12:06-0800 000007125 Validated (External) Premium Ruckus icx switches System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Ruckus ICX Switches Why does ICX 7xxx reboot when issuing Ctrl+C ICX 7xxx reboots when issuing Ctrl+C<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">ICX 7250 and 7450 reboots when issuing Ctrl+C in order to interrupt an action.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">This issue is due to the device is not using the recommended boot image.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">The ICX7xxx is running:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">Software: Version 08.0.40T213<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">Compressed Boot-Monitor Image size = 786944, Version: 10.1.04T215 (spz10104) or 10.1.05T215 (spz10105)<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">The recommended boot image for this software version is spz10106.bin.

ICX 7250 and 7450 reboots when issuing Ctrl+C in order to interrupt an action.

2018-08-30T13:02:30-0700 2018-08-30T18:00:09-0700 https://support.ruckuswireless.com/articles/000006590 2018-08-30T13:53:57-0700 monthly 0.8 admin,premium knowledge_article_2708 knowledge_article_2708 2017-12-12T16:14:25-0800 000006590 Validated (External) Premium Icx 6450;Icx 6610;Icx 6650;Icx 7450;Icx 7750;Fastiron cx series;Ruckus ICX 6610 Campus Switches;Brocade ICX 6650 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches;Brocade FastIron CX Series Switches Configuration Configuration, ICX 6450, ICX 6610, ICX 6650, ICX 7450, ICX 7750, FastIron CX Series What is recommended for a multicast routing design? The multicast design recommendation for the K-12 network includes IPv4 and IPv6 multicast forwarding. PIM Sparse Mode (PIM-SM) is used in the K-12 network for multicast forwarding. IGMP/MLD snooping is enabled on all access layer switches. The Brocade ICX switch product family supports the efficient and stable multicast routing protocol PIM-SM (IPv4 and IPv6).

Multicast implementation helps efficiently forward IP packets that are destined for two or more receivers, which in turn helps to save network bandwidth and data replication at the source.

2018-08-30T13:53:57-0700 2018-08-30T18:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tvr0CAC?attachment_index=0 2018-08-30T18:00:08-0700 monthly admin,premium knowledge_article_2708 knowledge_article_2708_attachment_1 ka25B000000CdG7QAK_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000006854 2018-08-30T13:56:00-0700 monthly 0.8 admin,premium knowledge_article_3134 knowledge_article_3134 2017-12-12T14:11:59-0800 000006854 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to enable 10 Gbps Ports? How to Enable 10 Gbps Ports After installing license files to upgrade the eight 1 Gbps SFP+ ports to run as 10 Gbps, we need to actually enable the ports. This may seem silly, but consider that the upgrades are sold in lots of 4-ports at a time. This step would allow you to specify which four ports were upgraded. In our case, we upgraded them all. ICX6610-48 Switch# config terminal ICX6610-48 Switch(config)# interface ethernet 1/3/1 to 1/3/8 ICX6610-48 Switch(config-mif-1/3/1-1/3/8)# speed-duplex 10g-full This will take a minute, please wait. ICX6610-48 Switch(config-mif-1/3/1-1/3/8)# interface ethernet 2/3/1 to 2/3/8 ICX6610-48 Switch(config-mif-2/3/1-2/3/8)# speed-duplex 10g-full ICX6610-48 Switch(config-mif-2/3/1-2/3/8)# exit If you (accidentally) use a 1 Gbps SFP+ cable, the upgrade will likely throw an error like the one below: U2-MSG: INFO: 2/3/4: optics <-> speed mismatch. Replace with SFP+ to enable link. U2-MSG: INFO: 2/3/4: optics <-> speed mismatch. Replace with SFP+ to enable link. You can reduce the port speed to make it work (albeit at 1 Gbps): ICX6610-48 Switch(config-mif-1/3/1-1/3/8)# interface ethernet 2/3/4 ICX6610-48 Switch(config-if-e10000-2/3/4)# speed-duplex 1000-full-master When done, save your changes. ICX6610-48 Switch(config)# write memory Write startup-config done. Automatic copy to member units: 2 ICX6610-48 Switch(config)# Flash Memory Write (8192 bytes per dot) . Flash to Flash Done.

How to Enable 10 Gbps Ports?

2018-08-30T13:56:00-0700 2018-08-30T18:00:07-0700 https://support.ruckuswireless.com/articles/000007362 2018-08-30T06:20:39-0700 monthly 0.8 admin,premium knowledge_article_2760 knowledge_article_2760 2017-12-12T16:13:21-0800 000007362 Validated (External) Premium Ruckus icx switches Installation;Troubleshooting Installation, Troubleshooting, Ruckus ICX Switches How to install FreeRadius 3x Server for testing network device access and flex authentication? <ul><li>Install FreeRadius 3x on Ubuntu 16.04</li><li>Add loopback and password info and verify Local Radius Server is working</li><li>Network Device (NAS) Access Setup</li><li>Quick Test using radtest</li><li>Enable radmin/raddebug so you can debug while FreeRadius 3x is running as a service</li><li>Network Device Configurations to enable Radius AAA</li><li>Add Radius Authentication Permissions Levels for NAS (ICX Switch) device</li><li>Add Dot1x Authentication, Dynamic Vlan, and DHCP Server to the ICX Switch configuration</li><li>Add Dot1x Authentication configuration to Ubuntu 16.04 Desktop client</li><li>Add Dot1x with dynamic untagged vlan to Radius Server</li><li>Verify the dot1x client is working</li><li>Summary of configuration</li><li>Add Mac Authenication/Dot1x Authenicion with Dynamic vlan on the same port</li></ul> <div>See Attachment</div>

How to install FreeRadius 3x Server for testing network device access and flex authentication

2018-08-30T06:20:39-0700 2018-08-30T12:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Tw3eCAC?attachment_index=0 2018-08-30T12:00:10-0700 monthly admin,premium knowledge_article_2760 knowledge_article_2760_attachment_1 ka25B000000CdCKQA0_Attachment__c.pdf 229872.0 application/pdf https://support.ruckuswireless.com/articles/000006673 2018-08-29T10:31:12-0700 monthly 0.8 admin,premium knowledge_article_2917 knowledge_article_2917 2017-12-12T15:03:17-0800 000006673 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products How to use the 100-fx command? After you physically install a 100Base-FX transceiver, you must use this command to enable 100Base-FX support on the device. Examples The following example enables support for 100Base-FX on a fiber port. device(config)# interface ethernet 1/1/6 device(config-if-e1000-1/1/6)# 100-fx Syntax 100-fx no 100-fx

The "100-fx" command enables 100Base-FX on chassis-based and stackable devices.

2018-08-29T10:31:12-0700 2018-08-29T12:00:10-0700 https://support.ruckuswireless.com/articles/000006704 2018-08-29T10:43:37-0700 monthly 0.8 admin,premium knowledge_article_2800 knowledge_article_2800 2017-12-12T16:04:12-0800 000006704 Validated (External) Premium Brocade network advisor;Brocade Network Advisor (BNA) Configuration;System network management Configuration, System Network Management, Brocade Network Advisor Brocade Network Advisor - Technical How-To - VLAN Management YouTube video: <a href="https://www.youtube.com/watch?v=y7JxFPs9HhY" target="_blank">https://www.youtube.com/watch?v=y7JxFPs9HhY</a>

How to view, create, edit and delete VLANs and VCS virtual fabrics

2018-08-29T10:43:37-0700 2018-08-29T12:00:08-0700 https://support.ruckuswireless.com/articles/000007304 2018-08-27T08:18:44-0700 monthly 0.8 admin,premium knowledge_article_2945 knowledge_article_2945 2017-12-12T14:36:00-0800 000007304 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches Capture Punch list for high CPU issues while it is happening on ICX and SX units Enable Log for the telnet/ssh/console session to a file called capture.log and execute the below commands for TAC Analysis. If using a telnet/ssh session you need to redirect debug output for that session: #show telnet Telnet connections (inbound): 1 established, client ip address 10.200.44.67, privilege super-user debug destination telnet 1 enable mode skip sh cpu page sh mac sh mac stat sh arp sh arp resource sh ip traffic sh ip route sh ip pim resource sh ip multicast resource skip sh log sh default values de de de sh stat clear stat sh stat sh stat sh stat sh mac stat sh mac stat sh mac stat sh int | inc line| util sh int | inc line| util sh int | inc line| util 8.x code debug packet-capture filter none debug packet-capture mode brief debug packet-capture max 250 show cpu debug packet-capture debug packet-capture filter none debug packet-capture mode pcap-fmt 1600 "If Jumbo set to 12000" debug packet-capture max 250 show cpu debug packet-capture 7.x code dm raw filter none dm raw mode brief dm raw max 250 show cpu dm raw dm raw filter none dm raw mode normal dm raw max 250 show cpu dm raw

Capture Punch list for high CPU issues while it is happening on ICX and SX units

2018-08-27T08:18:44-0700 2018-08-27T12:00:08-0700 https://support.ruckuswireless.com/articles/000008171 2018-08-23T13:49:14-0700 monthly 0.8 admin,premium knowledge_article_3340 knowledge_article_3340 2018-08-23T13:38:28-0700 000008171 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway Why isn't System Time Zone reflecting on the WLAN Time Schedules? We explained that System Time Zone is for the Data that is presented on the vSZ/SZ GUI such as Events, Alarms, Logs etc. However to change the AP Time Zone which is used for WLAN Time Schedulers, we need to configure it separately for each AP Zone from Access Points> Zone> Edit. <img alt="User-added image" height="141" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000938K&feoid=00N50000002Cf3M&refid=0EM50000000lbzR" width="558"></img> Once we make this change, the WLAN schedules will start working as per the defined time under the AP Zone.

Customer have setup local time zone on SZ to Pacific in System > General Settings > Time. However, their WLAN Time Schedules are still working in GMT.

2018-08-23T13:49:14-0700 2018-08-23T18:00:06-0700 https://support.ruckuswireless.com/articles/000008169 2018-08-22T10:44:36-0700 monthly 0.8 admin,premium knowledge_article_3339 knowledge_article_3339 2018-08-22T10:43:42-0700 000008169 Validated (External) Premium Icx 7650;Icx 7150;Icx 7250;Icx 7450;Icx 7750;RUCKUS ICX 7650 Campus Switches;RUCKUS ICX 7150 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Installation;Troubleshooting Installation, Troubleshooting, ICX 7650, ICX 7150, ICX 7250, ICX 7450, ICX 7750 Why the Flow will not be installed in the ICX switch when the VLAN ID has not been added to the Flow? The Flow must be added with the vlan_vid=0xffff as follow: administrator@ubuntu:~$ ovs-ofctl -O OpenFlow13 add-flow tcp:2.2.2.1:6633 in_port=47,vlan_vid=0xffff,actions=drop Note: 0xffff is used to match untagged packets.

In an untagged Hybrid Port, Flow must be added with the VLAN ID field.

2018-08-22T10:44:36-0700 2018-08-22T12:00:07-0700 https://support.ruckuswireless.com/articles/000008170 2018-08-22T10:59:45-0700 monthly 0.8 admin,premium knowledge_article_3338 knowledge_article_3338 2018-08-22T10:59:45-0700 000008170 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed Can I configure Unleashed to allow only 1 device per user account? Yes, you can achieve your goal of restricting one device per user. The way to do is as follows. 1. Login to Unleashed UI using admin credentials 2. Click on “WiFi Networks” 3. Click on the WLAN in which you want to restrict one device per user 4. Click on “Edit” button at the top 5. Click on “Show Advanced Options” at the bottom 6. Under ‘Zero-IT & DPSK’ tab (the first one that automatically opens) enable the checkbox “Enable Dynamic PSK with < 62 > character phrase. The 62 characters can be changed to lower value. 7. Enable “Limit D-PSK generation per user to 1 device” and click “OK” 8. When you go back to the Dashboard screen, click “Admin & Services” 9. Click “Services -> Dynamic PSK” 10. Click “Generate” button on y our right. 11. Handoff those keys to your users. With these, you not only be able to achieve only one user per device but also the network is more secure as everyone’s passphrase / PSK is different

You can setup Zero-IT & DPSK with 1 device per account in Unleashed.

2018-08-22T10:59:45-0700 2018-08-22T12:00:05-0700 https://support.ruckuswireless.com/articles/000008129 2018-08-21T13:34:19-0700 monthly 0.8 admin,premium knowledge_article_3337 knowledge_article_3337 2018-08-02T07:51:21-0700 000008129 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway Why 5GHz LED is off but service is working on 5GHz radio for AP runnig 3.4.2 code Issue is resolved by upgrading controller to SmartZone OS version 3.5.1 Maintenance Release 1 (MR1 Patch1), build 862 or above. vSZ https://support.ruckuswireless.com/software/1451-vsz-3-5-1-0-862-mr1-patch1-software-release-ximg-image SZ-100 https://support.ruckuswireless.com/software/1446-smartzone-3-5-1-0-862-mr1-patch1-software-release-sz-100 SZ-300 https://support.ruckuswireless.com/software/1443-smartzone-3-5-1-mr1-patch1-software-release-sz300 SCG-200 https://support.ruckuswireless.com/software/1444-smartzone-3-5-1-mr1-patch1-software-release-scg200

AP controlled by vSZ/SCG running 3.4.2 have 5Ghz LED off while 5Ghz SSID/WLAN is operational. Issue persists until AP is rebooted. This is a cosmetic issue that does not affect operation but impacts direct verification of service on AP via LED state

2018-08-21T13:34:19-0700 2018-08-21T18:00:06-0700 https://support.ruckuswireless.com/articles/000008161 2018-08-15T13:40:01-0700 monthly 0.8 admin,premium knowledge_article_3335 knowledge_article_3335 2018-08-15T13:39:39-0700 000008161 Validated (External) Premium Unleashed;Zonedirector;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Firmware Firmware, Unleashed, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway Does Ruckus support channel 144 in the 5GHz band? Most Ruckus products do not support channel 144 in 5GHz, or only when used with 20MHz channel width. Many older client devices do not support channel 144. <a href="https://clients.mikealbano.com/" target="_blank">https://clients.mikealbano.com/</a>

Ruckus products do not support channel 144 in the 5GHz band.

2018-08-15T13:40:01-0700 2018-08-15T18:00:06-0700 https://support.ruckuswireless.com/articles/000002548 2018-08-15T06:44:30-0700 monthly 0.8 admin,premium knowledge_article_779 knowledge_article_779 2014-02-18T20:57:34-0800 000002548 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;System network management Configuration, Installation, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Question on mesh mode at configure-> Access points-> Advanced Options-> Mesh Mode <div>Mesh modes : </div> <div>-> Auto: AP will act as a Mesh/Root depending on how the AP is connected to the network, if there is any connectivity issue between AP and ZD/Network then it will disconnect from network and then join the controller as mesh AP(Uplink will be Root AP). </div> <div>-> Root AP: AP will only connects to ZD as Root AP.</div> <div> -> Mesh AP: AP will only connects to ZD as Mesh AP. </div> <div> -> Disable: Select disable option if you do not want this AP to be part of your mesh network. We can see status as connected and Mesh mode as Disabled under monitor Access Points. Below snap indicates changes in the monitor Access points if we select AP as Auto, Root AP, Mesh AP or Disable, <img alt="User-added image" height="141" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000932M&feoid=00N50000002Cf3M&refid=0EM50000000LQEd" width="500"></img></div>

Query about Mesh modes at configure-> Access points-> Edit an AP -> Advanced options

2018-08-15T06:44:30-0700 2018-08-15T12:00:10-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PEccCAG?attachment_index=0 2018-08-15T12:00:10-0700 monthly admin,premium knowledge_article_779 knowledge_article_779_attachment_1 Mesh Mode.JPG 98246.0 image/jpeg https://support.ruckuswireless.com/articles/000008157 2018-08-14T16:38:56-0700 monthly 0.8 admin,premium knowledge_article_3329 knowledge_article_3329 2018-08-14T16:24:28-0700 000008157 Validated (External) Premium P300;Ruckus P300 Configuration Configuration, P300 Does Ruckus Wireless P300 point to point bridge support 4900 MHz to 5150 MHz, 4.9 GHz - 5.15 GHz Ruckus P300 Point to Point bridge supports only standard 802.11 5GHz channels range. The lowest available channel is channel 36, which covers from 5170–5190 MHz. <div style="margin-left: 40px;">Actual channels available will vary due to country code settings and the local country regulations.</div> 4900Mhz and 5150MhZ is a special band designated for public safety in the United States of America. it is also available in Japan as part of 802.11j, No Ruckus Access Points, including P300 Point to Point, Point to multi-point bridges, support this frequency band at this time.

There is no support for 4900 MHz to 5150 MHz, 4.9 GHz - 5.15 GHz in Ruckus products at this time.

2018-08-14T16:38:56-0700 2018-08-14T18:00:06-0700 https://support.ruckuswireless.com/articles/000006803 2017-12-12T14:11:54-0800 monthly 0.8 admin,premium knowledge_article_3145 knowledge_article_3145 2017-12-12T14:11:54-0800 000006803 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure single level MCT? How to configure MCT The MCT cluster can be deployed separately without any client configured. <ul><li>When the cluster is deployed, it will check all the deployed clients and start the state machine for the clients.</li><li>Clients can be configured and deployed as needed.</li><li>Once the cluster is deployed, only the cluster member VLANs and client isolation mode can be modified.</li></ul> MCT Configuration Establish Cluster <ol><li> Configure ICL LAG </li><li> Configure MCT session VLAN </li><li> Create VE on MCT session VLAN </li><li> Configure VE interface </li><li> Create MCT cluster </li><li> Assign Rbridge ID’s </li><li> Define session VLAN </li><li> Identify ICL port </li><li> Define MCT peer </li></ol> MCT Example configuration: Device 1 lag lag_agg_a_1 static id 103 ports ethe 1/1/1 to 1/1/2 primary-port 1/1/1 deploy ! lag lag_agg_a_2 dynamic id 104 ports ethe 1/1/24 to 1/1/27 primary-port 1/1/24 deploy ! lag lag_agg_a_3 dynamic id 105 ports ethe 1/1/21 to 1/1/23 primary-port 1/1/21 deploy ! vlan 2 name session-vlan by port tagged ethe 1/1/1 to 1/1/2 router-interface ve 2 ! vlan 3 name keep-alive-vlan by port tagged ethe 1/1/35-1/1/36 router-interface ve 3 ! vlan 1905 by port tagged ethe 1/1/24 to 1/1/27 ethe 1/1/21 ethe 1/1/23 ethe 1/1/1 to 1/1/2 ! hostname R1 ! interface ve 2 ip address 10.1.1.1 255.255.255.0 ! interface ve 3 ip address 10.1.2.1 255.255.255.0 ! ! cluster MCT1 1 rbridge-id 1 session-vlan 2 keep-alive-vlan 3 icl BH1 ethernet 1/1/1 peer 10.1.1.2 rbridge-id 2 icl BH1 deploy client client-1 rbridge-id 1901 client-interface ethe 1/1/24 deploy client client-2 rbridge-id 1902 client-interface ethe 1/1/21 deploy ! Device 2 lag lag_agg_b_1 static id 103 ports ethe 1/1/1 to 1/1/2 primary-port 1/1/1 deploy ! lag lag_agg_b_2 dynamic id 105 ports ethe 1/1/24 to 1/1/27 primary-port 1/1/24 deploy ! lag lag_agg_b_3 dynamic id 104 ports ethe 1/1/21 to 1/1/23 primary-port 1/1/21 deploy ! vlan 2 name session-vlan by port tagged ethe 1/1/1 to 1/1/2 router-interface ve 2 ! vlan 3 by port tagged ethe 1/1/35-1/1/36 router-interface ve 3 ! ! vlan 1905 by port tagged ethe 1/1/24 to 1/1/27 ethe 1/1/21 to 1/1/23 ethe 1/1/1 to 1/1/2 ! hostname R2 ! interface ve 2 ip address 10.1.1.2 255.255.255.0 ! interface ve 3 ip address 10.1.2.2 255.255.255.0 ! cluster MCT1 1 rbridge-id 2 session-vlan 2 keep-alive-vlan 3 icl BH1 ethernet 1/1/1 peer 10.1.1.1 rbridge-id 1 icl BH1 deploy client client-1 rbridge-id 1901 client-interface ethe 1/1/21 deploy client client-2 rbridge-id 1902 client-interface ethe 1/1/24 !

How to configure single level MCT?

2017-12-12T14:11:54-0800 2018-07-07T23:26:29-0700 https://support.ruckuswireless.com/articles/000008037 2018-07-02T10:34:11-0700 monthly 0.8 admin,premium knowledge_article_3326 knowledge_article_3326 2018-07-02T10:32:38-0700 000008037 Validated (External) Premium Ruckus icx switches Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches How to gather support-save core file from a member unit within a stack? The following steps show you how to retrieve the core file from the member unit 4 of a stack: From the Active unit, remote console into unit 4: #rconsole 4 Once consoled into unit 4, enable management port: #dm mport-enable Press Ctrl+Y and then M to switch to OS console. OS> Configure the remote IP address. OS> remote address 10.200.128.14 255.255.255.240 --- >Give an IP that is not used in the network DO YOU WANT TO SAVE THIS ADDRESS IN FLASH (Y/N): Done ---> Yes IP address = 10.200.128.14 IP subnet mask = 255.255.255.240 <div style="">OS>remote def 10.200.128.1 ---> you can give the same GW as in the switch</div> IP default gateway = 10.200.128.1 <div style="">sho remo --- >make sure the IP add and Gateway are configured </div> IP address : 10.200.128.14 subnet mask : 255.255.255.240 default gateway : 10.200.128.1 Enable Telnet <div style="">OS> telnetd start</div> From another device Telnet to the remote IP telnet 10.200.128.14 --- >telnet into the ICX Once telnetting to the ICX has been successful, access to the core file folder cd fast_iron/cores Collect the core file using tftp tftp -l core_1037-3.gz -p <TFTP IP>

If a member unit in an ICX stack experienced a crash or a reboot, then collecting the support-save core file from the Active unit should help TAC investigate the cause of the problem.

2018-07-02T10:34:11-0700 2018-07-02T12:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA2500000008nTyCAI?attachment_index=0 2018-07-02T12:00:09-0700 monthly admin,premium knowledge_article_3326 knowledge_article_3326_attachment_1 Core file from a member unit.pdf 192297.0 application/pdf https://support.ruckuswireless.com/articles/000008057 2018-06-28T10:20:48-0700 monthly 0.8 admin,premium knowledge_article_3325 knowledge_article_3325 2018-06-28T10:20:48-0700 000008057 Validated (External) Premium Icx 7150;RUCKUS ICX 7150 Campus Switches Performance;Troubleshooting Performance, Troubleshooting, ICX 7150 What configuration does a PoH port need on a ICX7150-48ZP to support a Grandstream GXP 2140? This is a phone issue, when connecting to these ports. Nothing else can be done from Ruckus than setting up the port to 1000-full-slave. For a long-term solution, the customer needs to check with the phone vendor to see if they are fixing the loop timing bit not being populated correctly.

The first 16 ports of the ICX7150-48ZP are PoH. When connecting a phone (model: Grandstream GXP 2140), the phone gets powered, but the port never comes up. Same phone works completely fine if connected to any ports from 17 to 48.

2018-06-28T10:20:48-0700 2018-06-28T12:00:07-0700 https://support.ruckuswireless.com/articles/000007984 2018-06-15T12:57:22-0700 monthly 0.8 admin,premium knowledge_article_3324 knowledge_article_3324 2018-06-13T08:23:22-0700 000007984 Validated (External) Premium Icx 7750;RUCKUS ICX 7750 Campus Switches Configuration Configuration, ICX 7750 Why does OSPF not send a route through a Summary LSA when this is permitted in Prefix-list when the Prefix-list already exists? In Ruckus you need to remove the command redistribute connected route-map MAP_OSPF_CONNECTED in order to permit our router to redistribute the connected route. If we do not remove and re-add the command back, the route will not be advertised. To permit the route to be advertised, remove the command redistribute connected route-map MAP_OSPF_CONNECTED underneath the OSPF process and the route will reflect. This can also be performed during production because the OSPF dead timer is 40 secs so it will give plenty of time to paste the command quickly so that the route can be advertised without disrupting the other ones.

When adding a new route to a Prefix-List, OSPF does not show the route in the OSPF database.

2018-06-15T12:57:22-0700 2018-06-15T18:00:18-0700 https://support.ruckuswireless.com/articles/000007961 2018-06-15T14:18:45-0700 monthly 0.8 admin,premium knowledge_article_3323 knowledge_article_3323 2018-06-12T07:53:00-0700 000007961 Validated (External) Premium Brocade network advisor;Brocade Network Advisor (BNA) Configuration;System network management Configuration, System Network Management, Brocade Network Advisor How can BNA retrieve configuration from the switches? You may set an enable password for a device in BNA and there are a couple of ways to do it: 1. Configuring it globally for all devices by going to Discover -> IP Products -> Global Settings -> "Default Passwords " tab and under "Credentials Type" you can choose Login, Enable or Superuser passwords to set. 2. You can configure it individually for each device by going to Discover -> IP Products -> choose a device and click "Edit" and here you have "Read/Write Credentials" tab where you can set an enable password.

When trying to retrieve the configuration from ICX in BNA, receive the error message 'BNA failed to retrieve configuration.

2018-06-15T14:18:45-0700 2018-06-15T18:00:14-0700 http://support.ruckuswireless.com/article_attachments/kA2500000008nR4CAI?attachment_index=0 2018-06-15T18:00:14-0700 monthly admin,premium knowledge_article_3323 knowledge_article_3323_attachment_1 IP_Manual.pdf 18361010.0 application/pdf https://support.ruckuswireless.com/articles/000007944 2018-06-15T14:26:15-0700 monthly 0.8 admin,premium knowledge_article_3322 knowledge_article_3322 2018-06-11T11:32:22-0700 000007944 Validated (External) Premium Icx 7750;RUCKUS ICX 7750 Campus Switches Configuration Configuration, ICX 7750 What would be an alternative solution for offset-list in Ruckus? Ruckus does not implement offset list.

Alternatives for offset-list due to ip rip metric-offset is not a desired option to implement

2018-06-15T14:26:15-0700 2018-06-15T18:00:12-0700 http://support.ruckuswireless.com/article_attachments/kA2500000008nQVCAY?attachment_index=0 2018-06-15T18:00:12-0700 monthly admin,premium knowledge_article_3322 knowledge_article_3322_attachment_1 fastiron-08030mb-l3guide.pdf 4829842.0 application/pdf https://support.ruckuswireless.com/articles/000007899 2018-06-07T16:38:25-0700 monthly 0.8 admin,premium knowledge_article_3318 knowledge_article_3318 2018-06-07T16:36:28-0700 000007899 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway How can I include all fields when migrating APs? In SmartZone 3.5+, you can configure the view to include desired fields, including Location and Description. <img alt="User-added image" height="326" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000092fr&feoid=00N50000002Cf3M&refid=0EM50000000lK42" style="height: 497px; width: 653px;" width="500"></img> When using migration script on SZ 3.5, it migrates AP with default setting to a new Zone. For each migration instance, there will be a new Zone on the SZ. APs will not inherit their name, location, or AP group setting after migration. You can use AP pre-provisioning file to accomplish the goal. You will need to download the list of the APs from ZD, configure the detail in the pre-provisioning file and upload in the Zone you want to move the APs. This will help to migrate the APs with name, description, AP group and other settings.

Until SZ 3.5, AP Location and Description fields were not included in export .csv list, but could be added manually.

2018-06-07T16:38:25-0700 2018-06-07T18:00:09-0700 https://support.ruckuswireless.com/articles/000007872 2018-05-24T14:40:28-0700 monthly 0.8 admin,premium knowledge_article_3313 knowledge_article_3313 2018-05-24T14:40:28-0700 000007872 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches Known issues and workarounds Known Issues and Workarounds, FastIron CX Series Why does FCX not save the configuration? Upgrade to a version of code that contains the cosmetic fix.

When customer executes the wr mem command the configuration is not saved if prior to this they have not made a recent change.

2018-05-24T14:40:28-0700 2018-05-24T18:00:06-0700 https://support.ruckuswireless.com/articles/000007870 2018-05-23T13:51:42-0700 monthly 0.8 admin,premium knowledge_article_3312 knowledge_article_3312 2018-05-23T13:51:42-0700 000007870 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector How can I troubleshoot Client connectivity issues on ZoneDirector Analyze client MAC behavior in ZD debug logs and AP support info files.

The ZoneDirector collects logs to help identify client connectivity issues.

2018-05-23T13:51:42-0700 2018-05-23T18:00:10-0700 https://support.ruckuswireless.com/articles/000007860 2018-05-18T15:10:47-0700 monthly 0.8 admin,premium knowledge_article_3311 knowledge_article_3311 2018-05-18T15:10:47-0700 000007860 Validated (External) Premium Spot lbs Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, SPoT LBS How long does SPoT store client MAC connection info? All location records of MAC addresses are cached. How long it stays cached depends on your configuration on the SPoT server: <img alt="User-added image" height="375" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000blZg&feoid=00N50000002Cf3M&refid=0EM500000011Kt4" width="500"></img> Every hour, some of these numbers are aggregated and summarized. Once the cache days are exceeded, these raw data are then deleted, so you can only pull summarized data. To pull raw records out of SPoT you have to go thru the API: <img alt="User-added image" height="333" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000blZg&feoid=00N50000002Cf3M&refid=0EM500000011Kt9" width="704"></img> Location API calls allow you to pull cached raw data records from SPoT (every hit of MAC address vs location, with timestamp). Metrics API calls are all summarized data (like repeat counts, dwell time, etc).

How long SPoT stores MAC address in cache is configurable, else summarized data is available by API.

2018-05-18T15:10:47-0700 2018-05-18T18:00:10-0700 https://support.ruckuswireless.com/articles/000007862 2018-05-18T15:29:37-0700 monthly 0.8 admin,premium knowledge_article_3309 knowledge_article_3309 2018-05-18T15:29:37-0700 000007862 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway, SZ100 How can I advertise a WLAN SSID only one one radio band? After creating WLANs with desired SSIDs, create a WLAN Group that contains the single-radio WLAN and what VLAN(s) are used [ie. Building2]. Then in AP Zone, Group, or Individual AP edit, you can assign by Radio, what WLAN Group to use. <img alt="User-added image" height="381" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000blZv&feoid=00N50000002Cf3M&refid=0EM500000011KtE" width="633"></img>

Combination of WLAN Groups and AP Groups can achieve a WLAN SSID on only one radio band.

2018-05-18T15:29:37-0700 2018-05-18T18:00:07-0700 https://support.ruckuswireless.com/articles/000004135 2018-04-30T11:03:12-0700 monthly 0.8 admin,premium knowledge_article_3304 knowledge_article_3304 2015-03-12T11:33:56-0700 000004135 Validated (External) Premium Zonedirector;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, virtual SmartCell Gateway What is the best practice configuration for Intermec devices using Ruckus controller?

Scanners using Telnet applications are very time sensitive, and there are some configurations that can help maintain sessions and improve roaming.

2018-04-30T11:03:12-0700 2018-04-30T12:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PIHICA4?attachment_index=0 2018-04-30T12:00:07-0700 monthly admin,premium knowledge_article_3304 knowledge_article_3304_attachment_1 Intermec-Ruckus-Interop-Guide.pdf 1332716.0 application/pdf https://support.ruckuswireless.com/articles/000006616 2018-04-27T13:07:27-0700 monthly 0.8 admin,premium knowledge_article_2815 knowledge_article_2815 2017-12-12T16:04:07-0800 000006616 Validated (External) Premium Ruckus icx switches Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches Does FastIron ICX series support a RTC (Real Time Clock)? FastIron ICX 7250 / 7450 supports RTC and FastIron ICX 7750 has been supported from version FI 08.5.00. FastIron ICX 6610 / 6430 / 6450 do not support a RTC. It will require network clock synchronization with NTP server across a warm or cold start or to set a clock time using the clock set hh:mm:ss mm-dd-yy command. This could result in delayed clock synchronization after warm or cold start.

FastIron ICX 7250 / 7450 and ?FastIron ICX 6610 / 6430 / 6450

2018-04-27T13:07:27-0700 2018-04-27T18:00:08-0700 https://support.ruckuswireless.com/articles/000007065 2017-12-12T15:03:30-0800 monthly 0.8 admin,premium knowledge_article_2885 knowledge_article_2885 2017-12-12T15:03:30-0800 000007065 Validated (External) Premium Brocade eos products Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Brocade EOS Products What is the meaning of the PoE Fault/Error messages? PoE Fault/Error Messages<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <table border="1" cellpadding="0" cellspacing="0" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Fault/Error</td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Reason</td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Critical temperature </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">The PoE chip temperature limit rose above the safe operating level, thereby powering down the port. </td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Detection failed/Discharged capacitor </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">The port failed capacitor detection (legacy PD detection) because of a discharged capacitor. This can occur when connecting a non-PD on the port. </td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Detection failed/Out of range capacitor </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">The port failed capacitor detection (legacy PD detection) because of an out-of-range capacitor value. This can occur when connecting a non-PD on the port. </td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Internal H/W fault </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">A hardware problem has hindered port operation. </td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Lack of power </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">The port has shut down due to lack of power. </td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Main supply voltage high </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">The voltage was lower than the minimum voltage limit, thereby tripping the port. </td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Main supply voltage low </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">The voltage was lower than the minimum voltage limit, thereby tripping the port. </td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Overload state </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">The PD consumes more power than the maximum limit configured on the port, based on the default configuration, user configuration, or CDP configuration. </td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Over temperature </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">The port temperature rose above the temperature limit, thereby powering down the port. </td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">PD DC fault </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">A succession of underload and overload states, or a PD DC/DC fault, caused the port to shutdown. </td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Short circuit </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">A short circuit was detected on the port delivering power. </td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Underload state </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">The PD consumes less power than the minimum limit specified in the 802.3af standard. </td></tr><tr><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Voltage applied from ext src </td><td colspan="1" rowspan="1" style="width: 312px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">The port failed capacitor detection (legacy PD detection) because the voltage applied to the port was from an external source. </td></tr></tbody></table>

PoE Fault/Error Messages

2017-12-12T15:03:30-0800 2018-04-23T19:03:56-0700 https://support.ruckuswireless.com/articles/000006874 2018-04-17T11:00:43-0700 monthly 0.8 admin,premium knowledge_article_2915 knowledge_article_2915 2017-12-12T15:03:19-0800 000006874 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Where is the video for Collecting a Show Tech-Support on an ICX Switch? YouTube video: <a href="https://www.youtube.com/watch?v=ri5HEE14bfg" target="_blank">https://www.youtube.com/watch?v=ri5HEE14bfg</a> Brocade Community Board post: <a href="https://community.brocade.com/t5/Ethernet-Switches-Routers/Collecting-a-Show-Tech-Support/ta-p/87182" target="_blank">https://community.brocade.com/t5/Ethernet-Switches-Routers/Collecting-a-Show-Tech-Support/ta-p/87182</a>

Collecting a Show Tech-Support on ICX Campus Edge Switch.

2018-04-17T11:00:43-0700 2018-04-17T12:00:07-0700 https://support.ruckuswireless.com/articles/000006736 2018-04-11T15:49:34-0700 monthly 0.8 admin,premium knowledge_article_3023 knowledge_article_3023 2017-12-12T14:34:11-0800 000006736 Validated (External) Premium Icx 6610;Ruckus ICX 6610 Campus Switches Configuration;Installation Configuration, Installation, ICX 6610 How to mount ICX 6610 in 4-post rack using 2-post rack ear kit to avoid sagging? When installing an ICX 6610 into a 4-post rack use a 4-post rail kit to eliminate sagging. 2-post ear kits should be used on 2-post racks. <img alt="User-added image" height="397" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000blNu&feoid=00N50000002Cf3M&refid=0EM50000000X71P" width="500"></img> <img alt="User-added image" height="321" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000blNu&feoid=00N50000002Cf3M&refid=0EM50000000X71U" width="500"></img>

How to mount ICX 6610 in 4-post rack using 2-post rack ear kit to avoid sagging?

2018-04-11T15:49:34-0700 2018-04-11T18:00:07-0700 https://support.ruckuswireless.com/articles/000007729 2018-03-28T11:13:58-0700 monthly 0.8 admin,premium knowledge_article_3300 knowledge_article_3300 2018-03-28T11:13:58-0700 000007729 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway When might we see a Ruckus AP send de-auth to wireless client devices? Wireless clients send probe and association requests. If they do not authenticate with the AP, the AP can send de-auth packets. See attached diagram of 802.11 association packets seen, with no authentication from client devices, cleared by Ruckus AP.

Wireless clients move around and are always sending probes and association requests. If not sending authentication with these, Ruckus APs may send de-auth packets.

2018-03-28T11:13:58-0700 2018-03-28T12:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000fxSaCAI?attachment_index=0 2018-03-28T12:00:08-0700 monthly admin,premium knowledge_article_3300 knowledge_article_3300_attachment_1 One_Ruckus_AP_Deauth_Reason.pdf 431775.0 application/pdf https://support.ruckuswireless.com/articles/000001475 2016-11-09T14:52:25-0800 monthly 0.8 admin,premium knowledge_article_2442 knowledge_article_2442 2013-01-22T14:30:34-0800 000001475 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What is Proxy ARP and ARP Broadcast Filter? The Proxy ARP and ARP Broadcast Filter features enhance Layer 2 client isolation and reduce broadcast ARP/ICMPv6 messages on mesh and access WLANs. These services are available at the Access Point radios and ZoneDirector tunnel interfaces. Enabling these features makes it possible to disable broadcast forwarding, greatly reducing unnecessary network traffic, while still enabling IP network applications to function. • Proxy ARP: Can be enabled on a per-WLAN basis for non-tunneled WLANs, or globally for all tunneled WLANs. Proxy ARP reduces Address Resolution Protocol (and ICMPv6 Neighbor Discovery) flooding by allowing the AP to act as a proxy for the client in delivering ARP/ICMPv6 packets on behalf of the client. • ARP Broadcast Filter: Can be enabled on Mesh links to reduce ARP/ICMPv6 flooding on the Mesh link. ZD GUI > Configure > WLANs > Advanced options

Use case of Proxy ARP and ARP broadcast filter

2016-11-09T14:52:25-0800 2018-03-26T20:07:36-0700 https://support.ruckuswireless.com/articles/000006187 2018-03-15T15:24:17-0700 monthly 0.8 admin,premium knowledge_article_2514 knowledge_article_2514 2016-12-13T10:03:58-0800 000006187 Validated (External) Premium H500;Ruckus H500 Installation Installation, H500 Will coverage area of an H510 Wall Plate AP be the same if AP is mounted horizontally? The H-510 wall plate AP for hospitality has one vertical and one horizontal antenna to support dual-polarization beamflex, both antennas are dual-band and embedded on the PCB. The antenna system supports PD-MRC, Polarization Diversity Multi Ratio Combining. This permits the antenna to mix signals between both polarization to tune the the angle of the transmitters signal, but at the loss of performance by using antenna data multiplexing (antennas can either send the same signal on each to tune the direction and improve gain, or send different pieces of data on each to increase throughput, PD-MRC uses the same signal on each to improve coverage). This operation is automatic based on statistical analysis of antenna patterns and successful transmission rates which is part of the Ruckus/Brocade adaptive dynamic antenna array unique feature. The AP was designed to work vertically but should operate with only a little degradation when mounted horizontally. Remember that this AP was designed to cover one Hotel Room and is not optimized for distance, but may well cover multiple rooms depending on construction and placement.

The H510 AP was designed to work vertically but should operate with only a little degradation when mounted horizontally.

2018-03-15T15:24:17-0700 2018-03-15T18:00:07-0700 https://support.ruckuswireless.com/articles/000005372 2018-03-15T11:44:06-0700 monthly 0.8 admin,premium knowledge_article_2242 knowledge_article_2242 2015-12-22T09:03:17-0800 000005372 Validated (External) Premium T300;Ruckus T300 Installation;Known issues and workarounds Installation, Known Issues and Workarounds, T300 What is that hole for on the T300 outside cover? In that area outside the AP where screws connect the radom to the AP, there is a manufacturing alignment hole. It is outside the sealed part of the AP, and it is normal for water to collect there and evaporate or spill out. It does not affect the T300. (image attached)

The T300 outer cover has an odd hole on the outside cover that is used for alignment in manufacturing.

2018-03-15T11:44:06-0700 2018-03-15T12:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA2500000008iZECAY?attachment_index=0 2018-03-15T12:00:09-0700 monthly admin,premium knowledge_article_2242 knowledge_article_2242_attachment_1 T300-Cover.png 279591.0 image/png https://support.ruckuswireless.com/articles/000002495 2018-03-12T15:12:39-0700 monthly 0.8 admin,premium knowledge_article_781 knowledge_article_781 2014-02-18T13:49:44-0800 000002495 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What can prevent APs from staying connected to ZD? LWAPP Tunnel MTU appears to have been adjusted to 1500 when testing. CU reduced value, and all APs remain connected.

User upgraded ZD1100 from 9.6.1.0.15 to 9.7.0.0.220 and APs would not stay connected to ZD.

2018-03-12T15:12:39-0700 2018-03-12T18:00:16-0700 https://support.ruckuswireless.com/articles/000003308 2018-03-12T15:34:04-0700 monthly 0.8 admin,premium knowledge_article_1226 knowledge_article_1226 2014-08-18T21:19:08-0700 000003308 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to increase DHCP server scope on ZD to provide Ip for 500 clients? Change the subnet of ZD internal DHCP server to an IP which will allow morethan 500 Ipaddress. Make sure the ZD Ipaddress and Internal DHCP server starting IP are present on same subnet.

How to increase DHCP server scope on ZD to provide Ip up to 500 clients

2018-03-12T15:34:04-0700 2018-03-12T18:00:13-0700 https://support.ruckuswireless.com/articles/000002588 2018-03-12T10:02:58-0700 monthly 0.8 admin,premium knowledge_article_702 knowledge_article_702 2014-02-04T16:53:57-0800 000002588 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why is fail over not happening between the ZoneDirectors? -->We can enable limited ZD discovery under configure-->Access points-->access point policies -->Limited Zd discovery and give the primay ZD and secondary ZD IP address. -->Then this information will be pushed to all the access points, which we can verify by typing the command from AP ssh: get director --> Now we can see the ZD status as below: <div>rkscli: get director</div> <div>------ ZoneDirector Info ------</div> <div>Primary Controller : 192.168.15.70{primary Zd ipaddress}</div> <div>Secondary Controller : 192.168.15.75{secondary Zd ipaddress}</div> <div>DHCP Opt43 Code : 3</div> <div> </div> <div>The information of the most recent Zone Director:</div> <div> [1] 192.168.15.70</div> <div> [2] 192.168.15.75</div> -->This should help and the APs should be able to move between the primary and secondary ZDs when a failover occurs.

The APs are not moving to the secondary ZoneDirector when we do a fail over

2018-03-12T10:02:58-0700 2018-03-12T12:00:18-0700 https://support.ruckuswireless.com/articles/000006116 2018-03-12T11:10:12-0700 monthly 0.8 admin,premium knowledge_article_2436 knowledge_article_2436 2016-10-26T11:11:11-0700 000006116 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector Why does a ZD only show full-hour offsets for system time? ZoneDirector and Access Points keeps GMT (UTC) internal time. ZoneDirector WEB-UI inherits/translates GUI display time including event logs to match browser/PC time. External Syslog will show logs in GMT format. (please see Knowledge Article: <a href="https://support.ruckuswireless.com/answers/000003382" target="_blank" title="https://support.ruckuswireless.com/answers/000003382">https://support.ruckuswireless.com/answers/000003382 </a> Time zone setting is only for managing Time based WLAN's (configure::WLAN::advanced::Service Schedule) <img alt="" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyTf&feoid=00N50000002Cf3M&refid=0EM50000000Z847"></img> New Brunswick time (-3.30) is not presently an option and would require a Feature Request to add to next version.. <img alt="User-added image" height="423" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyTf&feoid=00N50000002Cf3M&refid=0EM50000000Z842" width="500"></img>

New Brunswick CA time zone (-3:30) not an option in Configure::System in ZoneDirector

2018-03-12T11:10:12-0700 2018-03-12T12:00:14-0700 https://support.ruckuswireless.com/articles/000003617 2018-03-12T11:54:25-0700 monthly 0.8 admin,premium knowledge_article_1373 knowledge_article_1373 2014-11-07T02:38:18-0800 000003617 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Security Security, ZoneDirector Does Ruckus support SHA certificate on the ZD? Yes. We do support the certificates which use SHA algorithm on the ZoneDirector Refer to below: <img alt="User-added image" height="150" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNGU&feoid=00N50000002Cf3M&refid=0EM50000000LacQ" width="500"></img>

SHA certificate supportability on the ZD

2018-03-12T11:54:25-0700 2018-03-12T12:00:07-0700 https://support.ruckuswireless.com/articles/000003057 2018-03-09T15:31:17-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_1011 knowledge_article_1011 2014-05-18T22:17:51-0700 000003057 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector What data needs to be collected using Firebug in case of any issues with the ZD captive portal login page or the ZD guest login page? Make sure ZD is accessible and SSID is configured correctly. Also make sure portal page loads fine on some of the devices to narrow down problem to the page loading. After this is done: 1. Take a test device that is known to work. 2. Connect it to a known good network and load Firebug on it before going ahead with the test on a ZD network. Firebug is supported on Chrome and Firefox browsers. 3. Connect to the captive portal or the guest network and open the web browser for logging in. 4. After the login page loads, click on the Firebug add-on to launch it. 5. This will open up a separate inspection section at the bottom of that page. 6. Click on the "HTML" tab. While you are on it, click on the "Inspect" tab just above it. Hovering on the various sections on the web page will highlight related code in the bottom section. 7. Copy content under the "HTML" tab into a notepad and send it to Support. Also send relevant screenshots highlighting the problem.

One of the usages of Firebug is analysis of a web page loaded in a browser. This article explains what data needs to be collected in case of any rendering issues either with a ZD captive portal page or a guest page.

2018-03-09T15:31:17-0800 2018-03-09T18:00:08-0800 https://support.ruckuswireless.com/articles/000004159 2018-03-07T13:23:00-0800 monthly 0.8 admin,premium knowledge_article_1771 knowledge_article_1771 2015-04-23T07:35:38-0700 000004159 Validated (External) Premium Scg 200;Virtual smartcell gateway Configuration;System network management Configuration, System Network Management, SCG 200, virtual SmartCell Gateway How to configure MVNO account in SCG/vSCG-c? Follow these steps to create a new virtual network operator account. 1. On the MVNO page, click Create New. The Mobile Virtual Network Operator form appears. 2. In Mobile Virtual Network Operator Summary section: • Type a domain name to which this account will be assigned in the Domain Name box. • In Description, type a brief description about this domain name. 3. In Configure the AP zones to which the MVNO account that you are creating will have management privileges. Click Add AP Zone and select the created AP zone from the drop down list. • In AP Zone, select the AP zone to which the MVNO account will have management privileges. • Click Apply. The AP Zones of Mobile Virtual Network Operator section refreshes. The AP zone or zones that you selected appears in the section. 4. In Configure the WLAN Services, follow these steps to configure the WLAN services to which the MVNO account that you are creating will have management privileges. • In the WLAN Services section, click Add WLAN(s). • In SSID, select the WLAN to which the MVNO account will have management privileges. • Click Apply. The WLAN Services section refreshes. The WLAN service or services that you selected appears in the section. <img alt="User-added image" height="314" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyQv&feoid=00N50000002Cf3M&refid=0EM50000000LfwX" width="755"></img> 5. In Create the Super Administrator Account, follow these steps to create the MVNO account and define the logon details and management capabilities that will be assigned to the account. • Scroll down to the Super Administrator section. • In Account Name, type the name that this MVNO will use to log on to the controller. • In Real Name, type the actual name (for example, John Smith) of the MVNO. • In Password, type the password that this MVNO will use (in conjunction with the Account Name) to log on to the controller. • In Confirm Password, type the same password as above. • In Phone, type the phone number of this MVNO. • In Email, type the email address of this MVNO. • In Job Title, type the job title or position of this MVNO in his organization. • In the Assign Capabilities to Administrator Role tree (located on the right side of the form), select the administrator capabilities that you want to assign to this MVNO. If you plan to grant this MVNO most of the capabilities that are available, click Select All, and then clear the check boxes for the capabilities that you do not want this MVNO to have. Use the domain name as suffix to log-in as MVNO admin, as shown below <img alt="User-added image" height="201" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyQv&feoid=00N50000002Cf3M&refid=0EM50000000LfwS" width="500"></img> To create users for this MVNO account: Log-in as MVNO-ruckus account admin and Go to >> Identity >> Users >> Create New >> Create the users for this Site (One at a time)

Steps to create a new virtual network operator account.

2018-03-07T13:23:00-0800 2018-03-07T18:00:14-0800 https://support.ruckuswireless.com/articles/000004176 2018-03-07T13:30:13-0800 monthly 0.8 admin,premium knowledge_article_1647 knowledge_article_1647 2015-03-17T17:42:24-0700 000004176 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) System network management System Network Management, SmartCell Insight How to generate report for 300 APs in SCI? Yes we can generate report by customizing the report as indicated below <img alt="User-added image" height="278" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyR0&feoid=00N50000002Cf3M&refid=0EM50000000wy7J" width="500"></img>

How to generate report for 300 APs in SCI to see which users are connected.

2018-03-07T13:30:13-0800 2018-03-07T18:00:13-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PIKMCA4?attachment_index=0 2018-03-07T18:00:13-0800 monthly admin,premium knowledge_article_1647 knowledge_article_1647_attachment_1 customized SCI report.png 214454.0 image/png https://support.ruckuswireless.com/articles/000004270 2018-03-07T14:28:02-0800 monthly 0.8 admin,premium knowledge_article_1738 knowledge_article_1738 2015-04-01T09:31:08-0700 000004270 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, virtual SmartCell Gateway, SZ100 Why does my AP with RuckOs code not get server list when using DHCP Option 43? Create another DHCP Option43 entry using Ruckus Vendor Specific 0x03 option code. Once the AP converts to VSCG code, the 0x06 hex value will work from then on. 1. Configure the DHCP Option 43 using the 0x06 Ruckus Vendor Specific - option 43 hex 060e39382e3138392e3130322e313135 2. Deploy the AP with RuckOs 100.1.0.0.194 code using DHCP Option 43 <img alt="User-added image" height="341" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyRK&feoid=00N50000002Cf3M&refid=0EM50000000Lh6E" width="500"></img> ---------- Note: RuckOs is a ZD code. ----------

My AP server list is empty

2018-03-07T14:28:02-0800 2018-03-07T18:00:11-0800 https://support.ruckuswireless.com/articles/000006446 2018-03-07T15:03:39-0800 monthly 0.8 admin,premium knowledge_article_2669 knowledge_article_2669 2017-10-09T16:20:16-0700 000006446 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Security;Troubleshooting Security, Troubleshooting, virtual SmartCell Gateway, SZ100 Which port is used to monitor the vSZ/SZ using public API? Ruckus uses port 7443 to monitor the vSZ/SZ using public API until 3.5 release. Starting 3.5 release, port 8443 is used to query the SZ/vSZ via RESTful API. > Below is the connection error output when querying the SZ via RESTful API on port 7443 using curl commands. root:~# curl -v "https://10.20.1.2:7443/api/public" * About to connect() to 10.20.1.2 port 7443 (#0) * Trying 10.20.1.2... connected * Connected to 10.20.1.2 (10.20.1.2) port 7443 (#0) * successfully set certificate verify locations: * CAfile: none CApath: /etc/ssl/certs * SSLv3, TLS handshake, Client hello (1): * Unknown SSL protocol error in connection to 10.20.1.2:7443 * Closing connection #0 curl: (35) Unknown SSL protocol error in connection to 10.20.1.2:7443 root:~# > When using Postman app, 404 Not Found error occurs. <img alt="User-added image" height="322" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyRU&feoid=00N50000002Cf3M&refid=0EM50000000VGWB" width="500"></img> Below snippet shows the working output when using port 8443 from postman app. <img alt="User-added image" height="188" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyRU&feoid=00N50000002Cf3M&refid=0EM50000000VGWG" width="500"></img>

Port number issue

2018-03-07T15:03:39-0800 2018-03-07T18:00:08-0800 https://support.ruckuswireless.com/articles/000006586 2018-03-07T10:43:20-0800 monthly 0.8 admin,premium knowledge_article_2824 knowledge_article_2824 2017-12-12T16:04:03-0800 000006586 Validated (External) Premium Brocade network advisor;Brocade Network Advisor (BNA) System network management System Network Management, Brocade Network Advisor How to use Brocade Network Advisor (BNA) for configuration backup? From the Brocade Network Advisor main menu, select Configure > Configure File Manager > Product Configurations > Products; and then select the desired product and click Save Running Configuration.

Configuration Backup using BNA.

2018-03-07T10:43:20-0800 2018-03-07T12:00:26-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvqwCAC?attachment_index=0 2018-03-07T12:00:26-0800 monthly admin,premium knowledge_article_2824 knowledge_article_2824_attachment_1 ka25B000000CdFiQAK_Attachment__c.pdf 2328011.0 application/pdf https://support.ruckuswireless.com/articles/000006707 2018-03-07T10:45:32-0800 monthly 0.8 admin,premium knowledge_article_3037 knowledge_article_3037 2017-12-12T14:34:09-0800 000006707 Validated (External) Premium Brocade network advisor;Brocade Network Advisor (BNA) System network management System Network Management, Brocade Network Advisor What is Brocade Network Advisor - Technical How-To for Basic Element Management? YouTube video: <a href="https://www.youtube.com/watch?v=BRF9w1GlkRI" target="_blank">https://www.youtube.com/watch?v=BRF9w1GlkRI</a>

How to view the device properties and manage configurations including saving trusted configurations and comparing two configurations to identify any changes that could have contributed to a network event

2018-03-07T10:45:32-0800 2018-03-07T12:00:25-0800 https://support.ruckuswireless.com/articles/000006580 2018-03-07T10:46:53-0800 monthly 0.8 admin,premium knowledge_article_3046 knowledge_article_3046 2017-12-12T14:34:05-0800 000006580 Validated (External) Premium Brocade network advisor;Brocade Network Advisor (BNA) Configuration;System network management Configuration, System Network Management, Brocade Network Advisor How to use Brocade Network Advisor (BNA) for POE Management? <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div">PoE Management Using Brocade Network Advisor From the Brocade Network Advisor main menu, select Monitor > Power Center to view the PoE status of discovered devices. Attachments to this article include screenshots of the Monitor tab and the Power Center screen from Brocade Network Advisor. </div>

PoE Management Using Brocade Network Advisor.

2018-03-07T10:46:53-0800 2018-03-07T12:00:21-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvqqCAC?attachment_index=0 2018-03-07T12:00:21-0800 monthly admin,premium knowledge_article_3046 knowledge_article_3046_attachment_1 ka25B000000CdHFQA0_Attachment__c.pdf 2328008.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000TvqqCAC?attachment_index=1 2018-03-07T12:00:21-0800 monthly admin,premium knowledge_article_3046 knowledge_article_3046_attachment_1 ka25B000000CdHFQA0_Attachment2__c.png 55977.0 image/png http://support.ruckuswireless.com/article_attachments/kA250000000TvqqCAC?attachment_index=2 2018-03-07T12:00:21-0800 monthly admin,premium knowledge_article_3046 knowledge_article_3046_attachment_1 ka25B000000CdHFQA0_Attachment3__c.png 160392.0 image/png https://support.ruckuswireless.com/articles/000006675 2018-03-07T10:48:40-0800 monthly 0.8 admin,premium knowledge_article_3154 knowledge_article_3154 2017-12-12T14:11:52-0800 000006675 Validated (External) Premium Brocade network advisor;Brocade Network Advisor (BNA) Configuration;System network management Configuration, System Network Management, Brocade Network Advisor Does Brocade Network Advisor (BNA) detect loops in the topology? If you see a loop going back to the switch, hovering over the link will give additional info that will help in eliminating the loop. <img alt="User-added image" height="79" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyQ2&feoid=00N50000002Cf3M&refid=0EM50000000X702" width="500"></img> Also, verify that no entries have been made in the custom topology file that points to the same switch (Install_Home\conf\discovery\ip directory\topology_data.txt).

It is possible to see that loop in the topology display.

2018-03-07T10:48:40-0800 2018-03-07T12:00:20-0800 https://support.ruckuswireless.com/articles/000006576 2018-03-07T10:49:58-0800 monthly 0.8 admin,premium knowledge_article_3051 knowledge_article_3051 2017-12-12T14:34:03-0800 000006576 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Brocade network advisor;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches;Brocade Network Advisor (BNA) Configuration;System network management Configuration, System Network Management, ICX 7250, ICX 7450, ICX 7750, Brocade Network Advisor How does Brocade Network Advisor perform network element discovery and management? Discovery must detect the read-only credentials to proceed to the read-write credentials. If discovery does not detect any read-write credential, the device may still be discovered; however, all write operations through SNMP (such as configure device) do not execute properly. SNMPv2c is enabled on all devices in the K-12 network so that all devices can be managed from a single tool-Brocade Network Advisor.

BNA and Network Element Discovery and Management.

2018-03-07T10:49:58-0800 2018-03-07T12:00:17-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvqmCAC?attachment_index=0 2018-03-07T12:00:17-0800 monthly admin,premium knowledge_article_3051 knowledge_article_3051_attachment_1 ka25B000000CdH5QAK_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000006687 2018-03-07T10:51:34-0800 monthly 0.8 admin,premium knowledge_article_3040 knowledge_article_3040 2017-12-12T14:34:07-0800 000006687 Validated (External) Premium Brocade network advisor;Brocade Network Advisor (BNA) System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Brocade Network Advisor How to upgrade POE firmware on FastIron switches using BNA? <div>Follow the below steps : Launch the BNA client. 1. Add the CLI template. <img alt="User-added image" height="311" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyQC&feoid=00N50000002Cf3M&refid=0EM50000000X70q" width="500"></img> 2. In “Targets” tab, move the corresponding device to right hand side. 3. Add the CLI by defining necessary parameters and review under the parameters tab <img alt="User-added image" height="177" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyQC&feoid=00N50000002Cf3M&refid=0EM50000000X70v" width="500"></img> <img alt="User-added image" height="187" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyQC&feoid=00N50000002Cf3M&refid=0EM50000000X710" width="500"></img> 4. Make sure that the corresponding .fw file is copied under the “<BNA_HOME>\data\tftproot” folder <img alt="User-added image" height="160" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyQC&feoid=00N50000002Cf3M&refid=0EM50000000X715" width="500"></img> 5. Once deployed, Check the status under deployment status <img alt="User-added image" height="152" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyQC&feoid=00N50000002Cf3M&refid=0EM50000000X71A" width="500"></img> ---------- Note: Even though BNA shows the firmware download status as “failed”, the device was successfully upgraded. Fixed in Network Advisor 14.2.0 ---------- Final Status in BNA: Deploying Deploying CliConfigDevicePayload... Error in deploying CliConfigDevicePayload Finished CLI command failed : telnet@ICX7450-24P Switch#Flash Memory Write (8192 bytes per dot) ......... tftp download successful stackId = 1 file name = poe-fw Sending PoE Firmware to Stack Unit 1. , for command: inline power install-firmware stack-unit 1 tftp 10.24.51.44 icx74xx_poh_01.6.1.b009.fw Device Console Logs: ICX7450-24P Switch>PoE Warning: Upgrading firmware in slot 1....DO NOT HOTSWAP OR POWER DOWN T PoE Info: FW Download on slot 1...sending download command... PoE Info: FW Download on slot 1...TPE response received. PoE Info: FW Download on slot 1...sending erase command... PoE Info: FW Download on slot 1...erase command...accepted. PoE Info: FW Download on slot 1...erasing firmware memory... PoE Info: FW Download on slot 1...erasing firmware memory...completed PoE Info: FW Download on slot 1...sending program command... PoE Info: FW Download on slot 1...sending program command...accepted. PoE Info: FW Download on slot 1...programming firmware...takes around 5 minutes.... U1-MSG: PoE Info: Firmware Download on slot 1.....10 percent completed. U1-MSG: PoE Info: Firmware Download on slot 1.....20 percent completed. U1-MSG: PoE Info: Firmware Download on slot 1.....30 percent completed. U1-MSG: PoE Info: Firmware Download on slot 1.....40 percent completed. U1-MSG: PoE Info: Firmware Download on slot 1.....50 percent completed. U1-MSG: PoE Info: Firmware Download on slot 1.....60 percent completed. U1-MSG: PoE Info: Firmware Download on slot 1.....70 percent completed. U1-MSG: PoE Info: Firmware Download on slot 1.....80 percent completed. U1-MSG: PoE Info: Firmware Download on slot 1.....90 percent completed. U1-MSG: PoE Info: Firmware Download on slot 1.....100 percent completed. PoE Info: FW Download on slot 1...programming firmware...completed. PoE Info: FW Download on slot 1...upgrading firmware...completed. Module will be reset. PoE Info: Resetting in slot 1.... PoE Info: Resetting module in slot 1....completed. PoE Info: PoE module 1 of Unit 1 initialization is done. ICX7450-24P Switch>sh inline power detail Firmware Version ---------------- 01.2.1 Build 003</div>

How to upgrade POE firmware on FastIron switches using BNA?

2018-03-07T10:51:34-0800 2018-03-07T12:00:16-0800 https://support.ruckuswireless.com/articles/000006581 2018-03-07T10:54:27-0800 monthly 0.8 admin,premium knowledge_article_3044 knowledge_article_3044 2017-12-12T14:34:05-0800 000006581 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Brocade network advisor;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches;Brocade Network Advisor (BNA) System network management System Network Management, ICX 7250, ICX 7450, ICX 7750, Brocade Network Advisor How does Brocade Network Advisor work with traffic monitoring and sFlow? sFlow settings on switches can be configured from Brocade Network Advisor or from the switch CLI. In the K-12 network design, Brocade Network Advisor acts like an sFlow collector to receive samples from switches to analyze traffic trends. The K-12 Network Design Guide is attached to this article. Brocade Network Advisor provides traffic information such as Layer 2, Layer 3, and Layer 4 information and also the top list of who is consuming the most network bandwidth. The sampling rate and frequency play a key role, so care should be taken while configuring these parameters; otherwise the switch CPU is impacted.

sFlow helps analyze traffic trends on various configured links, and alerts can be set to inform the network administrator when threshold levels are reached.

2018-03-07T10:54:27-0800 2018-03-07T12:00:11-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvqrCAC?attachment_index=0 2018-03-07T12:00:11-0800 monthly admin,premium knowledge_article_3044 knowledge_article_3044_attachment_1 ka25B000000CdGqQAK_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000007068 2018-03-07T11:00:50-0800 monthly 0.8 admin,premium knowledge_article_2856 knowledge_article_2856 2017-12-12T15:44:59-0800 000007068 Validated (External) Premium Ruckus icx switches Configuration;Installation;System network management Configuration, Installation, System Network Management, Ruckus ICX Switches How to implement Brocade sFlow? Brocade was the first networking vendor to recognize the power of sFlow and has implemented it on a broad range of platforms from the latest ICX range of switches to the high-end MLXe terabit router to deliver packet sampling on a wide range of interfaces from 10Mbps to 100Gbps. In all cases the implementation is in hardware and on chassis based systems such as the MLXe sFlow is embedded in the line cards thus guaranteeing the performance and scalability of the solution. Configuration of the sFlow agent within a Brocade switch or router is effected via the CLI. sFlow configuration, collection and analysis functions have been integrated into Brocade Network Advisor (BNA) which allows it to be used to monitor the traffic on a real-time basis in order to quickly identifying the problems in the network. Fully flexible and customizable pre-canned reports are available which exploit the stored sFlow data and in addition to this users can create their own reports using a selection of templates. BNA can also export the collected data in a number of formats for analysis on external systems. For more details please refer to the section Collecting And Analyzing sFow Data below. sFlow Deployment: The sFlow capabilities embedded within every Brocade switch and router are ideally placed for continuous data collection across the network and negate the need for external probes. The result is a system that delivers a comprehensive and flexible solution which imposes minimal overhead on the network yet allows every connection to be monitored to deliver a highly accurate and detailed picture of network traffic and its profile. Enabling and configuring sFlow on Brocade Fastiron switches is a simple operation that is typically completed via the switch CLI. There are a small number of tasks that are mandatory plus some additional which are optional depending on the level of customization required. Mandatory Tasks 1. Specify collector information. Up to four collectors can be specified. To specify an sFlow collector on an lPv4 device with IP address <IP Address>, enter the following command. The standard port for sending sFlow datagrams is UDP port 6341 Brocade(config)# sflow destination <IP Address> To specify an lPv6 address for the sFlow collector, enter the following command: Brocade(config)# sflow destination ipv6 <IP Address> 2. Enable sFlow globally. To globally enable sFlow forwarding within a device, enter the following command: Brocade(config)# sflow enable 3. Enable sFlow forwarding on individual interfaces. To enable sFlow forwarding for specific interfaces, Ethernet ports ill thru 1/8, enter the following: Brocade(config)# interface ethernet 1/1 to 1/8 Brocade(config-mif-1 Il-1 /8)# sflow forwarding 4. Enable sFlow forwarding on individual trunk ports. To acd sFlow add sFiow forwarding on trunk port Ethernet 412. Campus Network Solution, Best Practice-sFlow Monitoring for Brocade Products Brocade(config)# trunk e 4/1 to 4/8 Brocade(config-trunk-4/1 -4/8)# conflg-trunk-ind Brocade(config-trunk-4/1 -418)# sflow forwarding e 4/2 ---------- Note 1: Although it is possible to implement sFlow on selected interfaces and trunk ports Brocade recommends enabling it globally as the benefits greatly outweigh the negligible system and network impact. ---------- Note 2: sFlow data must be exported from a Fastlron switch via a network port; it cannot be passed out of a switch via the management port, i.e., the sFlow connector cannot be connected to the management interface. ----------

sFlow Implementation/Deployment.

2018-03-07T11:00:50-0800 2018-03-07T12:00:10-0800 https://support.ruckuswireless.com/articles/000007429 2018-03-07T11:40:16-0800 monthly 0.8 admin,premium knowledge_article_2730 knowledge_article_2730 2017-12-12T16:13:34-0800 000007429 Validated (External) Premium Ruckus icx switches Installation Installation, Ruckus ICX Switches How to install PoE firmware with TFTP - Brocade Campus Network Switches? How to install PoE firmware with TFTP PoE firmware is stored in the PoE controller of the FastIron switch. A user can install PoE firmware from the TFTP server on a FastIron switch using CLI commands. To do so, the user must have a valid firmware image on the TFTP server. ---------- Note: The PoE firmware upgrade feature is not supported in FIPS mode on Brocade devices. ---------- Note: Install PoE firmware only on one switch at a time. To install PoE firmware on stacked units, install it individually on every switch in the stack. ---------- Note: The CLI syntax to install PoE firmware is different on FSX, FCX, and ICX platforms. ---------- Note: Installation of PoE firmware interrupts PoE services on the individual device or module as it is upgraded. PoE service restarts once PoE firmware installation is complete. ---------- Steps: 1. Place the PoE firmware on a TFTP server to which the Brocade device has access. 2. Copy the PoE firmware from the TFTP server into the switch as shown in the following examples. Be sure to use the correct file image for the platform. To install PoE firmware on FCX and ICX platforms, use the inline power install-firmware stackunit command as shown in the following example: device# inline power install-firmware stack-unit 1 tftp 10.120.54.161 fcx_poeplus_07400.fw Syntax: inline power install-firmware [stack-unit |unit-number] tftp ip-address filename To install PoE firmware on an FSX platform, use the inline power install-firmware command as shown in the example: device# inline power install-firmware module 1 tftp 10.120.54.161 fsx_poe_07400.fw Syntax: inline power install-firmware module slot tftp ip-address filename To install firmware on a stack, install firmware on one switch at a time with the inline power install-firmware stack-unit command. deviceFamily_Stack# inline power install-firmware stack-unit 3 tftp 10.20.65.51 icx64xx_poeplus_02.1.0.b004.fw 3. After the firmware is downloaded into the controller, the controller resets and reboots with the new PoE firmware. ---------- Note: If attempting to transfer a file using TFTP has resulted in an error message, refer to Firmware image file types on page 354 of the attached document. ---------- For more details, make sure to download and check the attached Fastiron-08030-adminguide.pdf (POE SECTION) Please also view this video from our BROCADE CAMPUS FEATURE EXPLAINER SERIES - ICX UPGRADE FIRMWARE: <a href="https://www.youtube.com/watch?v=7SpZq51v8GE&feature=youtu.be" target="_blank">https://www.youtube.com/watch?v=7SpZq51v8GE&feature=youtu.be</a> Or this video from our Brocade Community Boards: Firmware Upgrade From a TFTP Server: <a href="https://community.brocade.com/t5/Ethernet-Switches-Routers/Firmware-Upgrade-From-a-TFTP-Server/ta-p/87186" target="_blank">https://community.brocade.com/t5/Ethernet-Switches-Routers/Firmware-Upgrade-From-a-TFTP-Server/ta-p/87186</a>

Installing PoE firmware with TFTP - Brocade Campus Network Switches

2018-03-07T11:40:16-0800 2018-03-07T12:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4uCAC?attachment_index=0 2018-03-07T12:00:09-0800 monthly admin,premium knowledge_article_2730 knowledge_article_2730_attachment_1 ka25B000000CcGNQA0_Attachment__c.pdf 2470398.0 application/pdf https://support.ruckuswireless.com/articles/000006290 2018-03-07T11:45:46-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_2586 knowledge_article_2586 2017-03-03T16:16:08-0800 000006290 Validated (External) Public Ruckus cloud;RUCKUS Cloud;Ruckus Cloud Mobile Apps Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud Why is my browser not displaying cloud after logging in to cloud account? The issue is that if the resolution of the browser is minimized during the login process of Cloud account, the browser omits configuration information or might not display the cloud account GUI information after successfully logging in. This has to do with CSS formatting size. If the display looks as below - Maximize the browser by hitting the middle (maximize) button = <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyQW&feoid=00N50000002Cf3M&refid=0EM50000000gdn5"></img> <img alt="User-added image" height="355" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyQW&feoid=00N50000002Cf3M&refid=0EM50000000gdmd" width="500"></img>

Resolution of the browser is minimized during the login process of Cloud account

2018-03-07T11:45:46-0800 2018-03-07T12:00:08-0800 https://support.ruckuswireless.com/articles/000004721 2018-03-06T12:06:16-0800 monthly 0.8 admin,premium knowledge_article_2329 knowledge_article_2329 2015-06-16T22:49:39-0700 000004721 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Troubleshooting Troubleshooting, SmartCell Insight How do I resolve a Analytic DB that is marked down? Instructions can be found in the SCI Users Guide: <a href="https://support.ruckuswireless.com/documents/834-smartcell-insight-version-1-4-user-guide" target="_blank">https://support.ruckuswireless.com/documents/834-smartcell-insight-version-1-4-user-guide</a>

SCI Vertica database recovery procedure

2018-03-06T12:06:16-0800 2018-03-06T18:00:16-0800 https://support.ruckuswireless.com/articles/000003059 2018-03-06T13:59:17-0800 monthly 0.8 admin,premium knowledge_article_1031 knowledge_article_1031 2014-05-27T07:14:29-0700 000003059 Validated (External) Premium Flexmaster;FlexMaster Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, FlexMaster Why am I getting "file is too big" error when I try to upgrade FM? Currently FM upgrade is only supported via CLI. See KB article 1381 > How to upgrade FM using a patch file

Trying to upgrade FlexMaster via GUI

2018-03-06T13:59:17-0800 2018-03-06T18:00:10-0800 https://support.ruckuswireless.com/articles/000006692 2018-03-06T14:13:24-0800 monthly 0.8 admin,premium knowledge_article_2876 knowledge_article_2876 2017-12-12T15:44:53-0800 000006692 Validated (External) Premium Brocade network advisor;Brocade eos products;Brocade Network Advisor (BNA) System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Brocade Network Advisor, Brocade EOS Products Why is there incorrect timezone in BNA logs? There was a fix on Microsoft for time zone " RTZ 3 Izhevsk -Samara" in Server 2012 and 2008. These were new time Zones created in Russia recently and Microsoft has addressed it in new fixes. We will need to update the Operating Systems. Please see forums: https://social.technet.microsoft.com/Forums/ru-RU/a7a43d4a-3755-40ac-9a4e-d50118d2e2f0/-owa-exchange-2010?forum=exchange2010ru https://support.microsoft.com/en-us/kb/931667 BNA only takes time zone from the computer operating systems. Also we need to restart BNA after the changes have been made to the Server clock, after the fix is applied. User needs to fix Operating Systems to add time zone " RTZ 3 Izhevsk -Samara" or other new time zones that did not show up earlier on the Computer's operating System. Reboot the physical server, not just a Virtual machine.

Incorrect timezone in BNA logs

2018-03-06T14:13:24-0800 2018-03-06T18:00:09-0800 https://support.ruckuswireless.com/articles/000006684 2018-03-06T14:12:29-0800 monthly 0.8 admin,premium knowledge_article_3153 knowledge_article_3153 2017-12-12T14:11:52-0800 000006684 Validated (External) Premium Brocade network advisor;Brocade eos products;Brocade Network Advisor (BNA) System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Brocade Network Advisor, Brocade EOS Products How to upgrade to BNA 14.1? Upgrading from 14.00 to 14.10 requires going to 14.01 or 14.02 first.

Every time the software started migrating the data from older code, it would fail.

2018-03-06T14:12:29-0800 2018-03-06T18:00:08-0800 https://support.ruckuswireless.com/articles/000006674 2018-03-06T14:16:14-0800 monthly 0.8 admin,premium knowledge_article_2979 knowledge_article_2979 2017-12-12T14:35:51-0800 000006674 Validated (External) Premium Brocade network advisor;Brocade eos products;Brocade Network Advisor (BNA) Configuration;System network management Configuration, System Network Management, Brocade Network Advisor, Brocade EOS Products Can I upgrade the version of Java used by BNA? If an administrator wishes to use a new release of Java for their BNA implementation to overcome recent reported java vulnerabilities, the following workaround can be used. When using BNA in client mode - this takes advantage of the version of java which is locally installed with the operating system. However on the BNA server itself, using the native GUI - it will only use the version of java which is included as part of the installed software. The way to overcome this is to launch the BNA GUI via a browser window whilst logged into the BNA server itself. In this case the BNA server becomes a client of itself. To do this, open a browser (whilst logged into the BNA server) and include either the local ip address or hostname in the browser and it will give the user the choice of launching the BNA client from this portal. This will download (locally) the necessary jnlp file and allow the launch of the BNA client which will use the system configured (via the java console) version of java rather than the version dictated by the native BNA GUI.

As Java often has many updates the version bundled with BNA can appear to become out of date very quickly.

2018-03-06T14:16:14-0800 2018-03-06T18:00:07-0800 https://support.ruckuswireless.com/articles/000006695 2018-03-06T14:17:51-0800 monthly 0.8 admin,premium knowledge_article_2803 knowledge_article_2803 2017-12-12T16:04:11-0800 000006695 Validated (External) Premium Brocade network advisor;Brocade eos products;Brocade Network Advisor (BNA) System network management System Network Management, Brocade Network Advisor, Brocade EOS Products Brocade Network Advisor - Technical How-To - Using the BNA Dashboard YouTube video: <a href="https://www.youtube.com/watch?v=9w2dbMYkWss" target="_blank">https://www.youtube.com/watch?v=9w2dbMYkWss</a>

Brocade Network Advisor - Technical How-To - Using the BNA Dashboard

2018-03-06T14:17:51-0800 2018-03-06T18:00:06-0800 https://support.ruckuswireless.com/articles/000007359 2018-03-06T10:38:11-0800 monthly 0.8 admin,premium knowledge_article_2763 knowledge_article_2763 2017-12-12T16:13:21-0800 000007359 Validated (External) Premium Icx 7250;Icx 7450;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches System network management System Network Management, ICX 7250, ICX 7450 Why do ICX7450 and ICX7250 show interface management 1 counter not increasing properly? Look for updates in DEFECT000550561 and Release Notes.

Steps to reproduce.

2018-03-06T10:38:11-0800 2018-03-06T12:00:15-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw3bCAC?attachment_index=0 2018-03-06T12:00:15-0800 monthly admin,premium knowledge_article_2763 knowledge_article_2763_attachment_1 ka25B000000Cd3DQAS_Attachment__c.docx 19882.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000005528 2018-03-06T10:29:16-0800 monthly 0.8 admin,premium knowledge_article_2285 knowledge_article_2285 2016-02-23T16:06:20-0800 000005528 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How many vlan pools can be configured on ZD? - 64 Vlan pools are allowed to configure per ZD - Each pool can contain up to 16 VLANs - A pool can be mapped to multiple SSIDs - A SSID can be mapped to only one pool

Maximum number of Vlan pools on Zone director

2018-03-06T10:29:16-0800 2018-03-06T12:00:13-0800 https://support.ruckuswireless.com/articles/000003115 2018-03-05T14:26:46-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_1124 knowledge_article_1124 2014-06-10T13:48:32-0700 000003115 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;Known issues and workarounds Configuration, Security, Known Issues and Workarounds, ZoneDirector How to block Information from the ZoneDirector being transmitted back to Ruckus? How to block Information from the ZoneDirector being transmitted back to Ruckus. This feature was introduced in ZoneFlex software version 9.8. The easiest way to do this is to create a static route that sends the reporting request to a "false" gateway. From a command prompt on a PC ping supportactivation.ruckuswireless.com and gather the IP address. Then in Configure >System create a static route that goes to a "false" gateway. The "false" gateway must be an address that is in the same subnet as the ZD <img alt="Configure bad route" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyMe&feoid=00N50000002Cf3M&refid=0EM50000000LVM8"></img> When completed, it will look like this. <img alt="configured" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyMe&feoid=00N50000002Cf3M&refid=0EM50000000LVMD"></img> One thing to note is that the User will not be able to do the automatic Support Service entitlement update with this route in place. The User will have to navigate to the Ruckus Support Website (<a href="https://support.ruckuswireless.com/entitlement_file" target="_blank">https://support.ruckuswireless.com/entitlement_file</a>) to download the entitlement file which can then be manually uploaded to the ZD. When the static route has been successfully configured, the User will be presented with a "Network error" message on the ZD. This indicates that the ZD is not able to connect and provide information to Ruckus. <img alt="User-added image" height="194" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyMe&feoid=00N50000002Cf3M&refid=0EM50000000LVMX" width="500"></img>

How to disable the automatic reporting of information back to Ruckus

2018-03-05T14:26:46-0800 2018-03-05T18:00:15-0800 https://support.ruckuswireless.com/articles/000006343 2018-03-05T14:44:28-0800 monthly 0.8 admin,premium knowledge_article_2606 knowledge_article_2606 2017-04-17T01:36:21-0700 000006343 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway What are the reasons for user Accounting Termination in Radius accounting packets? The termination causes are: User Request - User requested termination of service, for example with LCP Terminate or by logging out. Lost Carrier - DCD was dropped on the port. Lost Service - Service can no longer be provided; for example, user’s connection to a host was interrupted. Idle Timeout - Idle timer expired. Session Timeout - Maximum session length timer expired. Admin Reset - Administrator reset the port or session. Admin Reboot - Administrator is ending service on the NAS, for example prior to rebooting the NAS. Port Error NAS detected an error on the port which required ending the session. NAS Error - NAS detected some error (other than on the port) which required ending the session. NAS Request - NAS ended session for a non-error reason not otherwise listed here. NAS Reboot - The NAS ended the session in order to reboot non-administratively ("crash"). Port Unneeded - NAS ended session because resource usage fell below low-water mark (for example, if a bandwidth-on-demand algorithm decided that the port was no longer needed). Port Preempted - NAS ended session in order to allocate the port to a higher priority use. Port Suspended - NAS ended session to suspend a virtual session. Service Unavailable - NAS was unable to provide requested service. Callback - NAS is terminating current session in order to perform callback for a new session. User Error - Input from user is in error, causing termination of session. Host Request - Login Host terminated session normally.

Reasons for user Accounting Termination in Radius accounting packets

2018-03-05T14:44:28-0800 2018-03-05T18:00:12-0800 https://support.ruckuswireless.com/articles/000006298 2018-03-05T14:52:51-0800 monthly 0.8 admin,premium knowledge_article_2591 knowledge_article_2591 2017-03-10T14:31:53-0800 000006298 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Performance;System network management;Troubleshooting Performance, System Network Management, Troubleshooting, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway, SZ100 How can I see the recieved signal strength for clients connected to my SCG/SZ? The Radio chips used in Ruckus AP's do not report the actual signal strength of received client traffic, but report a number called RSSI. This is a pseudo value based on comparing the received signal strength over the noise floor and is most synonymous with SNR (given in pure dB since it is a ratio). The latest snap shot of this value can be found in the SCG/SZ WEB-UI under Montitor::Clients - click on the client MAC for details: <img alt="User-added image" height="125" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyMy&feoid=00N50000002Cf3M&refid=0EM50000000gmFn" style="width: 779px; height: 314px;" width="500"></img> To get more details on client RSSI - download the AP support info file for that AP: <img alt="User-added image" height="136" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyMy&feoid=00N50000002Cf3M&refid=0EM50000000gmFs" style="width: 553px; height: 262px;" width="348"></img> Search for the client (STA) MAC address: Under the Association table for each WLAN//SSID you will see the combined RSSI for that client (it may differ from above based on timing): -- wlan33 -- ADDR AID VLAN CHAN RSSI IDLE CAPS STATE HTCAPS/VHTCAPS ADMITTEDBW f4:5c:89:c2:af:9f 1Y 1 48 52 0 ESS PRIV QOS HT VHT PMF LDPC 40MHz SGI20 SGI40 TXSTBC RXSTBC MAXMSDU /80MHz SGI80 TXSTBC RXSTBC 0 RSN AES AES PSK WME This information can be downloaded directly from the AP using the AP CLI command - get station wlan33 list all More details can be found in the per client (STA) stats just under this (AP CLI - get station wlan33 stats all), including the data rate the AP is transmitting to the client when the support info was taken STA: f4:5c:89:c2:af:9f rx_data_frm 73644 rx_mgt_frm 3 rx_ucast_frm 73461 rx_mcast_frm 185 rx_bytes 12358334 tx_data_frm 132927 tx_mgmt_frm 5 tx_bytes 150072029 tx_assoc 1 tx_auth 1 good_tx_frms 132934 good_rx_frms 73649 tx_rate 866700 tx_kbps 241520 rx_rssi 56 Since these are MIMO radios (multiple radio chains) you can see the per radio chain details under: ### Node Stats Radio 1 ### (per radio, Radio 0 is 2.4 GHz) IDX AID MACADDRESS RSSC RSS0 RSS1 RSS2 RSS3 ASSC ASS0 ASS1 ASS2 ASS3 16 1 f4:5c:89:c2:af:9f 55 48 46 52 49 54 47 46 49 50 This shows the RSSI per radio chain (0, 1, 2, 3) - combined RSSC (the effects of MRC combining) for both unicast packets (RSSC-RSS3) and ack packets (ASSC - ASS3). Ack packets are sent at the multicast/basic rate which is often sent at a higher power then higher modulation schemes. SNR determines the modulation rate that can be used, higher modulation (QAM 128) requires a stronger SNR/RSSI. As a rule of thumb - RSS > 25dB should achieve the higher data rates (data rate drops when packets are not acknowledged) OR The SCI will actually report a Signal Strength in dBm (not a ratio so "m" signifies signal above 1mW). This is calculated by subtracting the noise floor from the RSSI. Noise floor is a setting above which the AP will try to capture signals. It will dynamically change any time the AP is unable to send out 3 beacon packets due to not hearing a clear channel. This is seen in the AP support logs as "stuck beacon" messages. You can see the noise floor setting in the support log under the ### Athstats Radio 1 ### section (one per radio, I am using 5GHz, Radio1 (wifi1) vs 2.4 GHz Radio 0 (wifi0): This is noise floor per radio chain, with the extended channel for 40MHz bonded channels: NF Ch0 -109[-108], ext -109[-108] NF Ch1 -108[-108], ext -108[-108] NF Ch2 -108[-108], ext -108[-108] NF Ch3 -109[-108], ext -109[-108] ---------- Note: The reported SNR in the GUI is a combined value. The actual transmitted power (EIRP) may be higher due to antenna gains. Ruckus automatically sets the transmit power based on Antenna gains, Data Rate and regulatory settings. We do not actually report the transmit power to users but only report the settings. ----------

Determining signal strength for clients connected to SCG/SZ

2018-03-05T14:52:51-0800 2018-03-05T18:00:10-0800 https://support.ruckuswireless.com/articles/000003046 2018-03-05T10:57:50-0800 monthly 0.8 admin,premium knowledge_article_2334 knowledge_article_2334 2014-05-14T18:14:31-0700 000003046 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Installation Installation, ZoneFlex Indoor, ZoneFlex Outdoor Is WiFi RF a hazard to humans, especially people with a pacemaker? Typically located WiFi access points do not generate RF dangerous to humans beyond recommended 6+ inch distance.

Ruckus Wireless products are independently tested for compliance with National Health and Safety Standards and guidelines for human exposure to RF and electromagnetic fields.

2018-03-05T10:57:50-0800 2018-03-05T12:00:19-0800 https://support.ruckuswireless.com/articles/000003214 2018-03-05T11:06:39-0800 monthly 0.8 admin,premium knowledge_article_1183 knowledge_article_1183 2014-07-16T01:31:36-0700 000003214 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Why is Zone director not accessible with HTTP request? Tried to access the new ZD IP with HTTPS request, Web gui access is working fine.

When new ZD Ip is entered in browser, it will be redirected to HTTPS page with old Ip.

2018-03-05T11:06:39-0800 2018-03-05T12:00:14-0800 https://support.ruckuswireless.com/articles/000001581 2018-03-05T11:28:59-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_205 knowledge_article_205 2013-02-05T13:34:57-0800 000001581 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why is ZoneDirector not reporting rogue devices? If the Troubleshooting steps do not resolve the issue, provide the results to the Technical Support team.

Check the configuration settings on the Zone Director

2018-03-05T11:28:59-0800 2018-03-05T12:00:12-0800 https://support.ruckuswireless.com/articles/000003183 2018-03-05T11:31:53-0800 monthly 0.8 admin,premium knowledge_article_1156 knowledge_article_1156 2014-06-26T10:43:13-0700 000003183 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to shutdown ZD from CLI mode ? Login to ZD CLI mode using Putty application: Welcome to the Ruckus Wireless ZoneDirector 1100 Command Line Interface ruckus> en ruckus# shutdown ZoneDirector is shutting down... ruckus# To power on ZoneDirector again, press the power button. ---------- Note: This feature is available from 9.8 firmware and above only. ----------

A CLI command to shutdown the ZD.

2018-03-05T11:31:53-0800 2018-03-05T12:00:11-0800 https://support.ruckuswireless.com/articles/000005570 2018-02-28T11:56:39-0800 monthly 0.8 admin,premium knowledge_article_3284 knowledge_article_3284 2016-03-21T10:29:45-0700 000005570 Validated (External) Premium R710;Ruckus R710 Performance;Configuration;Installation;Troubleshooting;Known issues and workarounds Performance, Configuration, Installation, Troubleshooting, Known Issues and Workarounds, R710 Why does R710 come up as 802.3af on an 802.3AT switch? Find this information in the attached Guide: 1. Packet Capture using Wireshark 2. R710 AP troubleshooting

Troubleshooting guide to identify why r710 is coming up as 802.3af when connected to 802.3at

2018-02-28T11:56:39-0800 2018-02-28T12:00:12-0800 http://support.ruckuswireless.com/article_attachments/kA2500000008iqUCAQ?attachment_index=0 2018-02-28T12:00:12-0800 monthly admin,premium knowledge_article_3284 knowledge_article_3284_attachment_1 R710PoE-LLDP_Troubleshooting_v1.docx 1197429.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000003043 2018-02-27T14:11:50-0800 monthly 0.8 admin,premium knowledge_article_1004 knowledge_article_1004 2014-05-14T09:03:14-0700 000003043 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to configure AP gateway address from the ZD CLI command line? To configure the AP gateway address by logging to ZD CLI, use the below CLI command : <div>ruckus> en</div> <div>ruckus# debug</div> <div>ruckus(debug)# remote_ap_cli -a <AP Mac > set ipaddr wan <IP address> <Subnet Mask> <Gateway Ip address></div> <div> </div> <div>Example:</div> <div> </div> <div>ruckus(debug)# remote_ap_cli -a c0:8a:de:38:0c:70 set ipaddr wan 192.168.20.228 255.255.255.0 192.168.20.1</div>

Configure AP gateway address from ZD CLI

2018-02-27T14:11:50-0800 2018-02-27T18:00:20-0800 https://support.ruckuswireless.com/articles/000003919 2018-02-27T14:26:29-0800 monthly 0.8 admin,premium knowledge_article_1722 knowledge_article_1722 2015-01-13T10:39:42-0800 000003919 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SmartCell Insight How to add additional vSCG nodes in SCI that are in the same cluster? When vSCG's are in cluster mode, SCI does not detect and populate automatically all existing nodes within the same vSCG cluster. <img alt="User-added image" height="259" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyHt&feoid=00N50000002Cf3M&refid=0EM50000000Ld8p" width="500"></img> <img alt="User-added image" height="259" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyHt&feoid=00N50000002Cf3M&refid=0EM50000000Ld8u" width="500"></img> VSCG node has to be added manually by modifying the SCI SCG source-system properties. <img alt="User-added image" height="330" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyHt&feoid=00N50000002Cf3M&refid=0EM50000000Ld94" width="500"></img>

SCI: How to add additional vSCG nodes in SCI that are in the same cluster?

2018-02-27T14:26:29-0800 2018-02-27T18:00:17-0800 https://support.ruckuswireless.com/articles/000004503 2018-02-27T14:41:07-0800 monthly 0.8 admin,premium knowledge_article_2530 knowledge_article_2530 2015-05-22T14:57:32-0700 000004503 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector Can we change HTTPS port number for remote management when ZD is behind NAT/FW device? There is no option to customize the HTTPS port from 443 on ZoneDirector.

HTTPS port number cannot be changed on ZoneDirector

2018-02-27T14:41:07-0800 2018-02-27T18:00:15-0800 https://support.ruckuswireless.com/articles/000002513 2018-02-27T14:59:12-0800 monthly 0.8 admin,premium knowledge_article_737 knowledge_article_737 2014-01-17T09:12:22-0800 000002513 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to add a new AP to a ZD/APs that use a tagged VLAN for management? Configure the factory defaulted/new AP with WAN ipaddr/netmask/gateway, but not the final VLAN (use VLAN 1), then attach the AP with ZD subnet matching IP address to a switch port that is "untagged-in, PVID=ZD-VLAN-ID into network". AP will be able to reach ZD, ZD will provision AP with AP Policy, setting its Management VLAN to same as ZD Access VLAN ID. Then move AP to switch port with "tagged-ZD-VLAN-ID in, PVID=ZD-VLAN-ID into network". Where the VLAN-ID is the the ZD's Configure/System ACCESS VLAN, and Configure/Access Points, Access Point Policies, Management VLAN.

These steps will help add a new AP to a ZD/AP that have defined access VLAN and AP Policy management VLAN set (other than untagged VLAN 1)

2018-02-27T14:59:12-0800 2018-02-27T18:00:11-0800 https://support.ruckuswireless.com/articles/000005878 2018-02-26T12:40:08-0800 monthly 0.8 admin,premium knowledge_article_3290 knowledge_article_3290 2016-07-11T14:08:19-0700 000005878 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Performance;Configuration;Known issues and workarounds Performance, Configuration, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway, SZ100 What is the difference between a WLAN Session Timeout and Grace Period? What is the TRUE definition of Session Timeout under Hotspot (WISPr) configuration with vSZ-H? Can this be disabled? Need to identify what does it really do to the client session. As per documentation, below is the definition. <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000520s&feoid=00N50000002Cf3M&refid=0EM500000001asr"></img> Session Timeout: Set a time limit (in minutes) after which users will be disconnected from the hotspot portal and will be required to log on again. Grace Period: Set the time period (in minutes) during which disconnected users are allowed access to the hotspot portal without having to log on again. Definition Session timeout is how long the client can access the Internet via Hotspot WLAN after login, and cannot be disabled. When client logins via Hotspot, AP gets the session start time from SCG and counts session expiration time. AP will disconnect client and client will be required to login again if session timeout period is reached. For Example: Client logins to Hotspot at 9AM. Session timeout is 35 minutes. They will be disconnected at 9:35AM. The client needs to login again after it reconnects to AP. Grace Period information: If client disconnects from AP at 9:10AM and reconnects to WLAN after 9:11AM, they need to login again. They do not need to login again if they reconnect to AP before the end of the (1 minute) Grace Period, or by 9:11AM.

WLAN session timeout and grace period, and their effect on Client authentication.

2018-02-26T12:40:08-0800 2018-02-26T18:00:18-0800 https://support.ruckuswireless.com/articles/000001898 2018-02-26T13:35:19-0800 monthly 0.8 admin,premium knowledge_article_3288 knowledge_article_3288 2015-02-23T09:28:59-0800 000001898 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Troubleshooting Performance, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor What is the meaning of log message "ar5416GetNf: Failed to read CCA reg" ? The below logs indicates that the network is busy for some time and unable to read the clear channel assessment (CCA) register. If there is more interference in the network then we see the below logs. Mar 19 08:25:12 AG-AP01 kern.info kernel: >>>>>> ar5416GetNf: Failed to read CCA reg Mar 19 08:26:12 AG-AP01 kern.info kernel: >>>>>> ar5416GetNf: Failed to read CCA reg Clear Channel Assessment (CCA) is one of two carrier sense mechanisms in WLAN (or WiFi). It is defined in the IEEE 802.11-2007 standards as part of the Physical Medium Dependant (PMD) and Physical Layer Convergence Protocol (PLCP) layer. CCA involves two related functions - CCA-CS and CCA-ED. Carrier Sense (CCA-CS): Ability of the receiver to detect and decode a WiFi preamble. From the PLCP header field, the time duration (in us) for which the medium will be occupied can be inferred and when such WiFi preamble is detected the CCA flag is held busy until the end of data transmission. Energy Detect (CCA-ED): Ability of the receiver to detect non-WiFi energy in the operating channel and back off data transmission. The ED threshold is typically defined to be 20dB above the minimum Rx sensitivity of the PHY. If the in-band signal energy crosses this threshold, CCA is held busy until the medium energy is below the threshold. The resolution for this issue is to eradicate the interference.

Failed to read CCA reg messages usually indicate intermittent high levels of interference on the AP radio channel.

2018-02-26T13:35:19-0800 2018-02-26T18:00:16-0800 https://support.ruckuswireless.com/articles/000005847 2018-02-26T13:55:22-0800 monthly 0.8 admin,premium knowledge_article_3287 knowledge_article_3287 2016-06-17T15:07:26-0700 000005847 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Security;Known issues and workarounds Firmware, Security, Known Issues and Workarounds, ZoneDirector Can I upgrade TLS 1.0 RC4 in ZD 9.6.1.0.15 for Chrome? Q: Is it possible to configure ZD software version 9.6.1.0 build 15 software to use a later version of TLS, with a more secure cipher suite; or enable improved ciphers under TLS 1.0; or should we upgrade to a later version of ZD code to enable modern, secure encryption which is compatible with updated web browsers? A: Engineering will not address version 9.6 firmware issues, but ZD 9.10 - 9.12 encorporates TLS 1.2 and AES 128 bit GCM + RSA exchange in HTTPS.

Since Chrome and FireFox dropped support for TLS 1.0 / RC4 cipher, customers need to upgrade to ZD 9.10+ for TLS 1.2 support.

2018-02-26T13:55:22-0800 2018-02-26T18:00:15-0800 https://support.ruckuswireless.com/articles/000001820 2018-02-26T14:11:11-0800 monthly 0.8 admin,premium knowledge_article_3286 knowledge_article_3286 2013-03-19T11:27:08-0700 000001820 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;System network management Configuration, Security, System Network Management, ZoneDirector Can HTTP be used to access ZD instead of HTTPS? We cannot change the access of the ZD GUI from Port 443(https) to Port 80 (http) as we support only HTTPS access and SSH access. The reason for this is due to the fact that the ZD has a SSL certificate installed on it and this only allows HTTPS. This default certificate cannot be deleted from the ZD.

Using HTTP to access ZD

2018-02-26T14:11:11-0800 2018-02-26T18:00:14-0800 https://support.ruckuswireless.com/articles/000003802 2018-02-26T14:14:01-0800 monthly 0.8 admin,premium knowledge_article_3285 knowledge_article_3285 2014-12-17T16:54:12-0800 000003802 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why are we unable to access the Zone Director managed APs web GUI/SSH access using ZD user account credentials? We will get Zone Director managed APs Webgui/SSH access only by using ZD admin account credentials

Unable to access the Zone Director managed APs web GUI/SSH access using ZD user account credentials

2018-02-26T14:14:01-0800 2018-02-26T18:00:13-0800 https://support.ruckuswireless.com/articles/000006459 2018-02-26T11:30:00-0800 monthly 0.8 admin,premium knowledge_article_3280 knowledge_article_3280 2017-09-28T03:26:13-0700 000006459 Validated (External) Premium Unleashed;Zonedirector;Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Troubleshooting;Known issues and workarounds Performance, Configuration, Troubleshooting, Known Issues and Workarounds, Unleashed, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway Why do iOS 11 devices not connect to wifi? User allowed captive.apple.com to proxy exceptions and added it on proxy.pac file

Apple devices after upgrading iOS to 11/11.0.1 can get valid IP addresses but drop off from wifi immediately

2018-02-26T11:30:00-0800 2018-02-26T12:00:10-0800 https://support.ruckuswireless.com/articles/000006282 2018-02-22T10:37:06-0800 monthly 0.8 admin,premium knowledge_article_3277 knowledge_article_3277 2017-03-10T13:45:05-0800 000006282 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware;Security;Troubleshooting Configuration, Firmware, Security, Troubleshooting, Unleashed What is Gateway Mode AP support in Unleashed? - Unleashed 200.3, introduces new AP mode called “Gateway mode”. When an Unleashed AP is deployed in Gateway Mode it must be the Master AP, and can act as DHCP Server to provide IP addresses to both wired and wireless clients. It will do NAT for the traffic that traverses from LAN o WAN and vice versa, with L3/L4 based firewall function to allow/deny certain traffic. Address Port Forwarding s coming in 200.4 features. - Gateway Mode AP has to be deployed inline, in other words, all the LAN traffic must traverse through the gateway AP. So, in general, the Gateway Mode AP must have two cables connected – one facing the WAN router/modem, and the other facing the LAN switch (as displayed in the below diagram). ---------- Note: One exception to this topology is Unleashed R310 AP. Since Unleashed R310 has only one Ethernet port it will be connected directly to the WAN router/modem only and can provide DHCP/NAT only to WLAN clients. ---------- - The gateway AP is also the Master AP for the Unleashed network. If Master fails then it will have to be manually replaced by another AP, cables will have to be connected appropriately, and configuration will have to be restored manually. <img alt="Gateway mode in Unleashed" height="325" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TyFT&feoid=00N50000002Cf3M&refid=0EM50000000gNuy" width="500"></img> ---------- Note: It is highly recommended to use 802.11 AC Wave 2 APs (R710, R510 or T710 series) for Gateway Mode AP function. ----------

What is Unleashed Gateway Mode AP introduced in 200.3 release?

2018-02-22T10:37:06-0800 2018-02-22T12:00:09-0800 https://support.ruckuswireless.com/articles/000002264 2018-02-13T11:01:32-0800 monthly 0.8 admin,premium knowledge_article_825 knowledge_article_825 2013-09-26T15:12:16-0700 000002264 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;System network management;Troubleshooting Performance, Configuration, System Network Management, Troubleshooting, ZoneDirector Do we have any recommendations for Cisco 7925G phones? Turn off the power save mode for the configured profile settings by following the below procedure:- Go to Settings on the Cisco Unified Wireless IP Phone 7925G: Step 1 :- Choose SETTINGS > Network Profiles. Step 2 :- To select the profile name that you want to configure, scroll to the item and then press the Select button Step 3 :- Enter **# to unlock the profile and press Edit. Step 4 :- Scroll to and select WLAN Configuration. Step 5 :- To view or change the menu options, press Edit. Call Power Save Mode--> Change to None (By default Is U-APSD/PS-Poll)

Do we have any recommendations for Cisco 7925G phones

2018-02-13T11:01:32-0800 2018-02-13T12:00:07-0800 https://support.ruckuswireless.com/articles/000007466 2018-02-12T10:57:21-0800 monthly 0.8 admin,premium knowledge_article_3271 knowledge_article_3271 2018-02-12T10:57:21-0800 000007466 Validated (External) Premium Brocade eos products Configuration;Security;System network management Configuration, Security, System Network Management, Brocade EOS Products How to clear port security statistics? Clearing port security statistics You can clear restricted MAC addresses and violation statistics from ports on all ports or on individual ports. Clearing restricted MAC addresses To clear all restricted MAC addresses globally, enter the clear port security restricted-macs all command. Example: device# clear port security restricted-macs all To clear restricted MAC addresses on a specific port, enter a command such as the following. Brocade# clear port security restricted-macs ethernet 5 Syntax: clear port security restricted-macs [ all | ethernet port ] Clearing violation statistics To clear violation statistics globally, enter the clear port security statistics all command. Example: device# clear port security statistics all To clear violation statistics on a specific port, enter a command such as the following. device# clear port security statistics ethernet 1/1/5 Syntax: clear port security statistics [ all | ethernet port ]

How to clear port security statistics in a device.

2018-02-12T10:57:21-0800 2018-02-12T12:00:07-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw5hCAC?attachment_index=0 2018-02-12T12:00:07-0800 monthly admin,premium knowledge_article_3271 knowledge_article_3271_attachment_1 ka25B000000CburQAC_Attachment__c.pdf 2662188.0 application/pdf https://support.ruckuswireless.com/articles/000007618 2018-02-07T15:18:15-0800 monthly 0.8 admin,premium knowledge_article_3270 knowledge_article_3270 2018-02-07T15:18:15-0800 000007618 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Why clients are failing to get an IP when connected to a tunneled SSID over Ruckus GRE on SZ cluster? - We added the DNAT IP to the Cluster configuration and the Data Tunnel got successfully established. Steps: 1. Navigate to GUI -> System -> Cluster, configure cluster 2. Configure Data NAT IP - We tested client connection and confirmed that users could get an IP both on wired and wireless side. - We also validated same by moving Test AP to different AP zones and all resulted positive client connection.

This article explains a scenario where clients failed to get an IP when connected to Tunneled WLAN over Ruckus GRE.

2018-02-07T15:18:15-0800 2018-02-07T18:00:07-0800 https://support.ruckuswireless.com/articles/000007504 2018-01-29T14:27:39-0800 monthly 0.8 admin,premium knowledge_article_3266 knowledge_article_3266 2018-01-29T14:27:39-0800 000007504 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products How to enable or use the STP Designated Protection? Designated Protection Designated Protection ensures that a port cannot go to the designated forwarding state in STP 802.1d or 802.1w. For example, a fast uplink port should never become a designated port to avoid loops in a network topology. It should either be a root port in any STP state or a non-root port in a blocking state. You can enable Designated Protection on the port to ensure that it does not go to the designated forwarding state. If STP tries to put this port into the designated forwarding state, the device puts this port into a designated inconsistent STP state. This is effectively equivalent to the listening state in STP in which a port cannot transfer any user traffic. When STP no longer marks this port as a designated port, the port is automatically removed from the designated inconsistent state. You can view the status of the Designated Protection feature on a port with the "show interface ethernet" command for that port. ---------- Note: You cannot enable Designated Protection and Root Guard on the same port. ---------- Enabling Designated Protection on a port To disallow the designated forwarding state on a port in STP (802.1d or 802.1w), run the "spanningtree designated-protect" command in interface configuration mode for that port. The following example shows that the designated forwarding state is disallowed on Ethernet interface 1/1/1. Brocade(config)# ethernet interface 1/1/1 Brocade(config-if-e1000-1/1/1)# spanning-tree designated-protect

STP security feature (Designated Protection)

2018-01-29T14:27:39-0800 2018-01-29T18:00:07-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6OCAS?attachment_index=0 2018-01-29T18:00:07-0800 monthly admin,premium knowledge_article_3266 knowledge_article_3266_attachment_1 ka25B000000CbRaQAK_Attachment__c.pdf 5072835.0 application/pdf https://support.ruckuswireless.com/articles/000007463 2018-01-29T10:08:01-0800 monthly 0.8 admin,premium knowledge_article_3264 knowledge_article_3264 2018-01-29T10:08:01-0800 000007463 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches What are BGP Troubleshooting steps? BGP Troubleshooting Guide - Revision 1 This document was written for FastIron but should apply to other platforms as well. Information gathering commands skip sh ip bgp summary sh ip bgp config sh ip bgp neighbor sh ip bgp neighbor x.x.x.x advertised-routes For each neighbor, shows actual routes advertised to specified neighbor sh ip bgp neighbor x.x.x.x received-routes For each neighbor, shows actual routes received from neighbor sh ip bgp neighbor x.x.x.x routes For each neighbor, shows routes learned from neighbor (after policies are applied) for specified neighbor sh ip bgp neighbor x.x.x.x rib-out-routes For each neighbor, shows routes in the outbound rib (after policies are applied) for specified neighbor sh ip bgp routes summary sh ip bgp routes Do not use without include filter (or re-enabling page display) unless there aren't too many routes sh ip bgp config sh ip route Do not use without include filter (or re-enabling page display) unless there aren't too many routes sh route-map Shows route maps that might be in use by BGP to set attributes or policies sh access-list <name-or-number> For each ACL used by a route-map ---------- Notes: Check neighbor session state from output of sh ip bgp neighbor Shutdown (0) — State 0: Dead IDLE (1) — State 1: IDLE – Initiate TCP connect Send TCP SYN and go to Connect Connect (2) — State 2: Connect – Listening for SYN/ACK Stuck in connect usually means no IP connectivity Active (3) — State 3: Active – Unfavorable response from peer Usually TCP connection failed, IP connectivity OK OpenSent (4) and OpenConfirm (5) — State 4 and 5: Open – Confirm BGP Peers Receives neighbors open message and confirms peer settings If there is a problem, sends notification to signal error, go to IDLE Sends KEEPALIVE to signal OK; go to Established Established (6) — State 6: Established – BGP session is working Routes begin to be transmitted between peers Consider if route refresh is needed clear ip bgp neighbor [neighbor-ip|all|as-num] soft in Sometimes if updates have been made to route-maps or other configuration since BGP was brought up, a route refresh is need to get BGP to become aware and apply the changes. Check to confirm MTU matches along the path between peers show ip int <ve or route-only interface> Run this command on both neighbors to confirm MTU sizes match. If they do not, this can cause usual behavior including BGP neighbor flaps. ping <neighbor-ip> no-fragment size <MTU size minus 28 bytes> Run this command on one neighbor to confirm that packets at the MTU size are able to reach the destination. The no-fragment bit is set on the packets to ensure that the devices in the path do not fragment the pings, otherwise we cannot successfully measure the MTU in the path. We have to subtract 28 bytes from the MTU size to account for the IP and ICMP headers. Config tasks in order to run BGP Enable BGP (required) Setting local AS number (required) Add BGP neighbors (required, also use update-source loopback and configure loopback for IBGP) Specify network list to advertise Make necessary policy changes Make sure a router ID other than 0.0.0.0 shows up under the output of “show ip”. If not you may have to manually set the router-id using “ip router-id x.x.x.x”.

Guides and Commands for troubleshooting Border Gateway Protocol

2018-01-29T10:08:01-0800 2018-01-29T12:00:20-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw5eCAC?attachment_index=0 2018-01-29T12:00:20-0800 monthly admin,premium knowledge_article_3264 knowledge_article_3264_attachment_1 ka25B000000CbuhQAC_Attachment__c.pdf 179047.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000Tw5eCAC?attachment_index=1 2018-01-29T12:00:20-0800 monthly admin,premium knowledge_article_3264 knowledge_article_3264_attachment_1 ka25B000000CbuhQAC_Attachment2__c.docx 16134.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document http://support.ruckuswireless.com/article_attachments/kA250000000Tw5eCAC?attachment_index=2 2018-01-29T12:00:20-0800 monthly admin,premium knowledge_article_3264 knowledge_article_3264_attachment_1 ka25B000000CbuhQAC_Attachment3__c.docx 13524.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000007465 2018-01-29T10:12:03-0800 monthly 0.8 admin,premium knowledge_article_3263 knowledge_article_3263 2018-01-29T10:12:03-0800 000007465 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products How to setup dynamic link-aggregation on Brocade FastIron Product family? <div>How to setup LACP link for FastIron product family Link Aggregation Control Protocl (LACP) as defined in IEEE 802.3ad and 802.3ax The following terms also related to LACP: port trunking, link bundling, Ethernet/network/NIC bonding, NIC teaming</div> <div> </div> <div>The setup:</div> <div>Example shows setup trunk port and LACP links with 2 ports on Switch A and with 2 ports on the switch. Please find attachment to view example. For further information, please view this BROCADE CAMPUS FEATURE EXPLAINER SERIES video regarding DYNAMIC LINK AGGREGATION: <a href="https://www.youtube.com/watch?v=QiIAx9z3-Dw&feature=youtu.be" target="_blank">https://www.youtube.com/watch?v=QiIAx9z3-Dw&feature=youtu.be</a> Or visit this Brocade Community Board post: Configuring Dynamic Link Aggregation Groups (LAGs): <a href="https://community.brocade.com/t5/Ethernet-Switches-Routers/Configuring-Dynamic-Link-Aggregation-Groups-LAGs/ta-p/87178" target="_blank">https://community.brocade.com/t5/Ethernet-Switches-Routers/Configuring-Dynamic-Link-Aggregation-Groups-LAGs/ta-p/87178 </a></div>

Setup dynamic link-aggregation on Brocade FastIron Product family

2018-01-29T10:12:03-0800 2018-01-29T12:00:18-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw5gCAC?attachment_index=0 2018-01-29T12:00:18-0800 monthly admin,premium knowledge_article_3263 knowledge_article_3263_attachment_1 ka25B000000CbvzQAC_Attachment__c.docx 29642.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000007482 2018-01-29T10:17:24-0800 monthly 0.8 admin,premium knowledge_article_3262 knowledge_article_3262 2018-01-29T10:17:24-0800 000007482 Validated (External) Premium Brocade eos products Troubleshooting Troubleshooting, Brocade EOS Products How can I capture all Support requested logging data in one file? You can enable logging in putty, so that you have a record of all commands that TAC requests in an easy format. Putty is a free open source program that you can download from the Web at: <a href="http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html" target="_blank">http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html</a> Attached PDF has the instructions to enable logging in putty.

Sending log outputs in one file

2018-01-29T10:17:24-0800 2018-01-29T12:00:16-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw5zCAC?attachment_index=0 2018-01-29T12:00:16-0800 monthly admin,premium knowledge_article_3262 knowledge_article_3262_attachment_1 ka25B000000CbmsQAC_Attachment__c.pdf 229420.0 application/pdf https://support.ruckuswireless.com/articles/000007493 2018-01-29T11:17:07-0800 monthly 0.8 admin,premium knowledge_article_3261 knowledge_article_3261 2018-01-29T11:17:07-0800 000007493 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products How To Run IP Data Collection Tools? The IP Data Collection Tools connect to Brocade routers and switches using Telnet or SSH, then run a basic analysis to identify the product and generate a dynamic 'Safe' CLI command set. The only difference between each tool is the CLI commands processed and the product in which they are processed for. The documentation references the product specific command set as the "Safe Command Set". The IP Data Collection Tools are data analysis tools for automating CLI commands and gathering output information required for troubleshooting and evaluating customer reported issues. Although each tool is designed as a product specific application, all of them use the same Graphics User Interface. All functions and operations are the same across all the tools. The MLX/XMR Tool and Net Iron Tool will process MLX and XMR chassis devices. The Net Iron Tool can also process Net Iron stackable products, and will eventually supersede the MLX/XMR Tool. The SuperX Tool and Fast Iron Tool process Fast Iron chassis devices. The Fast Iron tool can also process Fast Iron stackable products and will supersede the SuperX Tool. The attached PDF document provides information on 'How To' perform a basic data collection using any one of the tools currently available. The PDF document provides the following: <ol><li>Steps required for proper installation (also includes the URL link for the Dot Net 4 client from Microsoft).</li><li>Details regarding authentication and setting the Preferences, if authentication is required to connect.</li><li>How to Add host addresses and connect to a device to perform the data collection.</li><li>Information on the File and Folder structure for the data collected during a data collection session.</li><li>Also, details on DOS command line execution for fully automatic or scheduled execution.</li></ol>

How To Run IP Data Collection Tools

2018-01-29T11:17:07-0800 2018-01-29T12:00:12-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6BCAS?attachment_index=0 2018-01-29T12:00:12-0800 monthly admin,premium knowledge_article_3261 knowledge_article_3261_attachment_1 ka25B000000CbcOQAS_Attachment__c.pdf 737441.0 application/pdf https://support.ruckuswireless.com/articles/000007495 2018-01-29T11:41:20-0800 monthly 0.8 admin,premium knowledge_article_3260 knowledge_article_3260 2018-01-29T11:41:20-0800 000007495 Validated (External) Premium Brocade eos products Configuration;Security;System network management Configuration, Security, System Network Management, Brocade EOS Products What is BUM rate limiting and suppression a new feature in FI 08.0.30h (FastIron)? <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">The following commands are modified for the 08.0.30h release, and are described in detail in the attached FastIron Command Reference: <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>broadcast limit (pasted the details found in the FastIron Command Reference below)</li><li>multicast limit (pasted the details found in the FastIron Command Reference below)</li><li>unknown-unicast limit (pasted the details found in the FastIron Command Reference below)?</li><li>rate-limit-log (pasted the details found in the FastIron 08030h Command Reference below)?</li></ul> <h3 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">Platform Support (not all ICX platforms support this)</h3> <table border="1" style="width: 500px; text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">FCX</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">ICX 6430</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">ICX 6450</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">ICX 6610</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">ICX 7250</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">ICX 7450</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">ICX 7750</td></tr><tr><td colspan="1" rowspan="1" style="text-align: center; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">No</td><td colspan="1" rowspan="1" style="text-align: center; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">No</td><td colspan="1" rowspan="1" style="text-align: center; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">No</td><td colspan="1" rowspan="1" style="text-align: center; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">No</td><td colspan="1" rowspan="1" style="text-align: center; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Yes</td><td colspan="1" rowspan="1" style="text-align: center; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Yes</td><td colspan="1" rowspan="1" style="text-align: center; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Yes</td></tr></tbody></table> ---------- Note: “Yes” means fully supported “No” means no support ---------- <h2 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 14.77px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">BROADCAST LIMIT</h2> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">From page.173 -174 of the attached Guide: Enables rate limiting on a port, enables Syslog logging of broadcast packets, or sets a packet drop threshold value. Syntax broadcast limit num kbps [ log | threshold packet_threshold action port-shutdown [ shutdown_seconds ] ] no broadcast limit num kbps [ log | threshold packet_threshold action port-shutdown [ shutdown_seconds ] ] Command Default Broadcast rate limiting, logging, and port dampening are disabled. Parameters num: Specifies the maximum number of broadcast packets per second. The value can be 1 to 8388607. kbps: Enables byte-based limiting. The value can be 1 to Max Port Speed. log: Enables Syslog logging when the broadcast limit exceeds num kpbs . threshold: The packet drop count threshold. packet_threshold: Specifies the number of packets (in kilo bytes) that when exceeded, the port is shutdown. The value ranges from 1 KB: to 10 GB. action: The action to be taken. port-shutdown: Set the action as a port shutdown event. shutdown_seconds: The amount of time, in seconds, the port is shutdown. The default is 300 seconds and the range is from 1 to 65535 seconds. Modes Interface configuration mode Usage Guidelines Use the no form of the command to disable rate limiting on a port, Syslog logging of excess packets, or the packet drop threshold value. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">If the port shutdown_seconds parameter is set to 0, the port is kept in ERR-DISABLE state until you re-enabled it. Examples The following example enables a broadcast rate limit of 131072 kbps. device(config)# interface ethernet 9/1/1 device(config-if-e1000-9/1/1)# broadcast limit 131072 kbps <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The following example enables broadcast limit logging when the configured broadcast limit exceeds 100 Kbps. device(config)# interface ethernet 1/2/1 device(config-if-e10000-1/2/1)# broadcast limit 100 kbps log <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The following example shuts down the port for 300 seconds (default) when the packet drop threshold value exceeds 1000 KBs. device(config)# interface ethernet 1/2/1 device(config-if-e10000-1/2/1)# broadcast limit 100 kbps threshold 1000 action port-shutdown History Release version Command history: FI 08.0.10 The command was introduced. FI 08.0.30h The command was modified to include the keyword threshold. Fi 08.0.40a The command was modified to include the keyword log. <h2 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 14.77px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">UNKNOWN-UNICAST LIMIT</h2> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">From page 1589 -1590 of the attached Guide: Enables rate limiting on a port, enables Syslog logging of unknown-unicast packets, or sets a packet drop threshold value. Syntax unknown-unicast limit num kbps [ log | threshold packet_threshold action port-shutdown [ shutdown_seconds ] ] no unknown-unicast limit num kbps [ log | threshold packet_threshold action port-shutdown [ shiudown_seconds ] ] Command Default Unknown unicast rate limiting, logging, and port dampening are disabled. Parameters num: Specifies the maximum number of unknown-unicast packets per second. The value can be 1 to 8388607. kbps: Enables byte-based limiting. The value can be 1 to Max Port Speed. log: Enables Syslog logging when the unknown-unicast limit exceeds num kpbs . threshold: The packet drop count threshold. packet_threshold: Specifies the number of packets (in kilo bytes) that when exceeded, the port is shutdown. The value ranges from 1 KB to 10 GB. action: The action to be taken. port-shutdown: Set the action as a port shutdown event. shutdown_seconds: The amount of time, in seconds, the port is shutdown. The default is 300 seconds and the range is from 1 to 65535 seconds. Modes Interface configuration mode Usage Guidelines Use the no form of the command to disable rate limiting on a port, Syslog logging of excess packets, or the packet drop threshold value. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">If the port shutdown_seconds parameter is set to 0, the port is kept in ERR-DISABLE state until you re-enabled it. Examples The following example enables a unknown-unicast rate limit of 131072 kbps. device(config)# interface ethernet 9/1/1 device(config-if-e1000-9/1/1)# unknown-unicast limit 131072 kbps <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The following example enables unknown-unicast limit logging when the configured unknown-unicast limit exceeds 100 Kbps. device(config)# interface ethernet 1/2/1 device(config-if-e10000-1/2/1)# unknown-unicast limit 100 kbps log <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The following example shuts down the port for 300 seconds (default) when the packet drop threshold value exceeds 1000 KBs. device(config)# interface ethernet 1/2/1 device(config-if-e10000-1/2/1)# unknown-unicast limit 100 kbps threshold 1000 action port-shutdown History Release version Command history: FI 08.0.10 The command was introduced. FI 08.0.30h The command was modified to include the keyword threshold. FI 08.0.40a The command was modified to include the keyword log. <h2 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 14.77px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">MULTICAST LIMIT</h2> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">From page 817 - 818 of the attached Guide: Enables rate limiting on a port, enables Syslog logging of multicast packets, or sets a packet drop threshold value. Syntax multicast limit num kbps [ log | threshold packet_threshold action port-shutdown [ shutdown_seconds ] ] no multicast limit num kbps [ log | threshold packet_threshold action port-shutdown [ shutdown_seconds ] ] Command Default Multicast rate limiting, logging, and port dampening are disabled. Parameters num: Specifies the maximum number of multicast packets per second. The value can be 1 to 8388607. kbps: Enables byte-based limiting. The value can be 1 to Max Port Speed. log: Enables Syslog logging when the multicast limit exceeds num kpbs . threshold: The packet drop count threshold. packet_threshold: Specifies the number of packets (in kilo bytes) that when exceeded, the port is shutdown. The value ranges from 1 KB to 10 GB. action: The action to be taken. port-shutdown: Set the action as a port shutdown event. shutdown_seconds: The amount of time, in seconds, the port is shutdown. The default is 300 seconds and the range is from 1 to 65535 seconds. Modes Interface configuration mode Usage Guidelines Use the no form of the command to disable rate limiting on a port, Syslog logging of excess packets, or the packet drop threshold value. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">If the port shutdown_seconds parameter is set to 0, the port is kept in ERR-DISABLE state until you re-enabled it. Examples The following example enables a multicast rate limit of 131072 kbps. device(config)# interface ethernet 9/1/1 device(config-if-e1000-9/1/1)# multicast limit 131072 kbps <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The following example enables multicast limit logging when the configured multicast limit exceeds 100 Kbps. device(config)# interface ethernet 1/2/1 device(config-if-e10000-1/2/1)# multicast limit 100 kbps log <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The following example shuts down the port for 300 seconds (default) when the packet drop threshold value exceeds 1000 KBs. device(config)# interface ethernet 1/2/1 device(config-if-e10000-1/2/1)# multicast limit 100 kbps threshold 1000 action port-shutdown History Release version Command history: FI 08.0.10 The command was introduced. FI 08.0.30h The command was modified to include the keyword threshold. Fi 08.0.40a The command was modified to include the keyword log. <h2 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 14.77px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">RATE-LIMIT-LOG</h2> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Configures the global level BUM suppression logging interval. Syntax rate-limit-log [ minutes ] [no] rate-limit-log [ minutes ] Command Default The default logging interval 5 minutes. Parameters minutes Specifies the interval, in whole mimutes, between Syslog notifications. The value can be any integer from 1 to 10. Modes Global configuration mode Usage Guidelines Use the no form of the command to return to the default value (5 minutes). Examples The following example shows how to set the BUM suppression notification Syslog logging interval to 3 minutes. device(config)# rate-limit-log 3 History Release version Command history FI 08.0.30h This command was introduced.

Broadcast, unknown-unicast, and multicast suppression Syslog and SNMP notification — Rate limiting BUM traffic protects a switch, router node, or network from Denial of Service attacks or unintentional traffic configurations. When an incoming packet exceeds the maximum number of bytes that you set with rate limiting, a Syslog notification is generated.

2018-01-29T11:41:20-0800 2018-01-29T12:00:08-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6DCAS?attachment_index=0 2018-01-29T12:00:08-0800 monthly admin,premium knowledge_article_3260 knowledge_article_3260_attachment_1 ka25B000000CbaSQAS_Attachment__c.pdf 5284659.0 application/pdf https://support.ruckuswireless.com/articles/000007530 2018-01-24T10:19:25-0800 monthly 0.8 admin,premium knowledge_article_3256 knowledge_article_3256 2018-01-24T10:19:25-0800 000007530 Validated (External) Premium Brocade eos products Configuration;Security Configuration, Security, Brocade EOS Products How to use MAC port security configuration? MAC port security configuration To configure the MAC port security feature, perform the following tasks: • Enable the MAC port security feature • Set the maximum number of secure MAC addresses for an interface • Set the port security age timer • Specify secure MAC addresses • Configure the device to automatically save secure MAC addresses to the startup-config file • Specify the action taken when a security violation occurs Enabling the MAC port security feature By default, the MAC port security feature is disabled on all interfaces. You can enable or disable the feature on all interfaces at once, or on individual interfaces. To enable the feature on all interfaces at once, enter the following commands: device(config)# port security device(config-port-security)# enable To disable the feature on all interfaces at once, enter the following commands: device(config)# port security device(config-port-security)# no enable To enable the feature on a specific interface, enter the following commands: device(config)# interface ethernet 1/7/11 device(config-if-e1000-1/7/11)# port security device(config-port-security-e1000-1/7/11)# enable Syntax: port security Syntax: no enable Setting the maximum number of secure MAC addresses for an interface When MAC port security is enabled, an interface can store one secure MAC address. You can increase the number of MAC addresses that can be stored to a maximum of 64, plus the total number of global resources available. For example, to configure interface 1/7/11 to have a maximum of 10 secure MAC addresses, enter the following commands. device(config)# interface ethernet 1/7/11 device(config-if-e1000-1/7/11)# port security device(config-port-security-e1000-1/7/11)# maximum 10 Syntax: maximum number-of-addresses The number-of-addresses parameter can be set to a number from 0 through 64 plus (the total number of global resources available). The total number of global resources is 2048 or 4096, depending on flash memory size. Setting the parameter to 0 prevents any addresses from being learned. The default is 1. Setting the port security age timer By default, learned MAC addresses stay secure indefinitely. You can optionally configure the device to age out secure MAC addresses after a specified amount of time. To set the port security age timer to 10 minutes on all interfaces, enter the following commands: device(config)# port security device(config-port-security)# age 10 To age out all secure MAC-addresses immediately after two minutes, enter the following commands: device(config)# port security device(config-port-security)# age 2 absolute To set the port security age timer to 10 minutes on a specific interface, enter the following commands: device(config)# interface ethernet 7/1/1 device(config-if-e1000-7/1/1)# port security device(config-port-security-e1000-7/1/1)# age 10 Syntax: [no] age minutes [ minutes | absolute ] The minutes variable specifies a range from 0 through 1440 minutes. The default is 0 (never age out secure MAC addresses). The optional absolute keyword sets all secure MAC addresses to age out immediately once the specified time expires. If the absolute keyword is not specified, secure MAC addresses are aged out only when the configured hardware MAC age time expires. ---------- Note: When using the absolute option to age out MAC addresses on timer expiry, make sure that the age timer value is sufficient. Avoid using a very short timer expiry with the absolute option, as the value may be in conflict with other timer settings and may cause performance problems in the network. For example, a one-minute timer expiry will cause MAC addresses to be flushed every minute. As a result, operational (enable/disable) loops and packet flooding may occur following a security violation, which by default causes a port to be disabled for one minute. ---------- Note: Even though you can set age time to specific ports independent of the device-level setting, the actual age timer will take the greater of the two values. Thus, if you set the age timer to 3 minutes for the port, and 10 minutes for the device, the port MAC aging happens in 10 minutes (the device-level setting), which is greater than the port setting that you have configured. ---------- On the Brocade ICX 7750, Brocade ICX 7450, and Brocade ICX 7250, the port security age can only be set to the global hardware age. The absolute age and no age secure MACs are configured as static in hardware. To set or unset PMS MAC age time to global-mac-timer (hardware age timer), enter the following commands: device(config-port-security-e1000-1/7/11)# age global-mac device(config-port-security-e1000-1/7/11)# no age global-mac Specifying secure MAC addresses You can configure secure MAC addresses on tagged and untagged interfaces. On an untagged interface to specify a secure MAC address on an untagged interface, enter commands such as the following: device(config)# interface ethernet 1/7/11 device(config-if-e1000-1/7/11)# port security device(config-port-security-e1000-1/7/11)# secure-mac-address 0000.0018.747C Syntax: [no] secure-mac-address mac-address On a tagged interface when specifying a secure MAC address on a tagged interface, you must also specify the VLAN ID. To do so, enter commands such as the following: device(config)# interface ethernet 1/7/11 device(config-if-e1000-1/7/11)# port security device(config-port-security-e1000-1/7/11)# secure-mac-address 0000.0018.747C 2 Syntax: [no] secure-mac-address mac-address [ vlan-ID ] ---------- Note: If MAC port security is enabled on a port and you change the VLAN membership of the port, make sure that you also change the VLAN ID specified in the secure-mac-address configuration statement for the port. ---------- When a secure MAC address is applied to a tagged port, the VLAN ID is generated for both tagged and untagged ports. When you display the configuration, you will see an entry for the secure MAC addresses. For example, you might see an entry similar to the following line. secure-mac-address 0000.0011.2222 10 10 This line means that MAC address 0000.0011.2222 10 on VLAN 10 is a secure MAC address. Autosaving secure MAC addresses to the startup configuration Learned MAC addresses can automatically be saved to the startup configuration at specified intervals. The autosave feature saves learned MAC addresses by copying the running configuration to the startup configuration. For example, to automatically save learned secure MAC addresses every 20 minutes, enter the following commands: device(config)# port security device(config-port-security)# autosave 20 Syntax: [no] autosave minutes ] The minutes variable can be from 15 through 1440 minutes. By default, secure MAC addresses are not autosaved to the startup-config file. If you change the autosave interval, the next save happens according to the old interval, then the new interval takes effect. To change the interval immediately, disable autosave by entering the no autosave command, then configure the new autosave interval using the autosave command. Specifying the action taken when a security violation occurs A security violation can occur when a user tries to connect to a port where a MAC address is already locked, or the maximum number of secure MAC addresses has been exceeded. When a security violation occurs, an SNMP trap and Syslog message are generated. You can configure the device to take one of two actions when a security violation occurs; either drop packets from the violating address (and allow packets from secure addresses), or disable the port for a specified time. Dropping packets from a violating address To configure the device to drop packets from a violating address and allow packets from secure addresses, enter the following commands. device(config)# interface ethernet 1/7/11 device(config-if-e1000-1/7/11)# port security device(config-port-security-e1000-1/7/11)# violation restrict Syntax: violation [ restrict ] ---------- Note: When the restrict option is used, the maximum number of MAC addresses that can be restricted is 128. If the number of violating MAC addresses exceeds this number, the port is shut down. An SNMP trap and the following Syslog message are generated: "Port Security violation restrict limit 128 exceeded on interface ethernet port_id ". This is followed by a port shutdown Syslog message and trap. ---------- Specifying the period of time to drop packets from a violating address To specify the number of minutes that the device drops packets from a violating address, use commands similar to the following: device(config)# interface ethernet 1/7/11 device(config-if-e1000-1/7/11)# port security device(config-port-security-e1000-1/7/11)# violation restrict 5 Syntax: violation [ restrict ] [age ] The age variable can be from 0 through 1440 minutes. The default is 5 minutes. Specifying 0 drops packets from the violating address permanently. Aging for restricted MAC addresses is done in software. There can be a worst case inaccuracy of one minute from the specified time. The restricted MAC addresses are denied in hardware. Disabling the port for a specified amount of time You can configure the device to disable the port for a specified amount of time when a security violation occurs. To shut down the port for 5 minutes when a security violation occurs, enter the following commands. device(config)# interface ethernet 1/7/11 device(config-if-e1000-1/7/11)# port security device(config-port-security-e1000-1/7/11)# violation shutdown 5 Syntax: violation [ shutdown ] [minutes ] The minutes can be from 0 through 1440 minutes. Specifying 0 shuts down the port permanently when a security violation occurs. For more details or reference please check the fastiron-08030d-securityguide from page 197 to 206

How to use MAC port security configuration

2018-01-24T10:19:25-0800 2018-01-24T12:00:14-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6qCAC?attachment_index=0 2018-01-24T12:00:14-0800 monthly admin,premium knowledge_article_3256 knowledge_article_3256_attachment_1 ka25B000000CbtoQAC_Attachment__c.pdf 3913724.0 application/pdf https://support.ruckuswireless.com/articles/000007467 2018-01-24T10:56:22-0800 monthly 0.8 admin,premium knowledge_article_3254 knowledge_article_3254 2018-01-24T10:56:22-0800 000007467 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products What ar the SX800 and SX1600 Two-Level MCT with LACP on CCEP configuration considerations? With a two-level MCT configuration and using dynamic lags, the upper cluster and lower cluster need to have different Cluster-id from each other as the Cluster LACP module will use the Cluster id as part of the LACPPDU’s system id. In a MCT configuration there are 2 id’s you need to be concerned with: Cluster id – Identifies the cluster itself, every switch within the same cluster need to have the same cluster id. (Example: # cluster MCT 10: Ten becomes the cluster id for the 2 unit cluster) Cluster Rbridge id – Identifies the switch within the cluster and needs to be unique for each unit. See the attached diagram for details.

SX800 and SX1600 Two-Level MCT with LACP on CCEP configuration considerations

2018-01-24T10:56:22-0800 2018-01-24T12:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw5iCAC?attachment_index=0 2018-01-24T12:00:09-0800 monthly admin,premium knowledge_article_3254 knowledge_article_3254_attachment_1 ka25B000000CbvfQAC_Attachment__c.pdf 32515.0 application/pdf https://support.ruckuswireless.com/articles/000007529 2018-01-23T15:12:04-0800 monthly 0.8 admin,premium knowledge_article_3253 knowledge_article_3253 2018-01-23T15:12:04-0800 000007529 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to enable or use the error disable recovery? Error Disable Recovery If a BPDU Guard violation or loop detection violation occurs, or the number of inError packets exceeds the configured threshold, or if an EFM-OAM enabled interface receives a critical event from the remote device, a port is placed into an error-disabled state, which is functionally equivalent to a disable state. Once in an error-disabled state, the port remains in that state until it is enabled either automatically or manually. Enabling an error-disabled port automatically To enable a port to recover automatically from the error-disabled state after the expiry of a configured error recovery timer, run the errdisable recovery cause command in global configuration mode. For example, to enable error-disable recovery for BPDU guard, enter the following command: Brocade(config)# errdisable recovery cause bpduguard Syntax: errdisable recovery cause [ bpduguard | loam-critical-event | loop-detection | packetinerror- detect | all ] The bpdu guard parameter allows the port to recover from the error-disabled state, if the state was caused by a BPDU guard violation. The all parameter allows ports to recover from an error-disabled state caused by any reason, for example, a BPDU guard violation, due to reception of a critical event from the remote device in the case of EFM-OAM interface, the number of inError packets exceeding the configured threshold, or a loopdetection violation. --------- Note: When automatic recovery re-enables the port, the port is not in the error-disabled state, but it can remain down for other reasons, such as the Tx/Rx of the fibre optic not being seated properly. Thus, the port is not able to receive the signal from the other side. In this case, after the optic is inserted correctly, you should manually disable the port and then enable it. ---------- Enabling an error-disabled port manually To enable an error-disabled port manually, you must first run the "disable" command and then the "enable" command in interface configuration mode to disable the port and then enable the port respectively. Setting the recovery interval The errdisable recovery interval command allows you to configure a timeout for ports in the errordisabled state, after which the ports are re-enabled automatically. To set the error-disabled recovery timeout interval, enter the following command: Brocade(config)# errdisable recovery interval 20 Syntax: [no] errdisable recovery interval seconds

How to enable or use the error disable recovery?

2018-01-23T15:12:04-0800 2018-01-23T18:00:21-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6pCAC?attachment_index=0 2018-01-23T18:00:21-0800 monthly admin,premium knowledge_article_3253 knowledge_article_3253_attachment_1 ka25B000000Cc7nQAC_Attachment__c.pdf 5072835.0 application/pdf https://support.ruckuswireless.com/articles/000007524 2018-01-23T15:12:51-0800 monthly 0.8 admin,premium knowledge_article_3252 knowledge_article_3252 2018-01-23T15:12:51-0800 000007524 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to monitor an individual LAG port? Monitoring an individual LAG port LACP LAG group. By default, when you monitor the primary port in a LAG group, aggregated traffic for all the ports in the LAG group is copied to the mirror port. You can configure the device to monitor individual ports in a LAG group. You can monitor the primary port or a secondary port individually. To configure port monitoring on an individual port in a LAG group, enter commands such as the following. Example: device(config)# lag automation static id 1 device(config-lag-automation)# ports e 1/1/2 to 1/1/9 device(config-lag-automation)# primary-port 1/1/2 device(config-lag-automation)# deploy device(config)# mirror-port ethernet 1/1/1 device(config)# lag automation device(config-lag-automation)# monitor ethe-port-monitored 1/1/2 ethernet 1/1/1 both device# sh mirror Mirror port 1/1/1 Input monitoring : (U1/M1) 1 Output monitoring : (U1/M1) 1 device# sh mirror ethernet 1/1/1 Mirror port 1/1/1 Input monitoring : (U1/M1) 1 Output monitoring : (U1/M1) 1 device# sh run | i mirror mirror-port ethernet 1/1/1 device#sh run | i monitor ethe monitor ethe-port-monitored 1/1/2 ethe 1/1/1 both Traffic on LAG port e 1/1/2 is monitored, and the monitored traffic is copied to port e 1/1/1, the mirror port.

Monitoring an individual LAG port

2018-01-23T15:12:51-0800 2018-01-23T18:00:18-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6jCAC?attachment_index=0 2018-01-23T18:00:18-0800 monthly admin,premium knowledge_article_3252 knowledge_article_3252_attachment_1 ka25B000000Cc7sQAC_Attachment__c.pdf 5072835.0 application/pdf https://support.ruckuswireless.com/articles/000007528 2018-01-23T15:18:31-0800 monthly 0.8 admin,premium knowledge_article_3251 knowledge_article_3251 2018-01-23T15:18:31-0800 000007528 Validated (External) Premium Icx 7450;RUCKUS ICX 7450 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ICX 7450 Why are Avaya 1608/1616 phones not powering up on POH ports 1-8 (ICX7450)? Upgrade to a version of code that contains the fix. *Please make sure that you have the correct POE image and boot code if you upgrade or install the code version 08030e*

Avaya 1608/1616 phones not powering up on POH ports 1-8 (ICX7450)

2018-01-23T15:18:31-0800 2018-01-23T18:00:16-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6oCAC?attachment_index=0 2018-01-23T18:00:16-0800 monthly admin,premium knowledge_article_3251 knowledge_article_3251_attachment_1 ka25B000000CbsRQAS_Attachment__c.pdf 585005.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000Tw6oCAC?attachment_index=1 2018-01-23T18:00:16-0800 monthly admin,premium knowledge_article_3251 knowledge_article_3251_attachment_1 ka25B000000CbsRQAS_Attachment2__c.pdf 2381947.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000Tw6oCAC?attachment_index=2 2018-01-23T18:00:16-0800 monthly admin,premium knowledge_article_3251 knowledge_article_3251_attachment_1 ka25B000000CbsRQAS_Attachment3__c.pdf 2470398.0 application/pdf https://support.ruckuswireless.com/articles/000007521 2018-01-23T15:20:41-0800 monthly 0.8 admin,premium knowledge_article_3250 knowledge_article_3250 2018-01-23T15:20:41-0800 000007521 Validated (External) Premium Ruckus icx switches System network management System Network Management, Ruckus ICX Switches What is Uni-Directional Link Detection (UDLD)? UDLD for tagged ports The default implementation of UDLD sends the packets untagged, even across tagged ports. If the untagged UDLD packet is received by a third-party switch, that switch may reject the packet. As a result, UDLD may be limited only to Brocade devices, since UDLD may not function on third-party switches. To solve this issue, you can configure ports to send out UDLD control packets that are tagged with a specific VLAN ID. This feature also enables third party switches to receive the control packets that are tagged with the specified VLAN. For tagged operation, all of the following conditions must be met: • A VLAN is specified when UDLD is configured • The port belongs to the configured VLAN as tagged member • All the devices across the UDLD link are in the same VLAN Configuration notes and feature limitations for UDLD • UDLD is supported only on Ethernet ports. • UDLD can be enabled on only one VLAN for tagged port. • To configure UDLD on a trunk group, you must enable and configure the feature on each port of the group individually. Configuring UDLD on a trunk group primary port enables the feature on that port only. • Low UDLD link-keepalive interval and retry options are not recommended as they are more sensitive and prone to flaps. • When UDLD is enabled on a trunk port, trunk threshold is not supported. • Dynamic trunking is not supported. If you want to configure a trunk group that contains ports on which UDLD is enabled, you must remove the UDLD configuration from the ports. After you create the trunk group, you can re-add the UDLD configuration. • If MRP is also enabled on the device, Brocade recommends that you set the MRP preforwarding time slightly higher than the default of 300 ms; for example, to 400 or 500 ms. Enabling UDLD ---------- Note: This section shows how to configure UDLD for untagged control packets. ---------- To enable UDLD on a port, enter a command such as the following at the global CONFIG level of the CLI. device(config)#link-keepalive ethernet 0/1/1 To enable the feature on a trunk group, enter commands such as the following. device(config)# link-keepalive ethernet 0/1/1 ethernet 0/1/2 device(config)# link-keepalive ethernet 0/1/3 ethernet 0/1/4 Syntax: [no] link-keepalive ethernet port [ to port | ethernet port ] This command is not supported if you downgrade the device to FCX 6.0 or FSX5.1. In this case, use the following command to configure multiple ports: Syntax: [no] link-keepalive ethernet port [ ethernet port ] Enabling UDLD for tagged ports To enable ports to receive and send UDLD control packets tagged with a specific VLAN ID, enter commands such as the following. device(config)# link-keepalive ethernet 1/1/18 vlan 22 This command enables UDLD on port 1/1/18 and allows UDLD control packet tagged with VLAN 22 to be received and sent on port 1/1/18. Syntax: [no] link-keepalive ethernet port [vlan vlan-ID] For the vlan-ID variable, enter the ID of the VLAN that the UDLD control packets can contain to be received and sent on the port. If a VLAN ID is not specified, then UDLD control packets are sent out of the port as untagged packets. ---------- Note: You must configure the same VLANs that will be used for UDLD on all devices across the network; otherwise, the UDLD link cannot be maintained. ---------- Changing the Keepalive interval By default, ports enabled for UDLD send a link health-check packet once every 500 ms. You can change the interval to a value from 1 - 60, where 1 is 100 ms, 2 is 200 ms, and so on. To change the interval, enter a command such as the following. device(config)# link-keepalive interval 4 Syntax: [no] link-keepalive interval num The num parameter specifies how often the ports send a UDLD packet. You can specify from 1 - 60, in 100 ms increments. The default is 5 (500 ms). Changing the Keepalive retries By default, a port waits one second to receive a health-check reply packet from the port at the other end of the link. If the port does not receive a reply, the port tries four more times by sending up to four more health-check packets. If the port still does not receive a reply after the maximum number of retries, the port goes down. You can change the maximum number of keepalive attempts to a value from 3 - 64. To change the maximum number of attempts, enter a command such as the following. device(config)# link-keepalive retries 10 Syntax: [no] link-keepalive retries num The num parameter specifies the maximum number of times the port will try the health check. You can specify a value from 3 - 64. The default is 7. *For additional details related with this topic please review the fastiron-08030m-l2guide attachment that we included in the KB Article*

Uni-Directional Link Detection (UDLD) monitors a link between two Brocade devices and brings the ports on both ends of the link down if the link goes down at any point between the two devices. This feature is useful for links that are individual ports and for trunk links.

2018-01-23T15:20:41-0800 2018-01-23T18:00:13-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6gCAC?attachment_index=0 2018-01-23T18:00:13-0800 monthly admin,premium knowledge_article_3250 knowledge_article_3250_attachment_1 ka25B000000CbHfQAK_Attachment__c.pdf 5085948.0 application/pdf https://support.ruckuswireless.com/articles/000007517 2018-01-18T10:34:26-0800 monthly 0.8 admin,premium knowledge_article_3248 knowledge_article_3248 2018-01-18T10:20:46-0800 000007517 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches What is the Metro Ring Configuration? TOPOLOGY <img alt="User-added image" height="162" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty33&feoid=00N50000002Cf3M&refid=0EM50000000XVHu" width="500"></img> VLAN 10 192.168.10.0/24 PC1 192.168.10.2/24 VLAN 20 192.168.20.0/24 PC2 192.168.20.2/24 CONFIGURATION Distribution switch running routing code. Distribution(config)# vlan 10 Distribution(config-vlan-10)# tagged ether 1/1/1 ether 1/1/2 Distribution(config-vlan-10)# metro-ring 10 Distribution(config-vlan10-mrp-10)# master Distribution(config-vlan10-mrp-10)# ring-interface ether 1/1/1 ether 1/1/2 Distribution(config-vlan10-mrp-10)# enable ---------- Note: The order of the ring interfaces on the "master" is important. In this case the port 1/1/1 is going to be the primary port for metro ring 10 ---------- Distribution(config-vlan10-mrp-10)# vlan 20 Distribution(config-vlan-20)# tagged ether 1/1/1 ether 1/1/2 Distribution(config-vlan-20)# metro-ring 20 Distribution(config-vlan20-mrp-20)# master Distribution(config-vlan20-mrp-20)# ring-interf ether 1/1/2 ether 1/1/1 (port 1/1/2 primary port ) Distribution(config-vlan20-mrp-20)# enable Access Switch running switching code. Access(config)# no span (disable STP on the switch) Access(config)vlan 10 Access(config-vlan-10)# tagged ether 1/1/1 ether 1/1/2 Access(config-vlan-10)untagged ether 1/1/13 to 1/1/24 Access(config-vlan-10)# metro-ring 10 Access(config-vlan10-mrp-10)ring-interface ether 1/1/1 ether 1/1/2 Access(config-vlan10-mrp-10)# enable Access(config-vlan10-mrp-10)# vlan 20 Access(config-vlan-20)# tagged ether 1/1/1 ether 1/1/2 Access(config-vlan-20)# untagged ether 1/1/25 to 1/1/36 Access(config-vlan-20)# metro-ring 20 Access(config-vlan20-mrp-20)# ring-interface 1/1/1 ether 1/1/2 ---------- Note: On this case the switch is not master for "metro-ring 10 or 20" so it does not matter in which order the ring interfaces are applied. ---------- DISPLAYING THE CONFIGURATON Show run ICX 6610-24F ! stack unit 1 module 1 icx6610-24f-sf-port-management-module module 2 icx6610-qsfp-10-port-160g-module module 3 icx6610-8-port-10g-dual-mode-module stack-trunk 1/2/1 to 1/2/2 stack-trunk 1/2/6 to 1/2/7 ! ! ! ! vlan 1 name DEFAULT-VLAN by port ! vlan 10 by port tagged ethe 1/1/1 to 1/1/2 untagged ethe 1/1/10 to 1/1/12 router-interface ve 10 metro-ring 10 master ring-interfaces ethernet 1/1/1 ethernet 1/1/2 enable diagnostics ! vlan 20 by port tagged ethe 1/1/1 to 1/1/2 router-interface ve 20 metro-ring 20 master ring-interfaces ethernet 1/1/2 ethernet 1/1/1 enable ! ! ! hostname DISTRIBUTION ip dhcp-server enable ! ip dhcp-server pool vlan_10 dhcp-default-router 192.168.10.1 dns-server 192.168.10.254 excluded-address 192.168.10.1 excluded-address 192.168.10.254 192.168.10.253 lease 1 0 0 network 192.168.10.0 255.255.255.0 deploy ! ! ip dhcp-server pool vlan_20 dhcp-default-router 192.168.20.1 dns-server 192.168.20.254 excluded-address 192.168.20.254 192.168.20.253 lease 1 0 0 network 192.168.20.0 255.255.255.0 deploy ! ! End SHOW RUN FCX 6485S-POE Show metro<img alt="User-added image" height="355" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty33&feoid=00N50000002Cf3M&refid=0EM50000000XVHz" width="500"></img> ---------- Note: The port 1/1/1 is in forwarding state, primary role for VLAN 10 and blocked for VLAN 20 in contrast the port 1/1/2 is in forwarding state, primary role for VLAN 20 and blocked for VLAN 10. ---------- FCX6485s PoE Show run telnet@ACCESS# show run Current configuration: ! ver 08.0.30hT7f1 ! stack unit 1 module 1 fcx-48-poe-port-management-module module 2 fcx-cx4-2-port-16g-module ! no global-stp ! ! ! vlan 1 name DEFAULT-VLAN by port no spanning-tree ! vlan 10 by port tagged ethe 1/1/1 to 1/1/2 untagged ethe 1/1/13 to 1/1/24 no spanning-tree metro-ring 10 ring-interfaces ethernet 1/1/2 ethernet 1/1/1 enable ! vlan 20 by port tagged ethe 1/1/1 to 1/1/2 untagged ethe 1/1/25 to 1/1/36 no spanning-tree metro-ring 20 ring-interfaces ethernet 1/1/1 ethernet 1/1/2 enable ! ! hostname ACCESS ip address 172.16.0.12 255.255.255.0 no ip dhcp-client enable ! ! End ---------- Note: DHCP it was configured on the ICX 6610 ---------- Metro Ring <img alt="User-added image" height="504" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty33&feoid=00N50000002Cf3M&refid=0EM50000000XVIJ" width="500"></img> ---------- Note: In this case the role is member for VLAN 10 and 20, the ports 1/1/1 and 1/1/2 are in forwarding. ---------- TROUBLESHOOTING When it comes to troubleshooting metro ring take the following points into account. <ol><li>On the switch with a "master" role you are going to find the blocking ports depending on the primary port on the ring configuration.</li><li>The switches with the "member" role the port are in forwarding state.</li><li>The show run, show metro and show log are useful commands</li><li>Check the physical layer, when a cable is either damaged or not connected the port state is disabled. For example the port 1/1/1 has been disconnected.</li></ol> <img alt="User-added image" height="364" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty33&feoid=00N50000002Cf3M&refid=0EM50000000XVIO" width="500"></img> 5. You can enable metro ring diagnostics for more statistics or find out if there are lost frames on a particular VLAN. DISTRIBUTION(config)# vlan 10 DISTRIBUTION(config-vlan-10)# metro-ring 10 DISTRIBUTION(confiig-vlan10-mrp-10)diagnostics DISTRIBUTION# show metro-ring 10 diagnostics <img alt="User-added image" height="163" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty33&feoid=00N50000002Cf3M&refid=0EM50000000XVIT" width="500"></img> PING TEST As soon as the port 1/1/1 was disconnected the port 1/1/2 changed the role to "forwarding" for VLAN 10. The ping was implemented from the PC2 on VLAN 20 to PC1 on VLAN 10 (192.168.10.2) Lost packets = 2 loss =1% <img alt="User-added image" height="306" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty33&feoid=00N50000002Cf3M&refid=0EM50000000XVIY" width="500"></img> ---------- Note: If it is needed download the .doc file that is attached in this article. ----------

Metro Ring Protocol (MRP) is a Brocade proprietary protocol that prevents Layer 2 loops and provides fast reconvergence in Layer 2 ring topologies. It is an alternative to STP and is especially useful in Metropolitan Area Networks (MANs)

2018-01-18T10:34:26-0800 2018-01-18T12:00:37-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6cCAC?attachment_index=0 2018-01-18T12:00:37-0800 monthly admin,premium knowledge_article_3248 knowledge_article_3248_attachment_1 ka25B000000CbHpQAK_Attachment__c.docx 126497.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000007511 2018-01-18T10:43:02-0800 monthly 0.8 admin,premium knowledge_article_3246 knowledge_article_3246 2018-01-18T10:43:02-0800 000007511 Validated (External) Premium Ruckus icx switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Ruckus ICX Switches What to do if SX experiences problems when you run/use the" wr mem" command (via BNA) while the web management card is enable? Upgrade to a version of code that contains the fix - 8030mb.

Sometimes the switch stops routing certain protocols to some subnets affecting DHCP and pings also.

2018-01-18T10:43:02-0800 2018-01-18T12:00:32-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6WCAS?attachment_index=0 2018-01-18T12:00:32-0800 monthly admin,premium knowledge_article_3246 knowledge_article_3246_attachment_1 ka25B000000CbMkQAK_Attachment__c.pdf 4704629.0 application/pdf https://support.ruckuswireless.com/articles/000007516 2018-01-18T10:46:28-0800 monthly 0.8 admin,premium knowledge_article_3245 knowledge_article_3245 2018-01-18T10:46:28-0800 000007516 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches What are the port regions on FastIron switches? FastIron X Series device port regions Ports on the FastIron X Series devices are grouped into regions. For a few features, you will need to know the region to which a port belongs. However, for most features, a port region does not affect configuration or operation of the feature. ---------- Note: Port regions do not apply to trunk group configurations on the FastIron X Series devices. However, port regions do apply to port Monitoring and unknown unicast configuration on FastIron X Series devices. ---------- • SX-FI48GPP: ports 1 - 48 belong to port region 0 • SX-FI-2XG: ports 1 - 2 belong to port region 0 • SX-FI-8XG: ports 1 - 8 belong to port region 0 • SX-FI-24HF: ports 1 - 24 belong to port region 0 • SX-FI-24GPP: ports 1 - 24 belong to port region 0 FCX device port regions The port region rules for FCX devices are as follows: • For all platforms, a 24-port Gbps module has one port region. In addition, any 10 Gbps ports on the device also belong to this single port region. • For all platforms, the 48-port Gbps module has two port regions: – Ports 1 - 24 belong to port region 0 – Ports 25 - 48 belong to port region 1 • For FCX648 devices with two 10 Gbps XFP ports, and a two 10 Gbps CX4 stacking ports: – The two 10 Gbps XFP ports belong to port region 0 (along with ports 1 -24 ) – The two 10 Gbps CX4 stacking ports belong to port region 1 (along with ports 25 - 48) • For FCX648 devices with four 10 Gbps SFP+ ports: – 10 Gbps SFP+ ports 3 and 4 belong to port region 0 (along with ports 1 -24 ) – 10 Gbps SFP+ ports 1 and 2 ports belong to port region 1 (along with ports 25 - 48) ICX 6610 device port regions • A 24-port Gbps has the following port regions: – Ports 1-24 belong to region 0 – 10 Gbps SFP+ ports belong to region 0 • A 48-port Gbps has the following port regions: – Ports 1-24 belong to region 0 – Ports 25-48 belong to region 1 – 10 Gbps SFP+ ports belong to region 0 ICX 6430 device port regions • A 24-port Gbps module has one port region. The four SFP ports on the device also belong to this single port region. • A 48-port Gbps module has two port regions: – Ports 1-24 and SFP ports 1& 2 belong to port region 0 – Ports 25-48 and SFP ports 3 & 4 belong to port region 1 ICX 6450 device port regions • A 24-port Gbps module has one port region. The four SFP+ ports on the device also belong to this single port region. • A 48-port Gbps module has two port regions: – Ports 1-24 and SFP+ ports 1& 2 belong to port region 0 – Ports 25-48 and SFP+ ports 3 & 4 belong to port region 1 ICX 6650 device port regions ICX 6650 device has only one port region. Brocade ICX 6650 has only one port region. All ports belong to region 0. ICX 7450 device port regions Brocade ICX 7450 24 port has only one port region. Brocade ICX 7450 48 port has two port regions. ICX 7750 device port regions ICX 7750 device has only one port region. Brocade ICX 7750 has only one port region. All ports belong to region 0. ICX 7250 device port regions ICX 7250 device has only one port region. All ports belong to region 0.

Port regions for FastIron X, FCX and ICX devices

2018-01-18T10:46:28-0800 2018-01-18T12:00:27-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6bCAC?attachment_index=0 2018-01-18T12:00:27-0800 monthly admin,premium knowledge_article_3245 knowledge_article_3245_attachment_1 ka25B000000CbHkQAK_Attachment__c.pdf 5085948.0 application/pdf https://support.ruckuswireless.com/articles/000007526 2018-01-18T11:00:37-0800 monthly 0.8 admin,premium knowledge_article_3244 knowledge_article_3244 2018-01-18T11:00:37-0800 000007526 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure Jumbo frames? JUMBO frames on Brocade FastIron devices Changing the MTU The Maximum Transmission Unit (MTU) is the maximum length of IP packet that a Layer 2 packet can contain. IP packets that are longer than the MTU are fragmented and sent in multiple Layer 2 packets. You can change the MTU globally or on individual ports. The default MTU is 1500 bytes for Ethernet II packets and 1492 for Ethernet SNAP packets. MTU enhancements Brocade devices contain the following enhancements to jumbo packet support: • Hardware forwarding of Layer 3 jumbo packets - Layer 3 IP unicast jumbo packets received on a port that supports the frame MTU size and forwarded to another port that also supports the frame MTU size are forwarded in hardware. Previous releases support hardware forwarding of Layer 2 jumbo frames only. • ICMP unreachable message if a frame is too large to be forwarded - If a jumbo packet has the Do not Fragment (DF) bit set, and the outbound interface does not support the packet MTU size, the Brocade device sends an ICMP unreachable message to the device that sent the packet. ---------- Note: These enhancements apply only to transit traffic forwarded through the Brocade device. ---------- Configuration considerations for increasing the MTU • The MTU command is applicable to VEs and physical IP interfaces. It applies to traffic routed between networks. • For ICX 7250, ICX 7450, and ICX 7750 devices, the IPv4 and IPv6 MTU values are the same. Modifying one also changes the value of the other. • For ICX 7250, ICX 7450, and ICX 7750 devices, the minimum IPv4 and IPv6 MTU values for both physical and virtual interfaces are 1280. • You cannot use this command to set Layer 2 maximum frame sizes per interface. The global jumbo command causes all interfaces to accept Layer 2 frames. • When you increase the MTU size of a port, the increase uses system resources. Increase the MTU size only on the ports that need it. For example, if you have one port connected to a server that uses jumbo frames and two other ports connected to clients that can support the jumbo frames, increase the MTU only on those three ports. Leave the MTU size on the other ports at the default value (1500 bytes). Globally increase the MTU size only if needed. Forwarding traffic to a port with a smaller MTU size ---------- Note: Forwarding traffic to a port with a smaller MTU size is not supported on the FastIron X Series. ---------- In order to forward traffic from a port with 1500 MTU configured to a port that has a smaller MTU (for example, 750) size, you must apply the mtu-exceed forward global command. To remove this setting, enter the mtu-exceed hard-drop command. The hard-drop option is enabled by default on the router. Syntax: mtu-exceed { forward | hard-drop } • forward - Fragments and forwards a packet from a port with a larger MTU to a port with a smaller MTU. • hard-drop - Resets to default and removes the forward function. Globally changing the Maximum Transmission Unit The Maximum Transmission Unit (MTU) is the maximum size an IP packet can be when encapsulated in a Layer 2 packet. If an IP packet is larger than the MTU allowed by the Layer 2 packet, the Layer 3 switch fragments the IP packet into multiple parts that will fit into the Layer 2 packets, and sends the parts of the fragmented IP packet separately, in different Layer 2 packets. The device that receives the multiple fragments of the IP packet reassembles the fragments into the original packet. You can increase the MTU size to accommodate jumbo packet sizes up to 10,200 bytes. To globally enable jumbo support on all ports of a FastIron device, enter commands such as the following. Example: device(config)# jumbo device(config)# write memory device(config)# end device# reload Syntax: [no] jumbo ---------- Note: You must save the configuration change and then reload the software to enable jumbo support. ---------- Changing the MTU on an individual port By default, the maximum Ethernet MTU sizes are as follows: • 1500 bytes - The maximum for Ethernet II encapsulation • 1492 bytes - The maximum for SNAP encapsulation When jumbo mode is enabled, the maximum Ethernet MTU sizes are as follows: • For ICX 6610 devices ? 10,200 bytes - The maximum for Ethernet II encapsulation (Default MTU: 9216) ? 10,174 bytes - The maximum for SNAP encapsulation (Default MTU: 9216) • For ICX 6430, ICX 6430-C12, and ICX 6450 devices ? 10,178 bytes - The maximum for Ethernet II encapsulation (Default MTU: 9216) ? 10,174 bytes - The maximum for SNAP encapsulation (Default MTU: 9216) • For other devices ? 10,218 bytes - The maximum for Ethernet II encapsulation (Default MTU: 9216) ? 10,214 bytes - The maximum for SNAP encapsulation (Default MTU: 9216) ---------- Note: If you set the MTU of a port to a value lower than the global MTU and from 576 through 1499, the port fragments the packets. However, if the port MTU is exactly 1500 and this is larger than the global MTU, the port drops the packets. For ICX 7250, ICX 7450, and ICX 7750 devices, the minimum IPv4 and IPv6 MTU values for both physical and virtual interfaces are 1280. ---------- Note: You must save the configuration change and then reload the software to enable jumbo support. ---------- To change the MTU for interface 1/1/5 to 1000, enter the following commands. device(config)# interface ethernet 1/1/5 device(config-if-1/1/5)# ip mtu 1000 device(config-if-1/1/5)# write memory device(config-if-1/1/5)# end device# reload Syntax: [no] ip mtu num The num variable specifies the MTU. Ethernet II packets can hold IP packets from 576 through 1500 bytes long. If jumbo mode is enabled, Ethernet II packets can hold IP packets up to 10,218 bytes long. Ethernet SNAP packets can hold IP packets from 576 through 1492 bytes long. If jumbo mode is enabled, SNAP packets can hold IP packets up to 10,214 bytes long. The default MTU for Ethernet II packets is 1500. The default MTU for SNAP packets is 1492. Path MTU discovery (RFC 1191) support FastIron X Series devices support the path MTU discovery method described in RFC 1191. When the Brocade device receives an IP packet that has its Do not Fragment (DF) bit set, and the packet size is greater than the MTU value of the outbound interface, then the Brocade device returns an ICMP Destination Unreachable message to the source of the packet, with the Code indicating "fragmentation needed and DF set". The ICMP Destination Unreachable message includes the MTU of the outbound interface. The source host can use this information to help determine the maximum MTU of a path to a destination. RFC 1191 is supported on all interfaces. Review Once the switch reboots the switch will be able to pass jumbo frames. You will then need to enable jumbo frames on the NIC's of the clients that require jumbo frame support. What happens when a client sends jumbo frames to a client that is not set for jumbo frames at Layer 2? This depends on how the client is sending the datagram; TCP/P/Ethernet : There is a setup process for each session between sender and receiver where devices exchange their maximum MSS (Maximum Segment Size) value. The lowest value MSS determines the MSS used for that session, and the subsequent MTU and frame size. UDP/IP/Ethernet : The packet is dropped by the receiving client. Setting MTU values for Layer 3 First you must enable layer 2 jumbo frame support or you will receive an error setting the MTU. If you see the below result then you have not enabled Layer 2 jumbo support. Error - Invalid input 9000. Valid range is between 576 and 1500 To set the MTU for a Layer 3 VLAN The VE (Virtual Ethernet) must be already defined on the VLAN. FastIron(config)# interface VE 14 FastIron(config-vif-14)# ip mtu 9000 To set the MTU in Layer 3 for a port The port must be a layer 3 port and not a switch (layer 2) port, this means the port should have an IP address assigned to it. Choose a port that is a member of the default VLAN (default VLAN is 1) Use a "Show VLAN 1" to find a unused port. FastIron(config)# show vlan 1 Total PORT-VLAN entries: 6 Maximum PORT-VLAN entries: 64 Legend: [Stk=Stack-Id, S=Slot] PORT-VLAN 1, Name DEFAULT-VLAN, Priority level0, Spanning tree On Untagged Ports: (S12) 16 17 18 19 21 22 23 24 Tagged Ports: None Uplink Ports: None DualMode Ports: None Let us make port 12/24 a layer 3 port and assign the MTU value of 9000. FastIron(config)#interface ethernet 12/24 FastIron(config-if-e1000-12/24)#ip address 192.168.1.1/24 FastIron(config-if-e1000-12/24)#ip mtu 9000 What happens when a client sends jumbo frames to a client that is not set for jumbo frames at Layer 3? Now when a jumbo packet is to be routed, it is each routers job to deliver the packet to the next hop. So if a jumbo packet is received on a routers ingress port that is jumbo enabled and must egressed on a port that is not jumbo enabled, then the router will fragment the packets into chunks that the egress port can handle. Note when the router must fragment packet this will be done on the CPU of the router. However if the packet has the DF (Do not Fragment) bit set, then the router will send a ICMP message of "fragmentation needed and DF set". This will be routed back to the sender so it can lower its MSS. Note that I lot of firewalls will block ICMP which will lead to black holing. IPv6 MTU The IPv6 maximum transmission unit (MTU) is the maximum length of an IPv6 packet that can be transmitted on a particular interface. If an IPv6 packet is longer than an MTU, the host that originated the packet fragments the packet and transmits its contents in multiple packets that are shorter than the configured MTU. By default, in non-jumbo mode, the default and maximum Ethernet MTU size is 1500 bytes. When jumbo mode is enabled, the default Ethernet MTU size is 9216. The maximum Ethernet MTU size is 10200 for Brocade ICX 6610 devices, 10178 for Brocade ICX 6450 devices, and 10218 for other devices. Configuration notes and feature limitations for IPv6 MTU • The IPv6 MTU functionality is applicable to VEs and physical IP interfaces. It applies to traffic routed between networks. • For ICX 7250, ICX 7450, and ICX 7750 devices, the IPv4 and IPv6 MTU values are the same. Modifying one also changes the value of the other. • For ICX 7250, ICX 7450, and ICX 7750 devices, the minimum IPv4 and IPv6 MTU values for both physical and virtual interfaces are 1280. • You cannot use IPv6 MTU to set Layer 2 maximum frame sizes per interface. Enabling global jumbo mode causes all interfaces to accept Layer 2 frames. Changing the IPv6 MTU You can configure the IPv6 MTU on individual interfaces. For example, to configure the MTU on Ethernet interface 1/3/1 as 1280 bytes, enter the following commands. device(config)# interface ethernet 1/3/1 device(config-if-e1000-1/3/1)# ipv6 mtu 1280 Syntax: [no] ipv6 mtu bytes For bytes, specify a value between 1280 - 1500, or 1280 - 10218 if jumbo mode is enabled. For ICX 6610 and ICX 6450 devices, you can specify a value between 1280 and 10200.If a non-default value is configured for an interface, router advertisements include an MTU option. ---------- Note: IPv6 MTU cannot be configured globally. It is supported only on devices running Layer 3 software. ----------

How to configure Jumbo frames?

2018-01-18T11:00:37-0800 2018-01-18T12:00:23-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6lCAC?attachment_index=0 2018-01-18T12:00:23-0800 monthly admin,premium knowledge_article_3244 knowledge_article_3244_attachment_1 ka25B000000CcKoQAK_Attachment__c.pdf 4713653.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000Tw6lCAC?attachment_index=1 2018-01-18T12:00:23-0800 monthly admin,premium knowledge_article_3244 knowledge_article_3244_attachment_1 ka25B000000CcKoQAK_Attachment2__c.pdf 4816658.0 application/pdf https://support.ruckuswireless.com/articles/000007477 2018-01-18T11:09:35-0800 monthly 0.8 admin,premium knowledge_article_3242 knowledge_article_3242 2018-01-18T11:09:35-0800 000007477 Validated (External) Premium Icx 7450;RUCKUS ICX 7450 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ICX 7450 Why does the FI device unexpectedly reload when plugging/unplugging phone by LLDP? Upgrade to a version of code that contains the fix.

FI device may unexpectedly reload when plugging/unplugging phone by LLDP.

2018-01-18T11:09:35-0800 2018-01-18T12:00:17-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw5uCAC?attachment_index=0 2018-01-18T12:00:17-0800 monthly admin,premium knowledge_article_3242 knowledge_article_3242_attachment_1 ka25B000000CbsHQAS_Attachment__c.pdf 585005.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000Tw5uCAC?attachment_index=1 2018-01-18T12:00:17-0800 monthly admin,premium knowledge_article_3242 knowledge_article_3242_attachment_1 ka25B000000CbsHQAS_Attachment2__c.pdf 2601951.0 application/pdf https://support.ruckuswireless.com/articles/000007478 2018-01-18T11:10:47-0800 monthly 0.8 admin,premium knowledge_article_3241 knowledge_article_3241 2018-01-18T11:10:47-0800 000007478 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products How do I replace or swap out a chassis? <div>Replacing a Chassis</div> <div>Introduction</div> <div>At some point, perhaps the reader may need to replace an entire chassis. This can be as small as a BigIron RX-4 or FastIron 800 SX to a NetIron XMR 32000 router. The bigger the chassis, the more daunting is the prospect. This article provides a general guideline for de-installing the existing chassis and installing the replacement chassis. The most important components in executing a speedy and successful swap-out are to perform proper planning and to have the appropriate tools, equipment and enough personnel available to safely perform the swap out.</div> <div> The Replacement Process</div> <div>The first step in the process is to gather the following information:</div> <ol><li>Chassis type. </li><li>Quantity, type and placement of management module in use.</li><li>Quantity, type and placement of switch fabric modules in use.</li><li>Quantity, type and placement of line modules in use.</li><li>Firmware to be used on the chassis and modules.</li><li>Software to be placed in the flash memory of the management and line modules.</li><li>Quantity, type and placement of pluggable interface modules in use.</li><li>Quantity, type and placement of fans in use.</li><li>Quantity, type and placement of power supplies in use.</li></ol> <div>If the reader has access to the existing chassis console, the following commands can be run at the command prompt and captured to a log file to obtain the information needed (above).</div> <ol><li>show chassis</li><li>show module</li><li>show firmware</li><li>show flash</li><li>show media</li><li>show interface brief</li><li>show log</li></ol> <div>The contents of the captured log file can be run through one of the following attached macro-enabled Excel work books, to parse the information into readable tabs. Instructions for using the work books are contained within the instruction tab of each work book.</div> <div> SX_Auto_Inventory_Spreadsheet.xlsm RX_Auto_Inventory_Spreadsheet.xlsm MLX_Auto_Inventory_Spreadsheet.xlsm</div> <div>The “Serial_Numbers” tab provides information for items 1 through 4. The “Firmware” tab provides information for item 5. The “Flash” tab provides information for item 6. The “show media” command provides information for item 7. The “show chassis” command provides information for items 8 and 9.</div> <div>In a separate log file, capture the “show running-config” command or TFTP the startup-config from the chassis. This file will be used to configure the replacement switch.</div> <div> The second step in the process, if not already completed, is to:</div> <ul><li>Order the replacement equipment.</li><li>Determine delivery date.</li><li>Determine staging and burn-in dates.</li><li>Obtain a maintenance window to perform the swap-out.</li><li>Allocate appropriate manpower, tools and equipment.</li><li>Verify that all cables are labeled as to which slot/port each cable is plugged into. If not labeled, label them.</li></ul> <div>Determining the appropriate manpower, tools and equipment will be determined by the size and weight of the chassis being replaced. The reader should consider having some type of forklift or lifting equipment for SX-800 chassis and larger. The installation guide should have information regarding the tools and equipment needed to install the chassis properly.</div> <div> The third step in the process is to stage the replacement chassis:</div> <ul><li>Move all replacement components to the staging area.</li><li>Unpack the chassis and place it in a position for easy access.</li><li>Remove the cover plates for slots that will hold a module.</li><li>Place all unpacked modules within easy reach of the chassis.</li><li>Without installing any power supplies in the chassis, plug the AC cord into a grounded outlet (this will ground the chassis).</li><li>Put on the grounding wrist strap and plug it into the chassis. (When using a “throw-away” wrist strap) remove an extra slot cover, wrap the strap around your wrist, and stick the other end on the exposed metal inside the chassis.</li><li>Follow the instructions in the installation guide for installing a module (SFM, MP and LP) in the chassis. Use the information gathered in Step One as a map for placing modules into the replacement chassis. The “Serial_Numbers” tab in the audit spreadsheet can provide this information.</li><li>Follow the instructions in the installation guide for installing the power supplies into the chassis (this will power up chassis).</li><li>Follow the instructions in the installation guide for installing media adapters in line card ports. The “show media” command from above can be used as a map to ensure that the correct media adapter is inserted into the proper port of a line card. If the media adapters from the original chassis are to be reused, then this step can be deferred.</li><li>Save the packaging material and shipping pallet for shipping the original chassis and modules back to Brocade.</li><li>Follow the instructions in the installation guide for verifying proper operation of the chassis.</li><li>Follow the instructions in the release notes for upgrading the software, boot code monitor and FPGA code using TFTP. (Read the KB note “Running TFTP on Laptop.”)</li><li>TFTP the saved running-config to the replacement chassis</li><li>If possible, allow the chassis to burn in for at least 24 hours.</li><li>Follow the instructions in the installation guide for verifying proper operation of the chassis.</li></ul> <div>Repeat the information-gathering steps as defined in Step 1 and use a comparison program (i.e. ExamDiff) to verify that:</div> <ol><li>Line cards are in correct slots.</li><li>Media adapters are in correct slot/ports.</li><li>Software has been updated to the desired revision level.</li></ol> <div>Allow scheduled time for burn-in. During the burn-in process, verify that all cables are labeled as to which slot/port each cable is plugged into. If not labeled, then label them. After burn-in is completed, follow the instructions in the installation guide for shutting down the replacement chassis. Using the appropriate manpower or equipment, move the replacement chassis to the production area.</div> <div> The next step in the process is the removal of the current chassis and installing the replacement:</div> <ul><li>Follow the instructions in the installation guide for shutting down the original chassis. In general, the following steps are used:</li><li>Power down each line card.</li><li>Power down each switch fabric module.</li><li>Unplug AC power supplies or turn off DC circuit breakers and disconnect DC power supplies.</li><li>Remove AC power cords or disconnect DC power connections.</li><li>Unplug media cables from each slot/port starting with 1/1. (If possible, you may want to group the media cables into bundles of 12.)</li><li>If reusing media adapters, remove the media adapter from its current slot/port and install it in the corresponding slot in the replacement chassis. Follow the instructions in the installation guide for removing and installing media adapters in line card ports.</li><li>Using the appropriate equipment or sufficient manpower, remove the original chassis from the rack. Follow the instructions in the installation guide for de-installing the original chassis.</li><li>Using the appropriate equipment or sufficient manpower, install the replacement chassis in the rack.</li><li>Plug in AC power supplies or reconnect DC power connections and turn on DC power breakers.</li><li>Plug in media cables starting with port 1/1.</li><li>Follow the instructions in the installation guide for verifying proper operation of the chassis.</li><li>After the replacement is up and running, have the client perform any operation verifications they need to run. Once the client has verified normal operations, the original chassis can be prepared for RMA shipping.</li></ul> <div>The final step in the process is the packing and shipping of the original chassis and modules:</div> <ul><li>Using the appropriate manpower or equipment, move the original chassis from the production area to the staging area.</li><li>Follow the instructions in the installation guide for removing and installing line cards in the chassis and place the removed module in a static bag and repackage it in the line card shipping box (always wear a static strap). The “Serial_Numbers” tab provides the shipping list information needed.</li><li>Remove the power supplies and repackage. You will need to manually record the power supply serial numbers for the shipping list.</li><li>Brocade Technical Support may request that the chassis be sent back with current configuration unchanged. That is, the modules and power supplies have not been removed from the chassis.</li><li>Repackage the original chassis in the replacement chassis packaging.</li><li>Affix RMA shipping labels to the packages. Brocade Technical Support will provide RMA shipping labels.</li></ul> <div>Other Considerations:</div> <div>When moving a chassis, you can reduce weight by removing the power supplies and installing them later.</div>

Replacing or swapping out a chassis

2018-01-18T11:10:47-0800 2018-01-18T12:00:15-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw5vCAC?attachment_index=0 2018-01-18T12:00:15-0800 monthly admin,premium knowledge_article_3241 knowledge_article_3241_attachment_1 ka25B000000Cbt0QAC_Attachment__c.docx 118379.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000007472 2018-01-18T11:14:41-0800 monthly 0.8 admin,premium knowledge_article_3240 knowledge_article_3240 2018-01-18T11:14:41-0800 000007472 Validated (External) Premium Brocade eos products System network management;Troubleshooting System Network Management, Troubleshooting, Brocade EOS Products What is the data collection needed for Brocade to troubleshoot MCT issues? MCT Root cause Investigation Outputs to gather for MCT issues that we do not have root cause for: Outputs: show cluster show cluster <cluster #> show tech cluster show lag show cluster client *Please download and check the Brocade FastIron Command Reference guide if you need more details of the outputs that we recommended above*

Outputs to gather for MCT issues where we do not have a root cause identified.

2018-01-18T11:14:41-0800 2018-01-18T12:00:12-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw5nCAC?attachment_index=0 2018-01-18T12:00:12-0800 monthly admin,premium knowledge_article_3240 knowledge_article_3240_attachment_1 ka25B000000CbuDQAS_Attachment__c.pdf 4780737.0 application/pdf https://support.ruckuswireless.com/articles/000007520 2018-01-18T11:44:21-0800 monthly 0.8 admin,premium knowledge_article_3239 knowledge_article_3239 2018-01-18T11:44:21-0800 000007520 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure default ports on FCX or ICX devices? Configuring default ports on FCX or ICX devices FCX and ICX stackable devices typically ship with two default stacking ports configured. Use the stack-port command if you want to select only one of these factory default ports as the stacking port. If you do not configure stack-port, both default ports will operate as stacking ports. Use the "default-ports" command to designate ports other than the factory default ports as stacking ports. You must designate any additional potential stacking ports using the "default-ports" command on each unit that will be included in the stack before building a stack. Once you have designated these ports using the "default-ports" command on all units, you can use any construction method to build a stack. The active controller then learns the port configuration for each unit. ---------- Note: You cannot change the setting for a default port if the port is in use. ---------- Note: On FCX devices, a shorter 4-byte Ethernet preamble for the Ethernet frame is used when a port is configured as a default stacking port. For non-default ports, the standard 8-byte Ethernet preamble is used. ---------- To use a default stacking port as a regular data port, the standard 8-byte Ethernet preamble must be explicitly enabled on the port using the long-preamble command. *Additional information related with this Article can be found in the Article#5769*

Configuring default ports on FCX or ICX devices

2018-01-18T11:44:21-0800 2018-01-18T12:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6fCAC?attachment_index=0 2018-01-18T12:00:09-0800 monthly admin,premium knowledge_article_3239 knowledge_article_3239_attachment_1 ka25B000000CbIJQA0_Attachment__c.pdf 3941979.0 application/pdf https://support.ruckuswireless.com/articles/000007330 2018-01-17T10:08:09-0800 monthly 0.8 admin,premium knowledge_article_2933 knowledge_article_2933 2017-12-12T14:36:06-0800 000007330 Validated (External) Premium Icx 7450;RUCKUS ICX 7450 Campus Switches Configuration Configuration, ICX 7450 ICX 7450-32ZP Description And Technical Specifications <ul><li>The ICX 7450-32ZP offers 24 1G ports, 1 GbE RJ-45 ports 1/1/1 through 1/1/24 and 2.5 GbE RJ-45 ports 1/1/25 through 1/1/32, providing POE support as well.</li><li>The ICX7400-1X40GQ module cannot be installed in the front-facing slot of the 48-port ICX 7450 models (Brocade ICX 7450-48, 7450-48P, 7450-48F, 7450-32ZP).</li><li>The Brocade ICX7400-4X1GF module cannot be installed in the rear slots of any model of the Brocade ICX 7450 Switch and is not supported by the Brocade ICX 7450-32ZP model.</li><li>ICX 7450-32ZP model was introduced with the FastIron 08.0.40 OS version, unlike the rest of the ICX7450 models, the ICX 7450-32ZP is not supposed to run any previous version of the 08.0.40 OS.</li></ul> <table border="1" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1">New devices 0.80.40 Product name</td><td colspan="1" rowspan="1"> ICX 7450-32ZP</td></tr><tr><td colspan="1" rowspan="1">Description</td><td colspan="1" rowspan="1">2.5 GbE switch for the Brocade ICX 7450 product family </td></tr><tr><td colspan="1" rowspan="1">Product features</td><td colspan="1" rowspan="1">The Brocade ICX 7450-32ZP switches offer the following features: ? 24x10/100/1000 Mbps RJ-45 PoE+ ports ? 8x100 Mbps/1000 Mbps/2.5 GbE RJ-45 PoE+ ports with eight pre-assigned ports supporting PoH (95 W) </td></tr></tbody></table> <img alt="User-added image" height="342" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty17&feoid=00N50000002Cf3M&refid=0EM50000000XSYi" width="500"></img> The ICX7400-1X40GQ and The ICX7400-4X1GF are expansion modules, that would only go into slot 3 and 4 in the rear. Since no break out is supported for ICX7400-1X40GQ, table 2 cited, specify 4x10G is not supported even in slot 3, and/or 4 when used for uplink and/or stacking.

ICX 7450-32ZP Description And Technical Specifications

2018-01-17T10:08:09-0800 2018-01-17T12:00:12-0800 https://support.ruckuswireless.com/articles/000007329 2018-01-17T10:38:10-0800 monthly 0.8 admin,premium knowledge_article_2935 knowledge_article_2935 2017-12-12T14:36:06-0800 000007329 Validated (External) Premium Ruckus icx switches Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches Why is Stack not ready for hitless-failover? Use the stack secure-setup command to automatically form a correctly connected stack.

The stack comes back without the Active controller.

2018-01-17T10:38:10-0800 2018-01-17T12:00:09-0800 https://support.ruckuswireless.com/articles/000007332 2018-01-17T10:48:04-0800 monthly 0.8 admin,premium knowledge_article_2934 knowledge_article_2934 2017-12-12T14:36:06-0800 000007332 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches How to use Telnet to test open ports? You can check if a port is open on a device by issuing the telnet command. If it is open, you will see a blank screen after issuing the command: telnet [domainname or ip] [port] <ul><li>[domainname or ip] is the domain name or IP address of the server to which you are trying to connect</li><li>[port] is the port number where the server is listening</li></ul> If the port is open, you will see a blank screen. This means that the connection is successful. If the port is closed, you will receive a Connect failed message. Example: <img alt="User-added image" height="250" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty1R&feoid=00N50000002Cf3M&refid=0EM50000000XSd4" width="500"></img> <img alt="User-added image" height="253" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty1R&feoid=00N50000002Cf3M&refid=0EM50000000XSdJ" width="500"></img> <img alt="User-added image" height="252" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty1R&feoid=00N50000002Cf3M&refid=0EM50000000XSdO" width="500"></img> <img alt="User-added image" height="250" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty1R&feoid=00N50000002Cf3M&refid=0EM50000000XSdd" width="500"></img>

How to use Telnet to test open ports?

2018-01-17T10:48:04-0800 2018-01-17T12:00:07-0800 https://support.ruckuswireless.com/articles/000007310 2018-01-16T14:19:56-0800 monthly 0.8 admin,premium knowledge_article_2947 knowledge_article_2947 2017-12-12T14:36:00-0800 000007310 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches How to configure, verify and troubleshoot MACSec / 802.1AE? Q. What is MACSEC / 802.1AE? Answer. 802.1AE is the IEEE MAC Security standard (also known as MACsec) which defines connectionless data confidentiality and integrity for media access independent protocols. <ul><li>It is standardized by the IEEE 802.1 working group. Many vendor have adopted this to integrate this feature into the LAN switching products.</li><li>In the layer 3 world we have protocols such as GRE to encrypt layer 3 headers however IPSec only protects layers 3 header so all layer 2 vulnerabilities such as rouge DHCP, ARP spoofing exists and MACSEC is designed to cater similar needs to the layer 2 Ethernet frame.</li><li>The goal of MACsec is to prevent Layer 2 security threats, such as passive wiretapping, denial of service, intrusion, man-in-the-middle, and playback attacks.</li></ul> Q. How does MACSec work? Answer. MACsec capabilities prevent Layer 2 security threats, such as passive wiretapping, denial of service, intrusion, man-in-the-middle, and playback attacks. MACSec aims is to provide Encryption/Description, Integrity protection and replay protection. MACsec protects communications using several configurable techniques. Data origin is authenticated and data is transported over secured channels. Frames are validated as MACsec Ethernet frames. The integrity of frame content is verified on receipt. Frame sequence is monitored using an independent replay protection counter. Invalid frames are discarded or monitored. Data traffic carried within the MACsec frame is encrypted and decrypted using an industry-standard cipher suite. All traffic is controlled on an active MACsec port; that is, data is encrypted, or its integrity is protected, or both. If a MACsec session cannot be secured, all data and control traffic is dropped. When MACsec is active on a port, the port blocks the flow of data traffic. Data traffic is not forwarded by the port until a MACsec session is secured. If an ongoing session is torn down, traffic on the port is again blocked until a new secure session is established. Control traffic (such as STP, LACP, or UDLD traffic) is not transmitted by an active MACsec port until a MACsec session is secured. While a session is being established, only 802.1x protocol packets are transmitted from the port. Once a secure session is established, control traffic flows normally through the port. When two MACsec peers confirm possession of a shared CAK and CKN, MKA protocol initiates key-server election. The key-server is responsible for determining whether MACsec encryption is used and what cipher suite is used to encrypt data. The key-server is also responsible for generating Secure Association Keys (SAKs) and distributing them to the connected device. Once a SAK is successfully installed, the two devices can exchange secure data. The following figure shows the message flow between two switches during MACsec communication. <img alt="User-added image" height="255" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0n&feoid=00N50000002Cf3M&refid=0EM50000000XRht" width="500"></img> Communication on each secure channel takes place as a series of transient sessions called secure associations. These sessions can only be established with a unique Secure Association Key (SAK) assigned to the session. Secure associations expire and must be re-established after transmission of a certain number of frames, or after a peer disconnects and reconnects. The secure association is designated by a Secure Association Identifier (SAI), formed from the Secure Channel Identifier (SCI) combined with an Association Number (AN). When a MACsec frame is received by a peer interface, the Brocade device identifies the session key by mapping to the default SCI configured and uses the key to decrypt and authenticate the received frame. Q. What are the components of a MACSEC frame and once MACSec is enabled how will the Ethernet frame look? Answer. MACsec frame format, which is similar to the Ethernet frame, but includes additional fields: <ul><li>Security Tag, which is an extension of the EtherType</li><li>Message authentication code (ICV)</li></ul> Secure Connectivity Associations that represent groups of stations connected via unidirectional Secure Channels Security Associations within each secure channel. Each association uses its own key (SAK). More than one association is permitted within the channel for the purpose of key change without traffic interruption (standard requires devices to support at least two) A default cipher suite of GCM-AES-128 (Galois/Counter Mode of Advanced Encryption Standard cipher with 128-bit key) GCM-AES-256 using a 256 bit key was added to the standard 5 years later. Security tag inside each frame in addition to EtherType includes: Association number within the channel Packet: number to provide unique initialization vector for encryption and authentication algorithms as well as protection against replay attack Optional: LAN-wide secure channel identifier (not required on point-to-point links) <img alt="User-added image" height="374" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0n&feoid=00N50000002Cf3M&refid=0EM50000000XRhy" width="500"></img> Q. How to configure MACSec? Answer. MACSec is generally used for any un-secure/ un-trusted Metro Ethernet connections which connects two different Data Centers or Campus Networks. Let us take the following example: <img alt="User-added image" height="49" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0n&feoid=00N50000002Cf3M&refid=0EM50000000XRi8" width="500"></img> Step 1: Enable DOT1X-MKA (MACSec Key agreement protocol) ICX-NODE-1# conf t ICX-NODE-1(config)# dot1x-mka-enable ICX-NODE-1(config-dot1x-mka)# Step 2: Define a MKA-group and related parameters: Define a MKA-group. You can have number of groups based on priority each group will be negotiated for form MACSec peering. In this example for simplicity we define one group “MSEC1” and we configure the priority as 50, cipher suite as GCM-AES-128, we enabled validation: ICX-NODE-1(config-dot1x-mka)# mka-cfg-group MSEC1 ICX-NODE-1(config-dot1x-mka-group-MSEC1)# key-server-priority 50 ICX-NODE-1(config-dot1x-mka-group-MSEC1)# macsec cipher-suite gcm-aes-128 >> For now only 128 bit encryption only in future there would be 265 bit support ICX-NODE-1(config-dot1x-mka-group-MSEC1)# macsec frame-validation check or disable or strict >> You can either enable frame-validation, if enabled with only check option frames without secTAG is also allowed however with strict mode frames without secTAG are discarded. ICX-NODE-1(config-dot1x-mka-group-MSEC1)# macsec replay-protection (disable | out-of-order | strict) Disable = No check for sequence of frames arrived Out-of-order = Validate MACsec frames arrive in given window size Strict = Validate MACsec frames arrive in a sequence Step 3: Define the interface participating in MACsec encryption and the associated group: enable-mka Ethernet stack ID / module number / port number ICX-NODE-1(config-dot1x-mka)# enable-mka ethernet 1/2/1 ICX-NODE-1(config-dot1x-mka)# mka-cfg-group MSEC1 Step 4: Define port to group mapping, pre-share key and key name for GCM-AEC-128 cipher suit: ICX-NODE-1(config-dot1x-mka-1/2/1)# pre-shared-key <32 hex digits> key-name <2 to 64 HEX digits> Example : ICX-NODE-1(config-dot1x-mka-1/2/1)# pre-shared-key abccba98765432102002101120011011 key-name 40011012 Once the above 4 steps are done, ensure similar complementary configuration is done on the B-End device ICX-NODE-2 as well. Q. How to verify MACSec / 802.1AE? Answer. You can use the following commands to verify : show dot1x-mka sessions show dot1x-mka sessions brief show dot1x-statistics Ethernet <stack id / module number / port number > For Example: ICX-NODE-1# show dot1x-mka sessions brief Port Link-Status MKA-Status Key-Server Negotiated Capability 1/2/1 Up Secured No Integrity, Confidentiality ICX-NODE-2# show dot1x-mka sessions brief Port Link-Status MKA-Status Key-Server Negotiated Capability 1/2/1 Up Secured Yes Integrity, Confidentiality ICX-NODE-1# show macsec statistics ethernet 1/2/1 Interface Statistics: --------------------- rx Untag Pkts : 1 tx Untag Pkts : 0 rx Notag Pkts : 0 tx TooLong Pkts : 0 rx Badtag Pkts : 0 rx Unknownsci Pkts : 0 rx Nosci Pkts : 0 rx Overrun Pkts : 0 Transmit Secure Channels: ------------------------- SA[0] Statistics: Protected Pkts : 0 Encrypted Pkts : 42588 SA[1] Statistics: Protected Pkts : 0 Encrypted Pkts : 0 SA[2] Statistics: Protected Pkts : 0 Encrypted Pkts : 0 SA[3] Statistics: Protected Pkts : 0 Encrypted Pkts : 0 SC Statistics: Protected Octets : 0 Encrypted Octets : 6189816 Protected Pkts : 0 Encrypted Pkts : 42588 Receive Secure Channels: ------------------------ SA[0] Statistics: Ok Pkts : 1126938 Invalid Pkts : 0 Not using SA Pkts : 0 Unused Pkts : 0 Not Valid Pkts : 0 SA[1] Statistics: Ok Pkts : 0 Invalid Pkts : 0 Not using SA Pkts : 0 Unused Pkts : 0 Not Valid Pkts : 0 SA[2] Statistics: Ok Pkts : 0 Invalid Pkts : 0 Not using SA Pkts : 0 Unused Pkts : 0 Not Valid Pkts : 0 SA[3] Statistics: Ok Pkts : 0 Invalid Pkts : 0 Not using SA Pkts : 0 Unused Pkts : 0 Not Valid Pkts : 0 SC Statistics: OkPkts : 1126938 Invalid Pkts : 0 Not using SA Pkts : 0 Unused Pkts : 0 Not Valid Pkts : 0 Unchecked Pkts : 0 Delayed Pkts : 0 Late Pkts : 0 Valid Octets : 0 Decrypted Octets : 62645750 Q. How to troubleshoot MACSec / 802.1AE? Answer. <ul><li>Most MACSec issues are caused by mis-configuration, ensure Pre-share key, key-names matches on both sides of the link.</li><li>Ensure MACSec license is installed, if there is no license MACSec will not work.</li><li>Ensure the service provider allows the required support of MTU, as MACsec introduces an additional transit delay, due to the increase in the MAC Service Data Unit (MSDU) size.</li><li>Also worth debuging using the following commands:</li></ul> debug dot1x-mka events debug dot1x-mka packets debug dot1x-mka state show who debug destination <target telnet / ssh / console session> Q. What are the supported Brocade Products, License requirement and Interoperability with MACSec ? Answer. It is always recommended to read the Release Notes before any upgrade or downgrade decisions, MACsec key-enabled security can be deployed on a point-to-point LAN between two connected Brocade ICX 6610 or ICX 7450 devices over interfaces that share a preconfigured static key, the Connectivity Association Key (CAK). On a licensed Brocade ICX 6610 or ICX 7450 switch, 10 Gbps ports can be configured for MACsec. Licenses are available per device. MACSec license (ICX-MACSEC-LIC) is required. MACSec is currently not supported on FCX, ICX 6430, ICX 6450, ICX 6650, ICX 7250, ICX 7750 & FX 800/1600. There would be future consideration to support and consideration also to encrypt VXVLAN for cloud environments. ---------- Note: On the ICX 6610, MACsec is available on eight 10-Gbps ports on slot 3. On the ICX 7450, MACsec is available only on 4x10GF modules present in slots 2, 3, or 4. ---------- Note: MACsec on ICX devices can interoperate with MACsec on MLXE devices. MACSec is supported from FastIron release 08020 on-wards and it is recommended to review the release notes to confirm the supported feature before you choose to upgrade or downgrade. ---------- Once you have the obtained the required MACSec license you can simple install using a SCP or TFTP server for example: ICX# copy tftp license <license file>.xml c:\scp c:\license\license101 admin@10.1.1.1:license ICX# sh license Index Lic Mode Lic Name Lid/Serial No Lic Type Status Lic Period Lic Capacity Stack unit 1: 1 Non-Node Lock ICX7450-PREM-LIC-SW SU0A82616A8 Normal Active Unlimited 1 2 Node Lock ICX-MACSEC-LIC easIIJLmFFO Normal Active Unlimited 1 ---------- Note: MACSec uses MKA [MACsec Key Agreement protocol], defined as part of the IEEE 802.1x-2010 standard hence a valid license is required to use this feature otherwise MACSec will not work and you will get the following error: ICX(config-dot1x-mka-group-Hathumar-GS101)# enable-mka ethernet 1/1/1 Error: No MACsec License available for the port 1/1/1. Cannot enable MACsec !!! ---------- The ICX MACSec license key is classified as a restricted encryption item and may be provided ONLY to customers located in the following ENC Favorable Countries: the European Union (28 countries) + Australia, Canada, Iceland, Japan, New Zealand, Norway, Switzerland, Turkey. Brocade is required to obtain an export license when this license key is provided to certain entities not located in the countries listed above. If the license key is to be provided to customers located outside of the ENC Favorable Countries, please contact Global Trade at globaltrade@brocade.com with the customer name and address for export compliance verification. Other vendors such as Cisco uses Security Association Protocol(SAP) and Cisco TrustSec Network Device Admission Control(NDAC) for switch-to-switch MACSec connections and MKA MACSec encryption only for switch-to-host connections. Juniper uses Static CAK(Connection Authentication Key) and static SAK(Secure association key) and hence does not use DOT1X-MKA. Since Brocade supports only switch-to-switch and uses DOT1X-MKA using GCE-AES-128 it is not interoperable with non-Brocade switches at the moment. In Brocade devices for switch-to-host we have other options such as Flex authentication which supports DOT1X and mac-authentication.

How to configure, verify and troubleshoot MACSec / 802.1AE?

2018-01-16T14:19:56-0800 2018-01-16T18:00:16-0800 https://support.ruckuswireless.com/articles/000007512 2018-01-16T14:24:16-0800 monthly 0.8 admin,premium knowledge_article_3236 knowledge_article_3236 2018-01-16T14:24:16-0800 000007512 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure Multicast snooping over MCT? Layer 2 multicast snooping over MCT To support multicast snooping over MCT, the ICL port uses MDUP to synchronize the following information between the cluster devices: • MAC-forward entries (mcache entries on MCT VLAN) • IGMP/MLD Join/Leave (control packets on MCT VLAN) • PIM-SM/PIM6-SM Join/Prune (control packets on MCT VLAN) • IGMP/MLD dynamic router ports on MCT VLAN IGMP/MLD Snooping Snooping can be configured globally or at the VLAN level. Each cluster device in the MCT VLAN can be configured as active or passive. There is no restriction for cluster devices to run active-active or passive-passive configurations. Multicast snooping configuration example The following figure depicts a multicast snooping configuration. Sample configurations follow. FIGURE A - Multicast snooping over MCT <img alt="User-added image" height="467" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txjp&feoid=00N50000002Cf3M&refid=0EM50000000XRkT" width="500"></img> The following example shows the configuration for multicast snooping for the MCT1 cluster device in the previous figure. vlan 100 by port tagged ethe 7/3 untagged ethe 7/5 ethe 7/6 multicast passive multicast pimsm-snooping multicast6 passive multicast6 pimsm-snooping ! vlan 3000 name session by port tagged ethe 7/3 router-interface ve 3000 vlan 3001 name keep-alive-vlan tagged eth 7/4 interface ve 3000 ip address 10.1.1.2 255.255.255.0 ! cluster SX 3000 rbridge-id 2 session-vlan 3000 keep-alive-vlan 3001 icl SX-MCT ethernet 7/3 peer 10.1.1.3 rbridge-id 3 icl SX-MCT deploy client client-1 rbridge-id 100 client-interface ethernet 7/5 deploy ! The following example shows the configuration for multicast snooping for the MCT2 cluster device in Figure A . ! vlan 100 by port tagged ethe 3/3 untagged ethe 3/7 ethe 3/8 multicast passive multicast pimsm-snooping multicast6 passive multicast6 pimsm-snooping ! vlan 3000 name session by port tagged ethe 3/3 router-interface ve 3000 vlan 3001 name keep-alive-vlan tagged eth 3/4 interface ve 3000 ip address 10.1.1.3 255.255.255.0 ! cluster SX 3000 rbridge-id 3 session-vlan 3000 keep-alive-vlan 3001 icl SX-MCT ethernet 3/3 peer 10.1.1.2 rbridge-id 2 icl SX-MCT deploy client client-1 rbridge-id 100 client-interface ethernet 3/7 deploy ! The following example shows the global configuration for multicast snooping for the MCT1 cluster device in Figure A . vlan 100 by port tagged ethe 7/3 untagged ethe 7/5 ethe 7/6 ! vlan 3000 name session by port tagged ethe 7/3 router-interface ve 3000 vlan 3001 name keep-alive-vlan tagged eth 7/4 ip multicast active interface ve 3000 ip address 10.1.1.2 255.255.255.0 ! cluster SX 3000 rbridge-id 2 session-vlan 3000 keep-alive-vlan 3001 icl SX-MCT ethernet 7/3 peer 10.1.1.3 rbridge-id 3 icl SX-MCT deploy client client-1 rbridge-id 100 client-interface ethernet 7/5 deploy ! The following example shows the global configuration for multicast snooping for the MCT2 cluster device in Figure A . ! vlan 100 by port tagged ethe 3/3 untagged ethe 3/7 ethe 3/8 ! vlan 3000 name session by port tagged ethe 3/3 router-interface ve 3000 vlan 3001 name keep-alive-vlan tagged eth 3/4 ip multicast passive interface ve 3000 ip address 10.1.1.3 255.255.255.0 ! cluster SX 3000 rbridge-id 3 session-vlan 3000 keep-alive-vlan 3001 icl SX-MCT ethernet 3/3 peer 10.1.1.2 rbridge-id 2 icl SX-MCT deploy client client-1 rbridge-id 100 client-interface ethernet 3/7 deploy

How to configure Multicast snooping over MCT?

2018-01-16T14:24:16-0800 2018-01-16T18:00:13-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6XCAS?attachment_index=0 2018-01-16T18:00:13-0800 monthly admin,premium knowledge_article_3236 knowledge_article_3236_attachment_1 ka25B000000CbOHQA0_Attachment__c.pdf 5072835.0 application/pdf https://support.ruckuswireless.com/articles/000007305 2018-01-16T14:31:49-0800 monthly 0.8 admin,premium knowledge_article_2944 knowledge_article_2944 2017-12-12T14:36:00-0800 000007305 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What is the best practice for Code Management on FastIron devices? Code Management - FastIron Devices <img alt="User-added image" height="242" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0s&feoid=00N50000002Cf3M&refid=0EM50000000XRll" width="500"></img> ---------- Note: The primary and secondary codes refer to the IronView base OS and application functionality. The BootROM code refers to the Boot Image that provides the Bootstrap functionality. The configuration shown above is not to be considered a best practice, and only reflects the lab environment. In production, both partitions should contain the same image. Configuration files are also stored in both the primary and secondary flash partitions. ---------- Note: Only one is accessible by the user. The second is for system reliability and uses a checksum. If the checksum is not valid, the system will use the second copy. ---------- Identifying Code Versions <img alt="User-added image" height="168" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0s&feoid=00N50000002Cf3M&refid=0EM50000000XRlq" width="500"></img> ---------- Note: ?show version . Lists software, hardware and firmware details for a Brocade device. ---------- Code Management continued..... <img alt="User-added image" height="266" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0s&feoid=00N50000002Cf3M&refid=0EM50000000XRlv" width="500"></img>

Code Management - FastIron devices

2018-01-16T14:31:49-0800 2018-01-16T18:00:11-0800 https://support.ruckuswireless.com/articles/000007227 2018-01-16T10:22:06-0800 monthly 0.8 admin,premium knowledge_article_2943 knowledge_article_2943 2017-12-12T14:36:00-0800 000007227 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How to configure stateful inspection on 5.x? New Policy Creation Configuration Example: <div> <div> <div>1) CLI Firewall Policy Configuration </div> <div>rfs4000# conf t</div> <div>rfs4000(config)# firewall-policy test-fw-policy</div> <div>rfs4000(config-fw-policy-test-fw-policy)# commit 2) Firewall Policy Defaults <div>rfs4k-home(config-fw-policy-test-fw-policy)# show context include-factory</div> <div>firewall-policy test-fw-policy</div> <div>ip dos smurf log-and-drop log-level warnings</div> <div>ip dos twinge log-and-drop log-level warnings</div> <div>..</div> <div>(output removed for brevity)</div> <div>..</div> <div>flow timeout tcp stateless-fin-or-reset 10</div> <div>flow timeout other 30</div> <div>no dhcp-offer-convert</div> <div>proxy-arp</div> <div>firewall enable</div> <div>stateful-packet-inspection-l2</div> <div>flow dhcp stateful</div> <div>alg ftp</div> <div>alg tftp</div> <div>alg sip</div> <div>alg dns</div> <div>no logging icmp-packet-drop</div> <div>no logging malformed-packet-drop</div> <div>no logging verbose</div> <div>no ip tcp adjust-mss</div> <div>clamp tcp-mss</div> <div>virtual-defragmentation</div> <div>virtual-defragmentation maximum-fragments-per-datagram 140</div> <div>virtual-defragmentation maximum-defragmentation-per-host 8</div> <div>dns-snoop entry-timeout 1800</div> <div>no 802.2-encapsulation</div> <div>no vlan-stacking</div> <div>dns-snoop drop-on-parserror</div> <div>rfs4k-home(config-fw-policy-test-fw-policy)# <div>The firewall policy is then applied to the profile of devices for which it was created. </div> <div>3) CLI Firewall Policy Configuration </div> <div>rfs4000(config)# profile ap650 default-ap650</div> <div>rfs4000(config-profile-default-ap650)# use firewall-policy test-fw-policy</div> <div>rfs4k-home(config-profile-default-ap650)# commit</div> </div> Stateful Inspection IP Rules and Configuration Example: The firewall rules can be assigned to: Physical ports– inbound Logical interfaces – inbound WLAN’s – inbound and outbound Wireless clients <img alt="User-added image" height="198" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0E&feoid=00N50000002Cf3M&refid=0EM50000000XRED" width="500"></img></div> </div> <div> <div> <div>Configuration Example: Branch Location IP Rules </div> <div>The first scenario is that of a branch location for a company that wishes to keep all WLAN traffic local to the site. WLAN users cannot get to any other destination that is not a local address, either on the WLAN or LAN. This will be accomplished using a simple IP access-list that allows traffic from the WLAN to local network destinations; however, it will block any WLAN IP traffic that is destined for any other destination that is not a local address. </div> <div>The branch utilizes an AP7131, which is adopted over layer-3 to a centralized controller at Corporate. A custom hardware profile has been created for the site for the AP7131s. Also, a WLAN called “branch1” has been created and is in use at the branch location. We must consider the following: The RFS switch is the DHCP server to the branch location networks WLAN users will need to obtain IP addresses; WLAN users can communicate via IP to local addresses (192.168.10.0 and 192.168.20.0) and WLAN users cannot get to any other destinations. <img alt="User-added image" height="591" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0E&feoid=00N50000002Cf3M&refid=0EM50000000XREI" width="500"></img> </div> <div>Configuration and Propagation</div> <div> Since the AP7131 is adopted to a centralized controller, we will modify our master configuration; focusing on our branch firewall rules and profile changes so that the configuration will be pushed to the remote device. We will cover configuration at the CLI level. </div> <div> <div>1) IP ACL Configuration </div> <div>rfs4000# conf t</div> <div>rfs4000(config)# ip access-list vlan64-external-deny</div> <div>rfs4000(config-ip-acl-WLAN-deny)# permit udp any any eq dhcps rule-precedence 5</div> <div>rfs4000(config-ip-acl-WLAN-deny)# permit ip 192.168.20.0/24 192.168.10.0/24 ruleWiNG precedence 10</div> <div>rfs4000(config-ip-acl-WLAN-deny)# permit ip 192.168.20.0/24 192.168.20.0/24 rule-precedence 15</div> <div>rfs4000(config-ip-acl-WLAN-deny)# deny ip any any log rule-precedence 20 2) CLI IP ACL Application </div> <div>rfs4000(config)# wlan vlan64-wlan</div> <div>rfs4000(config-wlan-branch1)# use ip-access-list in vlan64-external-deny</div> <div>rfs4000(config-wlan-branch1)exit <div>To see the statistics for our firewall rule, we must go to the access-point(s), as we have applied the firewall rule inbound on the WLAN; if we attempt to view statistics at the controller, there will not be any for this particular rule. Connect to an access-point where clients are associated and view the stats:</div> <div> </div> <div>ap650# show ip-access-list-stats vlan64-external-deny</div> <div>IP Access-list: vlan64-external-deny</div> <div>permit udp any any eq dhcps log rule-precedence 5 rule-description permits Hitcount: 0 permit ip 192.168.150.64/26 192.168.150.0/26 log rule-precedence 10 Hitcount: 2 permit ip 192.168.150.64/26 192.168.150.64/26 log rule-precedence 15 Hitcount: 3 deny ip any any log rule-precedence 20 Hitcount: 269 Stateful Inspection MAC Rules and Configuration Example: MAC firewall rules can be applied to the following types of interfaces: </div> </div> <div>Inbound on Physical ports (Ge1., Ge2., etc.) Inbound or Outbound on WLANs <img alt="User-added image" height="201" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0E&feoid=00N50000002Cf3M&refid=0EM50000000XREX" width="500"></img> Continuing with our example from above, our company now wishes to further control VLAN 64 and the associated WLAN by ensuring only certain client types gain access. This can be accomplished with a simple MAC address mask. <div>1) Configuration and Propagation</div> <div> </div> <div>rfs4000# conf t</div> <div>rfs4000(config)# mac access-list scanner-l2-rules rfs4000(config-mac-acl-scanner-l2-rules)# permit 00-A0-F8-00-00-00 FF-FF-FF-00-00-00 any vlan 64 log rule-precedence 10</div> <div>rfs4000(config-mac-acl-scanner-l2-rules)# deny any any vlan 64 log rule-precedence 12 2) CLI MAC ACL Application </div> <div>rfs4000(config)# wlan vlan64-wlan</div> <div>rfs4000(config-wlan-vlan64-wlan)# use mac-access-list in scanner-l2-rules</div> <div>rfs4000(config-wlan-branch1)exit</div> <div>rfs4000(config)#c ommit </div> <div>As seen in the configuration, it is a rather simple concept in this example. We are allowing only devices with mac-address starting in “00-A0-F8” to connect to the scanner WLAN. Of course, we could also specify metrics based on destination protocol (IP, ARP, etc.) if so desired. You now have a WLAN that will allow a specific device type, based on vendor OUI of the MAC address and the specified VLAN.</div> </div> </div> </div> </div> </div>

How to configure stateful inspection on 5.x?

2018-01-16T10:22:06-0800 2018-01-16T12:00:22-0800 https://support.ruckuswireless.com/articles/000007221 2018-01-16T10:29:00-0800 monthly 0.8 admin,premium knowledge_article_2838 knowledge_article_2838 2017-12-12T15:45:08-0800 000007221 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers How to configure Static NAT on RFS controllers using the web GUI? The following configuration example will demonstrate how to enable static NAT to provide port forwarding for specific ports using the Web interface. In this example, the Management vlan10 will be designated as Inside and the Internet vlan4094 will be designated as Outside. 1. Specify the interface Type for the virtual Interface. Navigate to the Configuration > Devices > RFS6000-81C203 > Interface > Virtual Interfaces. Select the virtual Interface for VLAN 10 and click Edit. Select the NAT Direction as Inside for VLAN 10. Click OK: <img alt="User-added image" height="258" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0J&feoid=00N50000002Cf3M&refid=0EM50000000XREh" width="500"></img> Select the NAT Direction as Outside for VLAN 4094. Click OK: <img alt="User-added image" height="256" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0J&feoid=00N50000002Cf3M&refid=0EM50000000XREm" width="500"></img> 2) In this example, we will create two static NAT rules to translate TCP port 80 and TCP port 443 traffic received on the public Outside interface vlan4094 to a web server 192.168.10.20 on the Inside management interface vlan10. a. Navigate to the Configuration > Devices > RFS6000-name > Security > NAT window. Select the Static NAT > Destination tab and click Add. b. Select the TCP protocol. Set the Destination IP to the IP address of the public Outside Interface and the NAT IP to the private server IP address. Define the Destination Port and NAT port values (80 and 443 in this example). Select the Network type as Outside. Click OK and Exit: <img alt="User-added image" height="308" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0J&feoid=00N50000002Cf3M&refid=0EM50000000XREr" width="500"></img> <img alt="User-added image" height="330" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0J&feoid=00N50000002Cf3M&refid=0EM50000000XRF1" width="500"></img> Commit to apply and Save to save changes.

How to configure Static NAT on RFS controllers using the web GUI?

2018-01-16T10:29:00-0800 2018-01-16T12:00:20-0800 https://support.ruckuswireless.com/articles/000007224 2018-01-16T10:57:24-0800 monthly 0.8 admin,premium knowledge_article_2956 knowledge_article_2956 2017-12-12T14:35:58-0800 000007224 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How to configure NAT on wireless controller using GUI? The following configuration example will demonstrate how to enable dynamic NAT for internet access for specific IP subnets using the Web UI. The configuration is done on the RFS6000 controller at the device level. In this example, the IP rule allows the following: Packets received from hosts in VLAN 10 192.168.10.0/24 Management subnet and VLAN 40 192.168.40.0/24 Data subnet will be translated. <div> </div> <div>Configuration Steps:</div> <div> </div> <div>1. Specify the interface Type for the virtual Interface. In this example, the Management vlan10, Data vlan40 will be Inside and 4094 Outside.</div> <div> To do this, navigate to the Configuration > Devices > RFS6000-81C203 > Interface > Virtual Interfaces window. Select the virtual Interface for VLAN 10 and click Edit.</div> <div> Select the NAT Direction as Inside for VLAN 10 and vlan 40:</div> <div><img alt="User-added image" height="259" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0O&feoid=00N50000002Cf3M&refid=0EM50000000XRFV" width="500"></img> Select the NAT Direction as Outside for VLAN 4094. Click OK: <img alt="User-added image" height="248" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0O&feoid=00N50000002Cf3M&refid=0EM50000000XRFa" width="500"></img> 2. Navigate to the Configuration > Security > Wireless Firewall > IP Firewall Rules window. Click Add to create an ACL to tell the RF Switch which source subnets to NAT for Internet access. Enter a unique name XXXXX. Click OK. In this example, the name is nat-rule. In the Add Row window, create a rule for each subnet you wish to provide Internet access. For each rule, set the Operation to Permit and specify the Source Mask and Source Address. In this example, the Management (192.168.10.0/24) and Data (192.168.40.0/24) will be permitted Internet access. Click OK after creating each rule: <img alt="User-added image" height="267" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0O&feoid=00N50000002Cf3M&refid=0EM50000000XRFf" width="500"></img> 3. Navigate to the Configuration > Devices > RFS6000-82c201 > Security > NAT window. Select the Dynamic NAT tab then click Add. This will create a dynamic NAT rule translating private addresses defined in the ACL received on Inside interfaces to the public Outside internet vlan 4094. Select the Source List ACL nat-rule created in step 2. Set the Network Type to Inside. Set the Interface to the public Outside virtual interface vlan 4094. Select the Overload Type as Interface IP Address to automatically select the IP address assigned to the Virtual Interface vlan 4094. Click OK and Exit. <img alt="User-added image" height="365" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0O&feoid=00N50000002Cf3M&refid=0EM50000000XRFk" width="500"></img> Click Commit to apply and Save to save changes. For security reasons, it is recommended that a firewall rule be created and applied to the Outside interface to block all inbound traffic.</div>

How to configure NAT on wireless controller using GUI?

2018-01-16T10:57:24-0800 2018-01-16T12:00:18-0800 https://support.ruckuswireless.com/articles/000007496 2018-01-16T11:32:30-0800 monthly 0.8 admin,premium knowledge_article_3234 knowledge_article_3234 2018-01-16T11:10:26-0800 000007496 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches What is Virtual cable testing (VCT)? Virtual cable testing (VCT) Most FastIron devices support Virtual Cable Test (VCT) technology. VCT technology enables the diagnosis of a conductor (wire or cable) by sending a pulsed signal into the conductor, then examining the reflection of that pulse. This method of cable analysis is referred to as Time Domain Reflectometry (TDR). By examining the reflection, the Brocade device can detect and report cable statistics such as local and remote link pair, cable length, and link status. Virtual Cable Testing configuration notes ? VCT is supported on copper ports only. It is not supported on fiber ports. ? VCT is only supported when Ethernet port speed is configured to Auto. VCT does not work on ports with fixed speeds. ? VCT is not supported on the following: – ICX 6610-24F – SX-FI24GPP – SX-FI48GPP – SX-FI2XG – SX-FI8XG – SX-FI24HF ? The port to which the cable is connected must be enabled when you issue the command to diagnose the cable. If the port is disabled, the command is rejected. ? If the port is operating at 100 Mbps half-duplex, the TDR test on one pair will fail. ? If the remote pair is set to forced 100 Mbps, any change in MDI/MDIX may cause the device to interpret the Multilevel Threshold-3 (MLT-3) as a reflected pulse, in which case, the device will report a faulty condition. In this scenario, it is recommended that you run the TDR test a few times, clearing the registers before each test, for accurate results. Virtual Cable Test command syntax To diagnose a cable using TDR, enter commands such as the following at the Privileged EXEC level of the CLI. device# phy cable-diagnostics tdr 1/1/1 The clear-diag tdr command clears results of any previous TDR test from test registers for port 1/1/1 (port 1 on slot 1 on device 1). ---------- Note: It is recommended that you clear the TDR test registers before each test. ---------- device# clear cable-diagnostics tdr 1/1/1 The command in the previous example diagnoses the cable attached to port 1/1/1. When you issue the phy cable-diagnostics command, the command brings the port down for a second or two, and then immediately brings the port back up. Syntax: clear cable-diagnostics tdr stackid/slot/port Syntax: phy cable-diagnostics tdr stackid/slot/port <img alt="User-added image" height="225" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ty0Y&feoid=00N50000002Cf3M&refid=0EM50000000XRIU" width="500"></img> Syntax: show cable-diagnostics tdr stacked/slot/port In the output show, "Local pair" indicates the assignment of wire pairs from left to right, where Pair A is the left-most pair. In the attached document, the table shows the "Local pair" mapping to the T568A pin/pair and color assignment from the TIA/EIA-568-B standard.

What is Virtual cable testing (VCT)?

2018-01-16T11:32:30-0800 2018-01-16T12:00:14-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6GCAS?attachment_index=0 2018-01-16T12:00:14-0800 monthly admin,premium knowledge_article_3234 knowledge_article_3234_attachment_1 ka25B000000CbRkQAK_Attachment__c.pdf 2444146.0 application/pdf https://support.ruckuswireless.com/articles/000007509 2018-01-16T11:39:53-0800 monthly 0.8 admin,premium knowledge_article_3233 knowledge_article_3233 2018-01-16T11:39:53-0800 000007509 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What is DHCPV4 Dynamic ARP inspection? Dynamic ARP inspection For enhanced network security, you can configure the Brocade device to inspect and keep track of Dynamic Host Configuration Protocol (DHCP) assignments. Dynamic ARP Inspection (DAI) enables the Brocade device to intercept and examine all ARP request and response packets in a subnet and discard packets with invalid IP-to-MAC address bindings. DAI can prevent common man-in-the-middle (MiM) attacks such as ARP cache poisoning, and disallow mis-configuration of client IP addresses. ARP poisoning ARP provides IP communication within a Layer 2 broadcast domain by mapping an IP address to a MAC address. Before a host can talk to another host, it must map the IP address to a MAC address first. If the host does not have the mapping in its ARP table, it creates an ARP request to resolve the mapping. All computers on the subnet will receive and process the ARP requests, and the host whose IP address matches the IP address in the request will send an ARP reply. An ARP poisoning attack can target hosts, switches, and routers connected to the Layer 2 network by poisoning the ARP caches of systems connected to the subnet and by intercepting traffic intended for other hosts on the subnet. For instance, a malicious host can reply to an ARP request with its own MAC address, thereby causing other hosts on the same subnet to store this information in their ARP tables or replace the existing ARP entry. Furthermore, a host can send gratuitous replies without having received any ARP requests. A malicious host can also send out ARP packets claiming to have an IP address that actually belongs to another host (for example, the default router). After the attack, all traffic from the device under attack flows through the attacker computer and then to the router, switch, or host. Dynamic ARP Inspection Dynamic ARP Inspection (DAI) allows only valid ARP requests and responses to be forwarded. A Brocade device on which DAI is configured does the following: ? Intercepts ARP packets received by the system CPU ? Inspects all ARP requests and responses received on untrusted ports ? Verifies that each of the intercepted packets has a valid IP-to-MAC address binding before updating the local ARP table, or before forwarding the packet to the appropriate destination ? Drops invalid ARP packets When you enable DAI on a VLAN, by default, all member ports are untrusted. You must manually configure trusted ports. In a typical network configuration, ports connected to host ports are untrusted. You configure ports connected to other switches or routers as trusted. DAI inspects ARP packets received on untrusted ports, as shown in the figure below. DAI carries out the inspection based on IP-to-MAC address bindings stored in a trusted binding database. For the Brocade device, the binding database is the ARP table and the DHCP snooping table, which supports DAI, DHCP snooping, and IP Source Guard. To inspect an ARP request packet, DAI checks the source IP address and source MAC address against the ARP table. For an ARP reply packet, DAI checks the source IP, source MAC, destination IP, and destination MAC addresses. DAI forwards the valid packets and discards those with invalid IP-to-MAC address bindings. When ARP packets reach a trusted port, DAI lets them through, as shown in the following figure. <img alt="User-added image" height="192" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txjc&feoid=00N50000002Cf3M&refid=0EM50000000XRIy" width="500"></img> ARP and DHCP snoop entries DAI uses the IP/MAC mappings in the ARP table to validate ARP packets received on untrusted ports. DAI relies on the following entries. ? Dynamic ARP - Normal ARP learned from trusted ports. ? Static ARP - Statically configured IP/MAC/port mapping. ? Inspection ARP - Statically configured IP/MAC mapping, where the port is initially unspecified. The actual physical port mapping will be resolved and updated from validated ARP packets. Refer to Configuring an inspection ARP entry on page 391. ? DHCP-Snooping ARP - Information collected from snooping DHCP packets when DHCP snooping is enabled on VLANs. DHCP snooping entries are stored in a different table and are not part of the ARP table. The status of an ARP entry is either pending or valid: ? Valid - The mapping is valid, and the port is resolved. This is always the case for static ARP entries. ? Pending - For normal dynamic ARP entries before they are resolved, and the port is mapped. Their status changes to valid when they are resolved, and the port is mapped. Configuration notes and feature limitations for DAI The following configuration notes and limitations apply when configuring DAI: ? To run Dynamic ARP Inspection, you must first enable support for ACL filtering based on VLAN membership or VE port membership. To do so, enter the following commands at the global configuration level of the CLI. device(config)# enable ACL-per-port-per-vlan device(config)# write memory device(config)# exit device# reload ---------- Note: You must save the configuration and reload the software to place the change into effect. ---------- ? There is a limit on the number of static ARP inspection entries that can be configured. This is determined by the system-max parameter max-static-inspect-arp-entries. The maximum value is 1024 and the default value is 512. Changing the system max values requires a system reload. ? ACLs are supported on member ports of a VLAN on which DHCP snooping and Dynamic ARP Inspection (DAI) are enabled. ? On FastIron X Series devices, DAI is supported together with MAC authentication and dynamic ACLs. ? DAI is supported on a VLAN without a VE, or on a VE with or without an assigned IP address. ? DAI is supported on LAG ports. Dynamic ARP Inspection configuration Configuring DAI consists of the following steps. 1. Configure inspection ARP entries for hosts on untrusted ports. Refer to Configuring an inspection ARP entry on page 391. 2. Enable DAI on a VLAN to inspect ARP packets. Refer to Enabling DAI on a VLAN on page 391. 3. Configure the trust settings of the VLAN members. ARP packets received on trusted ports bypass the DAI validation process. ARP packets received on untrusted ports go through the DAI validation process. Refer to Enabling trust on a port on page 392. 4. Enable DHCP snooping to populate the DHCP snooping IP-to-MAC address binding database. Dynamic ARP inspection is disabled by default and the trust setting for ports is by default untrusted. Configuring an inspection ARP entry Static ARP and static inspection ARP entries must be configured for hosts on untrusted ports. Otherwise, when DAI checks ARP packets from these hosts against entries in the ARP table, it will not find any entries for them, and the Brocade device will not allow and learn ARP from an untrusted host. To configure an inspection ARP entry, enter a command such as the following. device(config)# arp 10.20.20.12 0000.0002.0003 inspection This command defines an inspection ARP entry in the static ARP table, mapping a device IP address 10.20.20.12 with its MAC address 0000.0002.0003. The ARP entry will be moved to the ARP table once the DAI receives a valid ARP packet. Dynamic ARP Inspection must be enabled to use static ARP inspection entries. Syntax: [no] arp ip-addr mac-addr inspection The ip-addr mac-addr parameter specifies a device IP address and MAC address pairing. Enabling DAI on a VLAN DAI is disabled by default. To enable DAI on an existing VLAN, enter the following command. device(config)# ip arp inspection vlan 2 The command enables DAI on VLAN 2. ARP packets from untrusted ports in VLAN 2 will undergo DAI inspection. Syntax: [no] ip arp inspection vlan vlan-number The vlan-number variable specifies the ID of a configured VLAN. Enabling trust on a port The default trust setting for a port is untrusted. For ports that are connected to host ports, leave their trust settings as untrusted. If the port is part of a LAG, enable ARP inspection trust on the primary port of the LAG. To enable trust on a port, enter commands such as the following. device(config)# interface ethernet 1/1/4 device(config-if-e10000-1/1/4)# arp inspection trust The commands change the CLI to the interface configuration level of port 1/1/4 and set the trust setting of port 1/1/4 to trusted. Syntax: [no] arp inspection trust Disabling or re-enabling syslog messages for DAI You can disable or re-enable syslog messages for Dynamic ARP Inspection. Syslog messages are enabled by default on the device. 1. Enter global configuration mode. 2. Enter the ip arp inspection syslog disable command to disable syslog messages. Use the no form of the command to reenable syslog messages for DAI. The following example shows disabling the syslog messages for DAI. device(config)# ip arp inspection syslog disable Displaying ARP inspection status and ports To display the ARP inspection status for a VLAN and the trusted or untrusted port, enter the following command. device# show ip arp inspection vlan 2 IP ARP inspection VLAN 2: Disabled Trusted Ports : ethe 1/1/4 Untrusted Ports : ethe 2/1/1 to 2/1/3 ethe 4/1/1 to 4/1/24 ethe 6/1/1 to 6/1/4 ethe 8/1/1 to 8/1/4 Syntax: show ip arp inspection vlan vlan_id The vlan_id variable specifies the ID of a configured VLAN. <img alt="User-added image" height="139" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txjc&feoid=00N50000002Cf3M&refid=0EM50000000XRJ3" width="500"></img> Multi-VRF support for DAI DAI supports Multi-VRF (Virtual Routing and Forwarding) instances. You can deploy multiple VRFs on a Brocade Ethernet switch. Each VLAN having a Virtual Ethernet (VE) interface is assigned to a VRF. You can enable DAI on individual VLANs and assign any interface as the ARP inspection trust interface. If an interface is a tagged port in this VLAN, you can turn on the trust port per VRF, so that traffic intended for other VRF VLANs will not be trusted. To configure DAI to support a VRF instance, do the following: ? Enable the acl-per-port-per-vlan setting. DAI requires that the acl-per-port-per-vlan setting be enabled. Brocade(config)# enable acl-per-port-per-vlan Reload required. Please write memory and then reload or power cycle. ? Configure DAI on a VLAN using the ip arp inspection vlan vlan-id command. Brocade(config)# ip arp inspection vlan 2 Syntax: ip arp inspection vlan vlan-id ? To add a static ARP inspection entry for a specific VRF, use the arp ip-address mac-address inspection command in the VRF CLI context. Brocade(config-vrf-one-ipv4)# arp 5.5.5.5 00a2.bbaa.0033 inspection Syntax: arp ip-address mac-address inspection Enabling trust on a port for a specific VRF The default trust setting for a port is untrusted. For ports that are connected to host ports, leave their trust settings as untrusted. To enable trust on a port for a specific VRF, enter commands such as the following. Brocade(config)# interface ethernet 1/1/4 Brocade(config-if-e10000-1/1/4)# arp inspection trust vrf vrf2 The commands change the CLI to the interface configuration level of port 1/1/4 and set the trust setting of port 1/1/4 on VRF 2 to trusted. Syntax: [no] arp inspection trust vrf vrf-name

DHCPV4 Dynamic ARP inspection

2018-01-16T11:39:53-0800 2018-01-16T12:00:11-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw6TCAS?attachment_index=0 2018-01-16T12:00:11-0800 monthly admin,premium knowledge_article_3233 knowledge_article_3233_attachment_1 ka25B000000CbOgQAK_Attachment__c.pdf 4155530.0 application/pdf https://support.ruckuswireless.com/articles/000007590 2018-01-11T09:40:59-0800 monthly 0.8 admin,premium knowledge_article_3229 knowledge_article_3229 2018-01-09T09:32:37-0800 000007590 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Installation;System network management;Known issues and workarounds Configuration, Installation, System Network Management, Known Issues and Workarounds, SmartCell Insight Why would I see spinning wheel / long waits on new installation of SCI 3.5 ? Use the latest version of Chrome Browser for installation of SCI 3.5 and later, or unblock the ports needed for Admin screens under FireFox: <img alt="User-added image" height="247" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxyI&feoid=00N50000002Cf3M&refid=0EM50000000XHdI" width="923"></img> You can quickly verify if ports are being blocked under FireFox by trying to go to the following link: https://[SCI-IP-Address]:53000/api/v1/clusters and click on "advanced" link/button to add the exception.

Latest SCI releases require the latest version of Browser (Chrome preferred).

2018-01-11T09:40:59-0800 2018-01-11T12:00:08-0800 https://support.ruckuswireless.com/articles/000007212 2018-01-09T13:50:37-0800 monthly 0.8 admin,premium knowledge_article_2851 knowledge_article_2851 2017-12-12T15:45:07-0800 000007212 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers How do I create wireless association deny filter in WiNG 5.x using the GUI? DENY WIRELESS FILTERS Wireless filters can be used to block devices, and a common application for wireless filtering is to block (or blacklist) associations from a suspicious or malicious device. Administrators can create up to 1000 wireless filter entries on the RF Switch, which pushes the configuration to all the Access Points. The Access Points can deny access to individual MAC addresses or a range of MAC addresses as required. All MAC addresses not matched by the wireless filter list will be able to associate to the WLAN. <img alt="User-added image" height="222" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txxj&feoid=00N50000002Cf3M&refid=0EM50000000XHRv" width="500"></img> As shown in above figure, wireless filtering has been deployed on a guest WLAN named BROCADE-GUEST to block a device with the MAC address 00-0C-F1-25-18-F2. A wireless filter has been created on the RF Switch with a Start MAC and End MAC set to a specific device's MAC address. If the device attempts to associate with the BROCADE-GUEST SSID, the AP will deny the association attempt and will make a log entry for the association attempt. <table border="1" cellpadding="1" cellspacing="1"><tbody><tr><td colspan="1" rowspan="1">Precedence</td><td colspan="1" rowspan="1">Start MAC</td><td colspan="1" rowspan="1">End MAC</td><td colspan="1" rowspan="1">Allow/Deny </td></tr><tr><td colspan="1" rowspan="1">1</td><td colspan="1" rowspan="1">00-0C-F1-25-18-F2</td><td colspan="1" rowspan="1">00-0C-F1-25-18-F2</td><td colspan="1" rowspan="1">Deny</td></tr></tbody></table> Configuration through Web UI 1. Create Association ACL a. Under the context: Configuration->Wireless->Association ACL click Add: <img alt="User-added image" height="248" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txxj&feoid=00N50000002Cf3M&refid=0EM50000000XHS0" width="500"></img> b. Enter Association ACL Name ‘Deny List’ and Click Add Row c. Enter Precedence as 1, Starting MAC Address as ‘00-0C-F1-25-18-F2’, Ending MAC ‘00-0C-F1-25-18-F2’ and action as ‘Deny’ and click OK: <img alt="User-added image" height="231" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txxj&feoid=00N50000002Cf3M&refid=0EM50000000XHS5" width="500"></img> ---------- Notes: - This will block the client 00-0C-F1-25-18-F2 from connecting to the wireless network - The default rule in an association ACL is allow all. So if a client does not match any of the rules, it will be allowed association. ---------- d. Enter Precedence as 2, Starting MAC Address as ‘00-27-10-24-4C-E4’, Ending MAC Address as ‘00-27-10-24-4C-E4’, action as ‘Allow’ and click OK. <img alt="User-added image" height="127" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txxj&feoid=00N50000002Cf3M&refid=0EM50000000XHSA" width="500"></img> ---------- Notes: - This will ensure that WLAN access is granted to the client with MAC address 00-27-10-24-4C-E4. - All other clients will be denied access, as the default rule is deny all. ---------- 2. Attach Association ACL to WLAN a. Under the context: Configuration->Wireless->Wireless LANS, click on the WLAN to which you want to apply the ACL <img alt="User-added image" height="127" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txxj&feoid=00N50000002Cf3M&refid=0EM50000000XHSF" width="500"></img> b. Under the selected Wireless LAN, go to Firewall settings c. Select Association ACL as ‘Deny List’ from the drop down box. The deny list is the Association ACL that was created above. <img alt="User-added image" height="233" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txxj&feoid=00N50000002Cf3M&refid=0EM50000000XHSK" width="500"></img> 3. Commit and save the configuration

How do I create wireless association deny filter in WiNG 5.x using the GUI?

2018-01-09T13:50:37-0800 2018-01-09T18:00:10-0800 https://support.ruckuswireless.com/articles/000007214 2018-01-09T13:52:08-0800 monthly 0.8 admin,premium knowledge_article_2847 knowledge_article_2847 2017-12-12T15:45:07-0800 000007214 Validated (External) Premium Brocade eos products Configuration;System network management Configuration, System Network Management, Brocade EOS Products How to configure PoE? Power Over Ethernet When Power over Ethernet (PoE) is enabled on a port to which a power consuming device is attached, by default, the Brocade PoE device supplies 15.4 watts of power at the RJ45 jack, minus any power loss through the cables. To configure the maximum power level for a power consuming device, enter the following commands: FastIron#config t FastIron(config)#interface e 1/1 FastIron(config-if-e1000-1/1)#inline power power-limit 14000 These commands enable in-line power on interface e 1 in slot 1 and set the PoE power level to 14,000 milliwatts (14 watts). The default is 15400. A power class specifies the maximum amount of power that a Brocade PoE device supplies to a power consuming device. The table below shows the different power classes and their respective maximum power allocations: <div><img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txxo&feoid=00N50000002Cf3M&refid=0EM50000000WuC7"></img></div> By default, the power class for all power consuming devices is zero (0). A power consuming device with a class of 0 receives 15.4 watts of power. To configure the power class for a PoE power consuming device, enter the following commands: FastIron# config terminal FastIron(config)# interface e 1/1 FastIron(config-if-e1000-1/1)# inline power power-by-class 3 For further information, please watch this YouTube video from our Brocade Campus Feature Explainer Series - Configuring Power Over Ethernet (PoE): <a href="https://www.youtube.com/watch?v=3001OihNZRQ&feature=youtu.be" target="_blank">https://www.youtube.com/watch?v=3001OihNZRQ&feature=youtu.be</a> Or, please visit this post on our Brocade Community Board: <a href="https://community.brocade.com/t5/Ethernet-Switches-Routers/Configuring-Power-Over-Ethernet-PoE/ta-p/87181" target="_blank">https://community.brocade.com/t5/Ethernet-Switches-Routers/Configuring-Power-Over-Ethernet-PoE/ta-p/87181</a>

Configure POE in your Network Environment.

2018-01-09T13:52:08-0800 2018-01-09T18:00:09-0800 https://support.ruckuswireless.com/articles/000007490 2018-01-09T11:15:30-0800 monthly 0.8 admin,premium knowledge_article_3228 knowledge_article_3228 2018-01-09T11:15:30-0800 000007490 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers Why are there Invalid Radio SKU errors for EU Access Points? Update controller and AP firmware to 5.4 or later.

Invalid Radio SKU error for EU Access Points

2018-01-09T11:15:30-0800 2018-01-09T12:00:15-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw68CAC?attachment_index=0 2018-01-09T12:00:15-0800 monthly admin,premium knowledge_article_3228 knowledge_article_3228_attachment_1 ka25B000000CbeyQAC_Attachment__c.pdf 153546.0 application/pdf https://support.ruckuswireless.com/articles/000007204 2018-01-09T11:22:29-0800 monthly 0.8 admin,premium knowledge_article_3065 knowledge_article_3065 2017-12-12T14:27:28-0800 000007204 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How to reset an AP to factory default from the controller GUI? It is possible to reset an AP to factory default settings from the controller graphical user interface only if the AP is adopted and reachable by the controller at the time of the reset. In order to reset an AP to factory default, perform the following steps: 1. Log in to the controller's GUI 2. Select the tab Operations from the top menu 3. On the left side of the screen, expand the relevant RF domain and select the relevant AP needing to be reset 4. On the right side of the screen, users will see the AP code details. In the middle of the screen at the bottom, users will also see a pull down menu with Show Running Config on it as well as a button Execute (seen in the screenshot below) 5. From the pull down menu, select Restart (factory default). Hit the Execute button: <img alt="User-added image" height="226" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxxK&feoid=00N50000002Cf3M&refid=0EM50000000XHNU" width="500"></img> 6. The controller will now send a signal to the AP to restart with factory default values. ---------- Note: Please be aware that the AP, by default, will do a search for a controller and will automatically re-adopt to the controller when it finds one. ----------

How to reset an AP to factory default from the controller GUI?

2018-01-09T11:22:29-0800 2018-01-09T12:00:14-0800 https://support.ruckuswireless.com/articles/000007491 2018-01-09T11:27:17-0800 monthly 0.8 admin,premium knowledge_article_3227 knowledge_article_3227 2018-01-09T11:27:17-0800 000007491 Validated (External) Premium Brocade eos products Configuration;System network management Configuration, System Network Management, Brocade EOS Products How to determine the management module generation on a SX? Review the attached document for specific information related with the SX generation management modules . *Reference* Modules Matrix SX document <img alt="User-added image" height="403" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxjH&feoid=00N50000002Cf3M&refid=0EM50000000XHNZ" width="500"></img> <img alt="User-added image" height="267" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxjH&feoid=00N50000002Cf3M&refid=0EM50000000XHNe" width="500"></img> <img alt="User-added image" height="399" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxjH&feoid=00N50000002Cf3M&refid=0EM50000000XHNj" width="500"></img> Additional Notes: Third Gen modules are NOT support in a SuperX (FI-SX1) Chassis 1G and 2G modules do NOT interoperate. 1G and 3G modules do interoperate. 2G and 3G modules do interoperate. *The SX-FIZMR will work with anything but will only support a combination of 1G and 3G OR 2G and 3G modules. i.e. not 1G, 2G and 3G in the same Chassis.

How to determine the management module generation on a SX?

2018-01-09T11:27:17-0800 2018-01-09T12:00:12-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw69CAC?attachment_index=0 2018-01-09T12:00:12-0800 monthly admin,premium knowledge_article_3227 knowledge_article_3227_attachment_1 ka25B000000CbcsQAC_Attachment__c.pdf 174217.0 application/pdf https://support.ruckuswireless.com/articles/000007440 2018-01-08T10:07:35-0800 monthly 0.8 admin,premium knowledge_article_2725 knowledge_article_2725 2017-12-12T16:13:36-0800 000007440 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to display and modify system parameter default settings in Campus Brocade devices? System default settings configuration considerations • Changing the table size for a parameter reconfigures the device memory. Whenever you reconfigure the memory on a Brocade device, you must save the change to the startup-config file, then reload the software to place the change into effect • Configurable tables and their defaults and maximum values differ on Brocade IPv4 devices versus IPv6-capable devices • For more information about Layer 3 system parameter limits, refer to the Displaying Layer 3 system parameter limits section in the FastIron Ethernet Switch Layer 3 Routing Configuration Guide. Displaying system parameter default values To display the configurable tables and their defaults and maximum values, enter the show default values command at any level of the CLI. The following shows an example output of the show default values command on a FastIron Layer 2 device: <img alt="User-added image" height="149" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txup&feoid=00N50000002Cf3M&refid=0EM50000000XGxq" width="500"></img> The following shows an example output on ICS 7750 device. <img alt="User-added image" height="380" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txup&feoid=00N50000002Cf3M&refid=0EM50000000XGxv" width="500"></img> The following table defines the system parameters in the show default values command output: <img alt="User-added image" height="503" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txup&feoid=00N50000002Cf3M&refid=0EM50000000XGy0" width="500"></img> <img alt="User-added image" height="350" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txup&feoid=00N50000002Cf3M&refid=0EM50000000XGy5" width="500"></img> Modifying system parameter default values Information for the configurable tables appears under the columns that are shown in bold type in the above examples. To simplify configuration, the command parameter you enter to configure the table is used for the table name. For example, to increase the capacity of the IP route table, enter the following commands. Example: device(config)# system-max ip-route 120000 device(config)# write memory device(config)# exit device# reload Syntax: system-max ip-route num ---------- Note: If you accidentally enter a value that is not within the valid range of values, the CLI will display the valid range for you. ---------- Another Example: To increase the number of IP subnet interfaces you can configure on each port on a device running Layer 3 code from 24 to 64, enter the following commands: device(config)# system-max ip-subnet-port 64 device(config)# write memory device(config)# exit device# reload Syntax: system-max ip-subnet-port num The num parameter specifies the maximum number of subnet addresses per port and can be from 24 - 128. The default is 24.

How to display and modify system parameter default settings in Campus Brocade devices?

2018-01-08T10:07:35-0800 2018-01-08T12:00:27-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw55CAC?attachment_index=0 2018-01-08T12:00:27-0800 monthly admin,premium knowledge_article_2725 knowledge_article_2725_attachment_1 ka25B000000Cc7dQAC_Attachment__c.pdf 5072835.0 application/pdf https://support.ruckuswireless.com/articles/000006982 2018-01-08T10:09:42-0800 monthly 0.8 admin,premium knowledge_article_3087 knowledge_article_3087 2017-12-12T14:27:18-0800 000006982 Validated (External) Premium Icx 6430;Icx 6450;Ruckus ICX 6430 and 6450 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ICX 6430, ICX 6450 Why does an upgrade of ICX 6430 Routing code fail? Brocade 6430 devices does not support Routing code. In the following table we can confirm and check what version of 64XX supports Routing code - or not: <img alt="User-added image" height="496" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txuu&feoid=00N50000002Cf3M&refid=0EM50000000XGyK" width="500"></img>

Why does an upgrade of ICX 6430 Routing code fail?

2018-01-08T10:09:42-0800 2018-01-08T12:00:25-0800 https://support.ruckuswireless.com/articles/000006988 2018-01-08T10:11:25-0800 monthly 0.8 admin,premium knowledge_article_3124 knowledge_article_3124 2017-12-12T14:12:02-0800 000006988 Validated (External) Premium Icx 6430;Icx 6450;Icx 6610;Icx 6650;Icx 7250;Icx 7450;Icx 7750;Fastiron cx series;Ruckus ICX 6430 and 6450 Campus Switches;Ruckus ICX 6610 Campus Switches;Brocade ICX 6650 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches;Brocade FastIron CX Series Switches Configuration Configuration, ICX 6430, ICX 6450, ICX 6610, ICX 6650, ICX 7250, ICX 7450, ICX 7750, FastIron CX Series Which FastIron platforms and software versions support Multicast routing on a MCT cluster? Layer 3 multicast routing over MCT is only supported on ICX 7750 from FI 08.0.30 onward. Below is the matrix for support of multicast over FastIron platforms. <img alt="User-added image" height="106" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txuz&feoid=00N50000002Cf3M&refid=0EM50000000XGyP" width="500"></img> --------- Note: There are a few limitations while configuring multicast routing over MCT as documented here. <a href="http://www.brocade.com/content/html/en/configuration-guide/FI_08030_L3/GUID-E4D3BFD4-BCD7-4400-B229-11746DAB022D.html" target="_blank">http://www.brocade.com/content/html/en/configuration-guide/FI_08030_L3/GUID-E4D3BFD4-BCD7-4400-B229-11746DAB022D.html</a> ---------

Which FastIron platforms and software versions support Multicast routing on a MCT cluster?

2018-01-08T10:11:25-0800 2018-01-08T12:00:23-0800 https://support.ruckuswireless.com/articles/000007018 2018-01-08T10:47:31-0800 monthly 0.8 admin,premium knowledge_article_2892 knowledge_article_2892 2017-12-12T15:03:29-0800 000007018 Validated (External) Premium Icx 6610;Icx 6650;Icx 7450;Icx 7750;Ruckus ICX 6610 Campus Switches;Brocade ICX 6650 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, ICX 6610, ICX 6650, ICX 7450, ICX 7750 Why is SNMP reporting much higher temperature after upgrade from 8010m to 8030k? Actual temperature is SNMP reported integer divided by 2. Actual temperature with 8010m is 45 and with 8030k it is 62. The fan controlled temperature is referred or the highest temperature is returned.

SNMP reporting much higher temperature after upgrade from 8010m to 8030k

2018-01-08T10:47:31-0800 2018-01-08T12:00:19-0800 https://support.ruckuswireless.com/articles/000007060 2018-01-08T10:55:32-0800 monthly 0.8 admin,premium knowledge_article_2865 knowledge_article_2865 2017-12-12T15:44:57-0800 000007060 Validated (External) Premium Brocade eos products System network management System Network Management, Brocade EOS Products How to reset the Brocade Switch to Factory Defaults? Reset Brocade Switch to Factory Defaults <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvO&feoid=00N50000002Cf3M&refid=0EM50000000XGzc"></img> ---------- <span style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">Note: This will erase any loaded licenses. If you have loaded licenses, be sure you have them backed up before proceeding. ---------- At the command prompt, do: <div dir="ltr" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <div> SHESW11#erase startup-config Erase startup-config Done. dhcp server lease database is also removed <span style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"><img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvO&feoid=00N50000002Cf3M&refid=0EM50000000XGzh"></img> ---------- Warning: Do not write memory! This will reload the running configuration back onto the system. --------- <div dir="ltr"> <div> SHESW11# reload Are you sure? (enter 'y' or 'n'): Sent SIGKILL to all processes Requesting system reboot Restarting system </div> </div> On the next boot, you should have an as-new system. </div> </div>

How to reset the Brocade Switch to Factory Defaults?

2018-01-08T10:55:32-0800 2018-01-08T12:00:18-0800 https://support.ruckuswireless.com/articles/000007079 2018-01-08T11:19:25-0800 monthly 0.8 admin,premium knowledge_article_3174 knowledge_article_3174 2017-12-12T13:15:49-0800 000007079 Validated (External) Premium Ruckus icx switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Ruckus ICX Switches What is Flexible authentication failure> This behavior can occur when vendor specific attributes (VSA) have not been correctly added to a RADIUS server's settings. In both older RADIUS servers such as freeradius 1.0.2 and newer servers such as Microsoft Windows 2012 Server NPS (Network Polict Server), it is possible to incorrectly add VSAs to a server's settings such that the server thinks it is sending them, but it actually encodes them incorrectly such that the RADIUS client ICX can't recognize them. Resolution requires resolving RADIUS server behavior. This is an example of a correctly encoded RADIUS packet copied from its view in Wireshark. RADIUS Protocol Code: Access-Accept (2) Packet identifier: 0x29 (41) [This is a response to a request in frame 1] [Time from request: 0.119329000 seconds] Attribute Value Pairs AVP: l=6 t=Tunnel-Type(64) Tag=0x00: VLAN(13) AVP: l=6 t=Tunnel-Medium-Type(65) Tag=0x00: IEEE-802(6) AVP: l=6 t=Tunnel-Private-Group-Id(81): U:34 AVP: l=12 t=Vendor-Specific(26) v=Brocade Communication Systems, Inc. (formerly 'Foundry Networks, Inc.')(1991) AVP Type: 26 AVP Length: 12 VSA: l=6 t=Foundry-MAC-Authent-needs-802.1x(6): 0 Foundry-MAC-Authent-needs-802.1x: 0 AVP: l=12 t=Vendor-Specific(26) v=Brocade Communication Systems, Inc. (formerly 'Foundry Networks, Inc.')(1991) AVP Type: 26 AVP Length: 12 VSA: l=6 t=Foundry-802.1x-Valid-Lookup(7): 0 Foundry-802.1x-Valid-Lookup: 0 The following is an example of an incorrect RADIUS packet without recognizable VSAs. Here the RADIUS server neglected to add AVP Type 26 and vendor ID. As a result the AVP that were supposed to be Foundry-MAC-Authent-needs-802.1x and Foundry-802.1x-Valid-Lookup looked like Service-Type and Framed-Protocol instead. RADIUS Protocol Code: Access-Accept (2) Packet identifier: 0x7 (7) [This is a response to a request in frame 1] [Time from request: 0.000546000 seconds] Attribute Value Pairs AVP: l=6 t=Tunnel-Type(64) Tag=0x00: VLAN(13) AVP: l=6 t=Tunnel-Medium-Type(65) Tag=0x00: IEEE-802(6) AVP: l=6 t=Tunnel-Private-Group-Id(81): U:34 AVP: l=6 t=Service-Type(6): Unknown(0) AVP Type: 6 AVP Length: 6 Service-Type: Unknown (0) AVP: l=6 t=Framed-Protocol(7): Unknown(0) AVP Type: 7 AVP Length: 6 Framed-Protocol: Unknown (0) The following is another example of an incorrect RADIUS packet with AVP Type 25(Class) specified instead of AVP Type 26(Vendor Specific). As a result the rest of each AVP is illegible to the ICX. RADIUS Protocol Code: Access-Accept (2) Packet identifier: 0xb (11) [This is a response to a request in frame 1] [Time from request: 0.007745000 seconds] Attribute Value Pairs AVP: l=6 t=Tunnel-Medium-Type(65) Tag=0x00: IEEE-802(6) AVP: l=14 t=Tunnel-Private-Group-Id(81): U:34 AVP: l=6 t=Tunnel-Type(64) Tag=0x00: VLAN(13) AVP: l=46 t=Class(25): ... AVP Type: 25 AVP Length: 46 Class: ... When "auth-order mac-auth dot1x" is configured on an ICX, on the RADIUS server it is still necessary to configure the MAC address's user entry such that Foundry-MAC-Authent-needs-802.1x (a.k.a. Foundry-802_1x-enable)* is set to 0 and included in RADIUS Access-Accept packets the server sends to the ICX. Without that VSA, the problem above can happen. * VSA names have been changed over time. As a result, both Foundry-MAC-Authent-needs-802.1x and Foundry-802_1x-enable can appear in documentation. They both translate to vendor ID 1991, VSA number 6. To eliminate ambiguity for hosts that use only MAC auth and never use 802.1X, it can be helpful to configure a MAC address's user entry such that Foundry-802.1x-Valid-Lookup (a.k.a. Foundry-802_1x-valid) is set to 0 and included in RADIUS Access-Accept packets the server sends to the ICX. * VSA names have been changed over time. As a result, both Foundry-802.1x-Valid-Lookup and Foundry-802_1x-valid can appear in documentation. They both translate to vendor ID 1991, VSA number 7. VSAs that begin with Foundry originated with Foundry Networks, acquired by Brocade in 2008. Foundry VSAs are identified as belonging to Foundry by the vendor ID 1991. In the example of failure above, the RADIUS server is attaching types 6 and 7 but neglecting to identify them as Vendor Specific (standard AVP number number 26) or belonging to Foundry (Vendor ID 1991). That RADIUS server was not correctly configured for VSAs. If you are using freeradius 1 or 2 and having problems with flexible auth, Brocade recommends you upgrade to freeradius 3. The dictionary.foundry file included with freeradius 3 should have definitions for Foundry-MAC-Authent-needs-802.1x and Foundry-802.1x-Valid-Lookup. With freeradius 3 it should be a matter of adding Foundry-MAC-Authent-needs-802.1x = 0 to a MAC address's user entry. Foundry-802.1x-Valid-Lookup = 0 can be added to reduce ambiguity. For example: #mac-auth device-test 0010.9400.0003 Cleartext-Password := "0010.9400.0003" Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = "U:501", Foundry-MAC-Authent-needs-802.1x = 0 If you are using Microsoft Windows Server NPS (Network Polict Server), you cannot specify Foundry VSAs by name. You need to add them by number using the following procedure. If you are seeing this problem such that MAC auth seems to work when "dot1x port-control auto" is removed, then you should already have an applicable Connection Request Policy, and you should know where to find it. (If MAC auth doesn't work even when you remove "dot1x port-control auto", then this article doesn't cover your situation.) Step 1) Open up the applicable Connection Request Policy properties and go to the Settings tab. <img alt="User-added image" height="406" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvT&feoid=00N50000002Cf3M&refid=0EM50000000XH0G" width="500"></img> Step 2) On the left hand side, select Vendor Specific. <img alt="User-added image" height="409" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvT&feoid=00N50000002Cf3M&refid=0EM50000000XH0L" width="500"></img> Step 3) Click Add. Step 4) You should see an Add Vendor Specific Attribute window. Under Vendor select Custom. Under Attributes select Vendor Specific. Click Add. <img alt="User-added image" height="376" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvT&feoid=00N50000002Cf3M&refid=0EM50000000XH0Q" width="500"></img> Step 5) You should see an Attribute Information window with Attribute Number 26. Click Add. <img alt="User-added image" height="437" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvT&feoid=00N50000002Cf3M&refid=0EM50000000XH0V" width="500"></img> Step 6) You should see a Vendor Specific Attribute Information window. Select Enter Vendor Code and enter 1991. Select Yes It Conforms. Click Configure Attributes. <img alt="User-added image" height="439" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvT&feoid=00N50000002Cf3M&refid=0EM50000000XH0a" width="500"></img> Step 7) You should see a Configure VSA(RFC Compliant) window. For Vendor-assigned attribute number, enter 6 for Foundry-MAC-Authent-needs-802.1x. For Attribute format, select Decimal. For Attribute value, enter 0. Click OK. <img alt="User-added image" height="439" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvT&feoid=00N50000002Cf3M&refid=0EM50000000XH0f" width="500"></img> Step 8) You should see an Attribute Information window with one line, Vendor Code: 1991 with Value 0. This is the bare minimum necessary to get mac-auth before 802.1X to function. You can click OK buttons to finish. Optionally, if you want to add Foundry-802.1x-Valid-Lookup to reduce ambiguity, at the Attribute Information window click Add again. <img alt="User-added image" height="441" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvT&feoid=00N50000002Cf3M&refid=0EM50000000XH0k" width="500"></img> Step 9) You should see a Vendor Specific Attribute Information window. Select Enter Vendor Code and enter 1991. Select Yes It Conforms. Click Configure Attributes. <img alt="User-added image" height="443" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvT&feoid=00N50000002Cf3M&refid=0EM50000000XH0p" width="500"></img> Step 10) You should see a Configure VSA(RFC Compliant) window. For Vendor-assigned attribute number, enter 7 for Foundry-802.1x-Valid-Lookup. For Attribute format, select Decimal. For Attribute value, enter 0. Click OK. <img alt="User-added image" height="442" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvT&feoid=00N50000002Cf3M&refid=0EM50000000XH0u" width="500"></img> Step 11) You should see an Attribute Information window with two lines, both for Vendor Code: 1991 with Value 0. Each uses a different Vendor-assigned attribute number that Windows does not display in this menu. Click OK. <img alt="User-added image" height="439" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvT&feoid=00N50000002Cf3M&refid=0EM50000000XH0z" width="500"></img> Step 12) You should be back at the Connection Request Policy properties window, Vendor Specifiic category. In the Attributes list you should see at least one item with Name "Vendor-Specific", the Vendor listed as "RADIUS Standard", and Value "0, 0". If you don't add Foundry-802.1x-Valid-Lookup then Value will appear as "0". <img alt="User-added image" height="409" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxvT&feoid=00N50000002Cf3M&refid=0EM50000000XH14" width="500"></img>

Flexible authentication failure

2018-01-08T11:19:25-0800 2018-01-08T12:00:17-0800 https://support.ruckuswireless.com/articles/000007083 2018-01-08T11:23:03-0800 monthly 0.8 admin,premium knowledge_article_2887 knowledge_article_2887 2017-12-12T15:03:30-0800 000007083 Validated (External) Premium Brocade eos products Troubleshooting Troubleshooting, Brocade EOS Products How to troubleshoot 802.1x ? <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 18px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">How to troubleshoot 802.1x<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Steps to troubleshoot: <ol style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Verify and define the problem</li><li>Isolate the problem</li><li>Identify and debug the problem</li><li>Resolve or escalate the problem to L3/Escalation engineer. </li></ol> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Step 1, Verify and define the problem:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 9pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Verify customer problem. Is the problem real? What are the expected behaviors? What is not an expected behavior? Questions to ask customer: <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Describe the issue and expected behaviors.</div> <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-weight: normal;">When this problem was first observed?</li><li style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-weight: normal;">When was the device installed?</li><li style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-weight: normal;">Had the device/protocol/dot1x known to be functioning normally prior to the first observation of the problem or is this new implementation?</li><li style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-weight: normal;">Have there been any recent software upgrades?</li><li style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-weight: normal;">Have any unusual events occurred in the network?</li></ul> Commands to help verify confirm dot1x issue on FastIron: <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">-show log</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">-show run</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">-show dot1x configuration</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">-show dot1x session all</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">-show dot1x session brief.</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Do any of the output above indicated a problem with 802.1x? Do we have enough information to determine an 802.1x related issue? If yes, continue to step 2. If no, go back to investigate the problem and (re)define the problem.</div> Step 2, isolate the problem: <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><img alt="User-added image" height="333" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txvd&feoid=00N50000002Cf3M&refid=0EM50000000XH19" width="500"></img> As show in the diagram above, there are three components of the 802.1x authentication:</div> <ol style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Supplicant (Client/User PC)</li><li>Authenticator (Brocade IP Device such as ICX)</li><li>Authentication Server (Radius Server)</li></ol> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 9pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The main goal of this section is to isolate the problem using the diagram attached and with prior basic knowledge of 802.1x authentication. Assuming customer is using Brocade FastIron such as ICX as the Authenticator in the network. Investigate the following items: Is the issue with the Supplicant (client)? Authenticator (Brocade), or Authentication Server (radius)? <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li style="color: rgb(0, 0, 0); font-weight: normal;">Do we see eap-request and eap-response between Authenticator and the Supplicant?</li><li style="color: rgb(0, 0, 0); font-weight: normal;">Do we see radius access request/response/accept/deny message?</li><li style="color: rgb(0, 0, 0); font-weight: normal;">The most straight forward steps to help isolate this problem is using Wireshark to capture the traffic on the client port (Supplicant) and the server port (Authentication Server).</li><li style="color: rgb(0, 0, 0); font-weight: normal;">Do we see the communications as shown in the diagram above? Is there anything missing in the pcap?</li></ul> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Is the problem with the Authenticator (Brocade)? <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li style="color: rgb(0, 0, 0); font-weight: normal;">Does it send out eap-request to the Supplicant?</li></ul> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">If not, most likely a Brocade issue. Check Brocade configuration. Consult the configuration guide. <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">If Brocade sent out eap-request, and if it receives eap-response from the client, does it sent out Radius Access-request toward the Authentication server (radius)? If not, most likely a Brocade issue. Check the Brocade configuration. Consult the configuration guide. Is this a problem with the Supplicant (Client/PC)?</div> <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li style="color: rgb(0, 0, 0); font-weight: normal;">Does it send out any eap-start message or eap-response after receiving an eap-request from Brocade?</li></ul> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">If not, most likely it does not have dot1x enabled. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Is this a problem with the Authentication Server (Radius)? <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li style="color: rgb(0, 0, 0); font-weight: normal;">Does it send any Radius access-challenge after receiving Access-Request from Brocade? If not, most likely an issue on the Radius server.</li><li style="color: rgb(0, 0, 0); font-weight: normal;">What if it response with Access-Deny message? Most likely an issue with the username/password of the Supplication or Radius profile setting.</li></ul> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Everything looks correct, but the Authenticator (Brocade) still does not authorize the client? It is very possible that there is a bug in the code which resulted in this unexpected behavior. Follow step3 and step 4 below to escalate. Commands to help isolate the problem: <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li style="color: rgb(0, 0, 0); font-weight: normal;">show log</li><li style="color: rgb(0, 0, 0); font-weight: normal;">show run</li><li style="color: rgb(0, 0, 0); font-weight: normal;">show dot1x configuration</li><li style="color: rgb(0, 0, 0); font-weight: normal;">show dot1x statistics Ethernet x/y/z</li><li style="color: rgb(0, 0, 0); font-weight: normal;">debug dot1x</li><li style="color: rgb(0, 0, 0); font-weight: normal;">ptrace aaa //running from console At this point, we should be confident or have a very good idea where the issue might be. Continue to step 3 to identify and debug the cause of the issue below.</li><li style="color: rgb(0, 0, 0); font-weight: normal;">If we still not able to isolate issue, continue with step 2 again.</li></ul> Step 3, Identify and debug the cause: <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> If the issue is isolated and determined to be an issue with Supplicant; have the customer check on the client configuration. If the issue is isolated and determined to be an issue with the Authentication server, have the customer check the Radius server configuration. If the issue is determined to be Brocade, double check Brocade configuration and make sure it is correct. If everything looks correct, but Brocade still unauthorized the device, collect all the details and requirements. Information such as:</div> <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li style="color: rgb(0, 0, 0); font-weight: normal;">show tech</li><li style="color: rgb(0, 0, 0); font-weight: normal;">show tech</li><li style="color: rgb(0, 0, 0); font-weight: normal;">show dot1 authentication</li><li style="color: rgb(0, 0, 0); font-weight: normal;">show log</li><li style="color: rgb(0, 0, 0); font-weight: normal;">show run</li><li style="color: rgb(0, 0, 0); font-weight: normal;">show dot1x configuration</li><li style="color: rgb(0, 0, 0); font-weight: normal;">show dot1x statistics Ethernet x/y/z</li><li style="color: rgb(0, 0, 0); font-weight: normal;">debug dot1x</li><li style="color: rgb(0, 0, 0); font-weight: normal;">ptrace aaa //running from console</li><li style="color: rgb(0, 0, 0); font-weight: normal;">Pcap of client and server ports</li><li style="color: rgb(0, 0, 0); font-weight: normal;">Details of radius client such as make, model, OS</li><li style="color: rgb(0, 0, 0); font-weight: normal;">Details of radius server and profile setting </li></ul> Step 4, Resolve or escalate the issue: <ol style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Check release notes or SFDC for any known/open defects.</li><li>Upgrade to the latest code</li><li>If upgrade to the latest code does not help, and if there is no known issues. We’ll need to replicate this issue in the lab to get it fixed.</li><li>Request a physical lab to be built by the lab team.</li><li>Compile all details and requirements and then try to replicate the issue in the lab.</li></ol> </div>

Troubleshooting 802.1x authentication protocol.

2018-01-08T11:23:03-0800 2018-01-08T12:00:15-0800 https://support.ruckuswireless.com/articles/000007100 2018-01-08T11:43:07-0800 monthly 0.8 admin,premium knowledge_article_3077 knowledge_article_3077 2017-12-12T14:27:21-0800 000007100 Validated (External) Premium Icx 7750;RUCKUS ICX 7750 Campus Switches Configuration;System network management Configuration, System Network Management, ICX 7750 BNA shows incorrect Port Identifiers for stack module ports for slot2 ICX7750 BNA side: Identifier column in ethernet ports table of detailed report shows incorrect identifier details for Control Bridge's second slot ports. Agents Side: DEFECT000582883: SNMP response for the port identifier in snIfIndexLookup2Table is a mismatch with CLI, for slot 2 of ICX7750 device in SPX stack mode: <img alt="User-added image" height="243" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txvs&feoid=00N50000002Cf3M&refid=0EM50000000XH2H" width="500"></img> Upgrade the problematic device to 8.0.50 to resolve the issue.

BNA shows incorrect Port Identifiers for stack module ports for slot2 ICX7750. BNA side: 000584186: Identifier column in ethernet Ports table of detailed report shows incorrect identifier details for Control Bridge's second slot ports. Agents Side: 000582883: SNMP response for the port identifier in snIfIndexLookup2Table is a mismatch with CLI, for slot 2 of ICX7750 device in SPX stack mode.

2018-01-08T11:43:07-0800 2018-01-08T12:00:14-0800 https://support.ruckuswireless.com/articles/000007135 2018-01-08T11:56:04-0800 monthly 0.8 admin,premium knowledge_article_3112 knowledge_article_3112 2017-12-12T14:12:09-0800 000007135 Validated (External) Premium Brocade eos products Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, Brocade EOS Products How to troubleshoot MAC authentication How to troubleshoot MAC authentication: Step to troubleshoot: <ol><li> Verify and define the problem </li><li> Isolate the problem </li><li> Identify and debug the problem </li><li> Resolve or escalate the problem to L3/Escalation engineer. </li></ol> Step 1. Verify and define the problem: This is the most important part of troubleshooting to help determine if the problem really exists. Verify customer problem. Is the problem real? What is the expected behaviors? What is not an expected behavior? Questions to ask customer: <ul><li> Describe the issue and expected behaviors </li><li> When this problem was first observed? </li><li> When was the device installed? </li><li> Had the device/protocol/mac-authentication known to be functioning normally prior to the first observation of the problem or is this new implementation? </li><li> Have there been any recent software upgrades? </li><li> Have any unusual events occurred in the network? </li></ul> Commands to help verify and confirm MAC authentication issue on FastIron: <ul><li> Show log </li><li> Show run </li><li> Show dot1x configuration </li><li> Show mac-address session all </li><li> Show mac </li><li> Show mac-address e x/y/z </li></ul> Do any of the outputs above indicated a problem with MAC authentication? Do we have enough information from above to determine MAC authentication related issue? If yes, continue to step 2. If no, go back to investigate the problem and (re)define the problem. Below basic MAC authentication communication flow. <img alt="User-added image" height="213" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txw7&feoid=00N50000002Cf3M&refid=0EM50000000XH2q" width="500"></img> Step 2. isolate the problem: This is the most crucial steps in troubleshooting after the problem has been isolated. As show in the diagram attached, there are three components of the 802.1x authentication: a. Supplicant (Client/User PC) b. Authenticator (Brocade IP Device such as ICX) c. Authentication Server (Radius Server) The main goal of this section is to isolate the problem using the diagram above and with prior basic knowledge of MAC-authentication. Assuming customer is using Brocade Fastiron as the Authenticator in the network. Investigate the following items: - Is the issue with the Supplicant (client)? Authenticator (Brocade) or Authentication Server (radius)? - Do we see Mac address of the Supplicant being learned on the Brocade? - Is the client in the right vlan? -Do we see radius access request/response/accept/deny message? -The most straight forward steps to help isolate this problem is using Wireshark to capture the traffic on the client port (Supplicant) and the server port (Authentication Server). - Do we see the communications as shown in the diagram above? Is there anything missing in pcap? Is the problem between the Supplicant (client) and Authenticator (Brocade)? <ul><li> Mac-authentication use mac address of the Supplicant (end device /client) as the username/password for authentication with the Authentication server (radius server). So the most basic questions is the MAC being learned on the port connecting to the supplicant device? </li><li> Is the Supplicant device up and operational? </li><li> Does it send out any Ethernet packets to trigger MAC learning on the Authenticator (Brocade)? </li><li> Is the packet tagged or untagged? </li><li> Is the Authenticator (Brocade) has the port connecting Supplicant (end device) configured in the right vlan? Is it tagged or untagged? </li><li> If the MAC address is being learned on the right port and right vlan on the Brocade, then does it send out any Radius Access request toward the radius server? If not, most likely a Brocade issue. </li></ul> Is this a problem between the Authenticator (Brocade) and Authentication server (Radius server)? <ul><li> If MAC address is being learned correctly, does the Authenticator (Brocade) send out any Radius access request toward the Authentication server (Radius server)?If not, most likely an issue on Brocade </li><li> What if Radius respond with Access-Deny message? Most likely an issue with the username/password of the Supplication or Radius profile setting </li></ul> If everything looks correct, but the Authenticator (Brocade) still does not authorize the client? <ul><li> It is very possible that there is a bug in the code which resulted in this unexpected behaviors. Follow step3 and step 4 below to escalate. </li></ul> Commands to help isolate the problem: <ul><li> Show log </li><li> Show run </li><li> Show dot1x configuration </li><li> Show mac-address session all </li><li> show mac </li><li> show mac e x/y/z </li><li> Ptrace aaa //running from console </li></ul> At this point, we should be confident or have a very good idea where the issue might be. Continue to step 3 to identify and debug the cause of the issue below. If we still not able to isolate issue, continue with step 2 again. Step 3. Identify and debug the cause: If the issue is isolated and determined to be an issue with Supplicant. Have the customer check on the client side. It must be on and initiate mac learning. If the issue is isolated and determined to be an issue with the Authentication server, have the customer check the Radius server configuration. If the issue is determined to be Brocade. <ul><li> Double check Brocade configuration and make sure it is correct. </li></ul> If everything look correct but Brocade still unauthorized the device, collect all the details and requirements. <div>-show tech -show log</div> <div>-show dot1x configuration -show mac-address session all -show mac -show mac e x/y/z -Ptrace aaa //running from console -Pcap of client and server ports -Details of client such as make, model, OS -Details of radius server and profile setting</div> Step 4. Resolve or escalate the issue to Escalation Engineer: <ol><li> Check release notes, SFDC, teamtrak for any known/open issues. </li><li> Upgrade to the latest code </li><li> If upgrade to the latest code does not help, and if there is no known issue. We’ll need to replicate this issue in the lab to get it fixed. </li><li> Request a physical lab to be built by the lab team. </li><li> Compile all details and requirements and then try to replicate the issue in the lab. </li></ol>

MAC authentication is a way to configure a Brocade device to forward or block traffic from a MAC address based on information received from a RADIUS server.

2018-01-08T11:56:04-0800 2018-01-08T12:00:07-0800 https://support.ruckuswireless.com/articles/000007423 2018-01-04T13:47:51-0800 monthly 0.8 admin,premium knowledge_article_2735 knowledge_article_2735 2017-12-12T16:13:33-0800 000007423 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure a Two-level MCT? Two-level MCT Configuration example The following figure depicts a two-level MCT configuration. The clients can be server hosts or networking devices. The associated configuration follows. ---------- Note: The LAG IDs are locally significant only and need not be matching on the two ends of a LAG. ---------- Figure Example. Two-Level MCT <img alt="User-added image" height="552" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxsU&feoid=00N50000002Cf3M&refid=0EM50000000X7mp" width="500"></img> ---------- Note: In a two-level MCT configuration using dynamic LAGs, ensure that the upper and lower clusters have different Cluster IDs because the Cluster LACP module uses the Cluster ID as part of the LACPDU's system ID. ---------- AGG-A (R1) - Configuration lag lag_agg_a_1 static id 103 ports ethe 2/1 to 2/2 primary-port 2/1 deploy ! lag lag_agg_a_2 dynamic id 104 ports ethe 1/1 to 1/3 primary-port 1/1 deploy ! lag lag_agg_a_3 dynamic id 105 ports ethe 1/5 to 1/7 primary-port 1/5 deploy ! lag lag_agg_a_4 dynamic id 106 ports ethe 1/15 to 1/16 primary-port 1/15 deploy ! vlan 2 name session-vlan by port tagged ethe 2/1 to 2/2 router-interface ve 2 ! vlan 3 name keep-alive-vlan by port tagged ethe 1/12 router-interface ve 3 ! ! vlan 1905 by port tagged ethe 1/1 to 1/3 ethe 1/5 to 1/7 ethe 1/15 to 1/16 ethe 2/1 to 2/2 ! hostname R1 ! interface ve 2 ip address 10.1.1.1 255.255.255.0 ! interface ve 3 ip address 10.1.2.1 255.255.255.0 !! cluster MCT1 1 rbridge-id 1 session-vlan 2 keep-alive-vlan 3 icl BH1 ethernet 2/1 peer 10.1.1.2 rbridge-id 2 icl BH1 deploy client client-1 rbridge-id 1901 client-interface ethe 1/1 deploy client client-2 rbridge-id 1902 client-interface ethe 1/5 deploy client DIST_Cluster rbridge-id 1903 client-interface ethe 1/15 deploy ! AGG-B (R2) - Configuration lag lag_agg_b_1 static id 106 ports ethe 2/1 to 2/2 primary-port 2/1 deploy ! lag lag_agg_b_2 dynamic id 107 ports ethe 1/17 to 1/19 primary-port 1/17 deploy ! lag lag_agg_b_3 dynamic id 108 ports ethe 1/21 to 1/23 primary-port 1/21 deploy ! lag lag_agg_b_4 dynamic id 109 ports ethe 1/15 to 1/16 primary-port 1/15 deploy ! vlan 2 name session-vlan by port tagged ethe 2/1 to 2/2 router-interface ve 2 ! vlan 3 name keep-alive-vlan by port tagged ethe 1/11 router-interface ve 3 ! ! vlan 1905 by port tagged ethe 1/15 to 1/19 ethe 1/21 to 1/23 ethe 2/1 to 2/2 ! hostname R2 ! interface ve 2 ip address 10.1.1.2 255.255.255.0 ! interface ve 3 ip address 10.1.2.2 255.255.255.0 ! cluster MCT1 1 rbridge-id 2 session-vlan 2 keep-alive-vlan 3 icl BH1 ethernet 2/1 peer 10.1.1.1 rbridge-id 1 icl BH1 deploy client client-1 rbridge-id 1901 client-interface ethe 1/21 deploy client client-2 rbridge-id 1902 client-interface ethe 1/17 deploy client DIST_Cluster rbridge-id 1903 client-interface ethe 1/15 deploy ! DIST-A (R3) - Configuration ! lag lag_dist_a_1 static id 15 ports ethe 1/1 to 1/2 primary-port 1/1 deploy lag lag_dist_a_2 dynamic id 16 ports ethe 15/1 to 15/2 primary-port 15/1 deploy ! lag keep-alive static id 200 ports ether 11/25 to 11/36 primary-port 11/25 deploy ! vlan 5 name session-vlan by port tagged ethe 1/1 to 1/2 router-interface ve 5 ! vlan 6 name keep-alive-vlan by port tagged ethe 11/25 to 11/36 router-interface ve 6 spanning-tree ! vlan 1905 by port tagged ethe 1/1 to 1/2 ethe 15/1 to 15/2 ! hostname R3 hitless-failover enable ! interface ve 5 ip address 10.2.1.1 255.255.255.0 ! interface ve 6 ip address 10.2.2.1 255.255.255.0 ! cluster MCT2 2 rbridge-id 3 session-vlan 5 keep-alive-vlan 6 icl BH3 ethernet 1/1 peer 10.2.1.2 rbridge-id 4 icl BH3 deploy client AGG_Cluster rbridge-id 1801 client-interface ethe 15/1 deploy DIST-B (R4) - Configuration lag lag_dist_b_1 static id 40 ports ethe 17/1 to 17/2 primary-port 17/1 deploy ! lag dist_b_2 dynamic id 41 ports ethe 1/1 to 1/2 primary-port 1/1 deploy ! lag keep-alive static id 201 ports ethe 5/25 to 5/36 primary-port 5/25 deploy ! vlan 5 name session-vlan by port tagged ethe 17/1 to 17/2 router-interface ve 5 ! vlan 6 name keep-alive-vlan by port tagged ethe 5/25 to 5/36 router-interface ve 6 spanning-tree ! vlan 1905 by port tagged ethe 1/1 to 1/2 ethe 17/1 to 17/2 ! hostname R4 hitless-failover enable ! interface ve 5 ip address 10.2.1.2 255.255.255.0 ! interface ve 6 ip address 10.2.2.2 255.255.255.0 ! cluster MCT2 2 rbridge-id 4 session-vlan 5 keep-alive-vlan 6 icl BH3 ethernet 17/1 peer 10.2.1.1 rbridge-id 3 icl BH3 deploy client AGG_Cluster rbridge-id 1801 client-interface ethe 1/1 deploy

How to configure a Two-level MCT?

2018-01-04T13:47:51-0800 2018-01-04T18:00:18-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4oCAC?attachment_index=0 2018-01-04T18:00:18-0800 monthly admin,premium knowledge_article_2735 knowledge_article_2735_attachment_1 ka25B000000CcI4QAK_Attachment__c.pdf 5072835.0 application/pdf https://support.ruckuswireless.com/articles/000007420 2018-01-04T13:50:01-0800 monthly 0.8 admin,premium knowledge_article_2736 knowledge_article_2736 2017-12-12T16:13:33-0800 000007420 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to allocate TCAM space on FCX device configuration? TCAM space on FCX device configuration FCX devices store routing information for IPv4 and IPv6 and GRE tunnel information in the same TCAM table. You can configure the amount of TCAM space to allocate for IPv4 routing information and GRE tunnels. The remaining space is allocated automatically for IPv6 routing information. FCX devices have TCAM space to store 16,000 IPv4 route entries. Each IPv6 route entry and GRE tunnel use as much storage space as four IPv4 route entries. The default, maximum, and minimum allocation values for each type of data are shown in TCAM space on FCX device configuration. <img alt="User-added image" height="135" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxsZ&feoid=00N50000002Cf3M&refid=0EM50000000X7pA" width="500"></img> Allocating TCAM space for IPv4 routing information For example, to allocate 13,512 IPv4 route entries, enter the following command: device(config)# system-max ip-route 13512 Syntax: system-max ip-route routes The routes parameter specifies how many IPv4 route entries get allocated. The command output shows the new space allocations for IPv4 and IPv6. You must save the running configuration to the startup configuration and reload the device for the changes to take effect. After the device reloads, the space allocated for IPv4 and IPv6 routing information appears in the device running configuration in this format: system-max ip-route 13512 system-max ip6-route 514 ---------- Note: If you disable IPv6 routing, the TCAM space allocations do not change. If you want to allocate the maximum possible space for IPv4 routing information, you must configure the TCAM space manually. ---------- Allocating TCAM space for GRE tunnel information For example, to allocate space for 64 GRE tunnels, enter the following command at the Privileged EXEC level: device#system-max gre-tunnels 64 Syntax: system-max gre-tunnels tunnels The tunnels parameter specifies the number of GRE tunnels to allocate.

Allocating TCAM space for IPv4 routing information. Allocating TCAM space for GRE tunnel information

2018-01-04T13:50:01-0800 2018-01-04T18:00:17-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4lCAC?attachment_index=0 2018-01-04T18:00:17-0800 monthly admin,premium knowledge_article_2736 knowledge_article_2736_attachment_1 ka25B000000CcHzQAK_Attachment__c.pdf 4713653.0 application/pdf https://support.ruckuswireless.com/articles/000006889 2018-01-04T13:53:59-0800 monthly 0.8 admin,premium knowledge_article_2965 knowledge_article_2965 2017-12-12T14:35:55-0800 000006889 Validated (External) Premium Ruckus icx switches;Brocade eos products Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products Why do NetIron, FastIron, ICX, FCX, and other Brocade IP products fail to negotiate/converge STP/RSTP/PVST/RPVST? <div>There are two methods that may be used to resolve this issue, and either one may be used depending on user preference: </div> <div>1. Configure<code style="color: red; font-size: 13px;"> pvst-mode </code>on the MLX interfaces connecting to the VDX. This will cause the MLX to send the tagged BPDUs using MAC address 0100.0ccc.cccd. When the VDX receives the BPDUs with the new MAC address it will no longer strip the VLAN tag from the BPDU before forwarding it to the MLX, but will forward the BPDUs as received. </div> <div><code style="color: black; font-size: 13px;">MLX# sho run int e 1/17</code></div> <div><code style="color: black; font-size: 13px;">interface ethernet 1/17</code></div> <div><code style="color: black; font-size: 13px;"> enable</code></div> <div><code style="color: black; font-size: 13px;"> </code><code style="color: red; font-size: 13px;">pvst-mode</code></div> <div><code style="color: black; font-size: 13px;">!</code></div> <div><code style="color: black; font-size: 13px;"> MLX# sho run int e 1/18</code></div> <div><code style="color: black; font-size: 13px;">interface ethernet 1/18</code></div> <div><code style="color: black; font-size: 13px;"> enable</code></div> <div><code style="color: black; font-size: 13px;"> </code><code style="color: red; font-size: 13px;">pvst-mode</code></div> <div><code style="color: black; font-size: 13px;">!</code> </div> <div>2. Configure<code style="color: red; font-size: 13px;"> tunnel tagged-ieee-bpdu </code>on the VDX interfaces connecting the MLX. This will allow the VDX to forward the tagged IEEE MAC (0180.c200.0000) BPDUs without stripping off the VLAN tag. </div> <div><code style="color: black; font-size: 13px;">VDX# do sho run int gi 67/0/4</code></div> <div><code style="color: black; font-size: 13px;">interface GigabitEthernet 67/0/4</code></div> <div><code style="color: black; font-size: 13px;"> switchport</code></div> <div><code style="color: black; font-size: 13px;"> switchport mode trunk</code></div> <div><code style="color: black; font-size: 13px;"> switchport trunk allowed vlan add 7</code></div> <div><code style="color: black; font-size: 13px;"> no switchport trunk tag native-vlan</code></div> <div><code style="color: black; font-size: 13px;"> </code><code style="color: red; font-size: 13px;">tunnel tagged-ieee-bpdu</code></div> <div><code style="color: black; font-size: 13px;"> no shutdown</code></div> <div><code style="color: black; font-size: 13px;">!</code></div> <div><code style="color: black; font-size: 13px;">VDX# do sho run int gi 67/0/10</code></div> <div><code style="color: black; font-size: 13px;">interface GigabitEthernet 67/0/10</code></div> <div><code style="color: black; font-size: 13px;"> switchport</code></div> <div><code style="color: black; font-size: 13px;"> switchport mode trunk</code></div> <div><code style="color: black; font-size: 13px;"> switchport trunk allowed vlan add 7</code></div> <div><code style="color: black; font-size: 13px;"> no switchport trunk tag native-vlan</code></div> <div><code style="color: black; font-size: 13px;"> </code><code style="color: red; font-size: 13px;">tunnel tagged-ieee-bpdu</code></div> <div><code style="color: black; font-size: 13px;"> no shutdown</code></div> <div><code style="color: black; font-size: 13px;">!</code></div> <div> </div> <div>The RSTP instance for VLAN 7 has converged since making one of the configuration changes above: </div> <div><code style="color: black; font-size: 13px;">MLX# sho rstp vlan 7</code></div> <div><code style="color: black; font-size: 13px;"> VLAN 7 - RSTP instance 24</code></div> <div><code style="color: black; font-size: 13px;">--------------------------------------------------------------------</code></div> <div>RSTP (IEEE 802.1w) Bridge Parameters:</div> <div><code style="color: black; font-size: 13px;">Bridge Bridge Bridge Bridge Force tx</code></div> <div><code style="color: black; font-size: 13px;">Identifier MaxAge Hello FwdDly Version Hold</code></div> <div><code style="color: black; font-size: 13px;">hex sec sec sec cnt</code></div> <div><code style="color: black; font-size: 13px;">8000000cdbe0e238 20 2 15 Default 3</code></div> <div><code style="color: black; font-size: 13px;">RootBridge RootPath DesignatedBridge Root Max Hel Fwd</code></div> <div><code style="color: black; font-size: 13px;">Identifier Cost Identifier Port Age lo Dly</code></div> <div><code style="color: black; font-size: 13px;">hex hex sec sec sec</code></div> <div><code style="color: black; font-size: 13px;">8000000cdbe0e238 0 8000000cdbe0e238 Root 20 2 15</code></div> <div> </div> <div>RSTP (IEEE 802.1w) Port Parameters:</div> <div><code style="color: black; font-size: 13px;"> <--- Config Params -->|<-------------- Current state -----------------></code></div> <div><code style="color: black; font-size: 13px;">Port Pri PortPath P2P Edge Role State Designa- Designated</code></div> <div><code style="color: black; font-size: 13px;">Num Cost Mac Port ted cost bridge</code></div> <div><code style="color: red; font-size: 13px;">1/17 128 20000 F F DESIGNATED FORWARDING 0 8000000cdbe0e238</code></div> <div><code style="color: red; font-size: 13px;">1/18 128 20000 F F BACKUP DISCARDING 0 8000000cdbe0e238</code></div> <div><code style="color: black; font-size: 13px;"> </code></div> <div>See related KB article 6743 - PVST RSTP/STP does not converge between VDX and IP products when default vlan is not 1 on the IP products .</div>

NetIron, FastIron, ICX, FCX, and other Brocade IP products fail to negotiate/converge STP/RSTP/PVST/RPVST when connected to a VCS/VDX (Ethernet) fabric.

2018-01-04T13:53:59-0800 2018-01-04T18:00:15-0800 https://support.ruckuswireless.com/articles/000006827 2018-01-04T10:37:10-0800 monthly 0.8 admin,premium knowledge_article_2973 knowledge_article_2973 2017-12-12T14:35:53-0800 000006827 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How to configure Radius Server policy for MAC-authentication via GUI? Mac Authentication can be configured using the Radius Policy with the client's mac address entered as user and password. The different screen shots for each of the 4 steps are shown below. Important: Be sure to SAVE on each screen, by clicking on the 'Commit' button on the upper right-hand corner. Step 1 - Create Radius Group Policy for Mac Authentication (name of policy given for this example is 'mac-auth-group') under the Configuration--> Services--> RADIUS section: <img alt="User-added image" height="352" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txrv&feoid=00N50000002Cf3M&refid=0EM50000000X7EO" width="500"></img> Step 2 - Create Radius User Pool for given mac addresses to be allowed (mac address used in example below is D0-23-DB-60-37-72). Please note the format in which the mac address is being entered. Name of User pool for this example is MAC-Auth-users. <img alt="User-added image" height="372" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txrv&feoid=00N50000002Cf3M&refid=0EM50000000X7ET" width="500"></img> <img alt="User-added image" height="372" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txrv&feoid=00N50000002Cf3M&refid=0EM50000000X7EY" width="500"></img> Step 3 - Apply the Radius Group policy and Radius User Policy to the required Radius Server Policy (name of policy for this example is MAC-Auth-policy): <img alt="User-added image" height="375" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txrv&feoid=00N50000002Cf3M&refid=0EM50000000X7Ed" width="500"></img> Step 4 : At the end, make sure that the radius-server-policy is applied to the Controller device level profile shown under the Services sub-section as illustrated below: <img alt="User-added image" height="387" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txrv&feoid=00N50000002Cf3M&refid=0EM50000000X7Ei" width="500"></img>

How to configure Radius Server policy for MAC-authentication via GUI?

2018-01-04T10:37:10-0800 2018-01-04T12:00:12-0800 https://support.ruckuswireless.com/articles/000006858 2018-01-04T11:00:39-0800 monthly 0.8 admin,premium knowledge_article_3204 knowledge_article_3204 2017-12-12T13:15:39-0800 000006858 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to renumber stack units? Renumbering stack units You can use the stack secure-setup command to renumber stack units in a previously constructed stack. The most effective way to number your stack members is sequentially. You can skip numbers, but stack ID numbers should still be sequential. Sequential numbering makes it easier to replace stack units or to troubleshoot issues. ---------- NOTE: In a ring topology, 1, 2, 4, 5, and 1, 5, 4, 2 are both sequential. ---------- In the following example, three units make up a stack, but two of the units are numbered 5 and 6 (the active controller is numbered 1). Because this stack only contains three units, you can renumber the other units so that they are unit 2 and unit 3. <img alt="User-added image" height="290" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxsA&feoid=00N50000002Cf3M&refid=0EM50000000X7GK" width="500"></img> <h3>Configuration notes for renumbering stack units</h3> • Renumbering may cause loss of a unit configuration if the stack unit base module does not match the configuration on the active controller. However, secure-setup renumbering never changes the interface configuration. For example, if you switch the IDs of identical units 2 and 3, the active controller does not change 2/1/5 to 3/1/5 and vice versa. • If you assign an ID with an associated configuration to a stack unit with a different configuration, secure-setup changes the static configuration into a dynamic configuration so it can be overwritten by the learned configuration. • Swapping IDs for two or more identical units (for example, if units 2, 3, and 4 are identical, changing 2 to 3, 3 to 4, and 4 to 2) does not affect unit configuration except that the units are reset and assume the new IDs. • If you swap IDs for two units that are not identical (for example, unit 2 is an FCX648, and unit 3 is an FCX624), you may cause a configuration mismatch. If this happens, the active controller removes the configurations and resets both units. When both units boot with new IDs, the active controller learns their module types and creates new unit configurations for both. However, all interface configuration information related to units 2 and 3 is removed. • When you renumber identical units using secure-setup, the configurations are not mapped to the new units (because the configurations match exactly). However, if you switch IDs on units that are not identical, a configuration mismatch occurs. • When you assign an unused ID to a stack unit, the unit is reset with the new ID. All unit and interface configuration information related to the old stack ID is deleted. The active controller learns the configuration for the new unit. • Secure-setup does not swap configuration information for units that have had their IDs changed. For example, it does not change the 2/1/3 interface configuration or VLAN membership information into 3/1/3 information if the unit ID changes from 2 to 3. • If the configuration for a unit being replaced does not match the new unit type, the active controller removes the unit configuration and associated interface configuration. • All configurations learned following mismatches or the addition of new units are dynamic configurations. To convert them into static configurations, execute a write memory command on the active controller. This command preserves the configuration if a unit is removed from the stack.

How to renumber stack units?

2018-01-04T11:00:39-0800 2018-01-04T12:00:10-0800 https://support.ruckuswireless.com/articles/000007367 2018-01-03T10:25:36-0800 monthly 0.8 admin,premium knowledge_article_2756 knowledge_article_2756 2017-12-12T16:13:23-0800 000007367 Validated (External) Premium Brocade eos products Configuration;Security;System network management Configuration, Security, System Network Management, Brocade EOS Products How to configure DHCP snooping? <div id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div"> <div>DHCP snooping</div> <div>Dynamic Host Configuration Protocol (DHCP) snooping enables the Brocade device to filter untrusted DHCP packets in a subnet. DHCP snooping can ward off MiM attacks, such as a rogue DHCP server sending false DHCP server reply packets with the intention of misdirecting other users. DHCP snooping can also stop unauthorized DHCP servers and prevent errors stemming from user misconfiguration of DHCP servers. DHCP snooping is often used with Dynamic ARP Inspection and IP Source Guard. </div> <div>How DHCP snooping works</div> <div>When enabled on a VLAN, DHCP snooping stands between untrusted ports (those connected to host ports) and trusted ports (those connected to DHCP servers). A VLAN with DHCP snooping enabled forwards DHCP request packets from clients and discards DHCP server reply packets on untrusted ports. DHCP server reply packets on trusted ports to DHCP clients are forwarded, as shown in the following figures.</div> Examples: <img alt="User-added image" height="503" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxqY&feoid=00N50000002Cf3M&refid=0EM50000000X6zY" width="500"></img> Configuring DHCP snooping Configuring DHCP snooping consists of the following steps: 1. Enable DHCP snooping on a VLAN 2. Change the trust setting of ports that are connected to a DHCP server to trusted DHCP snooping is disabled by default, and the trust setting of ports is untrusted by default. Enabling DHCP snooping on a VLAN DHCP packets are inspected when DHCP snooping is enabled on a VLAN. DHCP snooping is disabled by default and must be enabled on the client and the DHCP server VLANs. To enable DHCP snooping, enter the following global command on VLAN 2: device(config)# ip dhcp snooping vlan 2 The command enables DHCP snooping on VLAN 2. Syntax: [no] ip dhcp snooping vlan vlan-id The vlan-id variable specifies the ID of a configured client or DHCP server VLAN. Enabling trust on a port connected to a DHCP server The default trust setting for a port is untrusted. To enable trust on a port connected to a DHCP server, enter the following commands: device(config)# interface ethernet 1/1/1 device(config-if-e10000-1/1/1)# dhcp snooping trust Port 1/1/1 is connected to a DHCP server. The commands change the CLI to the interface configuration level of port 1/1/1 and set the trust setting of port 1/1/1 to trusted. If 1/1/1 is a primary port, the configuration will apply to all ports in a LAG. Syntax: [no] dhcp snooping trust Disabling the learning of DHCP clients on ports To disable DHCP client learning on an individual port, enter the following commands: device(config)# interface ethernet 1/1/1 device(config-if-e10000-1/1/1)# dhcp snooping client-learning disable To disable DHCP client learning on a range of ports, enter the following command: device(config)# interface ethernet 1/1/1 to 1/1/5 device(config-mif-1/1/1-1/1/5)# dhcp snooping client-learning disable Syntax: [no] dhcp snooping client-learning disable Use the no form of the command to re-enable the DHCP client learning on a port after it has been disabled.</div>

How to configure DHCP snooping?

2018-01-03T10:25:36-0800 2018-01-03T12:00:29-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw3jCAC?attachment_index=0 2018-01-03T12:00:29-0800 monthly admin,premium knowledge_article_2756 knowledge_article_2756_attachment_1 ka25B000000Cd2eQAC_Attachment__c.pdf 4816658.0 application/pdf https://support.ruckuswireless.com/articles/000006658 2018-01-03T10:27:50-0800 monthly 0.8 admin,premium knowledge_article_3221 knowledge_article_3221 2017-12-12T16:14:25-0800 000006658 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products How to configure DHCP address acquisition attempts? The DHCP client periodically retries address acquisition based on the configured DHCP discovery interval. If you configure a value of 20 minutes, the DHCP client sends discovery messages for every 20-minute interval if the first acquisition attempt is unsuccessful. If you configured a value of two hours, the DHCP client stops address acquisition after two hours. The following example shows a 20-minute interval configured on a switch (global configuration) and a router (interface configuration): device(config)# ip dhcp-client discover-interval 20 device(config-if-e1000-0/1/1)# ip dhcp-client discover-interval 20 The following example shows a maximum duration of two hours configured on the device: device(config)# ip dhcp-client continuous-mode max-duration 2 DHCP Discover Packet <img alt="User-added image" height="274" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txkk&feoid=00N50000002Cf3M&refid=0EM50000000X6zn" width="500"></img>

The DHCP address acquisition enhancement allows a DHCP client to make configurable DHCP address acquisition attempts at lower rates without moving the client to a stopped state.

2018-01-03T10:27:50-0800 2018-01-03T12:00:28-0800 https://support.ruckuswireless.com/articles/000006680 2018-01-03T10:29:48-0800 monthly 0.8 admin,premium knowledge_article_3160 knowledge_article_3160 2017-12-12T14:11:52-0800 000006680 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products How to change the IP address (Gateway Address field) used for stamping BootP and DHCP requests? The BootP/DHCP stamp address is an interface parameter. Change the parameter on the interface that is connected to the BootP/DHCP client. To change the IP address used for stamping BootP/DHCP requests received on interface 1/1, enter commands such as the following. device(config)# interface ethernet 1/1 device(config-if-1/1)# ip bootp-gateway 10.157.22.26 In the example above we changed the BootP/DHCP stamp address for requests received on port 1/1 to 10.157.22.26. The Layer 3 switch will place this IP address in the Gateway Address field of BootP/DHCP requests that the Layer 3 switch receives on port 1/1 and forwards to the BootP/DHCP server. Syntax: ip bootp-gateway ip-addr

If you want the Layer 3 switch to use a different IP address to stamp requests received on the interface, use either of the following methods to specify the address.

2018-01-03T10:29:48-0800 2018-01-03T12:00:27-0800 https://support.ruckuswireless.com/articles/000006698 2018-01-03T11:02:17-0800 monthly 0.8 admin,premium knowledge_article_2795 knowledge_article_2795 2017-12-12T16:04:12-0800 000006698 Validated (External) Premium Ruckus icx switches;Brocade eos products System network management System Network Management, Ruckus ICX Switches, Brocade EOS Products How can sflow packets be checked via Wireshark? To check the sFlow packets via Wireshark trace, follow the below steps: 1. Install the Wireshark trace 2. Filter the sFlow packets alone by using the below commands. Make sure that sFlow is running on the device being searched for sFlow packets: <img alt="User-added image" height="137" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txr2&feoid=00N50000002Cf3M&refid=0EM50000000X70l" width="500"></img> 3. Verify the sFlow packets.

How can sflow packets be checked via Wireshark?

2018-01-03T11:02:17-0800 2018-01-03T12:00:22-0800 https://support.ruckuswireless.com/articles/000006763 2018-01-03T11:24:19-0800 monthly 0.8 admin,premium knowledge_article_2768 knowledge_article_2768 2017-12-12T16:04:18-0800 000006763 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How to Adopt a Brocade Mobility AP using Layer 3? <img alt="User-added image" height="396" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxrM&feoid=00N50000002Cf3M&refid=0EM50000000X71e" width="500"></img> Equipment used: <ul><li>Brocade Wireless Controller RFS4000/6000/7000 (4000 is used here)</li><li>Brocade Mobility AP (AP650)</li><li>DHCP Server (Windows Server 2003 R2)</li><li>Layer 3 switch/network (Brocade FCX)</li></ul> Steps: 1. Ensure that you have Layer 3 access (e.g. ping) between the RFS4000, the DHCP server, and the FCX (or whatever the AP(s) will plug into). If you cannot, troubleshoot setup until successful. 2. Configure the desired vlan with the port(s) the AP(s) will be plugged in to and a virtual interface: FCX(config)#vlan 33 FCX(config-vlan-33)# untagged ethernet 1/1/27 FCX(config-vlan-33)# router-interface ve 33 3. Configure the interface with an IP address (10.50.33.1 in the example below) as well as an IP helper address for the DHCP Server (10.50.43.81): FCX(config)#interface ve 33 FCX(config-vif-33)#ip address 10.50.33.1/24 FCX(config-vif-33)#ip helper-address 1 10.50.43.81 4. Turn on Power over Ethernet (PoE) for all of the ports with an AP connecting to it: FCX(config)#interface ethernet 1/1/27 FCX(config-if-e1000-1/1/27)# inline power 5. On your DHCP Server, add a new scope for 10.50.33.0/24, excluding 10.50.33.1 and all other address you may have manually assigned. On a Windows server, you may refer to <a href="http://technet.microsoft.com/en-us/library/cc784943%28WS.10%29.aspx" target="_blank">http://technet.microsoft.com/en-us/library/cc784943%28WS.10%29.aspx</a> for guidance. If you are using a different DHCP Server, please refer to that server’s manual on defining scopes. 6. On your DHCP Server, add a new option for the AP subnet (here 10.50.33.0/24) and specify the address(es) of your RFS controller(s). On a Windows server, you may refer to <a href="http://technet.microsoft.com/en-us/library/cc738833%28WS.10%29.aspx" target="_blank">http://technet.microsoft.com/en-us/library/cc738833%28WS.10%29.aspx</a> for guidance. Use the following values for the option: Name: PreferredController Data type: String Code: 189 (Wing 4.x & 5.x Compatible)Code: 191 (Wing 5.x Compatible Only) Description: Controller IP addresses After creating Option 189 or 191, under the value box enter the IP address(es) of your controllers, separating each with a space, e.g. 10.180.43.51 10.180.43.52 7. After configuring Option 189 for the server, make sure to apply it to the scope of the AP(s). On a Windows server, click on the Scope Options folder under the correct scope, right-click and select “Configure Options…”. Scroll down to Option 189 or 191 and make sure the box is checked. Click OK and you should see Option 189 or 191 under the Scope Options for the AP scope. 8. Plug in the AP to any of the configured ports (e.g. ethernet 1/1/27) and wait several minutes for the AP to adopt.

Adopting a Brocade Mobility AP using Layer 3

2018-01-03T11:24:19-0800 2018-01-03T12:00:15-0800 https://support.ruckuswireless.com/articles/000006785 2018-01-03T11:26:05-0800 monthly 0.8 admin,premium knowledge_article_3210 knowledge_article_3210 2017-12-12T13:15:36-0800 000006785 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches Configuration Configuration, FastIron CX Series How do I configure Campus and VDX products to bring up a vLAG? Refer to the topology diagram. In this very simple environment, we are using the FCX for layer three / inter-vlan routing. The VDX devices are providing network access. There is a 20 gigabit per second vLAG connecting the two platforms. Since this vLAG is carrying multiple VLANS, it will also need to be enabled for the 802.1q VLAN trunking protocol. Here are the configuration steps needed to make this environment work. Start by configuring PLY-6720-1. ---------- Note: The two VDX devices must be in VCS mode and members of the same fabric. VDX modes are beyond the scope of this article. ---------- Configure the vLAG link on PLY-6720-1 (link towards FCX): ply-6720-1# show running-config interface TenGigabitEthernet 1/0/3 interface TenGigabitEthernet 1/0/3 speed 10000 no fabric isl enable no fabric trunk enable channel-group 10 mode active type standard lacp timeout long no shutdown ! Configure the port-channel interface to represent the LACP bundle: ply-6720-1# show running-config interface Port-channel 10 interface Port-channel 10 vlag ignore-split switchport switchport mode trunk switchport trunk allowed vlan all no switchport trunk tag native-vlan no shutdown Configure the ISL link between the two VDX chassis: ---------- Note: These are system defaults and do not need to be explicitly configured. They are included here for thoroughness. ---------- ply-6720-1# show running-config interface TenGigabitEthernet 1/0/4 interface TenGigabitEthernet 1/0/4 fabric isl enable fabric trunk enable no shutdown Configure the access link to the end device: ply-6720-1# show running-config interface TenGigabitEthernet 1/0/1 interface TenGigabitEthernet 1/0/1 fabric isl enable fabric trunk enable switchport switchport mode access switchport access vlan 2 no shutdown Repeat these same steps for PLY-6720-2. Configure the vLAG link on PLY-6720-2 (link towards FCX): ply-6720-2# show running-config interface TenGigabitEthernet 2/0/3 interface TenGigabitEthernet 2/0/3 speed 10000 no fabric isl enable no fabric trunk enable channel-group 10 mode active type standard lacp timeout long no shutdown Configure the port-channel interface to represent the LACP bundle: ply-6720-2# show running-config interface Port-channel 10 interface Port-channel 10 vlag ignore-split switchport switchport mode trunk switchport trunk allowed vlan add 2,10 switchport trunk tag native-vlan no shutdown Configure the ISL link between the two VDX chassis: ---------- Note: These are system defaults and do not need to be explicitly configured. They are included here for thoroughness. ---------- ply-6720-2# show running-config interface TenGigabitEthernet 2/0/4 interface TenGigabitEthernet 2/0/4 fabric isl enable fabric trunk enable no shutdown Configure the access link to the end device: ply-6720-2# show running-config interface TenGigabitEthernet 2/0/1 interface TenGigabitEthernet 2/0/1 fabric isl enable fabric trunk enable switchport switchport mode access switchport access vlan 10 no shutdown Lastly, configure the FCX for this environment: Configure 10 gigabit per second interfaces 1/3/1 and 1/3/2 for LACP: FCX# show run int eth 1/3/1 interface ethernet 1/3/1 link-aggregate configure key 10000 link-aggregate active ! FCX# show run int eth 1/3/2 interface ethernet 1/3/2 link-aggregate configure key 10000 link-aggregate active Configure VLANs as needed for your environment. For this very simple topology, this is the minimum needed: FCX# show run vlan ! vlan 2 by port tagged ethe 1/3/1 to 1/3/2 router-interface ve 2 ! vlan 10 by port tagged ethe 1/3/1 to 1/3/2 router-interface ve 10 ! Configure the layer three interfaces: FCX# show run int ve 2 interface ve 2 ip address 192.168.2.1 255.255.255.0 ! FCX# show run int ve 10 interface ve 10 ip address 192.168.10.1 255.255.255.0 ! This completes the configuration tasks. Now verify our configuration on the two VDXs. Verifying the creation and base MAC of the port-channel interface on PLY-6720-1: ply-6720-1# sh lacp sys-id Port-channel Po 10 - System ID: 0x8000,01-e0-52-00-00-01 - SID Master: N/A Verifying that LACP keepalives are being sent and received on the local, physical interface: ply-6720-1# show lacp count Traffic statistics Port LACPDUs Marker Pckt err Sent Recv Sent Recv Sent Recv Aggregator Po 10 Te 1/0/3 10146 9367 0 0 0 0 ply-6720-1# Verifying the creation and base MAC of the port-channel interface on PLY-6720-2: ply-6720-2# sh lacp sys-id Port-channel Po 10 - System ID: 0x8000,01-e0-52-00-00-01 - SID Master: N/A Verifying that LACP keepalives are being sent and received on the local, physical interface: ply-6720-2# show lacp counter Traffic statistics Port LACPDUs Marker Pckt err Sent Recv Sent Recv Sent Recv Aggregator Po 10 Te 2/0/3 9014 8613 0 0 0 0 ply-6720-2# Verifying LACP operation on the FCX / FastIron device: Full interpretation of this output is well beyond the scope of this article. The main things to look for here are: 1) The physical interfaces intended to be in the same bundle share the same key. 2) The final column reflects the "Ope" (Operational) state. FCX# show link-agg System ID: 748e.f851.e100 Long timeout: 120, default: 120 Short timeout: 3, default: 3 Port [Sys P] [Port P] [ Key ] [Act][Tio][Agg][Syn][Col][Dis][Def][Exp][Ope] 1/3/1 1 1 10000 Yes L Agg Syn Col Dis No No Ope 1/3/2 1 1 10000 Yes L Agg Syn Col Dis No No Ope

How do I configure Campus and VDX products to bring up a vLAG?

2018-01-03T11:26:05-0800 2018-01-03T12:00:13-0800 https://support.ruckuswireless.com/articles/000006797 2018-01-03T11:27:55-0800 monthly 0.8 admin,premium knowledge_article_3150 knowledge_article_3150 2017-12-12T14:11:54-0800 000006797 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How to downgrade the firmware on AP7131 access points from 5.x to 4.x? Below is the procedure to downgrade an AP7131 access point from 5.x to 4.x. 1. Download the 5.x to 4.x reverse image from my.brocade.com downloads site. Each 5.x release has its equivalent 4.x reverse image. The filename format is BR7131-5.w.x.0-yyyR-0401zzzzzzR.img. For example, to downgrade from 5.5.5 to 4.1.5, the image is BR7131-5.5.5.0-018R-04010500004R.img. 2. Connect the AP's GE1 interface to a PoE switch and connect an FTP server to the switch. <img alt="User-added image" height="313" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxrW&feoid=00N50000002Cf3M&refid=0EM50000000X71o" width="500"></img> 3. Access the AP using a console cable and configure an IP address on vlan1: conf t self interface ge1 switchport mode access switchport access vlan 1 interface vlan 1 ip address 10.0.0.10/24 end commit wr mem 4. Downgrade the software using the following command: #upgrade ftp://<username>:<password>@<ftp server IP>/<reverse image filename> Replace: <username> by the FTP username <password> by the FTP password <ftp server IP> by the IP of the FTP server <reverse image filename> by the reverse image filename downloaded in step 1. Example: #upgrade ftp://anonymous:test123@10.0.0.2/BR7131-5.5.5.0-018R-04010500004R.img The AP will reboot into 4.x at this point. If you need to further downgrade or upgrade to another 4.x version, you can do so using the 4.x image.

How to downgrade the firmware on AP7131 access points from 5.x to 4.x?

2018-01-03T11:27:55-0800 2018-01-03T12:00:08-0800 https://support.ruckuswireless.com/articles/000006602 2018-01-02T14:47:24-0800 monthly 0.8 admin,premium knowledge_article_3220 knowledge_article_3220 2017-12-12T14:27:14-0800 000006602 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure GVRP in Brocade Switches? CONFIGURING GVRP IN BROCADE SWITCHES<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">GARP VLAN Registration Protocol (GVRP) is a Generic Attribute Registration Protocol (GARP) application that provides VLAN registration service by means of dynamic configuration (registration) and distribution of VLAN membership information.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">A Brocade device enabled for GVRP can do the following:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">• Learn about VLANs from other Brocade devices and configure those VLANs on the ports that learn about the VLANs. The device listens for GVRP Protocol Data Units (PDUs) from other devices, and implements the VLAN configuration information in the PDUs.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">• Advertise VLANs configured on the device to other Brocade devices. The device sends GVRP PDUs advertising its VLANs to other devices. GVRP advertises statically configured VLANs and VLANs learned from other devices through GVRP. <img alt="User-added image" height="120" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxpQ&feoid=00N50000002Cf3M&refid=0EM50000000X6rU" width="500"></img> How to enable GVRP<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">According to the above topology, the “distribution” switch is going to learn the VLANS 100, 200 and 300 dynamically such VLANS are configured statically on the core switch The port 1/2/1 on “core switch” is not allow to learn VLANS.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> ----------<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Note: <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">if the switch is running routing code is mandatory to enable STP at least on one VLAN. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> ----------<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Core switch configuration <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Core# conf t Core(config)# vlan 100 Core(config-vlan-100)# tag ether 1/2/1 Core(config-vlan-100)# vlan 200 Core(config-vlan-200)# tag ether 1/2/1 Core(config-vlan-200)# vlan300 Core(config-vlan-300)# tag ether 1/2/1 Core(config)# vlan 1 Core(config-vlan-1 )# span Core(config-vlan-1)# exit Core(config)# spanning-tree single 802-1w Core(config)# gvrp-enable Core(config-gvrp)# enable {all/Ethernet} ether 1/2/1 <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(255, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Note: “all” for all interfaces<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">Core(config-gvrp)# block-learning ether 1/2/1<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Distribution switch configuration<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Distri(config)# vlan 1 Distri(config-vlan-1)# span Distri(config)# spanning-tree single 802-1w Distri(config)# gvrp-enable Distri(config-gvrp)# enable ether 1/2/1 Distri(confi-gvrp)# block-applicant ether 1/1/10<span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(255, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">(This port is not going to advertise any learned VLAN)<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Show Commands Distri# show gvrp <img alt="User-added image" height="218" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxpQ&feoid=00N50000002Cf3M&refid=0EM50000000X6rZ" width="500"></img> Distri# show gvrp vlan brief <img alt="User-added image" height="160" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxpQ&feoid=00N50000002Cf3M&refid=0EM50000000X6re" width="500"></img> Core# show gvrp stat ether 1/2/1 <img alt="User-added image" height="220" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxpQ&feoid=00N50000002Cf3M&refid=0EM50000000X6rt" width="500"></img> Core# show gvrp e 1/2/1 <img alt="User-added image" height="168" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxpQ&feoid=00N50000002Cf3M&refid=0EM50000000X6s8" width="500"></img> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">The following video can be used as a guide:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <a href="https://www.youtube.com/watch?v=5wR2N_NkzgI&t=236s" style="text-align: left; color: rgb(51, 52, 53); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);" target="_blank">https://www.youtube.com/watch?v=5wR2N_NkzgI&t=236s</a><br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> ----------<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Note: <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">KB Article attached here. ----------

Help understanding and configuring GVRP in Brocade Switches.

2018-01-02T14:47:24-0800 2018-01-02T18:00:10-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvrCCAS?attachment_index=0 2018-01-02T18:00:10-0800 monthly admin,premium knowledge_article_3220 knowledge_article_3220_attachment_1 ka25B000000CdEpQAK_Attachment__c.docx 199507.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000006612 2018-01-02T14:57:01-0800 monthly 0.8 admin,premium knowledge_article_2811 knowledge_article_2811 2017-12-12T16:04:07-0800 000006612 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure OpenFlow on FastIron devices? OpenFlow Configuration To verify the configuration, please take into consideration the following OpenFlow show Commands: Display OpenFlow Information BrocadeICX# show openflow Display OpenFlow Interfaces BrocadeICX# show openflow interface Display OpenFlow Controller Connection Status BrocadeICX# show openflow controller Display OpenFlow Flows BrocadeICX# show openflow flows Display OpenFlow Groups BrocadeICX# show openflow group Display OpenFlow Meters BrocadeICX# show openflow meters <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-1B338D48-22CA-4D53-9086-330E7A5A8A5E">Adding the OpenFlow structure figure below for reference. <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txpp&feoid=00N50000002Cf3M&refid=0EM50000000X6tL"></img> <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-CEF7EC86-85B3-4E87-B078-2F5F08C05CB5"> Enabling OpenFlow <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-61D35AF5-70A1-49FD-87D1-84DB6EED7532"> To enable OpenFlow 1.3 on the switch: BrocadeICX# Configure terminal BrocadeICX(config)# Openflow enable ofv130 </div> In the command shown above, use ofv100 instead of ofv130 for enabling OpenFlow 1.0. </div> <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__SECTION_CDCCAACFB54F4AA6BDDE9C82CD09DEA8"> Configuring the Default Behavior as Send-to-Controller <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-917C3501-5F3F-43D5-B9E4-C4158F67A7FE"> By default, when the incoming traffic does not match any of the installed flows, it gets dropped. User can choose to send this unknown traffic to the OpenFlow Controller in the form of Packet_IN messages. BrocadeICX(config)# openflow default-behavior send-to-controller BrocadeICX(config)# </div> </div> <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__SECTION_3E8E3649789542C291547E8C5DB19438"> Configuring a Connection to the Controller <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-414163F5-4170-40AB-B5CF-DDC7DF5404F3"> The connection to the controller can be of two types: <ul><li>Active - The switch initiates the connection to the controller</li><li>Passive - The switch passively listens on the specified port (6633 by default) for controller commands</li></ul> </div> It is up to the network administrator to choose between the Active and Passive modes. There is no added advantage to using one particular mode. The same applies for the connection type which can be TCP or SSL. <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-9A8CA6DA-2C86-408F-B527-BE3C5FF1281B"> To configure passive connection with no ssl, enter the following command: BrocadeICX(config)# Openflow controller passive no-ssl </div> <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-276594E3-F851-4F9D-80B8-1E6992A7F58A"> To configure Active connection to the controller with IP address 10.20.226.189 , enter the following command: BrocadeICX(config)# OpenFlow controller ip-address 10.20.226.189 no-ssl </div> </div> <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__SECTION_7EC3CFCCE11B4152B80B674C0C861C2E"> Enabling OpenFlow on the Port <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-C1317DCE-6269-4224-A747-25D4538F8206"> OpenFlow can be enabled on the port in three modes: <ul><li>Layer2 - Match only layer2 fields in the data packet</li><li>Layer3 - Match only layer3 and layer4 fields in the data packet</li><li>Layer23 - Match layer2, layer3, and layer4 simultaneously</li></ul> </div> <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-1E19C117-38EB-4F67-A959-97F603567695"> The following command shows how to enable OpenFlow on port 1/1/16 in layer2 mode. When OpenFlow is enabled on a port, the CDP/FDP protocols get disabled. A warning message is returned to inform the user about this change. BrocadeICX(config)# interface ethe 1/1/16 BrocadeICX(config-if-e1000-1/1/16)# OpenFlow enable layer2 Warning: Enabling OpenFlow on port e1/1/16 disables CDP/FDP and spanning-tree on it BrocadeICX(config-if-e1000-1/1/16)# </div> In the command shown above, use 'layer3' or 'layer23' instead of 'layer2' to enable OpenFlow on the interface in layer3 or layer23 mode respectively. In Layer2 mode and Layer3 mode, each flow occupies one TCAM rule whereas Layer23 mode occupies two TCAM rules. </div> <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__SECTION_44724B180EB9452195C766E47FB9D5FC"> Configuring Protected/Unprotected VLANs for Hybrid Mode (optional) When OpenFlow is enabled in Hybrid-Port mode on a port, the user has the option to configure protected or unprotected VLANs. By default, any VLAN that this port is tagged in is treated as an unprotected VLAN. No additional configuration is necessary. Protected VLANS however, need to be explicitly mentioned using the command shown below so that they are not treated as unprotected VLANs. <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-E31E9E86-3DBE-4138-9E8B-7FF7C5B86FDB"> To configure protected VLANs 100 and 200 on port 1/1/17, use the following procedure: <ol id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__OL_DAF59AF903CD4C98B9B155444A91EE61"><li id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__LI_66D354AD21944E06B7A9DEE62135EE7D"> Enable OpenFlow on port 1/1/17 in layer2 hybrid port mode. BrocadeICX(config-if-e1000-1/1/17)# openflow enable layer2 hybrid-mode Warning: Enabling OpenFlow on port e1/1/17 disables CDP/FDP, MAC-learning and spanning-tree on it </li><li id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__LI_B6F2187024D94FF1A8583D2F13AA80F2"> Configure protected VLANs 100 and 200. BrocadeICX(config-if-e1000-1/1/17)# openflow protected-vlans 100 200 BrocadeICX(config-if-e1000-1/1/17)# </li><li id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__LI_5A95BEFFDF2A4D229FD7C6A194E8B636"> Tag the port 1/1/17 to VLANS 100, 200, and 300. VLAN 300 will be an unprotected VLAN. NOTE <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-809C63EC-F1D3-4B42-B5D0-FC2715D5FE78"> It is mandatory to tag the port to the VLANs configured as protected VLANs. </div> BrocadeICX(config-vlan-10)# vlan 100 BrocadeICX(config-vlan-100)# tagged ethe 1/1/17 Added tagged port(s) ethe 1/1/17 to port-vlan 100. BrocadeICX(config-vlan-100)# vlan 200 BrocadeICX(config-vlan-200)# tagged ethe 1/1/17 Added tagged port(s) ethe 1/1/17 to port-vlan 200. BrocadeICX(config-vlan-200)# vlan 300 BrocadeICX(config-vlan-300)# tagged ethe 1/1/17 Added tagged port(s) ethe 1/1/17 to port-vlan 300. BrocadeICX(config-vlan-300)# </li></ol> </div> </div> <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__SECTION_9F5D366EA68A49E99BD548F65FA304BA"> Configuring System-max Settings for OpenFlow <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-9A79F9DE-B6BE-4DCA-98EE-F7E369644DBF"> The following system max settings are required when enabling OpenFlow in scaled scenarios: <ul><li>OpenFlow Flow Entries (needs a reboot):</li><li>The following command configures the system-max setting for OpenFlow entries to 3000.</li></ul> <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-A69C3C15-CE52-473A-B9ED-2A482563E92E"> BrocadeICX(config)# system-max openflow-flow-entries ? DECIMAL Valid range 0 to 12000 (default: 1024) BrocadeICX(config)# system-max openflow-flow-entries 3000 Reload required. Please write memory and then reload or power cycle. BrocadeICX(config)# </div> </div> </div> Based on the number of ICX6610 units that are configured in a stack, a user can chose to set this value to a higher number. For example in a two unit ICX6610-24 stack, a user can set this value to 6000 (3000x2). In a two unit ICX6610-48 stack, a user can set this value to 12000 because it has four available devices. <ul><li id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__LI_C1E38554D138497C9DEF9ABD2358E593"> OpenFlow Group Entries for Group Type SELECT (needs a reboot): The following command configures the system-max setting maximum number of group entries defined in SELECT mode. This in turn reduces the number of Link Aggregation Groups (LAGs) available in the system that are used for normal forwarding. The number of LAGs will be 127 minus the number of group SELECT entries configured. This setting is only applicable for OpenFlow groups defined in SELECT mode. The other modes ALL, INDIRECT and FF (Fast Failover) are not impacted by this setting. BrocadeICX(config)# system-max openflow-group-select-entries ? DECIMAL Valid range 0 to 120 (default: 0) BrocadeICX(config)# system-max openflow-group-select-entries 100 Reload required. Please write memory and then reload or power cycle. BrocadeICX(config)# </li><li id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__LI_4D851ECFA85B4A8FB6F3AA968C6C0D8A"> OpenFlow Next Hop Entries for the TTL Decrement Action (needs a reboot): The following command shows the system-max value for OpenFlow next-hop entries set to 500. If the number of flows that have the action to decrement the network TTL go beyond the number specified in this command, they will be rejected. <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-FCB477DE-3E2F-464C-96F5-119F92030FF2"> BrocadeICX(config)#s ystem-max openflow-nexthop-entries ? DECIMAL Valid range 0 to 1024 (default: 0) BrocadeICX(config)#s ystem-max openflow-nexthop-entries 500 Total max configured ipv4 routes are 12000 - Max ipv4 routes configured for default VRF are 7000 - Max openflow nexthop entries configured are 500(route used 2000) - Max ipv4 routes available for all non-default VRFs are 3000 Warning: Please revalidate these values to be valid for your configuration. Reload required. Please write memory and then reload or power cycle. BrocadeICX(config)# </div> </li><li id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__LI_3FFD9604046D47A9B49CD8FC704A75C1"> OpenFlow Protected/Unprotected VLAN Entries (needs a reboot): </li></ul> The following command shows the system max values for protected VLANs and unprotected VLANS for the system set to 200 each. <div id="GUID-8BFF22F5-73F2-4453-8DD7-D63CD8B751FC__GUID-D6E483CF-CC05-43A9-A724-5DD9A4B21895"> BrocadeICX(config)# system-max openflow-pvlan-entries DECIMAL Valid range 0 to 256 (default: 40) BrocadeICX(config)# system-max openflow-pvlan-entries 200 Reload required. Please write memory and then reload or power cycle. BrocadeICX(config)# system-max openflow-un openflow-unprotectedvlan-entries BrocadeICX(config)# system-max openflow-unprotectedvlan-entries DECIMAL Valid range 0 to 256 (default: 40) BrocadeICX(config)# system-max openflow-unprotectedvlan-entries 200 Reload required. Please write memory and then reload or power cycle. BrocadeICX(config)# </div> </div>

How to configure OpenFlow on FastIron devices?

2018-01-02T14:57:01-0800 2018-01-02T18:00:09-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvrMCAS?attachment_index=0 2018-01-02T18:00:09-0800 monthly admin,premium knowledge_article_2811 knowledge_article_2811_attachment_1 ka25B000000CdELQA0_Attachment__c.pdf 824049.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000TvrMCAS?attachment_index=2 2018-01-02T18:00:09-0800 monthly admin,premium knowledge_article_2811 knowledge_article_2811_attachment_1 ka25B000000CdELQA0_Attachment3__c.pdf 811719.0 application/pdf https://support.ruckuswireless.com/articles/000006552 2018-01-02T10:15:35-0800 monthly 0.8 admin,premium knowledge_article_3049 knowledge_article_3049 2017-12-12T14:34:03-0800 000006552 Validated (External) Premium Ruckus icx switches Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches Why am I unable to ping or telnet the management IP of a switch after LLDP is enabled? <div id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div">By default, Brocade Layer 2 devices use the MAC address of the first port as the MAC address for Layer 2 management traffic. For example, when the Brocade device receives an ARP request for its management IP address, it responds with the first port MAC address. This may cause problems in some configurations where the Brocade device uses the same MAC address for management traffic as for switched traffic. Users can configure the Brocade device to use a different MAC address for Layer 2 management traffic than for switched traffic. When users issue the use-local-management-mac command, the Brocade device changes a local bit in the first port MAC address and uses this MAC address for management traffic. The second bit of the first port MAC address is changed to 2. For example, if the MAC address is 00e0.5201.9900 after the feature is enabled, the switch uses 02e0.5201.9900 for management functions. Switched traffic will continue to use the first port MAC address without the local bit setting. Example: <div>Brocade(config)# use-local-management-mac Brocade(config)# write memory Brocade(config)# end Brocade# reload ---------- Note: Users must save the configuration and reload the software to place the change into effect. ----------</div> </div>

When using a certain topology such as the one depicted below, Spanning Tree will work in such way that will block one of the ports to prevent a loop from happening.

2018-01-02T10:15:35-0800 2018-01-02T12:00:27-0800 https://support.ruckuswireless.com/articles/000006555 2018-01-02T10:24:40-0800 monthly 0.8 admin,premium knowledge_article_2986 knowledge_article_2986 2017-12-12T14:35:49-0800 000006555 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches How to configure Rate Limiting? Configuration notes for rate limiting <ul><li>Rate limiting is available only on inbound ports.</li><li>Port based Rate limiting is not supported on the SX-FI62XG and SX-FI42XG modules of the FastIron X Series devices.</li><li>FastIron X Series devices do not support fixed rate limiting on tagged ports in the base Layer 3 and full Layer 3 images.</li><li>The rate limit on IPv6 hardware takes several seconds to take effect at higher configured rate limit values. For example, if the configured rate limit is 750 Mbps (1500000 packets/second, in ICX 6650 devices), line-rate limiting could take up to 43 seconds to take effect.</li><li>You can enable rate limiting on Static LAG only. You cannot enable rate limiting on other types of LAG.</li><li>You can configure rate limiting on individual ports of the LAG. You cannot configure rate limiting on the LAG itself.</li></ul> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Configuring a port-based rate limiting policy To configure rate limiting on a port, enter commands such as the following. Device(config)#interface ethernet 1/2/4 Device(config-if-e1000-1/2/4)#rate input fixed 500 These commands configure a fixed rate limiting policy that allows port 24 to receive a maximum of 500 kbits (500 packets in ICX 6650 devices) per second. If the port receives additional bytes (packets in ICX 6650 devices) during a given one-second interval, the port drops all inbound packets on the port until the next one-second interval starts. Syntax: [no] rate-limit input fixed average-rate For FastIron devices, the average-rate parameter specifies the maximum number of kilobits per second (kbps) (packets per second (pkts/s) in ICX 6650 devices) the port can receive. The minimum rate that can be configured is 64 kpbs (125 pkts/s in ICX 6650 devices). On Brocade ICX 7750 devices, the syntax is: Syntax: [no] rate-limit input fixed average-rate [ burst burst-size ] The optional burst parameter specifies the burst size in kilobits. By default, the least burst size is set to accommodate five jumbo frames. The upper limit depends on the burstiness of traffic in a deployment scenario and should be user configured. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Displaying the fixed limiting configurations <div>To display the fixed rate limiting configuration on the device, enter the show rate-limit input command. <img alt="User-added image" height="136" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txom&feoid=00N50000002Cf3M&refid=0EM50000000X6hP" width="500"></img></div>

Fixed rate limiting counts the number of bytes (packets in ICX 6650 devices) that a port receives, in one second intervals.

2018-01-02T10:24:40-0800 2018-01-02T12:00:20-0800 https://support.ruckuswireless.com/articles/000006561 2018-01-02T10:27:57-0800 monthly 0.8 admin,premium knowledge_article_2984 knowledge_article_2984 2017-12-12T14:35:51-0800 000006561 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches How to configure Rate Shaping? Configuring outbound rate shaping for a port To configure the maximum rate at which outbound traffic is sent out on a port, enter commands such as the following: Device(config)# interface ethernet 1/1/2 Device(config-if-e1000-1/1/2)# rate-limit output shaping 1300 The configured 1300 Kbps outbound rate shaping on port 1/1/2 is rounded up to the nearest multiple of the minimum value on the device. On ICX 6650 devices, the value is specified in pkts/s. Syntax: [no] rate-limit output shaping value Configuring outbound rate shaping for a specific priority To configure the maximum rate at which outbound traffic is sent out on a port priority queue, enter commands such as the following: Device(config)# interface ethernet 1/1/2 device(config-if-e1000-1/1/2)# rate-limit output shaping 500 priority 7 The configured 500 Kbps limit for outbound traffic on Priority queue 7 on port 1/1/2 is rounded up to the nearest multiple of 651 Kbps. On ICX 6650 devices, the value. specified is in pkts/s. Syntax: [no] rate-limit output shapingvalue priority priority-queue Specify 0-7 for priority-queue. Configuring outbound rate shaping for a LAG port This feature is supported on individual ports of a LAG group. To configure the maximum rate at which outbound traffic is sent out on a LAG port, enter the following on each LAG port where outbound traffic will be shaped: device(config)# lag lag1 static device(config-lag-lag1)# rate-limit output shaping ethe 1/1/5 651 Syntax: [no] rate-limit output shaping ethernet unit/slot/port ratelimit Displaying rate shaping configurations To display the configured outbound rate shaper on a device, enter the show rate-limit output-shaping command. The following is a sample output from an ICX 6650 device. The display lists the ports on a device, the configured outbound rate shaper on a port and for a priority for a port. <img alt="User-added image" height="77" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txow&feoid=00N50000002Cf3M&refid=0EM50000000X6hU" width="500"></img>

Configuring outbound rate shaping on ports

2018-01-02T10:27:57-0800 2018-01-02T12:00:18-0800 https://support.ruckuswireless.com/articles/000006566 2018-01-02T10:33:58-0800 monthly 0.8 admin,premium knowledge_article_2823 knowledge_article_2823 2017-12-12T16:04:03-0800 000006566 Validated (External) Premium Ruckus icx switches Configuration;Security Configuration, Security, Ruckus ICX Switches How to configure TACACS/TACACS+? Configuration Procedures TACACS <ul><li> Identify TACACS servers </li><li> Set optional parameters </li><li> Configure authentication-method lists </li></ul> TACACS+ <ul><li> Same as TACACS above, plus </li><li> Optionally configure TACACS+ authorization </li><li> Optionally configure TACACS+ accounting </li></ul> TACACS Configuration Considerations <ul><li> Deploy at least one TACACS or TACACS+ server in your network </li><li> Support for authentication using up to eight TACACS/TACACS+ servers </li><li> Select only one primary authentication method per device access type </li></ul> 1 – Identify the TACACS/TACACS+ Servers Syntax: tacacs-server <ip-addr>|<hostname> [auth port<number>] Example: To identify three TACACS/TACACS+ servers, enter commands: Device(config)# tacacs-server host 207.94.6.161 Device(config)# tacacs-server host 207.94.6.191 Device(config)# tacacs-server host 207.94.6.122 Up to eight tacacs-server host commands for up to eight different servers can be configured. 2 – Set Optional TACACS/+ Parameters Device(config)# tacacs-server ? dead-time Not used in this release enable Enable VLAN filter host host IP auth-port PORT key Default access string (TACACS+ only) (max 32 characters) retransmit Number of retries before giving up (max 5 times) timeout Server time out in seconds (max 15 seconds) Device(config)# tacacs-server Device(config)# tacacs-server host 1.2.3.4 auth-port 49 authentication-only key abc Device(config)# tacacs-server host 1.2.3.5 auth-port 49 authorization-only key def Device(config)# tacacs-server host 1.2.3.6 auth-port 49 accounting-only key ghi 3 – Configure Authentication-method List You must create a separate authentication-method list for Telnet/SSH CLI access, and for access to Privileged EXEC level and CONFIG levels of the CLI. Syntax: [no] aaa authentication enable | login default <method1> [<method2>] [<method3>] [<method4>] [<method5>] [<method6>] [<method7>] Example configuration for TACACS/TACACS+ as primary authentication method: For securing Telnet/SSH access to the CLI: Device(config)# enable telnet authentication Device(config)# aaa authentication login default tacacs local For securing access to CLI Privileged EXEC and CONFIG levels Device(config)# aaa authentication enable default tacacs local none Enter Priv EXEC Mode After Telnet /SSH Login To configure instead of User EXEC mode (Default) use the following command: Syntax: aaa authentication login privilege-mode Device(config)# aaa authentication login privilege-mode Configuring Exec Authorization To configure, enter: Syntax: aaa authorization exec default tacacs+ | none Device(config)# aaa authorization exec default tacacs+ User’s privilege level is obtained from TACACS+ server in the “brocade-privlvl” A-V (Attribute-Value) pair. If the above command exists in the configuration, the device assigns the user the privilege level specified by this A-V pair. Otherwise, the user is granted Super User access Configuring Command Authorization From the CLI Access Super User privilege level enter: Syntax: aaa authorization commands <privilege-level> default tacacs+ | radius | none Device(config)# aaa authorization commands 0 default tacacs+ The <privilege-level> parameter can be one of the following: <ul><li> 0 - Authorization is performed for commands available at the Super User level (all commands) </li><li> 4 - Authorization is performed for commands available at the Port Configuration level (port-config and read-only commands) </li><li> 5 - Authorization is performed for commands available at the Read Only level (read-only commands) </li></ul> If configured, command accounting is performed for these commands. Configure Accounting for Telnet/SSH To configure, use these commands: Syntax: aaa accounting exec default start-stop radius | tacacs+ | none Device(config)# aaa accounting exec default start-stop tacacs+ Configure Accounting for CLI Commands Syntax: aaa accounting commands <privilege-level> default start-stop radius | tacacs+ | none To configure the device to do TACACS+ accounting for Super User privilege level commands enter: Device(config)# aaa accounting commands 0 default start-stop tacacs+ Configure Accounting for System Events Syntax: aaa accounting system default start-stop radius | tacacs+ | none Device(config)# aaa accounting system default start-stop tacacs+ This example causes an Accounting Start packet to be sent to the TACACS+ accounting server when a system event occurs, and an Accounting Stop packet to be sent when the system event is completed. Configure Interface as Source for All TACACS/TACACS+ Packets Syntax: ip tacacs source-interface ethernet <portnum> | pos <portnum> | loopback <num> | ve <num> Example: Device(config)# int ve 1 Device(config-vif-1)# ip address 10.0.0.3/24 Device(config-vif-1)# exit Device(config)# ip tacacs source-interface ve 1 The example configures the lowest-numbered IP address configured on a virtual interface as the device's source for all TACACS/TACACS+ packets. Enabling SNMP Access for TACACS For IronView Network Manager or other SNMP management applications, enter: Syntax: [no] enable snmp config-tacacs Device(config)# enable snmp config-tacacs Set the following for TACACS+ configuration: <ul><li> TACACS+ global key </li><li> TACACS+ server </li></ul> Display TACACS/TACACS+ Information The show web command displays the privilege level of Web management interface users. Example: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txp6&feoid=00N50000002Cf3M&refid=0EM50000000X6hZ"></img> The show aaa command displays information about all TACACS+ and RADIUS servers identified on the device. For example: <img alt="User-added image" height="286" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Txp6&feoid=00N50000002Cf3M&refid=0EM50000000X6he" width="500"></img>

How to configure TACACS/TACACS+

2018-01-02T10:33:58-0800 2018-01-02T12:00:16-0800 https://support.ruckuswireless.com/articles/000006529 2018-01-02T10:37:49-0800 monthly 0.8 admin,premium knowledge_article_2927 knowledge_article_2927 2017-12-12T15:03:15-0800 000006529 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What are the basics for setting up and verifying MCT? Basic Configuration Setup ---------- Note: This needs to be configured on both MCT peers. ---------- <ol style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Configure LAGs</li></ol> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config)# lag “ICL” dynamic id 1 (config-lag-ICL)# ports ethe 1/1 to 1/2 (config-lag-ICL)# primary-port 1/1 (config-lag-ICL)# deploy ! (config)# lag “Client1” dynamic id 2 (config-lag-Client1)# ports 1/3 to 1/4 (config-lag-Client1)# primary-port 1/3 (config-lag-Client1)# deploy ! (config)# lag “Client2” dynamic id 3 (config-lag-Client2)# ports 1/5 (config-lag-Client2)# primary-port 1/5 (config-lag-Client2)# deploy</code> <ol start="2" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Configure user VLAN1</li></ol> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config)# vlan 2 name Client-VLAN (config-vlan-2)# untagged ethe 1/3 to 1/7 (config-vlan-2)# tagged ethe 1/1 to 1/2</code> <ol start="3" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Configure MCT Session VLAN (for CCP Communications)2</li></ol> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config)# vlan 4090 name MCT-VLAN (config-vlan-4090)# tagged ethe 1/1 to 1/2</code></div> <ol start="4" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Create VE on MCT VLAN</li></ol> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config-vlan-4090)# router-interface ve 100</code></div> <ol start="5" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Configure VE interface</li></ol> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config)# interface ve 100 (config-vif-100)# ip address 1.1.1.1/24</code></div> <ol start="6" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Create MCT cluster</li></ol> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config)# cluster MCT 1</code></div> <ol start="7" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Assign Rbridge ID</li></ol> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config-cluster-MCT)# rbridge-id 1 Note: The other peer should be configured as rbridge-id 2</code></div> <ol start="8" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Define session VLAN1</li></ol> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config-cluster-MCT)# session-vlan 4090</code></div> <ol start="9" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Define member VLAN</li></ol> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config-cluster-MCT)# member-vlan 2</code></div> <ol start="10" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Specify ICL ports</li></ol> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config-cluster-MCT)# icl ICL ethernet 1/1</code></div> <ol start="11" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Define MCT peer</li></ol> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config-cluster-MCT)# peer 1.1.1.2 rbridge-id 2 icl ICL (config-cluster-MCT)# deploy</code></div> <ol start="12" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Define MCT clients</li></ol> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config-cluster-MCT)# client Client1 (config-cluster-MCT-Client1)# rbridge-id 100</code></div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config-cluster-MCT-Client1)# client-interface ethernet 1/3 (config-cluster-MCT-Client1)# deploy</code></div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(config-cluster-MCT-Client1)# client Client2 (config-cluster-MCT-Client2)# rbridge-id 200 (config-cluster-MCT-Client2)# client-interface ethernet 1/5 (config-cluster-MCT-Client2)# deploy</code></div> ---------- Note: Configure the same on the other MCT peer. ---------- Normal Operation <ol style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>ICL normal operation: Client ports on both MCT peers active</li><li>ICL failure w/ keep-alive VLAN w/Client Isolation Loose Mode: Client ports remain active only on Master MCT node</li><li>ICL failure w/o keep-alive VLAN w/Client Isolation Loose Mode: Client ports remain active on both MCT peers</li><li>ICL failure w/o keep-alive VLAN w/ Client Isolation Strict Mode: All client ports shutdown</li><li>MCT peer switch (node) failure: All traffic will failover to the remaining node</li><li>Client port failure on an MCT node: Client traffic will be forwarded on remaining links. MAC tables associated with failing port will be cleared and learned on remaining interfaces. User traffic may be impacted.</li></ol> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Verifying the MCT Operation <ol style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li><code style="color: red; font-size: 13px; font-style: normal; font-weight: normal;">MCT1# show cluster 1 peer</code></li></ol> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Cluster MCT 1 ============= Rbridge Id: 1, Session Vlan: 4090 Cluster State: Deploy Client Isolation Mode: Loose Configured Member Vlan Range: 2 Active Member Vlan Range: 2</code></div> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Peer Info: ---------- Peer IP: 1.1.1.2, Peer Rbridge Id: 2, ICL: ICL KeepAlive Interval: 30 , Hold Time: 90, Fast Failover Active Vlan Range: 2 Peer State: CCP Up (Up Time: 0 days: 1 hr:49 min:43 sec</code> <ol start="2" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li> <div><code style="color: red; font-size: 13px; font-style: normal; font-weight: normal;">MCT1# show cluster 1 ccp peer</code></div> </li></ol> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">PEER IP ADDRESS STATE UP TIME --------------- ------------- -------------- 1.1.1.2 OPERATIONAL 0 days: 1 hr:47 min:26 sec</code> <ol start="3" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li><code style="color: red; font-size: 13px; font-style: normal; font-weight: normal;">MCT1# show cluster 1 client</code></li></ol> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> Client Info: ------------ Name Rbridge-id Config Port Trunk FSM-State CC4 400 Deployed 1/24 4 Remote Up CC5 500 Deployed 1/5 5 Local Up CC6 600 Deployed 1/17 6 Up CC7 700 Deployed 1/22 7 Admin Up</code>

Basic Configuration Setup

2018-01-02T10:37:49-0800 2018-01-02T12:00:13-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tvq1CAC?attachment_index=0 2018-01-02T12:00:13-0800 monthly admin,premium knowledge_article_2927 knowledge_article_2927_attachment_1 ka25B000000CdNwQAK_Attachment__c.pdf 45792.0 application/pdf https://support.ruckuswireless.com/articles/000006526 2018-01-02T10:48:04-0800 monthly 0.8 admin,premium knowledge_article_2925 knowledge_article_2925 2017-12-12T15:03:15-0800 000006526 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What is Q-in-Q or 802.1Q tunneling? <img alt="User-added image" height="136" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxpG&feoid=00N50000002Cf3M&refid=0EM50000000X6iN" width="500"></img> Above you see two routers called R1 and R2, imagine these routers are the user sites that we want to connect through the service provider network which consists of SW1, SW2 and SW3. Our user wants to use VLAN 12 between the two sites and expects our service provider to transport this from one site to another. In my example our user will be using VLAN 12 for traffic between their sites. The service provider has decided to use VLAN 123 to transport everything for this customer. Basically this is what will happen when we send frames between R1 and R2: <img alt="User-added image" height="135" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxpG&feoid=00N50000002Cf3M&refid=0EM50000000X6iS" width="500"></img> Here is another way to visualize it: <img alt="User-added image" height="190" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxpG&feoid=00N50000002Cf3M&refid=0EM50000000X6iX" width="500"></img> Configuration on Brocade devices can be found in the below link: <a href="http://www.brocade.com/content/html/en/configuration-guide/NI_05800a_SWITCHING/GUID-BAAF6E2E-9AC6-463E-B64C-5927603816D1.html" target="_blank">http://www.brocade.com/content/html/en/configuration-guide/NI_05800a_SWITCHING/GUID-BAAF6E2E-9AC6-463E-B64C-5927603816D1.html</a>

Information about 802-1Q-tunneling aka Q-in-Q is and links on how to configure the same on Brocade devices.

2018-01-02T10:48:04-0800 2018-01-02T12:00:09-0800 https://support.ruckuswireless.com/articles/000006940 2017-12-13T09:57:38-0800 monthly 0.8 admin,premium knowledge_article_2907 knowledge_article_2907 2017-12-12T15:03:23-0800 000006940 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure DHCP snooping when using IP helper? Always remember to include DHCP snooping on the upstream VLAN when using IP helper. Here is an example: Interface 1/1 routes upstream where the DHCP server is located on a different subnet a couple of hops away. This interface is tagged in VLAN 2 and has "dhcp snooping trust" configured. Interface 1/2 to 1/24 contain the downstream clients on VLAN 3. IP helper is configured on the virtual interface. At the global configuration, be sure to run DHCP snooping on both VLANs, not just on the client VLAN 3 where the hosts are located: ip dhcp snooping vlan 2 ip dhcp snooping vlan 3 Please review the FastIron Configuration Guide regarding the "ACL-per-port-per-vlan" requirement and other explanations about DHCP snooping.

Configuring DHCP snooping when using IP helper

2017-12-13T09:57:38-0800 2017-12-13T12:00:14-0800 https://support.ruckuswireless.com/articles/000006540 2017-12-13T10:01:53-0800 monthly 0.8 admin,premium knowledge_article_2714 knowledge_article_2714 2017-12-12T16:14:23-0800 000006540 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Configure Virtual Switch Redundancy Protocol (VSRP) Virtual Switch Redundancy Protocol (VSRP) is a Brocade proprietary protocol that provides redundancy and sub-second failover in Layer 2 and Layer 3 mesh topologies. VSRP provides Layer 2 redundancy. This means that Layer 2 links are backed up. You can configure VSRP to provide redundancy for Layer 2 only or also for Layer 3: <ul><li>Layer 2 only - The Layer 2 links are backed up but specific IP addresses are not backed up.</li><li>Layer 2 and Layer 3 - The Layer 2 links are backed up and a specific IP address is also backed up. Layer 3 VSRP is the same as VRRP-E. However, using VSRP provides redundancy at both layers at the same time.</li></ul> ---------- Note: If you want to provide Layer 3 redundancy only, disable VSRP and use VRRP-E. ---------- Configuration considerations: To configure VSRP, do the following: <ul><li>Configure a port-based VLAN containing the ports for which you want to provide VSRP service.</li><li>Configure a VRID:</li><li>Specify that the device is a backup. Since VSRP, like VRRP-E, does not have an "owner", all VSRP devices are backups. The active device for a VRID is elected based on the VRID priority, which is configurable.</li><li>Enable VSRP on the VRID.</li></ul> <div> Below is the example configuration: device(config)# vlan 200 device(config-vlan-200)# tag ethernet 1/1 to 1/8 device(config-vlan-200)# vsrp vrid 1 device(config-vlan-200-vrid-1)# backup device(config-vlan-200-vrid-1)# enable Layer 2 VSRP is enabled globally by default on the device; it just needs to be activated or enabled on a VRID. If you want to use Layer 3 VSRP, you must enable it by entering the following command at the CONFIG level. device(config)# router vsrp Displaying VSRP information: device# show vsrp vrid 10 VLAN 100 Auth-type no authentication VRID 100 ======== State Administrative-status Advertise-backup Preempt-mode Master Enabled Disabled True Parameter Configured Current Unit/Formula Priority 100 100 (100-0)*(3.0/3.0) Hello-interval 1 1 sec/1 Dead-interval 3 3 sec/1 Hold-interval 3 3 sec/1 Initial-ttl 2 2 hops Next hello sent in 00:00:00 Member ports: ethe 1/1 ethe 2/1 ethe 2/10 Operational ports: ethe 1/1 ethe 2/1 ethe 2/10 </div>

Find out what is VSRP and how can it be configured on a device

2017-12-13T10:01:53-0800 2017-12-13T12:00:12-0800 https://support.ruckuswireless.com/articles/000006563 2017-12-13T11:10:31-0800 monthly 0.8 admin,premium knowledge_article_2983 knowledge_article_2983 2017-12-12T14:35:51-0800 000006563 Validated (External) Premium Ruckus icx switches Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, Ruckus ICX Switches How to configure buffer sharing? Network congestion can be caused by various reasons such as port shaping, flow control received on the link due to congestion on the peer, or over-subscription of the egress line rate. In addition, FCX and ICX devices support configurable shared buffer pools, which help absorb traffic bursts without packet loss. For a given (port, queue) pair, if its buffer usage exceeds the guaranteed limit, it will start using buffers in the sharing pool. The shared buffers are apportioned among the 1 Gbps, 10 Gbps, 16 Gbps, and stacking ports. Buffer sharing is always enabled. You can configure buffer sharing by changing the buffer sharing level. To configure the buffer sharing level, enter a command similar to the following. Brocade(config)# qd-share-level 8 The <level> variable is the buffer sharing level, which is a decimal value. The range of valid values for FCX is from 1 to 8. The range of valid values for an ICX 6610 is from 2 through 8. show qd-share-level will show Egress buffer sharing pool configuration and in-use count.

Configuring buffer sharing on FCX and ICX devices

2017-12-13T11:10:31-0800 2017-12-13T12:00:11-0800 https://support.ruckuswireless.com/articles/000006627 2017-12-12T13:15:34-0800 monthly 0.8 admin,premium knowledge_article_3217 knowledge_article_3217 2017-12-12T13:15:34-0800 000006627 Validated (External) Premium Ruckus icx switches Troubleshooting Troubleshooting, Ruckus ICX Switches What data should be gathered when working on a Brocade SDN Controller issue? <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">When troubleshooting a BSC issue with Brocade Technical Support the following information should always be gathered: <ol style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li>Description of the problem being faced.</li><li>Any relevant error messages being observed as well as the context from which they are seen (i.e. on the GUI, in a specific log file, etc.)</li><li>System parameters for the server on which BSC is being installed (OS, memory, disk, # of CPUs, hyper-visor) <ul><li>lscpu</li><li>df -h</li><li>free -h</li><li>uname -a</li></ul> </li><li>Gather the BSC diagnostics script "support_diagnostics" <ol><li>From /opt/brocade/bsc/bin run the command './support_diagnostic'. (For BSC 2.3 and earlier the path is /opt/bvc/bin)</li><li>A file will be generated in /opt/brocade/bsc which has the format ctrlr.data.<#>.<date>.zip.</li><li>Upload this file to supportftp.brocade.com or my.brocade.com under the case # for the issue.</li></ol> </li><li>Gather the state of the operational and config data-bases for opendaylight. (If the username and password is not default, change the value of -u parameter appropriately) <ol><li>Operational DB: From the controller curl -u admin:admin http://localhost:8181/restconf/operational/opendaylight-inventory:nodes/ | python -m json.tool</li><li>Config DB: From the controller curl -u admin:admin http://localhost:8181/restconf/config/opendaylight-inventory:nodes/ | python -m json.tool</li></ol> </li><li>?Gather the loaded modules <ul><li>??From the controller curl -u admin:admin http://localhost:8181/restconf/modules | python -m json.tool?</li></ul> </li></ol> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">Typically BSC is deployed with other Brocade products as well. Here is a list of the basic data to gather from each of the various device types:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> a) NetIron MLXe:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> show technical-support<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> b) FastIron ICX:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> show technical-support<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> c) NOS VDX:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> copy support<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> d) Brocade Flow Optimizer (BFO):<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> supportsave<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> e) Brocade vRouter 5600<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> generate tech-support archive <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">For a non-Brocade product gather the following:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> - Running configuration.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> - Software version.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> - Device vendor and model.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">Depending on the protocol that you are troubleshooting (openflow, http, netconf, sFlow, etc.) additional data for that specific protocol should be gathered.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">For an Openflow Issue:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> On a Brocade Device:<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> 1) Relevant show outputs for Openflow<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> - show openflow - show openflow flows - show openflow interface - show openflow meter - show openflow group - show log<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> 2) Packet capture of controller communication to switch.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> e.g. tcpdump -ni eth0 -w my_pcap_file.pcap port 6633<span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> (Typically port 6633 is used for Openflow)<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> 3) The URI and payload of the HTTP request being sent to the SDN controller for the flow being configured.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> e.g. URI:<span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> HTTP PUT http://{{controller-ip}}:8181/restconf/config/opendaylight-inventory:nodes/node/{{mlxe}}/table/0/flow/odl_test_flow_1<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> PAYLOAD:<span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> {"flow":[{"id": "odl_test_flow_1","cookie": 0,"idle-timeout": 0,"priority": 32768,"table_id": 0,"hard-timeout": 0,"match": {"ipv4-source": "1.1.1.1/32","ipv4-destination": "2.2.2.2/32","in-port": "{{vdx6740-16}}:5","vlan-match": {"vlan-id": {"vlan-id-present": true,"vlan-id": 200}},"ethernet-match": {"ethernet-type": {"type": 2048}}},"instructions": {"instruction": [{"order": 1,"apply-actions": {"action": [{"order": 4,"output-action": {"max-length": 0,"output-node-connector": "6"}},{"order":0, "set-field": {"vlan-match": {"vlan-id": {"vlan-id": 100,"vlan-id-present": "true"}}}}]}}]}}]}

List of data points to be gathered when troubleshooting BSC

2017-12-12T13:15:34-0800 2017-12-12T18:18:49-0800 https://support.ruckuswireless.com/articles/000006768 2017-12-12T13:15:34-0800 monthly 0.8 admin,premium knowledge_article_3213 knowledge_article_3213 2017-12-12T13:15:34-0800 000006768 Validated (External) Premium Mobility rfs controllers Known issues and workarounds Known Issues and Workarounds, Mobility RFS Controllers How to adopt and upgrade 4.x access points to 5.x controller? The following example is where you have a 7131 access point running 4.x code that is in factory default configuration or fresh out-of-the-box and you want to adopt it with a controller running 5.2 code: <ul><li>Download the image file BR7131-5.2.0.0-069R.bin from the Brocade tech support website.</li><li>Note: You will notice that there are three similar looking files: BR7131-5.2.0.0-069R.bin BR71XX-5.2.0.0-069R.img BR7131-5.2.0.0-069R-04010300010R.img </li><li>The one you want for this step is the first file: BR7131-5.2.0.0-069R.bin </li><li>Copy BR7131-5.2.0.0-069R.bin to a USB memory device</li><li>Connect your USB memory device to the controller</li></ul> Log on to your controller rfs via CLI and enter the following: <code style="color: black; font-size: 13px;">br-rfs4000-1E1510#copy usb1:/<code style="color: red; font-size: 13px;">BR7131-5.2.0.069R.bin</code> flash:/</code> <code style="color: black; font-size: 13px;">br-rfs4000-1E1510(config-device-74-8E-F8-1E-15-10)#legacy-auto-update br71xx image flash:/<code style="color: red; font-size: 13px;">BR7131-5.2.0.069R.bin</code> br-rfs4000-1E1510(config-device-74-8E-F8-1E-15-10)#<code style="color: red; font-size: 13px;">commit</code> </code><<<<<=====IMPORTANT <code style="color: black; font-size: 13px;">br-rfs4000-1E1510(config-device-74-8E-F8-1E-15-10)#</code> <div>br-rfs4000-1E1510#management-policy default</div> <div>br-rfs4000-1E1510(config-management-policy-default)#ftp br-rfs4000-1E1510(config-management-policy-default)#self enter configuration commands, one per line. End with CNTL/Z. </div> Explanation: What we are doing here is uploading the 7131 upgrade file to the flash memory on the controller. This upgrade file, BR7131-5.2.0.0-069R.bin, is a special upgrade file that is specifically built to upgrade a 7131 AP running 4.x to 5.2. Then we enable controller FTP feature and configure the legacy-auto-update setting, which tells the controller that any time there is a 7131 AP running 4.x code, to upgrade using this special upgrade BR7131-5.2.0.0-069R.bin file. Most importantly, do not forget to enter the <code style="color: red; font-size: 13px;">commit</code> command to apply the change to any configuration setting. Now this controller is ready to adopt and upgrade any 7131 AP that’s running the old 4.x code. Next, get the 7131 APs adopted by this controller: 7131 access point running 4.x only support Layer 3 adoption by controllers! This is true even if the AP and controller are connected to the same Layer 2 MC/BR domain. Therefore, these 7131 access points must be: - Assigned an IP address, and - Told which controller it needs to be adopted by This is one way to configure these settings directly on each and every 7131 access point that’s running 4.x code. This is quick and easy if you have a few 7131 access points to configure: 1) Connect to the AP71XX AP console port (same console port settings as the controller) 2) Power on the AP and connect the GE1/POE port to your network 3) Enter the summary command: Check the configuration of LAN1. If you connected this AP to a network with a DHCP server, then this AP will get an IP address, since the DHCP client is enabled by default on LAN1 (GE1/POE port). If LAN1 has an IP address, then you are good to go to the next step. 4) Enter the command:<code style="color: red; font-size: 13px;"> system </code>to go to the system menu 5) Enter the command <code style="color: red; font-size: 13px;">exec ping x.x.x.x </code>where x.x.x.x is the IP address of the controller. If the pings are successful, then you are ready to move to the next step. 6) Enter the command<code style="color: red; font-size: 13px;"> aap-setup </code>from admin(system) menu and tell the AP which controller IP it should use and enable discovery. Example: <code style="color: black; font-size: 13px;">admin(system)>aap-setup admin(system.aap-setup)> <code style="color: red; font-size: 13px;">set ipadr x.x.x.x</code> admin(system.aap-setup)> set auto-discovery enable admin(system.aap-setup)> save</code> It takes about 6 and a half minutes after the AP first begins the upgrade process until it is finally upgraded, adopted, and configured by the controller. Repeat over and over again for each access point that you want upgraded.

How to adopt and upgrade 4.x access points to 5.x controller?

2017-12-12T13:15:34-0800 2017-12-12T18:18:43-0800 https://support.ruckuswireless.com/articles/000006625 2017-12-12T13:15:34-0800 monthly 0.8 admin,premium knowledge_article_3212 knowledge_article_3212 2017-12-12T13:15:34-0800 000006625 Validated (External) Premium Ruckus icx switches Performance;Troubleshooting Performance, Troubleshooting, Ruckus ICX Switches What is Logical Link Control LLC? General Information from LLC Protocol -It is also defined as IEEE 802.2 by the Institute of Electrical and Electronics Engineers (IEEE) -It is in change of the communication between the upper Layers (7-3) with the lower layers (2-1) -It is the communicator between the software and the hardware. The LLC Sub layer (L2 Sub layer) -It takes the packets (usually IPV4) and adds the necessary control information for the packet to reach the destination -It is implemented in software and not in hardware. In a PC, it will be the controller that interacts on the NIC -In Ethernet, it is in charge of multiplexing protocols transmitted over the MAC layer (when transmitting) and decoding them (when receiving) -In Flow Control, it is in charge of providing node-to-node flow and error control -When doing Flow control LLC specifies the order in which the frames are sent Why am I seeing tons of these packets flooding the network? -There are many devices that use this protocol for specific purposes, for example, some IP phones use it to auto-configure and to share specific control data -Also, some Layer 7 applications from some specific OS might generate some of these packets How do I avoid these packets? -Even though many of these packets are seen in a capture, it is possible they might not be harming the network, since this protocol is mainly used for control; however, it is important to confirm whether these are expected packets in the enviroment or not -Track the packet until its source, and from there, with the specific data contained, it can be determined whether this is expected or not. These frames can be tracked using the MAC address they are being generated from. Once the device sending these frames has been isolated, it will be easier to confirm whether or not it is expected traffic -It is not recommended to block these packets by using a ACL or other filter mechanism, unless the user is certain they are not needed in that specific part of the environment; doing so incorrectly can cause other issues within the environment.

Logical Link Control LLC in Ethernet: it is in charge of multiplexing protocols transmitted over the MAC layer (when transmitting) and decoding them (when receiving).

2017-12-12T13:15:34-0800 2017-12-12T18:18:41-0800 https://support.ruckuswireless.com/articles/000006767 2017-12-12T13:15:34-0800 monthly 0.8 admin,premium knowledge_article_3211 knowledge_article_3211 2017-12-12T13:15:34-0800 000006767 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products Which STP protocols are supported on an MCT setup? MSTP is not supported. STP and RSTP are supported. ---------- Note: STP = 802.1d RSTP = 802.1w MSTP = 802.1s ---------- Generally, MCT is used to eliminate the need for STP like protocols. See also: <a href="http://www.brocade.com/downloads/documents/white_papers/Multi-Chassis_Trunking_GA-IG-326-00.pdf" target="_blank">Multi-Chassis_Trunking_GA-IG-326-00.pdf</a>

Which STP protocols are supported on an MCT setup?

2017-12-12T13:15:34-0800 2017-12-12T18:18:40-0800 https://support.ruckuswireless.com/articles/000006838 2017-12-12T13:15:36-0800 monthly 0.8 admin,premium knowledge_article_3209 knowledge_article_3209 2017-12-12T13:15:36-0800 000006838 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers How to upgrade Mobility RFS Wireless Controller from older 4.x code version to 5.x code version? Step 1 - Upload RFS7000 4.3.1.0 and 5.2.0.0 image files onto a tftp or ftp server. In this example, the image files are uploaded to a tftp server. The RFS7000 needs to have access to this tftp server for copying the image files. Step 2 - Upgrading the RFS7000 code from pre-4.3.1 to 4.3.1 version: a. Establish CLI access to the RFS controller via console, telnet or sshv2. Upon logging into the RFS controller, enter privilege mode: BR-RFS7000 release 4.0.2.0-012R Login as 'cli' to access CLI. BR-RFS7000 login: cli User Access Verification Username: admin Password: ****** Brocade WLAN Controller BR-RFS7000>en BR-RFS7000# b. Copy the 4.3.1 image file (BR-RFS7000-4.3.1.0-018R.img) from the tftp server to the RFS7000 controller: BR-RFS7000#upgrade tftp://10.110.22.139/BR-RFS7000-4.3.1.0-018R.img Running from partition /dev/mtdblock6, partition to update is /dev/mtdblock7 Validating image file header Making file system Extracting files (this can take some time)..................................................................... Version of firmware update file is 4.3.1.0-018R FPGA firmware version is already at version 3_29, no need to upgrade Power Supervisor updates are handled via a patch file Checking if boot sector needs to be upgraded Boot Sector version 00003, image file bootsector ver 00003, no change required Writing Kernel to /dev/mtd5 Writing BootOS to /dev/mtd3 Successful BR-RFS7000# c. Verify that the 4.3.1 image is copied into the RFS7000 controller flash: BR-RFS7000#sh boot Image Build Date Install Date Version ----- -------------------- -------------------- -------------- Primary Nov 18 00:33:25 2009 unknown 4.0.2.0-012R Secondary Dec 20 03:53:31 2010 Jan 30 22:53:25 2012 4.3.1.0-018R Current Boot : Primary Next Boot : Secondary Software Fallback : Enabled BR-RFS7000# d. Reload the RFS700 controller for the 4.3.1 code to take effect (the CLI session will be disconnected): BR-RFS7000#reload wireless-controller will be rebooted, do you want to continue? ([y]es/[n]o): y Connection to host lost. e. Log back into the RFS7000 controller, which is now running 4.3.1.0 code version: BR-RFS7000 release 4.3.1.0-018R Login as 'cli' to access CLI. BR-RFS7000 login: cli User Access Verification Username: admin Password: ****** Brocade WLAN Controller BR-RFS7000>en BR-RFS7000#sh ver BR-RFS7000 version 4.3.1.0-018R MIB=01a Booted from secondary. controller uptime is 0 days, 0 hours 04 minutes CPU is RMI XLR V0.4 255484 kB of on-board RAM BR-RFS7000#sh boot Image Build Date Install Date Version ----- -------------------- -------------------- -------------- Primary Nov 18 00:33:25 2009 unknown 4.0.2.0-012R Secondary Dec 20 03:53:31 2010 Jan 30 22:53:25 2012 4.3.1.0-018R Current Boot : Secondary Next Boot : Secondary Software Fallback : Enabled BR-RFS7000# Step 3 - Upgrade the RFS7000 controller from 4.3.1.0 code to 5.2.0.0 code version: a. Copy the RFS7000 5.2 image file (BR-RFS7000-5.2.0.0-069R.img) from the tftp server to the RFS7000 controller: BR-RFS7000#upgrade tftp://10.110.22.139/BR-RFS7000-5.2.0.0-069R.img Running from partition /dev/mtdblock7, partition to update is /dev/mtdblock6 Validating image file header Making file system Extracting files ...................................................................... <-- This may take some time to complete Version of firmware update file is 5.2.0.0-069R FPGA firmware version is already at version 3_29, no need to upgrade Power Supervisor updates are handled via a patch file Checking if boot sector needs to be upgraded Boot Sector version 00003, image file bootsector ver 00003, no change required Writing Kernel to /dev/mtd4 Writing BootOS to /dev/mtd2 Successful BR-RFS7000#sh boot Image Build Date Install Date Version ----- -------------------- -------------------- -------------- Primary Sep 24 01:15:19 2011 Jan 30 23:46:04 2012 5.2.0.0-069R Secondary Dec 20 03:53:31 2010 Jan 30 22:53:25 2012 4.3.1.0-018R Current Boot : Secondary Next Boot : Primary Software Fallback : Enabled BR-RFS7000# b. Reload the RFS700 controller for the 5.2.0.0 code to take effect (the CLI session will be disconnected): BR-RFS7000#reload wireless-controller will be rebooted, do you want to continue? ([y]es/[n]o): y Save current configuration? ([y]es/[n]o/[d]isplay unsaved/[c]ancel reload): y [OK] Connection to host lost. c. Log back into the RFS7000 controller which is now running 5.2.0.0 code version (By default, SSHv2, HTTPS, and SNMPv3 accesses are enabled under 5.2.0.0 code environment. In this example, console access via console server is used for logging back to the RFS7000 controller. Once logged in, the system prompts to change the default password): U:\>telnet 10.31.168.43 3001 Welcome to Console Server Management Server HQ1-2O32-TS1 port S001 HQ1-2O32-TS1 login: port1 Password: **** br-rfs7000-29A9F5 login: admin Password: ****** Brocade Mobility Wireless System is currently using the factory default login credentials. Please change the default password to protect from unauthorized access. Enter new password: ********** Confirm new password: ********** Password for user 'admin' changed successfully. Please write this password change to memory(write memory) to be persistent. br-rfs7000-29A9F5>write mem [OK] br-rfs7000-29A9F5>en br-rfs7000-29A9F5#sh ver BR-RFS7000 version 5.2.0.0-069R Copyright (c) 2004-2011. All rights reserved. Booted from primary br-rfs7000-29A9F5 uptime is 0 days, 00 hours 04 minutes CPU is RMI XLR V0.4 255464 kB of on-board RAM Base ethernet MAC address is 00-24-38-29-A9-F5 System serial number is BHQ2449E00A Model number is BR-RFS7000 br-rfs7000-29A9F5# br-rfs7000-29A9F5#sh boot -------------------------------------------------------------------------------- IMAGE BUILD DATE INSTALL DATE VERSION -------------------------------------------------------------------------------- Primary 2011-09-24 08:15:19 2012-01-31 07:46:04 5.2.0.0-069R Secondary 2010-12-20 11:53:31 2012-01-31 06:53:25 4.3.1.0-018R -------------------------------------------------------------------------------- Current Boot : Primary Next Boot : Primary Software Fallback : Enabled br-rfs7000-29A9F5#

How to upgrade Mobility RFS Wireless Controller from older 4.x code version to 5.x code version?

2017-12-12T13:15:36-0800 2017-12-12T18:18:37-0800 https://support.ruckuswireless.com/articles/000006836 2017-12-12T13:15:36-0800 monthly 0.8 admin,premium knowledge_article_3208 knowledge_article_3208 2017-12-12T13:15:36-0800 000006836 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How to connect mobile devices at 802.11n speeds? WPA2 security with AES (CCMP) encryption must be enabled to achieve full 802.11n speeds (up to 600Mbps on a 40MHz channel) per standard. Otherwise, all mobile devices will be throttled back to 802.11 a/g speeds of 54Mbps data rates. WEP and WPA/TKIP are considered weak security solutions and can be easily breached. For the highest possible security solution and fastest throughput, it is highly recommended that WPA2-CCMP is deployed for wireless connectivity. The WPA2-CCMP security settings can be configued using either GUI or CLI. Example of how to configure for WPA2-CCMP via CLI using 5.x code: rfs6000(config)#wlan WPA2-CCMP rfs6000(config-wlan-WPA2-CCMP)#ssid WPA2-CCMP rfs6000(config-wlan-WPA2-CCMP)#authentication-type none rfs6000(config-wlan-WPA2-CCMP)#encryption-type ccmp rfs6000(config-wlan-WPA2-CCMP)#wpa-wpa2 psk brocade1234 rfs6000(config-wlan-WPA2-CCMP)#vlan 1 rfs6000(config-wlan-WPA2-CCMP)#commit write memory The WPA2-CCMP configuration should look like the following after running the "show running-config" command: wlan WPA2-CCMP ssid WPA2-CCMP vlan 1 bridging-mode tunnel encryption-type ccmp authentication-type none wpa-wpa2 psk 0 brocade1234

How to connect mobile devices at 802.11n speeds?

2017-12-12T13:15:36-0800 2017-12-12T18:18:35-0800 https://support.ruckuswireless.com/articles/000006839 2017-12-12T13:15:36-0800 monthly 0.8 admin,premium knowledge_article_3207 knowledge_article_3207 2017-12-12T13:15:36-0800 000006839 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers How do you create a front desk admin account to create wireless guest users? To access the the Guest User Configuration Tool, a user with 'web-user-admin' role must be created: RFS6000(config)# management-policy default RFS6000(config-management-policy-default)# user frontdesk password frontdesk role web-user-admin RFS6000(config-management-policy-default)# commit write memory ---------- Note: The web user role is typically assigned to the front desk personnel and has no access to the controller's main GUI interface for general wireless configuration. ---------- To confirm the new user: RFS6000(config-management-policy-default)# sh run | incl frontdesk user frontdesk password 1 85dff4091c0442ce66b52d77fc9b9e9a473ac7d65c23a14f088754fcd64e8bc9 role web-user-admin To access the Guest User Configuration tool, open browser pointing to the controller and log in with the newly created credentials. In this case, enter 'frontdesk' for both username and password.

How do you create a front desk admin account to create wireless guest users?

2017-12-12T13:15:36-0800 2017-12-12T18:18:34-0800 https://support.ruckuswireless.com/articles/000006837 2017-12-12T13:15:36-0800 monthly 0.8 admin,premium knowledge_article_3206 knowledge_article_3206 2017-12-12T13:15:36-0800 000006837 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How can I ensure that only 802.11n clients connect to my wireless LAN? You can make sure only .11n clients connect to your radios by allowing only High Throughput (HT) capable clients. HT is a standard defined in the 802.11n protocol. Only .11n clients will understand HT. Therefore, by allowing only HT clients to connect, you will limit the WLAN availability to .11n clients only. The setting to allow only HT needs to be applied to the WLAN configuration and can be configured only from the CLI. This option is not available in the GUI. Add the following statement to the WLAN configuration: service allow-ht-only Configuration example: ! wlan TAC ssid TAC-LAB vlan 86 bridging-mode tunnel encryption-type none authentication-type none service allow-ht-only !

How can I ensure that only 802.11n clients connect to my wireless LAN?

2017-12-12T13:15:36-0800 2017-12-12T18:18:32-0800 https://support.ruckuswireless.com/articles/000006840 2017-12-12T13:15:39-0800 monthly 0.8 admin,premium knowledge_article_3203 knowledge_article_3203 2017-12-12T13:15:39-0800 000006840 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers How to implement Network Address Translation (NAT) on RFS4000/6000/7000 Wireless Controllers? 1. Under the RFS wireless controller device configuration, specify both inside (private network) and outside (outside network). This is referred to as “NAT direction.” br-rfs6000 00-24-38-DC-84-19 use profile default-br-rfs6000 use rf-domain default hostname br-rfs6000-DC8419 ip default-gateway 10.18.13.1 interface vlan1 description management ip address 10.18.13.170/24 ip dhcp client request options all ip nat outside interface vlan100 description Guest User ip address 10.10.10.1/24 ip nat inside 2. Under Wireless IP Firewall Rules, define IP access-list to specify which source subnet for Internet access: ip access-list nat-rule permit ip 10.10.10.0/24 any rule-precedence 1 permit icmp 10.10.10.0/24 any rule-precedence 10 3. Under RFS wireless controller device configuration, create dynamic NAT rule for translating private IP addresses within the Inside Network interface to IP addresses within the Outside Network interface: ip nat inside source list nat-rule interface vlan1 overload 4. The resulting Mobility RFS6 wireless controller configuration is as follows: rfs6000#sh run ! ! Configuration of BR-RFS6000 version 5.2.0.0-069R ! ! version 2.1 ! ! ip access-list BROADCAST-MULTICAST-CONTROL permit tcp any any rule-precedence 10 rule-description "permit all TCP traffic" permit udp any eq 67 any eq dhcpc rule-precedence 11 rule-description "permit DHCP replies" deny udp any range 137 138 any range 137 138 rule-precedence 20 rule-description "deny windows netbios" deny ip any 224.0.0.0/4 rule-precedence 21 rule-description "deny IP multicast" deny ip any host 255.255.255.255 rule-precedence 22 rule-description "deny IP local broadcast" permit ip any any rule-precedence 100 rule-description "permit all IP traffic ip access-list nat-rule permit ip 10.10.10.0/24 any rule-precedence 1 permit icmp 10.10.10.0/24 any rule-precedence 10 ! mac access-list PERMIT-ARP-AND-IPv4 permit any any type ip rule-precedence 10 rule-description "permit all IPv4 traffic" permit any any type arp rule-precedence 20 rule-description "permit all ARP traffic" ! firewall-policy default no ip dos tcp-sequence-past-window ! igmp-snoop-policy default no igmp-snooping no querier unknown-multicast-fwd ! ! mint-policy global-default ! wlan-qos-policy default qos trust dscp qos trust wmm ! radio-qos-policy default ! wlan Guest description Guest Users ssid Guest vlan 100 bridging-mode tunnel encryption-type none authentication-type none ! wlan USER description Trusted User ssid USER vlan 2 bridging-mode tunnel encryption-type ccmp authentication-type none wireless-client inactivity-timeout 3600 wpa-wpa2 psk 0 N0v0l4M32 ! smart-rf-policy Smart-RF sensitivity custom smart-ocs-monitoring off-channel-duration 5GHz 20 smart-ocs-monitoring off-channel-duration 2.4GHz 20 smart-ocs-monitoring frequency 5GHz 10 smart-ocs-monitoring frequency 2.4GHz 10 smart-ocs-monitoring sample-count 5GHz 7 smart-ocs-monitoring sample-count 2.4GHz 7 smart-ocs-monitoring extended-scan-frequency 5GHz 7 smart-ocs-monitoring extended-scan-frequency 2.4GHz 7 interference-recovery client-threshold 30 interference-recovery channel-switch-delta 5GHz 30 interference-recovery channel-switch-delta 2.4GHz 30 coverage-hole-recovery interval 5GHz 45 coverage-hole-recovery coverage-interval 5GHz 30 coverage-hole-recovery coverage-interval 2.4GHz 30 coverage-hole-recovery snr-threshold 5GHz 30 coverage-hole-recovery snr-threshold 2.4GHz 30 coverage-hole-recovery client-threshold 5GHz 5 coverage-hole-recovery client-threshold 2.4GHz 5 interference-recovery channel-hold-time 7200 neighbor-recovery power-hold-time 3600 ! auto-provisioning-policy Adoption-Policy default-adoption ! dhcp-server-policy Guest\ DHCP dhcp-pool Guest\ DHCP network 10.10.10.0/24 address range 10.10.10.10 10.10.10.100 lease 0 8 default-router 10.10.10.1 dns-server 8.8.8.8 8.8.4.4 ! ! management-policy default no http server https server no ftp ssh user admin password 1 xx0x0x0xxxx0x000xxx00x0000x0000xx00xxx000xx0x0x0000xxxxx0xx0x000 role superuser access all user operator password 1 000xxxx0000x0x000x00xx00x0x0x000x0xx0x00xx000000x0x00x0x00x00xxx role monitor access all no snmp-server manager v2 snmp-server community public ro snmp-server community private rw snmp-server user snmpoperator v3 encrypted des auth md5 0 operator snmp-server user snmptrap v3 encrypted des auth md5 0 admin123 snmp-server user snmpmanager v3 encrypted des auth md5 0 admin123 banner motd Brocade Mobility Wireless ! profile br-rfs6000 default-br-rfs6000 autoinstall configuration autoinstall firmware crypto isakmp policy default crypto ipsec transform-set default esp-aes-256 esp-sha-hmac interface me1 interface up1 ip dhcp trust qos trust dscp qos trust 802.1p interface ge1 ip dhcp trust qos trust dscp qos trust 802.1p interface ge2 ip dhcp trust qos trust dscp qos trust 802.1p interface ge3 ip dhcp trust qos trust dscp qos trust 802.1p interface ge4 ip dhcp trust qos trust dscp qos trust 802.1p interface ge5 ip dhcp trust qos trust dscp qos trust 802.1p interface ge6 ip dhcp trust qos trust dscp qos trust 802.1p interface ge7 ip dhcp trust qos trust dscp qos trust 802.1p interface ge8 ip dhcp trust qos trust dscp qos trust 802.1p interface wwan1 use firewall-policy default use auto-provisioning-policy Adoption-Policy service pm sys-restart ! profile br0000 default-br0000 autoinstall configuration autoinstall firmware interface radio1 wlan Guest bss 1 primary wlan USER bss 2 primary interface radio2 wlan Guest bss 1 primary wlan USER bss 2 primary interface radio3 interface ge1 ip dhcp trust qos trust dscp qos trust 802.1p interface ge2 ip dhcp trust qos trust dscp qos trust 802.1p interface vlan1 ip address dhcp ip address zeroconf secondary ip dhcp client request options all interface wwan1 use firewall-policy default logging on service pm sys-restart ! profile br0001 default-br0001 autoinstall configuration autoinstall firmware interface radio1 interface radio2 interface ge1 ip dhcp trust qos trust dscp qos trust 802.1p interface vlan1 ip address dhcp ip address zeroconf secondary ip dhcp client request options all use firewall-policy default logging on service pm sys-restart ! profile br002 default-br002 autoinstall configuration autoinstall firmware interface radio1 wlan Guest bss 1 primary wlan USER bss 2 primary interface radio2 wlan Guest bss 1 primary wlan USER bss 2 primary interface ge1 ip dhcp trust qos trust dscp qos trust 802.1p interface vlan1 ip address dhcp ip address zeroconf secondary ip dhcp client request options all use firewall-policy default logging on service pm sys-restart ! profile br0004 default-br0004 autoinstall configuration autoinstall firmware interface radio1 interface ge1 ip dhcp trust qos trust dscp qos trust 802.1p interface vlan1 ip address dhcp ip address zeroconf secondary ip dhcp client request options all use firewall-policy default logging on service pm sys-restart ! profile br005 default-br005 autoinstall configuration autoinstall firmware interface radio1 interface ge1 ip dhcp trust qos trust dscp qos trust 802.1p interface vlan1 ip address dhcp ip address zeroconf secondary ip dhcp client request options all use firewall-policy default logging on service pm sys-restart ! profile br0006 default-br0006 autoinstall configuration autoinstall firmware interface radio1 interface up1 ip dhcp trust qos trust dscp qos trust 802.1p interface fe1 ip dhcp trust qos trust dscp qos trust 802.1p interface fe2 ip dhcp trust qos trust dscp qos trust 802.1p interface fe3 ip dhcp trust qos trust dscp qos trust 802.1p interface fe4 ip dhcp trust qos trust dscp qos trust 802.1p interface vlan1 ip address dhcp ip address zeroconf secondary ip dhcp client request options all use firewall-policy default logging on service pm sys-restart ! rf-domain default timezone America/Los_Angeles country-code us use smart-rf-policy Smart-RF channel-list dynamic ! br-rfs6000 00-24-38-DC-84-19 use profile default-br-rfs6000 use rf-domain default hostname br-rfs6000-DC8419 ip default-gateway 10.10.10.1 interface vlan1 description management ip address 10.10.10.101/24 ip dhcp client request options all ip nat outside interface vlan2 description Internal User ip address 101.01.0.1/24 ip nat inside interface vlan100 description Guest User ip address 00.00.00.0/24 ip nat inside use dhcp-server-policy Guest\ DHCP ip nat inside source list nat-rule interface vlan1 overload ! br07xx 00-24-38-28-0A-08 use profile default-br71xx use rf-domain default hostname AP-7131-18 ! br07xx 00-24-38-28-2A-44 use profile default-br71xx use rf-domain default hostname br71xx-282A44 interface radio1 wlan Guest bss 1 primary wlan USER bss 2 primary interface radio2 wlan Guest bss 1 primary wlan USER bss 2 primary ! br07xx 00-24-38-F2-26-78 use profile default-br71xx use rf-domain default hostname br71xx-F22678 interface radio1 wlan Guest bss 1 primary wlan USER bss 2 primary interface radio2 wlan Guest bss 1 primary wlan USER bss 2 primary ! br07xx 00-24-38-F2-31-F4 use profile default-br71xx use rf-domain default hostname br71xx-F231F4 ! br07xx 00-24-38-F3-90-94 use profile default-br71xx use rf-domain default hostname br650-1F1AC8 ! br0008 74-8E-F8-6F-33-08 use profile default-br6511 use rf-domain default hostname br0008-6F3308 no staging-config-learnt ! ! end rfs6000#

How to implement Network Address Translation (NAT) on RFS4000/6000/7000 Wireless Controllers?

2017-12-12T13:15:39-0800 2017-12-12T18:18:27-0800 https://support.ruckuswireless.com/articles/000006860 2017-12-12T13:15:39-0800 monthly 0.8 admin,premium knowledge_article_3200 knowledge_article_3200 2017-12-12T13:15:39-0800 000006860 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to save the running configuration? Backing up the Configuration Prerequisites: A TFTP server or Secure Copy program and SSH enabled on the the device ---------- Notes: TFTP commands are issued on the device. SCP commands are issued on the server. ---------- Example Commands for TFTP: Backing up the device: copy run tftp 192.168.10.2 myswitch.cfg Restoring the device: copy tftp start 192.168.10.2 myswitch.cfg reload Example Commands for SCP: Backing up the device: scp username@192.168.10.1:runConfig myswtich.cfg Restoring the device: scp myswitch.cfg username@192.168.10.1:startConfig Reload the switch for the restored configuration to take effect.

How to save the running configuration?

2017-12-12T13:15:39-0800 2017-12-12T18:18:23-0800 https://support.ruckuswireless.com/articles/000006841 2017-12-12T13:15:39-0800 monthly 0.8 admin,premium knowledge_article_3199 knowledge_article_3199 2017-12-12T13:15:39-0800 000006841 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers What is the default username/password for Brocade Wireless Controllers (RFS4000/RFS6000/RFS7000)? The default username/password for all Brocade Mobility Controllers is admin/admin123.

What is the default username/password for Brocade Wireless Controllers (RFS4000/RFS6000/RFS7000)?

2017-12-12T13:15:39-0800 2017-12-12T18:18:22-0800 https://support.ruckuswireless.com/articles/000006855 2017-12-12T13:15:39-0800 monthly 0.8 admin,premium knowledge_article_3198 knowledge_article_3198 2017-12-12T13:15:39-0800 000006855 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to generate SNMP traps when CPU goes above or below a configured threshold value? Use the below configuration to send an SNMP trap when CPU Utilization exceeds 70% 1. Configure a RMON alarm with ID 1 that checks for the MIB ' snAgGblCpuUtil1MinAvg' every 300 seconds. In every sample if the CPU Utilization goes above 70%, send an event (ID 1) to user ITAC: ICX1(config)# rmon alarm 1 snAgGblCpuUtil1MinAvg.0 300 absolute rising-threshold 70 1 owner ITAC If you want to configure the device to generate a trap if the CPU Utilization goes below a particular value, use the 'falling-threshold' keyword. In the below example an SNMP trap will be generated if the CPU Utilization goes above 70% or below 45%. ICX1(config)# rmon alarm 1 snAgGblCpuUtil1MinAvg.0 300 absolute rising-threshold 70 1 falling-threshold 45 1 owner ITAC 2. Configure a RMON event with ID 1, which sends a SNMP trap that contains the community string “public” and the owner ITAC whenever the CPU goes above 70%: ICX1(config)# rmon event 1 description "HIGH CPU" trap "public" owner ITAC

How to generate SNMP traps when CPU goes above or below a configured threshold value?

2017-12-12T13:15:39-0800 2017-12-12T18:18:20-0800 https://support.ruckuswireless.com/articles/000007021 2017-12-12T13:15:43-0800 monthly 0.8 admin,premium knowledge_article_3190 knowledge_article_3190 2017-12-12T13:15:43-0800 000007021 Validated (External) Premium Ruckus icx switches System network management System Network Management, Ruckus ICX Switches What is the timing involved in bringing down a link in LACP - Link Aggregation Control Protocol? <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">When the LACP starts and the trunk comes up, it will enter short timeout mode. This is for the exchange of the LACPDU's. The trunk will then change to the long timeout mode when it is up and stable for a period of time. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">In short timeout mode, LACP sends an LACPDU every 1 second and timeouts in 3 seconds. It will bring down the port if no LACPDU is received. In long timeout mode, LACP sends an LACPDU every 30 seconds and timeouts in 90 seconds. This timeout is only for receiving LACPDU's. In long timeout mode, LACP will bring the port down as soon as it receives a hardware port down event.

This applies to all ADX ServerIron and Jetcore devices.

2017-12-12T13:15:43-0800 2017-12-12T18:18:08-0800 https://support.ruckuswireless.com/articles/000007028 2017-12-12T13:15:43-0800 monthly 0.8 admin,premium knowledge_article_3189 knowledge_article_3189 2017-12-12T13:15:43-0800 000007028 Validated (External) Premium Ruckus icx switches Performance;System network management;Troubleshooting;Known issues and workarounds Performance, System Network Management, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches Radius packets are not forwarded out from the controller when radius proxy is enabled <table class="sectionContent" style="width: 1118.4px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineResolution"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 942.4px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:7:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:7:j_id603_00N700000039hEa_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">This problem is fixed in 4.3.1 / 4.1.1 code. Please upgrade the controller and APs to use the radius proxy feature. With radius proxy enabled, the controller will be the Radius client. Verify that the controller is defined as a Radius client on the Radius server.</div> </td></tr></tbody></table> </td></tr></tbody></table>

RFS6000/RFS7000, AP-7131s.

2017-12-12T13:15:43-0800 2017-12-12T18:18:07-0800 https://support.ruckuswireless.com/articles/000006882 2017-12-12T13:15:43-0800 monthly 0.8 admin,premium knowledge_article_3184 knowledge_article_3184 2017-12-12T13:15:43-0800 000006882 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Where is the video for Brocade Campus ICX GRE TUNNEL Configuration? YouTube video: <a href="https://www.youtube.com/watch?v=FKLzSXpixy8&feature=youtu.be" target="_blank">https://www.youtube.com/watch?v=FKLzSXpixy8&feature=youtu.be</a>

Brocade Campus ICX GRE TUNNEL Configuration

2017-12-12T13:15:43-0800 2017-12-12T18:17:59-0800 https://support.ruckuswireless.com/articles/000007029 2017-12-12T13:15:43-0800 monthly 0.8 admin,premium knowledge_article_3183 knowledge_article_3183 2017-12-12T13:15:43-0800 000007029 Validated (External) Premium Why does a SX management module show up with (LID: ÿÿÿÿÿÿÿÿÿÿ)? <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">(LID: ÿÿÿÿÿÿÿÿÿÿ)</code> on standby module is a known issue.</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> The hardware does not need to be replaced; do not RMA the module. Please follow the instructions below to correct:</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Both DEFECT000332429 and DEFECT000330146 address this issue and were fixed respectively in 7.202d and 7.202e; as well as 7.300a and 7.400.</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">“…This problem has been fixed in the 7.3 release. If it still displays yyyyy, then do <code style="color: red; font-size: 13px; font-style: normal; font-weight: normal;">hw pid clear-sw-lid</code> and reload the system. If it happens on standby module, please do switch-over, then do <code style="color: red; font-size: 13px; font-style: normal; font-weight: normal;">hw pid clear-sw-lid</code> and reload the system. The reason is that the LID stored in EEPORM had a bad value, and it never gets to re-write to the corrected value. The user needs to manually clear the LID and reload the system in order to re-generate the corrected LID based on the serial number.“ Customer reported defects closed with code in Release R07.2.02d:</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">…</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <table border="1" cellpadding="0" cellspacing="0" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Defect ID:</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>DEFECT000332429</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Technical Severity:</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Low</div> </td></tr><tr><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Summary:</div> </td><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>When a standby module is inserted into an SX chassis, it does not display a License ID</div> </td></tr><tr><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Symptom:</div> </td><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Newly inserted management module will display a blank entry for the License.</div> </td></tr><tr><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Workaround:</div> </td><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Set the active management module to the new one and reload the device.</div> </td></tr><tr><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Probability:</div> </td><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>High</div> </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Feature:</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>FCX SW License</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Function:</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Other</div> </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Reported In Release:</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>FI 07.2.02</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Service Request ID:</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>595349</div> </td></tr></tbody></table> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Customer reported defects closed with code in Release R07.2.02e:</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">…</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div> <table border="1" cellpadding="0" cellspacing="0" style="width: 720px; height: 164px; text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Defect ID:</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>DEFECT000330146</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Technical Severity:</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>High</div> </td></tr><tr><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Summary:</div> </td><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Newly inserted Management Module may have invalid LID displayed, after which the module cannot be upgraded via SW Licensing.</div> </td></tr><tr><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Symptom:</div> </td><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>On the Standby module, the LID value is displayed as ÿÿÿÿÿÿÿÿÿÿ. After a failover, the new Active will have this same LID and thus cannot be upgraded.</div> </td></tr><tr><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Probability:</div> </td><td colspan="2" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>High</div> </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Feature:</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>SX Management Functionality</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Function:</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>CLI and parser</div> </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Reported In Release:</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>FI 07.2.02</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>Service Request ID:</div> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div>595349</div> </td></tr></tbody></table> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> </div>

Enterprise.

2017-12-12T13:15:43-0800 2017-12-12T18:17:58-0800 https://support.ruckuswireless.com/articles/000007030 2017-12-12T13:15:47-0800 monthly 0.8 admin,premium knowledge_article_3182 knowledge_article_3182 2017-12-12T13:15:47-0800 000007030 Validated (External) Premium Brocade eos products Configuration;System network management Configuration, System Network Management, Brocade EOS Products What is the MRP diagnostics feature and how to make use of it? <table class="sectionContent" style="width: 1118.4px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 942.4px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;"> <div>Configuration:</div> <div> </div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">7750_MRP-Master#sh run vlan 80</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">vlan 80 name topo80 by port</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> tagged ethe 1/1/14 ethe 1/1/18</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> no spanning-tree</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> metro-ring 10 master</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> ring-interfaces ethernet 1/1/14 ethernet 1/1/18</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> enable diagnostics</code></div> <div> …</div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">7750_MRP-Member#sh run vlan 80</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">vlan 80 name topo80 by port</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> tagged ethe 1/1/14 ethe 1/1/18</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> no spanning-tree</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> metro-ring 10</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> ring-interfaces ethernet 1/1/18 ethernet 1/1/14</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> enable</code> </div> <div>Checking the result:</div> <div>Diag Frame are sent with sequence number</div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">7750_MRP-Master#sh metro 10 diagnostics</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> </code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Metro Ring 10</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">=============</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">diagnostics results</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> </code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Ring Diag RHP average Recommended Recommended</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">id state time(microsec) hello time(ms) Prefwing time(ms)</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">10 enabled < 599 100 300</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> </code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Diag frame sent Diag frame lost</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">800913 5</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">The information can be used to modify the Preforwarding timer if needed.</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">The example show the average time thru the Metro-ring 10 is < 599 microsecond while the default hello timer is 100 ms, Preforwarding timer is default to 300 ms. There was 5 Diag frame lst during the test, out of 800913 Diag frame sent.</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Note: Meaningless output is shown on member node as diagnostics is not supported on member node.</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">7750_MRP-Member#show metro 10 diagnostics</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> </code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Metro Ring 10</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">=============</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">diagnostics results</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> </code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Ring Diag RHP average Recommended Recommended</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">id state time(microsec) hello time(ms) Prefwing time(ms)</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">10 disabled < 0 100 300</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> </code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Diag frame sent Diag frame lost</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">0 0</code></div> <div><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">7750_MRP-Member#</code></div> </div> </td></tr></tbody></table> </td></tr></tbody></table>

MRP Diagnostic feature can only be configured on Master node of the MRP

2017-12-12T13:15:47-0800 2017-12-12T18:17:56-0800 https://support.ruckuswireless.com/articles/000007049 2017-12-12T13:15:49-0800 monthly 0.8 admin,premium knowledge_article_3178 knowledge_article_3178 2017-12-12T13:15:49-0800 000007049 Validated (External) Premium Ruckus icx switches Firmware;System network management Firmware, System Network Management, Ruckus ICX Switches How do I reset the controller and APs to factory default for 5.x code? <table class="sectionContent" style="width: 857px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 678px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;"> If you are accessing the controller or AP over serial console, enter the following at the login prompt: login: reset password: FactoryDefault This will bring device configuration and password to factory default. Use the same procedure for controller and APs. </div> </td></tr></tbody></table> </td></tr></tbody></table>

Valid information for software code WiNG 5.x running on RFS4000, RFS6000, RFS7000, AP7131, AP650.

2017-12-12T13:15:49-0800 2017-12-12T18:17:50-0800 https://support.ruckuswireless.com/articles/000007250 2017-12-12T13:15:54-0800 monthly 0.8 admin,premium knowledge_article_3168 knowledge_article_3168 2017-12-12T13:15:54-0800 000007250 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches STATIC LINK AGGREGATION <table class="sectionContent" style="width: 1003.7px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 828.14px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">YouTube video: <a href="https://www.youtube.com/watch?v=rUySahoOQck&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=rUySahoOQck&feature=youtu.be</a> Please watch this video from our Brocade Community Board for further information: Configuring Static Link Aggregation Groups (LAGs): <a href="https://community.brocade.com/t5/Ethernet-Switches-Routers/Configuring-Static-Link-Aggregation-Groups-LAGs/ta-p/87184" style="color: rgb(51, 52, 53);" target="_blank">https://community.brocade.com/t5/Ethernet-Switches-Routers/Configuring-Static-Link-Aggregation-Groups-LAGs/ta-p/87184</a></div> </td></tr></tbody></table> </td></tr></tbody></table>

BROCADE CAMPUS FEATURE EXPLAINER SERIES:

2017-12-12T13:15:54-0800 2017-12-12T18:17:35-0800 https://support.ruckuswireless.com/articles/000007272 2017-12-12T13:15:54-0800 monthly 0.8 admin,premium knowledge_article_3167 knowledge_article_3167 2017-12-12T13:15:54-0800 000007272 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products SNMP sysUpTimeInstance OID wraps up after 497 days The SNMP OID sysUpTimeInstance is often used by management systems to monitor system uptime. It might occur that it suddenly goes back to 0. The reason for this is the code is storing the uptime in units of 1/100 seconds in an unsigned 32 bit variable UNIT32, therefore the variable reaches its limit after approximately 497 days, after which time it goes back to 0. The OID object is part of RFC9282: sysUpTimeInstance(0) OID description OID: {iso(1) identified-organization(3) dod(6) internet(1) mgmt(2) mib-2(1) system(1) sysUpTime(3) sysUpTimeInstance(0)} (ASN.1 notation) 1.3.6.1.2.1.1.3.0 (dot notation) /ISO/Identified-Organization/6/1/2/1/1/3/0 (OID-IRI notation) Description: sysUpTimeInstance Information: Automatically extracted from RFC9282 We are compliant to RFC9282 as the size of sysUpTimeInstance is not defined, which means it is acceptable to use a 32 bit counter to store it. There is not any 64 bit equivalent object at this time. If needed an equivalent 64 bit object might be added into the code though this will need to be sent via RFE. As an alternative to circumvent this behavior you might be advised to use OID object snmpEngineTime which is supported and does not roll over until it reaches 135 years.

SNMP sysUpTimeInstance OID wraps up after 497 days

2017-12-12T13:15:54-0800 2017-12-12T18:17:33-0800 https://support.ruckuswireless.com/articles/000007337 2017-12-12T13:15:56-0800 monthly 0.8 admin,premium knowledge_article_3164 knowledge_article_3164 2017-12-12T13:15:56-0800 000007337 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Configuring external Web Authentication/Captive Portal Creating the Captive Portal profile for external Web Authentication The following steps configure the Captive Portal profile for external Web Authentication: 1.Enter the configure terminal command to enter global configuration mode. device# configure terminal device(config)# 2.Enter the captive-portal command to create a user-defined Captive Portal profile. <pre> device(config)# captive-portal cp_brocade device (config-cp-cp_brocade)#</pre> The Captive Portal command mode is enabled, where you can specify the Aruba ClearPass server details that enable the switch to handle HTTP redirection mechanism. 3.Enter the virtual-ip command to configure the IP address of the Aruba ClearPass server as the virtual IP address. <pre> device (config-cp-cp_brocade)# virtual-ip 10.21.240.42 </pre> 4.Enter the virtual-port command to configure the HTTP or HTTPS protocol port number to facilitate HTTP services for the clients in external Web Authentication. device (config-cp-cp_brocade)# virtual-port 80 By default, HTTPS is used and the default port number for HTTPS is 443. You can also specify HTTP mode and the default port number for HTTP is 80. The protocol configured in the Captive Portal profile must be the same as the protocol configured as part of web management access using the web-management command. 5.Enter the login-page command to configure the login page details to redirect the client to the login page hosted on the Aruba ClearPass server. device (config-cp-cp_brocade)# login-page brocadeguestlogin.php The login page details must be same as the login page hosted on the Aruba ClearPass server. 6.(Optional) Enter the show captive-portal command to view the output of the configured Captive Portal profile. device(config)# show captive-portal cp-brocade Configured Captive Portal Profile Details : cp-name :cp-brocade virtual-ip :10.21.240.42 virtual-port :80 user-role :guest login-page :brocadeguestlogin.php Configuring external Web Authentication <img src="http://www.brocade.com/content/html/en/configuration-guide/fastiron-08040-securityguide/GUID-99735F17-53BC-45E6-A0C6-3C7982E3DDA8-output_low.png"></img> 1.Set up any global configuration required for the ICX device, RADIUS server, Aruba ClearPass server, and other servers. On a Layer 2 switch, make sure the FastIron switch has an IP address configured. device# configure terminal device(config)# ip address 20.1.1.10/24 On a Layer 3 switch, assign an IP address to a virtual interface (VE) for each VLAN on which external Web Authentication will be enabled. device#configure terminal device(config)# vlan 20 device(config-vlan-20)# router-interface ve20 device(config-vlan-20)# untagged ethernet 1/1/1 to 1/1/20 device(config-vlan-20)# interface ve20 device(config-vif-20)# ip address 20.1.1.10/24 2.Configure the RADIUS server to authenticate the host username and passwords. The Aruba ClearPass server has both a RADIUS server and a web server. Use the following commands to make RADIUS configuration on ICX switch. device(config)# radius-server host 20.1.1.8 device(config)# radius-server key $GSig@U\ <div> </div> NOTE: The RADIUS key configured should be the same as the key configured in the Aruba ClearPass server. NOTE: A RADIUS server other than the one integrated with Aruba ClearPass server can also be configured. 3.Configure Web Authentication to use secure (HTTPS) or non-secure (HTTP) login and logout pages. By default, HTTPS is used. <div>NOTE The protocol configured in the Captive Portal profile must be the same as the protocol configured as part of web management access. To enable the non-secure web server on the switch, enter the following commands. device(config)# web-management HTTP device(config)# vlan 20 device(config-vlan-20)# webauth device(config-vlan-20-webauth)# no secure-login To enable the secure web server on the switch, enter the following commands. device(config)# web-management HTTPS device(config)# vlan 20 device(config-vlan-20)# webauth device(config-vlan-20-webauth)# secure-login 4.Configure the key to access a secure web page using a certificate by performing one of the following steps: If the secure Web server is used, in order to access a secure web page, the web server needs to provide a key. This key is exchanged using a certificate. A certificate is a digital document that is issued by a trusted source that can validate the authenticity of the certificate and the web server that is presenting it. Therefore the switch must have a certificate for Web Authentication to work. Upload a certificate using the following global configuration command. <pre id="GUID-363E11D6-6960-447D-AD1C-A6C5BF820164__GUID-70EA6DB8-6F5E-47B4-A3C7-34234286199F"> device(config)# ip ssl private-key-file tftp ip-addr key-filename </pre> Generate a certificate using the following global configuration command. <pre> device(config)# crypto-ssl certificate generate </pre> 5.Create a Web Authentication VLAN and enable Web Authentication on that VLAN. <pre id="GUID-363E11D6-6960-447D-AD1C-A6C5BF820164__GUID-8187FA29-E628-4543-A621-611B4B82F824_unique_1"> device(config)# vlan 20 device(config-vlan-20)# webauth device(config-vlan-20-webauth)# enable </pre> From this step onwards, the hosts must be authenticated to forward traffic. 6.Attach the configured Captive Portal profile to the Web Authentication-enabled VLAN. <pre id="GUID-363E11D6-6960-447D-AD1C-A6C5BF820164__GUID-773FEAC2-93E6-4617-A55E-31D963A09DCF"> device(config-vlan-20-webauth)# captive-portal profile cp_brocade 7.Configure the Web Authentication mode as Captive Portal mode to authenticate the users in a VLAN through external Web Authentication. </pre> device(config-vlan-20-webauth)# auth-mode captive-portal 8.Configure the external Captive Portal on the Aruba ClearPass server to create a guest or web login page for external Web Authentication. </div>

Configuring external Web Authentication/Captive Portal

2017-12-12T13:15:56-0800 2017-12-12T18:17:29-0800 https://support.ruckuswireless.com/articles/000006679 2017-12-12T14:11:52-0800 monthly 0.8 admin,premium knowledge_article_3159 knowledge_article_3159 2017-12-12T14:11:52-0800 000006679 Validated (External) Premium Brocade eos products Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Brocade EOS Products Why does FastIron SX800 and SX1600 reset during card installations? The PCI recovery mechanism has been enhanced via software in fixed releases.

At times, a FastIron device may exhibit a reset during card installations or hot swaps.

2017-12-12T14:11:52-0800 2017-12-12T18:17:22-0800 https://support.ruckuswireless.com/articles/000006677 2017-12-12T14:11:52-0800 monthly 0.8 admin,premium knowledge_article_3158 knowledge_article_3158 2017-12-12T14:11:52-0800 000006677 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How do I read VRRPE and VSRP hello packets in Wireshark as if they were VRRP hello packets? There are two steps to making Wireshark dissect VRRPE and VSRP hello packets. The first step is mostly cosmetic. By default, Wireshark interprets UDP port 8888 as "ddi-udp-1". On Windows, you can change this to "vrrpe" by editing the file "C:\Program Files\Wireshark\services", looking for the line that has "8888/udp", and changing "ddi-udp-1" to "vrrpe". After that first step, whenever you open a VRRPE hello packet capture file, next to UDP port 8888 Wireshark will display "vrrpe" in parenthesis. The second step is based on Wireshark's Lua example for "<a href="https://wiki.wireshark.org/Lua/Examples#Using_Lua_to_register_protocols_to_more_ports" target="_blank">Using Lua to register protocols to more ports</a>". Assuming this is the first time you've used Lua to modify Wireshark behavior in Windows, press the Windows key and the letter R to open the dialog for running a program. In the dialog box enter "%APPDATA%" without quotes and click OK. In the directory that appears there should be a sub directory named Wireshark. Enter that directory and create a file named "init.lua". If you've already created your own personalized init.lua in the past, edit the file instead. Inside that file add the following. do local udp_port_table = DissectorTable.get("udp.port") local ip_proto_table = DissectorTable.get("ip.proto") local vrrp_dissector = ip_proto_table:get_dissector(112) udp_port_table:add(8888,vrrp_dissector) end That Lua code will instruct Wireshark to use its VRRP (protocol 112) dissector against VRRPE and VSRP (UDP port 8888) hello packets. For example, if you open a capture file of VRRPE hello packets, you may see something like the following: Frame 8: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: BrocadeC_60:a3:00 (00:04:80:60:a3:00), Dst: IPv4mcast_02 (01:00:5e:00:00:02) Internet Protocol Version 4, Src: 10.15.1.10, Dst: 224.0.0.2 User Datagram Protocol, Src Port: vrrpe (8888), Dst Port: vrrpe (8888) Source Port: vrrpe (8888) Destination Port: vrrpe (8888) Length: 28 Checksum: 0xcf2a [correct] [Checksum Status: Good] [Stream index: 1] Virtual Router Redundancy Protocol Version 2, Packet type 1 (Advertisement) Virtual Rtr ID: 1 Priority: 100 (Default priority for a backup VRRP router) Addr Count: 1 Auth Type: No Authentication (0) Adver Int: 1 Checksum: 0x6fe2 [correct] [Checksum Status: Good] IP Address: 10.15.1.11 If you open a capture file of VSRP hello packets, you may see something like the following. Frame 1: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: 03:04:80:00:01:01 (03:04:80:00:01:01), Dst: 03:04:80:00:01:00 (03:04:80:00:01:00) Internet Protocol Version 4, Src: x.x.x.x, Dst: 224.0.0.2 User Datagram Protocol, Src Port: vrrpe (8888), Dst Port: vrrpe (8888) Source Port: vrrpe (8888) Destination Port: vrrpe (8888) Length: 32 Checksum: 0x7731 [correct] [Checksum Status: Good] [Stream index: 0] Virtual Router Redundancy Protocol Version 2, Packet type 1 (Advertisement) Virtual Rtr ID: 10 Priority: 100 (Default priority for a backup VRRP router) Addr Count: 0 Auth Type: No Authentication (0) Adver Int: 1 Checksum: 0x0303 [correct] [Checksum Status: Good] Again, VRRPE and VSRP hello packets are proprietary. It is possible that their format will change and this method will become invalid. It is possible that even without any announced change, currently correctly functioning VRRPE and VSRP devices will generate hello packets that this method cannot read.

In its default configuration, Wireshark does not interpret and display (dissect) the contents of VRRPE and VSRP hello packets. It is possible to make Wireshark dissect VRRPE and VSRP hello packets as if they were VRRP hello packets.

2017-12-12T14:11:52-0800 2017-12-12T18:17:20-0800 https://support.ruckuswireless.com/articles/000006682 2017-12-12T14:11:52-0800 monthly 0.8 admin,premium knowledge_article_3157 knowledge_article_3157 2017-12-12T14:11:52-0800 000006682 Validated (External) Premium Ruckus icx switches;Brocade eos products System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products Why are Iperf stats for Brocade adapters not accurate when run in a Microsoft Windows Server OS environment? It has been seen in multiple internal and external tests that the Iperf tool does not report accurate statistics for Brocade adapters when Iperf is used in the Microsoft Windows Server OS environments. It is recommended that all user's using Windows Server software test their network connectivity with the NTTTCP product when Brocade adapters are installed. The NTTTCP product has proven to provide the most accurate statistics in such environments.

Why are Iperf stats for Brocade adapters not accurate when run in a Microsoft Windows Server OS environment?

2017-12-12T14:11:52-0800 2017-12-12T18:17:19-0800 https://support.ruckuswireless.com/articles/000006796 2017-12-12T14:11:54-0800 monthly 0.8 admin,premium knowledge_article_3148 knowledge_article_3148 2017-12-12T14:11:54-0800 000006796 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products Where do I find the Boot Prom MAC address? The Boot Prom MAC is the MAC address of the chassis. It is visible in several outputs, but the is most commonly seen under<code style="color: red; font-size: 13px;"> show chassis</code>: <code style="color: black; font-size: 13px;">POD1-SW-A# </code><code style="color: red; font-size: 13px;">show chassis</code> <code style="color: black; font-size: 13px;">Chassis Type: FESX624</code> <code style="color: black; font-size: 13px;">Power supply 1 (NA - AC-DC-UNKNOWN - Regular) present, status ok Power supply 2 not present</code> <code style="color: black; font-size: 13px;">Fan 1 ok Fan 2 ok</code> <code style="color: black; font-size: 13px;">Exhaust Side Temperature Readings: Current temperature : 34.0 deg-C Warning level.......: 48.0 deg-C Shutdown level......: 64.0 deg-C Intake Side Temperature Readings: Current temperature : 23.0 deg-C</code> <code style="color: red; font-size: 13px;">Boot Prom MAC: 0024.384d.e400</code>

Where do I find the Boot Prom MAC address?

2017-12-12T14:11:54-0800 2017-12-12T18:17:05-0800 https://support.ruckuswireless.com/articles/000006795 2017-12-12T14:11:54-0800 monthly 0.8 admin,premium knowledge_article_3147 knowledge_article_3147 2017-12-12T14:11:54-0800 000006795 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to generate a SSL/TLS key and connection between SDN and Campus ICX Switches for lab testing? Based on <a href="https://wiki.opendaylight.org/view/OpenDaylight_OpenFlow_Plugin:_TLS_Support#ovs-pki_command_to_generate_key_pem_files" target="_blank">https://wiki.opendaylight.org/view/OpenDaylight_OpenFlow_Plugin:_TLS_Support#ovs-pki_command_to_generate_key_pem_files</a> Lab Requirements: Centos 7 Server and/or Ubuntu 14.04 running Brocade SND 2.0 Controller. <div>1. Create the Test SSL Keys:</div> sudo ovs-pki init cd /var/lib/openvswitch/pki/ sudo ovs-pki req+sign sc switch sudo ovs-pki req+sign ctl controller This should have generated six ".pem" files, of which we'll use four. A private key is needed for each side, signed by the unofficial root certificate in /var/lib/openvswitch/pki/. A public certificate is also needed for each side. There are also the two request certificates sc-req.pem & ctl-req.pem, which were used to generate the signed certificates. Keys Generated: -rw-r--r-- 1 root root 4063 Jul 15 12:19 ctl-cert.pem -rw------- 1 root root 1675 Jul 15 12:19 ctl-privkey.pem -rw-r--r-- 1 root root 3606 Jul 15 12:19 ctl-req.pem -rw-r--r-- 1 root root 4042 Jul 15 12:19 sc-cert.pem -rw------- 1 root root 1675 Jul 15 12:19 sc-privkey.pem -rw-r--r-- 1 root root 3601 Jul 15 12:19 sc-req.pem <div>2. Intermediate PKCS12 controller keystore (to be loaded into Java keystores)</div> dir: /var/lib/openvswitch/pki/ sudo openssl pkcs12 -export -in ctl-cert.pem -inkey ctl-privkey.pem \ -out ctl.p12 -name odlserver \ -CAfile /var/lib/openvswitch/pki/controllerca/cacert.pem -caname root -chain You'll be prompted for a password, use "opendaylight" Enter Export Password: Verifying - Enter Export Password: <div>3. Create Controller keystore (ctl.jks) from ctl.p12 </div> dir: /var/lib/openvswitch/pki/ sudo keytool -importkeystore \ -deststorepass opendaylight -destkeypass opendaylight -destkeystore ctl.jks \ -srckeystore ctl.p12 -srcstoretype PKCS12 -srcstorepass opendaylight \ -alias odlserver <div>4. Store the switch's public key in a "truststore" (truststore.jks)</div> dir: /var/lib/openvswitch/pki sudo keytool -importcert -file sc-cert.pem -keystore truststore.jks -storepass opendaylight # when prompted "Trust this certificate? [no]:" enter "yes" # Certificate was added to keystore <div>5. Finally copy these two keystores to the ssl configuration directory</div> dir: /var/lib/openvswitch/pki mkdir /opt/bvc/controller/configuration/ssl cp ctl.jks truststore.jks /opt/bvc/controller/configuration/ssl <div>6. Update 42-openflowplugin.xml file to use TLS/SSL in Brocade SDN Controller</div> <ol><li># cd /opt/bvc/controller/etc/opendaylight/karaf</li><li>/opt/bvc/controller/etc/opendaylight/karaf# sudo vi 42-openflowplugin.xml</li><li>Edited the karaf file at /opt/bvc/controller/etc/opendaylight/karaf/42-openflowplugin.xml as follows:</li></ol> <port>6633</port> <transport-protocol>TLS</transport-protocol> <switch-idle-timeout>15000</switch-idle-timeout> <tls> <keystore>/opt/bvc/controller/configuration/ssl/ctl.jks</keystore> <keystore-type>JKS</keystore-type> <keystore-path-type>PATH</keystore-path-type> <keystore-password>opendaylight</keystore-password> <truststore>/opt/bvc/controller/configuration/ssl/truststore.jks</truststore> <truststore-type>JKS</truststore-type> <truststore-path-type>PATH</truststore-path-type> <truststore-password>opendaylight</truststore-password> <certificate-password>opendaylight</certificate-password> </tls> <div>7. Stop and Start Controller</div> <ol><li># cd /opt/bvc/bin</li><li>/opt/bvc/bin# sudo ./stop</li></ol> Stop controller .......................... [ OK ] Stopping NODEJS server 9000 .............. [ OK ] <ol><li>/opt/bvc/bin# sudo ./start</li></ol> Start controller ......................... [ OK ]l Starting NODEJS server ............[ OK ]./tai Server @ http://xx.xx.xx.xx:9001/ <ol><li>./taillog (Wait about 15min for Controller to come online)</li></ol> <div>8. Copy SSL/TLS keys to ICX/MLX units from a local TFTP Server:</div> Move the Keys to a TFTP Server. *Now you can load to the Switch from the TFTP Server. Switch/Router# copy tftp flash XX.XX.XX.XXX /testkeys/sc-cert.pem client-certificate Switch/Router# copy tftp flash XX.XX.XX.XXX /testkeys/sc-privkey.pem client-private-key ---------- Note: Ensure this is configured: --------- 'openflow enable ofv130' 'openflow controller ip-address XX.XX.XX.XXX ' <div>9. Verify SSL connection from Switch to SDN Controller a. show open b. sh log ----------</div> Notes: Setup and quickly generate an RPM on Centos 7 to install Openvswitch 2.3.2 command-line tools for generating test SSL/TLS keys. ---------- Based on <a href="https://n40lab.wordpress.com/2015/06/28/centos-7-installing-openvswitch-2-3-2-lts/" target="_blank">https://n40lab.wordpress.com/2015/06/28/centos-7-installing-openvswitch-2-3-2-lts/</a> <div>1. As the root user install some packages and add a new user:</div> yum -y install wget openssl-devel gcc make python-devel openssl-devel kernel-devel graphviz kernel-debug-devel autoconf automake rpm-build redhat-rpm-config libtool adduser ovs su - ovs <div>2. Now as the ovs user we’ll generate the rpm file. In this post, we skip the rpmbuild tests included with openvswitch for solving some dependency problems:</div> mkdir -p ~/rpmbuild/SOURCES wget <a href="http://openvswitch.org/releases/openvswitch-2.3.2.tar.gz" target="_blank">http://openvswitch.org/releases/openvswitch-2.3.2.tar.gz</a> cp openvswitch-2.3.2.tar.gz ~/rpmbuild/SOURCES/ tar xfz openvswitch-2.3.2.tar.gz sed 's/openvswitch-kmod, //g' openvswitch-2.3.2/rhel/openvswitch.spec > openvswitch-2.3.2/rhel/openvswitch_no_kmod.spec rpmbuild -bb --nocheck ~/openvswitch-2.3.2/rhel/openvswitch_no_kmod.spec exit <div>3. Create the /etc/openvswitch configuration directory:</div> mkdir /etc/openvswitch <div>4. Install the rpm package:</div> yum localinstall /home/ovs/rpmbuild/RPMS/x86_64/openvswitch-2.3.2-1.x86_64.rpm <div>5. If you are using SELinux in enfocing mode, change some contexts:</div> yum install policycoreutils-python semanage fcontext -a -t openvswitch_rw_t "/etc/openvswitch(/.*)?" restorecon -Rv /etc/openvswitch <div>6. Start the openvswitch service:</div> systemctl start openvswitch.service chkconfig openvswitch on <div>7. Check that the command-line tools are ready:</div> ovs-vsctl -V ovs-vsctl (Open vSwitch) 2.3.2 Compiled Jun 28 2015 13:01:11 DB Schema 7.6.2

How do I generate a SSL/TLS key and connection between a Brocade SDN Controller and Campus ICX Switches/MLX Routers for lab testing?

2017-12-12T14:11:54-0800 2017-12-12T18:17:04-0800 https://support.ruckuswireless.com/articles/000006802 2017-12-12T14:11:54-0800 monthly 0.8 admin,premium knowledge_article_3146 knowledge_article_3146 2017-12-12T14:11:54-0800 000006802 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure a Scheduler Profile? The user-configurable scheduler profile can be created by specifying weights form qosp0 through qosp7 as shown in the following command format, <ul><li> Configure a QoS scheduler profile named user1 </li></ul> Device(config)# qos scheduler-profile user1 mechanism weighted Device(config)# qos scheduler-profile user1 profile qosp0 1 qosp1 1 qosp2 10 qosp3 10 qosp3 10 qosp4 10 qosp5 10 qosp6 20 qosp7 38 Syntax: qos scheduler-profile <user_profile_name> profile qosp0 <w0> ... qosp7 <w7> ---------- Note: If you create a profile specifying only the weights (qosp0 through qosp7) without specifying the mechanism, the default mechanism is used. ---------- <ul><li>The default mechanism for stacking systems is Mixed, and WRR for stand-alone systems</li></ul> If you change the profile mechanism, the weights also get changed according to the mechanism. The weights can be modified according to the following requirements: <ul><li>If the mechanism is changed to WRR, the default system weights get assigned</li><li>If the mechanism is changed to Mixed, the default mix weights get assigned</li><li>If the mechanism is changed to Strict, the weights are ignored and remain untouched</li></ul> Scheduler-profile modification takes effect dynamically on an active profile.

How to configure a Scheduler Profile?

2017-12-12T14:11:54-0800 2017-12-12T18:17:01-0800 https://support.ruckuswireless.com/articles/000006843 2017-12-12T14:11:56-0800 monthly 0.8 admin,premium knowledge_article_3144 knowledge_article_3144 2017-12-12T14:11:56-0800 000006843 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What is Spanning tree (STP) BPDU Guard? STP BPDU guard is disabled by default. Enable it on individual interfaces. If an STP BPDU is received on a BPDU-guard-enabled port, a log message is generated for a BPDU guard violation, and a CLI message is displayed to warn the network administrator of a severe invalid configuration. Recovery To re-enable a port that is in the errdisable state, you must first disable the port and then re-enable it. ! Configure BPDU guard on the access ports connecting to the end-user workstations or computers. SCH-ACCESS-101(config)# interface ethernet 2/2/4 SCH-ACCESS-101(config-if-2/2/4)# stp-bpdu-guard SCH-ACCESS-101# show 802-1w vlan 1013

What is Spanning tree (STP) BPDU Guard?

2017-12-12T14:11:56-0800 2017-12-12T18:16:58-0800 https://support.ruckuswireless.com/articles/000006850 2017-12-12T14:11:56-0800 monthly 0.8 admin,premium knowledge_article_3143 knowledge_article_3143 2017-12-12T14:11:56-0800 000006850 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure OSPF in Brocade Campus network Switches? Configuring OSPF: Prerequisites: Switch is running Full Layer-3 code and IP address are already assigned to interface or virtual interfaces ---------- Notes: Passive interface do not transmit OSPF hello’s. This is for security on subnets that don’t have neighboring routers. Additionally, consider MD5 authentication of neighbors (example not show). ---------- Configuring a loopback interface is recommended as the router-id for OSPF. ---------- Note: Troubleshooting command : show ip ospf ---------- Configuration Example: interface loopback 1 ip address 192.168.100.1/32 router ospf area 0 int e 1 ip ospf area 0 int ve 10 ip opsf area 0 ip ospf passive

How to configure OSPF in Brocade Campus network Switches

2017-12-12T14:11:56-0800 2017-12-12T18:16:57-0800 https://support.ruckuswireless.com/articles/000006835 2017-12-12T14:11:56-0800 monthly 0.8 admin,premium knowledge_article_3141 knowledge_article_3141 2017-12-12T14:11:56-0800 000006835 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers How to configure a static route for wireless controller? Example of how to configure a static route to network destination of 10.18.12.0/24, pointing to a next-hop router of 10.18.13.1: tacwifi# ip route 10.18.12.0/24 10.18.13.1 tacwifi# commit write memory tacwifi# sh ip route -------------------------------------------------------------------------------- DESTINATION GATEWAY FLAGS INTERFACE -------------------------------------------------------------------------------- 99.99.99.0/24 direct C vlan99 10.1.1.0/24 direct C me1 10.18.12.0/24 10.18.13.1 CG vlan1 10.18.13.0/24 direct C vlan1 tacwifi# ping 10.18.12.1 PING 10.18.12.1 (10.18.12.1): 100 data bytes 108 bytes from 10.18.12.1: seq=0 ttl=64 time=0.860 ms 108 bytes from 10.18.12.1: seq=1 ttl=64 time=0.652 ms 108 bytes from 10.18.12.1: seq=2 ttl=64 time=0.694 ms 108 bytes from 10.18.12.1: seq=3 ttl=64 time=1.145 ms 108 bytes from 10.18.12.1: seq=4 ttl=64 time=0.806 ms

How to configure a static route for wireless controller?

2017-12-12T14:11:56-0800 2017-12-12T18:16:54-0800 https://support.ruckuswireless.com/articles/000006929 2017-12-12T14:11:59-0800 monthly 0.8 admin,premium knowledge_article_3136 knowledge_article_3136 2017-12-12T14:11:59-0800 000006929 Validated (External) Premium Ruckus icx switches;Fastiron ws series;Fastiron cx series;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration Configuration, Ruckus ICX Switches, FastIron WS Series, FastIron CX Series How to configure OSPF on FastIron Devices? Perform the following steps to begin using OSPF on the router. 1. Enable OSPF on the router. <code style="color: black; font-size: 13px;">FastIron(config)#router ospf</code> 2. Assign the areas to which the router will be attached. <code style="color: black; font-size: 13px;">FastIron(config-ospf-router)#area 192.5.1.0 Syntax: area <num> | <ip-addr></code> Note: The <num> | <ip-addr> parameter specifies the area number, which can be a number or in IP address format. If you specify a number, the number can be from 0 through 18. 3. Assign individual interfaces to the OSPF areas. <code style="color: black; font-size: 13px;">FastIron(config-ospf-router)#interface e 1/8 FastIron(config-if-1/8)#ip ospf area 195.5.0.0</code> Note: Remember to do "<code style="color: black; font-size: 13px;">write memory</code>" after each step. <ul><li>To verify ospf configuration, use the command "<code style="color: black; font-size: 13px;">show ip ospf config</code>".</li><li>Once all the routers are configured with OSPF, check that the ospf neighbors are up by doing "<code style="color: black; font-size: 13px;">sh ip ospf neighbor</code>".</li></ul> <code style="color: black; font-size: 13px;">FastIron#show ip ospf neighbor Port Address Pri State Neigh Address Neigh ID 8 212.76.7.251 1 full 212.76.7.200 173.35.1.220</code> <ul><li>Check OSPF interface</li></ul> <code style="color: black; font-size: 13px;">FastIron#show ip ospf interface 192.168.1.1 Ethernet 2/1,OSPF enabled IP Address 192.168.1.1, Area 0 OSPF state ptr2ptr, Pri 1, Cost 1, Options 2, Type pt-2-pt Events 1 Timers(sec): Transit 1, Retrans 5, Hello 10, Dead 40 DR: Router ID 0.0.0.0 Interface Address 0.0.0.0 BDR: Router ID 0.0.0.0 Interface Address 0.0.0.0 Neighbor Count = 0, Adjacent Neighbor Count= 1 Neighbor: 2.2.2.2 Authentication-Key:None MD5 Authentication: Key None, Key-Id None, Auth-change-wait-time 300</code>

How to configure OSPF on FastIron Devices?

2017-12-12T14:11:59-0800 2017-12-12T18:16:47-0800 https://support.ruckuswireless.com/articles/000006925 2017-12-12T14:11:59-0800 monthly 0.8 admin,premium knowledge_article_3135 knowledge_article_3135 2017-12-12T14:11:59-0800 000006925 Validated (External) Premium Fastiron ws series;Brocade FastIron WS Series Switches Configuration Configuration, FastIron WS Series How to enable 100M interfaces on FWS devices? Enable 100-fx under the interface configuration. For example: config t interface e 1/1/1 100-fx end

Enable 100M interfaces on FWS devices

2017-12-12T14:11:59-0800 2017-12-12T18:16:45-0800 https://support.ruckuswireless.com/articles/000006949 2017-12-12T14:12:00-0800 monthly 0.8 admin,premium knowledge_article_3130 knowledge_article_3130 2017-12-12T14:12:00-0800 000006949 Validated (External) Premium Ruckus icx switches Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches Why is BGP license not activating on FCX? User needs to delete the current license; then re-install the same license. Next please save the settings and reload the switch. Once the switch boots up, the user needs to see the following: Edgewood-core# show version Copyright (c) 1996-2010 Brocade Communications Systems, Inc. UNIT 1: compiled on Jun 24 2011 at 21:39:10 labeled as FCXR07202d (6012339 bytes) from Primary FCXR07202d.bin SW: Version 07.2.02dT7f3 Boot-Monitor Image size = 369292, Version:07.1.00T7f5 (grz07100) HW: Stackable FCX624S-HPOE ========================================================================== UNIT 1: SL 1: FCX-24GS POE 24-port Management Module Serial #: <your SN here> License: FCX_ADV_ROUTER_SOFT_PACKAGE (LID: <your LID here>) P-ENGINE 0: type DB10, rev 01 ========================================================================== UNIT 1: SL 2: FCX-2XGC 2-port 16G Module (2-CX4) ========================================================================== 800 MHz Power PC processor 8544E (version 33/0022) 400 MHz bus 65536 KB flash memory 256 MB DRAM STACKID 1 system uptime is 49 minutes 52 seconds The system : started=warm start reloaded=by "reload" ************************************************************ Edgewood-core# show license Index Package Name Lid License Type Status License Period 1 FCX-ADV-LIC-SW <your LID here> normal active unlimited ********************************************************************************************** telnet @ Edgewood-core(config)# router bgp Enable bgp ospf Enable ospf pim Enable pim rip Enable rip vrrp Enable vrrp vrrp-extended Enable vrrp-extended vsrp Enable vsrp

BGP license not activating on FCX

2017-12-12T14:12:00-0800 2017-12-12T18:16:38-0800 https://support.ruckuswireless.com/articles/000006951 2017-12-12T14:12:00-0800 monthly 0.8 admin,premium knowledge_article_3128 knowledge_article_3128 2017-12-12T14:12:00-0800 000006951 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches Configuration Configuration, FastIron CX Series How to disable or enable a LACP port on FCX? To modify the port without taking link-aggregate configuration apart, the following workaround can be done. Example: Trunk e 1/1/44 e 1/1/45 Config-trunk-ind Enable e 1/1/45

How to disable or enable a LACP port on FCX?

2017-12-12T14:12:00-0800 2017-12-12T18:16:35-0800 https://support.ruckuswireless.com/articles/000006953 2017-12-12T14:12:02-0800 monthly 0.8 admin,premium knowledge_article_3127 knowledge_article_3127 2017-12-12T14:12:02-0800 000006953 Validated (External) Premium Turboiron 24x switch Configuration Configuration, TurboIron 24X Switch How to configure web-management in the TurboIron? TurboIron does not support embedded web-management. However this feature is supported in other FastIron and NetIron devices. Please refer to FastIron_TurboIron Configuration Guides (Appendix B) Brocade RFC support. ---------- Note: This is only mentioned in the Appendix B of " FastIron_TurboIron_config guide" for software code 4.1 and 4.2 and does not mention in the FastIron or TurboIron Configuration Guides for software code 73xx/74xx/8xx. ----------

How to configure web-management in the TurboIron?

2017-12-12T14:12:02-0800 2017-12-12T18:16:34-0800 https://support.ruckuswireless.com/articles/000006954 2017-12-12T14:12:02-0800 monthly 0.8 admin,premium knowledge_article_3125 knowledge_article_3125 2017-12-12T14:12:02-0800 000006954 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, FastIron CX Series After installing an FCX-4XG 4-port 10G Module why do ports 1 and 2 not work? <div>FCX-4XG ports 1 and 2 are configured by default to be stacking ports. When they are in the default mode, the ports will not operate correctly with non-stacking ports. In order to check the port status, run the following command: show stack stack-ports The above command should show the following output if the ports are configured for stacking: Unit# Stack-port1 Stack-port2 1 down(1/2/1) down(1/2/2) If the ports are not configured for stacking, the command should show the following output: Unit# Stack-port1 Stack-port2 1 none none If the ports are displayed as stack ports as in the first output, go into configuration mode and run the following command: stack disable After disabling stacking, run the following command again to confirm that the ports have been removed from the stack: show stack stack-ports Unit# Stack-port1 Stack-port2 1 none none <code> </code> The ports should now operate correctly with non-stacking ports.</div>

After installing an FCX-4XG 4-port 10G Module why do ports 1 and 2 not work?

2017-12-12T14:12:02-0800 2017-12-12T18:16:31-0800 https://support.ruckuswireless.com/articles/000006986 2017-12-12T14:12:02-0800 monthly 0.8 admin,premium knowledge_article_3123 knowledge_article_3123 2017-12-12T14:12:02-0800 000006986 Validated (External) Premium Icx 6430;Icx 6450;Icx 6610;Icx 6650;Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 6430 and 6450 Campus Switches;Ruckus ICX 6610 Campus Switches;Brocade ICX 6650 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ICX 6430, ICX 6450, ICX 6610, ICX 6650, ICX 7250, ICX 7450, ICX 7750 Why does this error occur - TFTP received error request -- code 1 message File not found Ensure requested file exists on TFTP server.

TFTP received error request -- code 1 message File not found

2017-12-12T14:12:02-0800 2017-12-12T18:16:28-0800 https://support.ruckuswireless.com/articles/000006987 2017-12-12T14:12:02-0800 monthly 0.8 admin,premium knowledge_article_3122 knowledge_article_3122 2017-12-12T14:12:02-0800 000006987 Validated (External) Premium Icx 6650;Icx 7750;Brocade ICX 6650 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ICX 6650, ICX 7750 What is the correct configuration for DSCP traffic through ICL? The trust dscp command is needed for the interfaces to honor the DSCP marking. Access the primary port of the ICL on both sides and run the command trust dscp.

DSCP traffic through ICL

2017-12-12T14:12:02-0800 2017-12-12T18:16:26-0800 https://support.ruckuswireless.com/articles/000007112 2017-12-12T14:12:06-0800 monthly 0.8 admin,premium knowledge_article_3116 knowledge_article_3116 2017-12-12T14:12:06-0800 000007112 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products What is the command to verify the version of POE firmware on a FastIron product? The command to check the firmware version on a Brocade FastIron is show inline power detail. FCX624SHPOE-ADV Router# show inline power detail Power Supply Data On stack 1: ++++++++++++++++++ Power Supply Data: ++++++++++++++++++ Power Supply #1: Max Curr: 7.5 Amps Voltage: 54.0 Volts Capacity: 410 Watts power supply 2 is not present POE Details Info. On Stack 1 : General PoE Data: +++++++++++++++++ Firmware Version -------- 02.1.0

What is the command to verify the version of POE firmware on a FastIron product?

2017-12-12T14:12:06-0800 2017-12-12T18:16:17-0800 https://support.ruckuswireless.com/articles/000007128 2017-12-12T14:12:06-0800 monthly 0.8 admin,premium knowledge_article_3113 knowledge_article_3113 2017-12-12T14:12:06-0800 000007128 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches Upgrade Mixed Stacks <table class="sectionContent" style="width: 862px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 684px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">When upgrading mixed stacks, there are two options: 1. Download separate images for each type of stack member (ICX6610, ICX6450). <ul><li>copy tftp flash 192.168.10.12 FCXR08030g.bin pri</li><li>copy tftp flash 192.168.10.12 ICX64R08030g.bin pri</li><li>[also copy bootrom for each type of stack member]</li></ul> 2. Use the manifest file process. <ul><li>copy tftp system-manifest 192.168.10.12 manifest.txt primary</li></ul> If you use the manifest file method, the entire release zip file must be extracted to the TFTP root with all directories intact. You might find it simpler to just simply copy the images separately. Once this is complete, make sure you do a ‘show flash’ and confirm that the versions match for all stack units for both primary and secondary. You can to do the upgrade on the active unit of the stack. When you upload the ICX6610 image, the active unit will push out that image to all ICX6610s in the stack. When you do the ICX6450 image, it will push that one out to all ICX6450s in the stack. It knows if the image is for the ICX6610 or ICX6450 based on the file names. Always confirm the upgrade worked correctly using "show flash" before reloading. Note: Please do not reload unless all stack units have matching code. </div> </td></tr></tbody></table> </td></tr></tbody></table>

Guide to upgrade mixed stacks for ICX devices

2017-12-12T14:12:06-0800 2017-12-12T18:16:13-0800 https://support.ruckuswireless.com/articles/000007137 2017-12-12T14:12:09-0800 monthly 0.8 admin,premium knowledge_article_3107 knowledge_article_3107 2017-12-12T14:12:09-0800 000007137 Validated (External) Premium Ruckus icx switches Performance;System network management Performance, System Network Management, Ruckus ICX Switches How to Disable Weighted Round Robin (WRR) Disabling WRR<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">In order to disable WRR you would need to change the queuing method by configuring a user-configurable scheduler profile. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">There are three available mechanisms: <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li style="color: rgb(0, 0, 0); font-style: normal; font-weight: normal;">Strict Priority (SP)</li><li style="color: rgb(0, 0, 0); font-style: normal; font-weight: normal;">Weighted Round Robin (WRR)</li><li style="color: rgb(0, 0, 0); font-style: normal; font-weight: normal;">Hybrid / Mixed (combination of SP and WRR)</li></ul> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Strict Priority (SP) - SP ensures service for high-priority traffic. The software assigns the maximum weights to each queue, to cause the queuing mechanism to serve as many packets in one queue as possible before moving to a lower queue. This method biases the queuing mechanism to favor the higher queues over the lower queues. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">For example, strict queuing processes as many packets as possible in qosp3 before processing any packets in qosp2, then processes<span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">as many packets as possible in qosp2 before processing any packets in qosp1, and so on.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Hybrid WRR and SP - This configurable queueing mechanism combines both the SP and WRR mechanisms. The combined method enables the Brocade device to give strict priority to delay-sensitive traffic such as VoIP traffic, and weighted round robin priority to other traffic types. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">By default, when you select the combined SP and WRR queueing method, the Brocade device assigns strict priority to traffic in qosp7 and qosp6, and weighted round robin priority to traffic in qosp0 through qosp5. Thus, the Brocade device schedules traffic in queue 7 and queue 6 first, based on the strict priority queueing method. When there is no traffic in queue 7 and queue 6, the device schedules the other queues in round-robin fashion from the highest priority queue to the lowest priority queue. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> User-configurable scheduler profile configuration<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Configuring a user-configurable scheduler profile involves, selecting a proper mechanism and appropriate weights for the traffic classes (TCs) corresponding to that mechanism. It is highly recommended that you let the system use the default scheduling mechanism unless user knows what parameters you intend to modify and for what reasons. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Following is the command format for creating a profile while specifying a mechanism. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Syntax: qos scheduler-profile user_profile_name mechanism scheduling_mechanism <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The user_profile_name variable is the name of the profile you are creating. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The scheduling_mechanism variable is SP, WRR, or Mixed. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The user-configurable scheduler profile can be created by specifying weights from qosp0 through qosp7, as shown in the following command format. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Syntax: qos scheduler-profile user_profile_name qosp0 w0 qosp1 w1 qosp2 w2 qosp3 w3 qosp4 w4 qosp5 w5 qosp6 w6qosp7 w7 <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The user_profile_name variable is the name of the profile you are creating. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Profile qosp0 through qosp7 are the default queue names. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The w0 through w1 variables are the assigned weights. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">If you create a profile specifying only the weights (qosp0 through qosp7) without specifying the mechanism, the default mechanism is used. The default mechanism for stacking systems is Mixed, and WRR for standalone systems. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: medium; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">If you change the profile mechanism, the weights also get changed according to the mechanism. The weights can be modified according to the following requirements: <ul style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><li style="color: rgb(0, 0, 0); font-style: normal; font-weight: normal;">If the mechanism is changed to WRR , the default system weights get assigned</li><li style="color: rgb(0, 0, 0); font-style: normal; font-weight: normal;">If the mechanism is changed to Mixed , the default mix weights get assigned</li><li style="color: rgb(0, 0, 0); font-style: normal; font-weight: normal;">If the mechanism is changed to Strict, the weights are ignored and remain untouched. </li></ul> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Scheduler-profile modifications take effect dynamically on an active profile. The operational defaults for all scheduling types for stacking and standalone systems are listed in the “Default values for scheduling type for stacking and standalone systems (for FCX and ICX 6450 platforms)” table.</div>

Weighted Round Robin (WRR) - WRR ensures that all queues are serviced during each cycle.

2017-12-12T14:12:09-0800 2017-12-12T18:16:04-0800 https://support.ruckuswireless.com/articles/000007243 2017-12-12T14:12:11-0800 monthly 0.8 admin,premium knowledge_article_3106 knowledge_article_3106 2017-12-12T14:12:11-0800 000007243 Validated (External) Premium Brocade eos products Configuration;System network management Configuration, System Network Management, Brocade EOS Products SPANNING TREE 802.1W CONFIGURATION <table class="sectionContent" style="width: 1003.7px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 828.14px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">YouTube video: <a href="https://www.youtube.com/watch?v=K4opKLUznwU&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=K4opKLUznwU&feature=youtu.be</a></div> </td></tr></tbody></table> </td></tr></tbody></table>

BROCADE CAMPUS FEATURE EXPLAINER SERIES:

2017-12-12T14:12:11-0800 2017-12-12T18:16:02-0800 https://support.ruckuswireless.com/articles/000007199 2017-12-12T14:12:11-0800 monthly 0.8 admin,premium knowledge_article_3105 knowledge_article_3105 2017-12-12T14:12:11-0800 000007199 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers Wireless NIC still associated to the Access Point in a previous location after roaming to a new location. Under multi-channel architecture, the wireless client determines the AP to which it will associate. The association decision is based on several factors, such as received AP signal strength, RF band, number of current clients already associated with the AP, client authentication\encryption method used, basic and supported data rates, etc. A wireless client with an outdated wireless Network Interface Card (NIC) driver can have difficulties making the right association decision. Therefore, one of the things to ensure during troubleshooting is that the wireless client NIC is running the latest driver version. Here are the steps to update a Windows wireless client NIC to the latest driver version: <ol><li>Select Start / Settings / Network Connections / Wireless Network Connection</li><li>Right click on Wireless Network Connection and select Properties</li><li>Under the General tab, click Configure</li><li>Click the Driver tab. The Wireless NIC manufacturer, the current Driver Date, and Version will be displayed</li><li>Click Update Driver to update the wireless NIC driver to the latest version</li></ol> Depending on the Windows OS, you may be prompted for permission to use Windows Update to search for software. Upon your permission, Windows will complete the wireless NIC driver update process and display the results at the end.

Wireless NIC still associated to the Access Point in a previous location after roaming to a new location.

2017-12-12T14:12:11-0800 2017-12-12T18:16:01-0800 https://support.ruckuswireless.com/articles/000007197 2017-12-12T14:12:11-0800 monthly 0.8 admin,premium knowledge_article_3103 knowledge_article_3103 2017-12-12T14:12:11-0800 000007197 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers What are the external Radius VSAs (Vendor Specific Attributes) for wireless controller management access? When using an external Radius server for management user authentication, ensure that the following values are configured on your Radius server to ensure maximum compatibility: Brocade Vendor ID is 1991. There are two radius VSAs used for management user authentication: VSA Name: Symbol-Service-Type Attribute Number: 1 Type: Integer Values: 1 Monitor 2 Helpdesk 4 Network 8 System Administrator 16 Web Admin 32768 Super User VSA Name: Symbol-Login-Service Attribute Number: 100 Type: Integer Values: 128 Console 64 Telnet 32 SSH 16 Web

What are the external Radius VSAs (Vendor Specific Attributes) for wireless controller management access?

2017-12-12T14:12:11-0800 2017-12-12T18:15:58-0800 https://support.ruckuswireless.com/articles/000007194 2017-12-12T14:12:11-0800 monthly 0.8 admin,premium knowledge_article_3102 knowledge_article_3102 2017-12-12T14:12:11-0800 000007194 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers How to enable Smart RF? To create and map a new Smart-RF policy to an existing RF-domain [brocade], configure as follows: RFS6000(config)# smart-rf-policy TEST RFS6000(config-smart-rf-policy-TEST)# enable RFS6000(config-smart-rf-policy-TEST)# commit write memory RFS6000(config)# rf-domain brocade RFS6000(config-rf-domain-brocade)# use smart-rf-policy TEST RFS6000(config-rf-domain-brocade)# commit write memory RFS6000(config-rf-domain-brocade)# To confirm the changes, the show run output will include the following: rf-domain brocade country-code us use smart-rf-policy TEST

How to enable Smart RF?

2017-12-12T14:12:11-0800 2017-12-12T18:15:56-0800 https://support.ruckuswireless.com/articles/000007311 2017-12-12T14:12:11-0800 monthly 0.8 admin,premium knowledge_article_3101 knowledge_article_3101 2017-12-12T14:12:11-0800 000007311 Validated (External) Premium Ruckus icx switches Configuration;Security Configuration, Security, Ruckus ICX Switches NTP communication fails if NTP is sourced from a non-default VRF interface RFE submitted by SE team and they confirmed that this feature is available in FI 8.0.4a While this is not considered as a defect, based on field requirements posted in the field, Engineering has accepted the RFE. The idea to have this is if user design consists of a separate management-VRF and have all management applications run inside that VRF. Otherwise, caution is to be exercised when enabling the system to accept NTP from a non-default VRF as in typical scenarios, non-default VRFs house customer facing connections.

Switch cannot communicate to NTP server if the NTP source belongs to a non-default VRF

2017-12-12T14:12:11-0800 2017-12-12T18:15:55-0800 https://support.ruckuswireless.com/articles/000006595 2017-12-12T14:27:14-0800 monthly 0.8 admin,premium knowledge_article_3099 knowledge_article_3099 2017-12-12T14:27:14-0800 000006595 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure ACL-based Inbound Mirroring? <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">Configuring ACL-based Inbound Mirroring <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The following example shows the ACL mirroring traffic from port 1/1/1 is mirrored to port 1/1/3. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">device(config)# interface ethernet 1/1/1 device(config-if-e10000-1/1)# acl-mirror-port ethernet 1/1/3 <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The following example shows that ports from a port region must be mirrored to the same destination mirror port. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">device(config)# interface ethernet 1/1/1 device(config-if-e10000-1/1/1)# acl-mirror-port ethernet 1/2/3 device(config)# interface ethernet 1/1/2 device(config-if-e10000-1/1/2)# acl-mirror-port ethernet 1/2/3 <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The following example shows ACL mirroring when the destination port within a port region is configured. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">device(config)# interface ethernet 1/1/1 device(config-if-e10000-1/1/1)# ip access-group 101 in device(config)# interface ethernet 1/1/3 device(config-if-e10000-1/1/3)# acl-mirror-port ethernet 1/4/3 <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The following example shows how to specify the destination mirror port for LAG ports. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">device(config)# lag static device(config-lag)# ports ethernet 1/1/1 to 1/14 device(config-lag)# deploy device(config)# interface ethernet 1/1/1 device(config-if-e10000-1/1/1)# acl-mirror-port ethernet 1/1/8 <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The following example shows how to configure ACL-based mirroring for ACLs bound to virtual interfaces. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">device(config)# vlan 10 device(config-vlan-10)# tagged ethernet 1/4/1 to 1/4/2 device(config-vlan-10)# tagged ethernet 1/5/3 device(config-vlan-10)# router-interface ve 10 device(config-vlan-10)# exit device(config)# interface ethernet 1/4/1 device(config-if-e10000-1/4/1)# acl-mirror-port ethernet 1/5/1 device(config-if-e10000-1/4/1)# exit device(config)# interface ve 10 device(config-vif-10)# ip address 10.10.10.254/24 device(config-vif-10)# ip access-group 102 in device(config)# access-list 102 permit ip any any mirror <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">The following example shows the ACL-based mirroring for ports in both mirrored and non-mirrored VLANs. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">device(config)# vlan 10 device(config-vlan-10)# tagged ethernet 1/4/1 to 1/4/2 device(config-vlan-10)# tagged ethernet 1/5/3 device(config-vlan-10)# router-interface ve 10 device(config-vlan-10)# exit device(config)# vlan 20 device(config-vlan-20)# tagged ethernet 1/4/1 to 1/4/2 device(config-vlan-20)# exit device(config)# interface ethernet 1/4/1 device(config-if-e10000-1/4/1)# acl-mirror-port ethernet 1/5/1 device(config-if-e10000-1/4/1)# exit device(config)# interface ve 10 device(config-vif-10)# ip address 10.10.10.254/24 device(config-vif-10)# ip access-group 102 in device(config-vif-10)# exit device(config)# access-list 102 permit ip any any mirror <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">---------- Note: As with any ACL, the final clause must permit desired traffic to flow: be sure to add an appropriate permit any any clause to the end of any ACL intended to mirror (and not filter) traffic. Failure to include the permit clause will result in disruption of traffic through any interface to which the ACL is applied. ----------

Creating, Applying, Specifying, Configuring ACL-based monitoring

2017-12-12T14:27:14-0800 2017-12-12T18:15:52-0800 https://support.ruckuswireless.com/articles/000006604 2017-12-12T14:27:14-0800 monthly 0.8 admin,premium knowledge_article_3097 knowledge_article_3097 2017-12-12T14:27:14-0800 000006604 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches What are OpenFlow hybrid switch mode and OpenFlow hybrid port mode? OpenFlow hybrid switch mode and OpenFlow hybrid port mode<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> Hybrid switch mode<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">The Brocade device supports enabling OpenFlow on a per-port basis, so you can choose which port of the device will be controlled by the OpenFlow feature. Non-OpenFlow-enabled ports continue to support existing features of the device, such as IPv4 or IPv6 routing for Layer 2 switching. ---------- Note: Hybrid switch mode is not supported on the ICX 6450. ---------- <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">OpenFlow hybrid port mode operation <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Consider Device-1 in Hybrid port mode on page 16. Ingress traffic on VLAN 10 on hybrid port 1/1 will be processed for IPv4 and IPv6 unicast routing. Traffic on other VLANs will be processed against OpenFlow flows on port 1/1 and switched accordingly. A preconfigured number of protected VLANs can be supported for normal routing. The Spanning Tree Protocols (STP) state of these routing VLANs will be set to forwarding, as the Layer 2 protocol is not supported. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Configuring OpenFlow hybrid port mode for devices <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">1. Enable OpenFlow at the global configuration level. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">2. Configure the OpenFlow controller. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">3. Configure the system maximum OpenFlow entries. (The default is 1024.) <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">4. Configure the maximum OpenFlow flow-protected VLAN entries. (The default is 40.) <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">---------- Note: System reload is required once you change the system maximum values. ---------- <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">5. Configure the maximum OpenFlow unprotected VLAN entries. (The default is 40.) <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">6. Configure the protected VLANs on the port. A maximum of 40 protected VLANs can be configured on an OpenFlow port. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">7. Enable OpenFlow hybrid port mode on the desired interfaces. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">8. Configure a VE interface for the interface by specifying the protected or unprotected VLAN, and add routing entries. Capabilities and prerequisites The following are current capabilities and prerequisites of OpenFlow hybrid port mode: <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">IPv4 and IPv6 unicast routing are supported on OpenFlow protected and unprotected VLANs. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">• Packets tagged with a protected VLAN ID will be forwarded by IPv4 and IPv6 unicast routing, if IPv4 or IPv6 routing is configured on that VLAN. If IPv4 or IPv6 routing is not configured on that VLAN, such packets will be dropped. • Packets tagged with an unprotected VLAN ID will be subject first to OpenFlow flows. If there is a match on an OpenFlow flow, the packet will be forwarded according to the flow actions. No further IPv4 or IPv6 routing is supported for packets that are forwarded by OpenFlow flows. If there is no match on any OpenFlow flow, the packet will be forwarded by IPv4 or IPv6 unicast routing, if IPv4 or IPv6 routing is configured on the VLAN. If IPv4 or IPv6 routing is not configured on the VLAN, those packets are either dropped or sent to the controller, per the OpenFlow configuration. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">• Ports in OpenFlow hybrid port mode cannot be added as untagged ports to regular VLANs. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">• A port can be enabled for OpenFlow hybrid port mode only if the port is untagged in the default VLAN. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">• As routing is enabled on a port in OpenFlow hybrid port mode, OpenFlow traffic or unprotected VLAN traffic sent with the destination MAC address as the port's MAC address and matching IP route entries on the port can potentially find the VLAN and MAC address modified unless the OpenFlow rules explicitly set the VLAN and destination MAC address in the outgoing packet. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">• Policy-based routing (PBR) is not supported. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">• Protected VLAN traffic that does not have matching IP route entries will be dropped. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">• Multiple interfaces cannot be part of a VE interface created on a port in OpenFlow hybrid port mode with a protected VLAN. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">• The BGP4+, OSPFv2, OSPFv3, RIP, and RIPng protocols are supported on protected VLANs. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">• When protected VLANs are configured but the port is not part of the VLAN, the traffic coming on the port with the protected VLAN will be dropped. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">---------- Note: Link aggregation is not supported. ---------- <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Enabling OpenFlow hybrid port mode <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Use the openflow enable command to enable or disable OpenFlow hybrid port mode on the port and the port becomes a normal port on an interface. The no form of the command disables the OpenFlow hybrid port mode on the port and the port becomes a normal port. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">config-if-e10000-2/5)# openflow enable layer2 hybrid-mode Syntax: [no] openflow enable layer2 | layer3 | layer23 [hybrid-mode ] <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Adding or deleting protected VLANs <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Use openflow protected -vlans to add or delete protected VLANs on a OpenFlow hybrid port mode interface. The no form of the command deletes the configured protected VLANs from the hybrid enabled port. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">config-if-e10000-2/5)# openflow protected-vlans 10 Syntax: [no] openflow protected-vlans id1 id2...idn <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">VLANs can be configured individually. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">---------- Note: You cannot specify a VLAN range for the openflow protected-vlans command. ----------

Port mode operation

2017-12-12T14:27:14-0800 2017-12-12T18:15:49-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvrECAS?attachment_index=0 2017-12-12T18:15:49-0800 monthly admin,premium knowledge_article_3097 knowledge_article_3097_attachment_1 ka25B000000CbGwQAK_Attachment__c.pdf 811719.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000TvrECAS?attachment_index=1 2017-12-12T18:15:49-0800 monthly admin,premium knowledge_article_3097 knowledge_article_3097_attachment_1 ka25B000000CbGwQAK_Attachment2__c.pdf 824049.0 application/pdf https://support.ruckuswireless.com/articles/000006760 2017-12-12T14:27:16-0800 monthly 0.8 admin,premium knowledge_article_3094 knowledge_article_3094 2017-12-12T14:27:16-0800 000006760 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products Is the interface module hot swappable on FastIron SuperX (FSX)? Enhanced Hot Swap is NOT supported on FastIron SuperX (FSX) but it is supported on FastIron SX 800 (FSX 800) and FastIron SX 1600 (FSX 1600) in release 3.2.00 and higher. On FSX, you must DISABLE the interface module on associated module number (slot) prior to removing/replacing the interface module. # disable module x (x = module number) -> Remove/replace the module Here is an example for removing module in slot 2: SW-SuperX# disable module 2 Taking down module 2 ... Module 2 is ready to be pulled out Powering off the module in slot 2 SW-SuperX# Now the module in slot 2 can be safely removed with the chassis reloading.

Is the interface module hot swappable on FastIron SuperX (FSX)?

2017-12-12T14:27:16-0800 2017-12-12T18:15:45-0800 https://support.ruckuswireless.com/articles/000006629 2017-12-12T14:27:16-0800 monthly 0.8 admin,premium knowledge_article_3091 knowledge_article_3091 2017-12-12T14:27:16-0800 000006629 Validated (External) Premium Ruckus icx switches Performance;Troubleshooting Performance, Troubleshooting, Ruckus ICX Switches Why is Sflow not working with CA Network Flow Analysis Software? Sflow does not work with the flow collector: (CA Network Flow Analysis). The reason is because Brocade devices use Expanded Samples. General Sampling Formats The Sflow samples are 32 bit packets that contain 20 bit of Enterprise Private information, and 12 bit field for the packet format. FORMAT 1 - Flow Samples: Supported in RA.8.3.16 (CA Network Flow Analysis) and newer FORMAT 3 - Expanded Flow Samples: supported in RA 9.0 update 1 (9.0.161) The following Sample Types are not supported and the flows will be discarded from NFA. FORMAT 2 - Counter Samples: Unsupported FORMAT 4 - Expanded Counter Samples: Unsupported -CA Network Flow Analysis tool will not be able to recognize Sflow samples coming from Brocade, since they send Expanded Counter samples as described in the SFlow v5 Standard. -In some scenarios, the CA Network Flow Analysis will shut down if it receives a Sflow Sample with an unsupported format.

Sflow not working with CA Network Flow Analysis Software.

2017-12-12T14:27:16-0800 2017-12-12T18:15:40-0800 https://support.ruckuswireless.com/articles/000006980 2017-12-12T14:27:18-0800 monthly 0.8 admin,premium knowledge_article_3089 knowledge_article_3089 2017-12-12T14:27:18-0800 000006980 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure the LACP timeout? To configure the LACP timeout, use the following command. device(config)# lag blue dynamic device(config-lag-blue)# lacp-timeout short Syntax: [no] lacp-timeout [ long | short ] To delete the configuration, use the no form of this command. The long keyword configures the port for the long timeout mode-120 seconds. With the long timeout, an LACPDU is sent every 30 seconds. If no response comes from its partner after 3 LACPDUs are sent, a timeout event occurs, and the LACP state machine transition to the appropriate state based on its current state. The short keyword configures the port for the short timeout mode--3 seconds. In the short timeout configuration, an LACPDU is sent every second. If no response comes from its partner after 3 LACPDUs are sent, a timeout event occurs, and the LACP state machine transitions to the appropriate state based on its current state. If you specify neither long nor short, the state machine operates based on the standard IEEE specification as its default behavior. The original IEEE specification says that the state machine starts with short the timeout and moves to the long timeout after the LAG is established. However, sometimes a vendor’s implementation always uses either the short timeout or the long timeout without changing the timeout. Brocade provides this command so that you can configure Brocade devices to inter-operate with other vendor’s devices.

How to configure the LACP timeout

2017-12-12T14:27:18-0800 2017-12-12T18:15:37-0800 https://support.ruckuswireless.com/articles/000007098 2017-12-12T14:27:19-0800 monthly 0.8 admin,premium knowledge_article_3085 knowledge_article_3085 2017-12-12T14:27:19-0800 000007098 Validated (External) Premium Ruckus icx switches Support license activation Support License Activation, Ruckus ICX Switches Unable to accept the Brocade End User License Agreement The device will not take the ‘yes’ or ‘no’ statement if accessing the device remotely (SSH or Telnet). In order to accept the Brocade End USER License Agreement for the PREM license, establish a console connection to the device and then it will accept the yes or no statement.

Brocade End User License Agreement is not accepted for the PREM license.

2017-12-12T14:27:19-0800 2017-12-12T18:15:32-0800 https://support.ruckuswireless.com/articles/000007014 2017-12-12T14:27:19-0800 monthly 0.8 admin,premium knowledge_article_3083 knowledge_article_3083 2017-12-12T14:27:19-0800 000007014 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to change source ip for dhcp relay agent on a ICX? The ip bootp-use-intf-ip command configures a DHCP relay agent to set the source IP address of a DHCP-client packet with the IP address of the incoming interface for the packet. Run the ip bootp-use-intf-ip command in the global configuration mode of the DHCP relay agent. device(config)# ip bootp-use-intf-ip

How to change source ip for dhcp relay agent on a ICX?

2017-12-12T14:27:19-0800 2017-12-12T18:15:29-0800 https://support.ruckuswireless.com/articles/000007011 2017-12-12T14:27:19-0800 monthly 0.8 admin,premium knowledge_article_3082 knowledge_article_3082 2017-12-12T14:27:19-0800 000007011 Validated (External) Premium Ruckus icx switches Configuration;Security Configuration, Security, Ruckus ICX Switches What are the FastIron features supported with MCT? The following FastIron features are supported with MCT. All security features are locally significant and are not synchronized across an MCT cluster. <ul id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-63D315DB-CF0B-4649-BBBA-89D2AC4DC039"><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-A5F0E5EB-95DA-452C-BDAC-3CE2479994F1"> LACP on the CCEP. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-E776450B-5A81-4BF6-88D9-4CDD86564E9E"> VRRP on the CCEP. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-9280B531-820D-4571-8E91-3E3EB70A228F"> MRP and MRP II, with the restriction that the ICL port cannot be the secondary port of the MRP ring. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-693C5EB6-B437-4DCA-BF35-67919210B3BD"> Flooding features (such as VLAN CPU protection and multicast flooding) on MCT VLANs. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-2321030F-4C9B-4C51-9134-97F85B857798"> Unidirectional Link Detection (UDLD) as independent boxes (configured independently). </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-85950D7A-EF53-4FF8-B14F-79BDA8AAE1EB"> ARP as independent boxes (configured independently). </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-5631C714-6D7E-482A-AD91-DD486800EBB7"> STP and RSTP. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-55BF021C-A1B4-4382-BBC2-2F99565F5A2D"> Ingress ACLs on all MCT ports. Egress ACLs are supported only on MCT CEPs or ICL ports. Egress ACLs are not supported on MCT CCEPs. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-EDA71B55-CD9A-47D6-ACC5-9BEA2F2FA07C"> QoS and MAC filters and profiles with the same configuration on both cluster devices. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-61166583-2A53-4A0F-802B-20CEB5D7C635"> IPv4 ACLs and rate limits. If the rules are applied on the CCEPs, the same rules must be applied to the CCEP ports on both cluster devices. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-78120A11-8739-4A30-B769-369111821A49"> Layer 3 Routing. VE with IP address assignment is supported on CCEPs for VRRP. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-E034B636-D1DB-476E-941E-4A332BCC3272"> Static multi-port MAC. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-DCE12566-7664-4F32-9E8A-059C9327602D"> Port MAC security, multi-port authentication, and 802.1X, only on CEPs. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-C4A1944D-C17B-4E97-B2CB-F29003D314E7"> Static MAC address configuration. Static MAC addresses are programmed on both local and remote peers as static entries. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-9B557BF7-F09B-4EA9-8D8F-56BD693AC1B6"> DAI and DHCP snooping for clients connected through CEPs. They must be configured independently on both cluster devices. <ul id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-E9887686-D2A3-4F45-9494-731E6A388DEA"><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-9D497F6F-9596-4256-8E3F-1B7CBFB9FDA4"> If the trusted ports are off the CCEP, the arp inspection trust or dhcp snoop trust command must be used on the CCEPs and ICL ports. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-56DEE2F1-7446-4E4D-8F1D-447497DEEE69"> DHCP and ARP entries are created on both MCT cluster devices if the flow traverses both the CCEP and ICL. </li></ul> </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-DB24764D-08FD-478F-A5B2-50C58505BEA7"> Hitless failover. If the failover operation is performed with a cluster configuration, the TCP session is reestablished. The MAC addresses from the cluster peer devices are revalidated and programmed accordingly. </li><li>Hitless upgrade. If the upgrade operation is performed with a cluster configuration, the TCP session is reestablished. The MAC addresses from the cluster peer devices are revalidated and programmed accordingly.</li></ul> <div>The following FastIron features are NOT supported with MCT:</div> <ul id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-837B8BE3-38A2-47E1-86A8-7D579A69046F"><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-F6911A16-25FE-4183-B1B3-8EC0943E6CBD"> LACP on ICL. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-517F1F54-E2E1-43D2-88D9-C98FBF7E4CE6"> MSTP, VSRP, RIP. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__LI_9A2117D4E99A45E0B7A3ADFD06C361DB"> Layer 3 multicast features. For example, PIM, MSDP, anycast RP, embedded RP etc. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-26E3E63C-3DFA-4287-B0F9-DD338EAC512A"> IPv6, VRRP-E (IPv6), and VRRPv3. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-9FBC664B-8817-4BB9-B2D6-42F9C6E09993"> GRE on the ICL VE interfaces. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-15882802-07AB-4C92-A5F2-275FCDE55F17"> DAI on the CCEPs. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-44828C52-4451-4F89-B62F-FA26EC951197"> Host security features (port MAC security, multi-port authentication, 802.1X, DAI, DHCP snooping) on CCEPs. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-FDDA54F7-AA3D-4AC4-95C3-13BCC4381010"> Multi-port ARP on ICL or CCEPs. </li><li id="GUID-B4976615-2B3E-457D-8E9B-38213758CE0A__GUID-B596DE3C-6AB8-4EF9-B455-7BA8F4C50E36"> Web authentication on MCT VLANs. </li></ul>

What are the FastIron features supported with MCT?

2017-12-12T14:27:19-0800 2017-12-12T18:15:27-0800 https://support.ruckuswireless.com/articles/000007115 2017-12-12T14:27:21-0800 monthly 0.8 admin,premium knowledge_article_3076 knowledge_article_3076 2017-12-12T14:27:21-0800 000007115 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products What does the S value under AGE column mean in the output of "show dot1x mac-sessions"? S is a SW timer and its default value is 120. If SW-age timer is setup to 60, what will happen is: first HW-age timer will start, fixed at 70 seconds. Once the HW-age timer expires, the SW-age timer will start. When this SW-age timer reaches 60, the session will age out. Once the MAC is re-learned again, the whole process will start over… Note: "<code style="color: black; font-size: 13px;">Age : N/A</code>" means the SW-age timer has not yet started. These DOT1X sessions with the CONNECTING status will eventually be aged out, unless a new MAC is re-learned and starts another EAPOL request. This FAQ provides more information on the Age of the SW timer for Dot1X mac-session, since the Configuration Guide did not go into detail. Checking this variable helps one troubleshoot Dot1X connection issues, and gives a better picture of the existing mac-session being set up on the switch: Switch #show dot1x mac-sessions Port MAC/IP(username) Vlan Auth ACL Age PAE State State ----------------------------------------------------------------------------- 1/1/1 001f.d04e.d5c8 :i65394 23 permit none Ena AUTHENTICATED 1/1/2 0180.c200.0003 :N/A 23 init none N/A CONNECTING 1/1/3 001f.5b37.bc49 :i67001 23 permit none Ena AUTHENTICATED 1/1/4 001f.5b3d.c4ac :I63208 23 permit none Ena AUTHENTICATED 1/1/5 88f0.7788.9682 :N/A 23 permit none Ena FORCE_AUTH 1/1/7 30ff.0c00.78ac :N/A 23 init none S40 CONNECTING 1/1/7 78ac.c03d.9c06 :i64788 23 permit none Ena AUTHENTICATED 1/1/10 0000.0000.0023 :N/A 23 init none S42 CONNECTING 1/1/10 0023.dfde.91d9 :I65217 23 permit none Ena AUTHENTICATED 1/1/15 0025.00f0.710b :I63268 23 permit none Ena AUTHENTICATED 1/1/15 0000.0000.0025 :N/A 23 init none S31 CONNECTING 1/1/16 0025.00f4.5a3c :I63259 23 permit none Ena AUTHENTICATED 1/1/17 e806.88cf.4375 :i67624 23 permit none Ena AUTHENTICATED 1/1/18 2c27.d7ef.2374 :i50324 23 permit none Ena AUTHENTICATED 1/1/19 d485.6406.f465 :i50331 23 permit none Ena AUTHENTICATED 1/1/20 2c27.d7ef.dc47 :N/A 23 init none S60 CONNECTING 1/1/21 0180.c200.0003 :N/A 23 init none N/A CONNECTING 1/1/24 1cc1.de33.4c09 :I51047 23 permit none Ena AUTHENTICATED

What does the S value under AGE column mean in the output of "show dot1x mac-sessions"?

2017-12-12T14:27:21-0800 2017-12-12T18:15:18-0800 https://support.ruckuswireless.com/articles/000007120 2017-12-12T14:27:21-0800 monthly 0.8 admin,premium knowledge_article_3075 knowledge_article_3075 2017-12-12T14:27:21-0800 000007120 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products What is the difference in the use of "show flash" and "show files"? Show flash cli command will output the content stored in the primary flash, the secondary flash, and the boot rom. Please note that the boot code is stored in boot rom, which is not part of the flash memory, but show flash prints the boot-monitor image name and size as well. Show files cli command will output the files and current usage of the flash system of the Switch/Router. The output normally contains usage of the primary flash, the secondary flash, plus other system files that are created for various usages, such as startup-config, license, stacking, debug, crash etc. Show files does not print out the image name stored in the primary flash and the secondary flash. You must use show flash to get this data. Example output of these two cli commands on an ICX6650: ICX6650# sh flash Stack unit 1: Compressed Pri Code size = 12848084, Version:07.5.00bT323 (ICXLR07500b.bin) Compressed Sec Code size = 12850900, Version:07.5.00T323 (ICXLR07500b1-rev4.bin) Compressed Boot-Monitor Image size = 524288, Version:07.5.00T320 Code Flash Free Space = 27045888 ICX6650# sh files 12848084 [4e58] primary 12850900 [4e58] secondary 748 [0000] $$$license 3840 [0000] startup-config.backup 512 [0000] meta_data.bin 1582 [0000] debug.boot 3841 [0000] startup-config 25709507 bytes 7 File(s) 27045888 bytes free

What is the difference in the use of "show flash" and "show files"?

2017-12-12T14:27:21-0800 2017-12-12T18:15:16-0800 https://support.ruckuswireless.com/articles/000007175 2017-12-12T14:27:26-0800 monthly 0.8 admin,premium knowledge_article_3070 knowledge_article_3070 2017-12-12T14:27:26-0800 000007175 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers Set up LDAP parameters on Brocade Mobility devices to work with OpenLDAP The parameters that LDAP requires are standard. However, it can be confusing to find which parameters need to be configured under which option fields. OpenLDAP parameters are similar, with subtle differences outlined below. For other LDAP distributions, please contact the vendor for more details. The following are configuration examples based on Mobility firmware 5.4.4. Please refer to the User Manual for more Radius configuration details on this, and for other Mobility released versions. Using the Web-UI select Services>RADIUS>Server Policy> [User Policy Created] > Server Policy. Set the Auth Data Source to LDAP, then select the LDAP Authentication Type you wish to support. NOTE: Valid EAP methods that can be used with LDAP include PEAPv1 (GTC)and EAP-TTLS(PAP). PEAPv0 (MSCHAPv2) is not supported. Please implement Local Radius or External Radius server for the support of PEAPv0 (MSCHAPv2) and other EAP methods. Please select LDAP Group Verification and LDAP Chase Referral if not already selected. Navigate to LDAP tab under the same RADIUS server policy, and add/configure the LDAP server with the follow reference: 1) IP Address – Set this value to the IP address of the external LDAP server. In this example, an external OpenLDAP Server will be used with the IP address 192.168.10.6. 2) User Login – This is the user login filter for OpenLDAP server. This value should be (uid=%{Stripped-User-Name:-%{User-Name}}) 3) Port – Set this value to the port used for LDAP authentication. The default LDAP port for OpenLDAP is TCP port 389. 4) Timeout - This setting is for the number of seconds to wait for the server response before timing out. The default value of 3 seconds is set. 5) Bind DN – Set this value to the account created in OpenLDAP that the WLAN Switch Controller will use to query LDAP. In this example, an OpenLDAP user named rfswitch has been created in the default Users container for the brocade.com domain. The Bind DN thus has been set to cn=rfswitch,cn=Users,dc=brocade,dc=com. 6) Base DN – Set this value to the container in OpenLDAP where the WLAN Switch Controller will search for users and groups. In this example, all the users are located in the default Users container in OpenLDAP; thus, the Base DN has been set to<code> </code>cn=Users,dc=brocade,dc=com. Note that the WLAN Switch Controller can also search multiple containers for users and groups. For example, if the Base DN is set to ou=California,dc=brocade,dc=com, the WLAN Switch Controller will search all the containers under the California OU for users. 7) Bind Password – Set this value to the password you assigned to the Bind DN user account. In this example, the Active Directory user rfswitch has been assigned the password mobility. 8) Password Attribute – For OpenLDAP this value should be UserPassword. 9) Group Attribute – For OpenLDAP the value should be cn. 10) Group Filter – For OpenLDAP this value should be (|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn}))) 11) Group Membership Attribute – For OpenLDAP, this value should be radiusGroupName. Mobility 5.4.4 command line (CLI) configuration will look as follows: br-rfs6000-DC87EC# config t Enter configuration commands, one per line. End with CNTL/Z: br-rfs6000-DC87EC(config)# radius-server-policy My\ on-board\ RADIUS\ server br-rfs6000-DC87EC(config-radius-server-policy-My on-board RADIUS server)# show contex radius-server-policy "My on-board RADIUS server" use radius-user-pool-policy "My First Radius User Pool" authentication data-source ldap ldap-server primary host 192.168.10.6 port 389 login "(uid=%{Stripped-User-Name:-%{User-Name}})" bind-dn "cn=rfswitch,cn=Users,dc=brocade,dc=com" base-dn "cn=Users,dc=brocade,dc=com" passwd 0 mobility passwd-attr UserPassword group-attr cn group-filter "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" group-membership radiusGroupName net-timeout 3 br-rfs6000-DC87EC(config-radius-server-policy-My on-board RADIUS server)#

Set up LDAP parameters on Brocade Mobility devices to work with OpenLDAP

2017-12-12T14:27:26-0800 2017-12-12T18:15:09-0800 https://support.ruckuswireless.com/articles/000007201 2017-12-12T14:27:28-0800 monthly 0.8 admin,premium knowledge_article_3069 knowledge_article_3069 2017-12-12T14:27:28-0800 000007201 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How to configure IP firewall rules (or IP Access List) to prevent wireless users from accessing other subnets? Use the IP Access List to block client traffic from accessing different subnets. Then map the IP Access List to a WLAN (Inbound). The following example allows the wireless client to access any device on the 10.100.0.0.0/16 subnet, but is denied access for 10.0.0.0/8. RFS6000(config)#ip access-list Guest RFS6000(config-ip-acl-Guest)#permit ip 10.100.0.0/16 10.100.0.0/16 rule-precedence 1 RFS6000(config-ip-acl-Guest)#deny ip 10.100.0.0/16 10.0.0.0/8 rule-precedence 11 RFS6000(config-ip-acl-Guest)#permit ip 10.100.0.0/16 any rule-precedence 41 RFS6000(config-ip-acl-Guest)#com wr mem [OK] RFS6000(config)#wlan guest RFS6000(config-wlan-guest)#use ip-access-list in Guest RFS6000(config-wlan-guest)#com wr [OK] To confirm changes: RFS6000(config)#show run ip access-list Guest permit ip 10.100.0.0/16 10.100.0.0/16 rule-precedence 1 deny ip 10.100.0.0/16 10.0.0.0/8 rule-precedence 11 permit ip 10.100.0.0/16 any rule-precedence 41 wlan guest ssid guest vlan 1 bridging-mode tunnel encryption-type none authentication-type none use ip-access-list in Guest

How to configure IP firewall rules (or IP Access List) to prevent wireless users from accessing other subnets?

2017-12-12T14:27:28-0800 2017-12-12T18:15:08-0800 https://support.ruckuswireless.com/articles/000007195 2017-12-12T14:27:28-0800 monthly 0.8 admin,premium knowledge_article_3066 knowledge_article_3066 2017-12-12T14:27:28-0800 000007195 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers What is the hostname for wireless controller discovery using DNS? In WiNG 5 all Dependent and Independent Access Points support DNS based discovery and can discover the Wireless Controllers by resolving the hostname brocade-wlc.<domain> . The AP will need the following settings from the external DHCP server for successful DNS lookup: 1. DHCP scope for APs. 2. DNS servers in Options. 3. Default Gateway in Options. 4. Domain Name in Options.

What is the hostname for wireless controller discovery using DNS?

2017-12-12T14:27:28-0800 2017-12-12T18:15:03-0800 https://support.ruckuswireless.com/articles/000007196 2017-12-12T14:27:28-0800 monthly 0.8 admin,premium knowledge_article_3064 knowledge_article_3064 2017-12-12T14:27:28-0800 000007196 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers When using an external RADIUS server for aaa on a wireless controller, what RADIUS attributes must be included? The attributes below will need to be configured on your external radius server and appropriate level applied to the user: ---------------------------------------------------------------------------- Dictionary attributes <div>ATTRIBUTE Foundry-Admin-Role 1 integer Foundry</div> <div>VALUE Foundry-Admin-Role Monitor 1 (monitor role)</div> <div>VALUE Foundry-Admin-Role Helpdesk 2 (intended for helpdesk/support)</div> <div>VALUE Foundry-Admin-Role NetworkAdmin 4 (network admin role)</div> <div>VALUE Foundry-Admin-Role SysAdmin 8 (system admin)</div> <div>VALUE Foundry-Admin-Role WebAdmin 16 (guest-user applications)</div> <div>VALUE Foundry-Admin-Role SuperUser 32768 (super-user read/write) ---------------------------------------------------------------------------- User config example <div>support Cleartext-Password := "support"</div> <div> Foundry-Admin-Role = "32768", ---------------------------------------------------------------------------- As seen in the above example, the user support as been given role 32768 which is the super user role.</div> </div>

When using an external RADIUS server for aaa on a wireless controller, what RADIUS attributes must be included?

2017-12-12T14:27:28-0800 2017-12-12T18:15:00-0800 https://support.ruckuswireless.com/articles/000007203 2017-12-12T14:27:28-0800 monthly 0.8 admin,premium knowledge_article_3063 knowledge_article_3063 2017-12-12T14:27:28-0800 000007203 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers What ports and protocols are used by Brocade Mobility devices for communication between APs and controllers? Authentication, Authorization and Accounting RADIUS <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">Protocol</td><td colspan="1" rowspan="1">Port</td><td colspan="1" rowspan="1">Description</td></tr><tr><td colspan="1" rowspan="1">17 UDP)</td><td colspan="1" rowspan="1">1645</td><td colspan="1" rowspan="1"> Legacy port used for RADIUS Authentication </td></tr><tr><td colspan="1" rowspan="1">17 (UDP)</td><td colspan="1" rowspan="1">1646</td><td colspan="1" rowspan="1"> Legacy port used for RADIUS Accounting </td></tr><tr><td colspan="1" rowspan="1">17 (UDP)</td><td colspan="1" rowspan="1">1812</td><td colspan="1" rowspan="1"> Default port as specified by IANA for RADIUS Authentication </td></tr><tr><td colspan="1" rowspan="1">17 (UDP)</td><td colspan="1" rowspan="1">1813</td><td colspan="1" rowspan="1"> Default port as specified by IANA for RADIUS Accounting</td></tr></tbody></table> LDAP <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">Protocol</td><td colspan="1" rowspan="1"> Port</td><td colspan="1" rowspan="1"> Description </td></tr><tr><td colspan="1" rowspan="1">6 (TCP)</td><td colspan="1" rowspan="1">389</td><td colspan="1" rowspan="1"> Default port used for LDAP / Active Directory Authentication</td></tr></tbody></table> CAPTIVE PORTAL <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">Protocol </td><td colspan="1" rowspan="1">Port </td><td colspan="1" rowspan="1">Description </td></tr><tr><td colspan="1" rowspan="1">6 (TCP) </td><td colspan="1" rowspan="1">444</td><td colspan="1" rowspan="1">When the connection-mode in a Captive Portal policy is set to HTTPS, a web browsers session will be captured and redirected by the Captive Portal server to TCP port 444 </td></tr><tr><td colspan="1" rowspan="1">6 (TCP) </td><td colspan="1" rowspan="1">880</td><td colspan="1" rowspan="1">When the connection-mode in a Captive Portal policy is set to HTTP, a web browsers session will be captured and redirected by the Captive Portal server to TCP port 880</td></tr></tbody></table> DEVICE MANAGEMENT CLI <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">Protocol </td><td colspan="1" rowspan="1">Port </td><td colspan="1" rowspan="1">Description </td></tr><tr><td colspan="1" rowspan="1">6 (TCP) </td><td colspan="1" rowspan="1">22</td><td colspan="1" rowspan="1">SSH-2 (Secure Shell Version 2) can be enabled to provide secured remote access to the CLI (Command Line Interface) on Wireless Controllers and Access Points </td></tr><tr><td colspan="1" rowspan="1">6 (TCP) </td><td colspan="1" rowspan="1">23</td><td colspan="1" rowspan="1">Telnet (TELe-NETwork) can be enabled to provide remote clear-text access to the CLI (Command Line Interface) on Wireless Controllers and Access Points File Transfer Protocol Port Description </td></tr><tr><td colspan="1" rowspan="1">6 (TCP) </td><td colspan="1" rowspan="1">20 21 </td><td colspan="1" rowspan="1">FTP (File Transfer Protocol) can be enabled to remotely transfer files to and from Wireless Controllers and Access Points </td></tr><tr><td colspan="1" rowspan="1">17 (UDP) </td><td colspan="1" rowspan="1">69</td><td colspan="1" rowspan="1">TFTP (Trivial File Transfer Protocol) can be enabled to remotely transfer files to and from Wireless Controllers and Access Points </td></tr></tbody></table> WiNG UI <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">Protocol </td><td colspan="1" rowspan="1">Port </td><td colspan="1" rowspan="1">Description </td></tr><tr><td colspan="1" rowspan="1">6 (TCP) </td><td colspan="1" rowspan="1">80</td><td colspan="1" rowspan="1">HTTP (Hypertext Transfer Protocol) can be enabled to provide remote clear-text access to the WiNG 5.0 User Interface (UI) on Wireless Controllers </td></tr><tr><td colspan="1" rowspan="1">6 (TCP) </td><td colspan="1" rowspan="1">443</td><td colspan="1" rowspan="1">HTTPS (Secured Hypertext Transfer Protocol) can be enabled to provide remote secured access to the WiNG 5.0 User Interface (UI) on Wireless Controllers </td></tr></tbody></table> SNMP <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">Protocol </td><td colspan="1" rowspan="1">Port </td><td colspan="1" rowspan="1">Description </td></tr><tr><td colspan="1" rowspan="1">17 (UDP) </td><td colspan="1" rowspan="1">161</td><td colspan="1" rowspan="1">SNMP (Simple Network Management Protocol) v2 or v3 can be enabled to remotely manage the Wireless Controllers or Access Points from a SNMP management application </td></tr><tr><td colspan="1" rowspan="1">17 (UDP) </td><td colspan="1" rowspan="1">162</td><td colspan="1" rowspan="1">SNMP Traps can be enabled to forward alarms and events from a Wireless Controller or Access Point to a SNMP management application</td></tr></tbody></table> DOMAIN NAME SYSTEM DNS <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">Protocol </td><td colspan="1" rowspan="1">Port </td><td colspan="1" rowspan="1">Description </td></tr><tr><td colspan="1" rowspan="1">17 (UDP) </td><td colspan="1" rowspan="1">53</td><td colspan="1" rowspan="1">DNS (Domain Name System) can be enabled on Wireless Controllers and Access Points to resolve hostnames to IPv4 Addresses</td></tr></tbody></table> BROCADE PROTOCOLS Ethernet Protocols <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">EtherType </td><td colspan="2" rowspan="1">Description </td></tr><tr><td colspan="1" rowspan="1">0x8781 </td><td colspan="2" rowspan="1">Brocade protocol used to exchanged roaming updates between Access Points over a Layer 2 network </td></tr><tr><td colspan="1" rowspan="1">0x8783 </td><td colspan="2" rowspan="1">Brocade protocol used for Access Point adoption, extended VLANs and clustering over a Layer 2 network </td></tr></tbody></table> IP Protocols <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">Protocol </td><td colspan="1" rowspan="1">Port </td><td colspan="1" rowspan="1">Description </td></tr><tr><td colspan="1" rowspan="1">17 (UDP) </td><td colspan="1" rowspan="1">24576</td><td colspan="1" rowspan="1">Brocade protocol used for Access Point adoption and clustering over a IP routed network </td></tr><tr><td colspan="1" rowspan="1">17 (UDP) </td><td colspan="1" rowspan="1">24577</td><td colspan="1" rowspan="1">Brocade protocol used for extended VLANs over a IP routed network</td></tr></tbody></table> TIME and DATE NTP <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">Protocol </td><td colspan="1" rowspan="1">Port </td><td colspan="1" rowspan="1">Description </td></tr><tr><td colspan="1" rowspan="1">17 (UDP) </td><td colspan="1" rowspan="1">123</td><td colspan="1" rowspan="1">NTP (Network Time Protocol) can be enabled to synchronize clocks on Wireless Controllers and Access Points</td></tr></tbody></table> VIRTUAL PRIVATE NETWORKING ISAKMP <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">Protocol </td><td colspan="1" rowspan="1">Port </td><td colspan="1" rowspan="1">Description </td></tr><tr><td colspan="1" rowspan="1">17 (UDP) </td><td colspan="1" rowspan="1">500</td><td colspan="1" rowspan="1">ISAKMP (Internet Security Association and Key Management Protocol) is a protocol defined by RFC 2408 for establishing Security Associations (SA) and cryptographic keys in an Internet environment </td></tr></tbody></table> IPSEC <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">Protocol </td><td colspan="1" rowspan="1">Port </td><td colspan="1" rowspan="1">Description </td></tr><tr><td colspan="1" rowspan="1">17 (UDP) </td><td colspan="1" rowspan="1">4500</td><td colspan="1" rowspan="1">NAT-T (NAT traversal in the IKE) defined by RFC 3947 is a method of enabling IPsec protected IP datagrams to pass through Network Address Translation (NAT) </td></tr><tr><td colspan="1" rowspan="1">50 (ESP) </td><td colspan="1" rowspan="1">N/A </td><td colspan="1" rowspan="1">ESP (Encapsulating Security Payload) is a member of the IPsec protocol suite that provides origin authenticity, integrity, and confidentiality protection of IP packets </td></tr><tr><td colspan="1" rowspan="1">51 (AH) </td><td colspan="1" rowspan="1">N/A </td><td colspan="1" rowspan="1">AH (Authentication Header) is a member of the IPsec protocol suite that guarantees connectionless integrity and data origin authentication of IP packets</td></tr></tbody></table> WIRELESS INTRUSION PROTECTION WIPS <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1">Protocol </td><td colspan="1" rowspan="1">Port </td><td colspan="1" rowspan="1">Description </td></tr><tr><td colspan="1" rowspan="1">6 (TCP) </td><td colspan="1" rowspan="1">443</td><td colspan="1" rowspan="1">Default HTTPS port used by Access Points with sensor radios to forward WIPS information to an ADSP appliance </td></tr><tr><td colspan="1" rowspan="1">6 (TCP) </td><td colspan="1" rowspan="1">8443</td><td colspan="1" rowspan="1">Default HTTPS port used by Access Points with sensor radios to forward WIPS information to Wireless Controllers running Advanced WIPS</td></tr></tbody></table>

What ports and protocols are used by Brocade Mobility devices for communication between APs and controllers?

2017-12-12T14:27:28-0800 2017-12-12T18:14:58-0800 https://support.ruckuswireless.com/articles/000007202 2017-12-12T14:27:28-0800 monthly 0.8 admin,premium knowledge_article_3062 knowledge_article_3062 2017-12-12T14:27:28-0800 000007202 Validated (External) Premium Mobility access points Configuration Configuration, Mobility Access Points How to configure AP650 as a standalone sensor for WIPS in WiNG 5.x? AP650 WiNG 5.X Default Configuration An AP650 Access Point running WiNG 5.X firmware includes the following factory default configuration: 1. No regulatory, regional, or contact information 2. A default username admin and password admin123 3. The SSHv2 remote management interface is enabled 4. Will obtain IP addressing from DHCP on VLAN 1 5. Radios are configured for client services Login to the AP650 1. Using a SSH terminal emulation tool such as PuTTy, connect to the IP address assigned to the AP650 from the DHCP server. 2. Log in using the default username/password: log in as: admin admin@000.000.00.000's password: admin123 Note: The latest WiNG 5.X firmware requires you to change the default password when you initially connect to the AP650 Access Point. 3. When prompted, enter a new password. Welcome to CLI System is currently using the factory default login credentials. Please change the default password to protect from unauthorized access. Enter new password: brocade Confirm new password: brocade Password for user 'admin' changed successfully. Please write this password change to memory (write memory) to be persistent. ap650-31142D> Basic Configuration Procedure (All Deployments): 1. Type enable then press <Enter> ap650-31142D> enable ap650-31142D# 2. Type self then press <Enter> ap650-31142D# self Enter configuration commands, one per line. End with CNTL/Z. ap650-31142D(config-device-00-23-68-31-14-2D)# Note: By default the AP650 Access Point will not remember its startup configuration and requires a Wireless Controller. The following command will configure the AP650 to save and remember its startup configuration. 3. Type automatic-write then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# automatic-write 4. Optionally, type hostname followed by the assigned hostname, then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# hostname <hostname> 5. Optionally, type contact followed by a contact name/email address, then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# contact admin@example.com 6. Optionally, type location followed by a location name, then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# location 1st-floor-lobby Note: You can display the list of available ISO country codes by issuing the show wireless regulatory country-code command. 7. Type country-code <country-code> then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# country-code us Note(s): <ul><li>The AP650 Access Point can support up to three sensor server IP addresses. At least one sensor server IP address must be defined.</li><li>By default, the AP650 will communicate to the sensor servers using TCP port 443. This port can be changed if required by using the sensor-server <1-3> ip <ip-address> port <port> command.</li></ul> 8. Type sensor-server <1-3> ip <server-ip> then press <Enter>. This command allows users to define primary, secondary, and tertiary sensor server IP address on the AP650 Access Point. ap650-31142D(config-device-00-23-68-31-14-2D)# sensor-server 1 ip 000.000.00.00 ap650-31142D(config-device-00-23-68-31-14-2D)# sensor-server 2 ip 000.000.00.00 ap650-31142D(config-device-00-23-68-31-14-2D)# sensor-server 3 ip 000.000.00.00 9. Type interface radio 1 then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# interface radio 1 ap650-31142D(config-device-00-23-68-31-14-2D-if-radio1)# 10. Type rf-mode sensor then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D-if-radio1)# rf-mode sensor 11. Type interface radio 2 then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D-if-radio1)# interface radio 2 12. Type rf-mode sensor then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D-if-radio2)# rf-mode sensor 13. Type end then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D-if-radio2)# end ap650-31142D# 14. Type commit write then press <Enter>. This will commit and save the changes on the AP650 Access Point. ap650-31142D# commit write Co-Existence with Wireless Controllers running WiNG 4.X Note: By default the AP650 Access Point will automatically downgrade its firmware if it discovers and adapts to a Wireless Controller running WiNG 4.X. The following procedure will disable automatic downgrades and allow the AP650 to co-exist on a network with Wireless Controllers running WiNG 4.X firmware. 1. Type enable then press <Enter> ap650-31142D> enable ap650-31142D# 2. Type self then press <Enter> ap650-31142D# self Enter configuration commands, one per line. End with CNTL/Z. ap650-31142D(config-device-00-23-68-31-14-2D)# 3. Type no-legacy-auto-downgrade then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# no-legacy-auto-downgrade 4. Type end then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# end ap650-31142D# 5. Type commit write then press <Enter>. This will commit and save the changes on the AP650 Access Point. ap650-31142D# commit write Configuring Static IP Addressing Note: By default the AP650 Access Point will automatically obtain an IP address, default gateway, and DNS option on VLAN 1 using DHCP. The following procedure outlines how to configure an AP650 Access Point with a static IP address, default gateway, name server, and domain name. 1. Type enable then press <Enter> ap650-31142D> enable ap650-31142D# 2. Type self then press <Enter> ap650-31142D# self Enter configuration commands, one per line. End with CNTL/Z. ap650-31142D(config-device-00-23-68-31-14-2D)# 3. Type interface vlan 1 then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# interface vlan 1 4. Type ip address <ip-address>/<mask-length> then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D-if-vlan1)# ip address 000.000.0.0100/01 5. Type exit then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D-if-vlan1)# exit ap650-31142D(config-device-00-23-68-31-14-2D)# 6. Type ip default-gateway <gateway-ip-address> then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# ip default-gateway 000.000.0.0 7. Optionally type ip name-server <ip-address> then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# ip name-server 000.000.0.0 8. Optionally type ip domain-name <domain-name> then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# ip domain-name example.com 9. Type end then press <Enter> ap650-31142D(config-device-00-23-68-31-14-2D)# end ap650-31142D# 10. Type commit write then press <Enter>. This will commit and save the changes on the AP650 Access Point. ap650-31142D# commit write Note: Static IP addressing can be removed by issuing a remove-override interface vlan 1 command. Verification 1. Verify the AP650 radios are configured for sensor operation. The STATE field for the radios should display as Sensor. ap650-1# show wireless radio ------------------------------------------------------------------------- AP-NAME AP-LOCATION AP-MAC :Rn RF-MODE STATE CHANNEL POWER CLIENTS ------------------------------------------------------------------------- ap650-1 default 00-23-68-31-14-2D:R1 sensor Sensor N/A ( smt) 0 (smt) 0 ap650-1 default 00-23-68-31-14-2D:R2 sensor Sensor N/A ( smt) 0 (smt) 0 -------------------------------------------------------------------------- 2. Verify that the AP650 is communicating with the sensor-server. The STATUS field for the first available sensor server should display as connected. ap650-31142D# show wireless sensor-server ----------------------------------------------------------------------------- # SENSOR SERVER IP PORT STATUS ----------------------------------------------------------------------------- 1 192.168.10.35 443 connected 2 192.168.10.36 443 not connected 3 192.168.10.37 443 not connected -----------------------------------------------------------------------------

How to configure AP650 as a standalone sensor for WIPS in WiNG 5.x?

2017-12-12T14:27:28-0800 2017-12-12T18:14:57-0800 https://support.ruckuswireless.com/articles/000007211 2017-12-12T14:27:30-0800 monthly 0.8 admin,premium knowledge_article_3057 knowledge_article_3057 2017-12-12T14:27:30-0800 000007211 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches Brocade Campus VLAN ROUTING WITH ROUTER-INTERFACE YouTube video: <a href="https://www.youtube.com/watch?v=Q2cGVHsBqd0&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=Q2cGVHsBqd0&feature=youtu.be</a> For further information, please watch this video on our Brocade Community Board: VLAN Routing with Router Interfaces: <a href="https://community.brocade.com/t5/Ethernet-Switches-Routers/VLAN-Routing-with-Router-Interfaces/ta-p/87189" style="color: rgb(51, 52, 53);" target="_blank">https://community.brocade.com/t5/Ethernet-Switches-Routers/VLAN-Routing-with-Router-Interfaces/ta-p/87189</a>

BROCADE CAMPUS FEATURE EXPLAINER SERIES:

2017-12-12T14:27:30-0800 2017-12-12T18:14:49-0800 https://support.ruckuswireless.com/articles/000007340 2017-12-12T14:27:32-0800 monthly 0.8 admin,premium knowledge_article_3054 knowledge_article_3054 2017-12-12T14:27:32-0800 000007340 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to define the Console idle time <div id="GUID-63D34F40-4CCF-4DE8-AD76-BBA466E15201__GUID-4B1F4F5C-F369-4E47-A12C-0F4164B7A2C4">To configure the idle time for a serial console session, use the following command:</div> <div id="GUID-63D34F40-4CCF-4DE8-AD76-BBA466E15201__GUID-86918D3D-1AFC-42CA-A4D2-7E515CD389B5">device(config)# console timeout 120 </div> <div id="GUID-63D34F40-4CCF-4DE8-AD76-BBA466E15201__GUID-F47F06D4-ACBB-47D9-9324-D7C1DBA0A218">Syntax: [no] console timeout [ 0-240 ]</div> <div id="GUID-63D34F40-4CCF-4DE8-AD76-BBA466E15201__GUID-974B4D55-C85A-4FF4-9FF7-201D38C6CF33">Possible values: 0 - 240 minutes</div> <div id="GUID-63D34F40-4CCF-4DE8-AD76-BBA466E15201__GUID-E2E6E113-7F0D-482C-98EF-942E672F2A28">Default value: 0 minutes (no timeout) Notes:</div> -By default, a Brocade device does not time out serial console sessions. -A serial session remains open indefinitely until you close it. You can define how many minutes a serial management session can remain idle before it is timed out. -You must enable AAA support for console commands, AAA authentication, and EXEC authorization to set the console idle time. -In RADIUS, the standard attribute Idle-Timeout is used to define the console session timeout value. The attribute Idle-Timeout value is specified in seconds. Within the switch, the idle-Timeout value is truncated to the nearest minute, because the switch configuration is defined in minutes. -You can also configure the console timeout (in minutes) on all stack units (including the Active Controller).

How to define the Console idle time

2017-12-12T14:27:32-0800 2017-12-12T18:14:45-0800 https://support.ruckuswireless.com/articles/000007336 2017-12-12T14:27:32-0800 monthly 0.8 admin,premium knowledge_article_3053 knowledge_article_3053 2017-12-12T14:27:32-0800 000007336 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How MCT interacts with ACLs ACL's on MCT <ul><li>Ingress ACLs can be applied on all MCT ports.</li><li>Egress ACLs are supported only on MCT CEPs or ICL ports.</li><li>Egress ACLs are not supported on MCT CCEPs.</li><li>IPv4 ACLs and rate limits. If the rules are applied on the CCEPs, the same rules must be applied to the CCEP ports on both cluster devices.</li></ul>

How MCT interacts with ACLs

2017-12-12T14:27:32-0800 2017-12-12T18:14:43-0800 https://support.ruckuswireless.com/articles/000006635 2017-12-12T14:34:05-0800 monthly 0.8 admin,premium knowledge_article_3047 knowledge_article_3047 2017-12-12T14:34:05-0800 000006635 Validated (External) Premium Brocade eos products System network management System Network Management, Brocade EOS Products How far back does the master log display? The master log will display the most current 5000 logs from the management server and devices and up to a maximum time frame for event logs configured on your Network Advisor server. For example, networks that are not very busy and fewer events logged, the master log may span over several days where as busier networks with more events logged, the master log may span over several hours. ---------- Note: For historical logs not displayed in the master log, please use the Network Advisor reporting function. ----------

The Brocade Network Advisor (BNA) master log displays the most recent management server and device log entries, but exactly how many or how far back does it go? This article will help to answer our question.

2017-12-12T14:34:05-0800 2017-12-12T18:14:34-0800 https://support.ruckuswireless.com/articles/000006582 2017-12-12T14:34:05-0800 monthly 0.8 admin,premium knowledge_article_3045 knowledge_article_3045 2017-12-12T14:34:05-0800 000006582 Validated (External) Premium Brocade eos products Troubleshooting Troubleshooting, Brocade EOS Products What information to gather for RSTP / 802-1w loop issues? #1. On effected Switches Gather the below for the current state: page sh cpu sh arp sh mac sh default values sh ip route "If Applicable" sh ip pim resource "If Applicable" sh ip multicast resource "If Applicable" skip sh arp resource sh ip traffic de de de sh stat clear stat sh stat sh stat sh stat sh mac stat sh mac stat sh mac stat sh int | inc line| util sh int | inc line| util sh int | inc line| util sh 802-1w sh int brief sh 802-1w detail vlan 'X' sh log sh tech debug 802.1w messages VLAN "X" #2. Set Up Mirror Port for suspected port and get get a pcap #3. Enabled port that is suspected of causing the loop and re-run the below: debug 802.1w messages VLAN "X" page sh cpu sh arp sh mac sh default values sh ip route "If Applicable" sh ip pim resource "If Applicable" sh ip multicast resource "If Applicable" skip sh arp resource sh ip traffic de de de sh stat clear stat sh stat sh stat sh stat sh mac stat sh mac stat sh mac stat sh int | inc line| util sh int | inc line| util sh int | inc line| util sh 802-1w sh int brief sh 802-1w detail vlan 'X' sh log sh tech

Lists of SHOW output.

2017-12-12T14:34:05-0800 2017-12-12T18:14:31-0800 https://support.ruckuswireless.com/articles/000006583 2017-12-12T14:34:05-0800 monthly 0.8 admin,premium knowledge_article_3043 knowledge_article_3043 2017-12-12T14:34:05-0800 000006583 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches System network management System Network Management, ICX 7250, ICX 7450, ICX 7750 What is SNMP, and what are the recommendations for its deployment in a K-12 network? <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div">Recommendations for K-12 SNMP Deployment SNMPv2c is deployed in the K-12 network. The required configuration follows: Configuring SNMP on ICX Switches for Brocade Network Advisor Accessibility ! SNMPv2c Configuration: ! Restrict which SNMP host can access the switch; multiple SNMP hosts can be configured. DO-DIST-301(config)# snmp-client 172.25.10.161 ! Configure the SNMP community. DO-DIST-301(config)# snmp-server community private rw ! Configure the SNMP trap receiver. DO-DIST-301(config)# snmp-server host 172.25.10.161 version v2c ! By default, SNMP traps are enabled. If a trap is disabled, the admin can re-enable it (e.g., an OSPF trap). DO-DIST-301(config)# snmp-server enable traps ospf ! Show command to verify the enabled SNMP traps. DO-DIST-301# show snmp server Status: Enabled Contact: Location: Community (ro): public Community (rw): brocade, private Max Ifindex per module: 64 Traps Cold start: Enable Link up: Enable Link down: Enable Authentication: Enable Power supply failure: Enable Fan failure: Enable Fan speed change: Enable Module inserted: Enable Module removed: Enable Redundant module state change: Enable Temperature warning: Enable STP new root: Enable STP topology change: Enable MAC notification: Enable MAC-AUTH notification: Enable OSPF: Enable BGP: Enable ISIS: Enable VRRP: Enable VSRP: Enable MRP: Enable UDLD: Enable VRF: Enable link-oam: Enable cfm: Enable Total Trap-Receiver Entries: 2 Trap-Receiver IP-Address Version Port-Number Comm-or-Security 1 10.20.33.161 v2c 162 $U1U9ciFvbg== 2 172.25.10.161 v2c 162 $U2kyXj1k </div>

Simple Network Management Protocol.

2017-12-12T14:34:05-0800 2017-12-12T18:14:28-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvqtCAC?attachment_index=0 2017-12-12T18:14:28-0800 monthly admin,premium knowledge_article_3043 knowledge_article_3043_attachment_1 ka25B000000CdGlQAK_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000006642 2017-12-12T14:34:07-0800 monthly 0.8 admin,premium knowledge_article_3039 knowledge_article_3039 2017-12-12T14:34:07-0800 000006642 Validated (External) Premium Brocade eos products System network management System Network Management, Brocade EOS Products What is hitless management on the FSX 800 and FSX 1600? Hitless management on the FSX 800 and FSX 1600 Hitless management is supported on the FSX 800 and FSX 1600 chassis with dual management modules. It is a high-availability feature set that ensures no loss of data traffic during the following events: ? Management module failure or role change ? Software failure ? Addition or removal of modules ? Operating system upgrade During such events, the standby management module takes over the active role and the system continues to forward traffic seamlessly, as if no failure or topology change has occurred. In software releases that do not support hitless management, events such as these could cause a system reboot, resulting in an impact to data traffic. The following Hitless management features are supported: *Hitless Switchover - A manually controlled (CLI-driven) switchover of the active and standby management modules without any packet loss to the services and protocols that are supported by Hitless management. A switchover is activated by the CLI command switchover-active-role *Hitless Failover - An automatic, forced switchover of the active and standby management modules because of a failure or abnormal termination of the active management module. In the event of a failover, the active management module abruptly leaves and the standby management module immediately assumes the active role. Like a switchover, a failover occurs without any packet loss to hitless-supported services and protocols. Unlike a switchover, a failover generally happens without warning. *Hitless Operating System (OS) Upgrade - An operating system upgrade and controlled switchover without any packet loss to the services and protocols that are supported by Hitless management. The services and protocols supported by Hitless management are listed in this section. Hitless failover and hitless switchover are disabled by default. Benefits of hitless management The benefits of Hitless management include the following: ? The standby management module (the module that takes over the active role) and all interface modules in the chassis are not reset. ? Existing data traffic flows continue uninterrupted with no traffic loss. ? Port link states remain UP for the duration of the hitless management event. ? System configurations applied through Console/SNMP/HTTP interfaces remain intact. ? Hitless switchover can be used by a system administrator, for example, to perform maintenance on a management module that has been functioning as the active management module. Some advantages of a hitless switchover over a hitless software reload are: – A manual switchover is quicker, since the standby module does not have to reboot. – Switched traffic through the Ethernet interfaces on the standby management module is not interrupted. ---------- Note: All traffic going through Ethernet interfaces (if present) on the management modules will be interrupted during a hitless OS upgrade. This is because both management modules must be reloaded with the new image. This applies to hitless OS upgrade only. It does not apply to hitless switchover or failover, which does not interrupt traffic going through Ethernet interfaces on the standby management module (the module that takes over the active role). ---------- Hitless management configuration notes and feature limitations The following limitations apply to hitless management support. ? All traffic going through Ethernet interfaces (if present) on the management modules will be interrupted during a hitless OS upgrade. This is because both management modules must be reloaded with the new image. This applies to hitless OS upgrade only. It does not apply to hitless switchover or failover, which does not interrupt traffic going through Ethernet interfaces on the standby management module (the module that takes over the active role). ? Static and dynamic multi-slot trunks will flap during a hitless switchover if any of the trunk port members reside on the management module. ? Layer 3 multicast traffic is not supported by Hitless management. Hitless reload or switchover requirements and limitations. The section describes the design limitation on devices with the following configuration: * 0-port management modules * One or more third generation line cards For hitless reload or switch-over-active-role to succeed, the following requirements and limitations must be met: ? Hitless reload is not allowed from Switch code when the primary image is in Router code and boot primary is a part of the configuration. ? The standby management module must be up and in an "OK {Enabled}" state. ? A configuration requiring a reload must not be pending. ? A hitless-reload must not have already been issued on the previous active management module. ? POE firmware must not be in progress. ? The SXR running configuration must not be classified as too large (greater than 512KB). ? A TFTP session must not be in progress. An image sync session must not be in progress. ? The current active management card cannot have a memory utilization of greater than 90% of available memory. ? A line card hotswap must not be in progress. If any of these conditions are not met, an appropriate error message is printed to the console and hitless-reload or switch-over will not succeed. With following steps, after switchover, the new standby goes into continuous reload state: 1. SXL box is running with build "x" 2. Perform copy tftp of build "x+1" and wait for both active and standby to sync. 3. Execute switch-over-active-role. With above step, the new active comes up but the new standby tries to load the primary image "x+1" and due to this there is image sync issue and new standby goes to continuous reload state without recovery. Hence, it is a limitation that after copy tftp operation to primary, switch-over-active-role operation should be avoided. What happens during a Hitless switchover or failover This section describes the internal events that enable a controlled or forced switchover (failover) to take place in a hitless manner, as well as the events that occur during the switchover. Enabling hitless failover on the FSX 800 and FSX 1600 Hitless failover is disabled by default. When disabled, the following limitations are in effect: ? If a failover occurs, the system will reload. The following message will display on the console prior to a reload. STBY:- - - - Active Hitless Failover is disabled. Re-setting the system - - ? Manual switchover (CLI command switch-over-active-role ) is not allowed. If this command is entered, the following message will display on the console: Switch-over is not allowed. Reason: hitless-failover not configured. ---------- Note: Hitless OS upgrade is not impacted by this option and is supported whether or not hitless failover is enabled. ---------- Note: Synchronization between the active management module and standby management module will occur whether or not hitless failover is enabled. ---------- To enable hitless failover, enter the following command at the Global CONFIG level of the CLI: device(config)# hitless-failover enable The command takes effect immediately. Manual switchover is allowed, and in the event of a failover, the standby management module will take over the active role without reloading the system. Syntax: [no] hitless-failoverenable Use the no form of the command to disable hitless failover once it has been enabled Executing a hitless switchover on the FSX 800 and FSX 1600 Hitless failover must be enabled before a hitless switchover can be executed. To switch over to the standby module (and thus make it the active module), enter the following command. device# switch-over-active-role Once you enter this command, the system will prompt you as follows. Are you sure? (enter ’y’ or ’n’): y Running Config data has been changed. Do you want to continue the switch-over without saving the running config? (enter ’y’ or ’n’): n Please save the running config and try switch-over again Syntax: switch-over-activerole If this command is entered when hitless failover is disabled, the following message will appear on the console: Switch-over is not allowed. Reason: hitless-failover not configured. A management slot which is in active management preference will always attempt to be active on the next reboot. To reset the preference, enter the command such as the following: Brocade(config)# set-active-mgmt mgmt0/mgmt1 Syntax: set-active-management management slot numbers ---------- Note: The default active management preference is set to mgmt0 (slot 9). ----------

Hitless management feature/service on the FSX 800 and FSX 1600.

2017-12-12T14:34:07-0800 2017-12-12T18:14:22-0800 https://support.ruckuswireless.com/articles/000006712 2017-12-12T14:34:09-0800 monthly 0.8 admin,premium knowledge_article_3038 knowledge_article_3038 2017-12-12T14:34:09-0800 000006712 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What are the requirements for hitless switchover? The following must be in effect before a hitless switchover (to the standby controller) is allowed: Hitless stacking is enabled. The stack has a standby controller. The standby controller has learned the protocols. The standby controller has the same priority as the active controller. More than 120 seconds have passed since the previous switchover or failover.

What are the requirements for hitless switchover?

2017-12-12T14:34:09-0800 2017-12-12T18:14:21-0800 https://support.ruckuswireless.com/articles/000006714 2017-12-12T14:34:09-0800 monthly 0.8 admin,premium knowledge_article_3036 knowledge_article_3036 2017-12-12T14:34:09-0800 000006714 Validated (External) Premium Fastiron ws series;Fastiron cx series;Turboiron 24x switch;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration Configuration, FastIron WS Series, FastIron CX Series, TurboIron 24X Switch How to configure per-user IP ACLs filters in dot1x with FreeRadiusBrocade? The below describes the configuration of FreeRADIUS to configure per-user IP ACLs filters. For a basic installation, three files must be edited: /etc/radd/clients.conf, /etc/raddb/users and /usr/share/freeradius/dictionary.foundry. freeRADIUS version 2.1.7 in UNIX /etc/raddb/clients.conf The /etc/raddb/clients.conf filespecifies the list of clients that will be accessing the FreeRADIUS server. The list includes the IP addresses and the secret key for each client. In addition, the file contains a list of all the RADIUS clients that can query the FreeRADIUS server for AAA requests. The format for adding each RADIUS client is as follows: <code style="color: black; font-size: 13px;"># CLIENT CONFIG BEGINS client hostname-or-IP-address { secret = encryption-key shortname = hostname } # CLIENT CONFIG ENDS</code> Users can specify the client either by host name or IP address. The encryption key for specifying the secret value should match the specified password for the RADIUS Client on the Brocade switch. The shortname parameter is used to specify an alias for the host. The default /etc/raddb/clients.conf file only contains one entry for the localhost. Each additional client should be appended to the default file. Optionally, users can also specify a network address instead of a single client. The following sample snippet can be appended to the default /etc/raddb/ clients.conf file: ---------- Note: In the following example, assume that the radius client (Brocade switch) should belong to the subnet 101.101.10.0/24 network and radius client password is 'secret' which must match the configured one by CLI 'radius-server key' on Brocade switch. ---------- <code style="color: black; font-size: 13px;">client 101.101.10.0/24 { secret = secret shortname = localhost }</code> /etc/raddb/users The /etc/raddb/users file specifies the list of users, accompanied by the authentication and authorization parameters for each user. The /etc/raddb/users file is a master file that references other dictionary files by using the following statement:. (For 8021x with Per-user IP ACL) ---------- Note: In the following example, the user "bob" has "test" set as the password. Multiple ACLs can be configured with a space, newline, semicolon, comma, or null characater. ---------- <code style="color: black; font-size: 13px;">bob Auth-Type :=EAP, Cleartext-Password:="test" Foundry-Access-List="ipacl.e.in=permit udp any any;ipacl.e.in=permit tcp any host 101.101.10.100 eq http"</code> /usr/share/freeradius/dictionary.foundry The /usr/share/freeradius/dictionary.foundry file specifies the list of dictionary files for each supported vendor. The server has separate dictionary files for each supported vendor that contain RADIUS attributes and values. Below are attributes related to dot1x: <code style="color: black; font-size: 13px;">ATTRIBUTE Foundry-Access-List 5 string ATTRIBUTE Foundry-MAC-Authent-needs-802.1x 6 integer ATTRIBUTE Foundry-802.1x-Valid-Lookup 7 integer</code>= <code style="color: black; font-size: 13px;">VALUE Foundry-Command-Exception-Flag Permit-Cmd-Str/Deny-Others 0 VALUE Foundry-Command-Exception-Flag Deny-Cmd-Str/Permit-Others 1 VALUE Foundry-MAC-Authent-Needs-802.1x Disable 0 VALUE Foundry-MAC-Authent-Needs-802.1x Enable 1 VALUE Foundry-802.1x-Valid-Lookup Disable 0 VALUE Foundry-802.1x-Valid-Lookup Enable 1</code> If users do not have the above statements in the dictionary.foundry file, the user may add the above statements. After the above is edited, users need to restart the RADIUS server. Below is a configuration example for dot1x on FCX: <code style="color: black; font-size: 13px;">FCX624SHPOE Switch# sh run Current configuration: ! ver 07.2.02dT7f1 ! stack unit 1 module 1 fcx-24-poe-port-management-module module 2 fcx-cx4-2-port-16g-module ! ! vlan 1 name DEFAULT-VLAN by port ! ! dot1x-enable </code><-- To enable the 802.1x on the device <code style="color: black; font-size: 13px;"> enable ethe 1/1/1 to 1/1/2 </code><-- In this example, this enables 802.1X port security on interfaces 1/1/1 and 1/1/2 <code style="color: black; font-size: 13px;">! ! aaa authentication dot1x default radius </code><-- To use RADIUS authentication with 802.1X port security <code style="color: black; font-size: 13px;">ip address 101.101.10.1 255.255.255.0 no ip dhcp-client enable logging console radius-server host 101.101.10.100 auth-port 1812 acct-port 1813 default key secret </code><-- To authenticate access to a Brocade switch <code style="color: black; font-size: 13px;">interface ethernet 1/1/1 dot1x port-control auto </code><-- To activate authentication on an 802.1X-enabled interface and connect a client enabled 802.1x. <code style="color: black; font-size: 13px;">! interface ethernet 1/1/2 dot1x port-control auto ! end FCX624SHPOE Switch#</code> Diagram: Client enabled 802.1x ---------------- e1/1/1 FCX e1/1/24 ----------- Radius server --------- Note: Make sure that FCX has IP connectivity to the Radius server. Users may do a ping command. --------- Show Commands: Once the client is authenticated, check the following commands: ---------- Note: The show dot1x mac-session command displays information about the dot1x-mac-sessions on each port on the device. The output also shows the authenticator PAE state. ---------- <code style="color: black; font-size: 13px;">FCX624SHPOE Switch# sh dot1 mac-s Port MAC/IP(username) Vlan Auth ACL Age PAE State State ----------------------------------------------------------------------------- 1/1/1 000d.600f.c6b3 :bob 1 permit in Ena AUTHENTICATED FCX624SHPOE Switch#</code> Auth State = 'permit' means that the Client has been successfully authenticated, and traffic from the Client is being forwarded normally. PAE State means that the current status of the Authenticator PAE state machine. The 'AUTHENTICATED' means PAE is in a authenticated state. The <code style="color: black; font-size: 13px;">client 000d.600f.c6b3 : bob</code> is now able to forward and receive a traffic. To display the dynamically applied IP ACLs active on an interface, enter the following command: ---------- Note: In this example, two ACL clauses are set to a port 1/1/1 as Inbound ACL for the user, bob, which is corresponding to ACLs in the Radius server. ----------- <code style="color: black; font-size: 13px;">FCX624SHPOE Switch# sh dot1 ip-acl Port : 1/1/1 (301), user : bob( 000d.600f.c6b3 ) (192.168.10.142): Extended IP access list Port_1/1/1_bob_E_IN permit udp any any permit tcp any host 101.101.10.100 eq http FCX624SHPOE Switch#</code>

How to configure per-user IP ACLs filters in dot1x with FreeRadiusBrocade?

2017-12-12T14:34:09-0800 2017-12-12T18:14:18-0800 https://support.ruckuswireless.com/articles/000006705 2017-12-12T14:34:09-0800 monthly 0.8 admin,premium knowledge_article_3035 knowledge_article_3035 2017-12-12T14:34:09-0800 000006705 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Is the Captive Portal Supported? Captive Portal is supported by Brocade but not in all the version, please find below the versions supported: FI 8.0.30:

Is the Captive Portal Supported?

2017-12-12T14:34:09-0800 2017-12-12T18:14:16-0800 https://support.ruckuswireless.com/articles/000006713 2017-12-12T14:34:09-0800 monthly 0.8 admin,premium knowledge_article_3034 knowledge_article_3034 2017-12-12T14:34:09-0800 000006713 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches Configuration Configuration, FastIron CX Series How do you use SCP instead of TFTP to upgrade code over distance to prevent bricking the unit? Use SCP instead of TFTP to upgrade code over distance TFTP upgrade should only be used when TFTP server is local on the LAN. A. Load the boot code using SCP 1. Place the new boot code on an SCP-enabled host to which the Brocade device has access. 2. For non-FCX FastIron devices and for FCX devices running code version 08.0.01x and later, enter the following command to copy the boot code from the SCP-enabled host into flash memory: Example: <code>C:> pscp grz10100.bin terry@10.168.1.50:flash:bootrom</code> 3. For FCX devices running code version 07.x.x, flash bootrom copy using SCP is not supported. In order to copy bootrom code using SCP, use the following command string: Example: <code>C:> pscp grz07302.bin terry@10.168.1.50:file:bootrom.sig</code> 4. Verify that the code has been successfully copied onto the device by using the show flash command at any level of the CLI. The output will display the compressed boot ROM code size and the boot code version. <code>FastIron#show flash Stack unit 1: Compressed Pri Code size = 5696633, Version:07.4.00bT7f1 (FCXS07400b.bin) Compressed Sec Code size = 5696633, Version:07.4.00bT7f1 (FCXS07400b.bin) Compressed Boot-Monitor Image size = 370555, Version:07.3.02T7f5 Code Flash Free Space = 53477376</code> B. Load the FastIron image / operating system using SCP 1. Place the new operating system on an SCP-enabled host to which the Brocade device has access. 2. Refer to release notes for the image you are attempting to load for possible limitations on flash storage. 3. Enter the following command to copy the flash code from the SCP-enabled host into flash memory. For example: <code>C:> scp FCXR08000.bin terry@10.168.1.50:flash:primary</code> or <code>C:> scp FCXR08000.bin terry@10.168.1.50:flash:pri:FCXR08000.bin</code> or <code>C:> scp FCXR08000.bin terry@10.168.1.50:flash:secondary</code> or <code>C:> scp FCXR08000.bin terry@10.168.1.50:flash:sec:FCXR08000.bin</code> 4. Verify that the flash code has been successfully copied onto the device by using the show flash at any level of the CLI. 5. Reboot the device using the reload or boot system command. 6. Verify that the new flash image is running on the device by using the show version command. ---------- Note: Refer to software upgrade guides for most current information. ---------- Also on ICX 6430 and ICX 6450 devices, you can use the same syntax as FCX devices. However, after the copy operation is completed at the host, you do not get the command prompt back because the device is synchronizing the image to flash. To ensure that you have successfully copied the file, issue the show flash command. If the copy operation is not complete, the show flash command output will show the partition (primary or secondary) as EMPTY.

How do you use SCP instead of TFTP to upgrade code over distance to prevent bricking the unit?

2017-12-12T14:34:09-0800 2017-12-12T18:14:15-0800 https://support.ruckuswireless.com/articles/000006706 2017-12-12T14:34:09-0800 monthly 0.8 admin,premium knowledge_article_3033 knowledge_article_3033 2017-12-12T14:34:09-0800 000006706 Validated (External) Premium Icx 7150;Icx 7250;Icx 7450;Icx 7750;RUCKUS ICX 7150 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ICX 7150, ICX 7250, ICX 7450, ICX 7750 Why do we see this Error message after upgrade - Optics <-> Speed mismatch, replace with SFP optic? This is now expected behavior from FI 8.0.30j. This restriction is only for ICX7xxx series not for ICX6xxx series.

After upgrade to 8.0.30k and reboot started seeing error message via console

2017-12-12T14:34:09-0800 2017-12-12T18:14:13-0800 https://support.ruckuswireless.com/articles/000006744 2017-12-12T14:34:11-0800 monthly 0.8 admin,premium knowledge_article_3029 knowledge_article_3029 2017-12-12T14:34:11-0800 000006744 Validated (External) Premium Fastiron cx series;Turboiron 24x switch;Brocade FastIron CX Series Switches Configuration;Troubleshooting Configuration, Troubleshooting, FastIron CX Series, TurboIron 24X Switch Why is spanning tree loop present between Brocade and Cisco? The default vlan id (also called native vlan) is 1 on both Brocade and Cisco. <code>Brocade=e 1/1/1 & e 1/1/2=============e 0/7 & e 0/8=Cisco</code> Cisco Configuration: <code>spanning-tree mode rapid-pvst spanning-tree extend system-id</code> <code>interface GigabitEthernet0/7 switchport trunk encapsulation dot1q switchport trunk native vlan 10 <</code>-- Note: Default vlan changed to 10 on Cisco <code> switchport trunk allowed vlan 10,11 switchport mode trunk ! interface GigabitEthernet0/8 switchport trunk encapsulation dot1q switchport trunk native vlan 10 <</code>-- Note: Default vlan changed to 10 on Cisco <code> switchport trunk allowed vlan 10,11 switchport mode trunk</code> Configuration on FCX: <code>No config</code> ---------- Note: This means default vlan id is 1 on FCX. ---------- Cisco will send PVST packets and Brocade will send IEEE 802.1d packets. Both Cisco and Brocade will put all ports in forwarding causing stp loop. From Cisco: <code>Cisco-2# <code>show span</code> VLAN0010 Spanning tree enabled protocol rstp Root ID Priority 32778 Address 0015.f97b.cd80 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec</code> <code> Bridge ID Priority 32778 (priority 32768 sys-id-ext 10) Address 0015.f97b.cd80 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300</code> <code>Interface Role Sts Cost Prio.Nbr Type ---------------- ---- --- --------- -------- -------------------------------- Gi0/7 Desg FWD 4 128.7 P2p </code><-- Forwarding <code>Gi0/8 Desg FWD 4 128.8 P2p </code><-- Forwarding From FCX: <code>FCX648SHPOE Switch# <code>show span</code> STP instance owned by VLAN 1 Global STP (IEEE 802.1D) Parameters: Root Root Root Prio Max He- Ho- Fwd Last Chg Bridge ID Cost Port rity Age llo ld dly Chang cnt Address Hex sec sec sec sec sec 800000243814c640 0 Root 8000 20 2 1 15 119 2 00243814c640 Port STP Parameters: Port Prio Path State Fwd Design Designated Designated Num rity Cost Trans Cost Root Bridge Hex 1/1/1 80 4 FORWARDING 1 0 800000243814c640 800000243814c640 </code><-- Forwarding <code>1/1/2 80 4 FORWARDING 1 0 800000243814c640 800000243814c640 </code><-- Forwarding <code>FCX648SHPOE Switch# <code>dm raw</code> Raw packet debugging is on now FCX648SHPOE Switch# RX [bc3]0015f97bcd87 ->01000ccccccd Len=50 port: 1/1/1 </code><-- PVST packets received from Cisco <code>RX [bc3]0015f97bcd88 ->01000ccccccd Len=50 port: 1/1/2 RX [bd7]0015f97bcd87 ->01000ccccccd Len=50 port: 1/1/1 RX [bd7]0015f97bcd88 ->01000ccccccd Len=50 port: 1/1/2</code> Brocade has modified code in 7202f to accommodate this issue with Cisco. Brocade switches will detect pvst packets coming from Cisco and will start sending pvst packets to Cisco in addition to IEEE 802.1D packets to prevent stp loop from happening. Cisco switch can then block their ports as "Inconsistent local vlan". On Brocade switch running 7202f code: <code>FCX648SHPOE <code>Switch# show span pvst-mode </code> PVST+ Enabled on: Port Method 1/1/1 Set by auto-detect 1/1/2 Set by auto-detect FCX648SHPOE Switch#</code> <code>RX [5cc]0015f97bcd87 ->01000ccccccd Len=50 port: 1/1/1 RX [5cc]0015f97bcd88 ->01000ccccccd Len=50 port: 1/1/2 TX [5de]00243814c640 ->01000ccccccd Len=50 port: 1/1/1 TX [5de]00243814c640 ->0180c2000000 Len=38 port: 1/1/1 TX [5de]00243814c641 ->01000ccccccd Len=50 port: 1/1/2</code> On Brocade switch with FastIron FCXS7202f code: <code>3d03h: %SPANTREE-2-RECV_PVID_ERR: Received BPDU with inconsistent peer vlan id 1 on GigabitEthernet0/7 VLAN10. 3d03h: %SPANTREE-2-BLOCK_PVID_LOCAL: Blocking GigabitEthernet0/7 on VLAN0010. Inconsistent local vlan. 3d03h: %SPANTREE-2-RECV_PVID_ERR: Received BPDU with inconsistent peer vlan id 1 on GigabitEthernet0/8 VLAN10. 3d03h: %SPANTREE-2-BLOCK_PVID_LOCAL: Blocking GigabitEthernet0/8 on VLAN0010. Inconsistent local vlan.</code> <code>Cisco-2# </code><code>show span</code> <code>VLAN0010 Spanning tree enabled protocol rstp Root ID Priority 32778 Address 0015.f97b.cd80 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec</code> <code> Bridge ID Priority 32778 (priority 32768 sys-id-ext 10) Address 0015.f97b.cd80 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300</code> <code>Interface Role Sts Cost Prio.Nbr Type ---------------- ---- --- --------- -------- -------------------------------- Gi0/7 Desg BKN*4 128.7 P2p *PVID_Inc </code><-- Cisco blocking the ports <code>Gi0/8 Desg BKN*4 128.8 P2p *PVID_Inc </code><-- Cisco blocking the ports

Why is spanning tree loop present between Brocade and Cisco?

2017-12-12T14:34:11-0800 2017-12-12T18:14:07-0800 https://support.ruckuswireless.com/articles/000006737 2017-12-12T14:34:11-0800 monthly 0.8 admin,premium knowledge_article_3026 knowledge_article_3026 2017-12-12T14:34:11-0800 000006737 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products How can we turn off the link up/down logging messages in FastIron Devices? To prevent the FastIron device from logging system messages about links coming up or down, use commands such as the following: FastIron#config ter FastIron(config)#int eth 1/1/10 FastIron(config-if-e1000-1/1/10)#no snmp enable traps link-change FastIron(config-if-e1000-1/1/10)#end FastIron# FastIron#write mem Write startup-config done. ---------- Note: For LACP, applying this command to the primary port in the LAG is sufficient for other links in the same group. ----------

How can we turn off the link up/down logging messages in FastIron Devices?

2017-12-12T14:34:11-0800 2017-12-12T18:14:03-0800 https://support.ruckuswireless.com/articles/000006735 2017-12-12T14:34:11-0800 monthly 0.8 admin,premium knowledge_article_3024 knowledge_article_3024 2017-12-12T14:34:11-0800 000006735 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches Known issues and workarounds Known Issues and Workarounds, FastIron CX Series How to recover an FCX switch after the software images have been erased from the primary and secondary flash directories? To recover from this situation the system must be booted from a tftp server. After the system has booted the software images can be copied to the flash directories in the usual manner and the system reloaded to resume normal operation. ---------- Note: When the FCX is in monitor mode the Ethernet switch ports will not be active. To use this procedure you MUST be connected to the management Ethernet port. ---------- To boot the switch from a tftp server in monitor mode you have to configure an ip address, and a default gateway if required. Here is an example showing how to do this: Monitor> Monitor>ip address 10.18.17.102 255.255.255.0 IP address = 10.18.17.102 IP subnet mask = 255.255.255.0 Monitor>ip default-gateway 10.18.17.1 IP default gateway = 10.18.17.1 Run the following command to confirm that the configuration is correct: Monitor>show ip IP address : 10.18.17.102 subnet mask : 255.255.255.0 default gateway : 10.18.17.1 After configuring the ip address make sure that you can ping the tftp server before proceeding: Monitor>ping 10.18.22.3 Reply from 10.18.22.3 : bytes=100 time=1ms TTL=64 After confirming that you are to ping the tftp server, issue the following command to boot the switch from the tftp server: Syntax: boot system tftp (ip address of tftp server) (name of software image) Example: Monitor>boot system tftp 10.18.22.3 FCXS07202f.bin After the switch has booted use the tftp copy command to copy software images to the primary or secondary directories as required to complete the recovery procedure.

How to recover an FCX switch after the software images have been erased from the primary and secondary flash directories.

2017-12-12T14:34:11-0800 2017-12-12T18:14:00-0800 https://support.ruckuswireless.com/articles/000006816 2017-12-12T14:34:13-0800 monthly 0.8 admin,premium knowledge_article_3018 knowledge_article_3018 2017-12-12T14:34:13-0800 000006816 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches Why does Native Vlan Mismatch cause blocked ports between Brocade and Cisco? Enable spanning-tree enable bpdufilter on the Cisco device. This makes the cisco switch not look at the BPDU native VLANS and does not find the VLAN mismatch. Configuration Example: Brocade: interface ethernet 1/1/24 port-name Uplink dual-mode spanning-tree 802-1w admin-pt2pt-mac pvst-mode Cisco: interface GigabitEthernet0/17 description Bobs office E26 switchport trunk encapsulation dot1q switchport trunk allowed vlan 1,200-202 switchport mode trunk storm-control broadcast level 70.50 storm-control multicast level 70.50 end spanning-tree bpdufilter enable

Native Vlan Mismatch causes blocked ports between Brocade and Cisco

2017-12-12T14:34:13-0800 2017-12-12T18:13:51-0800 https://support.ruckuswireless.com/articles/000006976 2017-12-12T14:34:15-0800 monthly 0.8 admin,premium knowledge_article_3015 knowledge_article_3015 2017-12-12T14:34:15-0800 000006976 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What is the Syslog Configuration and explanation of the service in Campus devices? Syslog About Syslog messages Brocade software can print syslog messages to provide information at the following severity levels as below: ? Emergencies ? Alerts ? Critical ? Errors ? Warnings ? Notifications ? Informational ? Debugging The device writes the messages to a local buffer. You also can specify the IP address or host name of up to six Syslog servers. When you specify a Syslog server, the Brocade device writes the messages both to the system log and to the Syslog server. Using a Syslog server ensures that the messages remain available even after a system reload. The Brocade local Syslog buffer is cleared during a system reload or reboot, but the Syslog messages sent to the Syslog server remain on the server. --------- NOTE To enable the Brocade device to retain Syslog messages after a soft reboot (reload command). --------- The Syslog service on a Syslog server receives logging messages from applications on the local host or from devices such as a Layer 2 Switch or Layer 3 Switch. Syslog adds a time stamp to each received message and directs messages to a log file. Most Unix workstations come with Syslog configured. Some third party vendor products also provide Syslog running on NT. Syslog uses UDP port 514 and each Syslog message thus is sent with destination port 514. Each Syslog message is one line with Syslog message format. The message is embedded in the text portion of the Syslog format. There are several subfields in the format. Keywords are used to identify each subfield, and commas are delimiters. The subfield order is insensitive except that the text subfield should be the last field in the message. All the subfields are optional. Displaying Syslog messages To display the Syslog messages in the device local buffer, enter the show logging command at any level of the CLI. The following shows an example display output. device>#show logging Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Buffer logging: level ACDMEINW, 3 messages logged level code: A=alert C=critical D=debugging M=emergency E=error I=informational N=notification W=warning Static Log Buffer: Dec 15 19:04:14:A:Fan 1, fan on right connector, failed Dynamic Log Buffer (50 entries): Dec 15 18:46:17:I:Interface ethernet 4, state up Dec 15 18:45:21:I:Bridge topology change, vlan 4095, interface 4, changed state to forwarding Dec 15 18:45:15:I:Warm start Enabling real-time display of Syslog messages By default, to view Syslog messages generated by a Brocade device, you need to display the Syslog buffer or the log on a Syslog server used by the Brocade device. You can enable real-time display of Syslog messages on the management console. When you enable this feature, the software displays a Syslog message on the management console when the message is generated. However, to enable display of real-time Syslog messages in Telnet or SSH sessions, you also must enable display within the individual sessions. To enable real-time display of Syslog messages, enter the following command at the global CONFIG level of the CLI. device(config)#logging console Syntax: [no] loggingconsole This command enables the real-time display of Syslog messages on the serial console. You can enter this command from the serial console or a Telnet or SSH session. Enabling real-time display for a Telnet or SSH session To also enable the real-time display for a Telnet or SSH session, enter the following command from the Privileged EXEC level of the session. telnet@device#terminal monitor Syslog trace was turned ON Syntax: terminal monitor Notice that the CLI displays a message to indicate the status change for the feature. To disable the feature in the management session, enter the terminal monitor command again. The command toggles the feature on and off. telnet@device#terminal monitor Syslog trace was turned OFF Here is an example of how the Syslog messages are displayed. telnet@device#terminal monitor Syslog trace was turned ON SYSLOG: <9>device, Power supply 2, power supply on left connector, failed SYSLOG: <14>device, Interface ethernet 6, state down SYSLOG: <14>device, Interface ethernet 2, state up

Syslog Configuration and explanation of the service in Campus devices

2017-12-12T14:34:15-0800 2017-12-12T18:13:46-0800 https://support.ruckuswireless.com/articles/000006828 2017-12-12T14:34:15-0800 monthly 0.8 admin,premium knowledge_article_3012 knowledge_article_3012 2017-12-12T14:34:15-0800 000006828 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers How to configure Etherchannel for LAG ports on RFS controller? Before starting the Etherchannel configuration, the ports to be configured should be set to 'shutdown'. The following example has sample configurations for the RFS controller side, along with both Cisco and Brocade switches. On RFS side: interface port-channel1 switchport mode trunk switchport trunk native vlan 2 switchport trunk allowed vlan 2,10-15,100-105 interface ge1 switchport mode trunk switchport trunk allowed vlan 2,10-15,100-105 channel-group 1 interface ge2 switchport mode trunk switchport trunk allowed vlan 2,10-15,100-105 channel-group 1 For Brocade Switches, refer to the Installation Guide, under the section called Configuring a Trunk Group. Example: trunk Ethernet 1/1 to ½ trunk deploy For Cisco switches: interface Port-channel1 description Portchannel#1 switchport trunk encapsulation dot1q switchport trunk native vlan 2 switchport trunk allowed vlan 2,10-15,100-105 switchport mode trunk spanning-tree portfast trunk interface GigabitEthernet2/0/11 description Port#11 - [Portchannel#1-P1] switchport trunk encapsulation dot1q switchport trunk native vlan 2 switchport trunk allowed vlan 2,10-15,100-105 switchport mode trunk channel-group 1 mode on interface GigabitEthernet2/0/12 description Port#12 - [Portchannel#1-P2] switchport trunk encapsulation dot1q switchport trunk native vlan 2 switchport trunk allowed vlan 2,10-15,100-105 switchport mode trunk channel-group 1 mode on After the configuration is complete on both ends, remove all the ports from the shutdown state to enable the Etherchannel. Make sure the configuration on both ends of the ports are exactly what is required, with no extra or redundant configuration.

How to configure Etherchannel for LAG ports on RFS controller?

2017-12-12T14:34:15-0800 2017-12-12T18:13:41-0800 https://support.ruckuswireless.com/articles/000006824 2017-12-12T14:34:15-0800 monthly 0.8 admin,premium knowledge_article_3011 knowledge_article_3011 2017-12-12T14:34:15-0800 000006824 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How to configure Radius server policy for MAC-authentication via CLI? MAC-authentication can be configured using the Radius Policy, with the client's MAC-address entered as user and password, as in the example below: Step 1 - Create Radius Group Policy for Mac-authentication (name of policy given for this example is MAC-Auth-group) rfs6000(config)# radius-group MAC-Auth-group rfs6000(config-radius-group-MAC-Auth-group)# policy vlan <vlan id> rfs6000(config-radius-group-MAC-Auth-group)# policy ssid < ssid name> Step 2 - Create Radius User Pool for given MAC-addresses to be allowed (MAC-address used in example below is D0-23-DB-60-37-72). Note the format in which the MAC-address is being entered. Name of User pool for this example is MAC-Auth-users rfs6000(config)# radius-user-pool-policy MAC-Auth-users rfs6000(config-radius-user-pool-MAC-Auth-users)# permit D0-23-DB-60-37-72 D0-23-DB-60-37-72 precedence 10 Step 3 - Apply the Radius Group Policy and Radius User Policy to the required Radius Server Policy (name of policy for this example is MAC-Auth-policy) rfs6000(config)# radius-server-policy MAC-Auth-policy rfs6000(config-radius-server-policy-MAC-Auth-policy)# use radius-user-pool-policy MAC-Auth-users rfs6000(config-radius-server-policy-MAC-Auth-policy)# use radius-group MAC-Auth-group Step 4 - At the end, make sure that the radius-server-policy is applied to the Controller profile. It can be done using CLI as below: rfs6000 # config t rfs6000(config)# self rfs6000(config-device-00-24-38-DC-87-EC)# use radius-server-policy MAC-Auth-Policy rfs6000(config-device-00-24-38-DC-87-EC)# exit rfs6000(config)# commit rfs6000(config)# wr mem Do not forget to save your work.

How to configure Radius server policy for MAC-authentication via CLI?

2017-12-12T14:34:15-0800 2017-12-12T18:13:40-0800 https://support.ruckuswireless.com/articles/000007252 2017-12-12T14:34:17-0800 monthly 0.8 admin,premium knowledge_article_3006 knowledge_article_3006 2017-12-12T14:34:17-0800 000007252 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches Brocade Campus ICX Reload Parameters YouTube video:<br style="text-align: left; color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 14px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <a href="https://www.youtube.com/watch?v=5rI_U1aswk8&feature=youtu.be" style="text-align: left; color: rgb(51, 52, 53); font-family: arial, helvetica, sans-serif; font-size: 14px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);" target="_blank">https://www.youtube.com/watch?v=5rI_U1aswk8&feature=youtu.be</a>

How to use the reload after and reload at commands?

2017-12-12T14:34:17-0800 2017-12-12T18:13:32-0800 https://support.ruckuswireless.com/articles/000007260 2017-12-12T14:34:18-0800 monthly 0.8 admin,premium knowledge_article_3005 knowledge_article_3005 2017-12-12T14:34:18-0800 000007260 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches Brocade ICX Port Loop Detection <span style="text-align: left; color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 14px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">YouTube video:<br style="text-align: left; color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 14px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <a href="https://www.youtube.com/watch?v=OmLczrAuTxY&feature=youtu.be" style="text-align: left; color: rgb(51, 52, 53); font-family: arial, helvetica, sans-serif; font-size: 14px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);" target="_blank">https://www.youtube.com/watch?v=OmLczrAuTxY&feature=youtu.be</a>

How to configure the Port Loop Detection feature, with options and various show commands.

2017-12-12T14:34:18-0800 2017-12-12T18:13:31-0800 https://support.ruckuswireless.com/articles/000007258 2017-12-12T14:34:18-0800 monthly 0.8 admin,premium knowledge_article_3004 knowledge_article_3004 2017-12-12T14:34:18-0800 000007258 Validated (External) Premium Ruckus icx switches System network management;Troubleshooting System Network Management, Troubleshooting, Ruckus ICX Switches Brocade ICX show cli-command-history <table class="sectionContent" style="width: 1003.7px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 828.14px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">YouTube video: <a href="https://www.youtube.com/watch?v=cXAoXz9iLNI&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=cXAoXz9iLNI&feature=youtu.be</a></div> </td></tr></tbody></table> </td></tr></tbody></table>

Brocade Campus Feature Explainer Series: show cli-command-history

2017-12-12T14:34:18-0800 2017-12-12T18:13:29-0800 https://support.ruckuswireless.com/articles/000007285 2017-12-12T14:34:18-0800 monthly 0.8 admin,premium knowledge_article_3002 knowledge_article_3002 2017-12-12T14:34:18-0800 000007285 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products What is the default STP path cost for a LAG? The default STP path cost depends upon the link speed. The default values are as follows: 10 Mbps – 100 100 Mbps – 19 Gigabit – 4 10 Gigabit – 2 In addition, this value is configurable. The possible values are 1 to 65535.

What is the default STP path cost for a LAG?

2017-12-12T14:34:18-0800 2017-12-12T18:13:26-0800 https://support.ruckuswireless.com/articles/000007308 2017-12-12T14:34:20-0800 monthly 0.8 admin,premium knowledge_article_2998 knowledge_article_2998 2017-12-12T14:34:20-0800 000007308 Validated (External) Premium Icx 6610;Ruckus ICX 6610 Campus Switches Configuration Configuration, ICX 6610 Link negotiation issue between ICX and VDX after a reload of the ICX for VRRP failover tests Through internal lab testing re-creates were successful on the customer code versions and this was root caused to be a software issue on the VDX that has since been resolved. A recommendation was made to upgrade the VDXs to 5.0.2c code. The user is currently running 4.1.3a on the VDXs. Internal testing on the upgraded VDX code version no longer saw the original reported issue.

Link negotiation issue between ICX and VDX after a reload of the ICX for VRRP failover tests

2017-12-12T14:34:20-0800 2017-12-12T18:13:20-0800 https://support.ruckuswireless.com/articles/000007296 2017-12-12T14:34:20-0800 monthly 0.8 admin,premium knowledge_article_2995 knowledge_article_2995 2017-12-12T14:34:20-0800 000007296 Validated (External) Premium Icx 7750;RUCKUS ICX 7750 Campus Switches Configuration;Troubleshooting Configuration, Troubleshooting, ICX 7750 1G SFP not consistently connected to ICX 7750 While this 3rd party issue is being resolved, Engineering recommends that the user uses Brocade branded copper transceivers or the later revision parts from their vendor (SN starting with USXTX). Port 1/1/3: Type : 1G M-TX(SFP) Vendor: US CRITICAL Version: B2 Part# : GLC-T-US Serial#: USXTXV45876

1G SFP not consistently connected to ICX 7750

2017-12-12T14:34:20-0800 2017-12-12T18:13:16-0800 https://support.ruckuswireless.com/articles/000007297 2017-12-12T14:34:20-0800 monthly 0.8 admin,premium knowledge_article_2994 knowledge_article_2994 2017-12-12T14:34:20-0800 000007297 Validated (External) Premium Ruckus icx switches Configuration;Security Configuration, Security, Ruckus ICX Switches CLI banner configuration Setting a message of the day banner You can configure the Brocade device to display a message on a user terminal when a Telnet CLI session is established. For example, to display the message “Welcome to FESX!” when a Telnet CLI session is established. Brocade(config)# banner motd $ (Press Return) Enter TEXT message, End with the character '$'. Welcome to FESX! $ A delimiting character is established on the first line of the banner motd command. You begin and end the message with this delimiting character. The delimiting character can be any character except “ (double-quotation mark) and cannot appear in the banner text. In this example, the delimiting character is $ (dollar sign). The text in between the dollar signs is the contents of the banner. The banner text can be up to 4000 characters long, which can consist of multiple lines. Syntax: [no] banner motd delimiting-character To remove the banner, enter the no banner motd command. NOTE: The banner delimiting-character command is equivalent to the banner motd delimiting-character command Setting a privileged EXEC CLI level banner You can configure the Brocade device to display a message when a user enters the Privileged EXEC CLI level. Example: You can configure the Brocade device to display a message when a user enters the Privileged EXEC CLI level. As with the banner motd command, you begin and end the message with a delimiting character; in this example, the delimiting character is #(pound sign). The delimiting character can be any character except “ (double-quotation mark) and cannot appear in the banner text.The text in between the pound signs is the contents of the banner. Banner text can be up to 4000 characters, which can consist of multiple lines. Syntax: [no] banner exec_mode delimiting-character To remove the banner, enter the no banner exec_mode command. Displaying a console message when an incoming Telnet session is detected You can configure the Brocade device to display a message on the Console when a user establishes a Telnet session. This message indicates where the user is connecting from and displays a configurable text message. Brocade(config)# banner incoming $ (Press Return) Enter TEXT message, End with the character '$'. Incoming Telnet Session!! $ When a user connects to the CLI using Telnet, the following message appears on the Console. Telnet from 209.157.22.63 Incoming Telnet Session!! As with the banner motd command, you begin and end the message with a delimiting character; in this example, the delimiting character is $(dollar sign). The delimiting character can be any character except “ (double-quotation mark) and cannot appear in the banner text. The text in between the dollar signs is the contents of the banner. Banner text can be up to 4000 characters, which can consist of multiple lines. Syntax: [no] banner incoming delimiting-character To remove the banner, enter the no banner incoming command.

CLI banner configuration

2017-12-12T14:34:20-0800 2017-12-12T18:13:14-0800 https://support.ruckuswireless.com/articles/000006557 2017-12-12T14:35:49-0800 monthly 0.8 admin,premium knowledge_article_2988 knowledge_article_2988 2017-12-12T14:35:49-0800 000006557 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What are the configuration details related to NTP Configuration in Campus Brocade devices? Configuration examples to configure NTP in the Brocade device. NTP server and client mode configuration Sample CLI commands to configure the Brocade device in NTP server and client modes. Example: Brocade(config-ntp)# server 10.1.2.3 minpoll 5 maxpoll 10 Brocade(config-ntp)# server 11::1/64 Brocade(config-ntp)# peer 10.100.12.18 Brocade(config-ntp)# peer 10.100.12.20 Brocade(config-ntp)# peer 10.100.12.67 Brocade(config-ntp)# peer 10.100.12.83 NTP client mode configuration Sample CLI commands to configure the Brocade device in NTP client mode. Example: Brocade(config-ntp)# server 10.1.2.3 minpoll 5 maxpoll 10 Brocade(config-ntp)# server 11::1/24 Brocade(config-ntp)# peer 10.100.12.83 Brocade(config-ntp)# disable server NTP strict authentication configuration Sample CLI commands to configure the Brocade device in strict authentication mode. Example: Brocade(config-ntp)# authenticate Brocade(config-ntp)# authentication-key key-id 1 md5 key123 Brocade(config-ntp)# server 10.1.2.4 key 1 NTP loose authentication configuration Sample CLI commands to configure the Brocade device in loose authentication mode. This allows some of the servers or clients to use the authentication keys Example: Brocade(config-ntp)# authentication-key key-id 1 md5 key123 Brocade(config-ntp)# server 10.1.2.4 key 1 Brocade(config-ntp)# server 10.1.2.7 NTP interface context for the broadcast server or client mode Sample CLI commands to enter the NTP interface context. Example: Brocade(config)# int management 1 Brocade(config-if-mgmt-1)# ip address 10.20.99.173/24 Brocade(config-if-mgmt-1)# ntp Brocade(config-ntp)# ntp-interface management 1 Brocade(config-ntp-mgmt-1)# broadcast destination 10.23.45.128 Brocade(config-ntp)# ntp-interface ethernet 1/1/3 Brocade(config-ntp-if-e1000-1/1/3)# broadcast destination 10.1.1.0 key 1 Brocade(config-ntp)# ntp-interface ve 100 Brocade(config-ntp-ve-100)# broadcast destination 10.2.2.0 key 23 NTP broadcast client configuration Sample CLI commands to configure the NTP broadcast client. Example: Brocade(config-ntp)# ntp-interface management 1 Brocade(config-ntp-mgmt-1)# broadcast client Brocade(config-ntp)# ntp-interface ethernet 1/1/5 Brocade(config-ntp-if-e1000-1/1/5)# broadcast client Brocade(config-ntp)# ntp-interface ve 100 Brocade(config-ntp-ve-100)# broadcast client Reference: For more details related with NTP please make sure to download and check the "Fastiron-08030-adminguide"

Configuration details related with NTP Configuration..

2017-12-12T14:35:49-0800 2017-12-12T18:13:05-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvqTCAS?attachment_index=0 2017-12-12T18:13:05-0800 monthly admin,premium knowledge_article_2988 knowledge_article_2988_attachment_1 ka25B000000CdP4QAK_Attachment__c.pdf 2470228.0 application/pdf https://support.ruckuswireless.com/articles/000006562 2017-12-12T14:35:51-0800 monthly 0.8 admin,premium knowledge_article_2985 knowledge_article_2985 2017-12-12T14:35:51-0800 000006562 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches How do you configure Foundry Discovery Protocol (FDP)? FDP Overview The Foundry Discovery Protocol (FDP) enables Brocade devices to advertise themselves to other Brocade devices on the network. When you enable FDP on a Brocade device, the device periodically advertises information including the following: • Hostname (device ID) • Product platform and capability • Software version • VLAN and Layer 3 protocol address information for the port sending the update. IP, IPX, and AppleTalk Layer 3 information is supported. A Brocade device running FDP sends FDP updates on Layer 2 to MAC address 00-00-00-CC-CC-CC. Other Brocade devices listening on that address receive the updates and can display the information in the updates. Brocade devices can send and receive FDP updates on ethernet interfaces. FDP is disabled by default. ---------- Note: If FDP is not enabled on a Brocade device that receives an FDP update or the device is running a software release that does not support FDP, the update passes through the device at Layer 2. ---------- FDP configuration Enabling FDP globally To enable a Brocade device to globally send FDP packets, enter the following command at the global CONFIG level of the CLI: device(config)# fdp run Syntax: [no] fdprun The feature is disabled by default. Enabling FDP at the interface level By default, FDP is enabled at the interface level after FDP is enabled on the device. When FDP is enabled globally, you can disable and re-enable FDP on individual ports. Disable FDP by entering commands such as the following: device(config)# int e 1/2/1 device(config-if-1/2/1)# no fdp enable Enable or re-enable FDP by entering commands such as the following: device(config-if-1/2/1)# fdp enable Syntax: [no] fdp enable Specifying the IP management address to advertise You can set the configuration globally on a Layer 2 switch, or on an interface on a Layer 3 switch. For example, to configure a Layer 2 switch to advertise the IPv4 address, enter the following command at the Global CONFIG level of the CLI: device(config)# fdp advertise ipv4 To configure a Layer 3 switch to advertise the IPv6 address, enter the following command at the Interface level of the CLI: device(config-if-1/2/1)# fdp advertise ipv6 Syntax: fdp advertise ipv4 | ipv6 Changing the FDP update timer: By default, a Brocade device enabled for FDP sends an FDP update every 60 seconds. You can change the update timer to a value from 5 - 900 seconds. To change the FDP update timer, enter a command such as the following at the global CONFIG level of the CLI. device(config)# fdp timer 120 Changing the FDP hold time To change the FDP hold time, enter the fdp holdtime command at the global CONFIG level of the CLI. device(config)# fdp holdtime 360 Reference: For more details related with FDP please download and check the Fastiron-08030-adminguide

Details related with the configuration of the Foundry Discovery Protocol (FDP)

2017-12-12T14:35:51-0800 2017-12-12T18:13:01-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvqYCAS?attachment_index=0 2017-12-12T18:13:01-0800 monthly admin,premium knowledge_article_2985 knowledge_article_2985_attachment_1 ka25B000000CdOzQAK_Attachment__c.pdf 2470216.0 application/pdf https://support.ruckuswireless.com/articles/000006560 2017-12-12T14:35:51-0800 monthly 0.8 admin,premium knowledge_article_2982 knowledge_article_2982 2017-12-12T14:35:51-0800 000006560 Validated (External) Premium Ruckus icx switches System network management;Troubleshooting System Network Management, Troubleshooting, Ruckus ICX Switches What information is needed for RCA in Switch down events? In cases where a switch is down, crashed, locked up, etc., there are multiple symptoms to keep in mind. Please be sure to identify which scenario is being seen below. If Brocade TAC becomes involved, please also relay this information to them to help expedite things. <div dir="LTR">1) The switch software crashed and reloaded on its own. This scenario will result in crash data that Brocade TAC or Network Engineers can analyze. This will show as a ‘warm start’ in the show version output (also in show tech):</div> <div dir="LTR">Data to gather: show tech</div> <div dir="LTR">dm save <1-4></div> <div dir="LTR">supportsave all <tftp-ip-addr> </div> <div dir="LTR">2) The switch rebooted on its own, but the software itself did not crash. This scenario will likely show as a ‘cold start’ in the show version output. In this case, it is likely a power issue. It could be the power supplies, UPSs, power capacity, power outage, etc. The affected user will need to assist in confirming whether external power is good/bad. If external power is confirmed to be good, then focus will turn to the power supplies and the unit itself (in that order).</div> <div dir="LTR">Data to gather: show tech</div> <div dir="LTR">show chassis (confirm PSU status)</div> <div dir="LTR">supportsave all <tftp-ip-addr> </div> <div dir="LTR">3) The switch ‘locked up’ and stopped passing traffic. In this scenario, the affected user likely had to manually power cycle the switch to restore service. This issue can happen due to various things, but the most common one is due to memory leaks on old (generally unsupported) code. If the user has historical SNMP data, it would be wise to determine if the usage has risen over time. Once the switch is power cycled, there is generally some difficulty identifying root cause. This scenario seems less prevalent on current code. It is a good practice to look at the warm versus cold start to get an idea of what happened and/or what actions are really needed or required. Below is a breakdown: </div> <div dir="LTR">Warm start - Seen with regular software reloads and software crashes.</div> <div dir="LTR">Cold start - Seen when a power event occurred. This could be during initial power up, upon plugging in a switch, a PSU issue, or a temporary power outage.</div>

Article related to Switch down events.

2017-12-12T14:35:51-0800 2017-12-12T18:12:56-0800 https://support.ruckuswireless.com/articles/000006823 2017-12-12T14:35:51-0800 monthly 0.8 admin,premium knowledge_article_2980 knowledge_article_2980 2017-12-12T14:35:51-0800 000006823 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to perform a Software Recovery? 1. Connect a console cable from the console port to the terminal server. 2. Connect an Ethernet cable from the management port (the port located under the console port on the device) to the TFTP server. 3. On the TFTP server, assign an IP address to the connected NIC; for example, IP address 10.10.10.21 mask 255.255.255.0. 4. Reboot the device, and go to the boot monitor mode by pressing "b". 5. When in boot mode, enter the printenv command to display details of the images available on the device memory; for example: ICX64XX-boot> printenv baudrate=9600 uboot=/foundry/FGS/bootcode/kxz07400.bin ver=07.4.00T310 (Mar 1 2012 - 11:28:23) 6. Provide the IP address of the TFTP server that hosts a valid software image using the setenv serverip command; for example: ICX64XX-boot> setenv serverip 10.10.10.21 7. Set the IP address, gateway IP address, and netmask for the device management port, and save the configuration using the setenv ipaddr, setenv gatewayip, setenv netmask, and saveenv commands; for example: ICX64XX-boot> setenv ipaddr 10.10.10.22 ICX64XX-boot> setenv gatewayip 10.10.10.1 ICX64XX-boot> setenv netmask 255.255.255.0 ICX64XX-boot> saveenv ---------- Note: The IP address and the gateway IP address set for the device management port should be for the same subnet as the TFTP server NIC. ---------- 8. Enter the printenv command to verify the IP addresses that you configured for the device and the TFTP server; for example: ICX64XX-boot> printenv baudrate=9600 ipaddr=10.10.10.22 gatewayip=10.10.10.1 netmask=255.255.255.0 serverip=10.10.10.1 uboot=/foundry/FGS/bootcode/kxz07400.bin ver=07.4.00T310 (Mar 1 2012 - 11:28:23) 9. Test the connectivity to the TFTP server from the device using the ping command to ensure a working connection; for example: ICX64XX-boot> ping 10.10.10.21 ethPortNo = 0 Using egiga0 device host 10.10.10.21 is alive ? 10. Provide the file name of the image that you want to copy from the TFTP server using the setenv image_name command; for example: ICX64XX-boot> setenv image_name images/ICX/ICX64R08000.bin 11. Update the primary flash using the update_primary command; for example: ICX64XX-boot> update_primary ethPortNo = 0 Using egiga0 device TFTP from server 10.10.10.21; our IP address is 10.10.10.22 Download Filename 'ICX64S07400.bin'. Load address: 0x3000000 Download to address: 0x3000000 Loading: %################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ######################################################## done Bytes transferred = 10360844 (9e180c hex) prot off f8100000 f907ffff ................................................................................ ................................................................................ ................................................................................ ........ Un-Protected 248 sectors erase f8100000 f907ffff ................................................. ................................................................. ................................................................. ................................................................. .... Erased 248 sectors copying image to flash, it will take sometime... sflash write 3000000 100000 f80000 TFTP to Flash Done. 12. Load the image from the primary flash using the boot_primary command; for example: ICX64XX-boot> boot_primary Booting image from Primary ## Booting image at 00007fc0 ... Created: 2012-03-02 20:38:52 UTC Data Size: 10360268 Bytes = 9.9 MB Load Address: 00008000 Entry Point: 00008000 Verifying Checksum ... OK OK Starting kernel in BE mode ... Uncompressing Image............................................................. ................................................................................ ................................................................................ ................................................................................ ................................................................................ ........................................... done, booting the kernel. Config partition mounted. 13. Enter show flash and see the output to check whether the image copy process was successful. 14. Copy the image from the primary to the secondary flash partition using the copy flash flash secondary command.

How to perform a Software Recovery?

2017-12-12T14:35:51-0800 2017-12-12T18:12:54-0800 https://support.ruckuswireless.com/articles/000006865 2017-12-12T14:35:53-0800 monthly 0.8 admin,premium knowledge_article_2977 knowledge_article_2977 2017-12-12T14:35:53-0800 000006865 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What are the OSPF Neighbor states? OSPF Neighbor states The different "states" a neighbor relationship can be in:? ?Down – This is the first OSPF neighbor state, this state means that no hellos (information) has been received from any neighbor(s).? Attempt - This state is only valid for manually configured neighbors in a Non-broadcast multi access (NBMA) environment. In Attempt state, the router sends unicast hellos every poll interval to the neighbor from which hellos have not been received within the dead interval.? ?Init - This state indicates that the router has received a hello packet from its neighbor, but the receiving router’s ID was not included in the hello.? ?2-way – This state indicates that the bi-directional communication has been established between two routers? ?Exstart – Once the Designated Router (DR) and Backup Designated Router (BDR) are elected, the actual process of exchanging link-state information can start between?the routers and their DR and BDR.? ?Exchange – In this state, OSPF routers exchange database descriptor (DBD) packets.? ?Loading - In this state, the actual exchange of link-state information occurs.?? ?Full - In this state, routers are fully adjacent with each other. All the routers and networks LSAs are exchanged and the router databases are fully synchronized.? Part I: We are going to review the first 3 different states that an adjacency in OSPF must go through:? <ul><li>DOWN?</li><li>INIT?</li><li>2-WAY?</li></ul> ?DOWN or BLANK? This is the first OSPF neighbor state, and it means that no information (hellos) has been received from this neighbor. Although no hellos have been received, hello packets can still be sent out to the neighbor.? During the fully adjacent neighbor state, if a router doesn’t receive hello packets from a neighbor within the RouterDeadInterval time, then the neighbor state changes from Full to Down.? When troubleshooting this state, we have to focus on the fact that hello packets are not being received. Maybe there is a passive-interface in the other side, or an access-list denying packets to 224.0.0.5, or an incorrect configuration on one of the sides (mismatched areas, config missing, the same router-id configured in both sides, etc.)? ?INIT? When a router receives a hello packet from the neighbor, it sets the state to INIT. In this state, the router has received a hello packet from the neighbor, but the receiving router’s ID was not included in the hello packet? Every router sending hello packets lists in the packet its own router-id and the router-id of each known neighbor. So the router receiving a hello packet can confirm that its neighbor has received its hello packet.? If the adjacency remains stuck in this state, it’s because the router does not see its own router-id in the received hello packet (maybe the neighbor has not received any hello packets from the router, so it doesn’t list the router-id when sending hello packets).? ?2-WAY? When the state is 2-way, it means bi-directional communication has been established between the two routers. In order to reach this bi-directional communication, each router has received hello packets with its own router-id in the list.? If the type of the network is broadcast or non-broadcast multi-access, routers will trigger the process to elect the DR and BDR in the net. If the type of the network is point-to-point or point-to-multipoint, routers are ready to jump to next state.? If the adjacency remains stuck in this state, it is because the network type requires to choose a DR and BDR, and this process has not been accomplished. We should check for any errors in the priority interface configuration.? In our scenario, I have changed the network type to broadcast, and I have configured a priority of 0 on both sides.? ---------- Note: a configuration mismatch in the type of network (one side as p2p and the other side as broadcast) would ?establish?the adjacency, although it would be flapping because of timers mismatch.? ---------- In case of broadcast and non-broadcast multi-access networks, at the end of this stage the DR and BDR have been elected. The adjacency with routers other than DR , BDR will get stuck in the 2-way state.? Part II: We are going to review the last 4 different states that an adjacency on a p2p link must go through: <ul><li>EXSTART?</li><li>EXCHANGE?</li><li>LOADING?</li><li>FULL?</li></ul> ??EXSTART? Once the routers have got bi-directional communication, the process of exchanging link state information can start between them.? In this state, the routers establish a master-slave relationship and choose the initial sequence number for adjacency formation. The router with the higher router ID becomes the master and starts the exchange, and as such, it’s the only router that can increment the sequence number.? If there is an MTU mismatch, the routers will get stuck in this state.? In fact, if the interface with the lowest MTU belongs to the router who has the role of the slave, both neighbors will remain stuck in ExStart state. This is because the master starts the process sending one DBD with info about its LSAs and its MTU. The slave rejects this DBD because of the MTU, so none of them jump to the next state (Exchange).? However, if the interface with the lowest MTU belongs to the router with the role of master, the master will get stuck in ExStart state, and the slave will get stuck in Exchange state. This is because the master starts the process sending the first DBD with the info about its LSAs and its small MTU. Then, the slave accepts this DBD and acknowledges it by sending its first DBD packet with a higher MTU info. The slave goes into the Exchange state because it received a DBD from the master, but the master remains in the ExStart state because it rejects the DBD from the slave because of its MTU.? The failed DBD will be retransmitted 25 times. After that time, the routers will go to the Down state.? Another thing that could cause both routers to stay in this state is an error in the sequence number of the LSAs, but this is something not?fixable?by configuration.? ?EXCHANGE? In the exchange state, OSPF routers exchange database descriptor (DBD) packets. Database descriptors contain link-state advertisement (LSA) headers only and describe the contents of the entire link-state database. Each DBD packet has a sequence number which can be incremented only by master which is explicitly acknowledged by slave. Routers also send link-state request packets and link-state update packets (which contain the entire LSA) in this state. The contents of the DBD received are compared to the information contained in the routers link-state database to check if new or more current link-state information is available with the neighbor."? As I mentioned above, something that could make routers stay stuck in the Exchange state is an MTU mismatch.? Another feasible error could be the receipt of an unexpected DBD sequence number.? ?LOADING? In this state, the actual exchange of link state information occurs. Based on the information provided by the DBDs, routers send link-state request packets. The neighbor then provides the requested link-state information in link-state update packets. During the adjacency, if a router receives an outdated or missing LSA, it requests that LSA by sending a link-state request packet. All link-state update packets are acknowledged.? One error that could make the router keep stuck in the LOADING state is an MTU mismatch in the path.? Let’s say both routers have their interfaces configured with a MTU of1500 bytes, but the transmission media uses a MTU of 1400 bytes. In this scenario, the neighbor sends a link-state update in a large packet, but this packet never reaches the local router; as a result, the neighbor gets stuck in the LOADING state.? ?FULL? In this state, routers are fully adjacent with each other. All the router and network LSAs are exchanged and the routers’ databases are fully synchronized.? Full is the normal state for an OSPF.?

OSPF Neighbor states

2017-12-12T14:35:53-0800 2017-12-12T18:12:49-0800 https://support.ruckuswireless.com/articles/000006831 2017-12-12T14:35:53-0800 monthly 0.8 admin,premium knowledge_article_2972 knowledge_article_2972 2017-12-12T14:35:53-0800 000006831 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers How to configure the wireless controller as a Radius client when deploying external Radius server? When deploying an external Radius server for wireless authentication such as 802.1X/EAP, the Access Point (AP) is the Radius client by default. This means that every AP must be configured as a Radius client on the external Radius server which could be unmanangeable for large networks. A more efficeint method would be to configure the controller as the Radius client (instead of APs) where the controller can proxy all Radius requests originating from the APs and send directly to the external server. To do this, set the proxy mode to 'through-controller' as shown below: RFS6000(config)# aaa-policy EAP RFS6000(config-aaa-policy-EAP)# authentication server 1 host 192.168.1.1 secret brocade RFS6000(config-aaa-policy-EAP)# authentication server 1 proxy-mode through-controller RFS6000(config-aaa-policy-EAP)# commit write memory

How to configure the wireless controller as a Radius client when deploying external Radius server?

2017-12-12T14:35:53-0800 2017-12-12T18:12:42-0800 https://support.ruckuswireless.com/articles/000006834 2017-12-12T14:35:53-0800 monthly 0.8 admin,premium knowledge_article_2970 knowledge_article_2970 2017-12-12T14:35:53-0800 000006834 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers Please use the special "migration image" (BR7131-5.2.0.0-069R.bin) when upgrading from v4.1 to v5.2. Note that the migration image is a '.bin' file, not '.img'. After upgrading with this migration image, the access point will reload running the v5.2 software. For automatic upgrades from the controller, the migration image must first be copied to flash:/ on the v5.2 controller which must be configured with the ‘legacy-auto-update br7131 image flash:/’ CLI command. 1. br-rfs6000# copy tftp://<server-IP>/BR7131-5.2.0.0-069R.bin flash:/ 2. br-rfs6000(config-device-00-24-38-XX-XX-XX)# legacy-auto-update br71xx image flash:/BR7131-5.2.0.0-069R.bin

How do you upgrade AP-7131 from 4.1 to 5.2 via controller CLI?

2017-12-12T14:35:53-0800 2017-12-12T18:12:39-0800 https://support.ruckuswireless.com/articles/000006833 2017-12-12T14:35:53-0800 monthly 0.8 admin,premium knowledge_article_2969 knowledge_article_2969 2017-12-12T14:35:53-0800 000006833 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers What is the default login for a FIPS controller? The default username and password to log into a FIPS controller is: Login: cli Username: admin Password: 0umP.s45fIOD6

What is the default login for a FIPS controller?

2017-12-12T14:35:53-0800 2017-12-12T18:12:38-0800 https://support.ruckuswireless.com/articles/000006866 2017-12-12T14:35:55-0800 monthly 0.8 admin,premium knowledge_article_2964 knowledge_article_2964 2017-12-12T14:35:55-0800 000006866 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How does BPDU Guard work? BPDU Guard Configuration In an STP environment, switches, end stations, and other Layer 2 devices use Bridge Protocol Data Units (BPDUs) to exchange information that STP will use to determine the best path for data flow. The BPDU guard, an enhancement to STP, removes a node that reflects BPDUs back in the network. It enforces the STP domain borders and keeps the active topology predictable by not allowing any network devices behind a BPDU guardenabled port to participate in STP. In some instances, it is unnecessary for a connected device, such as an end station, to initiate or participate in an STP topology change. In this case, you can enable the STP BPDU guard feature on the Brocade port to which the end station is connected. STP BPDU guard shuts down the port and puts it into an errdisable state. This disables the connected device's ability to initiate or participate in an STP topology. A log message is then generated for a BPDU guard violation, and a CLI message is displayed to warn the network administrator of a severe invalid configuration. The BPDU guard feature provides a secure response to invalid configurations because the administrator must manually put the interface back in service if errdisable recovery is not enabled. You enable STP BPDU guard on individual interfaces.(This feature is disabled by default.) Here is an example: FastIron(config) interface ethe 2/1 FastIron(config-if-e1000-2/1)# stp-bpdu-guard You can also use the multiple interface command to enable this feature on multiple ports at once. For example: FastIron(config)#interface ethernet 1/1 to 1/9 FastIron(config-mif-1/1-1/9)# stp-bpdu-guard

How does BPDU Guard work?

2017-12-12T14:35:55-0800 2017-12-12T18:12:30-0800 https://support.ruckuswireless.com/articles/000006890 2017-12-12T14:35:55-0800 monthly 0.8 admin,premium knowledge_article_2961 knowledge_article_2961 2017-12-12T14:35:55-0800 000006890 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Where is the video for BROCADE CAMPUS ICX VLAN MIRROR AND MONITOR? YouTube video: <a href="https://www.youtube.com/watch?v=OqhPsDOvyIs&feature=youtu.be" target="_blank">https://www.youtube.com/watch?v=OqhPsDOvyIs&feature=youtu.be</a>

BROCADE CAMPUS ICX VLAN MIRROR AND MONITOR

2017-12-12T14:35:55-0800 2017-12-12T18:12:26-0800 https://support.ruckuswireless.com/articles/000007223 2017-12-12T14:35:58-0800 monthly 0.8 admin,premium knowledge_article_2955 knowledge_article_2955 2017-12-12T14:35:58-0800 000007223 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How to configure NAT on wireless controller using CLI? The following configuration example will demonstrate how to enable dynamic NAT for internet access for specific IP subnets using the CLI. The configuration is done on the RFS6000 controller at device level. <div> </div> <div>In this example, the IP rule allows the following: </div> <div>1. Packets received from hosts in VLAN 10 192.168.10.0/24 management and VLAN 40 192.168.40.0/24 data subnet will be translated (considered inside). 2. Vlan4090 will be the outside address as this has the public IP address.</div> <div> </div> <div>Configuration Steps:</div> <div> 1. Login to the wireless device using console or telnet. Specify the interface Type for the virtual Interface. In this example, the management vlan10 and data vlan40 virtual interfaces will be designated as inside and the Internet vlan4094 as outside: <div>rfs6000?81C20E*#configure terminal</div> <div>Enter configuration commands, one per line. End with CNTL/Z.</div> <div>rfs6000?81C20E(config)*#rfs6000 00?15?70?81?C2?0E</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E)*#interface vlan 10</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E?if?vlan10)*#ip nat inside</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E?if?vlan10)*#..</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E)*#interface vlan 40</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E?if?vlan40)*#ip nat inside</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E?if?vlan40)*#..</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E)*#interface vlan 4094</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E?if?vlan4094)*#ip nat outside</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E?if?vlan4094)*#..</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E)*#exit</div> <div>rfs6000?81C20E(config)*# <div>2. Create an ACL to identify which source subnets to NAT for Internet access. In this example, the ACL is called nat-rule: <div>rfs6000?81C20E(config)*#ip access?list nat?rule</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E)*#</div> <div>rfs6000?81C20E(config?ip?acl?nat?rule)*# permit ip 192.168.10.0/24 any rule?precedence 10</div> <div>rfs6000?81C20E(config?ip?acl?nat?rule)*# permit ip 192.168.40.0/24 any rule?precedence 20 <div>rfs6000?81C20E(config?ip?acl?nat?rule)*#exit</div> <div>rfs6000?81C20E(config)*#</div> 3. Create a dynamic NAT rule translating private addresses defined in the ACL received on inside interfaces to the public outside internet vlan4094: <div>rfs6000?81C20E(config)*#rfs6000 00?15?70?81?C2?0E</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E)*# ip nat inside source list nat?rule interface vlan4094 overload</div> <div>rfs6000?81C20E(config?device?00?15?70?81?C2?0E)*#exit</div> <div>rfs6000?81C20E(config)*# commit write </div> </div> </div> </div> For security, it is recommended that a firewall rule be created and applied to the outside interface to block all inbound traffic.</div>

How to configure NAT on wireless controller using CLI?

2017-12-12T14:35:58-0800 2017-12-12T18:12:17-0800 https://support.ruckuswireless.com/articles/000006923 2017-12-12T14:35:58-0800 monthly 0.8 admin,premium knowledge_article_2953 knowledge_article_2953 2017-12-12T14:35:58-0800 000006923 Validated (External) Premium Ruckus icx switches Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches Why are there duplicate IP error messages on syslog and how are they resolved? Upgrade to a version of code that contains the fix.

Duplicate IP error messages on syslog and how to address the issue.

2017-12-12T14:35:58-0800 2017-12-12T18:12:14-0800 https://support.ruckuswireless.com/articles/000007061 2017-12-12T14:35:58-0800 monthly 0.8 admin,premium knowledge_article_2952 knowledge_article_2952 2017-12-12T14:35:58-0800 000007061 Validated (External) Premium Brocade eos products Configuration;System network management Configuration, System Network Management, Brocade EOS Products Can I configure PoE in a LAG? <h3 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">Inline power on PoE LAG ports</h3> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">The inline power on Power over Ethernet (PoE) LAG ports feature allows you to enable inline power on PoE LAG ports with the introduction of a new inline power ethernet command, available in global configuration mode.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">Without the inline power ethernet command, you cannot enable inline power on any secondary LAG ports because the interface configuration mode is not available for LAG secondary ports to run the inline power command.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">You can configure inline power in interface configuration mode on a port that is not a member of a LAG. If that port then becomes part of a LAG, you can use the inline power ethernet command to configure inline power parameters on any other port in that LAG.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">LAG operational changes can affect the PoE power state unless the decouple-datalink keyword is used as a command option when configuring inline power on the LAG ports. For more information, refer to “Decouple the PoE and datalink operations on PoE ports.”<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">After configuring inline power on PoE ports, you can verify the configuration using the show running-config command. If you have configured inline power on a regular PoE port in either global configuration or interface configuration mode, the inline power configuration commands display under the interface configuration level. If a regular PoE port becomes a PoE LAG port, or a PoE LAG port is configured under global configuration mode, the inline power configuration commands display under the global configuration level. If a LAG is removed, the inline power configuration commands for all ports display under the interface configuration level.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(255, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Warning<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);"> If you downgrade to a release earlier than 08.0.01, there is no backwards compatibility for the inline power ethernet command or the decouple-datalink keyword. <h3 style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-style: normal; font-weight: bold; display: block; white-space: normal; background-color: rgb(255, 255, 255);">Restriction</h3> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">If you want to keep decoupling in place on a PoE port when you configure the inline power ethernet command to change its other parameters, for example, priority, you must also configure the decouple-datalink keyword.<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">

Inline power on PoE LAG ports

2017-12-12T14:35:58-0800 2017-12-12T18:12:13-0800 https://support.ruckuswireless.com/articles/000007312 2017-12-12T14:36:00-0800 monthly 0.8 admin,premium knowledge_article_2950 knowledge_article_2950 2017-12-12T14:36:00-0800 000007312 Validated (External) Premium Icx 7450;RUCKUS ICX 7450 Campus Switches Configuration Configuration, ICX 7450 How to Enable 100Mb speed on 1Gb Fiber ICX7450-48F-E port? In order to set the speed to 100mb, use the following command on interface configuration level: 100-fx On software versions 8020, you may present the error: Error: 100-fx command not applicable for port 1/1/1 In that case perform an upgrade to 8030k or later version to be able to run the 100-fx command. Command Usage Guidelines After you physically install a 100Base-FX transceiver, you must use this command to enable 100Base-FX support on the device. NOTE: You must disable 100Base-FX support before inserting a different type of module in the same port. Otherwise, the device will not recognize traffic traversing the port. The no form of the command disables 100Base-FX support.

How to Enable 100Mb speed on 1Gb Fiber ICX7450-48F-E port?

2017-12-12T14:36:00-0800 2017-12-12T18:12:10-0800 https://support.ruckuswireless.com/articles/000007228 2017-12-12T14:36:00-0800 monthly 0.8 admin,premium knowledge_article_2949 knowledge_article_2949 2017-12-12T14:36:00-0800 000007228 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers How can I find the number of management users (or sessions) logged in to a wireless controller or AP7131? <div>The only reliable way to get this information is to use CLI. The command to get the information regarding the number of sessions currently running on a Controller is sh sessions. The output will be displayed as shown below. It includes the Login username and IP address of the machine from which the session has originated. rfs6000# sh sessions INDEX COOKIE NAME START TIME FROM 1 36 admin 2012-08-22 13:26:20 web 2 37 admin 2012-08-22 13:27:51 10.110.34.205 3 6 snmp 2012-08-06 14:31:37 127.0.0.1 4 40 operator 2012-08-22 13:35:07 10.110.34.205 5 39 operator 2012-08-22 13:31:45 web </div> <div>If the Event monitor is open, then only live user logins and logouts can be observed within that window.</div>

How can I find the number of management users (or sessions) logged in to a wireless controller or AP7131?

2017-12-12T14:36:00-0800 2017-12-12T18:12:09-0800 https://support.ruckuswireless.com/articles/000007229 2017-12-12T14:36:00-0800 monthly 0.8 admin,premium knowledge_article_2948 knowledge_article_2948 2017-12-12T14:36:00-0800 000007229 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products Brocade Campus Switch Port Extender Configuration - SPX <table class="sectionContent" style="width: 1003.7px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 828.14px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">YouTube video: <a href="https://www.youtube.com/watch?v=15OmDVDfflA&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=15OmDVDfflA&feature=youtu.be</a></div> </td></tr></tbody></table> </td></tr></tbody></table>

BROCADE CAMPUS FEATURE EXPLAINER SERIE

2017-12-12T14:36:00-0800 2017-12-12T18:12:07-0800 https://support.ruckuswireless.com/articles/000007230 2017-12-12T14:36:00-0800 monthly 0.8 admin,premium knowledge_article_2942 knowledge_article_2942 2017-12-12T14:36:00-0800 000007230 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches Brocade Campus ICX Logging Parameters <table class="sectionContent" style="width: 1003.7px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 828.14px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">YouTube video: <a href="https://www.youtube.com/watch?v=z6mmOxcG_SU&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=z6mmOxcG_SU&feature=youtu.be</a></div> </td></tr></tbody></table> </td></tr></tbody></table>

How to change the number of syslog entries, enable persistence, log to console and log to a remote syslog server.

2017-12-12T14:36:00-0800 2017-12-12T18:11:58-0800 https://support.ruckuswireless.com/articles/000007315 2017-12-12T14:36:02-0800 monthly 0.8 admin,premium knowledge_article_2941 knowledge_article_2941 2017-12-12T14:36:02-0800 000007315 Validated (External) Premium Icx 7250;Icx 7450;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ICX 7250, ICX 7450 7250 ports down upon reload This issue only occurs when using 1G SFPs in 10G module 2 of ICX7250s. Issue first reported with LAG configured between the 2 device, but LAG is not required to encounter issue. This issue has been seen in 8.30 releases. Codes 8.40b or 8.61 do not have this issue.

7250 ports connected to 7450 do not come up when 7250 reloaded.

2017-12-12T14:36:02-0800 2017-12-12T18:11:56-0800 https://support.ruckuswireless.com/articles/000007316 2017-12-12T14:36:02-0800 monthly 0.8 admin,premium knowledge_article_2939 knowledge_article_2939 2017-12-12T14:36:02-0800 000007316 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Frequent write startup-config donel logs are seen in the console session Upgrade to a version of code that contains the fix.

Frequent write startup-config donel logs are seen in the console session

2017-12-12T14:36:02-0800 2017-12-12T18:11:53-0800 https://support.ruckuswireless.com/articles/000007314 2017-12-12T14:36:02-0800 monthly 0.8 admin,premium knowledge_article_2938 knowledge_article_2938 2017-12-12T14:36:02-0800 000007314 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches Switch may reset on unauthorized SSH attempts - EXCEPTION 1200, Data TLB error Upgrade to a version of code that contains the fix.

Repeated invalid login attempts via SSH can result in a switch reset

2017-12-12T14:36:02-0800 2017-12-12T18:11:52-0800 https://support.ruckuswireless.com/articles/000007351 2017-12-12T14:36:08-0800 monthly 0.8 admin,premium knowledge_article_2931 knowledge_article_2931 2017-12-12T14:36:08-0800 000007351 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Brocade Layer 3 Routing Protocols Adding a static IP route To configure an IP static route with a destination address of 192.0.0.0 255.0.0.0 and a next-hop router IP address of 195.1.1.1, enter the following: device (config)# ip route 192.0.0.0 255.0.0.0 195.1.1.1 To configure a default route, enter the following: device (config)# ip route 0.0.0.0 0.0.0.0 To configure a static IP route with an Ethernet port instead of a next-hop address, enter a command such as the following: device (config)# ip route 192.128.2.69 255.255.255.0 ethernet 1/4/1 The command configures a static IP route for destination network 192.128.2.69/24. Since an Ethernet port is specified instead of a gateway IP address as the next hop, the Brocade device always forwards traffic for the 192.128.2.69/24 network to port 1/4/1. To configure an IP static route that uses virtual interface 3 as its next hop, enter a command such as the following: device(config)# ip route 192.128.2.71 255.255.255.0 ve 3 Syntax: [no] ip route dest-ip-addr dest-mask | dest-ip-addr/mask-bits next-hop-ip-addr | ethernet unit/ slot/port | ve num [ metric ] [ tag num ] [ distance num ] [ name string ] NOTE Using the no form of the command only removes the name if configured. Another no command must be issued to remove the actual Static Route. Configuring a "null" route You can configure the Brocade device to drop IP packets to a specific network or host address by configuring a "null" (sometimes called "null0") static route for the address. When the Brocade device receives a packet destined for the address, the Brocade device drops the packet instead of forwarding it. To configure a null static route to drop packets destined for network 209.157.22.x, enter the following commands. device(config)# ip route 209.157.22.0 255.255.255.0 null0 device(config)# write memory Syntax: [no] ip route { ip-addr ip-mask | dest-ip-addr /mask-bits } null0 [ metric ] [ tag num ] [ distance num ] To display the maximum value for your device, enter the show default values command. The maximum number of static IP routes the system can hold is listed in the ip-static-route row in the System Parameters section of the display. To change the maximum value, use the system-max ip-static-route command at the global CONFIG level. The ip-addr parameter specifies the network or host address. The Brocade device will drop packets that contain this address in the destination field instead of forwarding them. The ip-mask parameter specifies the network mask. Ones are significant bits and zeros allow any value. For example, the mask 255.255.255.0 matches on all hosts within the Class C subnet address specified by ip-addr . Alternatively, you can specify the number of bits in the network mask. For example, you can enter 209.157.22.0/24 instead of 209.157.22.0 255.255.255.0. The null0 parameter indicates that this is a null route. You must specify this parameter to make this a null route. The metric parameter adds a cost to the route. You can specify from 1 - 16. The default is 1. The tag num parameter specifies the tag value of the route. Possible values: 0 - 4294967295. Default: 0. The distancenum parameter configures the administrative distance for the route. You can specify a value from 1 - 255. The default is 1. The value 255 makes the route unusable. The last three parameters are optional and do not affect the null route, unless you configure the administrative distance to be 255. In this case, the route is not used and the traffic might be forwarded instead of dropped.

Brocade Layer 3 Routing Protocols

2017-12-12T14:36:08-0800 2017-12-12T18:11:42-0800 https://support.ruckuswireless.com/articles/000006528 2017-12-12T15:03:15-0800 monthly 0.8 admin,premium knowledge_article_2926 knowledge_article_2926 2017-12-12T15:03:15-0800 000006528 Validated (External) Premium Icx 6450;Icx 6610;Icx 6650;Icx 7450;Icx 7750;Fastiron cx series;Ruckus ICX 6610 Campus Switches;Brocade ICX 6650 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches;Brocade FastIron CX Series Switches Performance;Configuration;System network management Performance, Configuration, System Network Management, ICX 6450, ICX 6610, ICX 6650, ICX 7450, ICX 7750, FastIron CX Series What is IGMP/MLD Snooping and how should it be configured? When Brocade ICX product family switches process a multicast packet, by default, they broadcast the packet to all ports except the incoming port of a VLAN. This behavior causes some clients to receive unwanted traffic. IGMP snooping provides multicast containment by forwarding traffic to only the ports that have IGMP receivers for a specific multicast group (destination address). A switch maintains the IGMP group membership information by processing the IGMP reports and leave messages, so traffic can be forwarded to ports receiving IGMP reports. MLD snooping provides multicast containment by forwarding traffic to only those clients that have MLD receivers for a specific multicast group (destination address) in an IPv6 network. The switch maintains the MLD group membership information by processing MLD reports and generating messages so traffic can be forwarded to ports receiving MLD reports. This is analogous to IGMP snooping. IGMP and MLD snooping must be enabled on all access switches in the school and district office.

When Brocade ICX product family switches process a multicast packet, by default, they broadcast the packet to all ports except the incoming port of a VLAN. This behavior causes some clients to receive unwanted traffic

2017-12-12T15:03:15-0800 2017-12-12T18:11:34-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tvq0CAC?attachment_index=0 2017-12-12T18:11:34-0800 monthly admin,premium knowledge_article_2926 knowledge_article_2926_attachment_1 ka25B000000CdNSQA0_Attachment__c.pdf 2325755.0 application/pdf https://support.ruckuswireless.com/articles/000006869 2017-12-12T15:03:17-0800 monthly 0.8 admin,premium knowledge_article_2922 knowledge_article_2922 2017-12-12T15:03:17-0800 000006869 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to back up the configuration on the switch? Prerequisites: A TFTP server or Secure Copy program and SSH enabled on the the device ---------- Note: TFTP commands are issued on the device. SCP commands are issued on the server. ---------- <h3>Example Commands for TFTP:</h3> <h4>Backing up the device:</h4> copy run tftp 192.168.10.2 myswitch.cfg <h4>Restoring the device:</h4> copy tftp start 192.168.10.2 myswitch.cfg reload <h3>Example Commands for SCP:</h3> <h4>Backing up the device:</h4> scp username@192.168.10.1:runConfig myswtich.cfg <h4>Restoring the device:</h4> scp myswitch.cfg username@192.168.10.1:startConfig Reload the switch for the restored configuration to take effect.

How to back up the configuration on the switch

2017-12-12T15:03:17-0800 2017-12-12T18:11:28-0800 https://support.ruckuswireless.com/articles/000006669 2017-12-12T15:03:17-0800 monthly 0.8 admin,premium knowledge_article_2921 knowledge_article_2921 2017-12-12T15:03:17-0800 000006669 Validated (External) Premium Brocade eos products Security;Troubleshooting Security, Troubleshooting, Brocade EOS Products How to address HTTP/HTTPS Vulnerability Alerts? If the error is related to the algorithm, changing the size of the algorithm won’t help, there is no way to change the encryption of the algorithm on Campus devices, but disabling all the Web-Management configuration of the Brocade device should clear HTTP/HTTPS vulnerability alerts. Example: device(config)# no web-management device(config)# no aaa authenticatication web-server default local

Since Web-Management feature is not completely reliable from security perspective, it could generate some HTTP/HTTPS algorithms vulnerability alerts on third party security scan systems.

2017-12-12T15:03:17-0800 2017-12-12T18:11:26-0800 https://support.ruckuswireless.com/articles/000006671 2017-12-12T15:03:17-0800 monthly 0.8 admin,premium knowledge_article_2920 knowledge_article_2920 2017-12-12T15:03:17-0800 000006671 Validated (External) Premium Brocade eos products Security Security, Brocade EOS Products What is the AES-CTR encryption support for SSH? <div>Disables the Advanced Encryption Standard - Cipher-Block Chaining (AES-CBC) encryption mode for the Secure Shell (SSH) protocol.</div> <div> The following example disables the AES-CBC encryption mode. </div> <div>device# configure terminal device(config)# ip ssh encryption disable-aes-cbc ip ssh encryption disable-aes-cbc - enables encryption algorithms such as aes256-ctr, aes192-ctr, or aes128-ctr but the CBC mode ciphers are removed. The AES-CBC mode can be re-enabled by issuing: no ip ssh encryption disable-aes-cbc - will bring back the pre-existing CBC ciphers (aes256-cbc, aes192-cbc, aes128-cbc, and 3des-cbc) along with the CTR ciphers. Make sure AES-CTR mode is configured both on the client and server sides to establish an SSH connection.</div>

AES-CTR encryption support for SSH, overview on JITC and SSH Weak Encryption Algorithm Vulnerability.

2017-12-12T15:03:17-0800 2017-12-12T18:11:25-0800 https://support.ruckuswireless.com/articles/000006666 2017-12-12T15:03:17-0800 monthly 0.8 admin,premium knowledge_article_2918 knowledge_article_2918 2017-12-12T15:03:17-0800 000006666 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration Configuration, ICX 7250, ICX 7450, ICX 7750 Which of the FastIron devices do not support Half Duplex mode? Brocade ICX 7750, Brocade ICX 7450 and Brocade ICX 7250 devices do not support half duplex configuration as the MAC layer of these platforms do not support half duplex.

List of devices that do not support half duplex.

2017-12-12T15:03:17-0800 2017-12-12T18:11:22-0800 https://support.ruckuswireless.com/articles/000006668 2017-12-12T15:03:17-0800 monthly 0.8 admin,premium knowledge_article_2916 knowledge_article_2916 2017-12-12T15:03:17-0800 000006668 Validated (External) Premium Icx 6450;Icx 6610;Icx 6650;Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 6610 Campus Switches;Brocade ICX 6650 Campus Switches;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration Configuration, ICX 6450, ICX 6610, ICX 6650, ICX 7250, ICX 7450, ICX 7750 What is the correct show command to display the dhcp snooped mac/arp associations? In order to display the dhcp snooped mac/arp associations use the command: ‘show ip dhcp snooping info’ Modes User EXEC mode Privileged EXEC mode Global configuration mode Examples The following example displays the DHCP snooping information. device# show ip dhcp snooping info Dhcp snooping Info Total learnt entries 10 Learnt DHCP Snoop Entries IP Address Mac Address Port Virtual Port vlan lease VRF 10.1.1.20 0000.0000.0001 1/1/1*2/1/25 v100 100 200 default-vrf 10.1.1.21 0000.0000.0002 1/1/1*2/1/25 v100 100 200 default-vrf 10.1.1.22 0000.0000.0003 1/1/1*2/1/25 v100 100 200 default-vrf 10.1.1.23 0000.0000.0004 1/1/1*2/1/25 v100 100 200 default-vrf 10.1.1.24 0000.0000.0005 1/1/1*2/1/25 v100 100 200 default-vrf 10.1.1.25 0000.0000.0006 1/1/1*2/1/25 v100 100 200 default-vrf 10.1.1.26 0000.0000.0007 1/1/1*2/1/25 v100 100 200 default-vrf 10.1.1.27 0000.0000.0008 1/1/1*2/1/25 v100 100 200 default-vrf 10.1.1.28 0000.0000.0009 1/1/1*2/1/25 v100 100 200 default-vrf 10.1.1.29 0000.0000.000a 1/1/1*2/1/25 v100 100 200 default-vrf The following example displays the DHCP snooping information on a switch image. device(config-if-e1000-1/1/1)# show ip dhcp snoop info Dhcp snooping Info Total learnt entries 10 Learnt DHCP Snoop Entries IP Address Mac Address Port Virtual Port vlan lease VRF 10.1.1.20 0000.0000.0001 1/1/1*2/1/25 1/1/1*2/1/25 100 145 - 10.1.1.21 0000.0000.0002 1/1/1*2/1/25 1/1/1*2/1/25 100 145 - 10.1.1.22 0000.0000.0003 1/1/1*2/1/25 1/1/1*2/1/25 100 145 - 10.1.1.23 0000.0000.0004 1/1/1*2/1/25 1/1/1*2/1/25 100 145 - 10.1.1.24 0000.0000.0005 1/1/1*2/1/25 1/1/1*2/1/25 100 145 - 10.1.1.25 0000.0000.0006 1/1/1*2/1/25 1/1/1*2/1/25 100 145 - 10.1.1.26 0000.0000.0007 1/1/1*2/1/25 1/1/1*2/1/25 100 145 -

Explanation of the correct show command used in order to display the dhcp snooped mac/arp associations.

2017-12-12T15:03:17-0800 2017-12-12T18:11:19-0800 https://support.ruckuswireless.com/articles/000006913 2017-12-12T15:03:21-0800 monthly 0.8 admin,premium knowledge_article_2908 knowledge_article_2908 2017-12-12T15:03:21-0800 000006913 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What are the PoE firmware versions for FastIron product families? Check the PoE firmware version installed in the system by the CLI command<code style="color: red; font-size: 13px;"> show inline power detail </code>. Example output as shown in<code style="color: red; font-size: 13px;"> show inline power detail</code> : A.) taken from an SX1600, with FW versions 04.0.0 and 06.0.6 for 802.3af ( 04.0.0 is an old version, it should be upgraded to 06.0.6 ) <code style="color: black; font-size: 13px;">Slot Firmware Version -------------- 1 2 04.0.0 3 04.0.0 4 5 04.0.0 6 7 06.0.6 8 11 12 04.0.0 13 14 04.0.0 15 04.0.0 16 04.0.0</code> ... B.) Taken from a FCX stack with FW 02.1.0 for 802.3af/802.3at PoE Details Info. On Stack 1 : <code style="color: black; font-size: 13px;">General PoE Data: +++++++++++++++++ Firmware Version -------- 02.1.0</code>

PoE firmware versions for FastIron product families

2017-12-12T15:03:21-0800 2017-12-12T18:11:07-0800 https://support.ruckuswireless.com/articles/000006963 2017-12-12T15:03:25-0800 monthly 0.8 admin,premium knowledge_article_2902 knowledge_article_2902 2017-12-12T15:03:25-0800 000006963 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure the device to perform command authorization and command accounting for console commands? To configure the device to perform command authorization and command accounting for console commands, enter the following: Brocade(config)# enable aaa console Example: aaa authentication enable default radius local aaa authentication login default radius local enable aaa console ip address 10.200.128.13 255.255.255.0 dynamic ip default-gateway 10.200.128.1 username test password testing1234 Syntax: enable aaa console CAUTION: If you have previously configured the device to perform command authorization using a RADIUS server, entering the enable aaa console command may prevent the execution of any subsequent commands entered on the console. This happens because RADIUS command authorization requires a list of allowable commands from the RADIUS server. This list is obtained during RADIUS authentication. For console sessions, RADIUS authentication is performed only if you have configured Enable authentication and specified RADIUS as the authentication method (for example, with the aaa authentication enable default radius command). If RADIUS authentication is never performed, the list of allowable commands is never obtained from the RADIUS server. Consequently, there would be no allowable commands on the console. RADIUS Other Considerations below: Entering privileged EXEC mode after a Telnet or SSH login By default, a user enters User EXEC mode after a successful login through Telnet or SSH. Optionally, you can configure the device so that a user enters Privileged EXEC mode after a Telnet or SSH login. To do this, use the following command: Brocade(config)# aaa authentication login privilege-mode Syntax: aaa authentication login privilege-mode The user privilege level is based on the privilege level granted during login. Configuring enable authentication to prompt for password only. If enable authentication is configured on the device, when a user attempts to gain Super User access to the Privileged EXEC and CONFIG levels of the CLI, by default he or she is prompted for a username and password. You can configure the Brocade device to prompt only for a password. The device uses the username entered at login, if one is available. If no username was entered at login, the device prompts for both username and password. To configure the Brocade device to prompt only for a password when a user attempts to gain Super User access to the Privileged EXEC and CONFIG levels of the CLI. Brocade(config)# aaa authentication enable implicit-user Syntax: [no] aaa authentication enable implicit-user RADIUS authorization Brocade devices support RADIUS authorization for controlling access to management functions in the CLI. Two kinds of RADIUS authorization are supported: • Exec authorization determines a user privilege level when they are authenticated • Command authorization consults a RADIUS server to get authorization for commands entered by the user Configuring exec authorization When RADIUS exec authorization is performed, the Brocade device consults a RADIUS server to determine the privilege level of the authenticated user. To configure RADIUS exec authorization on the Brocade device, enter the following command: Brocade(config)# aaa authorization exec default radius Syntax: aaa authorization exec default radius | none If you specify none, or omit the aaa authorization exec command from the device configuration, no exec authorization is performed. ---------- Note: If the aaa authorization exec default radius command exists in the configuration, following successful authentication the device assigns the user the privilege level specified by the foundry-privilege-level attribute received from the RADIUS server. ---------- If the aaa authorization exec default radius command does not exist in the configuration, then the value in the foundry-privilege-level attribute is ignored, and the user is granted Super User access. Also note that in order for the aaa authorization exec default radius command to work, either the aaa authentication enable default radius command, or the aaa authentication login privilege-mode command must also exist in the configuration. Configuring command authorization When RADIUS command authorization is enabled, the Brocade device consults the list of commands supplied by the RADIUS server during authentication to determine whether a user can execute a command he or she has entered. You enable RADIUS command authorization by specifying a privilege level whose commands require authorization. For example, to configure the Brocade device to perform authorization for the commands available at the Super User privilege level (that is; all commands on the device), enter the following command: Brocade(config)# aaa authorization commands 0 default radius Syntax: aaa authorization commands <privilege-level> default radius | tacacs+ | none The <privilege-level> parameter can be one of the following: • 0 – Authorization is performed (that is, the Brocade device looks at the command list) for commands available at the Super User level (all commands) • 4 – Authorization is performed for commands available at the Port Configuration level (port-config and read-only commands) • 5 – Authorization is performed for commands available at the Read Only level (read-only commands) ---------- Note: RADIUS command authorization can be performed only for commands entered from Telnet or SSH sessions, or from the console. No authorization is performed for commands entered at the Web Management Interface. ---------- Note: Since RADIUS command authorization relies on the command list supplied by the RADIUS server during authentication, you cannot perform RADIUS authorization without RADIUS authentication. ---------- Command authorization and accounting for console commands The Brocade device supports command authorization and command accounting for CLI commands entered at the console.

How to configure the device to perform command authorization and command accounting for console commands?

2017-12-12T15:03:25-0800 2017-12-12T18:10:59-0800 https://support.ruckuswireless.com/articles/000006957 2017-12-12T15:03:25-0800 monthly 0.8 admin,premium knowledge_article_2900 knowledge_article_2900 2017-12-12T15:03:25-0800 000006957 Validated (External) Premium Fastiron ws series;Fastiron cx series;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration Configuration, FastIron WS Series, FastIron CX Series How do I enable SSH access to FastIron products? 1. Enable the SSH server Fastiron(config)# crypto key gen Creating key pair, please wait... Key pair is successfully created 2. Create a user Fastiron(config)# username <username> password <password> 3. Enable the AAA Fastiron(config)# aaa authentication login default local 4. Create Super User privilege level or enable password (optional) Brocade(config)# enable super-user-password <password>

How do I enable SSH access to FastIron products?

2017-12-12T15:03:25-0800 2017-12-12T18:10:56-0800 https://support.ruckuswireless.com/articles/000006958 2017-12-12T15:03:25-0800 monthly 0.8 admin,premium knowledge_article_2899 knowledge_article_2899 2017-12-12T15:03:25-0800 000006958 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches Configuration Configuration, FastIron CX Series How to verify and configure a default stacking port on FCX to function as a data port? By default, the 4-byte Ethernet preamble for the Ethernet frame is used when a port is configured as a default stacking port. This is done to compensate for extra overhead caused by the stacking protocol. To use a default stacking port as a regular data port, the Ethernet preamble must be explicitly set to the standard 8-byte length by using the long-preamble command. See the below example: # show module Module Status Ports Starting MAC U1:M1 FCX-24GS-F 24-port Management Module OK 24 0024.3878.cbc0 U1:M2 FCX-2XGC 2-port 16G Module (2-CX4) OK 2 0024.3878.cbd9 Verifying default stacking port with 4-byte Ethernet preamble # dm pp-port-ctrl 1/2/1 status port 1/2/1: dev 0, dev-port=24, Mac Ctrl addr=8806000, val=783 2FB B839 PortEn [0]= True MacReset [1]= normal ForceLinkDown [2]= False ForceLinkPass [3]= False TxIPGIMode [6:7]= 2 RxFlowCtrlEn [8]= True TxFlowCtrlEn [9]= True RxCrcCheckEn [10]= True PeriodicXonEn [11]= False PreambleLengthRx [12]= 4 bytes PreambleLengthTx [13]= 4 bytes PaddingDisable [14]= False MibCntDisable [15]= False FrameSizeLimit/2 [32:44]= 763 XGMIILoopbackEn [46]= False SrcAddrLow[7:0] [64:71]= 0x39 uniDirecttionEn [72]= False FixedIPGBase [74]= 12 bytes PeriodicXoffEn [75]= True port 1/2/1: dev 0, dev-port=24, regAddr=880600C, status value=14 (ReadOnly) LinkUp [0]= down RemoteFault [1]= False LocalFault [2]= True PortRxPause [6]= False PortTxPause [7]= False PortBufFull [8]= False Tx queue reg addr=1803080, val=AFFFF, TXq is enabled PortEn = 1 (Bit0 of MAC Control Reg0 8806000) ---------- Note: PreambleLengthRx and PreambleLengthTx are showing 4 bytes. ---------- Configuring a default stacking port to function as a data port with 8-byte Ethernet preamble: (config)# int e 1/2/1 (config-if-e10000-cx4-1/2/1)# long-preamble ---------- Note: Running config will show following after the changes made: ---------- ! interface ethernet 1/2/1 long-preamble ! # dm pp-port-ctrl 1/2/1 status port 1/2/1: dev 0, dev-port=24, Mac Ctrl addr=8806000, val=3783 2FB B839 PortEn [0]= True MacReset [1]= normal ForceLinkDown [2]= False ForceLinkPass [3]= False TxIPGIMode [6:7]= 2 RxFlowCtrlEn [8]= True TxFlowCtrlEn [9]= True RxCrcCheckEn [10]= True PeriodicXonEn [11]= False PreambleLengthRx [12]= 8 bytes PreambleLengthTx [13]= 8 bytes PaddingDisable [14]= False MibCntDisable [15]= False FrameSizeLimit/2 [32:44]= 763 XGMIILoopbackEn [46]= False SrcAddrLow[7:0] [64:71]= 0x39 uniDirecttionEn [72]= False FixedIPGBase [74]= 12 bytes PeriodicXoffEn [75]= True port 1/2/1: dev 0, dev-port=24, regAddr=880600C, status value=14 (ReadOnly) LinkUp [0]= down RemoteFault [1]= False LocalFault [2]= True PortRxPause [6]= False PortTxPause [7]= False PortBufFull [8]= False Tx queue reg addr=1803080, val=AFFFF, TXq is enabled ---------- Note: PreambleLengthRx and PreambleLengthTx are now showing 8 bytes. ----------

How to verify and configure a default stacking port on FCX to function as a data port?

2017-12-12T15:03:25-0800 2017-12-12T18:10:54-0800 https://support.ruckuswireless.com/articles/000006959 2017-12-12T15:03:25-0800 monthly 0.8 admin,premium knowledge_article_2898 knowledge_article_2898 2017-12-12T15:03:25-0800 000006959 Validated (External) Premium Fastiron ws series;Fastiron cx series;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration Configuration, FastIron WS Series, FastIron CX Series What is the maximum number of trunk groups and valid number of ports per group running FI 7.2.02? <table border="1" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1"> Model </td><td colspan="1" rowspan="1"> Maximum Number of Gbps Trunk Groups </td><td colspan="1" rowspan="1"> Valid Number of Ports In a Group </td></tr><tr><td colspan="1" rowspan="1"> FCX624 and FCX648 </td><td colspan="1" rowspan="1"> 32 </td><td colspan="1" rowspan="1"> 2, 3, 4, 5, 6, 7, or 8 </td></tr><tr><td colspan="1" rowspan="1"> FESX424 </td><td colspan="1" rowspan="1"> 13 </td><td colspan="1" rowspan="1"> 2, 3, or 4 </td></tr><tr><td colspan="1" rowspan="1"> FESX624 </td><td colspan="1" rowspan="1"> 13 </td><td colspan="1" rowspan="1"> 2, 3, 4, 5, 6, 7, or 8 </td></tr><tr><td colspan="1" rowspan="1"> FESX448 </td><td colspan="1" rowspan="1"> 25 </td><td colspan="1" rowspan="1"> 2, 3, or 4 </td></tr><tr><td colspan="1" rowspan="1"> FESX648 </td><td colspan="1" rowspan="1"> 25 </td><td colspan="1" rowspan="1"> 2, 3, 4, 5, 6, 7, or 8 </td></tr><tr><td colspan="1" rowspan="1"> FGS624 (non-STK) </td><td colspan="1" rowspan="1"> 13 </td><td colspan="1" rowspan="1"> 2, 3, 4, 5, 6, 7, or 8 </td></tr><tr><td colspan="1" rowspan="1"> FGS648 (non-STK) </td><td colspan="1" rowspan="1"> 25 </td><td colspan="1" rowspan="1"> 2, 3, 4, 5, 6, 7, or 8 </td></tr><tr><td colspan="1" rowspan="1"> FGS624-STK and FGS648-STK </td><td colspan="1" rowspan="1"> 32 </td><td colspan="1" rowspan="1"> 2, 3, 4, 5, 6, 7, or 8 </td></tr><tr><td colspan="1" rowspan="1"> FLS624 (non-STK) </td><td colspan="1" rowspan="1"> 13 </td><td colspan="1" rowspan="1"> 2, 3, 4, 5, 6, 7, or 8 </td></tr><tr><td colspan="1" rowspan="1"> FLS648 (non-STK) </td><td colspan="1" rowspan="1"> 25 </td><td colspan="1" rowspan="1"> 2, 3, 4, 5, 6, 7, or 8 </td></tr><tr><td colspan="1" rowspan="1"> FLS624-STK and FLS648-STK </td><td colspan="1" rowspan="1"> 32 </td><td colspan="1" rowspan="1"> 2, 3, 4, 5, 6, 7, or 8 </td></tr><tr><td colspan="1" rowspan="1"> FSX, SX 800 and SX 1600 </td><td colspan="1" rowspan="1"> 31 </td><td colspan="1" rowspan="1"> IPv4 devices: 2, 3, or 4 IPv6 devices: 2, 3, 4, 5, 6, 7 or 8 </td></tr><tr><td colspan="1" rowspan="1"> FWS624 </td><td colspan="1" rowspan="1"> 13 </td><td colspan="1" rowspan="1"> 2, 3, 4, 5, 6, 7, or 8 </td></tr><tr><td colspan="1" rowspan="1"> FWS648 </td><td colspan="1" rowspan="1"> 25 </td><td colspan="1" rowspan="1"> 2, 3, 4, 5, 6, 7, or 8 </td></tr></tbody></table>

What is the maximum number of trunk groups and valid number of ports per group running FI 7.2.02?

2017-12-12T15:03:25-0800 2017-12-12T18:10:53-0800 https://support.ruckuswireless.com/articles/000006965 2017-12-12T15:03:25-0800 monthly 0.8 admin,premium knowledge_article_2897 knowledge_article_2897 2017-12-12T15:03:25-0800 000006965 Validated (External) Premium Brocade eos products Brocade EOS Products Why does port state say BLOCKING on FastIron products? In the output of<code style="color: red; font-size: 13px;"> show int brief</code>, Blocked state has just one meaning. Spanning-tree has made a blocking decision on the local switch. For example: <code style="color: black; font-size: 13px;">FastIron#</code><code style="color: red; font-size: 13px;"> show int brief</code> <code style="color: black; font-size: 13px;">Port Link State Dupl Speed Trunk Tag Pvid Pri MAC Name 1/1/1 Up Forward Full 1G 1 No 1 0 0024.38bf.5500 <code style="color: red; font-size: 13px;">1/1/2 Up Blocked Full 1G 1 No 1 0 0024.38bf.5500 </code> 1/1/3 Down None None None None No 1 0 0024.38bf.5502 1/1/4 Down None None None None No 1 0 0024.38bf.5503 1/1/5 Down None None None None No 1 0 0024.38bf.5504 <...omitted...></code> In the output <code style="color: red; font-size: 13px;">of show interface</code>, the "BLOCKING" state has two potential meanings. The first is the same as that in<code style="color: red; font-size: 13px;"> show int brief</code>. One of the variants of spanning-tree has made a blocking decision as per its algorithm. Notice that interface state and line protocol are both up, there is a packet count and other signs of a live interface. <code style="color: black; font-size: 13px;">FastIron# <code style="color: red; font-size: 13px;">show int eth 1/1/2</code> GigabitEthernet1/1/2 is up, line protocol is up Hardware is GigabitEthernet, address is 0024.38bf.5500 (bia 0024.38bf.5501) Configured speed auto, actual 1Gbit, configured duplex fdx, actual fdx Configured mdi mode AUTO, actual MDI Member of L2 VLAN ID 1, port is untagged, port state is BLOCKING BPDU guard is Disabled, ROOT protect is Disabled Link Error Dampening is Disabled STP configured to ON, priority is level0, mac-learning is enabled Flow Control is config enabled, oper enabled, negotiation disabled Mirror disabled, Monitor disabled Member of active trunk ports 1/1/1,1/1/2, secondary port, primary port is 1/1/1 Member of configured trunk ports 1/1/1,1/1/2, secondary port, primary port is 1/1/1 No port name Inter-Packet Gap (IPG) is 96 bit times MTU 1500 bytes, encapsulation ethernet 300 second input rate: 761960312 bits/sec, 1488203 packets/sec, 100.00% utilization 300 second output rate: 1024 bits/sec, 1 packets/sec, 0.00% utilization 97673190546 packets input, 6251086008110 bytes, 0 no buffer Received 5 broadcasts, 97673190541 multicasts, 0 unicasts 0 input errors, 0 CRC, 0 frame, 0 ignored 0 runts, 0 giants 94125 packets output, 12046985 bytes, 0 underruns Transmitted 64 broadcasts, 94061 multicasts, 0 unicasts 0 output errors, 0 collisions Relay Agent Information option: Disabled</code> There is another meaning for<code style="color: black; font-size: 13px;"> port state is BLOCKING</code>. It might mean the interface is completely offline. Note in the output below that<code style="color: red; font-size: 13px;"> GigabitEthernet1/1/5 is down, line protocol is down</code>. So there is no media connected to this interface, so far as FastIron can tell. FastIron will list the port state as "BLOCKING" in this case: <code style="color: black; font-size: 13px;">FastIron# show int eth 1/1/5 <code style="color: red; font-size: 13px;">GigabitEthernet1/1/5 is down, line protocol is down </code> Hardware is GigabitEthernet, address is 0024.38bf.5504 (bia 0024.38bf.5504) Configured speed auto, actual unknown, configured duplex fdx, actual unknown Configured mdi mode AUTO, actual unknown Member of L2 VLAN ID 1, port is untagged, port state is BLOCKING BPDU guard is Disabled, ROOT protect is Disabled Link Error Dampening is Disabled STP configured to ON, priority is level0, mac-learning is enabled Flow Control is config enabled, oper disabled, negotiation disabled Mirror disabled, Monitor disabled Not member of any active trunks Not member of any configured trunks No port name Inter-Packet Gap (IPG) is 96 bit times MTU 1500 bytes, encapsulation ethernet 300 second input rate: 0 bits/sec, 0 packets/sec, 0.00% utilization 300 second output rate: 0 bits/sec, 0 packets/sec, 0.00% utilization 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 multicasts, 0 unicasts 0 input errors, 0 CRC, 0 frame, 0 ignored 0 runts, 0 giants 0 packets output, 0 bytes, 0 underruns Transmitted 0 broadcasts, 0 multicasts, 0 unicasts 0 output errors, 0 collisions Relay Agent Information option: Disabled</code>

Why does port state say BLOCKING on FastIron products?

2017-12-12T15:03:25-0800 2017-12-12T18:10:51-0800 https://support.ruckuswireless.com/articles/000006967 2017-12-12T15:03:27-0800 monthly 0.8 admin,premium knowledge_article_2893 knowledge_article_2893 2017-12-12T15:03:27-0800 000006967 Validated (External) Premium Ruckus icx switches Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches Why do I see this IGMP error message type- igmp: warning! v3 mbr, bad g-rec1, #grp=1, g=224.0.0.251? Referencing RFC 3171 stipulates that the range 224.0.0.0 through 224.0.0.255 should not be used for regular multicasting applications. For such groups, we will not create HW entries and any forwarding will be done by the CPU. So the side effect for significant traffic for this group, will cause high CPU and you will see the below message type in the log: igmp: warning! v3 mbr, bad g-rec1, #grp=1, g=224.0.0.251

Why do I see this IGMP error message type- igmp: warning! v3 mbr, bad g-rec1, #grp=1, g=224.0.0.251?

2017-12-12T15:03:27-0800 2017-12-12T18:10:46-0800 https://support.ruckuswireless.com/articles/000006996 2017-12-12T15:03:29-0800 monthly 0.8 admin,premium knowledge_article_2891 knowledge_article_2891 2017-12-12T15:03:29-0800 000006996 Validated (External) Premium Icx 7250;Ruckus ICX 7250 Campus Switches Configuration Configuration, ICX 7250 What is the temperature range for ICX7250? The average temperature range for 7250s is 70°C to 95°C. So if the ICX7250 is running upto 95°C, it would not impact the functionality of the device. For temperature threshold levels on ICX7250, refer to the following, <a href="http://www.brocade.com/content/html/en/hardware-installation-guide/fastiron-08030b-icx7250-installguide/GUID-3AD069C9-2042-4D91-9299-A3FB9BD069D8.html" target="_blank">http://www.brocade.com/content/html/en/hardware-installation-guide/fastiron-08030b-icx7250-installguide/GUID-3AD069C9-2042-4D91-9299-A3FB9BD069D8.html</a> By default, the warning temperature level is 10 degrees less than the critical temperature level. The fan speed is high when the temperature level for a device reaches a high threshold level. The fan speed is decreased when the temperature reaches a low threshold level. To change the temperature at which the device sends a log, enter the following command, Brocade# temperature warning 1 82 Syntax: temperature warning stack-idvalue The stack-idvalue is the Unit ID. The value variable is the temperature warning level, in Celsius. This cannot be set to a level higher than the maximum value allowed by your device. The temperature warning level must be at least five Celsius degrees less than the temperature shutdown level, which is automatically set by the device. The following console and syslog message is displayed when the temperature reaches the warning level: !!! Temperature is over warning level on stack unit 1!!!

High temperature threshold levels on ICX7250

2017-12-12T15:03:29-0800 2017-12-12T18:10:43-0800 https://support.ruckuswireless.com/articles/000007023 2017-12-12T15:03:29-0800 monthly 0.8 admin,premium knowledge_article_2890 knowledge_article_2890 2017-12-12T15:03:29-0800 000007023 Validated (External) Premium Ruckus icx switches Configuration;Firmware;System network management;Known issues and workarounds Configuration, Firmware, System Network Management, Known Issues and Workarounds, Ruckus ICX Switches Upgrading New Brocade AP 7131 from ver 5.1 to 5.3 fails and cannot be upgraded either by CLI or web GUI. <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">Do not use the .bin image for upgrading from 5.1 to 5.3 code. <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">.bin code is only used for upgrading from 4.x to 5.x code.

Update error: Bad image header, Invalid image file

2017-12-12T15:03:29-0800 2017-12-12T18:10:41-0800 https://support.ruckuswireless.com/articles/000007076 2017-12-12T15:03:30-0800 monthly 0.8 admin,premium knowledge_article_2888 knowledge_article_2888 2017-12-12T15:03:30-0800 000007076 Validated (External) Premium Brocade eos products Configuration;System network management Configuration, System Network Management, Brocade EOS Products What are the DSCP and CoS Configuration Limitations <div style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">When an ACL is configured on a port without remarking and global DSCP remarking is enabled, the global DSCP remarking is enabled for the permitted traffic.</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">- DSCP and CoS global remarking are supported on the same interface together.</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">- DSCP and CoS global remarking cannot coexist with MAC filters and MAC-based VLANs.</div> <div style="text-align: left; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">- DSCp cannot be configure on a Vlan, only on interfaces. The following table summarizes the behavior when the remarking is set. <table border="1" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">DSCP </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Remarking set </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Remarking set </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Not set </td></tr><tr><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">CoS </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Remarking set </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Not set </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Remarking set </td></tr><tr><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">DSCP action </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Remark DSCP at the ingress </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Remark DSCP at the ingress </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">N/A </td></tr><tr><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">PCP action </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Remark PCP at the egress </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">N/A </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Remark PCP at the egress </td></tr><tr><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Traffic class </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Apply the TC equivalent to DSCP </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Apply the TC equivalent to DSCP </td><td colspan="1" rowspan="1" style="width: 156px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;">Apply the TC equivalent to PCP </td></tr></tbody></table> </div>

DSCP and CoS Configuration Limitations.

2017-12-12T15:03:30-0800 2017-12-12T18:10:38-0800 https://support.ruckuswireless.com/articles/000007294 2017-12-12T15:03:32-0800 monthly 0.8 admin,premium knowledge_article_2884 knowledge_article_2884 2017-12-12T15:03:32-0800 000007294 Validated (External) Premium Ruckus icx switches Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches Type 0 PHY error logs on console As a last resort, the cable can be replaced.

Continuous-print-of-Type-0-PHY-error-logs-on-console

2017-12-12T15:03:32-0800 2017-12-12T18:10:32-0800 https://support.ruckuswireless.com/articles/000007292 2017-12-12T15:03:32-0800 monthly 0.8 admin,premium knowledge_article_2883 knowledge_article_2883 2017-12-12T15:03:32-0800 000007292 Validated (External) Premium Icx 7750;RUCKUS ICX 7750 Campus Switches Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ICX 7750 Switch reset on ICX7750 stack when configuring "no raguard trust" on disabled port 2/1/1 Upgrade to a version of code that contains the fix.

Removing the Configuration of raguard trust can cause active stack unit to reset.

2017-12-12T15:03:32-0800 2017-12-12T18:10:31-0800 https://support.ruckuswireless.com/articles/000006686 2017-12-12T15:44:53-0800 monthly 0.8 admin,premium knowledge_article_2878 knowledge_article_2878 2017-12-12T15:44:53-0800 000006686 Validated (External) Premium Ruckus icx switches;Brocade eos products System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products BNA Product Status and Traffic Dashboard Shows Blank Screen Upgrade to a version of code that contains the fix. Currently Network Advisor 14.0.0

BNA Product Status and Traffic Dashboard Shows Blank Screen

2017-12-12T15:44:53-0800 2017-12-12T18:10:24-0800 https://support.ruckuswireless.com/articles/000006806 2017-12-12T15:44:53-0800 monthly 0.8 admin,premium knowledge_article_2872 knowledge_article_2872 2017-12-12T15:44:53-0800 000006806 Validated (External) Premium Icx 7750;RUCKUS ICX 7750 Campus Switches Configuration Configuration, ICX 7750 How to configure 40 Gbps Breakout Ports? <h3>Configure 40 Gbps Breakout Ports</h3> By default, all main 40 Gbps ports are configured to come up in 40 Gbps mode. Once ports are cabled for breakout, configure the ports using the breakout ethernet command at the global configuration level. ---------- Note: You should remove any interface-level configuration before configuring breakout. ---------- Note: If the device is in cut-through mode and you attempt to configure breakout, an error is returned. Cut-through must be disabled to return the unit to store-and-forward mode before breakout is configured. --------- The breakout ethernet command first checks for existing configuration on the port. If existing configuration is detected, an error message similar to the following is displayed to indicate that prior configuration must be removed. Device# configure terminal Device(config)# breakout ethernet 1/1/11 Error: Port 1/1/11 is tagged Once any previous configuration is removed, the breakout ethernet command must be reissued. The resulting configuration must be saved, and the unit must then be reloaded before the four 10 Gbps sub-ports are created and accessible. For example, to configure ports 1/3/1 through 1/3/6 for breakout, issue the following commands: Device# configure terminal Device(config)# breakout ethernet 1/3/1 to ethernet 1/3/6 The following example configures breakout on port 1/1/5. On the first configuration attempt, an error is returned. The interface-level configuration is removed. Then the write-memory command is issued, followed by the reload command, to successfully configure the port for breakout. Device# configure terminal Device(config)# breakout ethernet 1/1/5 Error: Port 1/1/5 has sflow forwarding Device(config)# interface ethernet 1/1/5 Device(config-if-e40000-1/1/5)# no sflow forwarding Device(config-if-e40000-1/1/5)# end Device# write memory Write startup-config done. Device# configure terminal Device(config)# breakout ethernet 1/1/5 Reload required. Please write memory and then reload or power cycle. Device(config)# write memory Write startup-config done. Device(config)# Flash Memory Write (8192 bytes per dot) . Copy Done. Device(config)# end Device# reload

How to configure 40 Gbps Breakout Ports?

2017-12-12T15:44:53-0800 2017-12-12T18:10:15-0800 https://support.ruckuswireless.com/articles/000006897 2017-12-12T15:44:55-0800 monthly 0.8 admin,premium knowledge_article_2870 knowledge_article_2870 2017-12-12T15:44:55-0800 000006897 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products How to configure MAC based filtering? For MAC based filtering configuration to work, the following command is required: <code style="color: black; font-size: 13px;">enable acl-per-port-per-vlan</code> This command requires a reload for it to take effect. A sample configuration is below: On global configuration mode, configure: <code style="color: black; font-size: 13px;">mac filter 1 permit 0010.4900.0000 0000.00ff.ffff any</code> then on the interface: <code style="color: black; font-size: 13px;"> mac filter-group 1</code> If multiple filter groups need to be configured on a interface, be sure to follow the command syntax. For example: <code style="color: black; font-size: 13px;"> mac filter 1 permit any ffff.ffff.ffff ffff.ffff.ffff mac filter 2 permit any 0180.c200.0000 ffff.ffff.fff0 mac filter 3 permit any 0009.0f09.0008 ffff.ffff.ffff</code> then on the interface: <code style="color: black; font-size: 13px;"> mac filter-group 1 to 3</code>

How to configure MAC based filtering?

2017-12-12T15:44:55-0800 2017-12-12T18:10:12-0800 https://support.ruckuswireless.com/articles/000006896 2017-12-12T15:44:55-0800 monthly 0.8 admin,premium knowledge_article_2867 knowledge_article_2867 2017-12-12T15:44:55-0800 000006896 Validated (External) Premium Ruckus icx switches;Fastiron ws series;Fastiron cx series;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Ruckus ICX Switches, FastIron WS Series, FastIron CX Series How can I recover from a lost password on FastIron devices? <div>For standalone devices:</div> <div> </div> <div>Recovery from a lost password requires direct access to the serial port and a system reset. ----------</div> <div>Note: User can perform this procedure only from the CLI.</div> <div>----------</div> <div>Follow the steps given below to recover from a lost password:</div> <div> </div> <div>1. Start a CLI session over the serial interface to the device.</div> <div>2. Reboot the device.</div> <div>3. At the initial boot prompt at system startup, enter “<code>b</code>” to enter the boot monitor mode.</div> <div>4. Enter “<code>no password</code>” at the prompt. (You cannot abbreviate this command.) This command will cause the device to bypass the system password check.</div> <div>5. Enter “<code>boot system flash primary</code>” at the prompt. On ICX 6430 and ICX 6450 devices, enter ”<code>boot_primary</code>”.</div> <div>6. After the console prompt reappears, assign a new password.</div> <div> </div> <div>For stacked devices:</div> <div>Some important points to know:</div> <div>1. Reloading the active controller reloads the entire stack.</div> <div>2. Reloading the standby controller reloads the entire stack.</div> <div>3. Reloading a member unit does not reload the entire stack.</div> <div> In order to recover from a lost password, the stack needs to be reloaded. In order to reload the stack, the active or standby controller needs to be reloaded. On the front panel of the switch, there is an LED marked MS (member switch) or, on FCX devices, A/S (active/standby). The way to read this LED is as follows: If the device is the Active Controller, the LED will be on and will be green. If the device is the Standby Controller, the LED will be on and will be amber. If the device is a member (or standalone) unit, the LED will be off.</div> <div> Follow the steps given below to recover from a lost password:</div> <div>1. Start a CLI session over the serial interface to the Active Controller.</div> <div>2. Power off/on switch that has MS (or A/S) LED on and green or on and amber.</div> <div>3. Stop the boot cycle by entering “b” at the initial boot prompt upon startup.</div> <div>4. Enter “no password” at the prompt. (You cannot abbreviate this command.) This command will cause the device to bypass the system password check.</div> <div>5. Enter “boot system flash primary” at the prompt. On ICX 6430 and ICX 6450 devices, enter ”boot_primary”.</div> <div>6. After the console prompt reappears, assign a new password.</div> <div> <code>Monitor></code> <code>Monitor>no password</code> <code>OK! Skip password check when the system is up.</code> <code>Monitor>boot sys flash pri</code></div>

How can I recover from a lost password on FastIron devices?

2017-12-12T15:44:55-0800 2017-12-12T18:10:08-0800 https://support.ruckuswireless.com/articles/000007182 2017-12-12T15:45:04-0800 monthly 0.8 admin,premium knowledge_article_2854 knowledge_article_2854 2017-12-12T15:45:04-0800 000007182 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers Configuring Level 2 Force on remote AP prevents data traffic flow. Users can resolve this issue by removing the extra configuration within the profile, as seen below: RFS6000(config-profile-default-br650)# no controller host 10.1.1.10 level 2 force RFS6000(config-profile-default-br650)# commit RFS6000(config-profile-default-br650)# controller host 10.1.1.10 RFS6000(config-profile-default-br650)# commit RFS6000(config-profile-default-br650)# wr mem

Configuring Level 2 Force on remote AP prevents data traffic flow.

2017-12-12T15:45:04-0800 2017-12-12T18:09:48-0800 https://support.ruckuswireless.com/articles/000007186 2017-12-12T15:45:04-0800 monthly 0.8 admin,premium knowledge_article_2852 knowledge_article_2852 2017-12-12T15:45:04-0800 000007186 Validated (External) Premium Mobility rfs controllers Configuration Configuration, Mobility RFS Controllers License installation has failed on Brocade Mobility RFS 6000 / 7000. In order to add the license, leave the Feature Name blank. The feature name is already associated and incorporated in the license key itself. Therefore, adding the feature name is not necessary. Remove the feature name and leave this field blank. Enter the license key only and click Install. The license will now be installed and will display in the license table, where it will display type, license count (a number for AP / AAP licenses, 'activated' for feature licenses), and currently consumed volume.

Brocade Mobility RFS 6000 and 7000 - Licensing.

2017-12-12T15:45:04-0800 2017-12-12T18:09:45-0800 https://support.ruckuswireless.com/articles/000007187 2017-12-12T15:45:07-0800 monthly 0.8 admin,premium knowledge_article_2849 knowledge_article_2849 2017-12-12T15:45:07-0800 000007187 Validated (External) Premium Mobility access points;Mobility rfs controllers Configuration Configuration, Mobility Access Points, Mobility RFS Controllers APs do not show up on the controller dashboard To prevent the MiNT packets from being fragmented, we need to reduce the maximum packet size, so that the additional MPLS header will not cause the overall frame to become too big and be split. To set the MiNT MTU size, perform the following actions: 1. Connect to the controller CLI and go to configuration mode 2. Under configuration mode, enter the following commands: mint-policy global-default mtu 1492 3. Then commit and save the configuration This will decrease the overall MiNT MTU size to allow the additional headers to be added while still remaining below a total MTU of 1500. This should normally resolve the adoption issues, and the APs should now be visible on the Dashboard and the device lists of the controller.

Brocade Mobility RFS4000/6000/7000, Brocade Mobility AP7131xx/650/6511. AP adoption.

2017-12-12T15:45:07-0800 2017-12-12T18:09:41-0800 https://support.ruckuswireless.com/articles/000007220 2017-12-12T15:45:08-0800 monthly 0.8 admin,premium knowledge_article_2841 knowledge_article_2841 2017-12-12T15:45:08-0800 000007220 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches OSPF AREAS AND ABR CONFIGURATION <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 828.14px; text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">YouTube video: <a href="https://www.youtube.com/watch?v=xY0SUP-6vFA&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=xY0SUP-6vFA&feature=youtu.be</a></div> </td></tr></tbody></table>

BROCADE CAMPUS FEATURE EXPLAINER SERIES:

2017-12-12T15:45:08-0800 2017-12-12T18:09:29-0800 https://support.ruckuswireless.com/articles/000007218 2017-12-12T15:45:08-0800 monthly 0.8 admin,premium knowledge_article_2840 knowledge_article_2840 2017-12-12T15:45:08-0800 000007218 Validated (External) Premium Ruckus icx switches Performance;System network management Performance, System Network Management, Ruckus ICX Switches OSPF LINK COST AND REFERENCE BANDWIDTH <table class="sectionContent" style="width: 1003.7px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 828.14px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">YouTube video: <a href="https://www.youtube.com/watch?v=nWAGMtluKj0&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=nWAGMtluKj0&feature=youtu.be</a></div> </td></tr></tbody></table> </td></tr></tbody></table>

BROCADE CAMPUS FEATURE EXPLAINER SERIES:

2017-12-12T15:45:08-0800 2017-12-12T18:09:28-0800 https://support.ruckuswireless.com/articles/000007283 2017-12-12T15:45:10-0800 monthly 0.8 admin,premium knowledge_article_2835 knowledge_article_2835 2017-12-12T15:45:10-0800 000007283 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products What are the main differences between the FCX Series data center models and campus models? <ul><li>There are no Power over Ethernet (PoE) ports on the data center models.</li><li>There are no dedicated stacking ports on the data center models. Instead, 10 GbE ports are used for stacking.</li><li>The data center models offer four optional 10 GbE ports, while the campus models offer two optional 10 GbE ports.</li><li>The 10 GbE ports on the data center models are SFP+, while the 10 GbE ports on the campus models are XFP.</li><li>The campus models have built-in SFP combo ports, while the data center models offer SFP combo ports optionally as a module.</li><li>The data center models have reversible front-to-back airflow, while the campus models have side-to-back airflow.</li><li>Both the data center and campus models have removable fan assembly, but the data center assembly has four blowers, while the campus assembly has a single blower.</li></ul>

What are the main differences between the FCX Series data center models and campus models?

2017-12-12T15:45:10-0800 2017-12-12T18:09:20-0800 https://support.ruckuswireless.com/articles/000007241 2017-12-12T15:45:10-0800 monthly 0.8 admin,premium knowledge_article_2833 knowledge_article_2833 2017-12-12T15:45:10-0800 000007241 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches Brocade ICX default values and system max <table class="sectionContent" style="width: 1003.7px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 828.14px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;">YouTube video: <a href="https://www.youtube.com/watch?v=9YFFnZ7YKA8&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=9YFFnZ7YKA8&feature=youtu.be</a></div> </td></tr></tbody></table> </td></tr></tbody></table>

Brocade Campus Feature Explainer Series: show default values and system-max commands

2017-12-12T15:45:10-0800 2017-12-12T18:09:17-0800 https://support.ruckuswireless.com/articles/000007291 2017-12-12T15:45:10-0800 monthly 0.8 admin,premium knowledge_article_2829 knowledge_article_2829 2017-12-12T15:45:10-0800 000007291 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches BROCADE CAMPUS ICX LLDP AND LLDP MED DISCOVERY PROTOCOLS Youtube video: <a href="https://www.youtube.com/watch?v=fSKG4N8rt7M&feature=youtu.be" target="_blank">https://www.youtube.com/watch?v=fSKG4N8rt7M&feature=youtu.be</a>

BROCADE CAMPUS ICX LLDP AND LLDP MED DISCOVERY PROTOCOLS

2017-12-12T15:45:10-0800 2017-12-12T18:09:12-0800 https://support.ruckuswireless.com/articles/000006588 2017-12-12T16:04:03-0800 monthly 0.8 admin,premium knowledge_article_2827 knowledge_article_2827 2017-12-12T16:04:03-0800 000006588 Validated (External) Premium Icx 6450;Icx 6610;Icx 6650;Icx 7450;Icx 7750;Fastiron cx series;Ruckus ICX 6610 Campus Switches;Brocade ICX 6650 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches;Brocade FastIron CX Series Switches Configuration Configuration, ICX 6450, ICX 6610, ICX 6650, ICX 7450, ICX 7750, FastIron CX Series What is PIM-SM? The Protocol Independent Multicast (PIM) protocol is a broadcast and pruning multicast protocol that delivers IP multicast datagrams. This protocol employs a reverse path lookup check and pruning to allow source-specific multicast delivery trees to reach all group members. PIM builds a different multicast tree for each source and destination host group. The rendezvous point (RP) is the meeting point for PIM Sparse sources and receivers. A PIM Sparse domain can have multiple RPs, but each PIM Sparse multicast group address can have only one active RP. PIM Sparse switches learn the addresses of RPs. A Brocade ICX family switch uses the RP to forward only the first packet from a group source to the group’s receivers. After the first packet, the switch calculates the shortest path between the receiver and source (the Shortest Path Tree, or SPT) and uses the SPT for subsequent packets from the source to the receiver. Brocade ICX product switches calculate a separate SPT for each source-receiver pair. In a K-12 network, the distribution switch in the district office is configured as the RP for the entire school network. The RP is statically configured on all PIM-enabled routers. When the source is activated in a PIM RP domain, the PIM First Hop (FH) registers the source to the PIM RP. In a school environment, the static RP configuration is simple and easy to manage as compared to dynamic methods in a multicast network. Brocade ICX product family switches also support IPv6 Protocol Independent Multicast (PIM) Sparse. IPv6 PIM Sparse provides multicasting that is especially suitable for widely distributed multicast environments. In an IPv6 PIM Sparse network, an IPv6 PIM Sparse router that is connected to a host that wants to receive information for a multicast group must explicitly send a join request on behalf of the receiver (host).

PIM-SM stands for Protocol Independent Multicast (PIM) Sparse Mode (SM).

2017-12-12T16:04:03-0800 2017-12-12T18:09:07-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvqyCAC?attachment_index=0 2017-12-12T18:09:07-0800 monthly admin,premium knowledge_article_2827 knowledge_article_2827_attachment_1 ka25B000000CdGRQA0_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000006585 2017-12-12T16:04:03-0800 monthly 0.8 admin,premium knowledge_article_2826 knowledge_article_2826 2017-12-12T16:04:03-0800 000006585 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products What is Spanning tree Root Guard and how is it used? <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div">Recovery Once the port stops receiving superior BPDUs, root guard automatically sets the port back to learning and eventually to a forwarding state through the spanning-tree algorithm. ! Configure root guard on the ports connecting to the access switches. SCH-DIST-201(config)# interface ethernet 2/2/3 SCH-DIST-201(config-if-2/2/3)# spanning-tree root-protect SCH-DIST-201# show span root-protect </div>

Root Guard or spanning-tree root-protect.

2017-12-12T16:04:03-0800 2017-12-12T18:09:04-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvqvCAC?attachment_index=0 2017-12-12T18:09:04-0800 monthly admin,premium knowledge_article_2826 knowledge_article_2826_attachment_1 ka25B000000CdGHQA0_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000006587 2017-12-12T16:04:03-0800 monthly 0.8 admin,premium knowledge_article_2825 knowledge_article_2825 2017-12-12T16:04:03-0800 000006587 Validated (External) Premium Brocade eos products System network management System Network Management, Brocade EOS Products What is Ping Latency? If you are concerned with ping latency problems when pinging the management IP of the switch, please consider the following: *If the ping latency is intermittently high (usually very low ~1ms, but spikes to anywhere from 100-300ms), but there are no other symptoms or high CPU, check the attached document. *The type of ping latency described above is normal for our switches for the reasons listed in the attached document that is included in this Article.

Ping latency problems when pinging the management IP.

2017-12-12T16:04:03-0800 2017-12-12T18:09:02-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvqxCAC?attachment_index=0 2017-12-12T18:09:02-0800 monthly admin,premium knowledge_article_2825 knowledge_article_2825_attachment_1 ka25B000000CdGCQA0_Attachment__c.pdf 93924.0 application/pdf https://support.ruckuswireless.com/articles/000006565 2017-12-12T16:04:03-0800 monthly 0.8 admin,premium knowledge_article_2822 knowledge_article_2822 2017-12-12T16:04:03-0800 000006565 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure CDP packets? Cisco Discovery Protocol (CDP) packets are used by Cisco devices to advertise themselves to other Cisco devices. By default, Brocade devices forward these packets without examining their contents. You can configure a Brocade device to intercept and display the contents of CDP packets. This feature is useful for learning device and interface information for Cisco devices in the network. Brocade devices support intercepting and interpreting CDP version 1 and CDP version 2 packets. ---------- Note: The Brocade device can interpret only the information fields that are common to both CDP version 1 and CDP version 2. Note: When you enable interception of CDP packets, the Brocade device drops the packets. As a result, Cisco devices will no longer receive the packets. ---------- <h3 style="font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-weight: bold; display: block;">Enabling interception of CDP packets globally</h3> To enable the device to intercept and display CDP packets, enter the following command at the global CONFIG level of the CLI: device(config)# cdp run Syntax: [no] cdprun The feature is disabled by default. <h3 style="font-family: Arial, Helvetica, sans-serif; font-size: 12.96px; font-weight: bold; display: block;">Enabling interception of CDP packets on an interface</h3> You can disable and enable CDP at the interface level. By default, CDP is enabled on an interface once CDP is enabled on the device. To enable CDP on an interface enter a command such as the following: device(config)# int e 1/2/1 device(config-if-1/2/1)# cdp enable Syntax: [no] cdp enable Reference: For more details related with CDP packets please download and check the Fastiron-08030-adminguide

How to configure CDP packets

2017-12-12T16:04:03-0800 2017-12-12T18:08:54-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvqbCAC?attachment_index=0 2017-12-12T18:08:54-0800 monthly admin,premium knowledge_article_2822 knowledge_article_2822_attachment_1 ka25B000000CdOVQA0_Attachment__c.pdf 2470398.0 application/pdf https://support.ruckuswireless.com/articles/000006610 2017-12-12T16:04:05-0800 monthly 0.8 admin,premium knowledge_article_2819 knowledge_article_2819 2017-12-12T16:04:05-0800 000006610 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What is Digital optical monitoring? Digital optical monitoring configuration limitations ? A Brocade chassis device can monitor a maximum of 24 SFPs and 12 XFPs. ? Brocade ICX 6650, ICX 7450, and ICX 7750 devices allow all ports to support Digital Optical Monitoring (DOM). ? Brocade FCX, FSX (SX), ICX 6610, and ICX 64x0 all support up to 24 ports running DOM. ? Only the FCX 6xx-S and FSX (SX) products support XFP media. Enabling digital optical monitoring To enable optical monitoring on all Brocade-qualified optics installed in the device, use the following command. device(config)# optical-monitor To enable optical monitoring on a specific port, use the following command. device(config)# interface ethernet 1/1/1 device(config-if-e10000-1/1/1)# optical-monitor To enable optical monitoring on a range of ports, use the following command. device(config)# interface ethernet 1/1/1 to 1/1/2 device(config-mif-e10000-1/1/1-1/1/2)# optical-monitor Syntax: [no] optical-monitor Use the no form of the command to disable digital optical monitoring. Setting the alarm interval You can optionally change the interval between which alarms and warning messages are sent. To change the interval, use the following command. Example: device(config)# interface ethernet 1/1/1 to 1/1/2 device(config-mif-e10000-1/1/1-1/1/2)# optical-monitor 10 Syntax: [no] optical-monitor [ alarm-interval ] For alarm-interval, the default is 3 minutes with a 1 minute minimum on all devices except the ICX 6650, ICX 7450, and ICX 7750. These devices have a default and minimum value of 8 minutes. The maximum value for all devices is 65535. ---------- Note: The commands no optical-monitor and optical-monitor 0 perform the same function. That is, they both disable digital optical monitoring. ---------- Displaying information about installed media Use the show media , show media slot , and show media ethernet commands to obtain information about the media devices installed per device, per slot, and per port. The results displayed from these commands provide the Type, Vendor, Part number, Version and Serial number of the SFP, SFP+, or XFP optical device installed in the port. If there is no SFP, SFP+, or XFP optical device installed in a port, the "Type" field will display "EMPTY". On ICX 6430 and ICX 6450 devices, 1G copper ports will always be shown with the type as 1G M-C (Gig-Copper), even if the ports are not connected. Viewing optical monitoring information You can view temperature and power information for qualified XFPs, SFPs, and SFP+ installed in a Fast Iron device. Use the show optic command to view information about an XFP, SFP, or SFP+ installed in a particular port. The following shows example output. Optical monitoring feature will not work in the following scenarios: ? The port is DOWN. ? The port is configured as a stacking port. ? The the optic module does not support optical monitoring. ? For ICX 6430 devices only: – If an SFP+ optic is inserted in an SFP only port, the optic will not initialize. – If an SFP optic is inserted in an SFP+ only port, the optic will not initialize. – If an optic is inserted into a device that supports both SFP and SFP+ optics, use the speed-duplex command to set the port speed correctly. Example: device# show optic 13 Syntax: showoptic port-number Use the show optic slot on a FastIron X Series chassis to view information about all qualified XFPs, SFPs, and SFP+ in a particular slot. The following shows example output: Example: device> show optic slot 4 Syntax: show optic slot slot-number ---------- Note: The show optic slot command is supported on the FSX 800 and FSX 1600 only. Note: The show optic function takes advantage of information stored and supplied by the manufacturer of the XFP, SFP, or SFP+ transceiver. This information is an optional feature of the Multi-Source Agreement standard defining the optical interface. Not all component suppliers have implemented this feature set. In such cases where the XFP, SFP, or SFP+ transceiver does not supply the information, a "Not Available" message will be displayed for the specific port on which the module is installed. ----------

You can configure your Brocade device to monitor optical transceivers in the system, either globally or by specified ports.

2017-12-12T16:04:05-0800 2017-12-12T18:08:46-0800 https://support.ruckuswireless.com/articles/000006619 2017-12-12T16:04:07-0800 monthly 0.8 admin,premium knowledge_article_2814 knowledge_article_2814 2017-12-12T16:04:07-0800 000006619 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches What are the supported Radius Attributes for 802.1x/MAC authentication on FastIron? <table class="sectionContent" style="width: 747.87px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="fieldCol" style="text-align: left; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0" style="width: 570.9px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div" style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif;"><span class="ph" id="GUID-CD5AE347-276F-4267-B611-8978F552F800__GUID-F78E1DB9-ECC0-446D-8F9E-1C59772CE24F_unique_106" style="color: rgb(0, 0, 0); font-style: normal; font-weight: normal; white-space: normal;">Brocade devices support the following RADIUS attributes for 802.1X authentication and MAC authentication: <table border="1" style="width: 500px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> Username (1) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> NAS-IP-Address (4) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> NAS-Port (5) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> Service-Type (6) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> Filter-Id (11) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> Framed-MTU (12) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> State (24) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> Vendor-Specific (26) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> Session-Timeout (27) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> Termination-Action (29) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> Calling-Station-ID (31) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> NAS-Identifier (32) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> NAS-Port-Type (61) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2865 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> Tunnel-Type (64) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2868 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> Tunnel-Medium-Type (65) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2868 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> EAP Message (79) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2579 (Only for 802.1X authentication) </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> Message-Authenticator (80) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 3579 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> Tunnel-Private-Group-Id (81) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2868 </td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> NAS-Port-id (87) </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;"> RFC 2869 </td></tr></tbody></table> </div> </td></tr></tbody></table> </td></tr></tbody></table>

Supported RADIUS attributes by FastIron 802.1x/MAC authentication

2017-12-12T16:04:07-0800 2017-12-12T18:08:33-0800 https://support.ruckuswireless.com/articles/000006621 2017-12-12T16:04:07-0800 monthly 0.8 admin,premium knowledge_article_2813 knowledge_article_2813 2017-12-12T16:04:07-0800 000006621 Validated (External) Premium Ruckus icx switches System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, Ruckus ICX Switches Does ICX support openflow flows and actions for QinQ? While the ICX platforms support QinQ, it cannot be managed via Openflow. That is Openflow flows and actions for QinQ are not supported on ICX platforms. There are plans to add this feature in the future FastIron software versions.

Support for QnQ in openflow environment

2017-12-12T16:04:07-0800 2017-12-12T18:08:32-0800 https://support.ruckuswireless.com/articles/000006618 2017-12-12T16:04:07-0800 monthly 0.8 admin,premium knowledge_article_2812 knowledge_article_2812 2017-12-12T16:04:07-0800 000006618 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to change the IGMP version on FastIron? Configuring the global IGMP version<br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; float: none; white-space: normal; background-color: rgb(255, 255, 255);">When you globally enable IGMP snooping, you can specify IGMP V2 or IGMP V3. The ip multicast version command enables IGMP V3. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">device(config)# ip multicast version 3 Syntax: [no] ip multicast version [2 | 3] <div id="GUID-0120A6BC-708A-4350-9A8F-F1232CA24284__GUID-B7C1F12F-02D4-439D-AC58-982AAD6660FA" style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> If you do not specify a version number, IGMP V2 is assumed. Configuring the IGMP version for a VLAN You can specify the IGMP version for a VLAN. For example, the following commands configure VLAN 20 to use IGMP V3. device(config)# vlan 20 device(config-vlan-20)# multicast version 3 Syntax: [no] multicast version [2 | 3 ] If no IGMP version is specified, then the globally-configured IGMP version is used. If an IGMP version is specified for individual ports, those ports use that version, instead of the VLAN version. Configuring the IGMP version for individual ports in a VLAN You can specify the IGMP version for individual ports in a VLAN. For example, the following commands configure ports 4, 5, and 6 to use IGMP V3. The other ports either use the IGMP version specified with the multicast version command, or the globally-configured IGMP version. device(config)# vlan 20 device(config-vlan-20)# multicast port-version 3 ethernet 2/4 to 2/6 Syntax: [no] multicast port-version [2 | 3 ] ethernetport [ethernet port | toport ] To specify a list of ports, enter each port as ethernetport followed by a space. For example, ethernet 1/24 ethernet 6/24 ethernet 8/17. To specify a range of ports, enter the first port in the range as ethernetport followed by the last port in the range. For example, ethernet 1/1 to 1/8 . You can combine lists and ranges in the same command. For example: enable ethernet 1/1 to 1/8 ethernet 1/24 ethernet 6/24 ethernet 8/17. Using the ip gmp version command <div> <div> The following example enables IGMP Version 3 globally. device# configure terminal device(config)# ip igmp version 3 </div> <div> The following example, in interface configuration mode, enables IGMP Version 3 for a physical port. device# configure terminal device(config)# interface ethernet 1/5 device(config-if-1/5)# ip igmp version 3 </div> <div> The following example, in interface configuration mode, enables IGMP Version 3 for a virtual routing interface on a physical port. device# configure terminal device(config)# interface ve 3 device(config-vif-1)# ip igmp version 3 </div> </div> Syntax: ip igmp version version-number no ip igmp version version-number Parameters: version-number --> Specifies the version number: 1, 2, or 3. Version 2 is the default. </div>

Guidelines to configure the IGMP version.

2017-12-12T16:04:07-0800 2017-12-12T18:08:30-0800 https://support.ruckuswireless.com/articles/000006648 2017-12-12T16:04:09-0800 monthly 0.8 admin,premium knowledge_article_2810 knowledge_article_2810 2017-12-12T16:04:09-0800 000006648 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What is a basic Basic campus switch configuration for VOIP? <div class="sfdc_richtext" id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div">Basic campus switch configuration for VOIP ICX ! vlan 1 name DEFAULT-VLAN by port ! vlan 130 name FreePbx_Uplink by port tagged ethe 1/1/48 ! vlan 133 name Data by port tagged ethe 1/1/48 ! vlan 136 name VOIP by port tagged ethe 1/1/48 ! interface ethernet 1/1/3 port-name 6739i_aastra_phone_PC inline power voice-vlan 136 ! interface ethernet 1/1/4 port-name Phone6867i_aastra_pc inline power voice-vlan 136 ! interface ethernet 1/1/48 port-name Uplink_CampusMgmt_FreePBX ! lldp med network-policy application voice tagged vlan 136 priority 5 dscp 46 ports ethe 1/1/3 to 1/1/4 lldp run ! end </div>

Basic campus switch configuration for VOIP.

2017-12-12T16:04:09-0800 2017-12-12T18:08:26-0800 https://support.ruckuswireless.com/articles/000006646 2017-12-12T16:04:09-0800 monthly 0.8 admin,premium knowledge_article_2809 knowledge_article_2809 2017-12-12T16:04:09-0800 000006646 Validated (External) Premium Ruckus icx switches;Brocade eos products Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products How to configure FastIron devices to use a Radius server via FQDN? On the FastIron device, configure the following to make it work as expected: # ip dns domain-list # ip dns server-address # radius-server host

How to configure FastIron devices to use a Radius server via FQDN?

2017-12-12T16:04:09-0800 2017-12-12T18:08:25-0800 https://support.ruckuswireless.com/articles/000006651 2017-12-12T16:04:09-0800 monthly 0.8 admin,premium knowledge_article_2808 knowledge_article_2808 2017-12-12T16:04:09-0800 000006651 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Why was DHCP option 82 not seen in the DHCP packets after upgrading to 8030m? With the new design: - DHCP Relay Information won’t be automatically enabled when DHCP snooping is enabled - DHCP relay Information feature can be enabled/disabled with the following command #(no) dhcp snooping relay information Simple topology: ---------------------- DHCP server----1/2/1 ICX 1/2/2-----Client . Server side: --------------- interface ethernet 1/2/1 dhcp snooping trust Client side: --------------- interface ethernet 1/2/2 dhcp snooping relay information <<<<<<

DHCP option 82 was not seen on the DHCP packets sent to the server from the relay agent.

2017-12-12T16:04:09-0800 2017-12-12T18:08:24-0800 https://support.ruckuswireless.com/articles/000006649 2017-12-12T16:04:09-0800 monthly 0.8 admin,premium knowledge_article_2807 knowledge_article_2807 2017-12-12T16:04:09-0800 000006649 Validated (External) Premium Icx 6450;Icx 6610;Brocade eos products;Ruckus ICX 6610 Campus Switches Known issues and workarounds Known Issues and Workarounds, ICX 6450, ICX 6610, Brocade EOS Products What if I see crc errors, inerrors, and/or port flaps for 10Gbps on other vendor hardware while connected to an ICX? A fix is introduced in 7.4.00k and in 8.0.10m and higher releases. ICX6610 DEFECT000561940, ICX6450 DEFECT000555431, and for SX-FI-8XG and SX-FI-2XG- 7.4.00j and 8.0.10m and higher under DEFECT000538959.

May see intermittent bursts of InErrors, CRC errors and link flapping on 10Gbps ports. The issue is more prevalent with jumbo frames enabled.

2017-12-12T16:04:09-0800 2017-12-12T18:08:22-0800 https://support.ruckuswireless.com/articles/000006716 2017-12-12T16:04:12-0800 monthly 0.8 admin,premium knowledge_article_2799 knowledge_article_2799 2017-12-12T16:04:12-0800 000006716 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches Configuration;Installation Configuration, Installation, FastIron CX Series How long does it take to install the PoE firmware? Below is the approximate duration to complete the PoE Firmware upgrade for each platform. ---------- Note: these are conservative estimates. If the process goes much longer, it indicates that it is not completing, or is hanging. ---------- FCX/ICX6610 - 9 minutes SX800/SX1600 - 10 minutes per linecard ICX6450/6430 - 12 minutes Example of the PoE firmware install process and the log message (you must be on the console of the unit to see these log messages): <code style="color: black; font-size: 13px;">HPOE-Switch# inline power install-firmware stack-unit 4 tftp 10.110.33.33 fcx_poeplus_02.1.0.fw HPOE-Switch# Flash Memory Write (8192 bytes per dot) .................... tftp download successful stackId = 4 file name = poe-fw Sending PoE Firmware to Stack Unit 4. Flash Memory Write (8192 bytes per dot) ................... PoE: Power disabled on port 4/1/5 because of power management. PoE: Power disabled on port 4/1/6 because of power management. PoE: Power disabled on port 4/1/7 because of power management. PoE: Power disabled on port 4/1/8 because of power management. PoE: Power disabled on port 4/1/9 because of power management. PoE: Power disabled on port 4/1/10 because of power management. PoE: Power disabled on port 4/1/11 because of power management. PoE: Power disabled on port 4/1/12 because of power management. PoE: Power disabled on port 4/1/13 because of power management. PoE: Power disabled on port 4/1/14 because of power management. PoE: Power disabled on port 4/1/15 because of power management. PoE: Power disabled on port 4/1/16 because of power management. PoE: Power disabled on port 4/1/17 because of power management. PoE: Power disabled on port 4/1/18 because of power management. PoE: Power disabled on port 4/1/19 because of power management. PoE: Power disabled on port 4/1/20 because of power management. PoE: Power disabled on port 4/1/21 because of power management. PoE: Power disabled on port 4/1/22 because of power management. PoE: Power disabled on port 4/1/23 because of power management. PoE: Power disabled on port 4/1/24 because of power management. U4-MSG: PoE Warning: Upgrading firmware in slot 1....DO NOT SWITCH OVER OR POWER DOWN THE UNIT. U4-MSG: PoE Info: FW Download on slot 1...sending download command... U4-MSG: PoE Info: FW Download on slot 1...TPE response received. U4-MSG: PoE Info: FW Download on slot 1...sending erase command... U4-MSG: PoE Info: FW Download on slot 1...erase command...accepted. U4-MSG: PoE Info: FW Download on slot 1...erasing firmware memory... U4-MSG: PoE Info: FW Download on slot 1...erasing firmware memory...completed U4-MSG: PoE Info: FW Download on slot 1...sending program command... U4-MSG: PoE Info: FW Download on slot 1...sending program command...accepted. U4-MSG: PoE Info: FW Download on slot 1...programming firmware...takes around 6 minutes.... </code> ( < ---- said 6 minutes! ) <code style="color: black; font-size: 13px;">PoE: Power enabled on port 1/1/12. U4-MSG: PoE Info: Firmware Download on slot 1.....10 percent completed. U4-MSG: PoE Info: Firmware Download on slot 1.....20 percent completed. U4-MSG: PoE Info: Firmware Download on slot 1.....30 percent completed. U4-MSG: PoE Info: Firmware Download on slot 1.....40 percent completed. U4-MSG: PoE Info: Firmware Download on slot 1.....50 percent completed. U4-MSG: PoE Info: Firmware Download on slot 1.....60 percent completed. U4-MSG: PoE Info: Firmware Download on slot 1.....70 percent completed. U4-MSG: PoE Info: Firmware Download on slot 1.....80 percent completed. U4-MSG: PoE Info: Firmware Download on slot 1.....90 percent completed. U4-MSG: PoE Info: Firmware Download on slot 1.....100 percent completed. U4-MSG: PoE Info: FW Download on slot 1...programming firmware...completed. U4-MSG: PoE Info: FW Download on slot 1...upgrading firmware...completed. Module will be reset. U4-MSG: PoE Info: Resetting module in slot 1....completed. PoE Info: Programming Brocade defaults..... PoE Info: Programming Brocade defaults. Step 1: Writing port defaults on module in slot 1.... PoE Info: Programming Brocade Defaults: Step 2: Writing PM defaults on module in slot 1. PoE Info: Programming Brocade defaults. Step 3: Writing user byte 0xf0 on module in slot 1. PoE Info: Programming Brocade defaults. Step 4: Saving settings on module in slot 1. PoE Info: Programming Brocade defaults....completed.</code> <code style="color: black; font-size: 13px;">HPOE-Switch# sh inline power det</code> <code style="color: black; font-size: 13px;">Power Supply Data On stack 1: ++++++++++++++++++</code> <code style="color: black; font-size: 13px;">Power Supply Data: ++++++++++++++++++</code> <code style="color: black; font-size: 13px;">Power Supply #1: Max Curr: 7.5 Amps Voltage: 54.0 Volts Capacity: 410 Watts power supply 2 is not present</code> <code style="color: black; font-size: 13px;">POE Details Info. On Stack 1 :</code> <code style="color: black; font-size: 13px;">General PoE Data: +++++++++++++++++</code> <code style="color: black; font-size: 13px;">Firmware Version -------- 02.1.0</code> <code style="color: black; font-size: 13px;">Cumulative Port State Data: +++++++++++++++++++++++++++</code> <code style="color: black; font-size: 13px;">#Ports #Ports #Ports #Ports #Ports #Ports #Ports Admin-On Admin-Off Oper-On Oper-Off Off-Denied Off-No-PD Off-Fault ------------------------------------------------------------------------- 20 4 1 23 0 19 4</code> <code style="color: black; font-size: 13px;">Cumulative Port Power Data: +++++++++++++++++++++++++++</code> <code style="color: black; font-size: 13px;">#Ports #Ports #Ports Power Power Pri: 1 Pri: 2 Pri: 3 Consumption Allocation ----------------------------------------------- 0 0 20 0.188 W 15.400 W</code> <code style="color: black; font-size: 13px;">Power Supply Data On stack 4: ++++++++++++++++++</code> <code style="color: black; font-size: 13px;">Power Supply #1: Max Curr: 7.5 Amps Voltage: 54.0 Volts Capacity: 410 Watts power supply 2 is not present</code> <code style="color: black; font-size: 13px;">POE Details Info. On Stack 4 : General PoE Data: +++++++++++++++++</code> <code style="color: black; font-size: 13px;">Firmware Version --------</code> <code style="color: red; font-size: 13px;">02.1.0</code> <code style="color: black; font-size: 13px;">Cumulative Port State Data: +++++++++++++++++++++++++++</code> <code style="color: black; font-size: 13px;">#Ports #Ports #Ports #Ports #Ports #Ports #Ports Admin-On Admin-Off Oper-On Oper-Off Off-Denied Off-No-PD Off-Fault ------------------------------------------------------------------------- 20 4 0 24 0 20 2</code> <code style="color: black; font-size: 13px;">Cumulative Port Power Data: +++++++++++++++++++++++++++</code> <code style="color: black; font-size: 13px;">#Ports #Ports #Ports Power Power Pri: 1 Pri: 2 Pri: 3 Consumption Allocation ----------------------------------------------- 0 0 20 0.0 W 0.0 W</code> <code style="color: black; font-size: 13px;">HPOE-Switch#</code> If the PoE firmware install process hangs without completing, you will not be able to re-install until you terminate the FW install process by reloading the switch at the next maintenance window. Once the switch is rebooted, it should release the process and make the flash available again. If there are further problems with the FW install, please call Brocade Support for assistance.

How long does it take to install the PoE firmware?

2017-12-12T16:04:12-0800 2017-12-12T18:08:10-0800 https://support.ruckuswireless.com/articles/000006715 2017-12-12T16:04:12-0800 monthly 0.8 admin,premium knowledge_article_2798 knowledge_article_2798 2017-12-12T16:04:12-0800 000006715 Validated (External) Premium Fastiron ws series;Brocade FastIron WS Series Switches Configuration Configuration, FastIron WS Series Is there support for DHCP Snooping on a FastIron WS? Beginning with software release FSX 04.2.00, multi-device port authentication and DHCP Snooping are supported in conjunction with dynamic ACLs. Support is available in the Layer 3 software codes only, and not in the Layer 2 software code. Releases prior to FSX 04.2.00 do not support DHCP Snooping and multi-device port authentication when dynamic ACLs are in effect. DHCP Snooping is supported together with multi-device port authentication as long as acl-per-port-per-vlan is enabled. Otherwise, you do not need to perform any extra configuration steps to enable support with dynamic ACLs. When these features are enabled on the same port/VLAN, support is automatically enabled.

Is there support for DHCP Snooping on a FastIron WS?

2017-12-12T16:04:12-0800 2017-12-12T18:08:09-0800 https://support.ruckuswireless.com/articles/000006717 2017-12-12T16:04:12-0800 monthly 0.8 admin,premium knowledge_article_2797 knowledge_article_2797 2017-12-12T16:04:12-0800 000006717 Validated (External) Premium Fastiron ws series;Fastiron cx series;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration Configuration, FastIron WS Series, FastIron CX Series How do I configure per-user IP ACLs filters in dot1x with FreeRadius? FreeRADIUS is an open-source RADIUS server for UNIX systems. This describes the configuration of FreeRADIUS to configure per-user IP ACLs filters. For a basic installation only three files must be edited: clients, users and dictionary.foundry. freeRADIUS version 2.1.7 in UNIX <code>/etc/raddb/clients.conf # client 192.168.10.0/24 { secret = secret shortname = localhost }</code> # In this example, radius client password is secret /etc/raddb/users <code># For 8021x with Per-user IP ACL # bob Auth-Type :=EAP, Cleartext-Password:="test" Foundry-Access-List="ipacl.e.in=permit udp any any;ipacl.e.in=permit tcp any host 192.168.10.100 eq http" #</code> # In this example, user bob has the password test # Multiple ACLs can be configured with a space, newline, semicolon, comma, or null characater. /usr/share/freeradius/dictionary.foundry # Below are attributes related to dot1x. <code>ATTRIBUTE Foundry-Access-List 5 string ATTRIBUTE Foundry-MAC-Authent-needs-802.1x 6 integer ATTRIBUTE Foundry-802.1x-Valid-Lookup 7 integer</code> <code>VALUE Foundry-Command-Exception-Flag Permit-Cmd-Str/Deny-Others 0 VALUE Foundry-Command-Exception-Flag Deny-Cmd-Str/Permit-Others 1</code> <code>VALUE Foundry-MAC-Authent-Needs-802.1x Disable 0 VALUE Foundry-MAC-Authent-Needs-802.1x Enable 1</code> <code>VALUE Foundry-802.1x-Valid-Lookup Disable 0 VALUE Foundry-802.1x-Valid-Lookup Enable 1</code> <code>#</code> After editing, you need to restart the RADIUS server. Below is a configuration example for dot1x on FCX. <code>FCX624SHPOE Switch#sh run Current configuration: ! ver 07.2.02dT7f1 ! stack unit 1 module 1 fcx-24-poe-port-management-module module 2 fcx-cx4-2-port-16g-module ! ! vlan 1 name DEFAULT-VLAN by port ! ! dot1x-enable enable ethe 1/1/1 to 1/1/2 ! ! aaa authentication dot1x default radius ip address 192.168.10.1 255.255.255.0 no ip dhcp-client enable logging console radius-server host 192.168.10.100 auth-port 1812 acct-port 1813 default radius-server key 1 $d=-ds8OOQ interface ethernet 1/1/1 dot1x port-control auto ! interface ethernet 1/1/2 dot1x port-control auto ! end</code> <code>FCX624SHPOE Switch#</code> Diagram : Client enabled 802.1x ---------------- e1/1/1 FCX e1/1/24 ----------- Radius server show command : Once the client is authenticated, check the following commands. <code>FCX624SHPOE Switch#sh dot1 mac-s</code> <code>Port MAC/IP(username) Vlan Auth ACL Age PAE State State ----------------------------------------------------------------------------- 1/1/1 000d.600f.c6b3 :bob 1 permit in Ena AUTHENTICATED FCX624SHPOE Switch# FCX624SHPOE Switch# FCX624SHPOE Switch#sh dot1 ip-acl</code> <code>Port : 1/1/1 (301), user : bob( 000d.600f.c6b3 ) (192.168.10.142): Extended IP access list Port_1/1/1_bob_E_IN permit udp any any permit tcp any host 192.168.10.100 eq http FCX624SHPOE Switch#</code>

How do I configure per-user IP ACLs filters in dot1x with FreeRadius?

2017-12-12T16:04:12-0800 2017-12-12T18:08:07-0800 https://support.ruckuswireless.com/articles/000006697 2017-12-12T16:04:12-0800 monthly 0.8 admin,premium knowledge_article_2796 knowledge_article_2796 2017-12-12T16:04:12-0800 000006697 Validated (External) Premium Ruckus icx switches Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches When configuring MCT Active-Passive on an NetIron device, why do some LAG ports stay in LACP_BLOCKED state when connected to FastIron? Upgrade to a version of code that contains the fix - currently: FI 8.0.01.

To match this issue you need all of these factors in play: 1) Brocade NetIron with Multi-chassis Trunking feature enabled. 2) Active-passive MCT option enabled 3) LACP link connected to 4) A FastIron device running 8.0 train of software

2017-12-12T16:04:12-0800 2017-12-12T18:08:06-0800 https://support.ruckuswireless.com/articles/000006703 2017-12-12T16:04:12-0800 monthly 0.8 admin,premium knowledge_article_2793 knowledge_article_2793 2017-12-12T16:04:12-0800 000006703 Validated (External) Premium Configuration Configuration Why does Mac authentication not work on 8061 without "aaa authentication dot1x default radius"? It is required and should be strictly enforced to implement the command aaa authentication dot1x default radius for users who are upgrading from 8030x, 8040x to 8061. It is a required command and will be updated correctly in the required documents (via Jira Documentation defect FI-168763).

Mac authentication does not work on 8061 without "aaa authentication dot1x default radius"

2017-12-12T16:04:12-0800 2017-12-12T18:08:01-0800 https://support.ruckuswireless.com/articles/000006721 2017-12-12T16:04:14-0800 monthly 0.8 admin,premium knowledge_article_2789 knowledge_article_2789 2017-12-12T16:04:14-0800 000006721 Validated (External) Premium Ruckus icx switches;Brocade eos products Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products Why is there high cpu on FESX due to interrupt 16 and 17? Upgrade to a version of code where the issue has been fixed.

High cpu on FESX due to interrupt 16 and 17.

2017-12-12T16:04:14-0800 2017-12-12T18:07:55-0800 https://support.ruckuswireless.com/articles/000006722 2017-12-12T16:04:14-0800 monthly 0.8 admin,premium knowledge_article_2787 knowledge_article_2787 2017-12-12T16:04:14-0800 000006722 Validated (External) Premium Icx 6650;Brocade ICX 6650 Campus Switches ICX 6650 Why does the newly received ICX6650 order show HW REVISION : 2 (BETA) in the output of show version? Upgrading to FI 7.5.00b will correctly show the unit as Production. (SN# and LID are altered to use bogus number as example) In FI 7.5.00a: <code>ICX6650#sh ver Copyright (c) 1996-2012 Brocade Communications Systems, Inc. All rights reserved. UNIT 1: compiled on Jun 8 2012 at 19:11:50 labeled as FCXLR07500a148 (12708935 bytes) from Secondary </code><code>FCXLR07500a.bin</code> <code> SW: Version 07.5.00a148T323 Boot-Monitor Image size = 524288, Version:07.5.00T7f5 (fxz7500) HW: Stackable BRCD6650-64 ========================================================================== UNIT 1: SL 1: BRCD6650-64 56-port Management Module Serial #: CLV.....1LT License: BRCD6650_L3_SOFT_PACKAGE (LID: enx.....Gnv) P-ENGINE 0: type EC02, rev 01 ========================================================================== UNIT 1: SL 2: BRCD6650-64 4-port 160G Module ========================================================================== UNIT 1: SL 3: BRCD6650-64 8-port 80G Module ========================================================================== 800 MHz Power PC processor 8544E (version 0021/0022) 400 MHz bus 65536 KB flash memory 1024 MB DRAM STACKID 1 system uptime is 20 minutes 43 seconds ========================================================================== HARDWARE INFORMATION UNIT NAME : BRCD6650-64 HW REVISION : 2<code> (BETA)</code> </code><-- anomaly <code>Board ID : 4(BCRD6650) CPLD INFORMATION CPLD code is RD revision CPLD CODE REVISION = 4 ========================================================================== The system : started=cold start *** NOT FOR PRODUCTION ***</code> In FI 7.5.00b: <code>ICX6650#sh ver Copyright (c) 1996-2012 Brocade Communications Systems, Inc. All rights reserved. UNIT 1: compiled on Mar 21 2013 at 18:54:24 labeled as <code>ICXLR07500b</code> (12848084 bytes) from Primary ICXLR07500b.bin SW: Version 07.5.00bT323 Boot-Monitor Image size = 524288, Version:07.5.00T320 (fxz07500) HW: Stackable ICX6650-64 ========================================================================== UNIT 1: SL 1: ICX6650-64 56-port Management Module Serial #: CLV.....1LT License: ICX6650_L3_SOFT_PACKAGE (LID: enx.....Gnv) P-ENGINE 0: type EC02, rev 01 ========================================================================== UNIT 1: SL 2: ICX6650-64 4-port 160G Module ========================================================================== UNIT 1: SL 3: ICX6650-64 8-port 80G Module ========================================================================== 800 MHz Power PC processor 8544E (version 0021/0022) 400 MHz bus 65536 KB flash memory 1024 MB DRAM STACKID 1 system uptime is 6 hours 18 minutes 12 seconds ========================================================================== HARDWARE INFORMATION UNIT NAME : ICX6650-64 HW REVISION : 2 <code>(PRODUCTION)</code> </code><-- correctly shown <code>Board ID : 4(ICX6650) CPLD INFORMATION CPLD code is RD revision CPLD CODE REVISION = 6 ========================================================================== The system started at 17:07:04 GMT-03 Fri Jul 26 2013</code> <code> The system : started=warm start reloaded=by "reload"</code>

Why does the newly received ICX6650 order show HW REVISION : 2 (BETA) in the output of show version?

2017-12-12T16:04:14-0800 2017-12-12T18:07:52-0800 https://support.ruckuswireless.com/articles/000006725 2017-12-12T16:04:14-0800 monthly 0.8 admin,premium knowledge_article_2786 knowledge_article_2786 2017-12-12T16:04:14-0800 000006725 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products Why is my Secondary image at the Standby management module not synchronizing and the router is receiving error when uploading from Basic L3 image to the full routing code? If the above case, apply software license to the secondary management module in slot 10, and then re-try the image upgrade again. There are 2 ways to install the software license on slot 10: 1. Enable<code style="color: red; font-size: 13px;"> Hitless </code>feature in the configuration and then<code style="color: red; font-size: 13px;"> hitless switch-over </code>to slot 10. Now install the license with slot 10 being the active management module. 2. Remove slot 10 management module to a separate test chassis and install it there with it as an Active Management module. Move it back to the current chassis and then the user can<code style="color: red; font-size: 13px;"> boot system flash secondary </code>to load the router image from both slot 9 and slot 10. The reason for the procedure above is because the license cannot be copied to the standby via active management module - the installed management module needs to be the active management module. If there is a choice, method #2 is preferred as the license install and image copying is done in another chassis with no interruption to the router.

Why is my Secondary image at the Standby management module not synchronizing and the router is receiving error when uploading from Basic L3 image to the full routing code?

2017-12-12T16:04:14-0800 2017-12-12T18:07:51-0800 https://support.ruckuswireless.com/articles/000006747 2017-12-12T16:04:16-0800 monthly 0.8 admin,premium knowledge_article_2782 knowledge_article_2782 2017-12-12T16:04:16-0800 000006747 Validated (External) Premium Fastiron ws series;Turboiron 24x switch;Brocade FastIron WS Series Switches FastIron WS Series, TurboIron 24X Switch How do I use an expect script in a testing environment? Overview You need a UNIX machine with Expect installed. To install on most Linux systems try: <code>yum install expect</code> If that does not work then consult their website. Brocade does not provide support for 3rd party systems, software or tools. Then you can create a script like the examples below, call it with Expect and you are done. To run the script automatically you can add it to crontab. Basic Script: This basic script logs in via telnet, enables and then runs<code> sh media </code>before logging out. <code>#!/usr/bin/expect set timeout 20 set Machine 10.1.1.1 spawn telnet $Machine expect "*?outer>" send "ena\r" expect "*?outer#" send "skip\r" expect "*?outer#" send "sh media\r" expect "*?outer#" send "quit\r"</code> This script will log in, create some VLANs and then log out. <code>#!/usr/bin/expect set timeout 20 set Machine 10.1.1.1 spawn telnet $Machine expect "*?FES96-01>" send "ena\r" expect "*?FES96-01#" send "conf t\r" expect "*?#" send "vlan 99 name NYMR-3LAN-USER\r" expect "*?vlan-99)#" send "tag e 97\r" expect "*?vlan-99)#" send "exit\r" expect "*?config)#" send "no vlan 99\r" expect "*?config)#" send "vlan 1856 name NYMR-3LAN-USER\r" expect "*?vlan-1856)#" send "tag e 99\r" expect "*?vlan-1856)#" send "exit\r" expect "*?config)#" send "no vlan 1856\r" expect "*?config)#" send "exit\r" expect "*\?FES96-01#" send "exit\r" expect "*\?FES96-01>" send "exit\r" </code> Crontab Entry <hr></hr><code>* * * * * root expect /var/expect/scripts/sss &> /dev/null</code> The above crontab runs the sss script every minute and sends the output to dev null so the server logs do not fill up.

How do I use an expect script in a testing environment?

2017-12-12T16:04:16-0800 2017-12-12T18:07:45-0800 https://support.ruckuswireless.com/articles/000006748 2017-12-12T16:04:16-0800 monthly 0.8 admin,premium knowledge_article_2779 knowledge_article_2779 2017-12-12T16:04:16-0800 000006748 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products What is the supported fan-threshold setting on FastIron Chassis platform? To meet the objectives above, the suggested resolution is to re-configure LOW and HIGH temperature thresholds of the thermal planes. Internal to the Brocade devices are three (3) thermal planes. Interface modules (lp), Management modules (mp), and Switch Fabric modules (sfp) have independent parameters for the fan speeds. Each module can be set to a specific range to stagger the thresholds, and allow the fan speeds to not be in a fast increase, as depicted in the Default Parameters for Low and High Temperature above. The generic command syntax for the possible solution would be as follows: <code>FastIron (config)# fan-threshold [module ( lp / mp / sfp)] speed-1 [high-threshold] FastIron (config)# fan-threshold [module ( lp / mp / sfp)] speed-2 [low-threshold] [high-threshold] FastIron (config)# fan-threshold [module ( lp / mp / sfp)] speed-3 [low-threshold] [high-threshold] FastIron (config)# fan-threshold [module ( lp / mp / sfp)] speed-4 [low-threshold] [high-threshold]</code> <code> </code> For Example: Below is the acceptable fan-threshold settings to be configured. Default setting for "speed-1" is not being changed in following example. <code>fan-threshold mp speed-1 57 (default setting) fan-threshold mp speed-2 55 65 fan-threshold mp speed-3 63 73 fan-threshold mp speed-4 70 80</code> <code> </code> <code>fan-threshold lp speed-1 57 (default setting) fan-threshold lp speed-2 55 65 fan-threshold lp speed-3 63 73 fan-threshold lp speed-4 70 80</code> <code> </code> <code>fan-threshold sfp speed-1 57 (default setting) fan-threshold sfp speed-2 55 65 fan-threshold sfp speed-3 63 73 fan-threshold sfp speed-4 70 80</code> ---------- Note: To change the temperature threshold value range as suggested above, it is required to adjust the "window size" of the temperature range on each speed as noted in the following steps to comply with the overlapping value check rule implemented in the software to ensure the configured fan-threshold values are overlapping each other on each incremental speed. ---------- 1. Following are the steps to modify fan-threshold on MP (Management Module): <code>FastIron (config)# fan-threshold mp speed-3 49 73 (Low range value "49" for speed-3 cannot be set higher than 50 until the low range value for speed-4 is increased)</code> <code>FastIron (config)# fan-threshold mp speed-4 70 80 (Low range value for speed-4 is now configurable after the high range value for speed-3 being increased) FastIron (config)# fan-threshold mp speed-2 48 65 (Low range value "48" for speed-2 cannot be set higher than 49 until the low range value for speed-3 is increased) FastIron (config)# fan-threshold mp speed-3 63 73 (Low range value for speed-3 is now configurable after the high range value for speed-2 being increased) FastIron (config)# fan-threshold mp speed-2 55 65 (Low range value for speed-2 is now configurable after the low range value for speed-3 being increased)</code> <code> </code> <code>FastIron (config)# show chassis ...</code> <code>Fan speed switching temperature thresholds: Rule 1/3 (MGMT CARDS THERMAL PLANE): Speed 1: NM<----->57 deg-C Speed 2: 55<----->65 deg-C Speed 3: 63<----->73 deg-C Speed 4: 70<----->80 deg-C (shutdown)</code> 2. Following are the steps to modify fan-threshold on LP (Line Module): <code>FastIron (config)# fan-threshold lp speed-3 49 73 FastIron (config)# fan-threshold lp speed-4 70 80 FastIron (config)# fan-threshold lp speed-2 48 65 FastIron (config)# fan-threshold lp speed-3 63 73 FastIron (config)# fan-threshold lp speed-2 55 65</code> <code> </code> <code>FastIron (config)# show chassis ...</code> <code>Fan speed switching temperature thresholds: ... Rule 2/3 (LINE CARDS THERMAL PLANE): Speed 1: NM<----->57 deg-C Speed 2: 55<----->65 deg-C Speed 3: 63<----->73 deg-C Speed 4: 70<----->80 deg-C (shutdown)</code> 3. Following are the steps to modify fan-threshold on SFP (Switch Fabric Module): <code>FastIron (config)# fan-threshold sfp speed-3 49 73 FastIron (config)# fan-threshold sfp speed-4 70 80 FastIron (config)# fan-threshold sfp speed-2 48 65 FastIron (config)# fan-threshold sfp speed-3 63 73 FastIron (config)# fan-threshold sfp speed-2 55 65</code> <code> </code> <code>FastIron (config)# show chassis ... Fan speed switching temperature thresholds: ... Rule 3/3 (SWITCH FABRIC CARDS THERMAL PLANE): Speed 1: NM<----->57 deg-C Speed 2: 55<----->65 deg-C Speed 3: 63<----->73 deg-C Speed 4: 70<----->80 deg-C (shutdown) </code>

What is the supported fan-threshold setting on FastIron Chassis platform?

2017-12-12T16:04:16-0800 2017-12-12T18:07:41-0800 https://support.ruckuswireless.com/articles/000006734 2017-12-12T16:04:16-0800 monthly 0.8 admin,premium knowledge_article_2778 knowledge_article_2778 2017-12-12T16:04:16-0800 000006734 Validated (External) Premium Ruckus icx switches;Brocade eos products Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products Why are hosts unable to communicate within the VLAN on a switch when uplink-switch ports are configured? Check the configuration and see if uplink-switch is configured in the VLAN. This is expected behavior if the uplink-switch is configured and if you want to use this feature. Sometimes the user wants to give a port-name describing the uplink port# and inadvertently configures the uplink-switch under the VLAN which causes this issue. If the port-name is to be configured then it has to be done under the physical interface. ! vlan 10 by port tagged ethe 2/1 to 2/2 untag ethe 1/1 to 1/24 uplink-switch ethernet 2/1 to 2/2 ! Delete the uplink-switch command from within the VLAN using the no uplink-switch command and this will resolve the issue. Brocade(config)# vlan 10 by port Brocade(config-vlan-10)# no uplink-switch ethernet 2/1 to 2/2

Hosts are unable to communicate within the VLAN on a switch when uplink-switch ports are configured.

2017-12-12T16:04:16-0800 2017-12-12T18:07:39-0800 https://support.ruckuswireless.com/articles/000006746 2017-12-12T16:04:16-0800 monthly 0.8 admin,premium knowledge_article_2777 knowledge_article_2777 2017-12-12T16:04:16-0800 000006746 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches Known issues and workarounds Known Issues and Workarounds, FastIron CX Series Why does SNMPv3 configuration get corrupted? Upgrade to a version of code that contains the fix.

SNMPv3 configuration gets corrupted.

2017-12-12T16:04:16-0800 2017-12-12T18:07:38-0800 https://support.ruckuswireless.com/articles/000006745 2017-12-12T16:04:16-0800 monthly 0.8 admin,premium knowledge_article_2776 knowledge_article_2776 2017-12-12T16:04:16-0800 000006745 Validated (External) Premium Ruckus icx switches;Brocade eos products Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products Why does FES2402-POE Reboots continuously? Upgrade the FES to 3.1.01 code or above. Be sure to upgrade the appropriate monitor (FEM) and boot code (FEB) along with the Flash image (FES or FER) for the fix to take affect.

FES2402-POE Reboots continuously

2017-12-12T16:04:16-0800 2017-12-12T18:07:36-0800 https://support.ruckuswireless.com/articles/000006729 2017-12-12T16:04:16-0800 monthly 0.8 admin,premium knowledge_article_2774 knowledge_article_2774 2017-12-12T16:04:16-0800 000006729 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration;Troubleshooting Configuration, Troubleshooting, Ruckus ICX Switches, Brocade EOS Products Why are CPU spikes observed on a consistent basis after enabling sFlow in a system populated with the SX-FI424C? Toggling the sFlow by no sflow enable and then sflow enable will reset the hardware for the correct recovery. This workaround can be performed in live network with no negative impact to the system.

CPU spikes observed on consistent basis after enabling sFlow in a system populated with the SX-FI424C

2017-12-12T16:04:16-0800 2017-12-12T18:07:33-0800 https://support.ruckuswireless.com/articles/000006728 2017-12-12T16:04:16-0800 monthly 0.8 admin,premium knowledge_article_2773 knowledge_article_2773 2017-12-12T16:04:16-0800 000006728 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products Why does the replacement line module would not come up after being inserted? When replacing a line module it is critical that you replace the module with one that has exactly the same part number. ---------- Note: IPv4 and IPv6 modules are denoted by the part number format. IPv4 modules have a 4 in the part number e.g. SX-FI424C. IPv6 modules have a 6 in the part number e.g. SX-FI624C. ---------- For your reference I have included a list of the relevant module part numbers: IPv4 Line Modules <code>SX-FI424C SX-FI424P SX-FI424F SX-FI424HF SX-FI42XG </code> IPv6 Line Modules <code>SX-FI624C SX-FI624P SX-FI624HF SX-FI62XG</code> For additional information about IPv4 and IPv6 module support please refer to the SX Series Chassis Hardware Installation Guide.

Replacement line module would not come up after being inserted.

2017-12-12T16:04:16-0800 2017-12-12T18:07:32-0800 https://support.ruckuswireless.com/articles/000006756 2017-12-12T16:04:18-0800 monthly 0.8 admin,premium knowledge_article_2772 knowledge_article_2772 2017-12-12T16:04:18-0800 000006756 Validated (External) Premium Turboiron 24x switch Configuration Configuration, TurboIron 24X Switch How do I configure 802.1Q-in-Q tagging on TurboIron/FastIronSX? Example: FCX 1 (port e1/1/1 tagged)----(port e2 untagged vlan 703 with tag-type 9100) TI (port e3 tagged vlan 703)==== Provider Network ======(port e1/3 tagged vlan 703) SX (port e1/2 untagged vlan 703 with tag-type 9100)--------(port e1/1/1 tagged) FCX 2 In order to be able to send any vlan between users on FCX1 to FCX 2 over a provider network we can use Q-in-Q feature. We have to configure the ports as shown in the above Example. FCX 1 is carrying multiple vlans as it connects to its uplink device TI via tagged port e1/1/1. This port has a default tag type of 8100. The uplink device TI has port e2 untagged and is a member of a vlan provided by the provider - for example: vlan 703. You also need to change the tag-type from the default value of 8100, to - for example: 9100. This is done by the following command: TurboIron(config)# tag-type 9100 e 2 The ports (port e3 on TI and e1/3 on SX ) between TI and SX needs to be configured as tagged ports for vlan 703 (since port e2 and e1/3 arre in that vlan) with the default tag-type as 8100. We do not need to change the tag-type here. The port (port e1/2) on SX connected to FCX 2 should be configured as an untagged port of vlan 703 and then change the tag-type to 9100, similar to that done on TI as shown below: SX(config)# tag-type 9100 e 1/2 Similar to FCX 1, FCX 2 port 1 should be configured as a tagged port for the vlans it is supposed to be receiving from the remote FCX 1. The tag-type will remain the default of 8100. Sample configs for FCX 1 and FCX 2: FCX(config)# vlan 10 FCX(config-vlan-10)# tagged e 1/1/1 FCX(config)# vlan 20 FCX(config-vlan-20)# tagged e 1/1/1 Sample configs for TI: TI(config)# vlan 703 TI(config-vlan-703)# untagged e 2 TI(config-vlan-703)# tagged e 3 TI(config)# tag-type 9100 e 2 TI(config)# aggregated-vlan Sample configs for SX: SX(config)# vlan 703 SX(config-vlan-703)# untagged e 1/2 SX(config-vlan-703)# tagged e 1/3 SX(config)# tag-type 9100 e 1/2 SX(config)# aggregated-vlan

How do I configure 802.1Q-in-Q tagging on TurboIron/FastIronSX?

2017-12-12T16:04:18-0800 2017-12-12T18:07:30-0800 https://support.ruckuswireless.com/articles/000006758 2017-12-12T16:04:18-0800 monthly 0.8 admin,premium knowledge_article_2770 knowledge_article_2770 2017-12-12T16:04:18-0800 000006758 Validated (External) Premium Fastiron ws series;Fastiron cx series;Turboiron 24x switch;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration Configuration, FastIron WS Series, FastIron CX Series, TurboIron 24X Switch Is OSPF point-to-point network supported on VE interfaces? No, OSPF point-to-point network on a virtual interface is not supported. The following error is seen if this unsupported configuration is attempted: SX-800(config)#Int ve 100 SX-800(config)#ip ospf area 0 SX-800(config-vif-100)#ip ospf network point-to-point Error - unable to execute command on the interface due to ve interface ospf network type cannot be point-to-point In an OSPF point-to-point network configuration, the ARP must be resolvable only on one physical port. Therefore this option is not supported where the ARP for the OSPF neighbor may be potentially resolved on multiple ports as in the case of a VLAN's virtual-interface. Point-to-point networks have to be a single direct physical link.

Is OSPF point-to-point network supported on VE interfaces?

2017-12-12T16:04:18-0800 2017-12-12T18:07:27-0800 https://support.ruckuswireless.com/articles/000006764 2017-12-12T16:04:18-0800 monthly 0.8 admin,premium knowledge_article_2769 knowledge_article_2769 2017-12-12T16:04:18-0800 000006764 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Ruckus ICX Switches, Brocade EOS Products Why is default Static route not being redistributed into OSPF? For the default route to be redistributed in OSPF, users need to utilize the default-information-originate command under OSPF. This is different than redistributing other non-default static routes, which work without any additional commands. Thus, the following config works: ! ip route 0.0.0.0/0 10.1.1.1 ! ! router ospf area 0 redistribute static default-information-originate ! ---------- Notes: <ul><li>For the above to work, the static route must be installed in arouting table, which means 10.1.1.1 must be reachable.</li><li>By using "default-information-originate always", the default route is originated from the local router even when it does not have a default route on itself.</li><li>Users can also add or modify metric to change the redistributed cost of the route.</li></ul> ----------

Default Static route not being redistributed into OSPF.

2017-12-12T16:04:18-0800 2017-12-12T18:07:26-0800 https://support.ruckuswireless.com/articles/000006761 2017-12-12T16:04:18-0800 monthly 0.8 admin,premium knowledge_article_2766 knowledge_article_2766 2017-12-12T16:04:18-0800 000006761 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches Configuration Configuration, FastIron CX Series Is it possible to route the Virtual Router Redundancy Protocol (VRRP or VRRP-E) Virtual IP-Address? The VRRP IP-Address can be routed to a different switch/router/firewall using static route. Therefore other applications can use this information to set the forwarding address accordingly in their application to reach the VIP of the VRRP VRID. See an example below: interface ve 2 ip address 74.201.117.250/27 ip vrrp auth-type simple-text-auth ******** ip vrrp vrid 200 backup priority 200 ip-address 74.201.117.233 activate interface ve 249 ip address 10.4.249.221/24 ip route 74.201.117.233/32 10.4.249.253

Is it possible to route the Virtual Router Redundancy Protocol (VRRP or VRRP-E) Virtual IP-Address?

2017-12-12T16:04:18-0800 2017-12-12T18:07:21-0800 https://support.ruckuswireless.com/articles/000006784 2017-12-12T16:04:20-0800 monthly 0.8 admin,premium knowledge_article_2764 knowledge_article_2764 2017-12-12T16:04:20-0800 000006784 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches When configuring NTP, why is it recommended for the network device to have its time synchronized with at least four external NTP servers? The rationale behind this recommendation is to prevent NTP from getting into the<code style="color: red; font-size: 13px;"> falseticker </code>scenario below with two configured NTP servers, where both are deemed unreliable/inconsistent per the NTP algorithm and the clock is unable to synchronize with either one. <code style="color: black; font-size: 13px;">SSH@MLX# sho ntp associations</code> <code style="color: black; font-size: 13px;">address ref clock st when poll reach delay offset disp</code> <code style="color: black; font-size: 13px;">x~10.0.0.1 71.80.83.0 1 912 1024 377 1.885 -8121.33 0.111</code> <code style="color: black; font-size: 13px;">x~10.0.0.2 71.80.83.0 1 135 1024 377 2.006 -8157.77 0.111</code> <code style="color: black; font-size: 13px;">* synced, # selected, + candidate, - outlayer, x <code style="color: red; font-size: 13px;">falseticker</code>, ~ configured</code> If three NTP servers are configured and one of them is unreachable, then the MLX is still susceptible to the<code style="color: red; font-size: 13px;"> falseticker </code>scenario above. If four servers are configured and one is unreachable, then three servers remain, where one is available to break any tie between the other two.

When configuring NTP, why is it recommended for the network device to have its time synchronized with at least four external NTP servers?

2017-12-12T16:04:20-0800 2017-12-12T18:07:18-0800 https://support.ruckuswireless.com/articles/000007355 2017-12-12T16:13:21-0800 monthly 0.8 admin,premium knowledge_article_2761 knowledge_article_2761 2017-12-12T16:13:21-0800 000007355 Validated (External) Premium Ruckus icx switches Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, Ruckus ICX Switches Why-is-a-blue-light-blinking-inside-of-an-ICX7750-48F The blue LED flashing from within the unit is coming from a flash storage module; this indicates the storage is being accessed.

Explanation as to why a blue light is blinking inside an ICX7750-48F.

2017-12-12T16:13:21-0800 2017-12-12T18:07:08-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw3XCAS?attachment_index=0 2017-12-12T18:07:08-0800 monthly admin,premium knowledge_article_2761 knowledge_article_2761_attachment_1 ka25B000000CdCtQAK_Attachment__c.png 1499887.0 image/png https://support.ruckuswireless.com/articles/000007366 2017-12-12T16:13:23-0800 monthly 0.8 admin,premium knowledge_article_2758 knowledge_article_2758 2017-12-12T16:13:23-0800 000007366 Validated (External) Premium Ruckus icx switches System network management System Network Management, Ruckus ICX Switches What measures should be taken when a Fastiron device crashes during "write memory" and "end" command execution in a script continuously? Upgrade from to a version of code that contains the fix.

Brocade Fastiron devices crash during a "write memory" and "end" command execution in a script continuously.

2017-12-12T16:13:23-0800 2017-12-12T18:07:00-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw3iCAC?attachment_index=0 2017-12-12T18:07:00-0800 monthly admin,premium knowledge_article_2758 knowledge_article_2758_attachment_1 ka25B000000CcxoQAC_Attachment__c.pdf 1032572.0 application/pdf https://support.ruckuswireless.com/articles/000007402 2017-12-12T16:13:29-0800 monthly 0.8 admin,premium knowledge_article_2753 knowledge_article_2753 2017-12-12T16:13:29-0800 000007402 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure single OSPF area? OSPFv2 (IPv4) Configuration Details Enable an OSPFv2 (IPv4) process on the distribution switches in the schools and district office. ! Configure the OSPF process and assign the area as Area 0. Enable non-stop routing: SCH-DIST-201(config)# router ospf SCH-DIST-201(config-ospf-router)# area 0 SCH-DIST-201(config-ospf-router)# nonstop-routing SCH-DIST-201(config-ospf-router)# log adjacency A VE interface is a logical interface that comprises physical ports and port-channel interfaces. A VE interface is the Layer 3 counterpart of a VLAN interface. In order to create a VE interface, the routerinterface command is issued under the VLAN configuration; this configuration defines the VE interface number as well, and the configured VLAN and VE interface are coupled together. The port membership for VE is derived from the corresponding VLAN. Deletion of the VLAN deletes the VE interface, although the converse is not true; that is, deletion of the VE interface only removes the configuration from the VE interface. By virtue of being a Layer 3 only interface, the VE interface contains only configurations that pertain to Layer 3 (such as IP addresses, IP protocols). All Layer 2 configurations are available under the VLAN interfaces. ! To create a VE interface under the VLAN, configure the following: SCH-DIST-201(config)# interface vlan 1011 SCH-DIST-201(config-vlan-1011)# router-interface ve 1011 SCH-DIST-201(config-vlan-1011)# exit SCH-DIST-201(config)# interface ve 1011 SCH-DIST-201(config-vif-1011)# ip address 10.1.1.1/24 Enable OSPFv2 on interfaces with MD5 authentication on the distribution switches in the schools and district office. ! Under the interface participating in the OSPF process (connecting to the MAN), configure the following: SCH-DIST-201(config)# interface ve 3922 SCH-DIST-201(config-vif-3922)# ip ospf network point-to-point SCH-DIST-201(config-vif-3922)# ip ospf md5-authentication key-id 1 key brocade ! Under all interfaces facing the access side, configure the OSPF interface as passive. SCH-DIST-201(config)# interface ve 1011 SCH-DIST-201(config-vif-1011)# ip ospf passive Enable OSPF SNMP traps. ! Enable SNMP traps for OSPF on all OSPF-enabled routers: DO-DIST-301(config)# snmp-server enable traps ospf ! To make ICX switches send traps to the receiver from the same source IP address irrespective of the outgoing interface. DO-DIST-301(config)# snmp-server trap-source loopback 1 <h3>OSPFv3 (IPv6) Configuration Details</h3> Enable an OSPFv3 (IPv6) process on the distribution switches in the schools and district office. ! Configure an OSPFv3 process and assign the area as Area 0. Enable non-stop routing: SCH-DIST-201(config)# ipv6 router ospf SCH-DIST-201(config-ospf6-router)# area 0 SCH-DIST-201(config-ospf6-router)# nonstop-routing Enable OSPFv3 on interfaces with IPsec authentication on the distribution switches in the schools and district office. ! Under the interface participating in the OSPFv3 process (connecting to MAN), configure the following: DO-DIST-301(config)# interface loopback 1 DO-DIST-301(config-lbif-1)# ipv6 ospf area 0 DO-DIST-301(config-lbif-1)# end DO-DIST-301(config)# interface ve 3931 DO-DIST-301(config-vif-3931)# ipv6 ospf area 0 DO-DIST-301(config-vif-3931)# ipv6 ospf authentication ipsec spi 501 esp sha1 1234567890abcdef1234567890abcdef12345678 DO-DIST-301(config-vif-3931)# ipv6 ospf network point-to-point ! Under all interfaces facing the access side, configure the following: DO-DIST-301(config)# interface ve 4011 DO-DIST-301(config-vif-4011)# ipv6 ospf passive

How to configure single OSPF area?

2017-12-12T16:13:29-0800 2017-12-12T18:06:43-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4QCAS?attachment_index=0 2017-12-12T18:06:43-0800 monthly admin,premium knowledge_article_2753 knowledge_article_2753_attachment_1 ka25B000000CcMLQA0_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000007399 2017-12-12T16:13:29-0800 monthly 0.8 admin,premium knowledge_article_2750 knowledge_article_2750 2017-12-12T16:13:29-0800 000007399 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to manage User Accounts in Brocade Campus Network Switches? You can set one password for each of the following management privilege levels: <ul><li>Super User level</li><li>Port Configuration level</li><li>Read Only level</li></ul> You can assign a password to each management privilege level. You also can configure up to 16 user accounts consisting of a user name and password, and assign each user account to one of the three privilege levels. Follow the steps given below to set passwords for management privilege levels. 1. At the opening CLI prompt, enter the following command to change to the Privileged level of the EXEC mode. device> enable device# 2. Access the CONFIG level of the CLI by entering the following command. device# configure terminal device(config)# 3. Enter the following command to set the Super User level password. device(config)# enable super-user-password text ---------- Note: You must set the Super User level password before you can set other types of passwords. The Super User level password can be an alphanumeric string, but cannot begin with a number. ---------- 4. Enter the following commands to set the Port Configuration level and Read Only level passwords. device(config)# enable port-config-password text device(config)# enable read-only-password text Syntax: enable super-user-password text Syntax: enable port-config-password text Syntax: enable read-only-password text ---------- Note: If you forget your Super User level password, refer to the KB Article 7616 ---------- <h3>Local user accounts</h3> You can define up to 32 local user accounts on a Brocade device. User accounts regulate who can access the management functions in the CLI using the following methods: <ul><li>Telnet access</li><li>Web management access</li><li>SNMP access</li><li>SSH access</li></ul> A management privilege level, which can be one of the following <ul><li>Super User level (default)</li><li>Port Configuration level</li><li>Read Only level</li></ul> <h3>Local user account configuration</h3> You can create accounts for local users with or without passwords. Accounts with passwords can have encrypted or unencrypted passwords. You can assign privilege levels to local user accounts, but on a new device, you must create a local user account that has a Super User privilege before you can create accounts with other privilege levels. ---------- Note: You must grant the Super User level privilege to at least one account before you add accounts with other privilege levels. You need the Super User account to make further administrative changes. ---------- <h3>Local user accounts with no passwords:</h3> To create a user account without a password, enter a command similar to the following at the global configuration level of the CLI. device(config)# username wonka nopassword Syntax: [no] username user-string privilege privilege-level nopassword <h3>Local user accounts with unencrypted passwords</h3> If you want to use unencrypted passwords for local user accounts, enter a command such as the following at the global configuration level of the CLI. device(config)# username wonka password willy If password masking is enabled, press Enter before entering the password. device(config)# username wonka password Enter Password: ******* This command adds a local user account with the user name "wonka" and the password. This account has the Super User privilege level; this user has full access to all configuration and display features. device(config)# username waldo privilege 5 password whereis This command adds a user account for username "waldo", the password "whereis", and with the Read Only privilege level. This user can look for information but cannot make configuration changes. Syntax: [no] username user-string privilege privilege-level [ password password-string |nopassword ] You can enter up to 48 characters for user-string variable. ---------- Note: You must be logged on with Super User access (privilege level 0) to add user accounts or configure other access parameters. ---------- To display user account information, enter the following command. device# show users Syntax: show users <h3>Local user accounts with encrypted passwords</h3> You can create encrypted password for local user accounts using the username user-string createpassword password-string command. By default, the user account encrypted password is encrypted using the MD5 encryption type. You can also configure the password encryption service to encrypt the passwords with different types of encryption, such as SHA1 and SHA256, using the service password-encryption command. The password encryption methods can be reverted to the default MD5 encryption type by using the no form of the service password-encryption { sha1 | sha256 } command. <h3>Changing a local user password and privilege level</h3> To change a local user password for an existing local user account, enter a command such as the following at the global configuration level of the CLI. ---------- Note: You must be logged in with Super User access (privilege level 0) to change user passwords. ---------- device(config)# username wonka password willy If password masking is enabled, enter the username, press the Enter key, and then enter the password. device(config)# username wonka password Enter Password: The above commands change wonka's user name and password. The password can be up to 48 characters long and must differ from the current password and the two previously configured passwords. Using the username command, you can use the create-password option to create an encrypted password, or you can use the nopassword option to modify the user account to log in without a password. The privilege of the user account can be changed by specifying the privilege levels (0, 4, or 5). <h3>Preventing unauthorized deletion or modification of a user account</h3> By default, a user account can be deleted or modified without any authentication. Unauthorized deletion or modification of the user account can be prevented using the service local-user-protection command. If the user account security is enabled using the service local-user-protection command, modification of the password or privilege level of the user is permitted only upon successful validation of the existing user password. If the service local-user-protection command is enabled and you try to modify a user account, you will be prompted for confirmation to proceed. On confirmation, you will be prompted to provide the existing password. The attempt to modify a user account is successful only if correct password is entered. To prompt the user to confirm existing password before successful password modification, enter the commands such as the following example : device(config)# username user1 password xpassx device(config)# service local-user-protection device(config)# username user1 password ypasswordy User already exists. Do you want to modify: (enter 'y' or 'n'): y To modify or remove user, enter current password: ****** <h3>Deleting a local user account</h3> You can delete a local user account using the no username command. By default, a local user account can be deleted without any authentication.Unauthorized deletion of the user account can be prevented using the service local-user-protection command. If the user account security is enabled using the service local-user-protection command,deletion of user accounts is permitted only upon successful validation of the existing user password. If the service local-user-protection command is enabled and you try to delete a user account, you will be prompted for confirmation to proceed. On confirmation, you will be prompted to provide the existing password. The attempt to delete a user account is successful only if correct password is provided. ---------- Note: You must be logged in with Super User access (privilege level 0) to delete user accounts. ---------- For more details or reference related to this topic, make sure to download and check the attached 08040-securityguide.pdf document.

Managing User Accounts in Brocade Campus Network Switches

2017-12-12T16:13:29-0800 2017-12-12T18:06:36-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4LCAS?attachment_index=0 2017-12-12T18:06:36-0800 monthly admin,premium knowledge_article_2750 knowledge_article_2750_attachment_1 ka25B000000CcQ3QAK_Attachment__c.pdf 2662188.0 application/pdf https://support.ruckuswireless.com/articles/000007397 2017-12-12T16:13:29-0800 monthly 0.8 admin,premium knowledge_article_2749 knowledge_article_2749 2017-12-12T16:13:29-0800 000007397 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to load and save configuration files between Brocade devices and a TFTP server? <h3>Loading and saving configuration files</h3> For easy configuration management, all Brocade devices support both the download and upload of configuration files between the devices and a TFTP server on the network. You can upload either the startup configuration file or the running configuration file to the TFTP server for backup and use in booting the system: • Startup configuration file - This file contains the configuration information that is currently saved in flash. To display this file, enter the show configuration command at any CLI prompt. • Running configuration file - This file contains the configuration active in the system RAM but not yet saved to flash. These changes could represent a short-term requirement or general configuration change. To display this file, enter the show running-config or write terminal command at any CLI prompt. Each device can have one startup configuration file and one running configuration file. The startup configuration file is shared by both flash modules. The running configuration file resides in DRAM. When you load the startup-config file, the CLI parses the file three times. After you make configuration changes to the active system, you can save those changes by writing them to flash memory. When you write configuration changes to flash memory, you replace the startup configuration with the running configuration.To replace the startup configuration with the running configuration, enter the following command at any Enable or CONFIG command prompt. device# write memory ---------- Note: To return the unit to the default startup configuration, use the delete startup-config command ---------- <h3>Replacing the running configuration with the startup configuration</h3> If you want to back out of the changes you have made to the running configuration and return to the startup configuration, enter the following command at the Privileged EXEC level of the CLI. device# reload <h3>Copying a configuration file to or from a TFTP server</h3> To copy the startup-config or running-config file to or from a TFTP server, use the following method. ---------- Note: For details about the copy command used with IPv6, refer to the admin guide. ---------- Note: You can name the configuration file when you copy it to a TFTP server. However, when you copy a configuration file from the server to a Brocade device, the file is always copied as "startup-config" or "running-config", depending on which type of file you saved to the server. ---------- To initiate transfers of configuration files to or from a TFTP server using the CLI, enter one of the following commands: • copy startup-config tftp tftp-ip-addr filename - Use this command to upload a copy of the startup configuration file from the Layer 2 Switch or Layer 3 Switch to a TFTP server. • copy running-config tftp tftp-ip-addr filename - Use this command to upload a copy of the running configuration file from the Layer 2 Switch or Layer 3 Switch to a TFTP server. • copy tftp startup-config tftp-ip-addr filename - Use this command to download a copy of the startup configuration file from a TFTP server to a Layer 2 Switch or Layer 3 Switch. ---------- NOTE / RECOMMENDATION : It is recommended to use a script or the copy running-config tftp command for extensive configuration. You should not copy-paste configuration with more than 2000 characters into CLI. ----------

Loading and saving configuration files between Brocade devices and a TFTP server

2017-12-12T16:13:29-0800 2017-12-12T18:06:33-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4JCAS?attachment_index=0 2017-12-12T18:06:33-0800 monthly admin,premium knowledge_article_2749 knowledge_article_2749_attachment_1 ka25B000000CcPtQAK_Attachment__c.pdf 2470398.0 application/pdf https://support.ruckuswireless.com/articles/000007405 2017-12-12T16:13:31-0800 monthly 0.8 admin,premium knowledge_article_2748 knowledge_article_2748 2017-12-12T16:13:31-0800 000007405 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches What are Spanning tree Edge Ports and how to use them? In a K-12 network, all the end-user-facing access ports can be configured as edge ports. If a port is configured as an Edge port, it goes into a forwarding state instantly (within 100 msec). When the link to a port comes up and 802.1W detects that the port is an Edge port, that port instantly goes into a forwarding state. • Brocade strongly recommends enabling BPDU guard on Edge ports in order to control RSTP boundaries and also to secure the network from rogue switch attachments at the Edge. • Edge ports are explicitly configured to take advantage of the Edge port feature, instead of allowing the protocol to auto-detect them. ! Configure the edge port feature on the access ports connecting to the end-user workstations or computers. SCH-ACCESS-101(config)# interface ethernet 2/2/4 SCH-ACCESS-101(config-if-2/2/4)# spanning-tree 802-1w admin-edge-port

What are Spanning tree Edge Ports and how to use them?

2017-12-12T16:13:31-0800 2017-12-12T18:06:30-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4TCAS?attachment_index=0 2017-12-12T18:06:30-0800 monthly admin,premium knowledge_article_2748 knowledge_article_2748_attachment_1 ka25B000000CcMkQAK_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000007408 2017-12-12T16:13:31-0800 monthly 0.8 admin,premium knowledge_article_2743 knowledge_article_2743 2017-12-12T16:13:31-0800 000007408 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration Configuration, ICX 7250, ICX 7450, ICX 7750 How to Configure DHCPv4 helper and DHCPv6 relay? ! DHCPv4 Configuration: ! The DHCP client that initiates the DHCP transaction connects to the Layer 2 switch on a port assigned to a specific VLAN; this VLAN is used to reach the next-hop Layer 3 switch, where the IP address of the DHCP server is configured as the IP helper address under the corresponding Layer 3 interface. SCH-ACCESS-101(conf)# vlan 4082 by port SCH-ACCESS-101(config-vlan-4082)# untagged ethernet 2/2/4 SCH-ACCESS-101(config-vlan-4082)# tagged ethernet 2/1/24 SCH-DIST-201(conf)# vlan 4082 by port SCH-DIST-201(config-vlan-4082)# tagged ethernet 2/1/22 to 2/1/24 ethernet 2/2/1 ethernet 3/2/1 SCH-DIST-201(config-vlan-4082)# router-interface ve 4082 SCH-DIST-201(config-vlan-4082)# interface ve 4082 SCH-DIST-201(config-vif-4082)# ip address 172.25.82.1 255.255.255.0 SCH-DIST-201(config-vif-4082)# ip helper-address 1 172.25.10.162 ! DHCPv6 Configuration: ! The DHCPv6 client that initiates the DHCPv6 transaction connects to the Layer 2 switch on a port assigned to a specific VLAN; this VLAN is used to reach the next-hop Layer 3 switch, where the IPv6 address of the DHCPv6 server is configured as ipv6 dhcp-relay destination under the corresponding Layer 3 interface. SCH-DIST-201(conf)# vlan 1031 by port SCH-DIST-201(config-vlan-1031)# tagged ethernet 1/2/2 ethernet 2/1/20 ethernet 2/2/3 ethernet 3/1/20 ethernet 3/2/3 SCH-DIST-201(config-vlan-1031)# router-interface ve 1031 SCH-DIST-201(config-vlan-1031)# interface ve 1031 SCH-DIST-201(config-vif-1031)# ipv6 address fdd7:b215:19cb:4552:172:25:131:1/112 SCH-DIST-201(config-vif-1031)# ipv6 dhcp-relay destination fdd7:b215:19cb:4552:172:25:10:162 ! DHCP auto-config Configuration: ! Configure the DHCP gateway to reach the DHCP server, and enable the DHCP client on the local device. When the management VLAN is configured, the out-of-band management port goes down. SCH-ACCESS-101(conf)# dhcp-gateway-list 1 172.25.60.1 SCH-ACCESS-101(conf)# ip dhcp-client enable SCH-ACCESS-101(conf)# vlan 4081 by port SCH-ACCESS-101(config-vlan-4081)# tagged ethernet 2/1/24 SCH-ACCESS-101(config-vlan-4081)# management-vlan SCH-DIST-201(conf)# vlan 4081 by port SCH-DIST-201(config-vlan-4081)# tagged ethernet 2/1/22 to 2/1/24 ethernet 2/2/1 ethernet 3/2/1 SCH-DIST-201(config-vlan-4081)# router-interface ve 4081 SCH-DIST-201(config-vlan-4081)# interface ve 4081 SCH-DIST-201(config-vif-4081)# ip address 172.25.60.1 255.255.255.0 SCH-DIST-201(config-vif-4081)# ip helper-address 1 172.25.10.162 ! Note: It is important that the DHCPv4 and DHCPv6 servers be running and be reachable. Also, the IP addresses assigned to Layer 3 interfaces should be included in the exclusion list in DHCP servers.

How to Configure DHCPv4 helper and DHCPv6 relay

2017-12-12T16:13:31-0800 2017-12-12T18:06:15-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4WCAS?attachment_index=0 2017-12-12T18:06:15-0800 monthly admin,premium knowledge_article_2743 knowledge_article_2743_attachment_1 ka25B000000CcMaQAK_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000007406 2017-12-12T16:13:31-0800 monthly 0.8 admin,premium knowledge_article_2741 knowledge_article_2741 2017-12-12T16:13:31-0800 000007406 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Configuration Configuration, ICX 7250, ICX 7450, ICX 7750 How to configure Spanning Tree 802.1w? ! Configure the Rapid Spanning Tree Protocol and assign bridge priority. SCH-ACCESS-101(config)# vlan 1013 name wireless_vlan by port SCH-ACCESS-101(config-vlan-1013)# tagged ethernet 1/2/2 ethernet 2/2/2 ethernet 2/2/4 SCH-ACCESS-101(config-vlan-1013)# spanning-tree 802-1w SCH-ACCESS-101(config-vlan-1013)# spanning-tree 802-1w priority <0-65535> ! Configure the priority on the access switch as 65535; configure the priority on the distribution switch as 0 in order to elect the distribution switch as the root bridge. ! Show command to verify the Spanning Tree Protocol information and link status. SCH-ACCESS-101# show 802-1w vlan 1013 --- VLAN 1013 [ STP Instance owned by VLAN 1013 ] -------------------- Bridge IEEE 802.1W Parameters: Bridge Bridge Bridge Bridge Force tx Identifier MaxAge Hello FwdDly Version Hold hex sec sec sec cnt ffffcc4e248a7200 20 2 15 Default 3 RootBridge RootPath DesignatedBri- Root Max Fwd Hel Identifier Cost dge Identifier Port Age Dly lo hex hex sec sec sec 0000cc4e24f11230 2000 0000cc4e24f11230 1/2/2 20 15 2 Port IEEE 802.1W Parameters: <--- Config Params --><-------------- Current state -----------------> Port Pri PortPath P2P Edge Role State Designa- Designated Num Cost Mac Port ted cost bridge 1/1/13 128 20000 F F ALTERNATE DISCARDING 0 0000cc4e24f11230 1/1/14 128 20000 F F ALTERNATE DISCARDING 0 0000cc4e24f11230 1/1/15 128 20000 F F ALTERNATE DISCARDING 0 0000cc4e24f11230 1/1/16 128 20000 F F ALTERNATE DISCARDING 0 0000cc4e24f11230 1/1/17 128 20000 F F ALTERNATE DISCARDING 0 0000cc4e24f11230 1/2/2 128 2000 F F ROOT FORWARDING 0 0000cc4e24f11230 2/2/2 128 2000 F F ROOT FORWARDING 0 0000cc4e24f11230 2/2/4 128 2000 F T DESIGNATED FORWARDING 2000 ffffcc4e248a7200

How to configure Spanning Tree 802.1w?

2017-12-12T16:13:31-0800 2017-12-12T18:06:09-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4UCAS?attachment_index=0 2017-12-12T18:06:09-0800 monthly admin,premium knowledge_article_2741 knowledge_article_2741_attachment_1 ka25B000000CcM6QAK_Attachment__c.pdf 2328008.0 application/pdf https://support.ruckuswireless.com/articles/000007417 2017-12-12T16:13:33-0800 monthly 0.8 admin,premium knowledge_article_2739 knowledge_article_2739 2017-12-12T16:13:33-0800 000007417 Validated (External) Premium Icx 6610;Ruckus ICX 6610 Campus Switches Configuration Configuration, ICX 6610 What are the FAQs on ICX6610 PSU? Mixing power supply revisions? If you have an ICX 6610 with two power supplies, one REV A and one REV C. In this situation, the older REV A power supply remains running full or nearly-full fan speed at all times. Is this normal or expected behavior? Is it acceptable to run this switch in this configuration? *Please check the following questions and answers* ---------- Question: Is the fan speed issue when mixing power supply revisions known / expected? Answer: The increased fan speed of the older PSU is known to occur in a mixed Rev (A and C) configuration. ---------- Question: Is using mixed power supply revisions a supported configuration? Answer: The use of a mixed PSU configuration its allowed in the ICX6610 to operate normally. There will be an increase in the noise level of the ICX(normal or expected behaviour). ---------- Question: How will RMAs be handled in such situations? (ie existing unit is REV A, RMA unit is REV C). Answer: This would be up to TAC / Account Management teams. The amount of PSUs that need to be replaced would likely be a determining factor in how the RMA is handled. ---------- Note/review: If you noticed the increased fan speed/noise in two different 6610 chassis, but only when mixing power supply revisions thats a normal or expected behaviour. When two matching power supplies are used (either new or old) you will notice that the fan speed has normal levels in those and other 6610 chassis. ---------- Related Articles: Please check the following Articles if you need more details related with hardware. ICX 6610 Hardware Brief -Article:000006647 How do I identify RPS15 Non-PoE PSU vs RPS16 PoE PSU for ICX6610? -Article:000006320 Brocade ICX 6610 Series Switches Architecture Brief -Article: 000006640 For more information, visit: www.brocade.com/icx6610 or check the attachments here.

FAQ on ICX6610 PSU's

2017-12-12T16:13:33-0800 2017-12-12T18:06:03-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4iCAC?attachment_index=0 2017-12-12T18:06:03-0800 monthly admin,premium knowledge_article_2739 knowledge_article_2739_attachment_1 ka25B000000CcamQAC_Attachment__c.pdf 241409.0 application/pdf http://support.ruckuswireless.com/article_attachments/kA250000000Tw4iCAC?attachment_index=1 2017-12-12T18:06:03-0800 monthly admin,premium knowledge_article_2739 knowledge_article_2739_attachment_1 ka25B000000CcamQAC_Attachment2__c.pdf 945727.0 application/pdf https://support.ruckuswireless.com/articles/000007416 2017-12-12T16:13:33-0800 monthly 0.8 admin,premium knowledge_article_2738 knowledge_article_2738 2017-12-12T16:13:33-0800 000007416 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to create MAC filter-groups? Defining MAC address filters MAC layer filtering enables you to build access lists based on MAC layer headers in the Ethernet/IEEE 802.3 frame. You can filter on the source and destination MAC addresses. The filters apply to incoming traffic only. You configure MAC address filters globally, then apply them to individual interfaces. To apply MAC address filters to an interface, you add the filters to that interface MAC address filter group. The device takes the action associated with the first matching filter. If the packet does not match any of the filters in the access list, the default action is to drop the packet. If you want the system to permit traffic by default, you must specifically indicate this by making the last entry in the access list a permit filter. An example is given below. Syntax: mac filter last-index-number permit any any For devices running Layer 3 code, the MAC address filter is applied to all inbound Ethernet packets, including routed traffic. This includes those port associated with a virtual routing interface. However, the filter is not applied to the virtual routing interface. It is applied to the physical port. When you create a MAC address filter, it takes effect immediately. You do not need to reset the system. However, you do need to save the configuration to flash memory to retain the filters across system resets. MAC address filters command syntax To configure and apply a MAC address filter, enter commands such as the following. device(config)# mac filter 1 deny 0000.0075.3676 ffff.0000.0000 device(config)# mac filter 2 deny any ffff.ffff.ffff ffff.ffff.ffff device(config)# mac filter 3 deny any 0180.c200.0000 ffff.ffff.fff0 device(config)# mac filter 4 deny any 0000.0034.5678 ffff.ffff.ffff device(config)# mac filter 5 deny any 0000.0045.6789 ffff.ffff.ffff device(config)# mac filter 1024 permit any any device(config)# int e 1 device(config-if-e1000-1)# mac filter-group 1 to 5 1024 These commands configure filter 1 to deny traffic with a source MAC address that begins with "3565" to any destination, and configure filters 2 through 5 to deny traffic with the specified destination MAC addresses. Filter 1024 permits all traffic that is not denied by any other filter. NOTE Once you apply a MAC address filter to a port, the device drops all Ethernet traffic on the port that does not match a MAC permit filter on the port. Syntax: [no] mac filter filter-num { permit | deny } [ src-mac mask | any ] [ dest-mac mask | any ] You can configure up to 507 MAC filters for filter-num. The default value is 512. The permit or deny argument determines the action the software takes when a match occurs. The src-mac mask | any parameter specifies the source MAC address. You can enter a specific address value and a comparison mask or the keyword any to filter on all MAC addresses. Specify the mask using f (ones) and zeros. For example, to match on the first two bytes of the address aabb.ccdd.eeff, use the mask ffff.0000.0000. In this case, the filter matches on all MAC addresses that contain "aabb" as the first two bytes. The filter accepts any value for the remaining bytes of the MAC address. If you specify any , do not specify a mask. In this case, the filter matches on all MAC addresses. The dest-mac mask | any parameter specifies the destination MAC address. The syntax rules are the same as those for the src-mac mask | any parameter. Syntax: no mac filter log-enable Globally enables logging for filtered packets. Syntax: no mac filter-group log-enable Enables logging for filtered packets on a specific port. Syntax: [no] mac filter-group filter-number [ to filter-number | filter-number ... ] Applies MAC address filters to a port. When applying the filter-group to the interface, specify each line to be applied separately or use the to keyword to apply a consecutive range of filter lines, for example, 1 3 to 8 10. NOTE The filters must be applied as a group. For example, if you want to apply four filters to an interface, they must all appear on the same command line. NOTE You cannot add or remove individual filters in the group. To add or remove a filter on an interface, apply the filter group again containing all the filters you want to apply to the port. NOTE If you apply a filter group to a port that already has a filter group applied, the older filter group is replaced by the new filter group. When a MAC address filter is applied to or removed from an interface, a Syslog message such as the following is generated. SYSLOG: <14>Jan 1 00:00:00 10.44.9.11 MAC Filter applied to port 1/1/2 by tester from telnet session (filter id=5 ). SYSLOG: <14>Jan 1 00:00:00 10.44.9.11 MAC Filter removed from port 1/1/2 by tester from telnet session (filter id=5 ). The Syslog messages indicate that a MAC address filter was applied to the specified port by the specified user during the specified session type. Session type can be Console, Telnet, SSH, Web, SNMP, or others. The filter IDs that were added or removed are listed.

How to create MAC filter-groups?

2017-12-12T16:13:33-0800 2017-12-12T18:06:00-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4hCAC?attachment_index=0 2017-12-12T18:06:00-0800 monthly admin,premium knowledge_article_2738 knowledge_article_2738_attachment_1 ka25B000000CcKtQAK_Attachment__c.pdf 2673883.0 application/pdf https://support.ruckuswireless.com/articles/000007428 2017-12-12T16:13:34-0800 monthly 0.8 admin,premium knowledge_article_2731 knowledge_article_2731 2017-12-12T16:13:34-0800 000007428 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Why is there PD detection fault on several switches with Aruba AP second port? <ul><li>Aruba 325i AP is not compliant to the IEEE 802.3af/at standards. The second Ethernet port is sourcing voltage back onto Brocade ICX7250-48P port. </li><li>Aruba has confirmed there is a known issue with the PoE power circuitry that affects the 320 AP series. AP’s with only 9 serial number characters have known design issue. Per Aruba fix is in place with AP’s that have 10 serial number characters. </li></ul> <ul><li>Open support case with Aruba on the 320 series APs. Issue the 325i AP is sourcing voltage back onto PSE which is not in compliance with the IEEE802.3af/at standards.</li><li>Physically disconnect second port from Aruba AP as a work around until Aruba HW can be replaced.</li></ul>

PD detection fault on several switches with Aruba AP second port

2017-12-12T16:13:34-0800 2017-12-12T18:05:42-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4tCAC?attachment_index=0 2017-12-12T18:05:42-0800 monthly admin,premium knowledge_article_2731 knowledge_article_2731_attachment_1 ka25B000000CcHaQAK_Attachment__c.pdf 107293.0 application/pdf https://support.ruckuswireless.com/articles/000007434 2017-12-12T16:13:34-0800 monthly 0.8 admin,premium knowledge_article_2729 knowledge_article_2729 2017-12-12T16:13:34-0800 000007434 Validated (External) Premium Ruckus icx switches;Fastiron ws series;Fastiron cx series;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration Configuration, Ruckus ICX Switches, FastIron WS Series, FastIron CX Series How do I configure ShoreTel IP phones to work with Brocade access switches? Configure your Brocade switch VLANs and switchports as you normally would when using IP phones (CDP, FDP, and LLDP are optional). Here is an example: vlan 10 name Data by port tagged ethe 11 to 50 vlan 20 name voice by port tagged ethe 11 to 50 interface ethernet 11 to 48 dual-mode 10 inline power voice-vlan 20 Now use DHCP to make sure your ShoreTel phones are aware of the voice VLAN. Your DHCP server needs to have the following string value for option 156. Please remember to add this line to both scopes for the data VLAN and the voice VLAN: ftpservers=x.x.x.x,layer2tagging=1,vlanid=20 Now when the phone boots, it will first be given an IP address via DHCP on the data VLAN subnet. It will eventually receive the VLAN information on option 156 via DHCP. After it receives this information, the phone will reboot, tag it's packets on the voice VLAN, and then get a new IP address via DHCP on the voice VLAN. It will now continue using the voice VLAN for voice traffic going forward. See the attached document from ShoreTel for more details.

How do I configure ShoreTel IP phones to work with Brocade access switches?

2017-12-12T16:13:34-0800 2017-12-12T18:05:36-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw4zCAC?attachment_index=0 2017-12-12T18:05:36-0800 monthly admin,premium knowledge_article_2729 knowledge_article_2729_attachment_1 ka25B000000CcECQA0_Attachment__c.pdf 636773.0 application/pdf https://support.ruckuswireless.com/articles/000007443 2017-12-12T16:13:36-0800 monthly 0.8 admin,premium knowledge_article_2727 knowledge_article_2727 2017-12-12T16:13:36-0800 000007443 Validated (External) Premium Ruckus icx switches System network management System Network Management, Ruckus ICX Switches How do I identify RPS15 Non-PoE PSU vs RPS16 PoE PSU for ICX6610? <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">There are two flavors of the PSU for ICX6610. RPS15 is a 250W system only (Non-PoE) power supply and RSP16 is a 1000W PoE capable power supply for the ICX6610. The default system ships with one PSU based on the model number - i.e. RPS15 for ICX6610-24F, or ICX6610-24, or ICX6610-24; RPS16 for ICX6610-24P or ICX6610-28P. A redundant secondary PSU is optional and can be ordered. If using a secondary PSU, the PSU will load share. It is desirable to be able to quickly identify what is installed without pulling the unit out to read the label on the top side of the PSU. It is also important to use the correct SKU for the product, as well as not to mix the two different models in a given chassis. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Here is the way to differentiate the models RPS15 and RPS16: <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">1. External differences <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1">RPS15 (non PoE)</td><td colspan="1" rowspan="1">RPS16 (PoE)</td></tr><tr><td colspan="1" rowspan="1">location of power connector</td><td colspan="1" rowspan="1">right side PSU</td><td colspan="1" rowspan="1">left side of the PSU</td></tr><tr><td colspan="1" rowspan="1">EMI Gasket color</td><td colspan="1" rowspan="1">copper</td><td colspan="1" rowspan="1">aluminum</td></tr><tr><td colspan="1" rowspan="1">external access windows</td><td colspan="1" rowspan="1">3 on top right rear</td><td colspan="1" rowspan="1">none</td></tr></tbody></table> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">2. Product Label <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"> <table border="0" cellpadding="0" cellspacing="0"><colgroup><col></col><col></col><col></col></colgroup><tbody><tr><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1">RPS15 (non PoE)</td><td colspan="1" rowspan="1">RPS16 (PoE)</td></tr><tr><td colspan="1" rowspan="1">P/N</td><td colspan="1" rowspan="1">P/N 23-0000144-01</td><td colspan="1" rowspan="1">P/N 23-0000142-01</td></tr><tr><td colspan="1" rowspan="1">Output capacity</td><td colspan="1" rowspan="1">Output: +12 V, 12.8A Max 250W</td><td colspan="1" rowspan="1">DC Output: V1 12.0V; 20.8A V2 55.0V; 13.6A</td></tr></tbody></table> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">3. Data on EEPROM <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">–Use CLI command<code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> dm ps [1/2] eeprom</code> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);">Below is a sample output: <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">ICX6610-24P Switch# dm ps 1 eeprom The Power Supply 1 doesn't present. ICX6610-24P Switch# ICX6610-24P Switch# dm ps 2 eeprom 0000 56 31 31 31 32 32 2c 20 20 20 42 4c 45 32 45 32 V11122, BLE2E2 0010 32 47 30 30 43 20 20 20 20 20 20 2c 32 33 2d 30 2G00C ,23-0 0020 30 30 30 31 34 32 2d 30 31 2c 20 31 2c 45 4d 52 000142-01, 1,EMR 0030 53 4e 2c 41 41 32 36 38 30 30 4c 2d 45 20 20 20 SN,AA26800L-E 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ </code> Note: The information on this document pertains to RPS15 and RPS16 for ICX only; the CLI commands<code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> dm ps 1|2 eepom </code>and<code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;"> dm ps-device </code>are not supported on FCX platform. <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Running 7.3.00a</code> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">FCX624SHPOE-ADV Router# dm ps 1 eep The cli is not applied to Cheetah5 only. 0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</code> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">FCX624SHPOE-ADV Router# dm ps-device 1 power-off power-on read-reg set-poe-power show write-reg FCX624SHPOE-ADV Router# dm ps-device 1 power-on <cr> FCX624SHPOE-ADV Router# dm ps-device 1 power-on Powering on/off of power supply is not supported on this platform. FCX624SHPOE-ADV Router# dm ps-device 1 power-off Powering on/off of power supply is not supported on this platform.</code> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Alert: dm ps-device 1 show may cause a TLB crash (see below)</code> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">CX-1_682809# dm ps-device 1 show Incomplete command. FCX-1_682809# dm ps-device 1 show all Show all data status Show status version Show version FCX-1_682809# dm ps-device 1 show all</code> <p style="text-align: left; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; white-space: normal; background-color: rgb(255, 255, 255);"><code style="color: black; font-size: 13px; font-style: normal; font-weight: normal;">Exception Type 1200 (Data TLB error), main Task halted - Start sds to examine the problem.</code>

This article will explain how to read the label on the top of the PSU to be certain what model it is deployed as

2017-12-12T16:13:36-0800 2017-12-12T18:05:28-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw58CAC?attachment_index=0 2017-12-12T18:05:28-0800 monthly admin,premium knowledge_article_2727 knowledge_article_2727_attachment_1 ka25B000000CbyvQAC_Attachment__c.pptx 2479907.0 application/vnd.openxmlformats-officedocument.presentationml.presentation https://support.ruckuswireless.com/articles/000007441 2017-12-12T16:13:36-0800 monthly 0.8 admin,premium knowledge_article_2724 knowledge_article_2724 2017-12-12T16:13:36-0800 000007441 Validated (External) Premium Ruckus icx switches Known issues and workarounds Known Issues and Workarounds, Ruckus ICX Switches Why does Dynamic LAG not stay UP when ports are connected to open DBSD server? Upgrade to the 8030j release or higher in the 8030 code stream.

Dynamic LAG does not stay UP when ports are connected to open DBSD server.

2017-12-12T16:13:36-0800 2017-12-12T18:05:21-0800 http://support.ruckuswireless.com/article_attachments/kA250000000Tw56CAC?attachment_index=0 2017-12-12T18:05:21-0800 monthly admin,premium knowledge_article_2724 knowledge_article_2724_attachment_1 ka25B000000Cc4oQAC_Attachment__c.pdf 2881356.0 application/pdf https://support.ruckuswireless.com/articles/000006535 2017-12-12T16:14:23-0800 monthly 0.8 admin,premium knowledge_article_2721 knowledge_article_2721 2017-12-12T16:14:23-0800 000006535 Validated (External) Premium Icx 7250;Icx 7450;Icx 7750;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches;RUCKUS ICX 7750 Campus Switches Installation Installation, ICX 7250, ICX 7450, ICX 7750 How to install tshark openflow dissector on Ubuntu 14.0.4? Install the latest stable dev branch of wireshark: <pre class="ckeditor_codeblock"> sudo add-apt-repository ppa:wireshark-dev/stable sudo apt-get install wireshark sudo apt-get install tshark sudo apt-get update</pre> https://launchpad.net/~wireshark-dev/+archive/ubuntu/stable Verify the openflow dissector is available: <pre class="ckeditor_codeblock"> $ tshark -G protocols | grep -i openflow OpenFlow openflow openflow OpenFlow 1.0 openflow_v1 openflow_v1 OpenFlow 1.3 openflow_v4 openflow_v4 OpenFlow 1.4 openflow_v5 openflow_v5</pre> Allow the current user to capture network traffic: <pre class="ckeditor_codeblock"> sudo dpkg-reconfigure wireshark-common sudo adduser $USER wireshark</pre> <div style="margin-left: 40px;">After this change it may be required to reconnect to the server.</div> Capture traffic: <div style="margin-left: 40px;">In this example, traffic on tcp.port 6633 will be interpreted with the openflow_v4 dissector and the filter on which we are capturing traffic will be 'host 10.10.10.10'</div> <pre class="ckeditor_codeblock"> tshark -i eth0 -d tcp.port==6633,openflow -O openflow_v4 -f 'host 10.10.10.10'</pre>

The openflow dissector is not installed by default when installing wireshark on Ubuntu. These are the steps for installing the dissector and also changing the priveleges so it can be run as non-root user.

2017-12-12T16:14:23-0800 2017-12-12T18:05:11-0800 https://support.ruckuswireless.com/articles/000006543 2017-12-12T16:14:23-0800 monthly 0.8 admin,premium knowledge_article_2716 knowledge_article_2716 2017-12-12T16:14:23-0800 000006543 Validated (External) Premium Ruckus icx switches Configuration;Security;System network management Configuration, Security, System Network Management, Ruckus ICX Switches What is the Brocade Campus - DSCP QoS Marking with ACLs configuration and explanation? Brocade Campus - DSCP QoS Marking with ACLs QoS options for IP ACLs Quality of Service (QoS) options enable you to perform QoS for packets that match the ACLs. Using an ACL to perform QoS is an alternative to directly setting the internal forwarding priority based on incoming port, VLAN membership, and so on. (This method is described in "QoS priorities-to-traffic assignment" section in the FastIron Ethernet Switch Traffic Management Guide .) The following QoS ACL options are supported: • dscp-cos-mapping - This option is similar to the dscp-matching command (described below). This option maps the DSCP value in incoming packets to a hardware table that provides mapping of each of the 0 - 63 DSCP values, and distributes them among eight traffic classes (internal priorities) and eight 802.1p priorities. By default, the Brocade device does the 802.1p to CoS mapping. If you want to change the priority mapping to DSCP to CoS mapping, you must enter the following ACL statement. permit ip any any dscp-cos-mapping • dscp-marking - Marks the DSCP value in the outgoing packet with the value you specify. • internal-priority-marking and 802.1p-priority-marking - Supported with the DSCP marking option, these commands assign traffic that matches the ACL to a hardware forwarding queue (internal-priority-marking ), and re-mark the packets that match the ACL with the 802.1p priority (802.1p-priority-marking ). • dscp-matching - Matches on the packet DSCP value. This option does not change the packet forwarding priority through the device or mark the packet. • 802.1p-priority-matching - Inspects the 802.1p bit in the ACL that can be used with adaptive rate limiting. For details, refer to "Inspecting the 802.1p bit in the ACL for adaptive rate limiting" section in the FastIron Ethernet Switch Traffic Management Guide. Configuration notes for QoS options on FCX and ICX devices •These devices do not support marking and prioritization simultaneously with the same rule (and do not support DSCP CoS mapping at all). To achieve this, you need to create two separate rules. In other words, you can mark a rule with DSCP or 802.1p information, or you can prioritize a rule based on DSCP or 802.1p information. You can enable only one of the following ACL options per rule: ? 802.1p-priority-marking ? dscp-marking ? internal-priority-marking For example, any one of the following commands is supported. device(config)#access-list 101 permit ip any any dscp-marking 43 or device(config)#access-list 101 permit ip any any 802.1p-priority-marking or device(config)#access-list 101 permit ip any any internal-priority-marking 6 The following command is supported on FCX, ICX 6610, ICX 6450 devices (24 and 48-port models), mixed stack devices (ICX 6610 devices stacked with ICX 6450 devices), ICX 6650, and ICX 7750. It is not supported on FastIron SX chassis based platforms. device(config)# access-list 101 permit ip any any dscp-marking 43 802.1p-priority-marking 4 internal-priority-marking 6 Using an ACL to map the DSCP value (DSCP CoS mapping)? NOTE: The dscp-cos-mapping option is supported on FSX devices only. It is not supported on Stackable devices. This feature is not applicable to outbound traffic. The dscp-cos-mapping option maps the DSCP value in incoming packets to a hardware table that provides mapping of each of the 0 - 63 DSCP values, and distributes them among eight traffic classes (internal priorities) and eight 802.1p priorities. NOTE: The dscp-cos-mapping option overrides port-based priority settings Using an IP ACL to mark DSCP values (DSCP marking)? The dscp-marking option for extended ACLs allows you to configure an ACL that marks matching packets with a specified DSCP value. You also can use DSCP marking to assign traffic to a specific hardware forwarding queue (refer to Using an ACL to change the forwarding queue on page 151 from the attachment/guide included in this KB Article). For example, the following commands configure an ACL that marks all IP packets with DSCP value 5. The ACL is then applied to incoming packets on interface 7. Consequently, all inbound packets on interface 7 are marked with the specified DSCP value. device(config)# access-list 120 permit ip any any dscp-marking 5 dscp-cos-mapping device(config)# interface 1/1/7 device(config-if-e1000-1/1/7)# ip access-group 120 in Syntax: dscp-marking dscp-value The dscp-marking dscp-value parameter marks all traffic to a new DSCP value which can be from 0 through 63. NOTE: The dscp-cos-mapping option is supported on FSX devices only YouTube video: <a href="https://www.youtube.com/watch?v=WoQuVr18m_Y&index=65&list=PLgZ5m9z7RBHUcQ4bDIjRJDxDn4EGpFUol" target="_blank">https://www.youtube.com/watch?v=WoQuVr18m_Y&index=65&list=PLgZ5m9z7RBHUcQ4bDIjRJDxDn4EGpFUol</a>

Brocade Campus - DSCP QoS Marking with ACLs configuration and explanation.

2017-12-12T16:14:23-0800 2017-12-12T18:05:00-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvqFCAS?attachment_index=0 2017-12-12T18:05:00-0800 monthly admin,premium knowledge_article_2716 knowledge_article_2716_attachment_1 ka25B000000CdHyQAK_Attachment__c.pdf 3913915.0 application/pdf https://support.ruckuswireless.com/articles/000006573 2017-12-12T16:14:25-0800 monthly 0.8 admin,premium knowledge_article_2712 knowledge_article_2712 2017-12-12T16:14:25-0800 000006573 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches How to configure Authentication-Method Lists? Define Authentication-Method List It specifies the access method (Telnet, Web, SNMP, and so on) configured to set the order in which the device tries one or more of the authentication methods below: <ul><li> Local Telnet login password </li><li> Local password for the Super User privilege level </li><li> Local user accounts configured on the device </li><li> Database on a TACACS or TACACS+ server </li><li> Database on a RADIUS server </li><li> No authentication </li></ul> Up to seven authentication methods can be specified per access method. Configuration Considerations For CLI access, configure authentication-method lists if you want the device to authenticate access using local user accounts or a RADIUS server. For Web management access with no authentication-method list configured, the device authenticates using the SNMP community strings. For INM devices, the default authentication method (if no authentication-method list is configured for SNMP) is the CLI Super User level password. Authentication-Method List Configuration Syntax: [no] aaa authentication snmp-server | web-server | enable | login default <method1> [<method2>] [<method3>] [<method4>] [<method5>] [<method6>] [<method7>] Example: Configure the device to use local user accounts to authenticate attempts via: Web management interface: Device(config)# aaa authentication web-server default local NMC, e.g., IronView Network Manager: Device(config)# aaa authentication snmp-server default local CLI Privileged EXEC and CONFIG levels: Device(config)# aaa authentication enable default local Configure the device to use local user accounts to authenticate attempts via the RADIUS server first, to authenticate access to the CLI Privileged EXEC and CONFIG levels. Then consult the local user accounts if the RADIUS server is unavailable. Enter this command: Device(config)# aaa authentication enable default radius local

How to configure Authentication-Method Lists?

2017-12-12T16:14:25-0800 2017-12-12T18:04:52-0800 https://support.ruckuswireless.com/articles/000006732 2017-12-12T16:14:27-0800 monthly 0.8 admin,premium knowledge_article_2706 knowledge_article_2706 2017-12-12T16:14:27-0800 000006732 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products Why do IP phones not work in stack of unit 8 after RMA? To resolve the issue, remove the cli configuration "no legacy-inline-power" in the configuration under stack unit 8. Go back to the default of enabling "legacy-inline-power" under "stack unit 8." <code style="color: black; font-size: 13px;">ICX6610-48 Router#sh run ... stack unit 8 module 1 icx6610-24p-poe-port-management-module module 2 icx6610-qsfp-10-port-160g-module module 3 icx6610-8-port-10g-dual-mode-module <code style="color: red; font-size: 13px;">no legacy-inline-power</code> stack-trunk 8/2/1 to 8/2/2 stack-trunk 8/2/6 to 8/2/7 stack-port 8/2/1 8/2/6</code> To remove the cli and go back to the default of supporting Legacy-inline-power: <code style="color: black; font-size: 13px;">ICX6610-48 Router(config)#stack unit 8 ICX6610-48 Router(config-unit-8)#legacy-inline-power ICX6610-48 Router(config-unit-8)#sh run | beg stack unit 8 stack unit 8 module 1 icx6610-24p-poe-port-management-module module 2 icx6610-qsfp-10-port-160g-module module 3 icx6610-8-port-10g-dual-mode-module stack-trunk 8/2/1 to 8/2/2 stack-trunk 8/2/6 to 8/2/7 stack-port 8/2/1 8/2/6 stack enable ! - snipped</code> After enabling the "legacy-inline-power", you will need to unplug and plug back in any legacy PoE devices to trigger a power device discover. (A switch/Router reload is not necessary.) You should see the Legacy Power Device coming up, consuming inline power. Sample output of the legacy IP phone on ethernet 8/1/12. <code style="color: black; font-size: 13px;">Port Admin Oper ---Power(mWatts)--- PD Type PD Class Pri <code style="color: red; font-size: 13px;">Fault</code> State State Consumed Allocated </code><code style="color: red; font-size: 13px;"> /Error </code> <code style="color: black; font-size: 13px;">--------------------------------------------------------------------------</code> <code style="color: black; font-size: 13px;">8/1/1 On On 6948 15400 802.3af Class 3 3 n/a 8/1/2 On Off 0 0 n/a n/a 3 n/a 8/1/3 Off Off 0 0 n/a n/a 3 n/a 8/1/4 On Off 0 0 n/a n/a 3 n/a 8/1/5 On Off 0 0 n/a n/a 3 n/a 8/1/6 On Off 0 0 n/a n/a 3 n/a 8/1/7 On Off 0 0 n/a n/a 3 n/a 8/1/9 On Off 0 0 n/a n/a 3 n/a 8/1/10 On Off 0 0 n/a n/a 3 n/a 8/1/11 On Off 0 0 n/a n/a 3 n/a <code style="color: red; font-size: 13px;">8/1/12 On On 2351 6300 Legacy n/a 3 n/a</code> 8/1/13 On Off 0 0 n/a n/a 3 n/a 8/1/14 On Off 0 0 n/a n/a 3 n/a 8/1/15 On Off 0 0 n/a n/a 3 n/a 8/1/16 On Off 0 0 n/a n/a 3 n/a .... ICX6610-48 Router(config-if-e1000-8/1/3)#sh mac e 8/1/12 Total active entries from port 8/1/12 = 1 MAC-Address Port Type Index 000f.8f16.d5aa 8/1/12 Dynamic 28537 </code> Disabling support for PoE legacy power-consuming devices <div> <div> <div>Brocade PoE devices automatically support most legacy power consuming devices (devices not compliant with 802.3af 802.3at), as well as all 802.3af- and 802.3at-compliant devices. If desired, you can disable and re-enable support for legacy PoE power consuming devices on a global basis (on the entire device) or on individual slots (chassis devices only). When you disable legacy support, 802.3af- and 802.3at-compliant devices are not affected. To disable support for legacy power consuming devices on a non-stackable device, enter the following command at the global CONFIG level of the CLI: </div> <div><code style="color: red; font-size: 13px;">Brocade(config)# no legacy-inline-power</code></div> <div>To disable support for legacy power consuming devices on a stackable device, enter the following command at the stack unit CONFIG level of the CLI: </div> <div><code style="color: red; font-size: 13px;">Brocade(config-unit-2)# no legacy-inline-power</code></div> <div> On chassis devices, you can disable support for legacy power consuming devices per slot. To disable legacy support on all ports in slot 2, enter the following command at the global CONFIG level of the CLI: </div> <div><code style="color: red; font-size: 13px;">Brocade(config)# no legacy-inline-power 2</code> ---------- Note: The no legacy-inline-power command does not require a software reload if it is entered prior to connecting the PDs. If the command is entered after the PDs are connected, the configuration must be saved (write memory), and the software reloaded, after the change is placed into effect.</div> <div>---------- Syntax:<code style="color: black; font-size: 13px;">[no] legacy-inline-power [<slotnum>]</code></div> <div> To re-enable support for legacy power consuming devices after it has been disabled, enter the <code style="color: black; font-size: 13px;">legacy-inline-power</code> command (without the no parameter). The <slotnum> variable is required on chassis devices when disabling or re-enabling legacy support on a slot.</div> <div> Use the <code style="color: black; font-size: 13px;">show run</code> command to view whether support for PoE legacy power consuming devices is enabled or disabled ..."</div> </div> </div> Please consult the Configuration Guide on this feature: "...

IP phones do not work in stack a unit 8 after RMA

2017-12-12T16:14:27-0800 2017-12-12T18:04:41-0800 https://support.ruckuswireless.com/articles/000006749 2017-12-12T16:14:27-0800 monthly 0.8 admin,premium knowledge_article_2704 knowledge_article_2704 2017-12-12T16:14:27-0800 000006749 Validated (External) Premium Ruckus icx switches;Brocade eos products Configuration Configuration, Ruckus ICX Switches, Brocade EOS Products What is the difference in setup ACL accounting for switch image vs router image in FastIron? Apply the acl on the VE interface of the port that needs to be metered <code>FCX#(config)#sh run vlan</code> <code>vlan 1 name DEFAULT-VLAN by port</code> <code>!</code> <code>vlan 3 by port</code> <code>!</code> <code>vlan 5 by port</code> <code> tagged ethe 1/1/2 ethe 1/1/4</code> <code>!</code> <code>vlan 7 by port</code> <code> tagged ethe 1/1/1 to 1/1/3</code> <code> router-interface ve 7 </code> < ---- Ve 7 route for vlan 7 which incl 1/1/1 to 1/1/3 ! ! <code>! configure Traffic-policy and ext access-list for interesting traffic, then apply to the VE </code> <code>FCX#(config)# traffic-policy TPD5 count FCX#(config)# traffic-policy TPD6 count</code> <code>FCX#(config)#access-list 101 permit ip host 10.10.12.2 any traffic-policy TPD5</code> <code>FCX#(config)#access-list 101 permit ip host 10.10.12.10 any traffic-policy TPD6</code> <code>FCX#(config)#access-list 101 permit ip any any</code> <code>FCX#(config)#sh run | inc traffic-policy</code> <code>traffic-policy TPD5 count traffic-policy TPD6 count</code> <code>access-list 101 permit ip host 10.10.12.2 any traffic-policy TPD5</code> <code>access-list 101 permit ip host 10.10.12.10 any traffic-policy TPD6 </code> < ---- using another Traffic policy for a different flow (TPD6 ) <code>FCX#(config)#int ve 7</code> <code>FCX#(config-vif-7)#ip access-group 101 in</code> <code>FCX#(config-vif-7)#end</code> <code>FCX##sh traffic-policy TPD5</code> <code>Traffic Policy - TPD5:</code> <code> </code> <code> Metering Not Enabled</code> <code> </code><code>Counting Enabled</code> <code> <code>Number of References/Bindings: 2 </code> </code><code> </code>< --- Note the traffic policy is bounded to 2 interfaces, due to only 2 active intefaces in VLAN 7 (VE 7). <code>FCX##sh statis traffic-policy TPD5</code> <code>Traffic Policy TPD5:</code> <code>Port Regions:</code> <code>---------------</code> <code>0 : 1/1/1-1/1/24,1/3/1,1/3/2</code> <code> </code> <code> General Counters:</code> <code> Port Region# Byte Count Packet Count</code> <code> ---------------- -------------------- --------------------</code> <code> 0 0 0</code> <code> All port regions 0 0</code> <code>FCX##</code> By enabling ACL-per-port-per-vlan it gives option to apply an inbound IPv4 ACL to specific VLAN members on a port (Layer 2 devices only) or to specific ports on a virtual interface ( VE) (Layer 3 devices only). By default, this feature support is disabled, once enabled; the device must be reloaded to take effect. It has to be applied, again, to the VE interface not the physical port, in this way. This is how it is done. <code>FCX#(config-vlan-7)#sh run vlan</code> <code>vlan 1 name DEFAULT-VLAN by port</code> <code>!</code> <code>vlan 3 by port</code> <code>!</code> <code>vlan 5 by port</code> <code> tagged ethe 1/1/2 ethe 1/1/4</code> <code>!</code> <code>vlan 7 by port</code> <code> tagged ethe 1/1/1 to 1/1/3</code> <code> router-interface ve 7 </code> < ---- VE 7 routing for vlan 7 <code>!</code> <code>…</code> <code>FCX#(config)#sh run | inc acl-per-</code> <code>enable acl-per-port-per-vlan </code><code> </code><code> </code>< ---- enable acl-per-port-per-vlan has been configured and the device reloaded If appliec on the physical interface, the TP will not be setup correctly. <code>FCX#(config)#int e 1/1/1</code> <code>FCX#(config-if-e1000-1/1/1)#ip acc</code> <code> <code>access-list </code> Configure named access list </code><code> </code>< ---- :ip access-group: still not available in cli <code>FCX#(config-if-e1000-1/1/1)#ip access-list</code> <code> extended Extended Access List</code> <code> standard Standard Access List</code> <code>FCX#(config-if-e1000-1/1/1)#ip access-list ext</code> <code> <100-199> Extended IP access list</code> <code> ASCII string Access List Name</code> <code>FCX#(config-if-e1000-1/1/1)#ip access-list ext 101 </code>< --- go ahead and configured ext acl 101 to e 1/1/1 <code> <cr></code> <code>FCX#(config-if-e1000-1/1/1)#ip access-list ext 101</code> <code>FCX#(config-ext-nacl)#sh traffic-policy TPD5</code> <code>Traffic Policy - TPD5:</code> <code> </code> <code> Metering Not Enabled </code><code>Counting Enabled</code> <code> Number of References/Bindings:</code><code> </code>< --- Note the traffic policy is NOT bounded to any interface, due VE being associated wtih interface e 1/1/1 <code>FCX#(config-ext-nacl)#sh stati traff</code> <code> traffic-policy Show traffic policy statistics</code> <code>FCX#(config-ext-nacl)#sh stati traffic-policy TPD5 </code> < --- no output for TPD5, something amiss,<code> </code> <code>FCX#(config-ext-nacl)#</code> Apply this way, the TP is setup correctly <code>FCX(config-vif-7)#int ve 7</code> <code>FCX(config-vif-7)#ip acc</code> <code> access-group Apply access control list </code>< ----- now, access-group is an option to apply the acl <code>FCX(config-vif-7)#ip access-group 101</code> <code> in Inbound packets</code> <code> out Outbound packets</code> <code>FCX(config-vif-7)#ip access-group 101 in </code>< ------ apply it with specific interface (such as e 1/1/1) <code> ethernet</code> <code> <cr> FCX(config-vif-7)#ip access-group 101 in ethernet 1/1/1 </code> < --- you can apply on single port <code> ethernet</code> <code> to</code> <code> <cr></code> <code>FCX(config-vif-7)#ip access-group 101 in ethernet 1/1/1 e 1/1/ </code> < --- you can apply on multiple ports or a range of interfaces <code> ethernet</code> <code> to</code> <code> <cr></code> <code>FCX(config-vif-7)#ip access-group 101 in ethernet 1/1/1 e 1/1/3</code> <code>FCX(config-vif-7)#</code> <code>FCX(config-vif-7)#sh stati traf</code> <code> traffic-policy Show traffic policy statistics</code> <code>FCX(config-vif-7)#sh stati traffic-policy TPD5</code> <code>Traffic Policy TPD5:</code> <code>Port Regions:</code> <code>---------------</code> <code>0 : 1/1/1-1/1/24,1/3/1,1/3/2</code> <code> </code> <code> General Counters:</code> <code> Port Region# Byte Count Packet Count</code> <code> ---------------- -------------------- --------------------</code> <code> 0 0 0</code> <code> All port regions 0 0</code> <code>FCX(config-vif-7)#</code> <code>!</code>

What is the difference in setup ACL accounting for switch image vs router image in FastIron?

2017-12-12T16:14:27-0800 2017-12-12T18:04:38-0800 https://support.ruckuswireless.com/articles/000006750 2017-12-12T16:14:27-0800 monthly 0.8 admin,premium knowledge_article_2703 knowledge_article_2703 2017-12-12T16:14:27-0800 000006750 Validated (External) Premium Fastiron ws series;Turboiron 24x switch;Brocade FastIron WS Series Switches Configuration Configuration, FastIron WS Series, TurboIron 24X Switch How do I need to have RMON to monitor internal system status? RMON events and alarms are a useful tool for monitoring internal system status such as CPU utilization. RMON has some advantages over external snmp monitoring in that the polling is less impacting on the systems tasks and can also generate/report alarms even if the external monitoring device is not reachable. There are two steps to create the RMON alarm. First we define the alarm and then define with an RMON event what happens when the alarm is triggered. For example, in this case we will configure an RMON alarm to trigger when linecard CPU utilization on linecard 1 of an RX rises above 50%. We will configure the RMON event to send a snmp trap and RMON log when this trigger happens: <code>config t telnet@1323803_hashim_Jun11_MLXe-8_MLX2(config)# rmon alarm 1 snAgentCpuUtilPercent.1.1.5 1 absolute rising-threshold 50 1 owner test telnet@1323803_hashim_Jun11_MLXe-8_MLX2(config)# rmon event 1 description "linecard-cpumon" log-and-trap "private" owner test snAgentCpuUtilValue NOTE:This object is deprecated for FastIron GS, and FastIron SX devices and it is not supported on the Brocade NetIron MLX, Brocade MLXe, Brocade NetIron XMR, Brocade NetIron CES, and Brocade NetIron CER series devices. Use the snAgentCpuUtilPercent and snAgentCpuUtil100thPercent objects for these devices. brcdIp.1.1.2.11.1.1.4 snAgentCpuUtilPercent NOTE:Execute cpu-usage oncommand in the config mode, if MP CPU utilization is needed on the Brocade NetIron devices. This object is supported on the Brocade NetIron MLX, Brocade MLXe, Brocade NetIron XMR, FastIron GS, and FastIron SX devices</code>

How do I need to have RMON to monitor internal system status?

2017-12-12T16:14:27-0800 2017-12-12T18:04:36-0800 https://support.ruckuswireless.com/articles/000006751 2017-12-12T16:14:27-0800 monthly 0.8 admin,premium knowledge_article_2702 knowledge_article_2702 2017-12-12T16:14:27-0800 000006751 Validated (External) Premium Fastiron ws series;Fastiron cx series;Turboiron 24x switch;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Configuration Configuration, FastIron WS Series, FastIron CX Series, TurboIron 24X Switch How do I load the FastIron switches to their default configuration? To load the switch to its default configuration: <ol><li>Power off and then power on the switch and immediately press "Ctrl B" to break into Boot mode.</li></ol> <ol start="2"><li>Type “use default” at the monitor prompt then press <Enter>.</li></ol> <code>>use default</code> <ol start="3"><li>Now boot the switch from primary or secondary flash:</li></ol> <code>>Boot system flash primary</code> Example of loading a FESX448 to default configuration: <code>FEX Boot Code Version 05.0.00T1e5</code> <code>Enter 'b' to stop at boot ...</code> <code>FEX-Boot></code> <code> </code> <code>FEX-Boot></code><code>use default</code> <code>OK! Use default config to bring up the system.</code> <code> </code> <code>FEX-Boot></code><code>boot system flash primary</code> <code> </code> <code>BOOT INFO: load monitor from primary, size = 191952</code> <code>Appln_Monitor:root_task: ***local_overide = 0***</code> <code>BOOT INFO: load image from primary</code> <code>BOOT INFO: bootparam at 0008f3e4, mp_flash_size = 00277a20</code> <code>BOOT INFO: code decompression completed</code> <code>BOOT INFO: branch to 00400100</code> <code>pre_parse_config_file: NO configuration, skip CPU VLAN parse.</code> <code>..</code> <code>P1 : 00 01 02 03</code> <code>F1 : 00 01 02 03</code> <code>FX1: 00 01 02 03</code> <code>P2 : 00 01 02 03</code> <code>F2 : 00 01 02 03</code> <code>FX2: 00 01 02 03</code> <code>Init with default configuration.</code> <code> SW: Version 05.1.00eT1e0 Copyright (c) 1996-2009 Brocade Communications Systems, Inc.</code> <code> Compiled on Sep 29 2010 at 15:18:10 labeled as FWXS05100e</code> <code> (2587168 bytes) from Primary FWXS05100e.bin</code> <code> BootROM: Version 05.0.00T1e5 (FEv2)</code> <code> HW: Stackable FWSX424+2XG</code> <code>==========================================================================</code> <code> Serial #: FL19053695</code> <code> P-ASIC 0: type 00D1, rev D1 subrev 00</code> <code> P-ASIC 1: type 00D1, rev D1 subrev 00</code> <code> P-ASIC 2: type 01D1, rev 00 subrev 00</code> <code> P-ASIC 3: type 01D1, rev 00 subrev 00</code> <code>==========================================================================</code> <code> 330 MHz Power PC processor 8245 (version 129/1014) 66 MHz bus</code> <code> 512 KB boot flash memory</code> <code>16384 KB code flash memory</code> <code> 128 MB DRAM</code> <code>The system uptime is 8 seconds</code> <code>The system : started=cold start</code> <code> </code> <code>FWSX424+2XG Switch>en</code> <code>No password has been assigned yet...</code> <code> </code> <code>FWSX424+2XG Switch#</code> <code>FWSX424+2XG Switch#sh run</code> <code>Current configuration:</code> <code>!</code> <code>ver 05.1.00eT1e0</code> <code>!</code> <code>!</code> <code>end</code> <code> </code> <code>FWSX424+2XG Switch#</code>

How do I load the FastIron switches to their default configuration?

2017-12-12T16:14:27-0800 2017-12-12T18:04:35-0800 https://support.ruckuswireless.com/articles/000006664 2017-12-12T16:14:27-0800 monthly 0.8 admin,premium knowledge_article_2700 knowledge_article_2700 2017-12-12T16:14:27-0800 000006664 Validated (External) Premium Brocade eos products Configuration Configuration, Brocade EOS Products What are the Hitless stacking failover limitations? <ul><li>Layer 3 multicast traffic is supported by hitless stacking.</li><li>After a switchover or failover, the syslog may contain invalid (non-existent) port numbers in messages such as “Interface portnum state up.” This is because some messages from the old active controller remain in the syslog after a switchover or failover.</li><li>Failover for devices connected to the management port is not supported. For example, if during a failover, an end station is connected to the stack through the management port of the active controller, the connection is shut down. After the failover, the management port on the new active controller will work.</li><li>The following describes hitless stacking limitations with software-based licensing for BGP: <ul><li>To enable BGP on a stack unit, you should have an appropriate BGP license installed on all the stack units.</li><li>If the active controller has a BGP license but any other unit in the stack does not have one, you cannot enable BGP on the stack unit.</li><li>If the active controller is not running BGP, a stack unit is operational regardless of whether the active controller or stack units have a BGP license.</li><li>If the active controller is running BGP and a unit without a BGP license joins the stack, the unit is put into a non-operational state. However, if the user installs a valid BGP license to a non-operational unit, the unit immediately becomes operational. If the user disables BGP instead, the active controller returns the non-operational units to operation.</li></ul> </li></ul>

What are the Hitless stacking failover limitations?

2017-12-12T16:14:27-0800 2017-12-12T18:04:31-0800 https://support.ruckuswireless.com/articles/000006754 2017-12-12T16:14:27-0800 monthly 0.8 admin,premium knowledge_article_2698 knowledge_article_2698 2017-12-12T16:14:27-0800 000006754 Validated (External) Premium Fastiron ws series;Fastiron cx series;Brocade FastIron WS Series Switches;Brocade FastIron CX Series Switches Known issues and workarounds Known Issues and Workarounds, FastIron WS Series, FastIron CX Series What is required when there is a RADIUS timeout on a FastIron switch configured to perform RADIUS authentication? There are two actions that a user can configure the switch to take: 1. Permit user access to the network 2. Deny user access to the network The Brocade FastIron Configuration Guide has examples on how to set these actions. The actions vary with MAC based VLAN assignment, also known as Multi-device Port Authentication configuration and 802.1 Port Security configuration. A. Multi-device Port Authentication configuration (MAC based VLAN assignment) 1. Permit user access to the network: Brocade (config)#interface ethernet 1/3 Brocade (config-if-e100-1/3)#mac-authentication auth-timeout-action success Once the success timeout action is enabled, use the no form of the command to reset the RADIUS timeout behavior to retry. 2. Deny user access to the network: Brocade (config)#interface ethernet 1/3 Brocade (config-if-e100-1/3)#mac-authentication auth-timeout-action failure Once the succces timeout action is enabled, use the no form of the command to reset the RADIUS timeout behavior to retry. If restrict-vlan is configured along with auth-timeout-action failure the user will be placed into a VLAN with restricted or limited access (Refer to "Allow user access to a restricted VLAN after a RADIUS timeout" on the Configuration Guide for more details) B. 802.1X Port Security configuration 1. Permit user access to the network: Brocade (config)#interface ethernet 1/3 Brocade (config-if-e100-1/3)#dot1x auth-timeout-action success 2. Deny user access to the network: Brocade (config)#interface ethernet 1/3 Brocade (config-if-e100-1/3)#dot1x auth-timeout-action failure If restrict-vlan is configured along with Dot1x auth-timeout-action failure, the user will be placed into a VLAN with restricted or limited access. Users need to configure the following additional CLI commands to accomplish this at the minimum under Dot1x-Enable to put the user in a restricted VLAN 1137. Please also consult the latest FastIron Configuration Guide. The CLI commands to support restricted vlan are as follows: Brocade (config)#dot1x-enable Brocade (config-dot1x)#auth-fail-action restricted-vlan Brocade (config-dot1x)#auth-fail-forced-restricted Brocade (config-dot1x)#auth-fail-vlanid 1137 ---------- Note: The feature has a defect in DEFECT000400311 and it was fixed in FI 7300f, 7400d patches and the 8.0.00 release. Make sure to upgrade the software to the appropriate version. ---------- DEFECT000400311 -<code> dot1x auth-timeout-action </code>command does not differentiate between success and failure configurations.

What is required when there is a RADIUS timeout on a FastIron switch configured to perform RADIUS authentication?

2017-12-12T16:14:27-0800 2017-12-12T18:04:27-0800 https://support.ruckuswireless.com/articles/000006524 2017-12-11T15:13:28-0800 monthly 0.8 admin,premium knowledge_article_2697 knowledge_article_2697 2017-12-11T15:13:28-0800 000006524 Validated (External) Premium Brocade eos products Performance;System network management;Troubleshooting Performance, System Network Management, Troubleshooting, Brocade EOS Products What do the different Optical Monitoring latched Syslog messages mean? Optical monitoring, including the alarms, is based on the SFF-8472 Specification for Diagnostic monitoring Interface for Optical Transceivers. The attached document contains detailed information on how the variables are measured, calculated and reported, and explains what they mean.

SFPs have the capability of monitoring a number of internal physical parameters that inform about the status of the device and the light link.

2017-12-11T15:13:28-0800 2017-12-11T18:00:24-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvprCAC?attachment_index=0 2017-12-11T18:00:24-0800 monthly admin,premium knowledge_article_2697 knowledge_article_2697_attachment_1 ka25B000000CdQRQA0_Attachment__c.pdf 157860.0 application/pdf https://support.ruckuswireless.com/articles/000006518 2017-12-11T15:13:28-0800 monthly 0.8 admin,premium knowledge_article_2696 knowledge_article_2696 2017-12-11T15:13:28-0800 000006518 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Where is the video that explains ICX - ENERGY EFFICIENT ETHERNET (EEE)? YouTube video: https://www.youtube.com/watch?v=eOFgY6tJ7rE&feature=youtu.be

ENERGY EFFICIENT ETHERNET (EEE) CONFIGURATION

2017-12-11T15:13:28-0800 2017-12-11T18:00:23-0800 https://support.ruckuswireless.com/articles/000006516 2017-12-11T15:13:28-0800 monthly 0.8 admin,premium knowledge_article_2695 knowledge_article_2695 2017-12-11T15:13:28-0800 000006516 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Where is the video that explains ICX - ERSPAN Configuration? YouTube video: https://www.youtube.com/watch?v=nnY-VlL-Df8&feature=youtu.be

ERSPAN ENCAPSULATED REMOTE SWITCHED PORT ANALYZER

2017-12-11T15:13:28-0800 2017-12-11T18:00:22-0800 https://support.ruckuswireless.com/articles/000006519 2017-12-11T15:13:28-0800 monthly 0.8 admin,premium knowledge_article_2692 knowledge_article_2692 2017-12-11T15:13:28-0800 000006519 Validated (External) Premium Ruckus icx switches Configuration;System network management Configuration, System Network Management, Ruckus ICX Switches Where is the video that explains how to configure or determine Router ID? YouTube Video: <a href="https://www.youtube.com/watch?v=bSQHRI1EgGg&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=bSQHRI1EgGg&feature=youtu.be</a>

How does the Router ID get configured or calculated?

2017-12-11T15:13:28-0800 2017-12-11T18:00:17-0800 https://support.ruckuswireless.com/articles/000006523 2017-12-11T15:13:28-0800 monthly 0.8 admin,premium knowledge_article_2691 knowledge_article_2691 2017-12-11T15:13:28-0800 000006523 Validated (External) Premium Fastiron cx series;Brocade FastIron CX Series Switches System network management;Known issues and workarounds System Network Management, Known Issues and Workarounds, FastIron CX Series How to Prioritize VoIP traffic on the FastIron switches? There are 3 methods available on the FastIron families for prioritizing VoIP Traffic to reduce latency and jitter: <ol><li>Port Priority</li><li>QoS profiles</li><li>ACLs</li></ol> <ul><li>Port Priority: Maps all traffic coming into the port to the configured priority.</li></ul> <div>Command: <code style="color: red; font-size: 13px;">FastIron(config-if-e1000-1/1/1)#priority 7</code> (Priority can be configured between 0 and 7)</div> <ul><li>QoS profiles: </li></ul> <div>A sample of a default QoS profile for the FCX switch: </div> <table border="1" cellpadding="1" cellspacing="1"><tbody><tr><td colspan="1" rowspan="1"> <div>802.10</div> </td><td colspan="1" rowspan="1"> <div>DSCP</div> </td><td colspan="1" rowspan="1"> <div>FCX</div> </td></tr><tr><td colspan="1" rowspan="1"> <div>0</div> </td><td colspan="1" rowspan="1"> <div>0-7</div> </td><td colspan="1" rowspan="1"> <div> Priority0</div> </td></tr><tr><td colspan="1" rowspan="1"> <div>1</div> </td><td colspan="1" rowspan="1"> <div>8-15</div> </td><td colspan="1" rowspan="1"> <div> Priority1</div> </td></tr><tr><td colspan="1" rowspan="1"> <div>2</div> </td><td colspan="1" rowspan="1"> <div>16-23</div> </td><td colspan="1" rowspan="1"> <div> Priority2</div> </td></tr><tr><td colspan="1" rowspan="1"> <div>3</div> </td><td colspan="1" rowspan="1"> <div>24-31</div> </td><td colspan="1" rowspan="1"> <div> Priority3</div> </td></tr><tr><td colspan="1" rowspan="1"> <div>4</div> </td><td colspan="1" rowspan="1"> <div>32-39</div> </td><td colspan="1" rowspan="1"> <div> Priority4</div> </td></tr><tr><td colspan="1" rowspan="1"> <div>5</div> </td><td colspan="1" rowspan="1"> <div>40-47</div> </td><td colspan="1" rowspan="1"> <div> Priority5</div> </td></tr><tr><td colspan="1" rowspan="1"> <div>6</div> </td><td colspan="1" rowspan="1"> <div>48-55</div> </td><td colspan="1" rowspan="1"> <div> Priority6</div> </td></tr><tr><td colspan="1" rowspan="1"> <div>7</div> </td><td colspan="1" rowspan="1"> <div> 56-63</div> </td><td colspan="1" rowspan="1"> <div> Priority7</div> </td></tr></tbody></table> <ul><li>ACL: </li></ul> <ol><li>Prioritizing VoIP Traffic using 802.1p</li></ol> <ul><li>By default the FastIron switches honor 802.1 priority </li><li>ACLs can be used to modify the 802.1p priority based on the network design</li><li>The 802.1p marking can be used to change the 802.1p QoS Tag based on the customer's QoS design</li></ul> <div>Example: <code style="color: black; font-size: 13px;">FastIron(config)# </code><code style="color: red; font-size: 13px;">access-list 100 permit ip host 10.10.10.1 any 802.1p-priority-marking 5 internal-priority-marking 7</code></div> <div><code style="color: red; font-size: 13px;"> </code></div> <div>---------- Note: Internal-priority-marking is used to prioritize the traffic within the switch. ----------</div> <ol><li>Prioritizing VoIP Traffic using DSCP: </li></ol> <ul><li>By default the FastIron switches honor 802.1p priority</li><li>ACLs can be used to honor DSCP values:</li></ul> <div>For FES/FESX/SX family, an ACL with "dscp-cos-mapping" can be applied on a port to honor DSCP values: </div> <div>Example: <code style="color: black; font-size: 13px;">FastIron(config)# </code><code style="color: red; font-size: 13px;">access-list 100 permit ip any any dscp-cos-mapping</code> </div> <div>For FGS/FLS/FCX/ICX, the "trust dscp" command can be applied per interface to honor DSCP values. </div> <div>Example: <code style="color: black; font-size: 13px;">FastIron(config-if-e1000-1/1/1)# </code><code style="color: red; font-size: 13px;">trust dscp </code></div> <ul><li>Modify the DSCP value generated by the IP Phone based on the network design</li></ul> <div>Example: <code style="color: black; font-size: 13px;">FastIron(config)# </code><code style="color: red; font-size: 13px;">access-list 100 permit ip any any dscp-matching <DSCP match value> dscp-marking <new DSCP value> 802.1p-priority-marking</code></div>

Need to prioritize VoIP Traffic to reduce latency and jitter on the FastIron switches.

2017-12-11T15:13:28-0800 2017-12-11T18:00:15-0800 https://support.ruckuswireless.com/articles/000006522 2017-12-11T15:13:28-0800 monthly 0.8 admin,premium knowledge_article_2690 knowledge_article_2690 2017-12-11T15:13:28-0800 000006522 Validated (External) Premium Brocade eos products System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, Brocade EOS Products What data collection is needed for Brocade to troubleshoot OSPF issues? <table><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1"> <table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1"> <div id="articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603articleDetail:j_id425:j_id426:sectionRepeat:0:fieldRepeat:3:j_id603_00N700000039hEK_div"> <div id="articleDetail:j_id404:j_id405:sectionRepeat:0:fieldRepeat:3:j_id595articleDetail:j_id404:j_id405:sectionRepeat:0:fieldRepeat:3:j_id595_00N700000039hEK_div">OSPF Root cause Investigation: Outputs to gather for OSPF issues that we do not have root cause for: <ul dir="ltr"><li>show ip ospf neighbor</li><li>show ip ospf config</li><li>debug ip ospf adj</li><li>debug ip ospf events</li></ul> </div> *Please download and check the Brocade FastIron Command Reference Guide if you need more details of the outputs that we recommended above* Also, this YouTube video from our BROCADE CAMPUS FEATURE EXPLAINER SERIES provides information regarding BASIC OSPF CONFIGURATION: <a href="https://www.youtube.com/watch?v=Q85navTzoxM&feature=youtu.be" target="_blank">https://www.youtube.com/watch?v=Q85navTzoxM&feature=youtu.be</a></div> </td></tr></tbody></table> </td></tr></tbody></table>

OSPF FAQ KB Article

2017-12-11T15:13:28-0800 2017-12-11T18:00:12-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvppCAC?attachment_index=0 2017-12-11T18:00:12-0800 monthly admin,premium knowledge_article_2690 knowledge_article_2690_attachment_1 ka25B000000CdQbQAK_Attachment__c.pdf 4780737.0 application/pdf https://support.ruckuswireless.com/articles/000006521 2017-12-11T15:13:28-0800 monthly 0.8 admin,premium knowledge_article_2689 knowledge_article_2689 2017-12-11T15:13:28-0800 000006521 Validated (External) Premium Ruckus icx switches System network management System Network Management, Ruckus ICX Switches Where is the video that explains ICX - DHCP Auto-provisioning? YouTube video: <a href="https://www.youtube.com/watch?v=x3jQBMvY2WM&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=x3jQBMvY2WM&feature=youtu.be</a>

DHCP Auto-provisioning

2017-12-11T15:13:28-0800 2017-12-11T18:00:11-0800 https://support.ruckuswireless.com/articles/000006520 2017-12-11T15:13:28-0800 monthly 0.8 admin,premium knowledge_article_2688 knowledge_article_2688 2017-12-11T15:13:28-0800 000006520 Validated (External) Premium Ruckus icx switches Configuration Configuration, Ruckus ICX Switches Where is the video that explains ICX - Configuring FDP AND CDP? YouTube video: <a href="https://www.youtube.com/watch?v=p7yj4pxhdvI&feature=youtu.be" style="color: rgb(51, 52, 53);" target="_blank">https://www.youtube.com/watch?v=p7yj4pxhdvI&feature=youtu.be</a>

Brocade Campus ICX - Configuring FDP AND CDP

2017-12-11T15:13:28-0800 2017-12-11T18:00:08-0800 https://support.ruckuswireless.com/articles/000002792 2017-12-05T14:41:58-0800 monthly 0.8 admin,premium knowledge_article_2686 knowledge_article_2686 2014-03-14T16:18:48-0700 000002792 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What are the OID's to find GPS location of ZD managed outdoor Access Points ? ZoneDirector firmware MIBs include OIDs to collect Access Point GPS information. -->We have to enable SNMP management on Zone director initially under configure-->system management. -->Below are the OID's to retrieve the GPS location of access point. GPS latitude: .1.3.6.1.4.1.25053.1.2.2.4.1.1.1.1.10 GPS longitude: .1.3.6.1.4.1.25053.1.2.2.4.1.1.1.1.11 <img alt="User-added image" height="298" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxMP&feoid=00N50000002Cf3M&refid=0EM50000000LRlY" style="width: 773px; height: 460px;" width="500"></img>

Specific OID's to find the GPS latitude and longitude of ZD managed access points.

2017-12-05T14:41:58-0800 2017-12-05T18:00:08-0800 https://support.ruckuswireless.com/articles/000003505 2014-10-21T02:11:52-0700 monthly 0.8 admin,premium knowledge_article_1348 knowledge_article_1348 2014-10-19T17:54:57-0700 000003505 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector What is the signal strength % value indicated in the ZD GUI? Signal strength value % details as follows. <div>Wireless signal strength is traditionally measured in either percentile or dBm (the power ratio in decibels of the measured power referenced to one milliwatt.) </div> <div>By default, WiFi displays the signal strength in dBm. The level of 100% is equivalent to the signal level of -35 dBm and higher, </div> <div>e.g. both -25 dBm and -15 dBm will be shown as 100%, because this level of signal is very high. </div> <div>The level of 1% is equivalent to the signal level of -95 dBm. Between -95 dBm and -35 dBm, the percentage scale is linear, i.e. 50% is equivalent to -65 dBm. </div>

2014-10-21T02:11:52-0700 2017-11-17T08:03:31-0800 https://support.ruckuswireless.com/articles/000004938 2015-07-29T13:24:58-0700 monthly 0.8 admin,premium knowledge_article_2061 knowledge_article_2061 2015-07-29T13:24:58-0700 000004938 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway Why am I unable to ssh directly from my Cisco router to a Ruckus AP running firmware build 3.0.3+ Upgrading the Cisco IOS to the latest version will resolve this issue.

This article explains why SSH from a Cisco router directly to a Ruckus AP post build 3.0.0.x may fail. This is due to the CBC cipher being excluded in the dropbear sshd included from 3.0.3+.

2015-07-29T13:24:58-0700 2017-11-16T06:46:41-0800 https://support.ruckuswireless.com/articles/000001674 2014-01-11T14:10:16-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_222 knowledge_article_222 2013-02-21T14:41:41-0800 000001674 Validated (External) Public Ruckus support services Website issues Website Issues, Ruckus Support Services How to register for a training course See the attached PDF for instructions on signing up for a training course. Note that you must be logged in to access the training portal.

2014-01-11T14:10:16-0800 2017-11-13T11:24:37-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PD6FCAW?attachment_index=0 2017-11-13T11:24:37-0800 monthly admin,premium,warranty,guest knowledge_article_222 knowledge_article_222_attachment_1 How to Register for a Course.pdf 380811.0 application/pdf https://support.ruckuswireless.com/articles/000006463 2017-09-29T14:49:33-0700 monthly 0.8 admin,premium knowledge_article_2667 knowledge_article_2667 2017-09-29T14:49:33-0700 000006463 Validated (External) Premium Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Firmware;Troubleshooting Firmware, Troubleshooting, SPoT Do we have any sample JAVA code for testing SZ's GPB / MQTT interface streaming data for SPoT / LBS applications? Attached is a sample JAVA application fto help customers understand how to use SmartZone's GPB (Google Protocol Buffer). The test subscriber is a JAVA utility provided by Ruckus to receive the SZ's GPB streaming data, using JAVA classes which is compiled with Ruckus GPB .proto to read the content of GPB messages. This is for TEST PURPOSES ONLY and not for integrating with your application of SZ GPB/MQTT interface. This Test Subscriber is described on page 9 of the User Guide document attached to KBA-6462: SPoT / LBS Getting Started Guide for SZ GPB/MQTT. <div style="font-size: 20px; font-family: serif;">.</div>

Sample JAVA code for testing SZ's GPB / MQTT interface streaming data for SPoT / LBS applications.

2017-09-29T14:49:33-0700 2017-11-08T12:16:00-0800 http://support.ruckuswireless.com/article_attachments/kA250000000TvjkCAC?attachment_index=0 2017-11-08T12:16:00-0800 monthly admin,premium knowledge_article_2667 knowledge_article_2667_attachment_1 MockSCI-TLS-2.5.tar.gz 21896084.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000006485 2017-11-03T16:14:21-0700 monthly 0.8 admin,premium knowledge_article_2679 knowledge_article_2679 2017-11-03T16:14:21-0700 000006485 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Can we subscribe only few specific logs from vSZ via MQTT broker? Overview of GPB/MQTT interface : The Smart Zone controller GPB/MQTT interface is an interface that allows external application to receive the statistic data from the Access Point managed by SZ controller. The statistic data includes device information, event records, access point statistic, client statistic, wireless radio/network statistic and rogue AP data. The streaming data is presented in GPB(Google Protocol buffer) format . The external application can use the program library compiled with GPB data structure to read the data. <img alt="GPB/MQTT" height="205" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000TxKn&feoid=00N50000002Cf3M&refid=0EM50000000W0DL" width="500"></img> The above AP stats via MQTT is available only from SZ 3.5 onward. Below are the steps to configure and work with MQTT interface. 1. Set MQTT broker to receive GPB data. 2. Configure the MQTT broker IP on SZ web user interface to publish to GPB data to MQTT broker. 3. Use the GPB compiler to get the library for reading the data with SZ data structure (.proto files). 4. The external application implements the MQTT protocol and subscribes the topic to MQTT broker. 5. The external application receives the GPB data from MQTT broker and then uses the GPB library to read the streaming data. 6. The external application converts the GPB data and saves it to its local system. Hence the above process is about SZ publish the GBP data to the external MQTT broker. Then, the external system can subscribe the topic to receive the GPB data from MQTT broker. It’s a “push” mode just like what we send data to SCI. The subscription opened for external application is a whole data and there is a limitation currently in subscribing to specific messages. Henceforth, subscribing to only specific data like APReportBinClient, APReportBinRadio can be achieved with feature request currently.

Could we choose to subscribe only few messages from SZ via MQTT broker?

2017-11-03T16:14:21-0700 2017-11-08T12:15:57-0800 https://support.ruckuswireless.com/articles/000006473 2017-11-03T16:11:30-0700 monthly 0.8 admin,premium knowledge_article_2681 knowledge_article_2681 2017-11-03T16:11:30-0700 000006473 Validated (External) Premium Virtual smartcell gateway Troubleshooting Troubleshooting, virtual SmartCell Gateway Why clients are disconnecting frequently due to Accounting Session Timeout?

This article provides details on why clients were frequently disconnecting due to accounting session timeout

2017-11-03T16:11:30-0700 2017-11-03T18:00:12-0700 https://support.ruckuswireless.com/articles/000005097 2015-09-03T13:40:13-0700 monthly 0.8 admin,premium knowledge_article_2124 knowledge_article_2124 2015-09-03T13:40:13-0700 000005097 Validated (External) Premium Scg 200;Smartcell insight;SmartCell Insight (SCI) Configuration;Installation Configuration, Installation, SCG 200, SmartCell Insight Why no SCI graphs are getting filled ? To enable the communication between the Access Points and SCI execute the following commands. Login to the CLI of one of the SCG nodes in the cluster and go to enable mode. SCG1-XX# config SCG1-XX(config)# ap-sci enable SCG1-XX(config)# exit To verify if the setting is enabled SCG1-XX# show running-config zone-global ap-sci AP SCI: Enabled After 15 minutes data will show up in SCI.

In SCI setup and monitor the connections to the SCG is there, but no data is received by the SCI. Hence no graphs.

2015-09-03T13:40:13-0700 2017-11-02T06:31:27-0700 https://support.ruckuswireless.com/articles/000005224 2017-10-26T16:06:20-0700 monthly 0.8 admin,premium knowledge_article_2189 knowledge_article_2189 2015-10-23T01:19:18-0700 000005224 Validated (External) Premium Zonedirector;Zoneflex indoor;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, virtual SmartCell Gateway What is the last software version on ZD/vSZ to support ZF7363 AP The last software releases which support the 7363 will be ZoneFlex 9.8 and RuckOS 3.1 (SCG & vSCG). The 7363 will not be supported on software releases beyond ZoneFlex 9.8 or RuckOS 3.1 maintenance releases

ZF7363 AP is end of the life and this article will help us with highest software version on ZD/vSZ to support ZF7363 APs

2017-10-26T16:06:20-0700 2017-10-26T18:00:13-0700 https://support.ruckuswireless.com/articles/000004927 2015-07-27T11:14:58-0700 monthly 0.8 admin,premium knowledge_article_2054 knowledge_article_2054 2015-07-27T11:14:58-0700 000004927 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Firmware;Troubleshooting Firmware, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway, SZ100 What tools can I use to test API’s on SmartZone platform? There are several tools on the market to test api’s two of them are Postman <a href="https://www.getpostman.com/" target="_blank">https://www.getpostman.com/</a> Curl- <a href="http://www.codingpedia.org/ama/how-to-test-a-rest-api-from-command-line-with-curl/" target="_blank">http://www.codingpedia.org/ama/how-to-test-a-rest-api-from-command-line-with-curl/</a> Postman has a GUI interface which is easy to use, where Curl uses a command line interface. When testing the public API’s on the SCG, you can also reference the sites below which provides detailed information . <a href="http://docs.ruckuswireless.com/scg-200/scg-public-api-reference-guide-3-1.html" target="_blank">http://docs.ruckuswireless.com/scg-200/scg-public-api-reference-guide-3-1.html</a>

This article describes 2 software tools that can be used to test API’s on SmartZone platform

2015-07-27T11:14:58-0700 2017-10-23T12:48:20-0700 https://support.ruckuswireless.com/articles/000006447 2017-10-13T16:37:10-0700 monthly 0.8 admin,premium knowledge_article_2672 knowledge_article_2672 2017-09-19T08:40:24-0700 000006447 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Troubleshooting;Known issues and workarounds Configuration, Firmware, Troubleshooting, Known Issues and Workarounds, ZoneDirector Why can't Ubuntu clients connect to a WLAN when device access policy is configured to allow "Linux OS" clients Upgrade firmware to 9.13.3.0.106 (Known issue resolved on 9.13.3.0.106 and above)

Ubuntu clients failing to connect to SSID when device access policy is enabled

2017-10-13T16:37:10-0700 2017-10-13T18:00:10-0700 https://support.ruckuswireless.com/articles/000006465 2017-10-09T12:45:44-0700 monthly 0.8 admin,premium knowledge_article_2668 knowledge_article_2668 2017-10-03T10:26:56-0700 000006465 Validated (External) Premium Icx 7250;Icx 7450;Ruckus ICX 7250 Campus Switches;RUCKUS ICX 7450 Campus Switches Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ICX 7250, ICX 7450 How can I prevent ICX 7250 7450 PoE port flap on 08.0.30f and above? Upgrade to FI 08.0.61 or higher.

The user may experience port flaps on ICX7250 & ICX7450 in a corner case scenario. If ‘inline power non-pd-detection enable’ command is configured, the flaps are seen.

2017-10-09T12:45:44-0700 2017-10-09T18:00:11-0700 https://support.ruckuswireless.com/articles/000003369 2014-11-07T02:33:58-0800 monthly 0.8 admin,premium knowledge_article_1374 knowledge_article_1374 2014-11-07T02:33:58-0800 000003369 Validated (External) Premium Zonedirector 1100;Zonedirector 3000;ZoneDirector 1100;ZoneDirector 3000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector 1100, ZoneDirector 3000 I have replaced my Zone-Director 1100 with a Zone-Director 3K and imported my old ZD-1100 configuration file and now my clients do not get DHCP IP when I enable WLAN Tunneling If possible do not import the configuration backup file from a ZD-1100 into a previously configured ZD-3K it is always better to Factory Default and re-configure from scratch. If you want to import the ZD-1100 configuration bak file then it is recommended to always Factory Default the ZD-3K first then attempt to load the file.

Zone-Director ZD-1100 configuration file is imported to a new Zone-Director 3k and WLAN tunneling is enabled the client is unable to obtain IP through DHCP

2014-11-07T02:33:58-0800 2017-10-04T10:25:15-0700 https://support.ruckuswireless.com/articles/000005389 2017-01-24T13:42:51-0800 monthly 0.8 admin,premium knowledge_article_2247 knowledge_article_2247 2016-01-06T11:10:27-0800 000005389 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;Firmware;Known issues and workarounds Performance, Firmware, Known Issues and Workarounds, Unleashed Unleashed: What are the key differences from ZD or vSZ/SZ100? Key Differences between Unleashed and ZD or vSZ/SZ100 Unleashed Releases have near parity with corresponding ZD's release features, with some exceptions. ie Unleashed 200.0.9.9.x is based on ZD 9.9 features, and Unleashed 200.1.9.12.x is based on ZD 9.12 features, and Unleashed 200.2.9.13.x is based on 9.13 features. Always refer to the Unleashed version Release Notes and Online Help to find all features/functions. Unleashed does not support SpeedFlex, IPv6, Role-based ACL, or RADIUS Accounting (RADIUS Authentication is supported). Other differences from ZD or vSZ/SZ100 networks include: - No External Controller - Recommended for Single site only. - No support for FlexMaster, SPoT or SCI - AP Licenses are not needed - No AP Group or WLAN Group support - Only 802.11ac APs - Only Local break-out, no Tunnel support - Strong Encryption (WPA2, PSK, AES, DPSK) via GUI, TKIP/WEP via CLI only.

Unleashed provides only some of the controller features found in ZD or vSZ/SZ100

2017-01-24T13:42:51-0800 2017-10-03T17:51:39-0700 https://support.ruckuswireless.com/articles/000003690 2014-11-21T13:56:47-0800 monthly 0.8 admin,premium knowledge_article_1446 knowledge_article_1446 2014-11-21T13:56:47-0800 000003690 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor ZD-mode AP: How to configure DHCP Option 43 on Mikrotik Convert the IP address to Hex using this tool ( http://shimi.net/services/opt43/ ) For your ZD ip of 10.1.9.2 the result should be: option 43 hex 030831302e312e392e32 On your microtik try doing this: MikroTik ROS v6.18 IP>DHCP Server>Options: Add Option> Name: "option43" Code: 43 Value: 0x030831302e312e392e32

Mikrotik: How to configure DHCP Option 43 on Mikrotik to work with ZD mode AP.

2014-11-21T13:56:47-0800 2017-10-02T14:31:43-0700 https://support.ruckuswireless.com/articles/000006460 2017-10-02T10:30:02-0700 monthly 0.8 admin,premium knowledge_article_2663 knowledge_article_2663 2017-09-28T09:19:46-0700 000006460 Validated (External) Premium Ruckus icx switches Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, Ruckus ICX Switches Why doesn't ICX 7450 BiDi Stacking work according to a customer? Here is the one you should use. Ruckus-branded and up to date: <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__ruckus-2Dwww.s3.amazonaws.com_pdf_datasheets_ds-2Dethernet-2Doptics-2Dfamily.pdf&d=DwMFAg&c=IL_XqQWOjubgfqINi2jTzg&r=Y40bbdJawsXHxocfwQ5Ehs5F_yaSVmact7rGr2EOPlU&m=px00Bo2NNjwjYxwAH4CH-1fo4deWP1wB55dn_HIM0n0&s=CbDG5aG9X_R17va9v05VZKQ2WTxM9ABC1O1t4KJUEF0&e=" target="_blank">http://ruckus-www.s3.amazonaws.com/pdf/datasheets/ds-ethernet-optics-family.pdf</a> And as far as I know, we will never support 40G Bi-Di Stacking due to high-power consumption. See also the current FastIron 08.0.61 stacking guide for ICX 7150 / 7250 / 7450 / 7750 switches: <a href="https://support.ruckuswireless.com/documents/1854-fastiron-08-0-61-stacking-configuration-guide" target="_blank">https://support.ruckuswireless.com/documents/1854-fastiron-08-0-61-stacking-configuration-guide</a> All transceivers and their distances are listed under the section “FastIron stacking distances and optics by device”. (page 20)

Stacking using 40 GbE BiDi transceivers is only supported on the 7750s, not on 7450s.

2017-10-02T10:30:02-0700 2017-10-02T12:00:07-0700 https://support.ruckuswireless.com/articles/000002338 2014-12-16T13:49:42-0800 monthly 0.8 admin,premium knowledge_article_1472 knowledge_article_1472 2013-11-28T09:23:14-0800 000002338 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What is band balancing and how can I configure it? In all releases that support band steering, you can control whether to apply band steering to RAP/MAP/eMAPs via CLI command. In Releases 9.2 and earlier, the default configuration disables band steering on RAP/MAP/eMAPs. In Releases 9.3 and later, the default configuration enables band steering on RAP/MAP/eMAPs. This state applies to all WLANs on the radio, whereas RSSI threshold can be set per WLAN. Band steering operation is independent of whether the wlan is encrypted or open. It does require the same SSID to appear in both bands on the AP configuration. rkscli: get band-steering wlan0 Band Steering: Under Mesh AP : Off RSSI Threshold: 20 This means band steering is not active on APs that have mesh enabled ! What do these commands do ? 1. band-bal-rssi-thesh This command is SSID specific - define a RSSI value as specified above at which the AP will start to steer client towards the 5 GHz radio. <div>def is 20</div> 2. withholding-limit This command is SSID specific as well. It defines number of times the AP will with hold probe and authentication responses before giving up and responding on the 2.4 GHz band. This limit works within a 30 sec interval. If this value is set to 5, AP will withhold 5 probe responses within 30 second interval. If the client comes back for the sixth time within this interval, AP will respond to the client. <div>3. band-bal-limit This is the maximum number of times AP will try to withhold the probe responses to an STA that is getting BB applied to if client is dual band and probing. If within limit also station doesn’t move to other band/AP, AP will think that the client is very sticky and it will not apply the band balance logic on this client. </div> <div>def is 7</div> <div>4. wlan-band-bal-minsta-thresh</div> <div>which stores the value of max number of associated clients in an AP after which the band balancing will try to distribute the clients among the radios. </div> <div>def is 10 </div> <div>This could be set by looking at the channel utilization on a radio. </div> <div>If the channel utilization is very high - this value could be reduced. </div>

Band Balancing is a feature that was added starting with Ruckus SW Release 9.3.0. ( It was originally called Band Steering) - It operates independently from Client Load balancing but can work with this feature. This article talks about default band balancing behavior and CLI options available to control the feature in a ZD controlled or Stand Alone AP deployement

2014-12-16T13:49:42-0800 2017-09-27T07:08:54-0700 https://support.ruckuswireless.com/articles/000003681 2014-11-25T13:15:42-0800 monthly 0.8 admin,premium knowledge_article_1456 knowledge_article_1456 2014-11-25T13:15:42-0800 000003681 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway What is the meaning of set director ip code options in the AP CLI? In AP CLI: set director ip <ip address of the ZD> - Force the AP to join the specified ZD. set director addr <ip address of the zd> del - Delete the zd ip from the AP . set director zdcode [n] : Here the [n] is the dhcp option sub code ranging between 3 - 243. This is used to force the AP to join a specific ZD when multiple ZD's are available in the network and AP uses the DHCP option 43 and sub codes which in turn respond with an IP address to the clients. set director zdcode del - Deletes the specific sub code mentioned if any. For eg; set director zdcode 243 del - This will delete the sub code 243 from the AP . And in all the zone director options , reboot is required for changes to take effect.

what is set director zdcode del and zdcode [n] means?

2014-11-25T13:15:42-0800 2017-09-16T09:52:19-0700 https://support.ruckuswireless.com/articles/000001454 2016-12-15T12:56:39-0800 monthly 0.8 admin,premium knowledge_article_2544 knowledge_article_2544 2013-01-18T16:11:52-0800 000001454 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to delete Access Point from Map view? <div> If you would like to delete the AP from one map and place it in another map then please follow the procedure below:</div> <div> </div> <div> 1. Click the icon” X ” which is marked in snap</div> <div> 2. Click on the AP that you would like to delete from the floor plan to remove that AP.</div> <div> 3. Once it is removed, it will be available in all the Maps that you uploaded in the Map View.</div> <div> 4. Now drag and drop the AP to the new Map which you would like to place</div> <img alt="User-added image" height="285" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQp4&feoid=00N50000002Cf3M&refid=0EM50000000LSWP" width="682"></img>

This article explains how to delete AP from one Map and place those APs in another Map

2016-12-15T12:56:39-0800 2017-09-14T14:00:38-0700 https://support.ruckuswireless.com/articles/000002234 2015-03-17T17:50:50-0700 monthly 0.8 admin,premium knowledge_article_1648 knowledge_article_1648 2013-09-19T21:17:56-0700 000002234 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector There are many instances where Zonedirector manages several Access points at different locations. The requirements should meet to have the same SSID broadcasted across all the locations but vlan tag should vary for the same WLAN. From the Zonedirector webUI, we can have only one VLAN tag attached per WLAN(Configure-->editing WLAN Advanced settings). Here comes, VLAN Override as a rescue option to meet the above requirement. Following procedure explains the process of configuring this option with an example:- 1). Assume a ZD manages two Access points - AP1 and AP2. Imagine, users has to be separated to work few on one subnet (vlan 2) and others on vlan 3. Still having the same SSID (corporate_wireless). 2). After initially configuring the SSID named "corporate_wireless" with a vlan tag "2". This will make two Access points to broadcast this to have all users in vlan 2. 3) In this example, let's make AP2 to work in vlan 3. 4) Now, Goto Configure-->WLAN Groups, create a new "wlan group". Now choose the above "corporate_wireless" wlan and select the Tag option under the VLAN override option of it. Provide the vlan id as 3. 5) Now, Goto Configure-->Access points, Edit this AP2 settings and select the "Override Group config" under WLAN Group settings. Change from default to the new wlan group created. 6) After this change, AP1 and AP2 will broadcast - corporate SSID but users will work on different subnets. 7) Same process applies for working with more Access points with more WLANs. If there are more Access points, we can override the wlan group config across "Access Point group settings" which reflects the changes to multiple APs present in that group. Precautions:- ------------------ > From the above example, ensure that vlan 2 is tagged at AP1 switch port and vlan 3 is tagged at AP2 swtich port. > Also, please ensure that these Access points are located far away from each other and not closely deployed, which otherwise, users might conflict with different subnets.

2015-03-17T17:50:50-0700 2017-09-06T02:43:31-0700 https://support.ruckuswireless.com/articles/000003042 2014-08-12T02:33:29-0700 monthly 0.8 admin,premium knowledge_article_999 knowledge_article_999 2014-05-13T07:32:48-0700 000003042 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor System network management System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor Can we change time settings on a Standalone AP/ZD managed AP to the local time? No, it is not possible to change the time settings on the AP. The time settings on the AP will always show GMT/UTC time and not the local time. There is no option to change the time zone. Although if we change the NTP server, it will still show GMT/UTC time. <div> </div> <div> If APs are showing proper GMT/UTC time then they are getting proper updates from NTP server. </div>

Time settings on standalone AP or ZoneDirector managed AP and why it follows GMT/UTC time only.

2014-08-12T02:33:29-0700 2017-08-15T05:49:30-0700 https://support.ruckuswireless.com/articles/000004266 2015-05-14T15:07:03-0700 monthly 0.8 admin,premium knowledge_article_1863 knowledge_article_1863 2015-05-12T16:06:55-0700 000004266 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway How to configure to authenticate admin users against RADIUS server on a vSCG Enterprise? 1. Create different accounts on the vSCG Enterprise with different access rights. <div style="font-size: 12px; margin-left: 80px;">a. Go to: Administration > vSCG Enterprise Administrators > Administrators Roles , click on “Create New” and set the appropriate permission: <img alt="User-added image" height="104" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000LgoU" width="500"></img> b. Go to: Administration > vSCG Enterprise Adiministrators > Administrators, click on “Create New” and enter the appropriate information with the required role: <img alt="User-added image" height="289" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000LgoZ" width="500"></img> c. Go to: Administration > vSCG Enterprise Administrators > AAA for Administrators, and create a new AAA server: <img alt="User-added image" height="360" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000Lgpw" width="500"></img> 2. Create a User Group/User on Active Directory to grant access. a. Open the “AD Users and Computer” and create a new Global Security and give it an appropriate name: Example: WiFi-Admin <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000Lgoo"></img> b. Create or add a user to this new group: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000Lgot"></img> 3. Configure NPS (Windows 2008) to allow the new Group Access: <div style="font-size: 12px; margin-left: 40px;">a. Open “Network Policy Server”, expand “Policies” and create a new Policy to allow the newly created domain Group: </div> <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000Lgp8"></img> b. Edit the New Policy and go to “Settings>Vendor Specific” and click on the “Add” button: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000LgpD"></img> c. In the VSA attribute select “Custom/Vendor-Specific: Radius Standard: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000LgpI"></img> d. In the Attribute information dialog, click on “Add”: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000LgpN"></img> e. In the Vendor-Specific Attribute Information dialog, enter Ruckus vendor code of 25053 and select “Yes. It conforms” and click on “Configure Attribute”: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000LgpS"></img> f. In the “Configure VSA (RFC Compliant)” dialog set the attribute number to 10, use a String format and provide the String value. It should match the string configured in Step 1. <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000LgpX"></img> g. Click OK and verify the new NPS policy show the correct: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000Lgpc"></img> 4. To log into the vSCG, you have to include the realm with the username: <img alt="User-added image" height="193" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP0t&feoid=00N50000002Cf3M&refid=0EM50000000Lgph" width="500"></img> For vSCG Carrier, refer to KBA-3228 </div>

Steps on how to configure admin users authenticating against Radius server on a vSCG Enterprise

2015-05-14T15:07:03-0700 2017-08-01T11:03:15-0700 https://support.ruckuswireless.com/articles/000004296 2015-06-18T01:37:02-0700 monthly 0.8 admin,premium knowledge_article_1953 knowledge_article_1953 2015-06-18T01:37:02-0700 000004296 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway, SmartCell AP When does an AP running SCG code build a tunnel to a WAG? From the AP point of view the tunnel is always “UP’ as long as the WAG responds to the out of tunnel keep alives (pings). This can be verified by running the "get tunnelmgr" command on the AP CLI (or using remote ap-cli command from the SCG CLI under enable). It is also available in the AP support info diagnostic file (search for TUNNELMGR Information) ### TUNNELMGR Information ### tunnelmgr Service: Enabled Tunnel Establishment: Enabled Tunnel Authentication: Disabled Tunnel Cipher: Disabled Tunnel Type: Soft-GRE Remote Server IP List: 10.21.0.5;10.21.0.11 No GRE over UDP Keep Alive Interval/Limit: 10/5 ------- Run Time Status (Debug) ------- Current Tunnel ID: N/A Current Connected Remote Server: 10.21.0.11 Current Session UpTime: 21 hrs 33 mins 14 secs Current Keep Alive Retry: 0 Sent: 7365 Lost: 1 Number of Tunnel (Re)Establishment: 2 Reason on Last (Re)Establishment: keep alive retry reaches limit 5 Ping default gateway from last disconnection: PING 10.0.17.1 (10.0.17.1): 56 data bytes 64 bytes from 10.0.17.1: seq=0 ttl=255 time=6.747 ms 64 bytes from 10.0.17.1: seq=1 ttl=255 time=10.251 ms --- 10.0.17.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 6.747/8.499/10.251 ms Although the reachability is confirmed, the tunnel state may show inactive on the WAG as the transport protocol is UDP, a stateless protocol.

SCG Soft GRE tunnels to ALU 7750 WAG - WAG does not see tunnel active if no UE are connected

2015-06-18T01:37:02-0700 2017-07-31T18:54:42-0700 https://support.ruckuswireless.com/articles/000002286 2017-07-20T15:18:31-0700 monthly 0.8 admin,premium knowledge_article_2079 knowledge_article_2079 2013-10-10T09:25:25-0700 000002286 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Security Security, ZoneDirector What are the Cipher Suites supported by Ruckus ZoneDirector? Early Ruckus ZoneDirector (Server) Supports only TLS 1.0, did not support TLS 1.1 , TLS 1.2 and SSL 3.0 Cipher Suites. ZoneDirector 9.12.1 and 10.0+ have support for TLS v1.0, v1.1, v1.2 C:\Users\anisbet>nmap -p 443 --script +ssl-enum-ciphers 192.168.9.249 Starting Nmap 7.31 ( <a href="https://nmap.org" target="_blank">https://nmap.org</a> ) at 2017-07-14 09:40 AUS Eastern Standard Time Nmap scan report for 192.168.9.249 Host is up (0.00s latency). PORT STATE SERVICE 443/tcp open https | ssl-enum-ciphers: | TLSv1.0: | ciphers: | TLS_RSA_WITH_AES_256_CBC_SHA (rsa 1024) - A | TLS_RSA_WITH_AES_128_CBC_SHA (rsa 1024) - A | TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 1024) - D | compressors: | NULL | cipher preference: server | warnings: | 64-bit block cipher 3DES vulnerable to SWEET32 attack | Weak certificate signature: SHA1 | TLSv1.1: | ciphers: | TLS_RSA_WITH_AES_256_CBC_SHA (rsa 1024) - A | TLS_RSA_WITH_AES_128_CBC_SHA (rsa 1024) - A | TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 1024) - D | compressors: | NULL | cipher preference: server | warnings: | 64-bit block cipher 3DES vulnerable to SWEET32 attack | Weak certificate signature: SHA1 | TLSv1.2: | ciphers: | TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 1024) - A | TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 1024) - A | TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 1024) - A | TLS_RSA_WITH_AES_256_CBC_SHA (rsa 1024) - A | TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 1024) - A | TLS_RSA_WITH_AES_128_CBC_SHA (rsa 1024) - A | TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 1024) - D | compressors: | NULL | cipher preference: server | warnings: | 64-bit block cipher 3DES vulnerable to SWEET32 attack | Weak certificate signature: SHA1 |_ least strength: D Nmap done: 1 IP address (1 host up) scanned in 9.07 seconds -- The tool I use to check which HTTPS versions and cipher suites are supported on devices is: <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.bolet.org_TestSSLServer_&d=DwMGaQ&c=IL_XqQWOjubgfqINi2jTzg&r=iASQ76r2uxyy_ZWLzeKQY2enpAr85XwF8s0pQxxLhV8&m=nBGMjqtd-1HwGiE2ZjyIXCCzPnCG0Nwd8Y8B2EeuWpI&s=bkzyg5nMfLxsxd3Kvu0c6MSKvxr2XtwSZatdrjYZiUM&e=" target="_blank">https://www.bolet.org/TestSSLServer/</a> Supported versions: TLSv1.0 TLSv1.1 TLSv1.2 Deflate compression: no Supported cipher suites (ORDER IS NOT SIGNIFICANT): TLSv1.0 RSA_WITH_3DES_EDE_CBC_SHA RSA_WITH_AES_128_CBC_SHA RSA_WITH_AES_256_CBC_SHA (TLSv1.1: idem) TLSv1.2 RSA_WITH_3DES_EDE_CBC_SHA RSA_WITH_AES_128_CBC_SHA RSA_WITH_AES_256_CBC_SHA RSA_WITH_AES_128_CBC_SHA256 RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_GCM_SHA384 ---------------------- Server certificate(s): 0d515e1413d654eb7b22e3f89a0942c4cc14d2fb: CN=zd.ruckuseddie.uk ---------------------- Minimal encryption strength: strong encryption (96-bit or more) Achievable encryption strength: strong encryption (96-bit or more) BEAST status: vulnerable CRIME status: protected

ZoneDirector now supports more than just TLS 1.0 Cipher Suites

2017-07-20T15:18:31-0700 2017-07-20T18:00:12-0700 https://support.ruckuswireless.com/articles/000006398 2017-07-20T15:28:12-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2645 knowledge_article_2645 2017-07-20T15:28:12-0700 000006398 Validated (External) Public Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway, SZ100 After SZ 3.5 / 3.5.1 upgrade, why am I seeing these GlobalFilter application warning messages? When upgrading to 3.5 or 3.5.1 we get some messages on the GUI like these ones: "GlobalFilter contains non 3.5 zones, but those zones will not report the health data." "GlobalFilter contains before 3.5.1 zones, but those zones will not support the radio filter in the Applications page. " These messages are design intent messages to inform there are zones under 3.5 or 3.5.1 that will not provide a 3.5 or a 3.5.1 particular feature.

Explanation on some messages appearing after upgrading to 3.5 or 3.5.1

2017-07-20T15:28:12-0700 2017-07-20T18:00:08-0700 https://support.ruckuswireless.com/articles/000004762 2015-07-15T13:41:31-0700 monthly 0.8 admin,premium knowledge_article_2032 knowledge_article_2032 2015-07-01T04:34:46-0700 000004762 Validated (External) Premium Zoneflex indoor Known issues and workarounds Known Issues and Workarounds, ZoneFlex Indoor Why the AP's are not discovering the controller via DHCP option? Configure the DHCP option field for the ZD IP address as a "Binary" instead of a "String". This made the AP to discover the ZD and come up fine. In earlier MS server versions of windows 2008 or 2003, the length field will be there to specify the exact length of the address. This option is not availalbe in MS server 2012 which is the cause of this problem.

This article explains why the AP discovery via the DHCP option is not working when MS server 2012 R2 is used as a DHCP server. Also, it explains about what need to be configured to make it to work.

2015-07-15T13:41:31-0700 2017-07-12T07:16:22-0700 https://support.ruckuswireless.com/articles/000002171 2014-01-11T13:44:44-0800 monthly 0.8 admin,premium knowledge_article_681 knowledge_article_681 2013-12-30T09:31:19-0800 000002171 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Known issues and workarounds Performance, Configuration, Known Issues and Workarounds, ZoneDirector Why do iOS devices have to re-authenticate after coming out from sleep mode ? Double check if users are enabling the 'Auto-Join' and 'Auto-Login' options on their iphones which can be found under the WLAN they are connecting to. It is also recommended to have a higher value for Grace period thus avoiding the need to re-authenticate at regular intervals. This can be found under : ZD GUI > Configure > WLANs > Advanced options > Grace period - select the value between 1 to 144000 minutes <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PI6V&feoid=00N50000002Cf3M&refid=0EM50000000LKMb"></img>

iOS devices have to re-authenticate after coming out from sleep mode

2014-01-11T13:44:44-0800 2017-07-06T10:57:04-0700 https://support.ruckuswireless.com/articles/000002268 2014-05-26T02:07:09-0700 monthly 0.8 admin,premium knowledge_article_1030 knowledge_article_1030 2013-10-01T08:49:41-0700 000002268 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector Any workaround available if I encounter redirection issues on iOS7 devices? <div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px; background-color: rgb(255, 255, 255); "> Off-late few customers have reported connectivity issues when connecting to captive portal/guest/hotspot networks. Please be advised this is an Apple issue and has nothing to do with Ruckus.</div> <div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px; background-color: rgb(255, 255, 255); "> <div> </div> <div> <div> Quick research on Internet revealed a feasible workaround.</div> <div> </div> <div> How to bypass this alert and reach Safari on iOS devices:</div> <div> 1. Tap OK and wait a few seconds... Then it pops up another message with three options: 'Use Without Internet', 'Use Other Network', and 'Cancel'.</div> <div> 2. Tap 'Use Without Internet'.</div> <div> 3. Press Home button and open Safari.</div> <div> 4. Type in any website URL in the address bar in order to get to Captive Portal of the Wi-Fi network.</div> <div> 5. Enter username & password to log in. Done!</div> <div> </div> <div> Please refer to the following links:</div> <div> https://discussions.apple.com/message/23083710#23083710</div> <div> http://www.tuaw.com/2013/09/23/ios-7-how-to-get-your-wi-fi-working-again/</div> </div> </div>

This article explains known captive portal/guest redirection issues and a workaround.

2014-05-26T02:07:09-0700 2017-07-03T10:25:24-0700 https://support.ruckuswireless.com/articles/000006189 2017-06-29T10:10:59-0700 monthly 0.8 admin,premium knowledge_article_2638 knowledge_article_2638 2016-12-14T10:53:55-0800 000006189 Validated (External) Premium Virtual smartcell gateway Configuration;Firmware;Installation;Known issues and workarounds Configuration, Firmware, Installation, Known Issues and Workarounds, virtual SmartCell Gateway Is vSZ-D compatible between vSZ controller versions? vSZ supports 2 previous minor versions of vSZ-D (see table below) vSZ does not support vSZ-D running a more recent firmware version than what it is running itself When non-supported vSZ-D connects to vSZ, the user will be able to see the vSZ-D in the UI, but it will not be allowed to Approve the vSZ-D. This allows for the user to know the firmware of the vSZ-D needs to be upgraded, which can only be done thru vSZ-D CLI <table border="0" cellpadding="0" cellspacing="0" style="width: 320px; margin-left: -1.15pt;" width="320"><tbody><tr style="height: 25px;"><td colspan="1" rowspan="1" style="width: 64px; height: 25px;"> </td><td colspan="4" rowspan="1" style="width: 256px; height: 25px;">vSZ-D</td></tr><tr style="height: 25px;"><td colspan="1" rowspan="1" style="width: 64px; height: 25px;">vSZ</td><td colspan="1" rowspan="1" style="width: 64px; height: 25px;">3.6</td><td colspan="1" rowspan="1" style="width: 64px; height: 25px;">3.5</td><td colspan="1" rowspan="1" style="width: 64px; height: 25px;">3.4</td><td colspan="1" rowspan="1" style="width: 64px; height: 25px;">3.2</td></tr><tr style="height: 20px;"><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">3.6</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">Yes</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">Yes</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">Yes</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">No</td></tr><tr style="height: 20px;"><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">3.5</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">No</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">Yes</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">Yes</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">Yes</td></tr><tr style="height: 20px;"><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">3.4</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">No</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">No</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">Yes</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">Yes</td></tr><tr style="height: 20px;"><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">3.2</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">No</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">No</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">No</td><td colspan="1" rowspan="1" style="width: 64px; height: 20px;">Yes</td></tr></tbody></table>

vSZ supports 2 previous versions of vSZ-D. vSZ does not support vSZ-D running newer firmware version than the vSZ.

2017-06-29T10:10:59-0700 2017-06-29T12:00:10-0700 https://support.ruckuswireless.com/articles/000005879 2016-07-11T14:29:06-0700 monthly 0.8 admin,premium knowledge_article_2372 knowledge_article_2372 2016-07-11T14:29:06-0700 000005879 Validated (External) Premium P300;Ruckus P300 Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, P300 How can I manually configure P300 Bridge 'Distance' value?

It's critical to specify accurate Distance (in Meters) between P300 Root Bridge and Non-Root Bridges. This is the AP CLI command if unable to access WebUI.

2016-07-11T14:29:06-0700 2017-06-29T01:24:14-0700 https://support.ruckuswireless.com/articles/000006095 2017-06-26T12:01:31-0700 monthly 0.8 admin,premium knowledge_article_2633 knowledge_article_2633 2016-12-02T13:48:29-0800 000006095 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) System network management System Network Management, SmartCell Insight Why am I unable to view the data under Data Explorer tab on SCI? The Data explorer option on the SCI uses port 59090. This port needs to be open to view the data under Data Explorer tab.

This article gives you information on Data Explorer tab on SCI

2017-06-26T12:01:31-0700 2017-06-26T18:00:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000Lb5XCAS?attachment_index=0 2017-06-26T18:00:08-0700 monthly admin,premium knowledge_article_2633 knowledge_article_2633_attachment_1 SCI Data Explorer 59090.PNG 77857.0 image/png https://support.ruckuswireless.com/articles/000002179 2017-06-19T13:58:06-0700 monthly 0.8 admin,premium knowledge_article_2632 knowledge_article_2632 2013-12-30T07:57:37-0800 000002179 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration Performance, Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What is the encryption used by the AP to ZD Tunnel and what impact does it have on performance ? AP-ZD establish an LWAPP tunnel which encrypts packets using 64 bit encryption, and LWAPP uses AES encryption and Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) for its control traffic. Tunnel mode is turned on per SSID/WLAN. All client traffic that connects to that SSID will be sent through a proprietary LWAPP tunnel (L3 type) to the Zone Director, egressing on the VLAN/Subnet where the Zone Director is connected. All the clients will be on the same subnet as the Zone Director management, and there should be a DHCP server available to hand out IP addresses on this subnet. You can also set up a VLAN tag on this WLAN/SSID, so that the traffic will egress tagged on the Zone Director port, and so the port where the Zone Director is connected needs to be tagged in that VLAN and a DHCP server should be available on that VLAN. So if the Access Points are on different Subnets, and you do not have the same client VLAN available across all the Access Points, then when a client roams from one Access Point to another (on the same SSID), instead of being connected to different IP subnets and having to change their IP address (most WiFi clients do a DHCP renew on roam), the traffic is tunneled to the Zone Director across all Access Points with the same SSID, and so the subnet does not change. This is only needed for applications like Voice over IP that require the IP not to change while a call is active. The disadvantage is that now the Zone Director becomes a bottleneck for this traffic. A better solution is to have the same VLAN with the same IP subnet available as tagged at all the Access Points, so when a client roams, regardless of the management subnet were the AP is connected, the client stays on the same VLAN, but the traffic goes directly from the VLAN into the network, and does not have to go through the Zone Director. Using tunnel mode puts a higher load on the Zone Director's CPU and should only be used only when needed. Tunnel mode does not permit using Bandwidth control. When tunnel mode is enabled on a WLAN, multicast video packets are blocked on that WLAN. Multicast voice packets, however, are allowed.

ZD AP LWAPP Tunnel and its impact on performance

2017-06-19T13:58:06-0700 2017-06-19T18:00:08-0700 https://support.ruckuswireless.com/articles/000006353 2017-06-19T10:44:58-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2631 knowledge_article_2631 2017-06-19T10:44:58-0700 000006353 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector Why users are prompted to re-login to the LightSpeed content filter while roaming from an AP to another

This article explains why the clients would have to re-login to the LightSpeed content filter while roaming between AP's and how to resolve this issue.

2017-06-19T10:44:58-0700 2017-06-19T12:00:13-0700 https://support.ruckuswireless.com/articles/000006372 2017-06-19T10:47:26-0700 monthly 0.8 admin,premium knowledge_article_2630 knowledge_article_2630 2017-06-19T10:47:26-0700 000006372 Validated (External) Premium Smartcell gateway;Smartcell insight;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, SmartCell Gateway, SmartCell Insight How many words, that's SCI can get the length of SCG's AP description? There’s no limit in SCI 2.0. Full Description will be shown upon mouse over.

What is the word/character limit on the SCG's AP Description Field in SCI 2.0?

2017-06-19T10:47:26-0700 2017-06-19T12:00:11-0700 https://support.ruckuswireless.com/articles/000001666 2016-01-29T08:41:44-0800 monthly 0.8 admin,premium knowledge_article_2269 knowledge_article_2269 2013-02-24T19:43:41-0800 000001666 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Model[zf7363] is not suppoted: connection request from AP[BC:0C:90:3D:2C:40] Every firmware has the image file for the Access Point that it supported But for some reason the image file for few Access Points is corrupted and that is the reason we see the following error message <div>Model[zf7363] is not suppoted: connection request from AP[BC:0C:90:3D:2C:40] on Monitor -->Access Point --> Events/Activities of the Zone Director</div> <div> </div> <div>Even the Access Point ZF7363 is supported for the firmware running on the Zone Director. The work around for this issue is: Download the fresh firmware from the support site or provide the FTP link to download the fresh firmware and upload it on the Zone Director will fix the issue</div>

Model[zf7363] is not suppoted: connection request from AP[BC:0C:90:3D:2C:40]

2016-01-29T08:41:44-0800 2017-06-12T07:47:05-0700 https://support.ruckuswireless.com/articles/000004535 2015-05-12T10:53:25-0700 monthly 0.8 admin,premium knowledge_article_1850 knowledge_article_1850 2015-05-12T10:53:25-0700 000004535 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How do I configure AP policies when ZDs are in an SR configuration behind NAT? Consider the following network scenario: <img alt="User-added image" height="197" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000POy4&feoid=00N50000002Cf3M&refid=0EM50000000Ljbi" width="500"></img> Here, the APs should have the public addresses of the ZDs configured, not their internal private IPs. To accomplish this, set the public IP address of each ZD as the Primary and Secondary ZoneDirector Address in the Access Point Policies of the ZD configuration: <img alt="User-added image" height="144" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000POy4&feoid=00N50000002Cf3M&refid=0EM50000000Ljbn" width="500"></img>

2015-05-12T10:53:25-0700 2017-06-06T06:12:23-0700 https://support.ruckuswireless.com/articles/000006373 2017-05-31T14:22:49-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2620 knowledge_article_2620 2017-05-15T16:10:12-0700 000006373 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneDirector What could cause my ZD 10.0 controller to have incorrect default IP address?

There is a known issue on ZD version 10.0.0.0 that if ZoneDirector isn’t assigned a static IP address, neither offered an IPv4 address from a DHCP server, the ZoneDirector self-assigns 192.168.0.1 as its IPv4 address, rather than 192.168.0.2 IP address that it is supposed to use.

2017-05-31T14:22:49-0700 2017-05-31T18:00:07-0700 https://support.ruckuswireless.com/articles/000005336 2015-12-07T09:04:03-0800 monthly 0.8 admin,premium knowledge_article_2227 knowledge_article_2227 2015-12-04T16:44:57-0800 000005336 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway, SZ100 How to login to SmartZone managed APs? SSH access to a SmartZone managed AP requires the Username/Password configured under the Zone setup, or the Cluster name/password for SCG/vSZ-H APs still in the Staging zone.

You can login to SmartZone managed APs directly, with Zone setup field info, or with cluster username password on SCG/vSZ-H APs, or defaults on Staging zone APs.

2015-12-07T09:04:03-0800 2017-05-27T07:50:35-0700 https://support.ruckuswireless.com/articles/000006341 2017-05-22T15:28:11-0700 monthly 0.8 admin,premium knowledge_article_2622 knowledge_article_2622 2017-05-22T15:28:11-0700 000006341 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway How do I configure SCG/SZ high to send scheduled reports via email? The only reports that can be sent from the SCG/SZ via email are Saved Reports. You first have to set up the SMTP settings to your mail server in Configure::system <img alt="SCG/SZ SMTP settings" height="297" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ljmt&feoid=00N50000002Cf3M&refid=0EM50000000hjpy" width="500"></img> This requires knowledge of the requirements of the target mail server, security, account, address and port required. The test button may help you verify if this information has been entered correctly. You can then select email option from Reports::Saved Reports <img alt="Configure Saved Report for email delivery" height="184" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ljmt&feoid=00N50000002Cf3M&refid=0EM50000000hjq3" width="500"></img> Details on this configuration can be found in the Administrators guide for the version of code you are using (example 3.4.1 admin guide) <a href="https://support.ruckuswireless.com/documents/1194-smartzone-3-4-1-mr-administrator-guide-scg200-vsz-h" target="_blank">https://support.ruckuswireless.com/documents/1194-smartzone-3-4-1-mr-administrator-guide-scg200-vsz-h</a> Configuring the SMTP Server Settings pg207 Report email notification pg314

Setting up SCG/SZ to send scheduled reports via email

2017-05-22T15:28:11-0700 2017-05-22T18:00:08-0700 https://support.ruckuswireless.com/articles/000003755 2016-12-15T13:18:56-0800 monthly 0.8 admin,premium knowledge_article_2537 knowledge_article_2537 2014-12-05T12:54:49-0800 000003755 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway Installation;System network management Installation, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway The number of APs and clients that the vSCG can support depends on the system resources (CPU and memory) that the virtual machine running the vSCG has. The vSCG is capable of automatically scaling to and supporting a higher number of APs and clients if it determines, at system bootup, that there is sufficient CPU and memory on the virtual machine to support more APs and clients. Below snippet provides the information regarding minimum requirements : <img alt="User-added image" height="178" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQON&feoid=00N50000002Cf3M&refid=0EM50000000LbvA" width="500"></img>

This article has information regarding the minimum system requirements for deploying a vSCG

2016-12-15T13:18:56-0800 2017-05-19T06:25:18-0700 https://support.ruckuswireless.com/articles/000001638 2015-01-09T02:30:02-0800 monthly 0.8 admin,premium knowledge_article_1535 knowledge_article_1535 2013-02-24T19:44:30-0800 000001638 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector If you want to prevent these security warnings from appearing, you will need to import an SSL certificate that is issued by a recognized certificate authority (for example, VeriSign, Thawte, etc). If you do not have an SSL certificate yet, you will need to create a certificate signing request and purchase a certificate from a certificate authority. Please be advised that the SSL certificate should be of 2048 bit and should support PEM format. After installing the CA signed SSL certificate on the Zonedirector, a common name(CN) (or) Fully qualified domain name(FQDN) will be associated with the Zonedirector. This requires accessing the web user-interface of the Zonedirector using this FQDN. Alternatively, we can also use the Subjective Alternative Name(SAN:IP/DNS) to access the Zonedirector. However, this depends on the information filled while generating the Certificate request from the Zonedirector. As explained above, the corresponding FQDN will be used as default redirection page for Guest, captive portal (or) Zero-IT activation - authentication process. However, it is not possible to modify (or) change this Common name(or FQDN) association to any other Domain name (or) SAN name and this is applied till the certificate is active on the Zonedirector.

Certificate error when connecting to Guest or Captive portal WLAN

2015-01-09T02:30:02-0800 2017-05-17T07:35:05-0700 https://support.ruckuswireless.com/articles/000001841 2014-04-29T18:47:24-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_947 knowledge_article_947 2013-03-15T10:06:40-0700 000001841 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware Firmware, ZoneDirector ZD1100 Upgrade Path to 9.8.0.0.203 firmware Current Firmware : 9.1.2.0.8 Latest Firmware : 9.8.0.0.203 <div> 9.1.2.0.8 >> 9.3.4.0.21 >> 9.4.3.0.16 >> 9.5.2.0.15 >> 9.6.2.0.13 >> 9.7.1.0.17 >> 9.8.0.0.203 Please use the FTP links below to download firmware: <a href="http://ftp.ruckuswireless.com/downloads/support/zd3k_9.1.2.0.8.ap_9.1.2.0.8.img" style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " target="_blank">http://ftp.ruckuswireless.com/downloads/support/zd1100_9.1.2.0.8.ap_9.1.2.0.8.img http://ftp.ruckuswireless.com/downloads/support/zd1100_9.3.4.0.21.ap_9.3.4.0.21.img</a> http://ftp.ruckuswireless.com/downloads/support/zd1100_9.4.3.0.16.ap_9.4.3.0.16.img http://ftp.ruckuswireless.com/downloads/support/zd1100_9.5.2.0.15.ap_9.5.2.0.15.img http://ftp.ruckuswireless.com/downloads/support/zd1100_9.6.2.0.13.ap_9.6.2.0.13.img http://ftp.ruckuswireless.com/downloads/support/zd1100_9.7.1.0.17.ap_9.7.1.0.17.img 9.8.0.0.203 is LCS build,please contact your regional SE to get the firmware image file. After the firmware image file is saved on the PC, use the Zone Director GUI's Administer->Upgrade page and 'Browse' to the Firmware image file. When the file is fully loaded, you will be prompted to save a backup configuration file. We do recommend saving a backup with a file name to remind you what version it was saved from, for restoration should you decide to download for problems or incompatibilities found. Then click the Upgrade button to continue. It will find the file and ask you to confirm. Click yes and it begins. Now open a DOS command window and ping the ZD's IP continuously. No little hourglass or moving bar to show the upgrade progress, but the image components are expanded and written to Flash after the file is uploaded. Note: During the process of upgrade the access points will upgrade and disconnect. The upgrade process will take at least 15 to 20 minute for every upgrade. While upgrading your ZD from 9.1.2.0.8 to 9.8.0.0.203 firmware,please follow the special instructions below: -Disconnect your ZD from the network -Follow the upgrade procedure -Connect the ZD back to network. -APs associated with the ZD will get upgraded to the same version as well . </div>

Path to be followed for ZD1100 to upgrade to 9.8.0.0.203 firmware

2014-04-29T18:47:24-0700 2017-05-16T00:46:33-0700 https://support.ruckuswireless.com/articles/000001372 2014-01-11T14:07:59-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_265 knowledge_article_265 2013-01-15T22:23:24-0800 000001372 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Does Ruckus have dynamic-PSK support for windows 8? DPSK and ZeroIT is supported and will work with ZoneFlex version 9.5 and up

2014-01-11T14:07:59-0800 2017-05-04T10:31:17-0700 https://support.ruckuswireless.com/articles/000006359 2017-05-03T13:48:14-0700 monthly 0.8 admin,premium knowledge_article_2610 knowledge_article_2610 2017-05-03T10:25:29-0700 000006359 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Which Ruckus APs have Application Visibility support? <div>Application Recognition and Control : </div> <div>The Application Recognition and Control feature allows ZoneDirector to collect and display application usage statistics for many types of traffic. Data is collected and displayed for both online and previously online clients, and is displayed on dashboard charts as well as an enhanced client monitoring display with a rich set of application usage tables. In addition to the pre-defined Applications, administrators can create user defined Applications by IP address or port number and can create custom application deny policies based on DNS names or port numbers. Access restrictions can be deployed on a per-WLAN basis.</div> The table below displays AP model and type of Application Visibility support: AVC = Application Visibilty & Control DPI = Deep Packet Inspection DNS = Domain Name Service <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000000Ps6&feoid=00N50000002Cf3M&refid=0EM50000000FLq5"></img> also C110 (11ac) X

Application visibility - Only R300, 7321, 7363, 7962, and 7025 do not support it.

2017-05-03T13:48:14-0700 2017-05-03T18:00:07-0700 https://support.ruckuswireless.com/articles/000003471 2017-05-03T10:12:13-0700 monthly 0.8 admin,premium knowledge_article_1329 knowledge_article_1329 2014-10-05T18:51:01-0700 000003471 Validated (External) Premium Zonedirector;Smartcell ap;Zoneflex 7982;Zoneflex 7055;Zoneflex 7372;Zoneflex 7352;Zoneflex 7782;R700;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;Ruckus R700 Configuration Configuration, ZoneDirector, SmartCell AP, ZoneFlex 7982, ZoneFlex 7055, ZoneFlex 7372, ZoneFlex 7352, ZoneFlex 7782, R700 Which Access Point models support Application visibility in ZD 9.8.1? <div>Application Recognition and Control : </div> <div>The Application Recognition and Control feature allows ZoneDirector to collect and display application usage statistics for many types of traffic. Data is collected and displayed for both online and previously online clients, and is displayed on dashboard charts as well as an enhanced client monitoring display with a rich set of application usage tables. In addition to the pre-defined Applications, administrators can create user defined Applications by IP address or port number and can create custom application deny policies based on DNS names or port numbers. Access restrictions can be deployed on a per-WLAN basis. </div> <div> </div> <div>Supported Access Points: R700, 7982, 7372/52, 7055, 7782, SC-8800 series. </div> <div> </div>

Application visibility supported Access Points

2017-05-03T10:12:13-0700 2017-05-03T12:00:08-0700 https://support.ruckuswireless.com/articles/000003451 2015-11-25T11:21:53-0800 monthly 0.8 admin,premium knowledge_article_1760 knowledge_article_1760 2014-12-11T08:47:29-0800 000003451 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation Configuration, Firmware, Installation, SmartCell Gateway How to upgrade vSCG cluster. <div>In cluster configuration N+1, the upgrade can be triggered in any of the nodes. The leader will handle cluster upgrade, by sending update msg to all the nodes that upgrade will take place starting from the followers. The followers will be upgraded first before the leader. The upgrade takes place as follows: 1. The Follower that has the longest uptime (by node booting time) will be first to be upgraded. 2. Then the second longest, then to the last follower. 3. After all followers have been upgraded, the Leader then will be upgraded.</div>

We can upgrade multiple vSCG instances in a cluster

2015-11-25T11:21:53-0800 2017-04-25T12:37:28-0700 https://support.ruckuswireless.com/articles/000006322 2017-04-19T11:13:03-0700 monthly 0.8 admin,premium knowledge_article_2607 knowledge_article_2607 2017-04-19T11:13:03-0700 000006322 Validated (External) Premium Unleashed;Zoneflex indoor;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware;Installation;System network management;Troubleshooting;Knowledge base Configuration, Firmware, Installation, System Network Management, Troubleshooting, Knowledge Base, Unleashed, ZoneFlex Indoor Is auto approve AP's option under global settings available to join the unleashed network for unleashed AP's? No troubleshooting as this is feature request

Auto approve AP's option under global setting is greyed out in unleashed version 200.3.9.13.228 and 200.2 version from the web GUI

2017-04-19T11:13:03-0700 2017-04-19T12:00:07-0700 http://support.ruckuswireless.com/article_attachments/kA250000000LbUICA0?attachment_index=0 2017-04-19T12:00:07-0700 monthly admin,premium knowledge_article_2607 knowledge_article_2607_attachment_1 Auto approve geryed out.JPG 69166.0 image/jpeg https://support.ruckuswireless.com/articles/000006335 2017-04-11T14:24:34-0700 monthly 0.8 admin,premium knowledge_article_2604 knowledge_article_2604 2017-04-07T17:03:39-0700 000006335 Validated (External) Premium Unleashed;Zonedirector;Smartcell gateway;Virtual smartcell gateway;RUCKUS Unleashed;RUCKUS Unleashed Mobile App;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation Configuration, Firmware, Installation, Unleashed, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway What are Best Practices for a successful Controller platform upgrade? Follow these simple best practices to insure a smooth and problem free Controller upgrade. 1) Read the Release Notes for the version of SmartZone or ZoneDirector firmware you would like to upgrade to. - See Supported AP section. - Are all your currently deployed AP models supported on the new firmware? - See the Upgrade Path. - All Release Notes list minimum previous versions required in order to load the new firmware. You may need an interim upgrade if not on one of these listed versions. 2) Create a Backup of your SZ/Cluster or ZoneDirector configuration file. - Add digits to the backup file name, to indicate the version it came from in case you need to revert back to the original version. 3) Schedule a change management period to perform the upgrade and notify all users.

There are simple rules to follow in order to insure successful problem free controller upgrades.

2017-04-11T14:24:34-0700 2017-04-11T18:00:08-0700 https://support.ruckuswireless.com/articles/000006318 2017-04-11T16:07:19-0700 monthly 0.8 admin,premium knowledge_article_2605 knowledge_article_2605 2017-04-11T16:07:19-0700 000006318 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway Do we have an In-built DHCP Server in the vSZ? vSZ do not have in-built DHCP server. It needs an External DHCP server. This is documented in the Product Specifications Guide. Product Specification Guide: https://www.ruckuswireless.com/products/system-management-control/smartzone/virtual-smartzone-h https://www.ruckuswireless.com/products/system-management-control/smartzone/virtual-smartzone-e

vSZ does not have internal DHCP server.

2017-04-11T16:07:19-0700 2017-04-11T18:00:07-0700 https://support.ruckuswireless.com/articles/000004929 2017-04-07T10:05:21-0700 monthly 0.8 admin,premium knowledge_article_2059 knowledge_article_2059 2015-07-28T00:18:09-0700 000004929 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway What procedure do I have to use to provide secure wireless access using the Google OAuth service? OAuth provides a mechanism to provide secure access to a resource without requiring the resource owner to create new or share existing credentials. Users can use their Google, Microsoft, LinkedIn, Twitter, or Facebook accounts to gain access to the resource. Of course a trust needs to the established between the OAuth provider and the resource provider. SmartZone provides a feature that lets its admin to use this OAuth service to provide secure wireless access to the incoming users. Admin can use Facebook, LinkedIn, or Google's OAuth service. This document uses Google OAuth service as an example to walk-through this setup process. Below are major steps: 1. Setting up a Google Project for backend processing Note: Make sure the SZ controller has a fully qualified domain name (FQDN) before hand. Write down the Client ID and Client secret details provided at the end of this setup. 2. Setting up the SmartZone controller. It includes following steps: a. Setting up an authentication profile using the credentials obtained in step 1 above. b. A local authentication store. c. Creation of onboarding portal. d. Creation of a guest portal. e. Creation of onboarding SSID (you have to choose "Guest Access + Hotspot 2.0 Onboarding" as the SSID type). f. Creation of secure access SSID (this is the real Zero-IT SSID SSID with 802.1x EAP authentication method). It uses built-in RADIUS server on the SmartZone controller. 3. Testing. You can use any standard OS client with a GMAIL address and password to get a provisioning file for the secure wireless access. Please use the attached document for details on each step. Caveats: 1. Anyone with GMAIL address can gain access. If you don't want them to access your network, you can delete their identity by going to the Identity --> Users page. But it doesn't stop them from gaining access again by going through the entire provisioning process. BUT if you disable it instead, it will disable their account and prevent them from future provisioning. You have to click on the "Monitor" button for that user to see the disable option. 2. Google OAuth doesn't provide any user attributes in turn (unlike a typical AAA). So it is not possible to further customize a user's experience. 3. Please ensure the SmartZone controller is on 3.1.1 version or higher.

This article contains a document on how to use Google OAuth service to provide Zero-IT based secure access to wireless users. Any user with a GMAIL address can log into the onboarding portal to download the necessary settings to access wireless securely.

2017-04-07T10:05:21-0700 2017-04-07T12:00:09-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PJKTCA4?attachment_index=0 2017-04-07T12:00:09-0700 monthly admin,premium knowledge_article_2059 knowledge_article_2059_attachment_1 Google OAuth for Zero-IT.pdf 3801099.0 application/pdf https://support.ruckuswireless.com/articles/000001253 2014-11-24T22:32:29-0800 monthly 0.8 admin,premium knowledge_article_1450 knowledge_article_1450 2012-03-21T12:01:35-0700 000001253 Validated (External) Premium Zoneflex outdoor Installation Installation, ZoneFlex Outdoor What external PoE Surge Protection do you recommend for an outdoor AP ? To protect the Access Point from lightning strikes over the UTP cable you should install a protector close as possible to the PoE input. <img alt="User-added image" height="267" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PN7h&feoid=00N50000002Cf3M&refid=0EM50000000LbD3" width="500"></img> The recommended surge protector that works with PoE and GiG E ethernet and has been “approved” by the Ruckus hardware team is Transtector Systems, Inc. - Power over Ethernet Surge Protector Mfg Part #: 1101-959 Find the attached datasheet

PoE Surge Protection for Outdoor APs

2014-11-24T22:32:29-0800 2017-04-04T02:09:08-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PBqGCAW?attachment_index=0 2017-04-04T02:09:08-0700 monthly admin,premium knowledge_article_1450 knowledge_article_1450_attachment_1 Transtector_ALPU-PTP-M.pdf 328707.0 application/pdf https://support.ruckuswireless.com/articles/000003486 2014-10-07T18:19:08-0700 monthly 0.8 admin,premium knowledge_article_1331 knowledge_article_1331 2014-10-07T18:19:08-0700 000003486 Validated (External) Premium Zoneflex indoor;Vscg Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, vSCG Connected a ZD managed AP to VSCG and AP is not broadcasting any wlans When we are migrating an R300 Access Point from Zone director managed to vSCG, make sure that we have to start the LWAPP2SCG migration process on a factory defaulted AP or factory default the AP after the migration

When R300 AP is connected to vSCG it is not broadcasting any WLANs

2014-10-07T18:19:08-0700 2017-04-01T08:29:42-0700 https://support.ruckuswireless.com/articles/000005125 2017-03-22T14:16:12-0700 monthly 0.8 admin,premium knowledge_article_2600 knowledge_article_2600 2015-10-15T14:18:00-0700 000005125 Validated (External) Premium Zoneflex outdoor Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneFlex Outdoor P300 AP's fail to establish Point-to-Point Link? We tried to ping the gateway from the NRB and noticed it could ping the gateway fine. We did traceroute and found that it was reaching gateway through the existing Mesh link. Once we disabled the old Mesh Link, the Point to Point link was formed between both P300 AP's.

P300 AP's fail to establish Point-to-Point Link

2017-03-22T14:16:12-0700 2017-03-22T18:00:17-0700 https://support.ruckuswireless.com/articles/000006301 2017-03-22T14:23:29-0700 monthly 0.8 admin,premium knowledge_article_2599 knowledge_article_2599 2017-03-12T18:25:51-0700 000006301 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware Configuration, Firmware, Unleashed How to enable 'Master AP protection' Mode on an Unleashed AP? 'Master AP Protection' This release adds a new mechanism to protect the Master AP from overloading its hardware resources by directing client associations to other member APs when handling additional clients could lead to reduced performance. This feature is disabled by default. When enabled, it uses client load balancing to protect the Master by pushing new clients to other member APs when the Master’s resource utilization is high. Master AP Protection, is simply 'Load Balancing'. You need to enable it on the AP radio and WLAN's. AP Protection Mode is disabled by default. To enable this feature, we need to enable Load Balancing on the AP Radios and also on the WLAN's. 1. To enable it on the AP radio:- -- Login to the AP CLI using putty (SSH session) -- Type: enable --> This will take you to enable mode -- Type: Config --> This will take you to the config terminal mode -- In the config terminal mode: type the following commands: ruckus(config)#load-balancing ruckus(config-load-balancing)#enable wifi0 --> To enable it on 2.4GHz Radio ruckus(config-load-balancing)#enable wifi1 --> To enable it on 5GHz Radio ruckus(config-load-balancing)#end --> This is to save the config 2. To enable it on the WLAN:- -- Open the Master AP GUI -- Wireless --> Edit the WLAN --> Radio Control --> Check the Option for 'Load Balancing' and apply the settings.

In Unleashed Firmware 200.3.9.13.228 a new feature is added 'Master AP Protection' as per the Release Notes. It is disabled by default. How to enable it?

2017-03-22T14:23:29-0700 2017-03-22T18:00:16-0700 https://support.ruckuswireless.com/articles/000006304 2017-03-20T10:18:29-0700 monthly 0.8 admin,premium knowledge_article_2595 knowledge_article_2595 2017-03-20T10:18:29-0700 000006304 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Performance;Configuration;Installation;Known issues and workarounds Performance, Configuration, Installation, Known Issues and Workarounds, SmartCell Insight What's the minimum HW requirement for SCI to support 500 APs? How about Demo version? See SmartCell Insight (SCI) Installation Guide for reference. An SCI Cluster consists of a Master Node and one or many Data Nodes. Master Node Minimum HW Requirement: 8 x vCPU 32 GB RAM 80 GB HDD (SCSI) 500 GB Secondary HDD (SCSI) Data Node Minimum HW Requirement: 4 x vCPU 20 GB RAM 80 GB HDD (SCSI) 500 GB Secondary HDD (SCSI) Guidelines to setting up Data Nodes: # Data Nodes # of APs supported 0 up to 3,000 1 up to 10,000 2 up to 20,000 3 up to 30,000 To support 500 APs would require one Master Node, at the minimum. -- A Demo Node must only be used for demo or testing purposes as it has scaling and performance limitations and should not be used in a production environment. The Demo Node can only support up to 200 APs. Demo Node Minimum HW Requirement: 4 x vCPU 16 GB RAM 80 GB HDD (SCSI) 500 GB Secondary HDD (SCSI)

SCI Installation guide requirement is minimum 8 x vCPU and 32 GB RAM, Demo mode is not for Production use.

2017-03-20T10:18:29-0700 2017-03-20T12:00:16-0700 https://support.ruckuswireless.com/articles/000006062 2016-09-27T11:06:22-0700 monthly 0.8 admin,premium knowledge_article_2424 knowledge_article_2424 2016-09-27T11:06:22-0700 000006062 Validated (External) Premium Zoneflex 7782;T300;T301;Ruckus T300;Ruckus T301n;Ruckus T301s Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneFlex 7782, T300, T301 What are the antenna connectors for -E type AP models? The 7782 and 7372e support external antenna on both bands. The T300e antenna in only available on the 5G band. IF you are going to use the outdoor access points with external antenna outside make sure you water-proof the connectors. There is no gasket inside an N connector. Water can get inside over time and take out the link, or part of the link.

The AP antenna connectors are N-Female for T300e and 7782, and RP-SMA jack for 7372e model APs

2016-09-27T11:06:22-0700 2017-03-14T23:20:48-0700 https://support.ruckuswireless.com/articles/000001381 2014-11-12T07:09:53-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_1418 knowledge_article_1418 2013-01-16T07:53:42-0800 000001381 Validated (External) Public Flexmaster;FlexMaster Firmware;Installation Firmware, Installation, FlexMaster How to upgrade FM using a patch file? <div>First download the target version patch file from the Ruckus Support website. Applying Patch to flexmaster:</div> <div>Upgrade process:</div> <div> </div> <div>1) Access the Red Hat Linux CLI as the root user</div> <div> </div> <div>2) Copy patch file to FlexMaster installation folder (opt/FlexMaster), </div> <div> </div> <div>example:</div> <div> </div> <div># cp /home/9.3.0.0.18-9.4.0.0.17/9.4.0.0.17.patch /opt/FlexMaster/</div> <div> </div> <div>3) Change path to FlexMaster installation path, example:</div> <div> </div> <div># cd /opt/Flexmaster</div> <div> </div> <div>4) Execute ./upgrade script to upgrade FlexMaster (command should be run without the .patch extension at the end of the file name). example:</div> <div> </div> <div># ./upgrade.sh 9.4.0.0.17</div> <div> </div> <div>5) Please clear the browser cache before accessing upgraded FM's GUI.</div> <div> </div> <div>Note: FM upgrade patch file will work only in CLI mode.</div>

This article explains how to upgrade FlexMaster to a higher version.

2014-11-12T07:09:53-0800 2017-03-12T21:29:30-0700 https://support.ruckuswireless.com/articles/000004584 2015-05-20T04:55:37-0700 monthly 0.8 admin,premium knowledge_article_1881 knowledge_article_1881 2015-05-20T04:55:37-0700 000004584 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector

AP are suffering heart beat lost and getting disconnected randomly due to DAI being enbabled

2015-05-20T04:55:37-0700 2017-03-08T12:29:21-0800 https://support.ruckuswireless.com/articles/000006292 2017-03-06T13:38:53-0800 monthly 0.8 admin,premium knowledge_article_2588 knowledge_article_2588 2017-03-06T13:38:53-0800 000006292 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;System network management;Known issues and workarounds Performance, System Network Management, Known Issues and Workarounds, Unleashed Unleashed GW / Master Mode AP maximum Clients = 100 for all models? See Unleashed online documentation, which includes a caveat regarding GW Mode AP maximum client count. <a href="http://docs.ruckuswireless.com/unleashed/200.3/index.html#c-ShowSystemOverview.html" target="_blank">http://docs.ruckuswireless.com/unleashed/200.3/index.html#c-ShowSystemOverview.html</a> Note: The Max Clients displayed for the Unleashed Master AP may be lower than the configured maximum, as the Unleashed Master has to perform additional tasks other than serving clients. For Unleashed AP models - R310, R500, R00 and T300 series, the max is 50 clients when the AP is the Master. For R710, T710 and T710s, the max clients is 100. These maximums only apply to the current Unleashed Master AP. All other member APs will honor the max clients set from the global AP model-specific controls page (Access Points > Summary > Edit > Others > Max Clients) . GW Mode APs are also Master APs that handle roaming, authentication, reporting, monitoring, logs, responding to management queries, guest pass generation, captive portal, etc so handling client traffic is limited to 100 max. If a 101st client tries to connect to the GW Mode Master AP, it will not be able to accept that client request.

Unleashed GW/Master Mode AP performs multiple functions, reducing max Client support to 50 or 100 depending upon AP model.

2017-03-06T13:38:53-0800 2017-03-06T18:00:16-0800 https://support.ruckuswireless.com/articles/000003391 2014-09-15T13:42:51-0700 monthly 0.8 admin,premium knowledge_article_1274 knowledge_article_1274 2014-09-15T13:42:51-0700 000003391 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware Configuration, Firmware, ZoneDirector Top 10 AP's by usage, Top 10 SSID's by usage, Top 10 Clients by Usage and Top 10 Applications by usage will only display data if the Application Visibility option under Configure :: WLANs :: Edit :: Advanced Options is enabled otherwise nothing will be displayed.

This article helps in displaying client statistics on the Dashboard Widgets

2014-09-15T13:42:51-0700 2017-02-28T06:49:56-0800 https://support.ruckuswireless.com/articles/000003753 2014-12-05T16:05:13-0800 monthly 0.8 admin,premium knowledge_article_1485 knowledge_article_1485 2014-12-05T16:01:39-0800 000003753 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor How many clients can be supported by dual band 802.11n APs? Number of clients that can be supported by 802.11n dual band Access Point are as below: Authentication/Encryption Type 2.4 Ghz 5 Ghz Per AP Open 500 500 500 WEP 111 111 222 WPA/WPA2 (TKIP) 26 26 206 WPA/WPA2 (AES) 110 110 220 <table border="0" cellpadding="0" cellspacing="0" width="1278"><colgroup><col style="width: 189px;"></col><col style="width: 157px;"></col><col style="width: 149px;"></col><col style="width: 148px;"></col><col style="width: 179px;"></col><col style="width: 76px;"></col></colgroup><tbody><tr height="24" style="height: 24px;"><td colspan="1" rowspan="1" height="24" style="height: 24px; width: 189px;"> </td><td colspan="1" rowspan="2" style="width: 157px;">Key Cache Entries consumed / WLAN</td><td colspan="1" rowspan="2" style="width: 149px;">Key Cache Entries consumed / Client</td><td colspan="1" rowspan="1" style="width: 148px;"> </td><td colspan="7" rowspan="1" style="width: 635px;">MAX CLIENT CAPACITY (1 WLAN)</td></tr><tr height="25" style="height: 25px;"><td colspan="1" rowspan="1" height="25" style="height: 25px;"> </td><td colspan="1" rowspan="1">AP TYPES:</td><td colspan="1" rowspan="1" style="width: 179px;">Single Band AP (.11n)</td><td colspan="3" rowspan="1" style="">Dual Band AP (.11n)</td><td colspan="3" rowspan="1" style="">Dual Band AP (.11ac)</td></tr><tr height="25" style="height: 25px;"><td colspan="1" rowspan="1" height="25" style="height: 25px;"> </td><td colspan="1" rowspan="1" style="width: 157px;"> </td><td colspan="1" rowspan="1" style="width: 149px;"> </td><td colspan="1" rowspan="1">Key Cache Entries</td><td colspan="1" rowspan="1" style="width: 179px;">112</td><td colspan="1" rowspan="1" style="">112</td><td colspan="1" rowspan="1" style="">112</td><td colspan="1" rowspan="1" style="">224</td><td colspan="1" rowspan="1" style="">112</td><td colspan="1" rowspan="1" style="">NA</td><td colspan="1" rowspan="1" style="">NA</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;">AUTH / ENCRYPTION TYPE:</td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1" style=""> </td><td colspan="1" rowspan="1" style="">2.4GHz</td><td colspan="1" rowspan="1" style="">5GHz</td><td colspan="1" rowspan="1" style="">Per AP</td><td colspan="1" rowspan="1" style="">2.4GHz</td><td colspan="1" rowspan="1" style="">5GHz</td><td colspan="1" rowspan="1" style="">Per AP</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;">Open</td><td colspan="1" rowspan="1">0</td><td colspan="1" rowspan="1">1</td><td colspan="1" rowspan="1"> </td><td align="right" colspan="1" rowspan="1" style="">500</td><td align="right" colspan="1" rowspan="1" style="">500</td><td align="right" colspan="1" rowspan="1" style="">500</td><td align="right" colspan="1" rowspan="1" style="">500</td><td align="right" colspan="1" rowspan="1" style="">500</td><td align="right" colspan="1" rowspan="1" style="">180</td><td align="right" colspan="1" rowspan="1" style="">500</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;">WEP</td><td colspan="1" rowspan="1">1</td><td colspan="1" rowspan="1">1</td><td colspan="1" rowspan="1"> </td><td align="right" colspan="1" rowspan="1">111</td><td align="right" colspan="1" rowspan="1">111</td><td align="right" colspan="1" rowspan="1" style="">111</td><td align="right" colspan="1" rowspan="1" style="">222</td><td align="right" colspan="1" rowspan="1">111</td><td align="right" colspan="1" rowspan="1" style="">180</td><td align="right" colspan="1" rowspan="1" style="">291</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;">WPA / WPA2 (TKIP)</td><td colspan="1" rowspan="1">8</td><td colspan="1" rowspan="1">4</td><td colspan="1" rowspan="1"> </td><td align="right" colspan="1" rowspan="1">26</td><td align="right" colspan="1" rowspan="1">26</td><td align="right" colspan="1" rowspan="1" style="">26</td><td align="right" colspan="1" rowspan="1" style="">52</td><td align="right" colspan="1" rowspan="1">26</td><td align="right" colspan="1" rowspan="1" style="">180</td><td align="right" colspan="1" rowspan="1" style="">206</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;">WPA / WPA2 Mixed Mode </td><td colspan="1" rowspan="1">8</td><td colspan="1" rowspan="1">4</td><td colspan="1" rowspan="1">(TKIP)</td><td align="right" colspan="1" rowspan="1">26</td><td align="right" colspan="1" rowspan="1">26</td><td align="right" colspan="1" rowspan="1" style="">26</td><td align="right" colspan="1" rowspan="1" style="">52</td><td align="right" colspan="1" rowspan="1">26</td><td align="right" colspan="1" rowspan="1" style="">180</td><td align="right" colspan="1" rowspan="1" style="">206</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1">1</td><td colspan="1" rowspan="1">(AES)</td><td align="right" colspan="1" rowspan="1">104</td><td align="right" colspan="1" rowspan="1">104</td><td align="right" colspan="1" rowspan="1" style="">104</td><td align="right" colspan="1" rowspan="1" style="">208</td><td align="right" colspan="1" rowspan="1">104</td><td align="right" colspan="1" rowspan="1" style="">180</td><td align="right" colspan="1" rowspan="1" style="">284</td></tr><tr height="22" style="height: 22px;"><td colspan="1" rowspan="1" height="22" style="height: 22px;">WPA / WPA2 (AES)</td><td colspan="1" rowspan="1">2</td><td colspan="1" rowspan="1">1</td><td colspan="1" rowspan="1"> </td><td align="right" colspan="1" rowspan="1">110</td><td align="right" colspan="1" rowspan="1">110</td><td align="right" colspan="1" rowspan="1" style="">110</td><td align="right" colspan="1" rowspan="1" style="">220</td><td align="right" colspan="1" rowspan="1">110</td><td align="right" colspan="1" rowspan="1" style="">180</td><td align="right" colspan="1" rowspan="1" style="">290</td></tr></tbody></table>

2014-12-05T16:05:13-0800 2017-02-28T02:06:49-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PHtaCAG?attachment_index=0 2017-02-28T02:06:49-0800 monthly admin,premium knowledge_article_1485 knowledge_article_1485_attachment_1 Client Count Table -120514.xlsx 12155.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000006265 2017-02-27T16:29:52-0800 monthly 0.8 admin,premium knowledge_article_2585 knowledge_article_2585 2017-02-27T16:29:52-0800 000006265 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway is there any quick way to rename APs that are in a zone, instead of going on-by-one? There is a slick way to rename AP's that are still in the staging zone, using a provisioning .csv file which you upload into the SCG from Configure::Access Points. You can download a sample .csv and add AP name, zone, location, description and GPS data (export the empty list for sample). This script is used to move new AP's from the Staging Zone to the correct service Zone when they join, and can be pre-uploaded ready for deployment. The Key is the AP MAC and AP Zone must match and be valid. <img alt="Configure::Access Points > import" height="131" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000LjS0&feoid=00N50000002Cf3M&refid=0EM50000000g6yO" width="500"></img> For AP's that are already connected the two methods I can think of are: 1. Use Ruckus API in a script to configure the SCG with the data: https://support.ruckuswireless.com/documents/973-smartzone-3-2-1-mr-public-api-reference-guide-scg200 http://docs.ruckuswireless.com/scg-200/scg-200-public-api-reference-guide-3-2-1.html#access-point-configuration <h4>Modify Basic </h4> <code>/v3_1/aps/{apMac}</code> Use this API command to modify the basic information of an AP. <pre> }<code>,</code></pre> <pre> <code> "</code>name<code>" : </code>{</pre> <pre> "type" : "string",</pre> <pre> "minLength" : 2,</pre> <pre> "maxLength" : 64,</pre> <pre> "pattern" : "^[!-~]((?!\$\()[ -_a-~]){0,62}[!-~]$",</pre> <pre> "description" : "Name of the AP"</pre> <pre> 2. Create a CLI script to modify using the SCG CLI commands: https://support.ruckuswireless.com/documents/948-smartzone-3-2-1-mr-command-line-interface-reference-guide-scg-200-vsz-h</pre>

How to automate renaming APs on an SCG or vSZ

2017-02-27T16:29:52-0800 2017-02-27T18:00:16-0800 https://support.ruckuswireless.com/articles/000005776 2016-05-25T15:47:10-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2325 knowledge_article_2325 2016-05-25T15:47:10-0700 000005776 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Security;Troubleshooting;Support license activation Installation, Security, Troubleshooting, Support License Activation, ZoneDirector What IP address does the ZD controller check support entitlement against? The FQDN is = supportactivation.ruckuswireless.com C:\>nslookup supportactivation.ruckuswireless.com Non-authoritative answer: Name: supportactivation.ruckuswireless.com Addresses: 2001:1868:a100:132::31 12.217.161.158 Though the IP address is 12.217.161.158, It is a better idea to use/allow the FQDN as it is not susceptible to IP address changes.

Method of going about allowing specific ZD traffic through end-user firewall/gateway. Instance where end-user wants to open specific port for the controller to check support entitlement. He does not want to download the support entitlement file from the support site and then load it in his controller.

2016-05-25T15:47:10-0700 2017-02-27T11:22:56-0800 https://support.ruckuswireless.com/articles/000006284 2017-02-24T15:18:01-0800 monthly 0.8 admin,premium knowledge_article_2583 knowledge_article_2583 2017-02-24T15:16:26-0800 000006284 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Performance;Firmware;Known issues and workarounds Performance, Firmware, Known Issues and Workarounds, Unleashed What is the Unleashed GW Mode AP's maximum WAN bandwidth? We are supporting all Ruckus 802.11ac model APs under Unleashed, but there are some WAN bandwidth restrictions due to the processing overhead of handling clients that affect the WAN/LAN packet inspection role in GW Mode. As GW mode AP has to perform multiple functions such as Master AP, DHCP server, and NAT, we strongly recommend to use an 802.11ac Wave2 model AP as the GW mode AP. The maximum WAN throughput for the entire Unleashed (up to 24 other) APs thru the GW Mode AP, is either 100mbps or 200mbps, based upon the AP model capabilities. 11ac WAVE-2 APs: 200 Mbps WAN b/w · R710 · R510 · T710 series 11ac WAVE-1 APs: 100 Mbps WAN b/w · R600 · R500 · R310 · T300 series

Unleashed GW mode 802.11ac Wave2 APs have 200mbps WAN uplink versus Unleashed 802.11ac Wave1 model AP 100mbps GW mode max WAN throughput.

2017-02-24T15:18:01-0800 2017-02-24T18:00:14-0800 https://support.ruckuswireless.com/articles/000001485 2017-02-23T09:41:29-0800 monthly 0.8 admin,premium knowledge_article_2582 knowledge_article_2582 2013-01-22T13:42:17-0800 000001485 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What is Hotspot Walled Garden? Hotspot Walled Garden rules is to designate network destinations (host address or subnet) that users can access without going through authentication. A Walled Garden is a limited environment to which an unauthenticated user is given access for the purpose of setting up an account. After the account is established, the user is allowed out of the Walled Garden. URLs will be resolved to an IP address (up to four). Users will not be able to click through to other URLs that may be presented on a page if that page is hosted on a server with a different IP address. Avoid using common URLs that are translated into many IP addresses (such as www.yahoo.com), as users may be redirected to re-authenticate when they navigate through the page. How to create Walled Garden rules in AP? 1. Go to Configuration > Hotspot > Walled Garden. 2. Click Add New Entry. A field entitled Walled Garden Hosts appears. 3. In Walled Garden Host, enter a host name, IP address, network segment (e.g., 192.168.1.0/24) or a domain name. If a domain name is entered, it will be resolved every 5 minutes 4. Click Update to save your entry. You can create up to 64 entries in the Walled Garden Hosts table.

What is Hotspot Walled Garden

2017-02-23T09:41:29-0800 2017-02-23T12:00:15-0800 https://support.ruckuswireless.com/articles/000002454 2015-07-26T23:05:25-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2052 knowledge_article_2052 2014-01-08T12:36:51-0800 000002454 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Where can we see the list of restricted subnets for a wlan when client isolation option is enabled? List of restricted subnets can be found under Configure --> Guest Access --> Edit the guest service you are interested in --> click on the "Restricted Subnet Access". You can also find same information via ZD CLI using the following command sequence: login as: Please login: admin Password: Welcome to the Ruckus Wireless ZoneDirector 3000 Command Line Interface ruckus> en ruckus# conf You have all rights in this mode. ruckus(config)# guest-access "default-guestservice" The Guest Access entry 'default-guestservice' has been loaded. To save the Guest Access entry, type end or exit. ruckus(config-guest-access)# show ........ By default you will see all private IP networks. If you want more or delete any existing networks,you can do so from here. You can also add exceptions to these generic subnet identifiers and reorder them to provide access to a particular network resource such as a server or a printer.

This article mentions the location of restricted subnets when client isolation option is enabled on any SSID.

2015-07-26T23:05:25-0700 2017-02-17T04:04:42-0800 https://support.ruckuswireless.com/articles/000006241 2017-02-15T15:20:35-0800 monthly 0.8 admin,premium knowledge_article_2580 knowledge_article_2580 2017-02-15T15:20:35-0800 000006241 Validated (External) Premium Flexmaster;FlexMaster Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, FlexMaster Why are the ZDs and solo APs are failing to join FM 9.13 version? The original FlexMaster certification expires on March 26th, 2017. After certification expires, the HTTPS connection between ZoneDirector/Solo AP and FlexMaster will be disconnected, and FlexMaster will not be able to receive data from ZoneDirector/Solo AP. To resolve this issue, Ruckus Wireless introduces a new SSL certification in the FlexMaster 9.13 release, and also introduces a new CA certification for ZoneDirector from release 9.10.2/9.12.2/9.13 and for Solo AP from release 104.0.0.0 FlexMaster release 9.13 introduces SSL certification (default) for devices. All ZoneDirector devices must be upgraded to release 9.10.2, 9.12.2, or 9.13 to support this certification. In addition, solo APs must be upgraded to version 104.0.0.0.x, or you must change the TR069 URL to HTTP, else the AP will fail to register in FlexMaster through the HTTPS connection Refer to 9.13 release notes for more information.

FM SSL certification will expire. So, FM introduced new certification oin 9.13 release. ZDs and APs should run above 9.10 version to support the new certification.

2017-02-15T15:20:35-0800 2017-02-15T18:00:20-0800 https://support.ruckuswireless.com/articles/000001852 2017-02-15T15:27:48-0800 monthly 0.8 admin,premium knowledge_article_2460 knowledge_article_2460 2013-03-19T11:27:39-0700 000001852 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to configure WPAD Auto-Proxy configuration ? Please refer to the attached document for steps on how to configure WPAD Auto-Proxy configuration. <div class="page" title="Page 3"> <div class="layoutArea"> <div class="column"> ..."If your organisation uses a [non-transparent] proxy server there can be a significant IT overhead in manually configuring browser proxy settings on all your computers, or supporting user self-configuration. This problem is exacerbated if the computer is either not owned by your organisation, or used in other locations where the proxy server is not available (i.e. at home, public hotspot, etc.) as the browsers proxy settings will need to be removed before use in these other locations. " </div> </div> </div>

WPAD Auto-Proxy configuration

2017-02-15T15:27:48-0800 2017-02-15T18:00:19-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PDRcCAO?attachment_index=0 2017-02-15T18:00:19-0800 monthly admin,premium knowledge_article_2460 knowledge_article_2460_attachment_1 WPAD.zip 716933.0 application/zip https://support.ruckuswireless.com/articles/000006270 2017-02-13T14:35:08-0800 monthly 0.8 admin,premium knowledge_article_2576 knowledge_article_2576 2017-02-13T14:35:08-0800 000006270 Validated (External) Premium Vsz dataplane Performance;Configuration;Installation;Known issues and workarounds Performance, Configuration, Installation, Known Issues and Workarounds, vSZ Dataplane vDP HW config using direct IO for better throughput and performance

2017-02-13T14:35:08-0800 2017-02-13T18:00:16-0800 http://support.ruckuswireless.com/article_attachments/kA250000000LbOPCA0?attachment_index=0 2017-02-13T18:00:16-0800 monthly admin,premium knowledge_article_2576 knowledge_article_2576_attachment_1 Direct-IO-VM-Resource-Configuration.pdf 776332.0 application/pdf https://support.ruckuswireless.com/articles/000004352 2015-09-23T11:27:33-0700 monthly 0.8 admin,premium knowledge_article_2157 knowledge_article_2157 2015-04-23T15:32:29-0700 000004352 Validated (External) Premium Zoneplanner;ZonePlanner Troubleshooting Troubleshooting, ZonePlanner Where can I get antenna patterns for T300 and H500 model access points to add in Zone planner Please extract the attached file(Ruckus_ZonePlanner_Antenna_Patterns.zip) and copy it to the Zone planner installed folder. If Zone Planner was installed on C drive Ruckus Planner Antenna folder will be as mentioned below: C:\Program Files (x86)\AirMagnet Inc\AirMagnet Surveyor\Antenna Open Zone Planner software and now we can select H500 and T300 AP antenna models.

Antenna Patterns that are required to perform to survey via Zoneplanner for T300 and H500

2015-09-23T11:27:33-0700 2017-02-13T01:14:48-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PIW8CAO?attachment_index=0 2017-02-13T01:14:48-0800 monthly admin,premium knowledge_article_2157 knowledge_article_2157_attachment_1 Antenna_Patterns_H500_T300.zip 47263.0 application/zip https://support.ruckuswireless.com/articles/000003499 2014-10-19T18:03:01-0700 monthly 0.8 admin,premium knowledge_article_1343 knowledge_article_1343 2014-10-19T18:03:01-0700 000003499 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Getting SSID spoofing AP Detected message on the ZD Following is the reason for getting "SSID spoofing AP detected" message on the ZD GUI under "Events/Activities". SSID spoofing AP detected will get triggered on the zone director when an external AP (other than Ruckus/from other network) broadcasts the same SSID.

2014-10-19T18:03:01-0700 2017-01-28T07:07:51-0800 https://support.ruckuswireless.com/articles/000006231 2017-01-24T09:50:53-0800 monthly 0.8 admin,premium knowledge_article_2568 knowledge_article_2568 2017-01-24T09:49:48-0800 000006231 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway, SZ100 What version of SmartZone will support all ASCII Unicode Characters? Lab testing SSIDs of various lengths returned "string parameter too long" with extended unicode characters beyond 6-7 characters. SSIDs allow for a maximum of 32 bytes. Unicode allows for characters of anywhere from one (any ASCII character) to four bytes depending on the language and UTF encoding. We were probably running into this 32 byte limit, hence the error message. Feature Request (FR-2390: Support for Unicode), is resolved and incorporated in SZ 3.4.0.0.976 (GA) and for SZ 3.5.

Full ASCII Unicode Character support is available in SmartZone 3.4+.

2017-01-24T09:50:53-0800 2017-01-24T12:00:20-0800 https://support.ruckuswireless.com/articles/000006230 2017-01-23T21:43:26-0800 monthly 0.8 admin,premium knowledge_article_2567 knowledge_article_2567 2017-01-23T21:43:26-0800 000006230 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway, virtual SmartCell Gateway How to upgrade an existing APZone to higher firmware

SCG/vSZ is upgraded to higher version and APZones are still in Lower firmware version. This steps will help to upgrade the APzones.

2017-01-23T21:43:26-0800 2017-01-24T00:00:15-0800 https://support.ruckuswireless.com/articles/000006205 2017-01-18T11:50:42-0800 monthly 0.8 admin,premium knowledge_article_2564 knowledge_article_2564 2017-01-18T11:50:42-0800 000006205 Validated (External) Premium Vsz dataplane Configuration Configuration, vSZ Dataplane Can I change the hostname of vSZ-D? To change the hostname of the vSZ-D, please login to the CLI of the virtual dataplane and follow these commands. ruckus>enable ruckus#config ruckus(config)#admin ruckus(config-admin)#name <new-hostname>

You can use a CLI command to change the hostname of vSZ-D.

2017-01-18T11:50:42-0800 2017-01-18T12:00:18-0800 https://support.ruckuswireless.com/articles/000003441 2014-09-24T20:06:58-0700 monthly 0.8 admin,premium knowledge_article_1315 knowledge_article_1315 2014-09-24T20:06:58-0700 000003441 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector Difference between Smart redundancy and Limited ZD discovery option Smart redundancy is the feature where the changes done in primary ZD will automatically get updated to the secondary ZD. But in Limited ZD discovery, We have to do all the things manually on both primary and secondary ZDs. We should also configure the same exact settings for WLANs, WLAN groups, AP Groups, Mesh settings and AAA servers on the backup controller. Using Limited ZD Discovery for redundancy purposes does not synchronize the user database, guest database or DPSKs. Limited ZD discovery is purely a manual option when comparing to Smart redundancy. Limited ZD discovery configuration can be enabled as follows on the ZD GUI. Navigate to Configure ==> Access points ==> Access point policies. Enable the option Limited ZD discovery.

2014-09-24T20:06:58-0700 2017-01-17T13:57:53-0800 https://support.ruckuswireless.com/articles/000003784 2015-01-19T06:42:59-0800 monthly 0.8 admin,premium knowledge_article_1551 knowledge_article_1551 2015-01-19T06:42:59-0800 000003784 Validated (External) Premium Virtual smartcell gateway Firmware Firmware, virtual SmartCell Gateway SCG image file can only be used to upgrade SCG and cannot be used to upgrade vSCG.

This article has information about the image file that should be used to upgrade vSCG.

2015-01-19T06:42:59-0800 2017-01-13T02:35:23-0800 https://support.ruckuswireless.com/articles/000003474 2014-10-02T12:51:53-0700 monthly 0.8 admin,premium knowledge_article_1324 knowledge_article_1324 2014-10-02T12:51:53-0700 000003474 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell ap Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP Is there an AP command to show the configuration on the AP? <div id="cke_pastebin" style="width: 1px; height: 1px;"> </div> SSH to the AP with putty, capturing session output, and issue two commands. rkscli: support rkscli: support show

Remote access troubleshooting, can collect AP support info if SSH is working.

2014-10-02T12:51:53-0700 2017-01-12T08:11:23-0800 https://support.ruckuswireless.com/articles/000001341 2014-01-11T14:14:08-0800 monthly 0.8 admin,premium knowledge_article_6 knowledge_article_6 2012-12-14T04:54:42-0800 000001341 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Logging into Web UI Logging into Web UI wirelessly (for wired scroll down) Step 1: Click on the network icon on the bottom right of your screen <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIDh&feoid=00N50000002Cf3M&refid=0EM50000000LEdR"></img> Step 2: Click on the SSID of the AP you are trying to access <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIDh&feoid=00N50000002Cf3M&refid=0EM50000000LEdW"></img> Step 3: Enter IP Address of AP/ZD -> Default IP AP: 192.168.0.1 -> Default IP ZD: 192.168.0.2 <img alt="User-added image" height="308" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIDh&feoid=00N50000002Cf3M&refid=0EM50000000LEdb" width="500"></img> Step 4: After clicking enter you will see a page like this, click continue to the site <img alt="User-added image" height="321" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIDh&feoid=00N50000002Cf3M&refid=0EM50000000LEdg" width="500"></img> Step 5: Log in with your credentials. The default for a standalone AP is super/sp-admin, for an AP that is managed by a zone director the default credentials are admin/admin as well as a zone director <img alt="User-added image" height="214" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIDh&feoid=00N50000002Cf3M&refid=0EM50000000LEdl" width="500"></img> That's all for wireless Logging into the Web UI through a wired connection Step 1: Connect an ethernet cable from your computer to the AP/Zone Director. Step 2: Right click on the network icon on the bottom right of your screen and click on open network and sharing center <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIDh&feoid=00N50000002Cf3M&refid=0EM50000000LEdq"></img> Step 3: Right click on Local Area Network and click on Change Adapter Settings on the left side <img alt="User-added image" height="312" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIDh&feoid=00N50000002Cf3M&refid=0EM50000000LEdv" width="500"></img> Step 4: Right click on Local Area Network and click on Properties <img alt="User-added image" height="259" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIDh&feoid=00N50000002Cf3M&refid=0EM50000000LEe0" width="500"></img> Step 5: Click on Internet Protocol Version 4 (TCP/IPv4) Choose an IP address where the first three octets match the first three octets of the default IP address of the AP/Zone Director and choose a third octet that is in between 2 and 254 inclusive. Click OK, then you should be able to log into the web UI of the AP by browsing to its IP address. <img alt="User-added image" height="278" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIDh&feoid=00N50000002Cf3M&refid=0EM50000000LEe5" width="500"></img> Step 6: Log in with your credentials. The default for a standalone AP is super/sp-admin, for an AP that is managed by a zone director the default credentials are admin/admin as well as for a zone director. <img alt="User-added image" height="214" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIDh&feoid=00N50000002Cf3M&refid=0EM50000000LEeA" width="500"></img>

This document tells you how to log into the Web UI of your Ruckus device whether you're connecting wirelessly or through a wire.

2014-01-11T14:14:08-0800 2017-01-11T16:00:26-0800 https://support.ruckuswireless.com/articles/000006013 2016-08-26T12:26:15-0700 monthly 0.8 admin,premium knowledge_article_2415 knowledge_article_2415 2016-08-26T12:26:15-0700 000006013 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Installation;System network management Configuration, Installation, System Network Management, Unleashed How to connect a new Unleashed AP to Master if there is no DHCP in the network. There are two ways to connect an Unleashed AP to Master AP if there is no DHCP in the network. 1-> Do the initial configurations to the new AP through the web interface after you set the new ip-addresses to the AP, it will find the master controller which will be in same subnet and join the master network even though the settings are set by default. 2-> CLI into AP and run basic commands to set the new ip-address in the same subnet as that of master. set ipaddr wan <IP> <subnet> <gw> Eg:- set ipaddr wan x.x.x.x y.y.y.y z.z.z.z Wherex.x.x.x-> IP of the AP y.y.y.y-> Subnet z.z.z.z-> Gateway Once after that Unleashed AP will find the master which is in same subnet and joins controller.

2016-08-26T12:26:15-0700 2017-01-11T02:34:42-0800 https://support.ruckuswireless.com/articles/000006201 2017-01-09T15:55:12-0800 monthly 0.8 admin,premium knowledge_article_2562 knowledge_article_2562 2017-01-09T15:55:12-0800 000006201 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Security;Troubleshooting Configuration, Firmware, Security, Troubleshooting, SmartCell Gateway Why AP cannot establish tunnel after upgrading AP zone to 3.2.1 Enable TCP port 23233 in AP to Data Plane network firewall - Tunnel and WLAN's now enabled: rkscli: get tunnelmgr ------ TUNNELMGR Information ------ tunnelmgr Service: Enabled Tunnel Establishment: Enabled Tunnel Authentication: Enabled Tunnel Cipher: Disabled PMTU Discovery: Enabled Node Affinity: Disabled Tunnel Type: Ruckus-GRE SCG-D IP List: =1@[71.46.61.69]:23233,[71.46.61.74]:23233,[71.46.61.72]:23233,[71.46.61.70]:23233,[71.46.61.75]:23233,[71.46.61.68]:23233,[71.46.61.73]:23233 GRE over UDP: AP/SCG-D UDP port # 23233/23233 Keep Alive Interval/Retry-limit: 10/6 Keep Alive Interval2: N/A Keep Alive Count: N/A Force Primary Interval: N/A ------- Run Time Status (Debug) ------- Current tunnel ID: 2914 Current failover mode: 0 Current connected SCG-D: [71.46.61.73]:23233 Current Session UpTime: 1 min 20 secs Current Keep Alive retry:0 sent:8 lost: 1 Number of tunnel (re)establishment: 2 Reason on last re-establishment: fail to authenticate Ping default gateway from last disconnection: PING 97.106.252.1 (97.106.252.1): 56 data bytes 64 bytes from 97.106.252.1: seq=0 ttl=255 time=7.665 ms 64 bytes from 97.106.252.1: seq=1 ttl=255 time=8.661 ms --- 97.106.252.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 7.665/8.163/8.661 ms ------ Logging parameters ------ Log Console: Disable Log Level: 3 ----------- gre1 status ----------- gre1: RX packets 728 errors:0 dropped:0 gre1: TX packets 755 errors:0 dropped:0 gre1: RX idle time: 47.234819 seconds OK rkscli: get wlanlist name status type wlanID radioID bssid ssid -------------------------------------------------------------------------------------------------- wlan0 up AP wlan0 0 f0:b0:52:19:1d:a8 WiFi Core Orlando Test wlan1 down AP wlan1 0 00:00:00:00:00:00 QA - BHN TEST wlan2 down AP wlan2 0 00:00:00:00:00:00 BHN Secure wlan3 down AP wlan3 0 00:00:00:00:00:00 Wireless4 wlan4 down AP wlan4 0 00:00:00:00:00:00 Wireless5 wlan5 down AP wlan5 0 00:00:00:00:00:00 Wireless6 wlan6 down AP wlan6 0 00:00:00:00:00:00 Wireless7 wlan7 down AP wlan7 0 00:00:00:00:00:00 Wireless8 wlan8 down AP wlan8 0 00:00:00:00:00:00 Wireless9 wlan9 down AP wlan9 0 00:00:00:00:00:00 Wireless10 wlan10 down AP wlan10 0 00:00:00:00:00:00 Wireless11 wlan11 down AP wlan11 0 00:00:00:00:00:00 Wireless12 wlan12 down AP wlan12 0 00:00:00:00:00:00 Wireless13 wlan13 down AP wlan13 0 00:00:00:00:00:00 Wireless14 wlan14 down AP wlan14 0 00:00:00:00:00:00 Wireless15 wlan15 down AP wlan15 0 00:00:00:00:00:00 Wireless16 wlan16 down AP wlan16 0 00:00:00:00:00:00 wlan17 down AP wlan17 0 00:00:00:00:00:00 wlan18 down AP wlan18 0 00:00:00:00:00:00 wlan19 down AP wlan19 0 00:00:00:00:00:00 wlan20 down AP wlan20 0 00:00:00:00:00:00 wlan21 down AP wlan21 0 00:00:00:00:00:00 wlan22 down AP wlan22 0 00:00:00:00:00:00 wlan23 down AP wlan23 0 00:00:00:00:00:00 wlan24 down AP wlan24 0 00:00:00:00:00:00 wlan25 down AP wlan25 0 00:00:00:00:00:00 wlan26 down AP wlan26 0 00:00:00:00:00:00 wlan100 down MON wlan100 0 00:00:00:00:00:00 recovery-ssid down AP wlan102 0 00:00:00:00:00:00 island-191DA0 wlan32 up AP wlan32 1 f0:b0:52:19:1d:ac WiFi Core Orlando Test wlan33 down AP wlan33 1 00:00:00:00:00:00 QA - BHN TEST wlan34 down AP wlan34 1 00:00:00:00:00:00 CableWiFi wlan35 down AP wlan35 1 00:00:00:00:00:00 Wireless12 wlan36 down AP wlan36 1 00:00:00:00:00:00 Wireless13 wlan37 down AP wlan37 1 00:00:00:00:00:00 Wireless14 wlan38 down AP wlan38 1 00:00:00:00:00:00 Wireless15 wlan39 down AP wlan39 1 00:00:00:00:00:00 Wireless16 wlan40 down AP wlan40 1 00:00:00:00:00:00 wlan41 down AP wlan41 1 00:00:00:00:00:00 wlan42 down AP wlan42 1 00:00:00:00:00:00 wlan43 down AP wlan43 1 00:00:00:00:00:00 wlan44 down AP wlan44 1 00:00:00:00:00:00 wlan45 down AP wlan45 1 00:00:00:00:00:00 wlan46 down AP wlan46 1 00:00:00:00:00:00 wlan47 down AP wlan47 1 00:00:00:00:00:00 OK

Prior to 3.2.1 Ruckus GRE tunnel uses UDP port 23233. In 3.2.1 TCP is now used

2017-01-09T15:55:12-0800 2017-01-09T18:00:18-0800 https://support.ruckuswireless.com/articles/000001491 2016-08-05T09:45:26-0700 monthly 0.8 admin,premium knowledge_article_2236 knowledge_article_2236 2013-01-22T13:18:16-0800 000001491 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor How can I manually configure Mesh on New AP without connecting to the ZD ? This procedure would help when you have Mesh configured on the ZD and are adding new APs to the network. This would avoid connecting the AP to network and the ZD to push the Mesh configuration. Note: It may not be necessary but is recommended to upgrade the AP to the ZD compatible version in advance. <h2 class="p2">Step 1:</h2> Get the details of your mesh configuration from ZD. Go to Configure > Mesh under Mesh settings Make a note of the Mesh Name and Mesh Paraphrase (Mesh is already enabled in ZD) <img alt="User-added image" height="140" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000004z30&feoid=00N50000002Cf3M&refid=0EM50000000LMnP" width="500"></img> As per above screen shot below are the details of my ZD: Mesh Name : Mesh-461108000070 Mesh Paraphrase : 6CKv K65Gy5xluVUSXgqlikwbdSBlg2HDLm4bcttwOVzaeg9zVyovcF90NBT4Kp * Note: These details are from an example ZD so they will vary/differ from ZD to ZD. <h2 class="p2">Step 2</h2> SSH into the AP using its IP address (192.168.0.1 default) <h2 class="p2">Step 3:</h2> Execute the commands: <pre class="p1"> > set meshprov ssid “<Mesh Name>” > set meshcfg ssid “<Mesh Name>” > set meshcfg passphrase “<Mesh Paraphrase>” > set mesh auto > set director ip <ZD_IP address> > reboot</pre> The AP will reboot, should mesh with an adjacent AP, and join the ZD. Below are sample screen shots for reference: AP Screen shot <img alt="User-added image" height="199" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000004z30&feoid=00N50000002Cf3M&refid=0EM50000000LMnU" width="500"></img> ZD Screen shots : Before Executing the command <img alt="User-added image" height="60" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000004z30&feoid=00N50000002Cf3M&refid=0EM50000000LMnZ" width="500"></img> After executing the command <img alt="User-added image" height="56" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000004z30&feoid=00N50000002Cf3M&refid=0EM50000000LMne" width="500"></img>

You can manually configure the ZD's network Mesh-SSID on a New / Factory Defaulted AP.

2016-08-05T09:45:26-0700 2017-01-04T22:09:18-0800 https://support.ruckuswireless.com/articles/000004742 2015-06-19T07:40:15-0700 monthly 0.8 admin,premium knowledge_article_1960 knowledge_article_1960 2015-06-19T07:40:15-0700 000004742 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Known issues and workarounds Known Issues and Workarounds, SZ100 How to enable Management Access Control List option on SZ-100. SZ-100 with Management Access Control feature is supported from ?3.2.0.0.709 Firmware version.

How to enable Management Access Control List option on SZ-100.

2015-06-19T07:40:15-0700 2017-01-03T10:15:53-0800 https://support.ruckuswireless.com/articles/000004499 2015-06-04T04:11:42-0700 monthly 0.8 admin,premium knowledge_article_1921 knowledge_article_1921 2015-05-05T05:33:22-0700 000004499 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Troubleshooting Troubleshooting, SmartCell Gateway, SmartCell AP Why will my AP running an old SCG firmware version not connect to my SCG? To disable AP certificate checking, perform the following on each SCG node within the cluster: <ol><li>Login to the SCG-200's CLI, by initiating an SSH connection with the device's management IP. </li><li>Enter enabled mode by issuing the "enable" command</li><li>Enter the config mode, by issuing the "config" command</li><li>Disable AP certificate checking by issuing the "no ap-cert-check" command</li></ol> After this, the AP will be able to connect to the SCG and be managed by the SCG. Once the APs have been successfully upgraded, it is advisable to enable the certificate checking once again: <ol style=""><li>Login to the SCG-200's CLI, by initiating an SSH connection with the device's management IP. </li><li>Enter enabled mode by issuing the "enable" command</li><li>Enter the config mode, by issuing the "config" command</li><li>Enable AP certificate checking by issuing the "ap-cert-check" command</li></ol>

An AP running old SCG code (for example, 1.1.1.x), will not connect to an SCG running one of the latest firmware builds with the AP certificate checking enabled (default configuration).

2015-06-04T04:11:42-0700 2016-12-30T16:34:54-0800 https://support.ruckuswireless.com/articles/000006169 2016-12-20T14:39:19-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_2561 knowledge_article_2561 2016-11-29T15:35:24-0800 000006169 Validated (External) Public Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Firmware;Installation;Troubleshooting;Known issues and workarounds Firmware, Installation, Troubleshooting, Known Issues and Workarounds, virtual SmartCell Gateway, SZ100 Why do my R510 disconnect all at once and have to reboot to reconnect them back? Our Engineering team has detected the multicast IPv6 packet. Engineering is working on a fix for this issue through ER-4685.

All R510 disconnect at the same time from SZ100 randomly. The issue happened originally happened once a week then almost only a daily basis. Sometimes twice a week.

2016-12-20T14:39:19-0800 2016-12-20T18:00:19-0800 https://support.ruckuswireless.com/articles/000006196 2016-12-16T13:42:44-0800 monthly 0.8 admin,premium knowledge_article_2560 knowledge_article_2560 2016-12-16T13:42:44-0800 000006196 Validated (External) Premium Zoneflex indoor Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, ZoneFlex Indoor Does it matter if C110 AP is mounted Vertical or Horizontal? <span style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255); float: none;">The C110 802.11ac Wave 2 with DOCSIS 3.0 backhaul wall plate AP for hospitality has one vertical and one horizontal antenna to support dual-polarization beamflex,<span style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255); float: none;"> both antennas are dual-band and embedded on the PCB. Using a passive cooling design, the C110 must be deployed in a Vertical only orientation.<br style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255); float: none;">The antenna system supports PD-MRC, Polarization Diversity Multi Ratio Combining. This permits the antenna to mix<br style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255); float: none;">signals between both polarization to tune the the angle of the transmitters signal, but at the loss of performance by using<br style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255); float: none;">antenna data multiplexing (antennas can either send the same signal on each to tune the direction and improve gain, or send<br style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255); float: none;">different pieces of data on each to increase throughput, PD-MRC uses the same signal on each to improve coverage). <br style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255);"> <br style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255); float: none;">This operation is automatic based on statistical analysis of antenna patterns and successful transmission rates which is<br style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255); float: none;">part of the Ruckus/Brocade adaptive dynamic antenna array unique feature.<br style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255);"> <span style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255); float: none;">Remember<span style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255); float: none;"> - this AP was designed to cover one Hotel Room and is not optimized for distance, but may well cover multiple rooms depending<span style="color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; text-align: left; white-space: normal; background-color: rgb(255, 255, 255); float: none;"> on construction and placement.

The C110 model AP employees passive cooling, and is designed to ONLY be mounted vertically.

2016-12-16T13:42:44-0800 2016-12-16T18:00:22-0800 https://support.ruckuswireless.com/articles/000003808 2016-12-15T12:23:50-0800 monthly 0.8 admin,premium knowledge_article_2558 knowledge_article_2558 2014-12-21T22:55:13-0800 000003808 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector, ZoneFlex Indoor Why Cisco Switch WS -C3560-48PS was unable to power up more than 22 ruckus AP's. By using the power inline consumption wattage global configuration command, you can override the default power requirement specified by the IEEE classification. The difference between what is mandated by the IEEE classification and what is actually needed by the device is reclaimed into the global power budget for use by additional devices. You can then extend the switch power budget and use it more effectively. Note: You should carefully plan your switch power budget and make certain not to oversubscribe the power supply. When you manually configure the power budget, you must also consider the power loss over the cable between the switch and the powered device. Once after proper Power Budget, all 48 AP's got powered up and started working normally.

Cisco WS -C3560-48 PoE Switch by default provides 370W poe power , now it is unable to power up morethan 22 7372 & 7055 APs

2016-12-15T12:23:50-0800 2016-12-15T18:00:53-0800 https://support.ruckuswireless.com/articles/000004658 2016-12-15T12:25:27-0800 monthly 0.8 admin,premium knowledge_article_2557 knowledge_article_2557 2015-06-09T05:24:29-0700 000004658 Validated (External) Premium Smartcell ap SmartCell AP After upgrading to SCG version 3.0 Client devices are continuoulsy getting disconnected when connected to locally bridged SSID's Ensure no looping exists in network.

AP disconnect clients after learning the client mac address from the wire. When Client device Roams to an AP it sends a l2uf (Layer 2 update Frame) packets with the client MAC address. If this packet is bridged back to the originating AP then the client is immediately disassociated with the error message STA-DISASSOC-REASON-hint-domlme. Issue only occurs with locally bridged WLAN's

2016-12-15T12:25:27-0800 2016-12-15T18:00:52-0800 https://support.ruckuswireless.com/articles/000004458 2016-12-15T12:30:10-0800 monthly 0.8 admin,premium knowledge_article_2556 knowledge_article_2556 2015-04-29T08:16:07-0700 000004458 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway What are the commands to set the channels used for on an vSCG controlled AP

How to manually blacklist or whitelist the channels used by an AP zone controlled by a vSCG

2016-12-15T12:30:10-0800 2016-12-15T18:00:51-0800 https://support.ruckuswireless.com/articles/000003396 2016-12-15T12:38:05-0800 monthly 0.8 admin,premium knowledge_article_2551 knowledge_article_2551 2014-09-15T02:23:52-0700 000003396 Validated (External) Premium Flexmaster;FlexMaster Performance;System network management Performance, System Network Management, FlexMaster Why is FM reporting higher total client association_activity in FM graph

After upgrade to FM 9.8.0. the client activity_ association graph shows a different number than the currently associated clients number , and is higher after upgrading.

2016-12-15T12:38:05-0800 2016-12-15T18:00:46-0800 https://support.ruckuswireless.com/articles/000003744 2016-12-15T12:49:56-0800 monthly 0.8 admin,premium knowledge_article_2549 knowledge_article_2549 2014-12-08T01:06:09-0800 000003744 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway Firmware;Installation Firmware, Installation, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway Is R500 Supported in vSCG. 2.5.0.1.174

Is R500 Supported in vSCG. 2.5.0.1.174

2016-12-15T12:49:56-0800 2016-12-15T18:00:44-0800 https://support.ruckuswireless.com/articles/000001621 2016-12-15T12:54:03-0800 monthly 0.8 admin,premium knowledge_article_2546 knowledge_article_2546 2013-02-24T19:44:40-0800 000001621 Validated (External) Premium Zoneplanner;ZonePlanner Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZonePlanner Unable-to-view-new-AP-ZF7982-in-the-zone-planner This could be because of the current version of the Zone Planner.Upgrading Zone planner is the fix for this Issue.

2016-12-15T12:54:03-0800 2016-12-15T18:00:40-0800 https://support.ruckuswireless.com/articles/000004723 2016-12-15T13:04:15-0800 monthly 0.8 admin,premium knowledge_article_2543 knowledge_article_2543 2015-06-17T01:52:47-0700 000004723 Validated (External) Premium Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, virtual SmartCell Gateway, SZ100

When creating mulitple administator domains and assign the users as super admins, the Rogue APs and the users in those domains are visible to eachother. Why are the cross domain APs and Users seen by in the other Domains?

2016-12-15T13:04:15-0800 2016-12-15T18:00:37-0800 https://support.ruckuswireless.com/articles/000003483 2016-12-15T13:08:35-0800 monthly 0.8 admin,premium knowledge_article_2540 knowledge_article_2540 2014-10-07T11:16:20-0700 000003483 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) System network management System Network Management, SmartCell Gateway, SmartCell AP Does Ruckus Wireless provide SNMP MIBs for SCG/vSCG AP monitoring? <div id="cke_pastebin" style="width: 1px; height: 1px;"> </div> <a href="https://support.ruckuswireless.com/software/623-scg-2-5-1-ga-mibs-zip" target="_blank">A</a>P-specific MIBs are currently not provided on SCG/vSCG platforms. There are no events defined for an AP to send CPU/Memory usage to SCG, like in ZD.

Customers can load SCG SNMP MIBs on third party monitor applications.

2016-12-15T13:08:35-0800 2016-12-15T18:00:34-0800 https://support.ruckuswireless.com/articles/000001693 2016-12-15T13:40:03-0800 monthly 0.8 admin,premium knowledge_article_2535 knowledge_article_2535 2013-02-28T17:23:50-0800 000001693 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Query regarding Roles and group attributes on ZD. Issue : I have a problem because AAA Function see just the group directly attached to a user. If the user is member of an group which is member of another one group, the ZD does not see the second group attributes. Solution is as follows, When the specific user is member of multiple groups , In this case ZD will see the both of the groups. You can check this with Test Authentication settings under the AAA servers configuration on the ZD. Here when you say that the group is part of another one group, ZD will see only the first group. ZD will not see the second group.

2016-12-15T13:40:03-0800 2016-12-15T18:00:29-0800 https://support.ruckuswireless.com/articles/000004158 2016-12-15T13:48:38-0800 monthly 0.8 admin,premium knowledge_article_2531 knowledge_article_2531 2015-03-12T16:59:03-0700 000004158 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway What are the available list items from Bootstrap Protocol option 60/55 for vSCG client fingerprinting? Please refer to KBA-1668 “How does client fingerprinting work”…on how to read the Bootstrap Protocol option 60 and 55 using the attached file. 1. Search for the "list item from Option 55" that match from the attached file. 2. The matching list item will refer to an OS type from the attached file.

Summary of how the SCG does fingerprinting or what are the parameters/signatures of the clients that we use to identify the client displayed in the Monitor / Wireless Clients section.

2016-12-15T13:48:38-0800 2016-12-15T18:00:24-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PIJ9CAO?attachment_index=0 2016-12-15T18:00:24-0800 monthly admin,premium knowledge_article_2531 knowledge_article_2531_attachment_1 fingerprint-conf-file-herb 22159.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000004716 2016-12-15T14:00:40-0800 monthly 0.8 admin,premium knowledge_article_2528 knowledge_article_2528 2015-06-18T02:51:23-0700 000004716 Validated (External) Premium Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Security;System network management;Known issues and workarounds Security, System Network Management, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway How can I protect AP-assigned switch ports? One solution is to implement 802.1x on the ethernet ports, which will require the Ruckus AP to authenticate. This feature has been available since ZD version 9.2 <img alt="User-added image" height="382" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPbQ&feoid=00N50000002Cf3M&refid=0EM50000000Llxn" width="500"></img> The switch port must be configured for 802.1x as an authenticator and the Access Point uplink trunk port is configured as a 802.1x supplicant. The AP will send EAP authentication packets using it's MAC address as both username and password or permit configuration per AP with a text username and password. Note: This feature is only available if MESH is disabled. <img alt="User-added image" height="141" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPbQ&feoid=00N50000002Cf3M&refid=0EM50000000Llxs" width="500"></img> This requires a RADIUS server be available to authenticate the APs. Other devices connecting to that port will be blocked if the switch port is configured only to accept authenticated users. This feature is also available in SCG version 2.x and above; <img alt="User-added image" height="314" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPbQ&feoid=00N50000002Cf3M&refid=0EM50000000Llxx" width="500"></img> When configured a MAC based authentication any client connected to the ethernet ports will also require authentication against the RADIUS authentication server. When the port is configured as an access port, you can also configure the AP ethernet port as an Authenticator - it will then authenticate wired clients connecting to the ethernet port. <img alt="User-added image" height="388" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPbQ&feoid=00N50000002Cf3M&refid=0EM50000000Lly2" width="500"></img> Authentication options available per ethernet port type include: <img alt="User-added image" height="209" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPbQ&feoid=00N50000002Cf3M&refid=0EM50000000Lly7" width="500"></img> <div style="margin-left: .25in; text-align: left;">§AP Ethernet port as supplicant</div> <div style="margin-left: .5in; text-align: left;">§Authenticate itself to an upstream authenticator port. </div> <div style="margin-left: .25in; text-align: left;">§AP Ethernet port as authenticator</div> <div style="margin-left: .5in; text-align: left;">§Port-based mode </div> <div style="margin-left: .75in; text-align: left;">§Only a single MAC host must be authenticated, as the port will be open for all MAC hosts.</div> <div style="margin-left: .5in; text-align: left;">§MAC-based mode</div> <div style="margin-left: .75in; text-align: left;">§Each MAC host is individually authenticated </div> <div style="margin-left: .5in; text-align: left;">§MAC authentication bypass</div> <div style="margin-left: .75in; text-align: left;">§Query the AAA using the MAC as both username / password or configurable per AP</div> <div style="margin-left: .25in; text-align: left;">§Authenticator</div> <div style="margin-left: .5in; text-align: left;">§Port-based mode</div> <div style="margin-left: .75in; text-align: left;">§Supported on any ports</div> <div style="margin-left: .5in; text-align: left;">§MAC-based mode</div> <div style="margin-left: .75in; text-align: left;">§Only supported on access port</div> <div style="margin-left: .75in; text-align: left;">§Max #(MAC) hosts concurrently are 16. The aging time is 5 minutes.</div> <div style="margin-left: .25in; text-align: left;">§Supplicant</div> <div style="margin-left: .5in; text-align: left;">§Only supported on the trunk port Monitoring Connected Wired Clients in the Zone Director monitor Wired Clients you can see a list of wired devices authenticated to Access Points with this feature enabled and events associated with these devices. <img alt="User-added image" height="186" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPbQ&feoid=00N50000002Cf3M&refid=0EM50000000LlyC" width="500"></img></div>

This article explains security mechanisms which may be implemented to prevent ethernet ports assigned to access points being used by other devices.

2016-12-15T14:00:40-0800 2016-12-15T18:00:21-0800 https://support.ruckuswireless.com/articles/000006194 2016-12-15T10:51:08-0800 monthly 0.8 admin,premium knowledge_article_2522 knowledge_article_2522 2016-12-15T10:50:42-0800 000006194 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Firmware;Troubleshooting;Known issues and workarounds Configuration, Firmware, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway, SZ100 How to create an isolation whitelist via AP CLI script and reboot persistent? Create a .txt file then upload to vSZ. Example script: #define Zone's AP FW version fw_version=3.4.1.0.330 -> Enter the correct FW version of the Zone #define AP Model class, only all is supported now. model=all -> you many leave this to support all types of AP #CLI commands set manual-whitelist wlan0 add 10.18.0.61 0c:c4:7a:c1:fd:fd 1 set manual-whitelist wlan32 add 10.18.0.61 0c:c4:7a:c1:fd:fd 1 <img alt="User-added image" height="245" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000LjAk&feoid=00N50000002Cf3M&refid=0EM50000000ak8I" style="width: 793px; height: 404px;" width="500"></img> To validate the whitelist use the get command from the AP. get manual-whitelist wlan2 wlan2 Client Isolation Mode : Enabled on wlan2 00:0a:f7:0e:78:c0 172.18.139.3 list:1 00:0a:f7:0e:78:c1 172.18.139.3 list:2

The purpose for the whitelist is to ensure some devices do not get isolated from clients in a zone where client isolation is applied.

2016-12-15T10:51:08-0800 2016-12-15T12:00:25-0800 https://support.ruckuswireless.com/articles/000003754 2016-12-15T11:59:26-0800 monthly 0.8 admin,premium knowledge_article_2520 knowledge_article_2520 2014-12-05T08:19:23-0800 000003754 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Firmware;Installation;Known issues and workarounds Configuration, Firmware, Installation, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Why AP shows that it cannot provide wireless access? Yes, we cannot configure Wireless (like SSIDs,..) on standalone Access Points post 9.8.2 version. APs previously connected to ZD on later version, or SCG/SZ-100/vSZ, should be upgraded/downgraded to AP base image 100.x versions to configure it in the standalone mode. The below warning message is seen on the AP, when the APs firmware is above 9.8.2 version and under Configuration tab, there will be no 'Radio 2.4Ghz or Radio 5Ghz options" to configure SSIDs. <img alt="User-added image" height="481" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008v4a&feoid=00N50000002Cf3M&refid=0EM50000000LpWj" width="500"></img> Note : We can upgrade the APs to the base image files (100.x) without any issues.

This article provides information on why an AP shows a warning message that it cannot provide wireless access. No support for APs from ZD 9.9 or SZ 3.1 put into standalone mode, they must load 100.x base image firmware.

2016-12-15T11:59:26-0800 2016-12-15T12:00:22-0800 https://support.ruckuswireless.com/articles/000004934 2016-12-12T10:14:35-0800 monthly 0.8 admin,premium knowledge_article_2513 knowledge_article_2513 2015-08-10T11:30:16-0700 000004934 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Installation;System network management Configuration, Installation, System Network Management, SmartCell Gateway, virtual SmartCell Gateway, SZ100 How can I configure an admin user thru the CLI to logon to the SCG / SZ-100 / vSZ Create Users thru the CLI for AAA logon to the SCG/SZ-100/vSZ controller, in an Admin Domain Role, that RADIUS provides with admin rights. The steps below will create a user thru the cli to login to the scg : <div style="margin-left: 40px;">1. First create a user: </div> <div style="margin-left: 80px;">login as: admin ################################ # Welcome to vSZ # ################################ <a href="mailto:admin@192.168.1.49's" target="_blank">admin@192.168.1.49's</a> password: Please wait. CLI initializing... Welcome to the Ruckus Virtual SmartZone - High Scale Command Line Interface Version: 3.1.1.0.442 vsand1> en Password: ********* vsand1# config</div> <div style="margin-left: 80px;">vsand1(config)# admin test2 vsand1(config-admin)# password Password: ********* Retype: ********* vsand1(config-admin)# end Do you want to save this context configuration (or input 'no' to cancel)? [yes/no] yes </div> <div style="margin-left: 40px;">2. Then assign the user to the Super admin role </div> <div style="margin-left: 80px;">vsand1# config vsand1#(config)# domain "Administration Domain" vsand1(config-domain)# admin test2 "Super Admin" vsand1(config-domain)# end Do you want to update this context configuration (or input 'no' to cancel)? [yes/no] yes </div> <div style="margin-left: 40px;">3. Configure user account on your radius server. </div> "swifty" Cleartext-Password := "swifty" Ruckus-User-Groups := test2 <div style="margin-left: 40px;">4. Configure the administrator radius server</div> <div style="margin-left: 80px;">Sand# config Sand(config)# admin-radius testradius Sand(config-admin-radius)# ip 192.168.1.53 Sand(config-admin-radius)# shared-secret Password: ********** Retype: ********** Sand(config-admin-radius)# type radius Sand(config-admin-radius)# realm mikeswift.net </div> <div style="margin-left: 80px;">Do you want to continue to configure in this context (or input 'no' to cancel)? [yes/no] yes</div> <div> 5. Then login with the admin FQDN full realm Name: <a href="mailto:swifty@mikeswift.net" target="_blank">swifty@mikeswift.net</a> </div>

This article describes how to configure an admin user thru the CLI to logon to the SCG / SZ-100 / vSZ controllers via RADIUS rather than Local DB.

2016-12-12T10:14:35-0800 2016-12-12T12:00:18-0800 https://support.ruckuswireless.com/articles/000006182 2016-12-07T11:42:02-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_2510 knowledge_article_2510 2016-12-07T11:42:02-0800 000006182 Validated (External) Public Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, SmartCell Gateway How can I tell from the support info if the mesh AP uplink is set for auto or for manual uplink? In the support info file, do a search for Supplicant Status. When the mesh AP is set for Auto, you will see the following: Interfaces: AP: wlan62 at ifindex:11. Station: wlan63 at ifindex:10. Supplicant Status: bssid=e0:10:7f:93:25:77 ssid=Mesh-181408000034 id=0 pairwise_cipher=CCMP group_cipher=CCMP key_mgmt=WPA2-PSK wpa_state=COMPLETED ip_address=0.0.0.0 When the mesh AP is set to Manual with an specific Root to connect to: Interfaces: AP: wlan62 at ifindex:11. Station: wlan63 at ifindex:10. Supplicant Status: bssid=e0:10:7f:93:13:b7 ssid=Mesh-181408000034 id=0 pairwise_cipher=CCMP group_cipher=CCMP key_mgmt=WPA2-PSK wpa_state=COMPLETED8550 ip_address=0.0.0.0 mesh acl ignore=0 e0:10:7f:13:13:b0 Where mesh_acl_ignore=0 means that it's set to manual and the mac address(es) below are the uplink APs designated for this AP only to connect to. Mesh manual mode is set at the Configure / AP, select the AP, go to the Advanced Section, select manual and select the uplink selected APs: <img alt="User-added image" height="486" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Lj8Z&feoid=00N50000002Cf3M&refid=0EM50000000aVFY" width="423"></img>

Mesh AP configuration, it's unknown whether it's manual or auto for uplink configuration

2016-12-07T11:42:02-0800 2016-12-07T12:00:23-0800 https://support.ruckuswireless.com/articles/000001182 2014-01-11T14:15:36-0800 monthly 0.8 admin,premium knowledge_article_40 knowledge_article_40 2012-03-21T12:00:40-0700 000001182 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Mediaflex;Flexmaster;Zoneplanner;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;MediaFlex 2501;MediaFlex 2900;MediaFlex 2811;MediaFlex 5811;MediaFlex 7811;MediaFlex 7211;FlexMaster;ZonePlanner Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, MediaFlex, FlexMaster, ZonePlanner What does the signal strength RSSI measurment represent RSSI is ruckus is not truly rssi (receive signal indicator) but an arbitrary value generated by the Atheros chip set . It represents a value above the noise floor and is most closely a representation of SNR (but not truly SNR since noise floor used is also a setting and not a measurement. Noise floor is a setting negotiated by the Ruckus operating system and the Atheros radio chipset and is raised whenever the radio can not send out beacons. The minimum SNR needed to achieve a data rate depends on the modulation technique. The following is a diagram and an indication of the data rates. Full speed 64QAM requires 22dB SNR (RSSI). This is why we message clients with less than RSSI of 20dB. For Mesh links we suggest 25dB RSSI. <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIJH&feoid=00N50000002Cf3M&refid=0EM50000000L9FH"></img> <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIJH&feoid=00N50000002Cf3M&refid=0EM50000000L9FM"></img> <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIJH&feoid=00N50000002Cf3M&refid=0EM50000000L9FR"></img>

Description of signal strength displayed and measured by the Ruckus Zone Flex system

2014-01-11T14:15:36-0800 2016-12-05T02:51:59-0800 https://support.ruckuswireless.com/articles/000004803 2015-07-01T05:10:21-0700 monthly 0.8 admin,premium knowledge_article_1986 knowledge_article_1986 2015-07-01T05:10:21-0700 000004803 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Troubleshooting Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway, SZ100 When and what will cause SmartZone APs to failover? The default AP heartbeat interval is 30 seconds which means for every 30 seconds the AP checks for controller reachability. Here is how the failover works: - If the AP can't get any response, it will retry again after 30 seconds. - If there is still no response (60 seconds past), it will try to reach the next node in the server list twice in-a-row. This is a case of multi-node setup in a cluster. - If none of the nodes in the server list respond, it will try to reach nodes in the failover list. If none of them respond, this cycle will repeat for two hours (OR whatever "AP Reboot Timeout" value configured under the zone configuration) before the AP reboots to repeat the above cycle.

This article explains failover process on SmartZone APs.

2015-07-01T05:10:21-0700 2016-12-01T11:36:07-0800 https://support.ruckuswireless.com/articles/000001434 2014-05-19T09:12:59-0700 monthly 0.8 admin,premium knowledge_article_1015 knowledge_article_1015 2013-01-18T09:01:22-0800 000001434 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector What is Auto Recovery option on ZoneDirector? We have seen that at times when AP looses connectivity and reboots to try to join the ZD, then all clients connected to that AP also loose connection. To avoid sudden-disruption, this feature has been brought from 9.5 and above. Reboot timeout of ZD managed Aps can be controlled from the GUI to control how long APs will remain operational after disconnection from ZD. Default – 30 minutes ; minimum 10 minutes & maximum 1440 minutes Login to ZD GUI :: Configure tab :: Access Points :: Access Points Policies :: Auto Recovery

Information regarding auto recovery option on ZoneDirector

2014-05-19T09:12:59-0700 2016-11-30T03:29:00-0800 https://support.ruckuswireless.com/articles/000006168 2016-11-28T14:23:13-0800 monthly 0.8 admin,premium knowledge_article_2504 knowledge_article_2504 2016-11-28T14:23:13-0800 000006168 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell ap Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP Customers ask what grade cable and length requirements are there for 802.3af or 802.3at PoE to Ruckus APs? There is a helpful POE Line Loss calculator online at this URL link: <a href="http://beyond-wifi.com/poe/poe-calc.html" target="_blank">http://beyond-wifi.com/poe/poe-calc.html</a>

Customers ask what grade cable and length requirements are there for 802.3af or 802.3at PoE to Ruckus APs.

2016-11-28T14:23:13-0800 2016-11-28T18:00:14-0800 https://support.ruckuswireless.com/articles/000005814 2016-11-17T14:19:38-0800 monthly 0.8 admin,premium knowledge_article_2473 knowledge_article_2473 2016-06-03T14:50:49-0700 000005814 Validated (External) Premium Smartcell ap;Sz100;SmartZone 100-D (SZ100-D) Performance;Configuration;Known issues and workarounds Performance, Configuration, Known Issues and Workarounds, SmartCell AP, SZ100 How does an SZ100 Cluster work with regard to AP Load Balancing, Client Data Tunneling, and maximum throughput? Q1: The SZ100 supports an active:active cluster, and the APs are load-balanced on each one of the cluster nodes using some sort of round-robin mechanism as they join the cluster right? A1: Yes, round-robin AP-to-controller distribution on the control plane. We don’t necessarily maintain a perfect load distribution, but law of averages should keep load fairly well spread. In the case of a controller failure, the APs will failover to other controllers. If the original controller comes back online, they do not automatically “fail back,” so we have a manual function to redistribute load. Q2: For the data-plane traffic coming from the APs, do we also use the same load-balancing mechanism so that the R-GRE tunnel of each AP is terminated on the same SZ104 node from where the AP is being managed from? A2: APs do not necessarily join the same controller for control and data planes. You could have AP1 on SZ2 control plane and SZ4 data plane. But, we do have a load distribution mechanism there as well. Q3: On a 1+1 SZ104 cluster scenario where we have 2 Gbps of dataplane throughput, and will this throughput increase in 1Gbps increments (up to 4 Gbps) as we increase the cluster size as we add more SZ104 and end up with a 3+1 active cluster? A3: Since all controllers are active, yes, you can scale up the aggregate data plane capacity by adding more nodes into the cluster. Your example is correct, if you were to use SZ104s. NOTE: Engineering mentioned that the SZ hands the IP list to the AP for control and data plane, but the IP list is given in random order. So use of the term “round-robin” is probably a little misleading. I think the “random” nature of the IP list will result in semi-balanced distribution (the law of averages), but we don’t have any specific intelligence to really “try” to make it ideally balanced. You can fix APs (by Zone) to one SZ using “AP Node Affinity”. Be careful, as this has some side effects. Over time you will see an imbalance on the number of APs on each of the SZ; e.g. after software upgrades, the SZ upgraded last will have 0 APs (because the APs have been failing over to the active node before). You can re-balance APs across the cluster by using the SZ100-Node1(config)# rebalance-aps CLI command. If just concerned about distributing load, consider using the latter one.

APs are assigned to Cluster Nodes in a round-robin fashion, data traffic is not 1:1 to AP controller, and you can increase cluster size to increase throughput.

2016-11-17T14:19:38-0800 2016-11-17T18:00:22-0800 https://support.ruckuswireless.com/articles/000004800 2016-11-17T14:22:00-0800 monthly 0.8 admin,premium knowledge_article_2472 knowledge_article_2472 2015-07-01T05:01:00-0700 000004800 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, SmartCell Gateway, virtual SmartCell Gateway, SZ100 How to I enable SNMP service on my SmartZone APs? By default SNMP service is disabled on the SmartZone APs. If you would like to enable this for monitoring, please follow this depending on the version used: - SZ 3.0/3.1: Please login to the AP's CLI and run the following command: set remote-mgmt snmp A "get remote-mgmt" command will prove that SNMP is enabled now. If you prefer to enable this at a zone level (for SCG-200 and vSZ-H) or on all managed APs (vSZ-E and SZ-100), you can use AP CLI script as outlined in the article at https://support.ruckuswireless.com/answers/000004057 - SZ 3.1.1/3.2.x: Please go to SZ CLI and run the following commands: SZ>en SZ#config SZ(config)#ap-snmp This will only enable SNMP service. In order to modify read/write communities, AP CLI script is still required.

This article explains the procedure to enable SNMP service on SmartZone controller managed APs

2016-11-17T14:22:00-0800 2016-11-17T18:00:21-0800 https://support.ruckuswireless.com/articles/000004591 2016-11-17T15:00:40-0800 monthly 0.8 admin,premium knowledge_article_2466 knowledge_article_2466 2015-05-21T09:14:29-0700 000004591 Validated (External) Premium Zoneplanner;ZonePlanner Installation Installation, ZonePlanner Why am I getting error when opening Zoneplanner or trying to generate a report? Fluke/AirMagnet report there may be issues with floor plan not being displayed when Visio Viewer 2013 is installed, prefer 2010 version. LInk to download Visio 2010 is here; <a href="https://www.microsoft.com/en-us/download/details.aspx?id=21701" target="_blank">https://www.microsoft.com/en-us/download/details.aspx?id=21701</a> For other report issues, please review the following troubleshooting steps from Fluke/AirMagnet. NOTE: This documentation was written for AirMagnet Survey, but the troubleshooting steps are basically the same for Ruckus Zone Planner. When Survey installs, not only is Surveyor.exe (AirMagnet Survey) installed but so is CR11Dist (Crystal Reports module). CR11Dist is completely independent of Survey meaning that although it is part of the Survey install package, it is a separate install within Windows itself. The diagram below is a flow diagram of how a report gets generated within AirMagnet Survey. This means that for Reports issues within AirMagnet Survey, there are four major points that can cause issues when Reports are not properly generated. 1. Crystal Reports (CR11Dist) a. Reinstalling Crystal Reports. Attempts to ensure that data is received and compiled properly. 2. AirMagnet Survey (Surveyor.exe) a. Reinstalling AirMagnet Survey. Attempts to correct the report generation requests and displaying of final reports 3. Windows (corporate/network security policies/firewalls) a. Removing corporate/network security policies/firewalls Allows for the proper communication between Surveyor.exe and CR11Dist 4. AirMagnet project itself a. Project data may be corrupted Does not affect all projects. Only a specific project is affected Validating that Zone Planner generates a report using the built-in Sample Project. 1. Run Zone Planner as admin. 2. Load Planner sample project (Help > Sample Projects > Planner). 3. Go to the Planner page and place one AP on the floor plan. 4. Process data. 5. Go to Display page and display the VirtualSurvey1.svd heat map. 6. Go to the Reports page. 7. Run the Planner Report. The Resolution most successful is to Re-Install Crystal Reports, outlined in Workaround section above.

Problems with ZonePlanner not displaying .vsd image or generating reports correctly, may be solved by re-installing Crystal Reports.

2016-11-17T15:00:40-0800 2016-11-17T18:00:14-0800 https://support.ruckuswireless.com/articles/000002946 2016-11-16T12:03:36-0800 monthly 0.8 admin,premium knowledge_article_2465 knowledge_article_2465 2014-04-28T03:43:03-0700 000002946 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector How ZD will assign role to a user Consider the below example. Use the least number of group attributes (one if possible) for the role lookup. The algorithm is a best match/first match – if more than one attribute is matched then the role that matches the MOST is chosen. If two roles match the same number of attributes then the first role that matches is chosen. Active Directory Configuration : User : Test Groups: Group-A, Group-B, Group-C, Group-D, Group-E Let us see how ZD will assign a Role to the User in different scenarios: Scenario 1: A user named " Test " is present in all the Groups(Group-A, Group-B, Group-C, Group-D) ZD configuration: Default Role: XXX Role 1 : Name : Role 1 Group Attribute : Group-A, Group-B, Group-C, Group-D, Group-E AAA servers test Result: <img alt="User-added image" height="83" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vc3&feoid=00N50000002Cf3M&refid=0EM50000000LTKy" width="500"></img> Note: In this scenario, user is not present in the 'Group-E' group and is mentioned in the Group Attributes field of the Roles Configuration on the ZD. As there is a mismatch of one group, ZD assigned the default Role to the user "Test". Scenario 2 : User called " Test " is present in all the Groups(Group-A, Group-B, Group-C, Group-D, Group-E) ZD configuration: Default Role: XXX Role 1 : Name : Role 1 Group Attribute : Group-A, Group-B, Group-C, Group-D, Group-E No configuration changes were made in the Roles. AAA servers test Result: <img alt="User-added image" height="78" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vc3&feoid=00N50000002Cf3M&refid=0EM50000000LTIs" width="500"></img> Note : In this scenario, the user is present in all the groups (Group-A, Group-B, Group-C, Group-D, Group-E) and the Group attributes fiels is also matching completely. So, the user is assigned with the "Role 1". Scenario 3 : User called " Test " is present in all the Groups(Group-A, Group-B, Group-C, Group-D, Group-E) ZD configuration: Default Role: XXX Role 1 : Name : Role 1 Group Attribute : Group-A, Group-B Role 2 : Name : Role 2 Group Attribute : Group-C, Group-D, Group-E AAA servers test Result: <img alt="User-added image" height="88" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vc3&feoid=00N50000002Cf3M&refid=0EM50000000LTIn" width="500"></img> Scenario 4 : User called " Test " is present in all the Groups(Group-A, Group-B, Group-C, Group-D, Group-E) ZD configuration: Default Role: XXX Role 1 : Name : Role 1 Group Attribute : Group-A, Group-B Role 2 : Name : Role 2 Group Attribute : Group-C, Group-D, Group-E, Group-F Please note Group-F is not there in the ZD AAA servers test Result: <img alt="User-added image" height="80" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vc3&feoid=00N50000002Cf3M&refid=0EM50000000LTKo" width="500"></img> Note : Even though in the "Role 2", four groups are matching and one is not matched. So, it skipped Role 2 and checked for the next possible match. " Role 1 " is configured with only two groups and user is present in both the groups so ZD assigned the "Role 1" to the user. Scenario 5 : User called " Test " is present in all the Groups(Group-A, Group-B, Group-C, Group-D, Group-E) ZD configuration: Default Role: XXX Role 1 : Name : Role 1 Group Attribute : Group-C, Group-D Role 2 : Name : Role 2 Group Attribute : Group-A, Group-B AAA servers test Result: <img alt="User-added image" height="80" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vc3&feoid=00N50000002Cf3M&refid=0EM50000000LTNx" width="500"></img> Note : In this scenario, we will get to know how ZD is working exactly. The AD user is returning all the groups in which it is present. Now, ZD looked at the Roles configured for the user groups. The first Role( Role 1) is configured with two right groups(Group-C, Group-D) in the group attribute field and the second Role is also configured with only two group attributes ( Group-A, Group-B) and it did not find any other roles configured. So, ZD assigned the First best matched Role i.e " Role 1 " to the user. As discussed in Scenario 3 if a new Role is configured with 3 matching groups in group attribute field, then ZD will assign that Role as it has maximum number of Groups matched.

Assigning Roles to the user

2016-11-16T12:03:36-0800 2016-11-16T18:00:31-0800 https://support.ruckuswireless.com/articles/000005135 2016-11-16T12:06:29-0800 monthly 0.8 admin,premium knowledge_article_2464 knowledge_article_2464 2015-09-25T02:41:12-0700 000005135 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) System network management;Troubleshooting System Network Management, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Why do I receive "no response" from the Smart Zone NBI? Possible reasons for this issue include: 1. A missing route on the Smart Zone controller to the calling host via its management interface. This needs to be present for the NBI to respond to the host. 2. The Smart Zone controller is a Linux based controller and, as such, the portal endpoint is CaSe SeNsItIvE. Ensure that the URI is entered in lower case: <a href="http://ip-scg:9080/Portalintf" style="color: rgb(0, 0, 0); font-size: 11.36px;" target="_blank">http://sz-management-ip:9080/Portalintf</a> will result in an error, as seen in the northbound logs: 09-19 02:50:41 [New I/O worker #86] NorthboundHandler:58 ERROR - Unknown uri: /Portalintf 09-19 02:50:42 [New I/O worker #87] NorthboundHandler:58 ERROR - Unknown uri: /Portalintf 09-19 03:09:18 [New I/O worker #88] NorthboundHandler:58 ERROR - Unknown uri: /Portalintf The correct call is, in fact, all in lower case: <a href="http://ip-scg:9080/Portalintf" style="color: rgb(0, 0, 0); font-size: 11.36px;" target="_blank">http://sz-management-ip:9080/portalintf</a>

This article explains possible reasons for no response being received for calls to the Smart Zone NBI interface.

2016-11-16T12:06:29-0800 2016-11-16T18:00:30-0800 https://support.ruckuswireless.com/articles/000002342 2016-11-16T12:16:33-0800 monthly 0.8 admin,premium knowledge_article_2463 knowledge_article_2463 2013-11-01T08:02:41-0700 000002342 Validated (External) Premium Flexmaster;FlexMaster Configuration;Troubleshooting Configuration, Troubleshooting, FlexMaster Why FlexMaster does not show AP managed by ZD in google map view Google Map view is an integrated feature in Flex master where each device could be geographically displayed on the map to provide network administrator physical presence of the device. When a Flex master monitor the zone director and its access points, it facilitates the google map view through the configuration of GPS co-ordinates. The GPS co ordinates are independent for each and every Access point monitored by the Flex master and are supposed to be configured on the zone director specifically on the AP. Configuration: On Flex Master : 1. Google Map View should be enabled. (Administer > System Settings > Google Map view settings> Click on Yes. 2. Need to Click " show AP" icon in google map view. On Zone director : GPS co ordinates should be configured specific to the AP. Web interface >>> Configuration >>> Access Points >>> Select the AP ( Edit ) >>> GPS coordinates ( Specify the latitude and longitude values).----> Click on OK. On Network: Flex master should be able to connect to google Maps Via Internet. On ZoneDirector: Only APs with GPS support can automatically calculate GPS coordinates, to be located on FM Google Maps view. These include R700, 7782, 7782-N, 7782-S, 7782-E on ZoneDirector, and 7781-CM and SC8800 on SCG.

Zone director is seen in google map view of FM but not the APs managed by the ZD

2016-11-16T12:16:33-0800 2016-11-16T18:00:29-0800 https://support.ruckuswireless.com/articles/000005189 2016-11-16T14:25:23-0800 monthly 0.8 admin,premium knowledge_article_2454 knowledge_article_2454 2015-10-19T16:55:14-0700 000005189 Validated (External) Premium All;Brocade Mobility 6511 Wallplate Access Point Security;Troubleshooting;Website issues Security, Troubleshooting, Website Issues, All Why I am getting "Server has a weak ephemeral Diffie-Hellman public key" while opening secured sites?

2016-11-16T14:25:23-0800 2016-11-16T18:00:19-0800 https://support.ruckuswireless.com/articles/000003776 2016-11-16T14:28:07-0800 monthly 0.8 admin,premium knowledge_article_2453 knowledge_article_2453 2014-12-22T12:02:18-0800 000003776 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector How to allow web administration access to a specific member of group using Auth server? - Check if any authentication server is created under AAA server. - If there is any created , then test the authentication server using the "test Authentication Settings" with a username and password against the actual server created already. - If the test is success, then create a Role with the specific 'group name' which is required to be allowed to log into web UI as a administrator. - Choose the proper administration rights for the specific group under that Role. - Now choose the appropriate Auth server under the Administrator and hit apply.

I want to change how administrators are authenticated on the Ruckus for web administrators

2016-11-16T14:28:07-0800 2016-11-16T18:00:18-0800 https://support.ruckuswireless.com/articles/000002428 2016-11-16T14:51:25-0800 monthly 0.8 admin,premium knowledge_article_2450 knowledge_article_2450 2013-12-26T16:18:01-0800 000002428 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector Authentication by certificates <div> Login to the windows server and follow the below configuration steps: </div> <ul><li> Right click Network Policies and select New.</li><li> On Specify Network Policy Name and Connection Type enter a Policy name: and click Next.</li><li> On Specify Conditions click Add.</li><li> Select NAS Port Type as a condition.</li><li> For NAS Port Type check Wireless - IEEE 802.11 and Wireless - Other click OK. Click Next.</li><li> On Specify Access Permissions make sure Access granted is selected and click Next.</li><li> On Configure Authentication Methods click Add and choose Microsoft: Smart Card or other certificate and click OK.</li></ul> <img alt="User-added image" height="412" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ch0P&feoid=00N50000002Cf3M&refid=0EM50000000LP2H" width="500"></img> <ul><li> Uncheck any boxes under Less secure authentication methods.</li><li> Select Microsoft: Smart Card or other certificate for EAP types and click Edit. </li><li> Verify the Certificate issued to: drop down shows the correct certificate and issuer which is the Active Directory CA server. Then click OK. Click Next.</li><li> On Configure Constraints click Next.</li><li> On Configure Settings choose NAP Enforcement.</li><li> Under Auto-Remediation, uncheck the box Auto-remediation of client computers and click Next.</li><li> Review the settings on Completing New Network Policy and Click Finish.</li><li> Right click the Network Policy created and select Move up so its processing order is before any other policies.</li></ul>

2016-11-16T14:51:25-0800 2016-11-16T18:00:15-0800 https://support.ruckuswireless.com/articles/000004905 2016-11-16T14:53:59-0800 monthly 0.8 admin,premium knowledge_article_2449 knowledge_article_2449 2015-07-20T14:21:50-0700 000004905 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Performance Performance, SmartCell Gateway, virtual SmartCell Gateway, SZ100 How can I determine the SmartZone Precedence Policy support order? The SmartZone platform controllers support device policy precedence differently from ZoneFlex. <img alt="User-added image" height="267" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Ch1S&feoid=00N50000002Cf3M&refid=0EM50000000LoQ1" width="773"></img> Let’s look at VLAN/Rate Limit separately, since there are different options: VLAN <ul><li style="color: black;">AAA</li><li style="color: black;">Device Policy</li><li style="color: black;">WLAN</li></ul> As part of Dynamic VLAN support AAA returned VLAN has higher precedence. Rate Limit <ul><li style="color: black;">AAA</li><li style="color: black;">Device Policy</li><li style="color: black;">UTP</li></ul> AAA rate limits have higher precedence, since AAA can change the rate limits using COA for prepaid scenarios, etc. Another set of questions is this: if the user is assigned to a local role (which contains a UTP)... <ul><li style="color: black;">Does the role UTP override the WLAN’s UTP?</li></ul> WLAN UTP is default when role UTP is not assigned, otherwise role UTP has higher precedence. <ul><li style="color: black;">During authentication (or provisioning authentication process), if AAA returns a rate limit and a role, does the AAA rate limit override the role rate limit setting (from UTP)?</li></ul> Rate limits mapped to role is used. Furthermore, Do you know how rate limits from Device Policy and User Traffic Profile (at WLAN level) compare to each other? Which one wins? - Device Policy wins If AAA is not sending any rate limit parameters , the uplink and downlink rate limit parameters configured at WLAN via User traffic profile applies to all users. IF UTP is configured at WLAN and if AAA is sending these parameters via COA and if these uplink and downlink values sent in COA are within the range configured via UTP, then only COA will be honoured (action taken at SCG) from 0 to the maximum configured in UTP. So, to summarize: VLAN <ol><li>AAA VLAN (if AAA returns a VLAN attribute, it wins)</li><li>Device Policy (if no AAA, device policy overrides WLAN setting)</li><li>WLAN (WLAN VLAN setting is applied to all other users)</li></ol> Rate Limit <ol><li>Role-based UTP (if user is assigned to role by AAA, role UTP rate limit wins) <ol><li>If AAA returns a rate limit and a role, role still wins</li></ol> </li><li>AAA Rate Limit <ol><li>If AAA uses CoA to change a user rate limit, it must be within the range (0 to max) configured on the UTP that is applied to the WLAN — if no UTP applied to WLAN, then CoA for rate limit has no boundary</li></ol> </li><li>Device Policy (if user is not assigned to role with UTP and if no rate limit applied by AAA, device policy overrides WLAN UTP)</li><li>UTP (UTP applied to WLAN is applied to all other users)</li></ol>

Configuration settings combine to determine SmartZone Precedence Policy support.

2016-11-16T14:53:59-0800 2016-11-16T18:00:14-0800 https://support.ruckuswireless.com/articles/000004574 2016-11-16T11:31:47-0800 monthly 0.8 admin,premium knowledge_article_2447 knowledge_article_2447 2015-05-18T07:23:25-0700 000004574 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to change the admin password of Zone director using CLI command SSH in to Zone Director ruckus> ena ruckus# config ruckus(config-admin)# name admin ruckus(config-admin)# name admin password <Password of ZD> ruckus(config-admin)# end Ex : ruckus> ena ruckus# config You have all rights in this mode. ruckus(config)# admin ruckus(config-admin)# name admin The command was executed successfully. To save the changes, type 'end' or 'exit'. ruckus(config-admin)# name admin password admin The command was executed successfully. To save the changes, type 'end' or 'exit'. ruckus(config-admin)# end The administrator preferences have been updated. Your changes have been saved.

How to change the admin password of Zone director using the CLI command

2016-11-16T11:31:47-0800 2016-11-16T12:00:19-0800 https://support.ruckuswireless.com/articles/000005356 2016-11-16T11:40:30-0800 monthly 0.8 admin,premium knowledge_article_2445 knowledge_article_2445 2015-12-10T16:59:43-0800 000005356 Validated (External) Premium Spot lbs Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SPoT LBS What could allow ZD to connect to vSPoT, but not the APs? Image showing ZD connected, but not the APs: <img alt="User-added image" height="187" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vXX&feoid=00N50000002Cf3M&refid=0EM500000005i72" width="830"></img> 1. The vSPoT server is a FQDN name, possible the APs don't have the right DNS server to the the IP of the vSPot? APs are running off the same DHCP as the ZD, and we even changed the Server address in Location Services from FQDN to IP but it's still showing as not connected. ZD-LS shows "Connected", but AP-LS shows "Not Connected". 2. The Venue defined in vSPoT has an "End Timestamp" field (not found in SPoT), which had Expired... Removing this End Timestamp date, resolved the issue allowing the APs to be Connnected. <img alt="User-added image" height="206" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vXX&feoid=00N50000002Cf3M&refid=0EM500000005i6x" width="687"></img>

vSPoT venue setup can include an End Timestamp, that if expired, will prevent APs from being able to Connect.

2016-11-16T11:40:30-0800 2016-11-16T12:00:16-0800 https://support.ruckuswireless.com/articles/000004794 2016-11-16T11:55:42-0800 monthly 0.8 admin,premium knowledge_article_2444 knowledge_article_2444 2015-06-29T09:33:28-0700 000004794 Validated (External) Premium Zonedirector 1200;ZoneDirector 1200 Configuration Configuration, ZoneDirector 1200 What is the maximum number of MAC addresses that can be added in the client isolation white list feature? The maximum number of MAC addresses that can be added under the Client Isolation Whitelist option is 64.

Maximum number of MAC address be added in client isolation white list feature.

2016-11-16T11:55:42-0800 2016-11-16T12:00:15-0800 https://support.ruckuswireless.com/articles/000001874 2016-11-16T11:59:27-0800 monthly 0.8 admin,premium knowledge_article_2443 knowledge_article_2443 2013-03-26T13:15:19-0700 000001874 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Why the mobile devices still shows the Zonedirector certificate as untrusted despite having CA signed SSL certificate uploaded on it? This shouldn't be the problem with Zonedirector. This will just push the certificate like any other server to the receiving client and it is upto the client machine which will validate the certificate from the list of the installed certificates across their web browser. This can be verified by installing this wild card certificate across any server machine with different sub-domain and accessing it from the client machine. I have done some research and collected some information regarding the issue. The below websites:- http://support.servertastic.com/rapidssl-and-geotrust-certificate-not-trusted-on-mobile-device/ This issue can be resolved by uploading/installing the cross root and intermediate CA across the client machine and they are available free across the website. The information related to this process can be obtained from the below Geo Trust Knowledge base: https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=AR1421 https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=AR1426&actp=search&viewlocale=en_US&searchid=1283360269668 I have also found that this issue is mostly found with the android devices running less than 2.2 version and apple clients running version less than 5.0.

Customer has uploaded the CA generated wild card SSL certificate purchased from Geo Trust. He uploaded this certificate across Zone director. All the devices are able to redirect directly to the Zone-director login page without untrusted notification. However, problem are found with Android devices and IOS devices which still shows this certificate is not trusted.

2016-11-16T11:59:27-0800 2016-11-16T12:00:14-0800 https://support.ruckuswireless.com/articles/000006119 2016-10-20T12:33:30-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2434 knowledge_article_2434 2016-10-20T12:16:03-0700 000006119 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector Why can I not do a conference call with my Vocera badges? After performing the above troubleshooting steps, the way that we got the Vocera badges to function were with the following setting and configuration: eth0/eth1: directed multicast = enabled igmp snooping = enabled wlan: directed multicast = disabled igmp snooping = enabled Here's the command to disable directed multicast on the WLAN once the WLAN is loaded: ruckus(config-wlan)# no qos directed-multicast

Vocera badges only work with unicast but do not work in multicast

2016-10-20T12:33:30-0700 2016-10-20T18:00:18-0700 https://support.ruckuswireless.com/articles/000002601 2014-11-25T04:31:35-0800 monthly 0.8 admin,premium knowledge_article_1452 knowledge_article_1452 2014-02-07T09:48:56-0800 000002601 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector After browsing to https://<<ZD-IP address>>/activate and entering the credentials if you get the below error: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNBP&feoid=00N50000002Cf3M&refid=0EM50000000LQbr"></img> Check the below options: 1. Atleast one WLAN has Zero-IT enabled. <img alt="User-added image" height="29" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNBP&feoid=00N50000002Cf3M&refid=0EM50000000LQc1" width="500"></img> 2. The User assigned Role should contain the WLAN checked. <img alt="User-added image" height="413" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNBP&feoid=00N50000002Cf3M&refid=0EM50000000LQc6" width="500"></img> 3. Ensure that the maximum DPSK count on the ZD has not reached. For example: 1250 DPSKs on ZD1100 which includes user database as well

Unable to download Zero-IT file with error message - No Zero -IT activated Wlan configuration can be provided for you

2014-11-25T04:31:35-0800 2016-10-19T09:21:14-0700 https://support.ruckuswireless.com/articles/000002219 2014-01-11T13:53:22-0800 monthly 0.8 admin,premium knowledge_article_574 knowledge_article_574 2013-09-27T09:16:07-0700 000002219 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor Is it possible to configure one port on AP as Trunk port and the other as an Access port Yes, you can change this VLAN setting on the ZD under Configure > Access points > MAC address of the AP > Port setting <img alt="User-added image" height="223" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PI8I&feoid=00N50000002Cf3M&refid=0EM50000000LLoC" width="500"></img> <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255); "> Here LAN 2 port will be connected to the POE port on the switch with VLAN 116 and 46 tagged(Trunk port) . </div> <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255); "> LAN 1 port can be used to connect a computer which is configured as access VLAN 46 The same can be configured on a Standalone AP as well.</div>

Is it possible to configure one port on AP as Trunk port and the other as an Access port

2014-01-11T13:53:22-0800 2016-10-17T05:49:52-0700 https://support.ruckuswireless.com/articles/000003211 2016-10-06T17:00:07-0700 monthly 0.8 admin,premium knowledge_article_2430 knowledge_article_2430 2014-07-13T19:36:03-0700 000003211 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How client load balancing works on ZD and what parameters are used for load balancing ? <div>Please find the details below regarding Load balancing. </div> <div> </div> <div>Enabling load balancing can improve WLAN performance by helping to spread the client load between nearby access points, so that one AP does not get overloaded while another sits idle. </div> <div> </div> <div>The load balancing feature can be controlled from within ZoneDirector’s Web interface to balance the number of clients per radio on adjacent APs. "Adjacent APs" are determined by ZoneDirector at startup by measuring the RSSI during channel scans. </div> <div> </div> <div>After startup, ZoneDirector uses subsequent scans to update the list of adjacent radios periodically and when a new AP sends its first scan report. When an AP leaves, ZoneDirector immediately updates the list of adjacent radios and refreshes the client limits at each affected AP. </div> <div> </div> <div>Once ZoneDirector is aware of which APs are adjacent to each other, it begins managing the client load by sending desired client limits to the APs. These limits are "soft values" that can be exceeded in several scenarios, including: (1) when a client’s signal is so weak that it may not be able to support a link with another AP, and (2) when a client’s signal is so strong that it really belongs on this AP. </div> <div> </div> <div>The APs maintain these desired client limits and enforce them once they reach the limits by withholding probe responses and authentication responses on any radio that has reached its limit. </div> <div> </div> <div>Key points on load balancing: </div> <div> </div> <div>These rules apply only to client devices; the AP always responds to another AP that is attempting to set up or maintain a mesh network. </div> <div> </div> <div>• Load balancing does not disassociate clients already connected. </div> <div>• Load balancing takes action before a client association request, reducing the chance of client misbehavior. </div> <div>• The process does not require any time-critical interaction between APs and ZoneDirector. </div> <div>• Provides control of adjacent AP distance with safeguards against abandoning clients. </div> <div>• Can be disabled on a per-WLAN basis; for instance, in a voice WLAN, load balancing may not be desired due to voice roaming considerations. </div> <div>• Background scanning must be enabled for load balancing to work. </div> <div>For your reference you could check the background scanning at Configure > services. </div> <div> </div> <div>Here is everything in a nutshell. Settable parameters are underlined. One instance of each parameter is specified for each radio. </div> <div> </div> <div>Adjacent AP radios are those that detect each other above the adjacent radio threshold. This threshold is expressed in RSSI, which is equivalent to SNR in decibels. </div> <div> </div> <div>After an AP radio reaches the number of clients specified by the activation threshold, the ZD starts managing the client load by sending desired client limits to each AP. The client limits maintain the client counts of adjacent AP radios within a nominal difference of headroom clients. These are soft values. The AP is allowed to exceed the desired client limits in two cases: (1) if a client’s signal is received below the weak bypass threshold (suggesting that it is so weak that it may not be able to support a link at another AP), and (2) if a client’s signal is received above the strong bypass threshold (i.e., it is so strong that it really belongs on this AP). Both bypass thresholds are expressed in RSSI, which is equivalent to SNR in decibels. </div> <div> </div>

2016-10-06T17:00:07-0700 2016-10-06T18:00:13-0700 https://support.ruckuswireless.com/articles/000001767 2015-07-10T09:54:45-0700 monthly 0.8 admin,premium knowledge_article_2016 knowledge_article_2016 2013-03-05T22:10:31-0800 000001767 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to create a WLAN with AD authentication with out using Captive Portal Find the attached document for step by step configuration of WLAN with AD and Zero-IT provisioning

Configuring WLAN with AD authentication provisioning Zero-IT with out using captive portal

2015-07-10T09:54:45-0700 2016-10-03T05:05:10-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDJJCA4?attachment_index=0 2016-10-03T05:05:10-0700 monthly admin,premium knowledge_article_2016 knowledge_article_2016_attachment_1 Zero -IT with AD.docx 767727.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000006061 2016-09-30T09:37:01-0700 monthly 0.8 admin,premium knowledge_article_2425 knowledge_article_2425 2016-09-27T10:48:19-0700 000006061 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SZ100 Can SZ100 use specific IP / VLAN for 802.1x RADIUS traffic? You can setup the SZ100 as a two-port group, with a static route towards the RADIUS server to go via the Tunnel Interface. The proxied RADIUS traffic will exit the SZ100 thru the Tunnel Interface per design. RADIUS is an application, and messages are passed to lower layers which are routed based on default/static routes configured. We can only use UDI / VNI to send the RADIUS messages apart from management/AP control IP. Using the Data traffic port is not supported. .

Customers can use Tunnel interface with static routes, for SZ100 802.1x RADIUS traffic to originate from a static IP and VLAN.

2016-09-30T09:37:01-0700 2016-09-30T12:00:13-0700 https://support.ruckuswireless.com/articles/000006065 2016-09-28T09:37:48-0700 monthly 0.8 admin,premium knowledge_article_2426 knowledge_article_2426 2016-09-28T09:37:48-0700 000006065 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Why can't I configure SmartZone authentication for 802.1x with WEP? In 2003 the <a href="https://en.wikipedia.org/wiki/Wi-Fi_Alliance" target="_blank" title="Wi-Fi Alliance">Wi-Fi Alliance</a> announced that WEP had been superseded by <a href="https://en.wikipedia.org/wiki/Wi-Fi_Protected_Access" target="_blank" title="Wi-Fi Protected Access">Wi-Fi Protected Access</a> (WPA). In 2004, with the ratification of the full 802.11i standard (i.e. <a href="https://en.wikipedia.org/wiki/Wi-Fi_Protected_Access#WPA2" target="_blank" title="Wi-Fi Protected Access">WPA2</a>), the IEEE declared that both WEP-40 and WEP-104 have been deprecated.<a href="https://en.wikipedia.org/wiki/Wired_Equivalent_Privacy#cite_note-4" target="_blank">[4]</a> From Wiki, but you can also reference the 802.11 forum. Essentially, by the 802.11 standard (to include b, g, a, n, and ac), WEP is not supported. That is the reason why we have not included support in new products. Older product have continued to support it so that we did not leave existing customers who were using it in a bad spot. Hopefully, customers are considering Cloudpath today.

ZD had 802.1x option with WEP encryption but SZ does not, mostly because IEEE declared WEP-40 and WEP-128 to be dreprecated in 2004, with 802.11i (WPA2) ratification.

2016-09-28T09:37:48-0700 2016-09-28T12:00:13-0700 https://support.ruckuswireless.com/articles/000004316 2016-09-26T16:24:00-0700 monthly 0.8 admin,premium knowledge_article_2349 knowledge_article_2349 2015-05-12T23:13:18-0700 000004316 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway Configuration of SCG internal Firewall SZ/SCG firmware* provides the ability to enable an internal firewall on the SCG Control plane. This feature provides additional protection against malicious traffic from being generated from the Smart Zone. <h2 style="font-size: 16.0029983520508px;"> Enable outbound firewall</h2> Show current firewall rules <div style="margin-left: 40px;"># show running-config outbound-firewall </div> <div>Enable outbound-firewall</div> <div style="margin-left: 40px;"> (config)# outbound-firewall (config-outbound-firewall)# enable</div> Add ip-rule: <div style="margin-left: 40px;">(config-outbound-firewall)# ip-rule <“policy name”> out udp sport <port#></div> Show current firewall rules from config context: <div style="margin-left: 40px;"> (config-outbound-firewall)# do show running-config outbound-firewall </div> <div style="margin-left: 80px;">or </div> <div style="margin-left: 40px;"> </div> Disable outbound firewall <div style="margin-left: 40px;"> #config>no outbound-firewall Do you want to continue to disable (or input ‘no’ to cancel)? [yes/no]</div> IP Rule Example : To configure a rule for TACACS+ traffic, for example use the following: SZ(config-outbound-firewall)# ip-rule tacacs out tcp dport 49 ***** Important Note: Please consult with your Ruckus TSE before opening external firewall ports of the controller. *****

This article explains how to configure the internal firewall of the SCG

2016-09-26T16:24:00-0700 2016-09-26T18:00:18-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PITdCAO?attachment_index=0 2016-09-26T18:00:18-0700 monthly admin,premium knowledge_article_2349 knowledge_article_2349_attachment_1 Oubound Firewall vSZ Control.pdf 14996.0 application/pdf https://support.ruckuswireless.com/articles/000005913 2016-09-21T14:00:29-0700 monthly 0.8 admin,premium knowledge_article_2380 knowledge_article_2380 2016-07-18T14:47:10-0700 000005913 Validated (External) Premium Ruckus cloud;RUCKUS Cloud;Ruckus Cloud Mobile Apps Configuration;Firmware;Troubleshooting;Known issues and workarounds Configuration, Firmware, Troubleshooting, Known Issues and Workarounds, Ruckus Cloud Ruckus Cloud Wi-Fi: WebUI minimum screen width, missing the big picture? Always maintain a minimum necessary screen window width, to display all Ruckus Cloud WebUI detail information. -- Cloud build 16.05, implemented Sep 20, 2016 adds a feature to the WebUI to make the left side menu into Icons only before displaying "missing the big picture" message. <img alt="User-added image" height="381" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Lijt&feoid=00N50000002Cf3M&refid=0EM50000000YGhC" width="662"></img> <img alt="User-added image" height="339" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000Lijt&feoid=00N50000002Cf3M&refid=0EM50000000YGhH" width="500"></img>

The Ruckus Cloud Wi-Fi WebUI requires that you keep your window at least so wide, or critical information cannot be displayed. There is a warning screen if you get too narrow.

2016-09-21T14:00:29-0700 2016-09-21T18:00:13-0700 https://support.ruckuswireless.com/articles/000001667 2014-01-11T14:10:11-0800 monthly 0.8 admin,premium knowledge_article_232 knowledge_article_232 2013-02-24T19:43:18-0800 000001667 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector ZD does not show the OS type of connected clients using the client fingerprinting feature ZD does not show the connected client's OS type in Monitor->Currently connected clients option, the OS type column is empty, Latter found that all the clients are assigned with static IP addresses, and that's the reason why client fingerprinting is not happening. Client fingerprinting will happen only when client gets an IP address from DHCP and this will not happen when client are assigned with static ip address, capturing of OS from client devices takes place during the DHCP request and DHCP option 60 is responsible for this process.

ZD does not show the OS type of connected clients using the client fingerprinting feature

2014-01-11T14:10:11-0800 2016-09-19T00:47:49-0700 https://support.ruckuswireless.com/articles/000004512 2015-09-23T14:03:27-0700 monthly 0.8 admin,premium knowledge_article_2002 knowledge_article_2002 2015-05-06T13:27:48-0700 000004512 Validated (External) Premium Zonedirector 1100;ZoneDirector 1100 Configuration;Installation Configuration, Installation, ZoneDirector 1100 Is R710 supported on ZD1100 The ZD1100 Controller (which is EOL) does not support the latest R710 AP. The ZD1100’s replacement, the ZD1200 (along with ZD3000 and ZD5000s), with 9.12 code will support the R710. Please ensure Support entitlement is in place so you can upgrade your controller to 9.12 firmware.

New 802.11ac R710 AP requires ZoneFlex 9.12+, but ZD1100 last supported on ZoneFlex 9.10 release, therefore ZD1100 does not recognize R710 model APs.

2015-09-23T14:03:27-0700 2016-09-15T11:16:40-0700 https://support.ruckuswireless.com/articles/000004602 2016-09-13T13:47:48-0700 monthly 0.8 admin,premium knowledge_article_1893 knowledge_article_1893 2015-05-25T07:53:15-0700 000004602 Validated (External) Premium Zonedirector 1000;Zonedirector 1100;ZoneDirector 1000;ZoneDirector 1100 Configuration;Installation;Troubleshooting;Known issues and workarounds Configuration, Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector 1000, ZoneDirector 1100 What is the correct duplex connection for ZD1100? For ZD1100 model, it is required that it is connected to the network in full duplex mode for a correct operation. When checking port status in switch side, please make sure that the connection is full duplex and the correct cable is used for that. Failure to do so may produce symptoms like ZD reboots or instabilities.

ZD1100 port duplex requirement for correct operation

2016-09-13T13:47:48-0700 2016-09-13T18:00:13-0700 https://support.ruckuswireless.com/articles/000006028 2016-09-12T11:21:01-0700 monthly 0.8 admin,premium knowledge_article_2419 knowledge_article_2419 2016-09-12T11:21:01-0700 000006028 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Firmware;System network management;Troubleshooting Firmware, System Network Management, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway, SZ100 When using AES encryption with EAP-Subscriber Identity Module (SIM), unto how many bits can we encrypt, is it 128 or 256-bits? AES encryption on Wi-Fi always uses a 128bit block cipher. That is defined by 802.11i and WPA/WPA2. There is an option for a 256-bit cipher in 802.11i, WPA/WPA2 but I don’t know of any real world implementations of that. EAP-SIM is just the EAP type used to move the credentials between UE and AAA securely. AES uses a 256-bit key, with a 128-bit Block Cipher providing 128-bit security.

AES uses a 256-bit key, with a 128-bit Block Cipher, providing 128-bit security.

2016-09-12T11:21:01-0700 2016-09-12T12:00:13-0700 https://support.ruckuswireless.com/articles/000005531 2016-02-29T17:00:59-0800 monthly 0.8 admin,premium knowledge_article_2282 knowledge_article_2282 2016-02-23T16:16:09-0800 000005531 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Known issues and workarounds Known Issues and Workarounds, Unleashed Does Unleashed support Layer 3 roaming? No, In current version (200.1.x) unleashed APs don't support Layer 3 roaming.

Does unleashed AP support Layer 3 roaming

2016-02-29T17:00:59-0800 2016-09-09T23:12:11-0700 https://support.ruckuswireless.com/articles/000003771 2016-08-23T15:35:11-0700 monthly 0.8 admin,premium knowledge_article_1490 knowledge_article_1490 2014-12-09T04:41:31-0800 000003771 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Security Security, ZoneDirector How does the SSL connection work with ruckus Digital CA or private imported certificate SSL Connection Setup Secure Socket Layer (SSL) sits on top of TCP layer, below the application layer and acts like sockets connected by TCP connections. It is used to secure TCP-based applications, not UDP or directly over IP. The most popular application used for SSL to secure communications is HTTP over SSL, or HTTPS. Others include SMTP/ IMAP over SSL. An SSL connection is established in two main phases- the Handshake phase and the Secure data transfer phase. The handshake phase negotiates cryptographic algorithms, authenticates the server, and establishes keys for data encryption and Message Authentication Code (MAC). The secure data transfer phase sends encrypted data over established SSL connection. The following shows the flow and messages of a typical SSL connection setup. <img alt="User-added image" height="477" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNKH&feoid=00N50000002Cf3M&refid=0EM50000000Lc4c" width="500"></img> Hello Phase The Client initiates a session by sending a Client Hello message to the Server. This Hello message contains: <ul><li>Version: The Client sends the version number that it supports. For example, for SSLv3, the version number is 3.0. For TLS, the version number is 3.1.</li><li>Random: This is a Client generated random structure. It contains the Client's date and time, and a 26-byte pseudorandom number.</li><li>Session ID (if any): This is included if the Client wants to resume a previous session. If the Session ID Length is 0, it indicates a new session.</li><li>Cipher Suite: This is the list of cipher suites that are supported by the Client. An example of a cipher suite is TLS_RSA_WITH_DES_CBC_SHA, where TLS is the protocol version, RSA is the algorithm that will be used for key exchange, DES_CBC is the encryption algorithm and SHA is the hash function.</li><li>Compression Methods: Currently, no compression methods are supported.</li></ul> The following shows a typical Client Hello message. <img alt="User-added image" height="817" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNKH&feoid=00N50000002Cf3M&refid=0EM50000000Lc4h" width="500"></img> The Server sends back the highest protocol version that is supported by the Client and the Server. This version will be used throughout the connection. The Server responds with its own Hello message. This Hello message contains: <ul><li>Version: The Server sends the highest version number supported by both Client and Server.</li><li>Random: The Server also generates its own random value. It also contains its own date and time.</li><li>Session ID: If the Client sends an empty session ID to initiate a new session, the server generates a new session ID. If the Client sends a non-zero session ID to resume a previous session, the uses the same session ID that is sent by the Client. If the Server cannot or will not resume a previous session, it generates a new session ID.</li><li>Cipher Suite: This is the single cipher suite selected by the Server out of the cipher suites proposed by the Client.</li><li>Compression Method: Currently, no compression methods are supported.</li></ul> The following shows a typical Server Hello message. <img alt="User-added image" height="227" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNKH&feoid=00N50000002Cf3M&refid=0EM50000000Lc4m" width="500"></img> Authentication and Key Exchange In this phase, the Client and the Server generates an authenticated shared secret, called pre_master secret, which is converted to master sercret. SSLv3 and TLS support RSA and Diffie-Hellman for key exchange. The Server sends its certificate to the Client. The Server certificate contains the Server's Public key. The Client will use this key to authenticate the Server and to encrypt the pre_master secret. <img alt="User-added image" height="395" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNKH&feoid=00N50000002Cf3M&refid=0EM50000000Lc4r" width="500"></img> The pre_master secret has two pieces: the Client's protocol version and the random number. The pre_master secret is encrypted by Server's Public key retrieved from the Server Certificate. The Server may create and send a temporary key to the Client using Server Key Exchange message. This key can be used by the Client to encrypt the Client Key Exchange message. This step is required only when the Server Certificate does not contain a Server Public Key. The Server may request authentication from the Client using Client Certificate Request message. The Client responds back with a Client Certificate and Client Certificate Verify messages. The Client Certificate message contains the Client's Public key and the Client Certificate Verify message contains the hash of all the handshake messages so far signed by Client's Public key. It does the job of Client authentication. After these messages, the Server sends a Server Hello Done message indicating it has finished and is awaiting a response from the Client. Key Derivation The Client sends the Client Key Exchange message after computing the pre_master secret. This is encrypted by Server's Public key and sent to the Server. In this phase, the Client and the Server create a master secret individually from the data exchanged during previous phases. The Client and the Server use the following to generate the master secret. This master secret is never exchanged. <ol><li>Pre_master secret</li><li>Client and Server random values</li></ol> Only the Server with the Private key that matches the Public key in the certificate can decrypt this data and continue the protocol negotiation. <img alt="User-added image" height="113" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNKH&feoid=00N50000002Cf3M&refid=0EM50000000Lc4w" width="500"></img> The Client then sends a Change Cipher Spec message indicating to the Server that all messages that follow the Client Finished (Encrypted Handshake) message will be encrypted using the keys and algorithms negotiated. The Server also sends a Change Cipher Spec message followed by an Encrypted Handshake message to indicate that it will begin encrypting messages with the keys negotiated. Application Data After the handshake phase, the communication begins on the newly established SSL connection. The Record Protocol receives the data from application layer and is responsible for fragmentation the data into blocks and re-assembly of the data blocks, sequencing the data blocks, compression/ decompression and encryption/ decryption of the data. <img alt="User-added image" height="76" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNKH&feoid=00N50000002Cf3M&refid=0EM50000000Lc51" width="500"></img> for further reading <a href="http://technet.microsoft.com/en-us/library/cc785811%28WS.10%29.aspx" target="_blank">http://technet.microsoft.com/en-us/library/cc785811%28WS.10%29.aspx</a>

SSL Digital Certificate installed on Ruckus ZD or imported private digital certificate for device or user recognition

2016-08-23T15:35:11-0700 2016-08-23T18:00:15-0700 https://support.ruckuswireless.com/articles/000001444 2015-07-15T13:50:19-0700 monthly 0.8 admin,premium knowledge_article_916 knowledge_article_916 2013-01-18T08:20:24-0800 000001444 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How many concurrent clients can a ZD maintain? The following table summarizes maximum number of APs, clients and DPSKs supported in each ZD model: <table border="1" cellpadding="0" cellspacing="0" style="font-size: 11.3599996566772px;"><tbody><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;"> </td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">ZD1100</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">ZD1200</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">ZD3000</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">ZD5000</td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">Access Points</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">50</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">75</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">500</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">1,000</td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">Max Clients*</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">1,250</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">2,000</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">10,000</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">20,000</td></tr><tr><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">Dynamic PSKs</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">1,000</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">2,000</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">10,000</td><td colspan="1" rowspan="1" style="color: rgb(34, 34, 34); width: 125px;">10,000</td></tr></tbody></table> *Max clients includes all type of clients such as DPSK, Guest access, Hotspot, 802.1x, etc. These figures for client maximum capacity in each model are the same no matter AP licenses installed.

Maximum number of concurrent clients supported per ZD model

2015-07-15T13:50:19-0700 2016-08-23T12:14:15-0700 https://support.ruckuswireless.com/articles/000002789 2015-01-16T14:33:17-0800 monthly 0.8 admin,premium knowledge_article_840 knowledge_article_840 2014-03-13T17:40:23-0700 000002789 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Security;Troubleshooting Security, Troubleshooting, ZoneDirector Enable Wireless client isolation feature as "Isolate wireless client traffic from all hosts on the same VLAN/subnet." by associating configured white-list for the configured WLAN. This will prevent wireless clients to discover any other devices within the subnet apart from the devices configured in the white-list. Basically, network discovery tools use ARP protocol (sent as a broadcast at Layer 2) to discover the available devices from the received responses. The L3/L4 Access control lists contain protocols list which operates at higher layer (eg:-application layer) and this doesn't allow to block the ARP protocol which operates at lower layers, as this forms basic necessity for a communication. However, client isolation feature works at both Layer 2 and Layer 3 which blocks any further requests at the access point level and this is the reason why non-white list devices remain undiscovered. <a href="/articles/FAQ/Configuring-Client-Isolation-Whitelist-on-the-ZD?q=%0A++++++Select+Id%2C+KnowledgeArticleId%2C+IsDeleted%2C+ValidationStatus%2C+%0A+++++++++++++PublishStatus%2C+VersionNumber%2C+IsLatestVersion%2C+IsVisibleInApp%2C+%0A+++++++++++++IsVisibleInPkb%2C+IsVisibleInCsp%2C+IsVisibleInPrm%2C+CreatedDate%2C+%0A+++++++++++++LastModifiedDate%2C+SystemModstamp%2C+%0A+++++++++++++Language%2C+Title%2C+UrlName%2C+ArchivedDate%2C+Summary%2C+%0A+++++++++++++ArticleNumber%2C+FirstPublishedDate%2C+LastPublishedDate%2C+%0A+++++++++++++Answer__c%2C+Question__c%2C+Attachment__Name__s%2C+%0A+++++++++++++Attachment__ContentType__s%2C+Attachment__Length__s%2C+Attachment__Body__s%2C+%0A+++++++++++++Symptoms_Keywords__c%2C+Customer_Environment__c%2C+Workaround__c%2C+Root_Cause__c%2C+%0A+++++++++++++Related_Articles__c%2C+Defect_Id__c%2C+Version__c%2C+Security__c%2C+A_Loop_Created__c%2C+%0A+++++++++++++Troubleshooting_Steps__c%2C+KCS_Coach__c%0A+++++++From+FAQ__kav+%0A+++++++Where+PublishStatus+%3D+%27Online%27+And+%0A+++++++++++++Language%3D%27en_US%27+And+%0A+++++++++++++IsVisibleInPkb+%3D+true+And%0A+++++++++++++ValidationStatus+IN+%28%27Validated+%28External%29%27%2C+%27Validated+%28Public%29%27%29+And%0A+++++++++++++LastModifiedDate+%3E+2015-01-16T21%3A53%3A05.000Z%0A++++" target="_blank">Configuring Client Isolation Whitelist on the ZD</a>

Network scanning applications such as Fing and ipscanner is still finding network devices even with firewall and ACL rules applied?

2015-01-16T14:33:17-0800 2016-08-23T11:33:11-0700 https://support.ruckuswireless.com/articles/000005867 2016-08-19T14:12:45-0700 monthly 0.8 admin,premium knowledge_article_2358 knowledge_article_2358 2016-06-23T09:35:43-0700 000005867 Validated (External) Premium R710;Ruckus R710 Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, R710 Do we have a Link Aggregation guide for Juniper EX switches and R710 model APs? See the attached document Configuring Link Aggregations between Juniper EX Series Switches and Ruckus Wireless Access Points.

The attached guide helps configure link aggregation on Juniper EX switches for 802.11ac wave 2 R710 (and later model) APs.

2016-08-19T14:12:45-0700 2016-08-19T18:00:17-0700 http://support.ruckuswireless.com/article_attachments/kA250000000CfNRCA0?attachment_index=0 2016-08-19T18:00:17-0700 monthly admin,premium knowledge_article_2358 knowledge_article_2358_attachment_1 nce-152-LAG-Ruckus-configuring.pdf 451372.0 application/pdf https://support.ruckuswireless.com/articles/000003502 2016-08-02T09:35:44-0700 monthly 0.8 admin,premium knowledge_article_1346 knowledge_article_1346 2014-10-19T18:00:18-0700 000003502 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to change the web portal logo on the ZD to the default one from the user customized logo In the ZD GUI , we can change the web portal logo to the user defined logo using the following option. Configure -> Guest access -> Guest access customization. However after changing the web portal logo to the customized one, if we intend to role back to the default one, the options are as follows. <ol><li>Upload the same default web portal logo which can be downloaded from the internet. </li><li>Make sure that the upload file meets certain criteria in file size. (may change with version, < 20k recommended)</li><li>Check with the ZD GUI under Configure -> Guest access -> Guest access customization for the file size details.</li><li>Hard reset the ZD. So that it will go to factory default configuration. </li></ol> Default web portal logo file is attached to this Knowledge Base, and from this URL: <a href="http://zddemo.ruckuswireless.com/images/logo.gif" target="_blank">http://zddemo.ruckuswireless.com/images/logo.gif</a> NOTE: Slow update of default logo to ZD from Chrome on Win10 has been reported.

2016-08-02T09:35:44-0700 2016-08-02T12:00:14-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PHbvCAG?attachment_index=0 2016-08-02T12:00:14-0700 monthly admin,premium knowledge_article_1346 knowledge_article_1346_attachment_1 guest_logo 4420.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000002404 2014-01-11T13:47:43-0800 monthly 0.8 admin,premium knowledge_article_641 knowledge_article_641 2013-11-30T16:17:01-0800 000002404 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector 'Enable Smart Redundancy' option grayed out on Secondary ZD after firmware upgrade from 9.5.1.0.50 to 9.6.1.0.15 Issue Reported: After upgrading the ZD from 9.5.1.0.50 to 9.6.1.0.15, 'Enable Smart Redundancy' option is grayed out in Secondary ZD under ZD>> Configure>> System. Resolution: >> Not a browser issue as customer tried on different browsers with no luck. >> Took back up configuration from the Primary ZD and uploaded in the Secondary ZD. >> Got the 'Enable smart Redundancy' option back.

2014-01-11T13:47:43-0800 2016-08-01T05:13:31-0700 https://support.ruckuswireless.com/articles/000004741 2015-06-22T06:30:52-0700 monthly 0.8 admin,premium knowledge_article_1962 knowledge_article_1962 2015-06-22T06:30:52-0700 000004741 Validated (External) Premium Zoneflex outdoor Installation Installation, ZoneFlex Outdoor What do I need know about installing outdoor APs at a height? Some of the best practices for outdoor installs include: 1. Avoiding obstructions to provide good line of sight 2. Avoiding interference to provide best possible performance 3. Usage of outdoor rated cabling, lightning arrestors, and proper grounding 4. Usage of drip loops and good sealants optionally 5. Good/solid mounting and right orientation. Apart from all this, proper care must be taken while setting them up at a height. Setting them too high is obviously not suggested as the signal received at the ground level will be low. For reasonable heights, we do have guidance on downtilt angle for maximizing coverage at the ground level. Corresponding calculator is attached to this article.

This article explains things to keep in mind when installing outdoor APs at a height.

2015-06-22T06:30:52-0700 2016-07-27T13:51:16-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PJ2ZCAW?attachment_index=0 2016-07-27T13:51:16-0700 monthly admin,premium knowledge_article_1962 knowledge_article_1962_attachment_1 7762S downtilt calculator.xls 119808.0 application/vnd.ms-excel https://support.ruckuswireless.com/articles/000005948 2016-07-26T11:27:49-0700 monthly 0.8 admin,premium knowledge_article_2391 knowledge_article_2391 2016-07-26T11:27:49-0700 000005948 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector Does ZD Bonjour Gateway support Apple 'home sharing'? Yes, it’s supported in pre-defined Bonjour service pull-down list: <mdnsservice name="iTunes Sharing" id="11"> <service type="_daap._tcp."/> <service type="_home-sharing._tcp."/> </mdnsservice> For any MDNS / Bonjour services not defined in the list, you can always create your own rule using the service type from a packet capture.

Yes, you can define the service records to support Bonjour gateway for Apple 'home sharing'.

2016-07-26T11:27:49-0700 2016-07-26T12:00:17-0700 https://support.ruckuswireless.com/articles/000005876 2016-07-21T15:15:33-0700 monthly 0.8 admin,premium knowledge_article_2387 knowledge_article_2387 2016-07-11T13:39:06-0700 000005876 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) System network management;Troubleshooting System Network Management, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway How to format API Query Parameters when requesting data from the SZ API Filter parameters are passed as query strings in the URLs of GET requests and NOT in the body of POST request. The format is '...?parameter=value' Further details provided in the article.

formatting for API queries including parameters with example from curl

2016-07-21T15:15:33-0700 2016-07-21T18:00:17-0700 https://support.ruckuswireless.com/articles/000005885 2016-07-13T10:43:02-0700 monthly 0.8 admin,premium knowledge_article_2379 knowledge_article_2379 2016-07-13T10:43:02-0700 000005885 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, SmartCell Insight SCI: Is there a specific procedure to shutdown SmartCell Insight so we can be sure the DB does not get corrupted? Question: Is there a specific procedure to shut down SmartCell Insight so we can be sure the database does not get corrupted ? I have SCI running on an ESXi system. Would a normal shutdown on the CLI command do the job ? I noticed when trying this before it went into production that the VM never seemed to really power off… Answer: The Linux-standard 'poweroff' command from CLI should work and turn off the machine after graceful shutdown has completed.

The Linux-standard 'poweroff' command from CLI should work and turn off the machine after graceful shutdown has completed.

2016-07-13T10:43:02-0700 2016-07-13T12:00:15-0700 https://support.ruckuswireless.com/articles/000005873 2016-07-11T10:14:53-0700 monthly 0.8 admin,premium knowledge_article_2368 knowledge_article_2368 2016-07-05T16:17:11-0700 000005873 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How do I determine my WLAN ID for ZoneDirector CLI commands? After confirming the number of WLANs and their ID number, the Admin can issue the command to disable 802.11w on the Guest Access WLAN on all APs at once. ruckus> enable ruckus# debug ruckus(debug)# remote_ap_cli -A set pmf wlan3 mode 0

When issuing ZD CLI commands on specific WLANs, you need to determine which WLAN ID corresponds to which WLAN.

2016-07-11T10:14:53-0700 2016-07-11T12:00:13-0700 https://support.ruckuswireless.com/articles/000005875 2016-07-06T16:56:09-0700 monthly 0.8 admin,premium knowledge_article_2369 knowledge_article_2369 2016-07-06T16:56:09-0700 000005875 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, Unleashed Unleashed: How can I change DTIM on Unleashed APs? Customers who need save phone battery life on Unleashed, are asking for a way to extend DTIM. The Unleashed Master AP can execute CLI commands similar to ZD, including how to set the Spectralink-Compatibility to enable/disable under APs 2.4g and/or 5g radios. Before you begin, gather the AP MAC address of all Unleashed member APs to configure, as they must be configured one at a time. TSE-Unl-R500-2 38:ff:36:29:7c:10 Current Master AP TSE-Unl-T300 58:b6:33:0b:c0:c0 Current Standby Master AP TSE-Unl-R600-2 38:ff:36:10:d8:e0 Member AP TSE-Unl-R600-1 38:ff:36:10:de:30 Member AP SSH into Master AP and configure the other three Unleashed APs’ radios: ruckus# config You have all rights in this mode. ruckus(config)# ap 38:ff:36:10:de:30 The AP '38:ff:36:10:de:30' has been loaded. To save the AP, type 'end' or 'exit'. ruckus(config-ap)# ruckus(config-ap)# radio 2.4 spectralink-compatibility enable The command was executed successfully. To save the changes, type 'end' or 'exit'. ruckus(config-ap)# ruckus(config-ap)# radio 5 spectralink-compatibility enable The command was executed successfully. To save the changes, type 'end' or 'exit'. ruckus(config-ap)# ruckus(config-ap)# exit The device information has been updated. Your changes have been saved. ruckus(config)# exit Your changes have been saved. ruckus# ruckus# config You have all rights in this mode. ruckus(config)# ap 58:b6:33:0b:c0:c0 The AP '58:b6:33:0b:c0:c0' has been loaded. To save the AP, type 'end' or 'exit'. ruckus(config-ap)# ruckus(config-ap)# radio 2.4 spectralink-compatibility enable The command was executed successfully. To save the changes, type 'end' or 'exit'. ruckus(config-ap)# ruckus(config-ap)# radio 5 spectralink-compatibility enable The command was executed successfully. To save the changes, type 'end' or 'exit'. ruckus(config-ap)# ruckus(config-ap)# exit The device information has been updated. Your changes have been saved. ruckus(config)# exit Your changes have been saved. ruckus# -- Finally, you will need to shut-down or disconnect your current Master AP for a few minutes, in order for the Standby Master AP to take over. Just rebooting the Master AP is insufficient, as the Standby Master AP will wait that long for the Master to come back, and retake control. SSH to your new Master AP, and perform the “radio 2.4/5 spectralink-compatibility enable” commands on the previous Master AP’s MAC address.

You can use CLI commands on the Master AP to enable Spectralink-Compatibility on Unleashed AP radios, to change default DTIM, BSS-minrate, and RTS/CTS.

2016-07-06T16:56:09-0700 2016-07-06T18:00:19-0700 https://support.ruckuswireless.com/articles/000005843 2016-06-24T14:15:27-0700 monthly 0.8 admin,premium knowledge_article_2363 knowledge_article_2363 2016-06-24T14:15:27-0700 000005843 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Security;Known issues and workarounds Configuration, Security, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Can WLAN Client Isolation or too many DNS servers cause AP reboots in SZ 3.2.1 patch 1 firmware? A fix to SZ AP code 3.2.1 patch 3 will truncate DNS entries above 4 and prevent code corruption.

SZ AP running 3.2.1.0.659 (SCG code 3.2.1.0.193) rebooting with Hardware Watchdog Timeout when client isolation on WLAN is enabled and DNS returns 5+ DNS server list.

2016-06-24T14:15:27-0700 2016-06-24T18:00:13-0700 https://support.ruckuswireless.com/articles/000004841 2016-06-23T16:56:13-0700 monthly 0.8 admin,premium knowledge_article_2360 knowledge_article_2360 2015-07-07T12:07:47-0700 000004841 Validated (External) Premium Zonedirector 3000;R300;ZoneDirector 3000;Ruckus R300 System network management;Website access System Network Management, Website Access, ZoneDirector 3000, R300 How to enable web interface access for access points Enable http/https access. 1. To enable this on a single AP: SSH into AP CLI: rkscli#set http enable rkscli#set https enable 2. To enable this on all APs managed by ZD SSH into ZD CLI: ruckus>enable ruckus#debug ruckus(debug)#remote_ap_cli -A "set http enable" ruckus(debug)#remote_ap_cli -A "set https enable" ruckus(debug)#exit

When access points are provisioned on ZD, http/https access might be disabled. This article explains how to enable it.

2016-06-23T16:56:13-0700 2016-06-23T18:00:14-0700 https://support.ruckuswireless.com/articles/000001784 2016-06-20T16:47:32-0700 monthly 0.8 admin,premium knowledge_article_2355 knowledge_article_2355 2013-03-12T07:57:53-0700 000001784 Validated (External) Premium Zoneflex 7731 Performance Performance, ZoneFlex 7731 What commands can be given to restore lost 7731 link? Below commands which sets a watchdog timer that resets the logic. The next time the bridge loses connection the unit reboot and come back online by themselves thus avoiding manual reboot. <div>Here are the commands to implement the auto boot on the 7731 from the CLI. The first 3 options are for non-root-bridge rkscli: set uplink-recovery parameter error Usage: set uplink-recovery {options} -> sta-link-down-init-time , wait time to re-init -> sta-link-down-reboot-time , wait time to reboot -> no-sta-link-reboot-time , wait time to reboot (no link after boot) -> ap-exp-assoc , the expected # of stations -> sta-mia-reboot-time, wait time to reboot if missing sta rkscli: rkscli: get uplink-recovery Recovery Configuration: ======= STA =========== Wait time to reinitialize after link down : 0 (sec) Wait time to reboot after link down : 0 (sec) Wait time to reboot after boot-up & no link: 0 (sec) ======== AP =========== Expected # of stations : 0 Wait time to reboot if missing station(s) : 0 (sec) OK recommended settings are 60 seconds for reinit the interface and 5 min for rebooting Ask the customer to execute these and monitor the link for the next couple of days. Once you execute the commands, the output looks something as below:</div> <div> </div> <div>Root-bridge rkscli: get uplink-recovery Recovery Configuration: ======= STA =========== Wait time to reinitialize after link down : 60 (sec) Wait time to reboot after link down : 300 (sec) Wait time to reboot after boot-up & no link: 300 (sec) ======== AP =========== Expected # of stations : 1 Wait time to reboot if missing station(s) : 300 (sec) OK Non-root bridge rkscli: get uplink-recovery Recovery Configuration: ======= STA =========== Wait time to reinitialize after link down : 60 (sec) Wait time to reboot after link down : 300 (sec) Wait time to reboot after boot-up & no link: 300 (sec) ======== AP =========== Expected # of stations : 0 Wait time to reboot if missing station(s) : 0 (sec) OK</div> <div> </div>

This article contains the command that would restore the ZF-7731 link after it gets disconnected.

2016-06-20T16:47:32-0700 2016-06-20T18:00:24-0700 https://support.ruckuswireless.com/articles/000005816 2016-06-20T17:02:12-0700 monthly 0.8 admin,premium knowledge_article_2354 knowledge_article_2354 2016-06-20T17:02:12-0700 000005816 Validated (External) Premium Zoneflex 7731 Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, ZoneFlex 7731 How can I use 7731 Link Optimisation to Select a Good Channel? The output of the following optimization chose the channel with the best tx & rx combination. If intermittent interference is being seen adjacent channels may also be affected. In the case of the example below, look to either manually select 149 / 153 or blacklist channels 52, 56 & 60 to help isolate the interference. <div style="margin-left: 40px;">Jun 1 09:55:41 7731 daemon.warn syslog: Channel Optimization complete: Jun 1 09:55:41 7731 daemon.warn syslog: do_channel_opt_process-596: from db(/tmp/c4:01:7c:03:d8:08.db), stats by channel are: Jun 1 09:55:41 7731 daemon.warn syslog: chan52 (146136/127003) Jun 1 09:55:41 7731 daemon.warn syslog: chan56 (134749/150568) Jun 1 09:55:41 7731 daemon.warn syslog: chan60 (106448/107516) Jun 1 09:55:41 7731 daemon.warn syslog: chan64 (102998/134954) Jun 1 09:55:41 7731 daemon.warn syslog: chan100 (112605/105498) Jun 1 09:55:41 7731 daemon.warn syslog: chan104 (100901/96535) Jun 1 09:55:41 7731 daemon.warn syslog: chan108 (80166/83124) Jun 1 09:55:41 7731 daemon.warn syslog: chan112 (95335/74220) Jun 1 09:55:41 7731 daemon.warn syslog: chan132 (15885/11039) Jun 1 09:55:41 7731 daemon.warn syslog: chan136 (0/0) Jun 1 09:55:41 7731 daemon.warn syslog: chan149 (150880/122351) Jun 1 09:55:41 7731 daemon.warn syslog: chan153 (122147/121033) Jun 1 09:55:41 7731 daemon.warn syslog: chan157 (98936/84574) Jun 1 09:55:41 7731 daemon.warn syslog: chan161 (81258/0) Jun 1 09:55:41 7731 daemon.warn syslog: [CHANO] wifi0: Ch.56 is optimal (134749Kbps). Jun 1 09:55:41 7731 daemon.warn syslog: [CHANO] wifi0: RB set Ch.56 successfully. </div> <div>Blacklist Set Help Usage: set blacklist <wifi name> {options} -> [ {enable|disable|warnonly} ] -> [ clear ] -> [ <chan> {1|0|-1} (1=temporary, 0=clear, -1=permanent) -> [ {rx_phyerr|util_busy|nf0hi|nf0lo|nfcap0hi|nfcap0lo} <val> ] Available channel list: * 52 (5260 MHz) HT40 HT20 * 60 (5300 MHz) HT40 HT20 * 64 (5320 MHz) HT40 HT20 * 100 (5500 MHz) HT40 HT20 * 104 (5520 MHz) HT40 HT20 * 108 (5540 MHz) HT20 HT40 * 112 (5560 MHz) HT40 HT20 * 116 (5580 MHz) HT20 * 132 (5660 MHz) HT40 HT20 * 136 (5680 MHz) HT40 HT20 * 140 (5700 MHz) HT20 * 149 (5745 MHz) HT40 HT20 * 153 (5765 MHz) HT40 HT20 * 157 (5785 MHz) HT40 HT20 * 161 (5805 MHz) HT40 HT20 * 165 (5825 MHz) HT20 Blacklist Get example: rkscli: get blacklist wifi0 wifi0 Channel Blacklist is warning only. wifi0 Blacklisted Channel: 52 Timeout: permanent wifi0 Blacklisted Channel: 56 Timeout: permanent wifi0 Blacklisted Channel: 60 Timeout: permanent wifi0 Blacklisted Channel: 64 Timeout: temporary wifi0 Threshold override: Blacklist get usage: get blacklist : get blacklist <wifi name> -- Get channel blacklist </div>

The 7731 does not implement dynamic channel selection. Using Channel Optimization results, assists in making an informed decision on the configuration of either the channel blacklist or manually selecting a single AP channel.

2016-06-20T17:02:12-0700 2016-06-20T18:00:23-0700 https://support.ruckuswireless.com/articles/000005824 2016-06-20T17:06:54-0700 monthly 0.8 admin,premium knowledge_article_2352 knowledge_article_2352 2016-06-09T14:51:11-0700 000005824 Validated (External) Premium Zoneflex indoor Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor ISP: How to re-establish Mesh AP functionality? In order to reset a Mesh AP that appears not to be connecting clients to the network, or is not connecting to a Root or other Mesh uplink, you need to: 1. Provide a WIRED connection to the AP (may require dis-mounting AP, or running a wire to it's mount point) 2. Perform an AP power cycle. 3. Wait for rebooted AP to fully come back online (5-10 minutes) 4. Disconnect Ethernet and re-mount AP (if necessary)

If an ISP provided Mesh AP appears not to be functioning properly, the following steps will reset it.

2016-06-20T17:06:54-0700 2016-06-20T18:00:21-0700 https://support.ruckuswireless.com/articles/000005725 2016-05-16T15:47:11-0700 monthly 0.8 admin,premium knowledge_article_2318 knowledge_article_2318 2016-05-16T15:47:11-0700 000005725 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Security;System network management Configuration, Security, System Network Management, SmartCell Gateway, virtual SmartCell Gateway How do I upload new certificates to SCG/SZ/vSZ A new certificate store mechanism was added in SCG version 3.1 permitting uploading well known CA signed certificates into the SCG in a central store and then determining which element will use them. Details on using this new certificate store can be found starting on page 245 of the SCG Administrators Guide: https://support.ruckuswireless.com/documents/798-smartzone-3-1-1-administrator-guide-scg-200-vsz-h Depending on the service the certificate will be applied to will determine which services must restart. For WEB-UI management (which also includes SSH secure management) both the SSH session and the WEB Tomcat server will restart when the certificate is applied. <img alt="" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000009VQ&feoid=00N50000002Cf3M&refid=0EM50000000E24y"></img> These service restarts should momentarily disconnect the user from management consoles but should not otherwise affect operation. The management certificate should NOT affect AP to SCG SSH control tunnel as this uses the internal SCG CA and privately signed certificates on the AP (updated in 3.2.1/3.12 using a new TPM infrastructure). The certificates apply to the entire cluster and will be uploaded to all nodes in the cluster when applied. If a new node is added to the cluster - the imported CA signed certs will automatically be imported into the new node.

How do I upload new certificates to SCG/SZ/vSZ

2016-05-16T15:47:11-0700 2016-06-20T06:26:53-0700 https://support.ruckuswireless.com/articles/000002631 2014-02-13T14:36:35-0800 monthly 0.8 admin,premium knowledge_article_749 knowledge_article_749 2014-02-13T14:36:35-0800 000002631 Validated (External) Premium Zoneflex 2942 Troubleshooting Troubleshooting, ZoneFlex 2942 How to hard Reset the ZF2942 Access Point <div> </div> <div> Following is the procedure to hard reset the ZF2942</div> <div> </div> <div> 1. Lift the sliding door of AP, on the left side you can see OPT, DIR, AIR and WLAN LED's on the top to the right of WLAN LED there is an indented “hard reset" hole. </div> <div> 2. Insert a paper clip, push & hold it for 8-10 seconds. </div> <div> 3. Once you pull out the paper clip, LED's will blink once, indicating that the reset was successful. </div> <div> 4. Then connect ZF2942 back to your PC. Configure PC and ZF2942 to be on same IP subnet as mentioned on its sticker that is 192.168.0.1 </div> <div> 5. Do a ping test to see if AP is reachable or not. If ping test is successful then follow below </div> <div> 6. Open browser window and type the default IP address of ZF2942 which is printed on sticker. </div> <div> 7. When Ruckus login page appears enter the following information: </div> <div> </div> <div> User name: super </div> <div> Password: sp-admin </div>

This article provide step by step procedure how to hard reset the ZF2942 Access Point

2014-02-13T14:36:35-0800 2016-06-17T11:51:57-0700 https://support.ruckuswireless.com/articles/000005826 2016-06-10T11:02:40-0700 monthly 0.8 admin,premium knowledge_article_2344 knowledge_article_2344 2016-06-10T11:02:40-0700 000005826 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, SZ100 What is the schema and body script to modify a WLAN scheduler on SZ-100 from RESTful API? <h5><code>Use the below script to modify a WLAN scheduler from RESTful API on SZ-100 </code> Body <code>{ "name" : "wlanSchedulerName", "description" : "wlanSchedulerDescription", "sun" : [ "00:15-01:15", "07:00-08:30", "10:45-12:00" ], "mon" : [ "00:15-01:15", "08:00-09:30", "10:45-12:00" ], "tue" : [ "00:15-01:15", "07:00-08:30", "10:45-12:00" ], "wed" : [ "00:15-01:15" ] "thu" : [ "00:15-01:15" ], "fri" : [ "00:15-01:15" ], "sat" : [ "00:15-01:15" ] }</code> </h5> <h5><code>It is similar to CREATE Body script. However, for CREATE operation we use POST method and for MODIFY operation PATCH method should be used.</code></h5>

This article gives you information about the schema and Body script used to modify a WLAN scheduler on SZ-100 from RESTful API

2016-06-10T11:02:40-0700 2016-06-10T12:00:15-0700 https://support.ruckuswireless.com/articles/000005811 2016-06-03T12:43:27-0700 monthly 0.8 admin,premium knowledge_article_2335 knowledge_article_2335 2016-06-03T11:18:48-0700 000005811 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Firmware Configuration, Firmware, SmartCell Gateway, virtual SmartCell Gateway, SZ100 What are the limits of VLAN Pooling on SZ You can configure up to 64 VLAN Pools per Zone, with up to 16 VLANs per Pool, on vSZ-H / SCG.

There is a limit of 16 VLANs per Pool, and 64 Pools per Zone (vSZ-H / SCG)

2016-06-03T12:43:27-0700 2016-06-03T18:00:18-0700 https://support.ruckuswireless.com/articles/000002525 2014-04-29T06:36:33-0700 monthly 0.8 admin,premium knowledge_article_937 knowledge_article_937 2014-01-27T01:52:30-0800 000002525 Validated (External) Premium Zoneflex 7731 Installation;System network management;Known issues and workarounds Installation, System Network Management, Known Issues and Workarounds, ZoneFlex 7731 Is the ethernet port of ZF-7731 a trunk port or an access port The port on 7731 by default is a trunk port– they forward any 802.3q headers untouched – with the exception of VLAN 1 which Ruckus always considers to be native/untagged and will not forward as tagged. IF you need to manage the bridges themselves on a tagged VLAN this is accomplished by configuring the management VLAN in Configure::Bridge. With this option disabled – default – the bridge expects and sends management traffic untagged (so the actual VLAN ID of the native vlan on the switch port does not matter). Once you set the bridges (both sides normally) to be tagged you will probably lose contact until you move them to a port that tags in the correct VLAN

Information about Ethernet ports of ZF-7731

2014-04-29T06:36:33-0700 2016-05-31T14:06:10-0700 https://support.ruckuswireless.com/articles/000005745 2016-05-27T13:24:39-0700 monthly 0.8 admin,premium knowledge_article_2330 knowledge_article_2330 2016-05-27T13:24:39-0700 000005745 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Why does Ruckus sysUpTimeInstance does not match actual system uptime. The correct MIBs required to return the Host System uptime are the Host Resource MIB's RFC2790 hrSystemUptime <a href="http://tools.ietf.org/html/rfc2790" target="_blank">http://tools.ietf.org/html/rfc2790</a> Name Syntax Value -------------------------------- --------------------------- --------------------------------------------------------------------------------------------------------------------------------- sysUpTimeInstance timeticks 5 days 04h:29m:30s.99th (44817099) hrSystemUptime.0 TimeTicks 5 days 04h:39m:01s.07th Difference above was based on 9 minute delay in SNMP daemon starting after system rebooted

Standard system MIB http://www.oid-info.com/get/1.3.6.1.2.1.1.3.0 returns uptime of SNMP process not Host system

2016-05-27T13:24:39-0700 2016-05-27T18:00:17-0700 https://support.ruckuswireless.com/articles/000004348 2015-08-04T15:42:16-0700 monthly 0.8 admin,premium knowledge_article_2082 knowledge_article_2082 2015-04-09T14:32:01-0700 000004348 Validated (External) Premium Zonedirector 3000;R300;ZoneDirector 3000;Ruckus R300 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector 3000, R300 Will R300 support mesh in 9.9 or 9.10 Mesh is not supported on R300 model AP on any ZoneFlex release. As per AP User Guide:The R300 is an entry level 802.11n dual-band AP that does not support Smart Mesh

Entry level 802.11n R300 model AP does not support Mesh

2015-08-04T15:42:16-0700 2016-05-27T08:01:50-0700 https://support.ruckuswireless.com/articles/000003529 2014-10-20T13:29:16-0700 monthly 0.8 admin,premium knowledge_article_1347 knowledge_article_1347 2014-10-20T13:29:16-0700 000003529 Validated (External) Premium Zoneplanner;ZonePlanner Configuration;Firmware Configuration, Firmware, ZonePlanner Can I upgrade Zone Planner software? The Ruckus Zone Planner is a subset of Air Magnet and it's software cannot be upgraded. The upgrade is only available for the Air Magnet Planner.

I was trying to update my Ruckus Zoneplanner but when I click on the update button it gives me the one I already have installed

2014-10-20T13:29:16-0700 2016-05-26T05:44:37-0700 https://support.ruckuswireless.com/articles/000001867 2014-05-20T23:54:08-0700 monthly 0.8 admin,premium knowledge_article_1019 knowledge_article_1019 2013-03-22T12:13:12-0700 000001867 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, ZoneDirector How can I get better performance for our Apple devices? <div> If Apple devices see any performance problems with Ruckus APs, enabling 802.11d on ZD will mostly fix such issues. Previous ZD versions didn't make APs to advertise 802.11d regulatory domain elements by default.</div> <div> </div> <div> Why we have to do this - According to Apple, their devices (both MacOS and iOS) default set to lowest worldwide common denominator regulatory settings for transmit power and passive scan behaviour UNLESS they are reconfigured to the correct regulatory domain by an 802.11d element in the beacon. So in most regulatory domains there is a ~4dB txpower hit as well as potentially other scan behaviour implications. To enable 802.11d on the ZD, go to Configure :: WLANs. Under Advanced Options select '802.11d' check box. See attached screen shot:</div>

This article explains a particular reason for less than par performance and what can be done to boost the performance on Apple devices.

2014-05-20T23:54:08-0700 2016-05-25T11:28:20-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDTdCAO?attachment_index=0 2016-05-25T11:28:20-0700 monthly admin,premium knowledge_article_1019 knowledge_article_1019_attachment_1 802.11d.png 70714.0 image/png https://support.ruckuswireless.com/articles/000004283 2016-05-24T11:26:52-0700 monthly 0.8 admin,premium knowledge_article_2324 knowledge_article_2324 2015-03-30T02:40:11-0700 000004283 Validated (External) Premium Virtual smartcell gateway Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, virtual SmartCell Gateway

During the initial setup of a cluster for vSCG, some APs were not responding to the move command properly, seem to be stuck in two places at the same time.

2016-05-24T11:26:52-0700 2016-05-24T12:00:18-0700 https://support.ruckuswireless.com/articles/000005048 2015-08-20T02:59:31-0700 monthly 0.8 admin,premium knowledge_article_2109 knowledge_article_2109 2015-08-20T02:59:31-0700 000005048 Validated (External) Premium Flexmaster;FlexMaster Installation Installation, FlexMaster Does flexmaster can be installed on CentOS 7 and Redhat 7 As of now Flexmaster won't support CentOS7 and Redhat 7. FM is supported on below Operating Systems: <ul style="list-style-type: circle;"><li style="">RedHat Enterprise 5.5(64 bit) or RedHat Enterprise 6.5(64 bit).</li><li style="">CentOS release 6.3 (64 bit) or CentOS release 6.5(64 bit).</li></ul>

Does Flexmaster will work on CentOS 7 and Redhat 7

2015-08-20T02:59:31-0700 2016-05-23T05:20:55-0700 https://support.ruckuswireless.com/articles/000005138 2016-04-05T10:11:18-0700 monthly 0.8 admin,premium knowledge_article_2301 knowledge_article_2301 2015-09-25T17:20:17-0700 000005138 Validated (External) Premium R710;Ruckus R710 Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, R710 Does R710 AP support Smart Mesh feature in SZ or ZD? Mesh support for R710 AP will be released in ZD 9.13 firmware releases.

R710 Mesh is supported under SZ since 3.2, and ZD from 9.13 release.

2016-04-05T10:11:18-0700 2016-05-18T09:31:41-0700 https://support.ruckuswireless.com/articles/000002883 2014-04-17T17:56:21-0700 monthly 0.8 admin,premium knowledge_article_914 knowledge_article_914 2014-04-17T17:56:21-0700 000002883 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation Configuration, Installation, ZoneFlex Indoor, ZoneFlex Outdoor Can we mesh Standalone access points? No. Standalone APs do not support Mesh feature.

Can we mesh access points without a Zone director?

2014-04-17T17:56:21-0700 2016-05-17T06:00:39-0700 https://support.ruckuswireless.com/articles/000005255 2015-11-02T15:36:40-0800 monthly 0.8 admin,premium knowledge_article_2197 knowledge_article_2197 2015-11-02T11:38:49-0800 000005255 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, SmartCell Gateway What are the benefits of using SCG's tunnel mode? See the section Creating AP Tunnel Profiles in SCG Administrrator Guide for more detail on Ruckus GRE tunneling. Tunnel mode options are GRE:tunnel regular WLAN traffic, and GRE+UDP:APs behind NAT tunnel WLAN traffic. Note: SCG tunneling should be supported thru 10G switch interfaces. What are some of the benefits of using SCG Tunnel Mode? <ul><li style="color: black; font-style: normal; font-weight: normal;">Support for APs behind NAT router.</li><li style="color: black; font-style: normal; font-weight: normal;">Allows for tunneled traffic encryption.</li><li style="color: black; font-style: normal; font-weight: normal;">Mobile offload solution (3GPP).</li><li style="color: black; font-style: normal; font-weight: normal;">Traffic control thru centralized Internet Gateway or operator's Intranet.</li><li style="color: black; font-style: normal; font-weight: normal;">Seamless roaming across different APs on different Subnets, ie for VoIP</li><li style="color: black; font-style: normal; font-weight: normal;">SCG data plane can do different encapsulation types to Northbound as follow: <ul><li style="color: black; font-style: normal; font-weight: normal;">802.1Q tunneling (AKA QinQ or double VLAN tags).</li><li style="color: black; font-style: normal; font-weight: normal;">GTP (GPRS tunneling protocol – AKA Wifi-Offload or 3G-Offload).</li><li style="color: black; font-style: normal; font-weight: normal;">SoftGRE (Transparant Ethernet bridging – Protocol = 0x6558) ==> this is the only tunneling that AP LBO can do.</li><li style="color: black; font-style: normal; font-weight: normal;">GRE (Generic routing Encapsulation – Protocol = IP).</li><li style="color: black; font-style: normal; font-weight: normal;">PMIPv6 (Proxy Mobile IP).</li><li style="color: black; font-style: normal; font-weight: normal;">Mixed (Bridging or SoftGRE to Core based on realm in 802.1x for the same SSID).</li></ul> </li><li style="color: black; font-style: normal; font-weight: normal;">Centralize DATA traffic up to 10K AP's per Controller or 30K AP’s per 4-node cluster</li><li style="color: black; font-style: normal; font-weight: normal;">Access and Core separation (AP and SCG-200 control interface on public, but wireless client will be bridging or tunneling to Private network).</li><li style="color: black; font-style: normal; font-weight: normal;">Separate Control and DATA traffic (GigE port and 10G ports).</li></ul>

Use of RuckusGRE tunneling for SCG offers additional benefits.

2015-11-02T15:36:40-0800 2016-05-07T11:05:20-0700 https://support.ruckuswireless.com/articles/000002280 2016-01-28T10:07:12-0800 monthly 0.8 admin,premium knowledge_article_2263 knowledge_article_2263 2013-12-30T07:53:18-0800 000002280 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor Android phones prompting for passphrase after installing prov.apk <div style="font-family: Arial; font-size: 13px;"> After installing the prov.apk file, instead of clicking on 'Done' tab on the phone, click on 'Open' (this can be found on all Android versions) <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQPV&feoid=00N50000002Cf3M&refid=0EM50000000LMhW"></img> </div> <div style="font-family: Arial; font-size: 13px;"> Once you click on open, the next page will be 'WiFi Automatic connection'. <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQPV&feoid=00N50000002Cf3M&refid=0EM50000000LMhb"></img> Click on this button and you should be automatically connected to the Zero-IT configured WLAN without asking for passphrase. <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQPV&feoid=00N50000002Cf3M&refid=0EM50000000LMhg"></img></div> <div> </div>

Android phones prompting for passphrase after installing prov.apk

2016-01-28T10:07:12-0800 2016-05-03T08:34:33-0700 https://support.ruckuswireless.com/articles/000001523 2016-04-19T11:20:23-0700 monthly 0.8 admin,premium knowledge_article_979 knowledge_article_979 2013-02-24T19:45:11-0800 000001523 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation Configuration, Installation, ZoneFlex Indoor, ZoneFlex Outdoor How to configure Hotspot on a standalone AP? Components Server: Windows XP DHCP, DNS Dual Server v6.86 (http://sourceforge.net/projects/dhcp-dns-server/) Freeradius v1.1.7-r0.0.2 (http://www.freeradius.net ) AP 7363: 9.3.0.0.87 and above STA: Windows XP Configuration AP configuration 1. Configure::Hotspot Service: enabled UAM IP address: 10.1.0.1 (default value – internal TAP interface for Layer 2/3 operation) Redirect unauth. user to: http://192.168.1.8/login-ap.htm Primary RADIUS server: 192.168.1.211 RADIUS Server Secret: ruckus <img alt="User-added image" height="319" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000009OK&feoid=00N50000002Cf3M&refid=0EM50000000LFPV" width="500"></img> 2. WLAN under Radio 2.4G (or under Radio 5G) Wireless network: 7363-hotspot-93 Availability: enabled SSID: 7363-hotspot-93 Hotspot service: hotspot0 <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000009OK&feoid=00N50000002Cf3M&refid=0EM50000000LFPa"></img> RADIUS configuration Standard user configuration. For example : jamoreno User-Password == “ruckus” User-Name = jamoreno, Session-Timeout = 10000 Web page in Captive portal An example of a web page to capture user/password information from the user: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <title>Wireless Internet Service</title> <script type="text/javascript"> //<![CDATA[ function get_param(name) { if (location.href.indexOf("?") >= 0) { var query=location.href.split("?")[1]; var params=query.split("&"); for (var i = 0; i < params.length; i ++) { var value_pair=params[i].split("="); if (value_pair[0] == name) { return unescape(value_pair[1]); } } } return ""; } function submit_login() { var action = "https://" + get_param("uamip") + ":" + get_param("uamhttps") + "/login"; document.login_form.action = action; document.login_form.userurl.value = get_param("userurl"); return true; } //]]> </script> </head> <body> <center> <h2>Wireless Internet Service</h2> <form name="login_form" action="" method="post"> Username:<input type="text" name="username" /> Password:<input type="password" name="password" /> <input type="hidden" name="userurl" value="" /> <input type="submit" value="Login" onclick="submit_login();"/> </form> </center> </body> </html> Note: This web page is different to the one used in case of a ZD-controlled setup.

Configuration of hotspot on a standalone AP

2016-04-19T11:20:23-0700 2016-04-19T12:00:13-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PCeGCAW?attachment_index=0 2016-04-19T12:00:13-0700 monthly admin,premium knowledge_article_979 knowledge_article_979_attachment_1 RTN_Config_WISPr_Solo_AP_v1.6.pdf 6965636.0 application/pdf https://support.ruckuswireless.com/articles/000004276 2016-04-12T15:40:08-0700 monthly 0.8 admin,premium knowledge_article_1684 knowledge_article_1684 2015-03-27T10:48:26-0700 000004276 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector Can I control 802.11b/g/n client connectivity? ZD version 9.10+ include AP Group channel settings to configure the 2.4ghz radio for b/g/n, g/n, or n-only use. <img alt="User-added image" height="321" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka25000000009Lp&feoid=00N50000002Cf3M&refid=0EM50000000LgsM" width="500"></img> ZD WebUI, Configure/Access Points page, edit AP Group, Radio B/G/N (2.4 GHz) includes a dropdown for '11n/ac only Mode'. - Unchanged/Auto = B/G/N, - Unchanged/Auto, and use a ZD CLI config mode 'OFDM-only' on WLAN, can make individual WLAN(s) G/N only, - and this N/AC-only option makes all AP 2.4ghz radios 'N only' for all WLANs. We will refuse authentication to clients without HT or VHT information elements in their association responses. Customers now have granularity configuration control over 2.4ghz 802.11 client connectivity.

ZD version 9.10+ includes AP Group channel settings to configure the 2.4ghz radio for b/g/n, g/n, or n-only use

2016-04-12T15:40:08-0700 2016-04-12T18:00:18-0700 https://support.ruckuswireless.com/articles/000001925 2014-01-11T14:06:53-0800 monthly 0.8 admin,premium knowledge_article_285 knowledge_article_285 2013-04-03T17:33:34-0700 000001925 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration Performance, Configuration, ZoneDirector Can I set RTS/CTS from CLI? <div style="font-family: Arial; font-size: 13.63636302947998px; "> RTS/CTS is set on per WLAN/SSID basis on the APs.</div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> </div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> We can do it from Access Point as well as Zone Director CLI</div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> </div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> 1. Below is the procedure to set RTS/CTS using AP CLI</div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> </div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> Syntax: set prot-mode <wlan name> [none|cts-only|rts-cts] get prot-mode <wlan name> Description: ? set prot-mode <wlan name> [none|cts-only | rts-cts]– Configures the protection mode for 11b/11g. ? get prot-mode <wlan name> – Displays the protection mode for 11b/11g. Example: rkscli: get prot-mode wlan0 wlan0 Protection Mode: none OK rkscli: set prot-mode wlan0 cts-only OK </div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> </div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> 2. Below is the procedure to set RTS/CTS using ZD CLI</div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> </div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> Following is the CLI command to be run on the Zone Director to Enable RTS/CTS on wlan0 of all the APs which are managed by the Zone Director</div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> </div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> ruckus(debug)# remote_ap_cli -A set prot-mode wlan0 rts-cts</div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> </div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> Following is the CLI command to be run on the Zone Director to Enable RTS/CTS on wlan0 of any one of the AP which is manged by the Zone Director</div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> </div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> ruckus(debug)# remote_ap_cli -a 58:93:96:01:84:80 set prot-mode wlan0 rts-cts</div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> </div> <div style="font-family: Arial; font-size: 13.63636302947998px; "> Where 58:93:96:01:84:80 is the MAC Address of the AP</div>

Setting RTS/CTS can sometimes help when dealing with "hidden node" issues in wifi networks. See http://www.wi-fiplanet.com/tutorials/article.php/1445641 for more info. This is an advanced setting and generally not recommended

2014-01-11T14:06:53-0800 2016-04-07T02:05:27-0700 https://support.ruckuswireless.com/articles/000005667 2016-04-05T14:38:26-0700 monthly 0.8 admin,premium knowledge_article_2303 knowledge_article_2303 2016-04-05T14:38:26-0700 000005667 Validated (External) Premium Virtual smartcell gateway Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, virtual SmartCell Gateway How to check current vSZ Resource Level? There are a few ways to check current vSZ Resource Level. 1. vSZ CLI: # show system-capacity <img alt="User-added image" height="136" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vww&feoid=00N50000002Cf3M&refid=0EM500000006kZb" width="500"></img> 2. WebUI: Monitor -> CP overview <img alt="User-added image" height="434" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vww&feoid=00N50000002Cf3M&refid=0EM500000006kZg" width="500"></img> Dashboard (starting vSZ 3.4) <img alt="User-added image" height="298" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vww&feoid=00N50000002Cf3M&refid=0EM500000006kZl" width="500"></img>

There are places in the vSZ WebUI that display supported number of APs, and CLI commands too.

2016-04-05T14:38:26-0700 2016-04-05T18:00:14-0700 https://support.ruckuswireless.com/articles/000005642 2016-03-29T23:36:28-0700 monthly 0.8 admin,premium knowledge_article_2297 knowledge_article_2297 2016-03-29T23:36:28-0700 000005642 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector Why is WhatsApp not working over Wi-Fi? WhatsApp says that it is not designed for Proxy or VPN services. Please check following link: https://www.whatsapp.com/faq/iphone/22025683

WhatsApp is not working over Wi-Fi however, everything else works fine.

2016-03-29T23:36:28-0700 2016-03-30T00:00:14-0700 https://support.ruckuswireless.com/articles/000001589 2016-03-22T10:13:59-0700 monthly 0.8 admin,premium knowledge_article_2296 knowledge_article_2296 2013-02-08T07:11:50-0800 000001589 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;System network management;Troubleshooting Configuration, Installation, System Network Management, Troubleshooting, ZoneDirector, ZoneFlex Indoor Why are the 7363 AP's losing contact to the ZD? Background Information: <ul style="background-color: rgb(255, 255, 255);"><li>Link stability is important for the exchange of heartbeats, sent from the AP to the ZD.</li><li>The AP sends out heartbeats every 30s, and the ZD runs a 40s clock from the last AP heartbeat received.</li><li>If a heartbeat is not received at the ZD, it will raise a “heartbeats lost” alert.</li><li>If 12 consecutive heartbeat messages are not received, then the ZoneDirector will raise a “Lost contact to AP” alarm and show the AP as Disconnected.</li></ul> <div style="margin-left: 40px; background-color: rgb(255, 255, 255);">NETWORK DIAGRAM:</div> <div style="margin-left: 40px; background-color: rgb(255, 255, 255);">ZD ==== core switch (Dell power connect stacked switch ) ==== Enterasys Switch </div> Troubleshooting: <ul style="background-color: rgb(255, 255, 255);"><li>Check the Enterasys switch configuration. Look for packet drops on Port where the AP was connected.</li><li>Check the Enterasys Switch port errors.</li><li>Look for Link stability. Do a ping test between Zone Director and AP. Look for latency to be less than 100ms.</li><li>Look for DIR LED status on the AP. Refer to AP user guide: <a href="https://support.ruckuswireless.com/documents/295-zoneflex-release-9-6-indoor-ap-user-guide/download" style="color: rgb(51, 52, 53);" target="_blank">https://support.ruckuswireless.com/documents/295-zoneflex-release-9-6-indoor-ap-user-guide/download</a></li></ul> Resolution: Consolidate the connections to a single half of the core Switch

Frequent AP hearbeat lost error

2016-03-22T10:13:59-0700 2016-03-22T12:00:13-0700 https://support.ruckuswireless.com/articles/000005565 2016-03-18T14:49:40-0700 monthly 0.8 admin,premium knowledge_article_2294 knowledge_article_2294 2016-03-18T14:49:40-0700 000005565 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to disable Smart-redundancy on ZD On the ZoneDirector, we can disable Smart-redundancy from web UI and from CLI. Below commands are similar for ZD CLI. ruckus>en ruckus#config ruckus(config)#sys ruckus(config-sys)#no smart-redundancy

This article helps in disabling the smart-redundancy on the ZD

2016-03-18T14:49:40-0700 2016-03-18T18:00:12-0700 https://support.ruckuswireless.com/articles/000005583 2016-03-11T15:43:48-0800 monthly 0.8 admin,premium knowledge_article_2293 knowledge_article_2293 2016-03-11T15:43:48-0800 000005583 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration Performance, Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What are Best Practices when deploying Microsoft Lync over Ruckus WiFi? Being in the 2.4GHz spectrum means there are many sources of interference, but for Best Practices using MS Lync over Ruckus Wifi see this guide: <a href="http://a030f85c1e25003d7609-b98377aee968aad08453374eb1df3398.r40.cf2.rackcdn.com/other/bpcg-lync-ruckus.pdf" target="_blank">http://a030f85c1e25003d7609-b98377aee968aad08453374eb1df3398.r40.cf2.rackcdn.com/other/bpcg-lync-ruckus.pdf</a>

The attached doc provides Best Practices for using Microsoft Lync communications over Ruckus WiFi.

2016-03-11T15:43:48-0800 2016-03-11T18:00:17-0800 https://support.ruckuswireless.com/articles/000002457 2014-08-04T06:48:12-0700 monthly 0.8 admin,premium knowledge_article_1197 knowledge_article_1197 2013-12-20T09:11:58-0800 000002457 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What happens to SR when Prefer primary ZD enabled? <h3> Smart Redundancy when we enable "Prefer Primary ZD" under limited ZD discovery:</h3> Login to ZD GUI >> Configure >> Access Points >> Access point policies >> Limited ZD discovery >> Enable Prefer primary ZD. <img alt="User-added image" height="150" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PLuv&feoid=00N50000002Cf3M&refid=0EM50000000LP7l" width="500"></img> When we enable "Prefer primary ZD" under limited ZD discovery on the Zone Director, the Smart Redundancy option will be grayed out. you can check ZD GUI >> Configure >> System >> Smart Redundancy >> Enable smart redundancy option will be Grayed out. <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PLuv&feoid=00N50000002Cf3M&refid=0EM50000000LP7v"></img>

2014-08-04T06:48:12-0700 2016-03-10T12:19:16-0800 https://support.ruckuswireless.com/articles/000005578 2016-03-09T16:33:33-0800 monthly 0.8 admin,premium knowledge_article_2291 knowledge_article_2291 2016-03-09T16:33:33-0800 000005578 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Remote AP CLI commands from ZoneDirector or SmartZone The ZD uses Debug mode to issue ‘ remote_ap_cli –a <mac> “cmd” ’ commands to connected APs. Ruckus (Debug)# remote_ap_cli –a 23:c5:d3:09:ab:c0 “get version” (remote_ap_cli, is one word) The SZ doesn’t need Debug mode, and issues ‘ remote ap-cli <mac> “cmd” ’ formatted commands. Ruckus# remote ap-cli 2c:c5:d3:09:ab:c0 “get version” (remote ap-cli, is two words) The ZD command has a “-A” option for All APs, but SZ only issues individual AP mac address commands. login as: admin ################################ # Welcome to vSZ # ################################ <a href="mailto:admin@10.9.52.61's" target="_blank">admin@10.9.52.61's</a> password: Please wait. CLI initializing... Welcome to the Ruckus Virtual SmartZone - Essentials Command Line Interface Version: 3.2.0.0.790 TSE-E-Blade-02> en Password: *************** TSE-E-Blade-02# TSE-E-Blade-02# TSE-E-Blade-02# remote ap-cli <mac> AP MAC address TSE-E-Blade-02# remote ap-cli 2c:c5:d3:09:ab:c0 "get version" Ruckus R710 Multimedia Hotzone Wireless AP Version: 3.2.0.0.593 OK TSE-E-Blade-02#

Both ZoneDirector and SmartZone are capable of issuing commands from the controller CLI to run commands on a selected connected AP.

2016-03-09T16:33:33-0800 2016-03-09T18:00:13-0800 https://support.ruckuswireless.com/articles/000004758 2015-06-28T23:42:46-0700 monthly 0.8 admin,premium knowledge_article_1979 knowledge_article_1979 2015-06-28T23:42:46-0700 000004758 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why I am unable to import new floor plan on to the ZoneDirector ? Releasing the memory on the active ZoneDirector by deleting all the events and activities and stopping the real-time monitoring on the ZoneDirector helped in uploading new floor plan on the Active ZoneDirector. For deleting All Events / Activities : ZoneDirector >> Monitor >> All Events / Activities >> Clear all. Requirements for floor plane: <ul><li>A floorplan image in .GIF, .JPG or .PNG format</li><li>The image should be monochrome or grayscale.</li><li>The file size should be no larger than 200KB in size.</li><li>The floorplan image should be (ideally) no larger than 10 inches (720 pixels) per side</li></ul>

Unable to import new floor plan on the ZoneDirector Maps.

2015-06-28T23:42:46-0700 2016-03-09T11:25:24-0800 https://support.ruckuswireless.com/articles/000005549 2016-03-07T15:34:12-0800 monthly 0.8 admin,premium knowledge_article_2288 knowledge_article_2288 2016-03-02T10:03:00-0800 000005549 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation;Known issues and workarounds Configuration, Firmware, Installation, Known Issues and Workarounds, SmartCell Gateway What ports/protocols are needed to support AP to SCG via RuckusGRE tunnel in 2.5.0.1.x? Q: Does anyone happen to know what port numbers (SoftGRE) are used between the AP and SCG 2.5.0.1..? A: Ports for AP to SCG Communications: Control Plane - TCP 443, AP - initial certificate download (cannot change) Control Plane - TCP 22, SSH - AP Management Traffic (cannot change) Control Plane - TCP 91 - AP Firmware Download (Cannot change) Control Plane - UDP 123 - NTP (Cannot change) Data Plane - TCP 23232 - Ruckus GRE Tunnel Setup (cannot change) Data Plane - UDP 23233 - Ruckus GRE Tunnel Data Traffic (can change) UDP 1812/1813 - RADIUS (Can change if required) UDP 53 - DNS (cannot change) UDP 67 - DHCP (cannot change) TCP/UDP 18301 - SpeedFlex (zaps) Performance (cannot change)

The below list provides ports/protocols to support AP to SCG via RuckusGRE tunnel to WAG in 2.5.0.1.x.

2016-03-07T15:34:12-0800 2016-03-07T18:00:13-0800 https://support.ruckuswireless.com/articles/000005566 2016-03-07T05:58:02-0800 monthly 0.8 admin,premium knowledge_article_2289 knowledge_article_2289 2016-03-07T05:58:02-0800 000005566 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, SmartCell Gateway, virtual SmartCell Gateway, SZ100 vSZ GUI do not show more than 1K guest passes, is there a limitation? This is a design intend from vSZ/SZ/SCG 3.0 onward and same is mentioned in the GUI. <img alt="User-added image" height="126" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vkg&feoid=00N50000002Cf3M&refid=0EM500000006Ptu" width="500"></img>

vSZ GUI do not show more than 1K guest passes

2016-03-07T05:58:02-0800 2016-03-07T06:00:13-0800 https://support.ruckuswireless.com/articles/000002303 2014-01-11T13:51:35-0800 monthly 0.8 admin,premium knowledge_article_595 knowledge_article_595 2013-10-29T21:00:57-0700 000002303 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector How to reboot the Access points managed by Zone Director SSH in to the Zone Director's CLI using PUTTY application. ruckus> ruckus> en ruckus# debug ruckus(debug)# remote_ap_cli -A "reboot" These commands will reboot all the AP's which are connected to Zone Director.

CLI command to reboot the AP's which are managed by Zone Director

2014-01-11T13:51:35-0800 2016-03-04T12:35:29-0800 https://support.ruckuswireless.com/articles/000005526 2016-02-29T15:44:55-0800 monthly 0.8 admin,premium knowledge_article_2286 knowledge_article_2286 2016-02-29T15:44:55-0800 000005526 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Firmware Firmware, SZ100 What can cause SZ-100 upgrade to get stuck with "Unable to execute RPC"? ZF7762 is not supported in 3.2, hence SZ100 upgrade is not completing. Remove the EOL or unsupported AP models from the SZ100 and initiate the upgrade.

SZ100 cluster will not complete the upgrade from 3.1 to 3.2.

2016-02-29T15:44:55-0800 2016-02-29T18:00:18-0800 https://support.ruckuswireless.com/articles/000005530 2016-02-29T16:28:30-0800 monthly 0.8 admin,premium knowledge_article_2283 knowledge_article_2283 2016-02-23T16:13:45-0800 000005530 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration Configuration, Unleashed Do Unleashed APs support LDAP & TACACS+ authentication? No, In current firmware version (200.1.x), Unleashed APs won't support LDAP & TACACS+ based authentication.

Unleashed 200.1 does not support LDAP or TACACS+ authentication.

2016-02-29T16:28:30-0800 2016-02-29T18:00:16-0800 https://support.ruckuswireless.com/articles/000005525 2016-02-23T09:45:04-0800 monthly 0.8 admin,premium knowledge_article_2280 knowledge_article_2280 2016-02-23T08:05:01-0800 000005525 Validated (External) Premium Sz100;SmartZone 100-D (SZ100-D) Configuration Configuration, SZ100 Is it possible to use the SZ-100 with multiple country code APs? On the SZ-100/vSZ-E, we cannot create AP Zones. So, there is no option to have multiple country code APs. We can manage them on only one country code and APs must also be on the same country code to join the controller.

SZ-100 cannot support multiple AP Zones, and thus, multiple country code APs, in the current release.

2016-02-23T09:45:04-0800 2016-02-23T12:00:14-0800 https://support.ruckuswireless.com/articles/000003222 2014-07-17T14:15:40-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1186 knowledge_article_1186 2014-07-17T14:15:40-0700 000003222 Validated (External) Public Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds Why doesnt my DNS entries stay saved when I statically assign to an AP Since the AP doesn't use DNS services, there is no need to save the DNS settings. When clients get a DHCP address from the DHCP server one of the fields supplied will be a DNS server IP address entry. Hence no need to be saved on the AP.

DNS-entries-on-statically-assigned-AP-doesn-t-stay-saved

2014-07-17T14:15:40-0700 2016-02-01T14:05:34-0800 https://support.ruckuswireless.com/articles/000001733 2016-01-29T08:38:18-0800 monthly 0.8 admin,premium knowledge_article_2270 knowledge_article_2270 2013-03-05T22:03:26-0800 000001733 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Installation;Troubleshooting Performance, Installation, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor How much overlap is needed between the APs? <div>Informed that the AP overlap should not be more than 30%. The most common example of an ESS has access points with partially overlapping coverage cells.</div> <div>The purpose behind an ESS with partially overlapping coverage cells is to provide seamless roaming to the client stations. Most vendors recommend cell overlap of 15 to 20 percent to achieve successful seamless roaming. <div>Although seamless roaming is usually a key aspect of WLAN design, there is no requirement</div> <div>for ESS to guarantee uninterrupted communications. For example, an ESS can utilize multiple access points with non-overlapping coverage cells. <div>The only way to determine if proper cell overlap is in place is by conducting a coverage analysis site survey. <div>Roaming problems will occur if there is not enough overlap in cell coverage. Too little overlap will effectively create a roaming dead zone, and connectivity may even temporarily be lost. On the flip side, too much cell overlap will also cause roaming problems. </div> <div>For example, if two cells have 60 percent overlap, a station may stay associated with</div> <div>its original AP and not connect to a second access point even though the station is directly underneath</div> <div>the second access point. This can also create a situation in which the client device is constantly</div> <div>switching back and forth between the two or more APs. This often presents itself when</div> <div>a client device is directly under an AP and there are constant dropped frames. <div>Proper coverage analysis must be performed using some type of received signal strength measurement tool. </div> <div>These tools could be something as simple as the received signal strength meter in your wireless card’s client utility, or they could be a more expensive and complex site survey software package.</div> </div> </div> </div> </div> <div> A 2.4 GHz 802.11b/g radio transmitting at 100 mW will often cause interference with other access point</div> <div>coverage cells simply because it is generating too much power. Also, many legacy client cards have a maximum transmit power of 30 mW. The RF signal of a 30 mW client might not be heard at the outer edge of an access point’s 100 mW coverage cell. A good starting point for a 2.4 GHz</div> <div>access point is 30 mW transmit power. After the site survey is performed, the power can be increased if needed to meet unexpected coverage needs, or it can be decreased to meet capacity needs. <div>The hardest part of a coverage analysis site survey is often finding where to place the first access point and determining the boundaries of the first RF cell. The procedure outlined here is generally how this is achieved</div> </div> <div>1. Place an access point in the corner of the building with a power setting of 30 mW.</div> <div>2. Walk diagonally away from the access point toward the center of the building until the</div> <div>received signal drops to -65 dBm. This is the location where you place your first access</div> <div>point.</div> <div>3. Temporarily mount the access point in the first location and begin walking throughout</div> <div>the facility to find the –65 dBm end points, also known as cell boundaries or cell edges.</div> <div>4. Depending upon the shape and size of the first coverage cell, you may want to change the</div> <div>power settings and/or move the initial access point. A good portion of a proper coverage</div> <div>analysis involves starting over and trying again. <div>Once the first coverage cell and boundaries have been determined, the next question is</div> <div>where to place the next access point. The placement of the next access point is performed using</div> <div>a technique that’s similar to the one you used to place the first access point:</div> <div>1. Think of the cell boundary of the first access point, where the signal is –65 dBm, as the</div> <div>initial starting point, similar to the way you used the corner of the building as your initial</div> <div>starting point. From the first access point, walk parallel to the edge of the building, and</div> <div>place an access point at the location where the received signal is –65 dBm</div> </div> <div>2. Now walk away from this access point, parallel to the edge of the building, until the</div> <div>received signal drops to –65 dBm.</div> <div>3. This is the farthest point to place the access point if you do not want cell overlap.</div> <div>4. Using the distance from the previous access point and this location, the placement of this</div> <div>next access point should be about 15 to 20 percent (depending upon cell overlap requirements)</div> <div>closer to the previous access.</div> <div>5. Move to that location and temporarily mount the access point and begin walking</div> <div>throughout the facility to find the –65 dBm end points, or cell boundaries.</div> <div>6. Again, depending upon the shape and size of the first coverage cell, you may want to</div> <div>change the power settings and/or move this access point.</div> <div>It is important to avoid excessive overlap because it can cause frequent roaming and performance</div> <div>degradation. The shape and size of the building and the attenuation caused by the various</div> <div>materials of walls and obstacles will require you to change the distances between access points</div> <div>to ensure proper cell overlap. After finding the proper placement of the second access point and</div> <div>all of its cell boundaries, repeat the procedure all over again. The rest of the site survey is basically</div> <div>repeating this procedure over and over again, effectively daisy-chaining throughout the</div> <div>building until all coverage needs are determined.</div>

Site-Survey-instruction-needed-regarding-AP-overlap

2016-01-29T08:38:18-0800 2016-01-29T12:00:19-0800 https://support.ruckuswireless.com/articles/000001672 2016-01-29T08:43:25-0800 monthly 0.8 admin,premium knowledge_article_2268 knowledge_article_2268 2013-02-24T19:44:18-0800 000001672 Validated (External) Premium Zoneplanner;ZonePlanner System network management System Network Management, ZonePlanner <div>The Antenna Pattern on Ruckus Zone Planner support only .ant file format. Other file formats are not supported for Antenna Pattern on Ruckus Zone Planner.</div>

Is Ruckus Zone Planner support antennas patterns with file format like (-*.h , -*.dia, -*.txt , *.msi )? If not, then which file it support

2016-01-29T08:43:25-0800 2016-01-29T12:00:16-0800 https://support.ruckuswireless.com/articles/000005474 2016-01-26T09:40:05-0800 monthly 0.8 admin,premium knowledge_article_2258 knowledge_article_2258 2016-01-26T09:40:05-0800 000005474 Validated (External) Premium Unleashed;RUCKUS Unleashed;RUCKUS Unleashed Mobile App Configuration;Firmware;Installation;Troubleshooting;Known issues and workarounds Configuration, Firmware, Installation, Troubleshooting, Known Issues and Workarounds, Unleashed If I have non-GA release Unleashed APs, can I recover them for use on a GA release? If you somehow have installed non-GA release version of Unleashed, perhaps as a demo/evaluation, they may not be correctly recognized, upgraded/downgraded, configured by your GA release Unleashed network Master AP. You need will need to manually install a GA release of Unleashed AP firmware on your non-GA release APs, and can follow this procedure to recover and re-use them. 1) you need to disconnect (or power off) your AP that is already on the .55 build, after you go/went thru the creation of the Unleashed network and got it setup as a new Master AP. 2) Now, factory default one of your other Unleashed pre-.55 build APs, and access it wirelessly thru the Configure.Me-XXYYZZ. 3) Open a browser to 'unleashed.ruckuswireless.com'. From the initial "What would you like to do?" screen, open Show AP Info, and click the Upgrade button. You can choose either the 200.0.9.9.608 or 200.1.9.12.55 image for your model of AP, downloaded from the Support site Unleashed products page for your model AP. <a href="https://support.ruckuswireless.com/products/82-unleashed#firmwares" target="_blank">https://support.ruckuswireless.com/products/82-unleashed#firmwares</a> 4) Proceed to upgrade the firmware with either image of Unleashed GA (200.0 or 200.1), and stop there. 5) Disconnect the newly upgraded AP from the network (or power off), and proceed to factory default and manually upgrade thru the Configure.Me-XXYYZZ for each other non 200.1.0.9.9.608 or 200.1.9.12.55 image of Unleashed APs. 6) When all these are on a GA version, you can reconnect/power on your first .55 build AP that has the Unleashed network configured. (before you power up/connect the others) 7) Connect to the Unleashed SSID you configured on your first .55 Master AP, go to the 'unleashed.ruckuswireless.com' URL and make sure you are where you left it. 8) Now, connect those other recently upgraded/downgraded APs, that are now running an official GA version 200.0.9.9.608 or 200.1.9.12.55, and they will be recognized by your Master AP, join and get configured correctly.

Unleashed APs running GA release code will recognize/upgrade/downgrade/configure other GA release Unleashed APs. If you somehow are running a non-GA release of Unleashed, these are the necessary steps to recover them for use.

2016-01-26T09:40:05-0800 2016-01-26T12:00:16-0800 https://support.ruckuswireless.com/articles/000003445 2014-09-25T08:58:58-0700 monthly 0.8 admin,premium knowledge_article_1318 knowledge_article_1318 2014-09-25T04:16:04-0700 000003445 Validated (External) Premium Zoneflex 7731 Configuration Configuration, ZoneFlex 7731 How many Non Root Bridges can be connected to a Root Bridge? We support a maximum of 4 Non Root Bridges for a single Root Bridge, within 30 degrees. Set the RB Distance value to the distance for the farthest NRB.

This article gives information about the maximum number of non root bridges that can be connected to a root bridge.

2014-09-25T08:58:58-0700 2016-01-18T01:20:36-0800 https://support.ruckuswireless.com/articles/000001842 2015-07-10T09:53:58-0700 monthly 0.8 admin,premium knowledge_article_2017 knowledge_article_2017 2013-03-15T10:09:25-0700 000001842 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector What is the default ip address of a ZD The default ip address of ZD is 192.168.0.2 Note: By default the ZD is DHCP client, so it will receive an IP once connected to the network with a DHCP server.

2015-07-10T09:53:58-0700 2016-01-13T08:35:05-0800 https://support.ruckuswireless.com/articles/000004823 2016-01-11T13:39:53-0800 monthly 0.8 admin,premium knowledge_article_2251 knowledge_article_2251 2015-07-02T08:32:41-0700 000004823 Validated (External) Premium Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Configuration Configuration, SPoT Where can I find latest SPoT API reference guide? Some common SPoT API use cases include: a. Querying particular client MAC's presence b. Finding visitor count c. Pushing coupons or notifications if a user is found prior through API The SPoT API details and json format structures are described in the API Explorer page section of the User Guide, found under the Documents section of the products Cloud Hosted SPoT or Virtual SPoT. https://support.ruckuswireless.com/products/74-cloud-hosted-spot#documents https://support.ruckuswireless.com/products/76-vspot#documents Alternately, you can find an HTML version by going to your SPoT LBS. For example: If your LBS is located at https://abccompany.ruckuslbs.com, your API reference guide can found at https://abccompany.ruckuslbs.com/api_explorer.

This article mentions location of latest API reference guide for the SPoT product.

2016-01-11T13:39:53-0800 2016-01-11T18:00:21-0800 https://support.ruckuswireless.com/articles/000005374 2016-01-11T15:39:05-0800 monthly 0.8 admin,premium knowledge_article_2249 knowledge_article_2249 2016-01-11T15:39:05-0800 000005374 Validated (External) Premium Scg 200 System network management;Troubleshooting System Network Management, Troubleshooting, SCG 200 How can I see the total amount and memory currently used via SNMP ? Ruckus uses the Host Resource MIB for CPU, Memory and Disk info. You can use the following OIDs for checking the total amount of memory in the system and also what is currently used. Example snmpwalk -c public 192.168.10.200 1.3.6.1.2.1.25.2.3.1.3.1 HOST-RESOURCES-MIB::hrStorageDescr.1 = STRING: Physical memory Measured in Kilobytes snmpwalk -c public 192.168.10.200 1.3.6.1.2.1.25.2.3.1.4.1 HOST-RESOURCES-MIB::hrStorageAllocationUnits.1 = INTEGER: 1024 Bytes Total memory available: snmpwalk -c public 192.168.10.200 1.3.6.1.2.1.25.2.3.1.5.1 HOST-RESOURCES-MIB::hrStorageSize.1 = INTEGER: 49361792 Amount of memory used at the moment: snmpwalk -c public 192.168.10.200 1.3.6.1.2.1.25.2.3.1.6.1 HOST-RESOURCES-MIB::hrStorageUsed.1 = INTEGER: 19269768 In this example we see that the system has 49361792 KB memory and currently 19269768 KB is used.

How can I see the total amount and memory currently used via SNMP ?

2016-01-11T15:39:05-0800 2016-01-11T18:00:17-0800 https://support.ruckuswireless.com/articles/000005382 2016-01-04T04:31:57-0800 monthly 0.8 admin,premium knowledge_article_2246 knowledge_article_2246 2016-01-04T04:31:57-0800 000005382 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) System network management;Troubleshooting;Known issues and workarounds System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Insight How do I restart the BI server in SCI 1.x? Enter the following command in the SCI host's bash CLI when logged in as root: [~] # service bi-server restart Wait up to 5 minutes before checking the status of the server via the web interface again. If the service has not recovered, please contact Ruckus Wireless support for further assistance.

This article explains how to restart the BI server on SCI 1.x when the analytic DB is up, but the BI server reports down

2016-01-04T04:31:57-0800 2016-01-04T06:00:14-0800 https://support.ruckuswireless.com/articles/000005323 2015-12-23T10:44:29-0800 monthly 0.8 admin,premium knowledge_article_2243 knowledge_article_2243 2015-12-23T10:44:29-0800 000005323 Validated (External) Premium Scg 200;Virtual smartcell gateway;Sz100;SmartZone 100-D (SZ100-D) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, SCG 200, virtual SmartCell Gateway, SZ100 Can I change the MTU size of the SpeedFlex packets ? The Speedflex test MTU size can only be changed by using the API as test tool for Speedflex. (no function in CLI or webgui). Please use the following API command with its attributes to do a SpeedFlex test with a different MTU. <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008v96&feoid=00N50000002Cf3M&refid=0EM500000005bqP"></img>

This shows how to change the default MTU size of SpeedFlex packets.

2015-12-23T10:44:29-0800 2015-12-23T12:00:15-0800 https://support.ruckuswireless.com/articles/000005317 2015-12-21T16:04:03-0800 monthly 0.8 admin,premium knowledge_article_2241 knowledge_article_2241 2015-12-21T16:04:03-0800 000005317 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Why IOS clients fail to download any apps from Apple Store? Allowing access to app download from Apple Server under web filter resolved the issue

IOS clients fail to download any apps from Apple Store

2015-12-21T16:04:03-0800 2015-12-21T18:00:14-0800 https://support.ruckuswireless.com/articles/000004580 2015-12-21T09:32:56-0800 monthly 0.8 admin,premium knowledge_article_1877 knowledge_article_1877 2015-05-19T09:57:59-0700 000004580 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Troubleshooting;Known issues and workarounds Installation, Troubleshooting, Known Issues and Workarounds, ZoneDirector What PSU ordering part number do I need for a spare ZD1200 or R710 AP power supply? ZD1200 spare power supplies are available since the May2015 price list. <table border="0" cellpadding="0" cellspacing="0" style="width: 767px;" width="767"><tbody><tr style="height: 19px;"><td colspan="1" rowspan="1" style="width: 121px; height: 19px;">902-1169-US00</td><td colspan="1" rowspan="1" style="width: 520px; height: 19px;">Spares of US Power Adapter for ZoneFlex R710, ZoneDirector 1200- quantity of 1</td><td colspan="1" rowspan="1" style="width: 126px; height: 19px;">$20 </td></tr></tbody></table>

ZD1200 (and R710 AP) have different amperage PSUs incompatible with ZD1100

2015-12-21T09:32:56-0800 2015-12-21T12:00:14-0800 https://support.ruckuswireless.com/articles/000005368 2015-12-17T14:47:26-0800 monthly 0.8 admin,premium knowledge_article_2239 knowledge_article_2239 2015-12-17T14:47:26-0800 000005368 Validated (External) Premium Smartcell gateway;Smartcell ap;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Performance;Known issues and workarounds Performance, Known Issues and Workarounds, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway, SZ100 SZ: What happens when an AP loses connectivity? Q: On a SZ, what happens when: <ul><li>AP loses the SSH connection to SZ, before it reboots</li><li>AP reboots, but cannot find a SZ</li><li>AP is factory reset, still running SZ code but cannot find a controller.</li></ul> Customer wants to know what SSIDs are broadcast (if any) in each of the 3 situations. He's hoping that the SSID gets turned off when the AP loses connectivity to the SZ so that clients do not connect to an AP if the AP has no upstream connectivity. He'd also like to see the island SSID comes up so that he can find the disconnected AP. A: The AP should reboot after the first 2 hours, then will not reboot again. Local auth (WEP/WPA2-PSK) will work, but anything that depends on controller interaction will fail (802.1x, HotSpot, Guest Access, WebAuth). Testing this out and our AP worked for 2 weeks without a controller. If you Factory Default the AP then it’s done, it will not be able to provide service until it’s able to connect back to the controller to get it’s config again. No standalone option for SZ based AP. Smart monitor will check the gateway and if it is not reachable will turn off the SSIDs. This option in the AP Zone config prevents users from joining a network when the Internet is not available. There can still be Internet if the access points can't find the SZ so that is why SSIDs will still be on. <img alt="User-added image" height="183" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vHo&feoid=00N50000002Cf3M&refid=0EM500000005ldG" width="570"></img> <img alt="User-added image" height="475" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka2500000008vHo&feoid=00N50000002Cf3M&refid=0EM500000005ldV" width="569"></img>

AP Reboot Timeout and Smart Monitor can affect disconnected SmartZone AP behavior.

2015-12-17T14:47:26-0800 2015-12-17T18:00:23-0800 https://support.ruckuswireless.com/articles/000004258 2015-12-16T09:03:30-0800 monthly 0.8 admin,premium knowledge_article_1672 knowledge_article_1672 2015-03-25T13:20:02-0700 000004258 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector What are the known limitations of Bonjour Gateway in ZDs and APs? I. Bridge Service Rules 1. The number of ZoneDirector Bonjour Gateway Bridge Service Rules that you create can have a negative impact on memory and CPU resources. Maximum Bonjour Gateway Rules: ZoneDirector 1100 (without Smart Redundancy): 64 ZoneDirector 1100 (with Smart Redundancy): 32 ZoneDirector 1200/3000/5000: 256 If a user has created more than the max number of Bonjour Gateway rules in a previous release, all existing rules will be kept after upgrading to 9.9+. Users can edit and delete the existing rules, but are not allowed to create new rules until the total number is lower than these maximums. 2. Avoid defining Bonjour Bridge Service rules for the same service To and From the same VLANs. Bridging the same service (ie AirPrint) from VLAN 5 to VLAN 10, and from VLAN 10 to VLAN 5 can result in loops that can cause service record maximum to be exceeded. 3. Common Bonjour Bridge Services include multiple service types, and each takes up one service record. In heavy use and if using AirPrint, AirPlay, and AppleTV at a site/location, consider defining one service on each of 3 different AP Bonjour Gateways to distribute the memory/CPU utilization. Consider 7982 and higher model APs for dedicated AP Bonjour Gateways. Each AirPrinter may take up to 4 service entries if it supports _ipp._tcp, _printer._tcp, and _universal._ipp._tcp. <mdnsservice name="AirPrint" id="4"> <service type="_ipp._tcp."/> <service type="_ipps._tcp."/> <service type="_universal._ipp._tcp."/> <service type="_printer._tcp."/> </mdnsservice> Each Airplay will have 2 service entries: <mdnsservice name="AirPlay" id="2"> <service type="_airplay._tcp."/> <service type="_raop._tcp."/> </mdnsservice> Apple File Server will have at least one service entry depending on what is enabled: <mdnsservice name="Apple File Sharing" id="6"> <service type="_afpovertcp._tcp."/> </mdnsservice> So if you multiply that by # of printers and Apple TVs, it may exceed a 500 limit easily. II. Bridge Service Records There is a 500 Bridge Service Record maximum for ZoneDirectors and APs serving as a Bonjour Gateway. Maximum number of service records supported for Bonjour Gateway: A service record consumes about 4K bytes memory. In order ensure that there is enough memory to do other tasks, the number of services is limited to 500 by design irrespective of whether it is ZD or AP based Bonjour Gateway. Thus, maximum memory consumed is limited to 2 Megabytes. It should be noted that actual service that end user sees can take 2 or more service records. Air Play for example takes 2 service records: one for video and one for audio.

This article provides information about the limitations of different ZD/AP Models for supporting Bonjour gateway.

2015-12-16T09:03:30-0800 2015-12-16T12:00:22-0800 https://support.ruckuswireless.com/articles/000004273 2015-12-16T09:46:09-0800 monthly 0.8 admin,premium knowledge_article_2235 knowledge_article_2235 2015-03-27T07:31:23-0700 000004273 Validated (External) Premium R300;Ruckus R300 Configuration;Installation Configuration, Installation, R300 Does R300 support Mesh functionality? The 2x2:2 802.11n R300 Access Point does not support SmartMesh functionality.

Mesh functionality is not included in R300 AP.

2015-12-16T09:46:09-0800 2015-12-16T12:00:17-0800 https://support.ruckuswireless.com/articles/000003347 2015-06-09T10:22:59-0700 monthly 0.8 admin,premium knowledge_article_1257 knowledge_article_1257 2014-09-03T10:03:35-0700 000003347 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;System network management Performance, Configuration, System Network Management, ZoneDirector I want to know the limitation of local database. when the local database was selected to be the authentication server, the username/password can be shared by multiple clientd. What's the max number of clients to share the same username? <div id="cke_pastebin" style="width: 1px; height: 1px;"> </div> There is no specified maximum. To be more specific, the session limit for a given username stored in the local DB is not specified. You should be able to get to to the maximum concurrent user limit of the ZD model. Please note, local db entries include any user - DPSK, admin, guest pass, local WEB auth, Zero-IT certs...

ZD local database holds many user types.

2015-06-09T10:22:59-0700 2015-12-16T01:41:07-0800 https://support.ruckuswireless.com/articles/000004245 2015-04-02T16:41:26-0700 monthly 0.8 admin,premium knowledge_article_1696 knowledge_article_1696 2015-03-24T09:41:04-0700 000004245 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;System network management Performance, System Network Management, ZoneDirector What is the threshold value for the SNMP trap for high memory and CPU utilization? There are two SNMP traps: ruckusZDEventSystemCpuUtilExceedValve & ruckusZDEventSystemMemUtilExceedValve, which are useful in notifying when the CPU or memory utilization exceeds a threshold value. The threshold value is 80% for both CPU and memory utilization.

This article gives the threshold value for two of the SNMP traps.

2015-04-02T16:41:26-0700 2015-12-15T17:12:20-0800 https://support.ruckuswireless.com/articles/000005358 2015-12-11T10:00:25-0800 monthly 0.8 admin,premium knowledge_article_2234 knowledge_article_2234 2015-12-11T10:00:25-0800 000005358 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can I tell if there are any 802.11b only Legacy wireless clients? Client capabilities (CAPS) and state (STATE) fields indicate the capabilities determined from beacon responses and the state of capabilities that are available. These are displayed in AP support info or can be shown in real time from AP or ZD commands. The AP CLI ‘get station wlanX list’ command interprets client capabilities into a string format. rkscli: get station wlan0 list all ADDR AID VLAN CHAN RSSI IDLE CAPS STATE HTCAPS/VHTCAPS ADMITTEDBW 1c:99:4c:fe:ed:70 1Y 16 1 50 0 ESS SHTPRE SHTS QOS ERP HT PWRMGT HS20 LDPC SGI20 0 WME a0:b4:a5:81:c5:9e 2Y 16 1 42 0 ESS SHTPRE SHTS QOS ERP HT PWRMGT SGI20 RXSTBC 0 WME fc:c2:de:c5:bf:45 3Y 16 1 31 0 ESS SHTPRE SHTS QOS ERP HT PWRMGT LDPC SGI20 0 WME From our AP perspective, we can take a few snapshots over time to see what clients are using our customer’s network. For instance, the following output from an AP shows no b-only client associated to its wlan0. Note, a b-only client can be identified with CAPS without ERP and HT. If we can sample this kind of data across the APs on a customer network, we should be able to confidently tell the existence/distribution of relevant 11b clients. ZD Remote AP command example: ruckus> enable ruckus# debug ruckus(debug)# remote_ap_cli -a c4:10:8a:3f:3d:b0 "get station wlan0 list" ---- Command 'rkscli -c "get station wlan0 list "' executed at c4:10:8a:3f:3d:b0 ADDR AID VLAN CHAN RSSI IDLE CAPS STATE HTCAPS 80:60:07:1d:ce:40 1Y 435 9 23 15 ESS SHTPRE SHTS QOS ERP HT UAPSD OWL ST-PS SGI20 RXSTBC GFLD WME 40:6a:ab:07:90:86 4Y 435 9 32 0 ESS SHTPRE SHTS QOS ERP PWRMGT UAPSD Normal WME 28:e0:2c:46:c2:66 5Y 435 9 25 0 ESS SHTPRE SHTS QOS ERP HT PWRMGT OWL MAXMSDU WME 70:aa:b2:7a:f3:91 2Y 435 9 19 165 ESS SHTPRE SHTS QOS ERP HT PWRMGT UAPSD ST-PS SGI20 RXSTBC GFLD WME 30:39:26:9c:95:ae 3Y 435 9 29 0 ESS SHTPRE SHTS QOS ERP HT PWRMGT OWL SGI20 WME

AP support info includes Client statistics and capabilities information, that can help determine if 802.11b clients exist.

2015-12-11T10:00:25-0800 2015-12-11T12:00:16-0800 https://support.ruckuswireless.com/articles/000004046 2015-12-11T10:08:43-0800 monthly 0.8 admin,premium knowledge_article_1705 knowledge_article_1705 2015-04-03T16:18:05-0700 000004046 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Firmware;System network management Performance, Firmware, System Network Management, ZoneDirector Can we determine the 802.11ac capabilities of connected wireless clients? Go to the Monitor-Wireless Clients and click on MAC address of the client and locate AP Tx Data Rate section under General. This section shows the MCS Rate (Modulation Code Scheme) which relates to throughput capability, channel bandwidth for the session (80 or 40 MHz), Spatial Stream, and Phy Layer speed of an AC client. Phy Layer speed more than 300Mbps on 5GHz channel, indicates client is 802.11ac. Speed around 150Mbps indicates client is 802.11n and speeds at 20Mbps with low MCS on channels between 1-11 indicates client is 802.11g. Client capabilities (CAPS) and state (STATE) fields indicate the capabilities determined from beacon responses and the state of capabilities that are available, including HT. The AP CLI ‘get station wlanX list’ command interprets client capabilities into a string format.

This article has information about the client statistics throughput capability, channel bandwidth for the session, Spatial Stream, and PHY Layer speed, which can be used to identify higher capability wireless Clients.

2015-12-11T10:08:43-0800 2015-12-11T12:00:14-0800 https://support.ruckuswireless.com/articles/000005355 2015-12-10T13:31:21-0800 monthly 0.8 admin,premium knowledge_article_2230 knowledge_article_2230 2015-12-10T11:26:45-0800 000005355 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can I usnderstand Client STA details? AP CLI command: get mqstats. Client media queue and station information, in packets, accumulated since STA associates and discarded when a client roams. # enq = original data packets queued for transmission. # deq = the number of packets transmitted. # reenq = number of packets that are attempted to be transmitted again (re-enqueued). # deact is related to transmission scheduling, and is not meaningful. <div style=""> qued: # of packets currently in this queue. Will usually be 0 but sometime you can catch it with a few packets. ovrflw: # packets dropped from tail of queue due to the queue being ‘full’ (at the max limit for this packet class) enq: # of packets enqueued to the tail of the queue deq: # of packets dequeued from the head of the queue (includes retries) reenq: # of packet re-enqueued to head of the queue (due to retries) deact: # of times this queue was deactivated from the scheduler due to being empty (usually not important) XRetries: # of packets dropped due to excessive number of retries (usually 20). </div> --- MQ Stats --- -- wlan0 -- STA: 00:40:96:a8:f7:86 AID:1 ----------------------------------------------------------------------------------- Qued ovrflw enq deq reenq deact XRetries XTlimits AirtimeCrd voice(0) X: 0 0 118 166 48 166 0 0 4000 video(2) X: 0 0 316 479 163 6115 0 0 44 data(4) X: 0 0 201 322 121 2875 0 0 4000 bkgnd(6) X: 0 0 1601 2134 533 7556 1 68 3880 XTlimits indicates how many times packets exceeded the holding time limit. If the AP can't dequeue the packet before holding time expires (these holding time limits are different for different types of traffic meaning, data, background, video, voice) it will drop it. XTlimit value is significant in the support info. All queue columns showing some major figures, usually indicates too much interference or too much incoming data from the wire side. Look for too much broadcast traffic on the network, and how big is the broadcast domain, and what type of clients are on the network? If interference on the radio band doesn’t look bad, it may be wire traffic driving client queue limits to max.

Client Media Queue statistics help understand the health of a wireless client connection, and the queues used to transmit/receive their traffic.

2015-12-10T13:31:21-0800 2015-12-10T18:00:18-0800 https://support.ruckuswireless.com/articles/000003950 2015-01-23T03:09:00-0800 monthly 0.8 admin,premium knowledge_article_1568 knowledge_article_1568 2015-01-23T03:09:00-0800 000003950 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway What is the CLI command to move an AP from one zone to another zone in vSCG? Following are the commands to move an AP from one zone to another zone in vSCG ruckus(config)# ap <mac> ruckus(config-ap)# zone <name>

This article give you the CLI command to move an AP from one Zone to another Zone.

2015-01-23T03:09:00-0800 2015-12-09T08:46:08-0800 https://support.ruckuswireless.com/articles/000005329 2015-12-03T23:19:18-0800 monthly 0.8 admin,premium knowledge_article_2226 knowledge_article_2226 2015-12-03T23:19:18-0800 000005329 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Known issues and workarounds Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Why does the encrypt-mac-ip command revert to enabled after rebooting? Upgrade to SZ 3.1.x, where the issue has already been patched. If upgrading is not possible, please reach out to Ruckus support, quoting this article for a patch.

This article explains that the encrypt-mac-ip command settings will revert to "true" after rebooting an SZ controller running 3.0.x

2015-12-03T23:19:18-0800 2015-12-04T00:00:13-0800 https://support.ruckuswireless.com/articles/000004047 2015-03-19T09:19:38-0700 monthly 0.8 admin,premium knowledge_article_1656 knowledge_article_1656 2015-03-19T09:19:38-0700 000004047 Validated (External) Premium Installation;Troubleshooting Installation, Troubleshooting How to Factory Default ZD1200 Note : Resetting ZoneDirector to factory default settings will erase all configuration changes that you made, except for AP licenses and SSL certificates. On the front of the unit you would find hole with F/D, you need to use paper clip insert/press and hold it more then 5-10 seconds once you release should observer the STATUS led with red and then with flashing Green which indicates the unit has been successfully factory defaulted/reset Below is the screenshot of it : <img alt="User-added image" height="224" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNqI&feoid=00N50000002Cf3M&refid=0EM50000000LebO" width="500"></img>

Need assistance on factory default/reset Zone Director 1200

2015-03-19T09:19:38-0700 2015-12-03T02:43:02-0800 https://support.ruckuswireless.com/articles/000004566 2015-11-30T15:23:15-0800 monthly 0.8 admin,premium knowledge_article_1917 knowledge_article_1917 2015-05-17T18:27:01-0700 000004566 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Troubleshooting Troubleshooting, SmartCell Insight Why am I seeing '-' in my custom report The issue requires assistance from both Pentaho and Ruckus and will be reviewed in later releases.

when creating custom report all but the first row and last column are shown as blanks.

2015-11-30T15:23:15-0800 2015-11-30T18:00:17-0800 https://support.ruckuswireless.com/articles/000005302 2015-11-24T09:48:30-0800 monthly 0.8 admin,premium knowledge_article_2212 knowledge_article_2212 2015-11-17T09:51:57-0800 000005302 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Firmware Firmware, SmartCell Gateway, virtual SmartCell Gateway, SZ100 What do the digits mean in my SmartZone Report filenames? Q: I’m looking for the signification of the SZ report file name. Here the file name of an SZ report : NewClientAssoc-2015-11-12_00-00-02-399_19.cvs If the pattern is <report name>-YYYY-MM-DD_HH-MM-SS-XXX_ZZ, what does XXX_ZZ mean? A: The “XXX" is a milliseconds, while “ZZ" is a random number between 0-99. Admin guides have been updated: SCG Admin guide: <a href="https://support.ruckuswireless.com/admin/documents/798-smartzone-3-1-1-administrator-guide-scg-200-vsz-h" target="_blank">https://support.ruckuswireless.com/admin/documents/798-smartzone-3-1-1-administrator-guide-scg-200-vsz-h</a> SZ Admin guide: <a href="https://support.ruckuswireless.com/admin/documents/787-smartzone-3-1-1-administrator-guide-sz-100-vsz-e" target="_blank">https://support.ruckuswireless.com/admin/documents/787-smartzone-3-1-1-administrator-guide-sz-100-vsz-e</a> SCG-3.0: <a href="https://support.ruckuswireless.com/admin/documents/579-scg-200-administrator-guide-for-ruckos-3-0" target="_blank">https://support.ruckuswireless.com/admin/documents/579-scg-200-administrator-guide-for-ruckos-3-0</a> SCG-2.6: <a href="https://support.ruckuswireless.com/admin/documents/596-scg-2-6-administrator-guide" target="_blank">https://support.ruckuswireless.com/admin/documents/596-scg-2-6-administrator-guide</a> SZ-3.0: <a href="https://support.ruckuswireless.com/admin/documents/647-sz-100-administrator-guide-for-ruckos-3-0" target="_blank">https://support.ruckuswireless.com/admin/documents/647-sz-100-administrator-guide-for-ruckos-3-0</a>

SmartZone report filenames include a string of digits after the text. This article outlines the details of these digits.

2015-11-24T09:48:30-0800 2015-11-24T12:00:20-0800 https://support.ruckuswireless.com/articles/000002700 2014-04-02T06:23:13-0700 monthly 0.8 admin,premium knowledge_article_878 knowledge_article_878 2014-02-25T08:31:50-0800 000002700 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor If we connect an AP in 9.6 to a ZD1000 in 9.3, will the ZD downgrade the AP to 9.3? When an AP in higher version is connected to a ZD in lower version then ZD will downgrade the firmware on the AP to match the version on the ZD as long as the AP model is supported in that version. Ex: If a ZF-7363 and ZF-7982 in 9.6.1.0.15 version are connected to a ZD1000 in 9.3.4.0.21 then ZD1000 will downgrade ZF-7363 to 9.3.4.0.21 but it will not accept the connection from ZF-7982 as it is not supported in 9.4.

Change in the firmware on the AP after connecting to ZD

2014-04-02T06:23:13-0700 2015-11-22T22:44:03-0800 https://support.ruckuswireless.com/articles/000003718 2014-11-28T03:08:40-0800 monthly 0.8 admin,premium knowledge_article_1464 knowledge_article_1464 2014-11-28T03:08:40-0800 000003718 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Virtual smartcell gateway Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor, virtual SmartCell Gateway What are the AP models supported on vSCG release version 2.5.0.1.174 The below mentioned are the supported Access Point Models, • R300 • R700 • SC8800-S • SC8800-S-AC • ZF7025 • ZF7055 • ZF7321 • ZF7321-U • ZF7341 • ZF7343 • ZF7351 • ZF7351-U • ZF7352 • ZF7363 • ZF7363-U • ZF7372 • ZF7372-E • ZF7441 • ZF7761CM • ZF7762 • ZF7762-AC • ZF7762-S • ZF7762-S-AC • ZF7762-T • ZF7781CM • ZF7782 • ZF7782-E • ZF7782-N • ZF7782-S • ZF7962 • ZF7982

This article provides information on the AP models that are supported on vSCG with version 2.5.0.1.174

2014-11-28T03:08:40-0800 2015-11-12T14:19:24-0800 https://support.ruckuswireless.com/articles/000005299 2015-11-10T13:27:08-0800 monthly 0.8 admin,premium knowledge_article_2208 knowledge_article_2208 2015-11-10T11:07:46-0800 000005299 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation;Known issues and workarounds Configuration, Firmware, Installation, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway What changes could affect my APs upgrading to SmartZone 3.2 release? NOTE: Starting in this release, AP firmware upgrade is performed using HTTPS port 11443 (earlier releases use HTTP port 91). To ensure that all APs can be upgraded successfully to the new firmware, open both ports 11443 and 91 in the network firewall. The current SZ 3.2 Release Notes have been posted online: https://support.ruckuswireless.com/documents/863-smartzone-3-2-ga-release-notes

Starting in SZ 3.2 release, AP firmware upgrade is performed using HTTPS port 11443. Earlier releases use HTTP port 91. To ensure that all APs can be upgraded successfully to the new firmware, open both ports 11443 and 91 in the network FW.

2015-11-10T13:27:08-0800 2015-11-10T18:00:15-0800 https://support.ruckuswireless.com/articles/000005268 2015-11-04T12:54:39-0800 monthly 0.8 admin,premium knowledge_article_2206 knowledge_article_2206 2015-11-04T12:50:23-0800 000005268 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell ap;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartZone 100-D (SZ100-D) Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP, SZ100 Does Ruckus offer any 802.11ac AP migration upgrade incentives? See the official TradeUP marketing program details, describing the available ZD controller and 802.11ac model AP alternatives, and Terms and Conditions, until December 31, 2015. <a href="http://marketing.ruckuswireless.com/acton/attachment/3040/f-0459/1/-/-/-/-/Tradeup_Customer_Dec302015.pdf" target="_blank">http://marketing.ruckuswireless.com/acton/attachment/3040/f-0459/1/-/-/-/-/Tradeup_Customer_Dec302015.pdf</a> Contact your local Ruckus VAR/Distributor or account team asap to take part in this program!

Ruckus Sales/Mktg has offered a limited time AP discount/rebate program to help migrate customers from Legacy/EoL AP products to latest 802.11ac Wave1/Wave2 technology/support platforms. Titled TradeUP, see the eligible EoL product replacements in the attached link.

2015-11-04T12:54:39-0800 2015-11-04T18:00:21-0800 https://support.ruckuswireless.com/articles/000005254 2015-11-02T10:56:58-0800 monthly 0.8 admin,premium knowledge_article_2198 knowledge_article_2198 2015-11-02T10:56:58-0800 000005254 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SmartCell Insight How can I verify SCI input is enabled from a vSZ controller? Q: If using vSZ-E with SCI do I need to do the equivalent of the commands below to enable and show config, and/or what is the equivalent for vSZ-H? Enable AP to send stats: enable Password: *********** config ap-sci enable exit show running-config zoneglobal ap-sci A: The show command above does not work for vSZ-H. Changed to increase compatibility between products, the correct show command is: show running-configu common-settings ap-sci

There are vSZ commands to enable SCI and confirm input from vSZ controllers.

2015-11-02T10:56:58-0800 2015-11-02T12:00:18-0800 https://support.ruckuswireless.com/articles/000005225 2015-10-23T10:13:14-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_2190 knowledge_article_2190 2015-10-23T10:13:14-0700 000005225 Validated (External) Public Flexmaster;FlexMaster Installation Installation, FlexMaster Why can't I install FM 9.12.1 with RHL 7.1? FM 9.12.1, and previous versions of FM, does not support RHL7.1. FM is support on these OS: RedHat Enterprise 5.5(64 bit) or RedHat Enterprise 6.5(64 bit). CentOS release 6.3 (64 bit) or CentOS release 6.5(64 bit).

Getting error of mysql//data/flexmaster.err folder doesn't exist. The installation does not proceed after getting various of these error messages.

2015-10-23T10:13:14-0700 2015-10-23T15:00:15-0700 https://support.ruckuswireless.com/articles/000003873 2015-09-22T10:52:54-0700 monthly 0.8 admin,premium knowledge_article_1925 knowledge_article_1925 2015-01-09T06:16:15-0800 000003873 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Does Android 5.0 (Lollipop) support Zero-IT ? As of now Zero-IT is compatible with Android 4.4.4 and lower OS clients. Android 5.0 (Lollipop) Support for Zero-IT will be included in upcoming releases. Current latest update for minor issues targets ZeroIT for Lollipop in 9.12.2 release. -- Compare following release notes for Zero-IT supported compatible OS client devices 9.12.0.0.336 Release notes: https://support.ruckuswireless.com/documents/760-zonedirector-9-12-ga-release-notes 9.10.0.0.218 Release notes: https://support.ruckuswireless.com/software/705-zd1200-9-10-0-0-218-ga-software-release 9.9.0.0.216 Release notes: https://support.ruckuswireless.com/documents/666-zoneflex-9-9-ga-refresh-2-release-notes 9.8.2.0.15 Release notes: https://support.ruckuswireless.com/documents/568-zoneflex-9-8-2-mr-9-8-mr2-release-notes 9.7.2.0.9 Release notes: https://support.ruckuswireless.com/documents/488-zoneflex-9-7-2-mr-release-notes

Zero-IT compatibility with Android 5.0 (Lollipop) OS client devices

2015-09-22T10:52:54-0700 2015-10-20T08:11:59-0700 https://support.ruckuswireless.com/articles/000005200 2015-10-14T15:02:51-0700 monthly 0.8 admin,premium knowledge_article_2183 knowledge_article_2183 2015-10-14T14:11:27-0700 000005200 Validated (External) Premium Virtual smartcell gateway Configuration;Firmware;Installation Configuration, Firmware, Installation, virtual SmartCell Gateway How do I install and do initial installation of Virtual SmartCell Gateway v2.5? Follow this <a href="http://www.demosondemand.com/html5/?sessID=RUCK023&promotion_id=2423&startTime=0" target="_blank">LINK</a> for a collection of Video sessions that go from introduction to installation and configuration of Virtual SCG (vSCG) v2.5. This is an instructor-led training, as our host walks thru the WebUI screens and describes the features/functions of the product and architecture.

An introduction to Virtual SCG platform environment and installation overview for the v2.5 vSCG product.

2015-10-14T15:02:51-0700 2015-10-14T21:00:17-0700 https://support.ruckuswireless.com/articles/000002847 2015-10-14T13:50:56-0700 monthly 0.8 admin,premium knowledge_article_2180 knowledge_article_2180 2014-03-26T07:45:36-0700 000002847 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor Lowered TX power on recommendation of the Client Vendor. Customer collected information that the SCALENCE from Siemens have problems with more then -40dB received power. As you could see in site survey map the WLAN is very strong. After reducing the transmission power by 3dB - there was no longer any indication of failed roaming of the S7 conveyors. This also affected the load balancing of the clients - Prior to this change usually one AP would have the max number of clients associated, and after the change the network shows one AP with 23 clients, one with 20 clients, as well as the other APs with less clients associated.

Client roaming issue indicated in syslog very often (more than 10000 per day) The S7 conveyor is stopped at a location and has lost its connection to the WLAN and IP

2015-10-14T13:50:56-0700 2015-10-14T15:00:14-0700 https://support.ruckuswireless.com/articles/000001456 2015-09-11T09:55:13-0700 monthly 0.8 admin,premium knowledge_article_2146 knowledge_article_2146 2013-01-18T15:40:09-0800 000001456 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management;Troubleshooting System Network Management, Troubleshooting, ZoneDirector How can a client on a Guest network on a different subnet connect to the ZD’s captive portal page on a different network when there is no route between the two networks? With the exception of a few specific traffic type (DHCP/DNS/ARP..) all client traffic are tunneled back to the ZD. Clients redirected the ZD’s login page (Guest/Standard Captive Portal or Hotspot), it’s traffic goes through the LWAPP tunnel and hits the ZD’s management interface, the ZD recoganizes the destination as it’s own interface so will accept the session and process the client’s web page access. The user can then enter the login credential. Once logged in all traffic will be dropped locally at the AP. NOTE: using the default self sign certificate the client will be redirected to the IP address of the ZD, if there is a valid server certificate installed, it will user the Common Name published on the certificate. This is why some time client cannot get re-directed to a CP/Guest/Hotspot page on the ZD. You can validate this by removing the certificate.

How can a client on a Guest network on a different subnet connect to the ZD’s captive portal page on a different network when there is no route between the two networks?

2015-09-11T09:55:13-0700 2015-10-06T13:45:18-0700 https://support.ruckuswireless.com/articles/000001625 2014-01-11T13:54:20-0800 monthly 0.8 admin,premium knowledge_article_560 knowledge_article_560 2013-02-24T19:44:40-0800 000001625 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What is the maximum length and type of characters we can use for SSID on a ZD? .Name/ESSID can contain between 2 and 32 characters, including characters from ! (char 33) to ~ (char 126). <img alt="User-added image" height="538" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PICA&feoid=00N50000002Cf3M&refid=0EM50000000LLo7" width="500"></img>

2014-01-11T13:54:20-0800 2015-09-24T21:22:13-0700 https://support.ruckuswireless.com/articles/000005127 2015-09-23T09:17:00-0700 monthly 0.8 admin,premium knowledge_article_2158 knowledge_article_2158 2015-09-23T09:17:00-0700 000005127 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Reduce Transmit power on the APs which will effectively cause clients to roam less as they will not see equally good signal from multiple APs.

The articles provides one of the possible resolutions to MAC Flap which causes APs not to accept new connections

2015-09-23T09:17:00-0700 2015-09-23T15:00:21-0700 https://support.ruckuswireless.com/articles/000005123 2015-09-22T08:57:25-0700 monthly 0.8 admin,premium knowledge_article_2153 knowledge_article_2153 2015-09-22T08:57:25-0700 000005123 Validated (External) Premium Virtual smartcell gateway System network management System Network Management, virtual SmartCell Gateway How to change the hostname of vSCG We need to SSH into the vSCG device to change the hostname. Ruckus(config) # hostname <New name> For Example : login as: admin ################################ # Welcome to vSZ # ################################ admin@172.19.9.137's password: Please wait. CLI initializing... Welcome to the Ruckus Virtual SmartZone - High Scale Command Line Interface Version: 3.1.1.0.450 RuckusTAC-Node2> en Password: *********** RuckusTAC-Node2# config RuckusTAC-Node2(config)# hostname Ruckus This command will restart some services. Do you want to continue (or input 'no' to cancel)? [yes/no] yes Ruckus(config)#

How to change the hostname of vSCG

2015-09-22T08:57:25-0700 2015-09-22T09:00:14-0700 https://support.ruckuswireless.com/articles/000004639 2015-06-04T01:16:37-0700 monthly 0.8 admin,premium knowledge_article_1919 knowledge_article_1919 2015-06-04T01:16:37-0700 000004639 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway Why do devices with the same IP as a user on another site fail authentication? Ensure every UE on a single cluster is assigned a distinct IP. This means allocating unique prefixes to each site, even if the site is behind NAT.

This article explains that UE IPs should be unique on the SCG controller. There should never be an instance where a UE shares an IP with another (which is common where sites are deployed behind NAT). Distinct prefixes should be used for each site.

2015-06-04T01:16:37-0700 2015-09-21T03:36:26-0700 https://support.ruckuswireless.com/articles/000005121 2015-09-18T19:29:24-0700 monthly 0.8 admin,premium knowledge_article_2152 knowledge_article_2152 2015-09-18T19:29:24-0700 000005121 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware Configuration, Firmware, ZoneDirector Can TFTP upgrade be done on a ZD beyond 9.8 version when it does not have Support contract? When trying to upgrade a ZD to any version beyond 9.8 version through TFTP method via CLI it will not upgrade unless there is active Support Entitlement for the ZD. The same thing applies if trying to upgrade a ZD via WebUI. Please check the following error you will get when trying to upgrade a ZD which does not have any Support contract: <img alt="User-added image" height="386" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQou&feoid=00N50000002Cf3M&refid=0EM50000000Ls2I" width="500"></img> NOTE: This KB article applies only when you are trying to upgrade a ZD to any version after 9.8.

The article explains the inability of a ZD to be upgraded to any version beyond 9.8 without an active Support contract

2015-09-18T19:29:24-0700 2015-09-18T21:00:22-0700 https://support.ruckuswireless.com/articles/000002039 2014-01-11T13:56:05-0800 monthly 0.8 admin,premium knowledge_article_538 knowledge_article_538 2013-08-12T19:31:19-0700 000002039 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Can we use ZoneDirector as Web Server For HotSpot Configuration? <div style="text-align: center; "> How to use ZoneDirector as Web Server For HotSpot Configuration</div> <div> Assign ZoneDirector Captive portal page URL https://<ZD IP Address>/user/user_login_auth.jsp to HotSpot login Page for Authentication.(ZoneDirector >> Configure >> Hotspot Services :: Login Page ) Example: https://192.168.15.66/user/user_login_auth.jsp <img alt="User-added image" height="465" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PI8U&feoid=00N50000002Cf3M&refid=0EM50000000LIJz" width="500"></img></div>

How to use ZoneDirector as Web Server For HotSpot Configuration

2014-01-11T13:56:05-0800 2015-09-15T13:43:07-0700 https://support.ruckuswireless.com/articles/000002570 2014-01-30T14:23:58-0800 monthly 0.8 admin,premium knowledge_article_706 knowledge_article_706 2014-01-30T14:23:58-0800 000002570 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor What happens when the UAM IP address is set to something other than the default which is the 10.1.0.1? In configuring the hotspot on a standalone AP, when you change the UAM (Universal Access Method) IP address other than the default which is 10.1.0.1 it will not work. The 10.1.0.1 address is a virtual interface in the AP standalone Hotspot. It is associated to an internal interface, tap0, that is used as the destination for authentication. This interface acts as the captive portal redirect point and also where the login page sends user credentials for authentication. This communication stays between the wireless clients and the AP and is not forwarded out the AP. The client is redirected to web server that uses this IP in its' login page to post the users credentials.

2014-01-30T14:23:58-0800 2015-09-14T07:06:16-0700 https://support.ruckuswireless.com/articles/000003779 2014-12-18T10:13:27-0800 monthly 0.8 admin,premium knowledge_article_1508 knowledge_article_1508 2014-12-18T10:11:16-0800 000003779 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How do we enable LLDP for AP’s ZD discovery? LLDP- Link Layer Discovery Protocol This allow AP's to discover Zone Directors by L2. LLDP works like Microsoft Plug-n-Play, like the Zone Directors can be seen by laptops when you connect to their network, now APs will automatically discover ZD's on the same L2 network. ruckus> ruckus> en ruckus# config You have all rights in this mode. ruckus(config)# ap-group "System Default" The AP group entry 'System Default' has been loaded. To save the AP group, type 'end' or 'exit'. ruckus(config-apgrp)# lldp enable Enable lldp with current settings disable Disable lldp with current settings interval <NUMBER> Set packet transmit interval in second(s). holdtime <NUMBER> Set amount of time receiving device should retain the information. ifname Contains commands that can be executed from within the context. mgmt Contains commands that can be executed from within the context. ruckus(config-apgrp)# lldp enable Use the ‘show’ command after enabling LLDP to see the status on the ZD: ruckus(config-apgrp)# show APGROUP: ID: 1: Name= System Default Description= System default group for Access Points MLD Query v1= Disabled MLD Query v2= Disabled IGMP Query v2= Disabled IGMP Query v3= Disabled Location Base Service: State = Disabled Location Server = NA Channel Range: B/G/N= 1,2,3,4,5,6,7,8,9,10,11 (Disallowed= ) A/N Indoor= 36,40,44,48,149,153,157,161 (Disallowed= ) A/N Outdoor= 149,153,157,161 (Disallowed= ) Radio 11bgn: Channelization= Auto Channel= Auto Tx. Power= Auto 11N only Mode= Auto WLAN Group= Default Call Admission Control= OFF SpectraLink Compatibility= Disabled Radio 11an: Channelization= Auto Indoor Channel= Auto Outdoor Channel= Auto Tx. Power= Auto 11N only Mode= Auto WLAN Group= Default Call Admission Control= OFF SpectraLink Compatibility= Disabled Network Setting: Protocol mode= IPv4 and IPv6 Turn off channfly setting: state= Disabled if AP's uptime is more than 30 minutes will turn off AP's ChannelFly Members: MAC= 50:a7:33:11:3e:80 MAC= c4:10:8a:3f:2b:30 LLDP: Status = Enabled Interval = 30 HoldTime = 120 Mgmt = Enabled Ports: Send out LLDP packet on eth0 = Enabled Send out LLDP packet on eth1 = Enabled Send out LLDP packet on eth2 = Enabled Send out LLDP packet on eth3 = Enabled Send out LLDP packet on eth4 = Enabled Send out LLDP packet on eth5 = Enabled ruckus(config-apgrp)#

This article describes on how to enable LLDP on the ZD via CLI

2014-12-18T10:13:27-0800 2015-09-11T19:54:44-0700 https://support.ruckuswireless.com/articles/000001968 2015-09-10T16:41:20-0700 monthly 0.8 admin,premium knowledge_article_318 knowledge_article_318 2013-04-26T16:17:12-0700 000001968 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Can I manually disable my unused AP LAN ports for security? Admins can disable Ethernet ports on the AP to avoid users plugging into the un-used ports and bypass authentication. Below are the commands which are tested and found to be working. In case the AP is a stand alone AP : =========================== Login to the command line interface of the AP using putty/SSH . Execute the command "get eth" to display the current status of the ethernet ports on the stand alone AP. Identify the Ethernet port number which have to be enabled/disabled and execute the command "set eth <interface name> enable/disable" . In case the AP is managed by a ZoneDirector : =================================== Login to the command line interface of the ZoneDirector and get in to the Enable mode, then run the following commands from Debug mode. Ruckus>en Ruckus#debug Ruckus(debug)#remote_ap_cli -a <ap mac> get eth ---- This command show the current status of the ethernet ports of that partilcuar AP. Identify the interface which have to be enabled or disabled and run the below command. Ruckus(debug)# remote_ap_cli -a <ap mac> 'set eth eth0/1/2 enable/disable' [ on Eth0, Eth1, or Eth2, and Enable or Disable ]

You can manually disable unused Ethernet ports on APs.

2015-09-10T16:41:20-0700 2015-09-10T21:00:14-0700 https://support.ruckuswireless.com/articles/000001699 2015-09-10T09:52:07-0700 monthly 0.8 admin,premium knowledge_article_2142 knowledge_article_2142 2013-03-01T08:59:12-0800 000001699 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector User [MAC address of the Client] failed to log in. No permission or incorrect credentials.' The solution to resolve the issue when we see the ;og 'User [MAC address of the Client] failed to log in. No permission or incorrect credentials.': When we see the below logs in the ZD GUI::Monitor::All Events/Activities, we need to check whether the WLAN to which the user is connecting has been checked in the default role list or not. If the WLAN haven't checked in the default Role list we get the below error. User [MAC address of the Client] failed to log in. No permission or incorrect credentials. User [MAC address of the Client] failed to log in. No permission or incorrect credentials. User [MAC address of the Client] failed to log in. No permission or incorrect credentials. User [MAC address of the Client] failed to log in. No permission or incorrect credentials. When the users are connecting they will be assigned to “Default” role and if they do not see that the specific WLAN in the default Role list then it throws a above message, so please make sure that you select all the WLANs in the default role of the Zone Director. To configure that --> please go to ZD GUI::Configure::Roles:: 'Default' Role and select radio button for 'Allow access to all WLANs' and save it.

2015-09-10T09:52:07-0700 2015-09-10T15:00:18-0700 https://support.ruckuswireless.com/articles/000005102 2015-09-08T16:36:35-0700 monthly 0.8 admin,premium knowledge_article_2131 knowledge_article_2131 2015-09-08T16:36:35-0700 000005102 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Is there any way to backup and restore standalone AP configuration settings? We don’t have a backup under GUI/CLI for standalone APs, but you can collect information that will help reconfigure an AP, if you should ever have to factory default or replace one. Use an SSH application like putty.exe to access the AP and the ‘help’ command to display available commands. The output of these can be helpful to (re)configure an AP from factory defaults. If you have an online working AP, collect the important IP scheme/gateway and SSID name/security policies from it, otherwise obtain new/previous IP addressing and VLAN-ID/subnet mapping from network admins. Assuming you will be setting up APs with a static/known IP address with a known default-gateway router, you can follow these configuration steps to setup a new/factory defaulted AP for standalone mode service. --- Configuring AP: 1. Perform factory default of AP (boot 3 minutes, press Hard Reset for 8+ seconds, wait until you get replies to pings to 192.168.0.1 IP address, from your pre-configured (192.168.0.anything-else) PC/laptop. Open a browser session to <a href="https://192.168.0.1/" target="_blank">https://192.168.0.1</a>, and login with ‘super / sp-admin’ credentials. 2. From Configuration::Device, enter an AP Device Name: _______ and click Update Settings. Use a name that can help identify it’s location/purpose. 3. From Configuration::Wireless (or Radio 2.4G and Radio 5G, respectively) and Common tab, be sure or set Country Code to United States, click Update Settings. 4. From Wireless 1 tab, enter Wireless Network: ______ and SSID: _______ names (usually matching). Click Enabled for Wireless Availability and set option for Broadcast SSID as desired. If using anything but Open Authentication, click and choose from Encryption Method: dropdown choice of WEP or WPA and setup the encryption and passphrase information. (we recommend WPA2/AES with PSK) 5 Repeat on Wireless 2 tab, for additional SSID, Wireless 3 tab, etc. 6. If using VLANs and different subnets for your wireless SSIDs, go to Configuration::VLAN page. Enter the VLAN-ID number in the box beside the SSID to assign it. Click Update Settings (test) button when complete, and the AP will check the switchport to see if all VLANs are available on the trunk. 7. For last step, go to Configuration::Internet page, and enter the router default Gateway IP address for the subnet that the AP will be connected to. Change the default Connection Type from DHCP to Static IP and enter the IP Address: __.__.__.__ and network Mask: __.__.__.__ (ie 255.255.224.0 for /27 bit subnet). This is the “last step”, because when you click Update Settings, your 192.168.0.x PC/Laptop will lose connectivity with the AP, and it’s ready to be attached to your (PoE) switch port configured to trunk the optional VLANs that you can assign to WLAN SSIDs. --- Collecting AP Backup Information: SSH to an AP’s IP address with utility like putty.exe and collect/save the output from these commands which should be sufficient to reconfigure a defaulted (or apply to new) APs, as far as IP addressing and WLAN details. If using the putty terminal application, you can save session output to a filename, as your backup reference. <a href="http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html" target="_blank">http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html</a> Open putty.exe. In top/left, under Session, click Logging. Under Session logging:, click Log all session output. Rename putty.log to AP10-7-7-81-102710.log (for example, using AP’s IP address and a date in the filename), and Browse to the directory where you want the session backup file saved. In top/left, click on Session. Enter the IP address of the new/factory defaulted AP, 192.168.0.1 and note that SSH (tcp:22) is specified as the default Protocol (you can telnet to devices that don’t support SSH). Click Open to access the AP. If prompted that you haven’t seen this host before, accept the challenge. Run these AP commands to collect the useful information. In my example, I have one open auth WLAN on 2.4GHz, and one open and one WPA2-PSK WLAN on 5GHz of my dual-band 7962 model AP. I do not have VLANs assigned however. rkscli: get boarddata # optional, displays AP model and s/n info name: zf7962 magic: 35333131 cksum: a47 rev: 5.3 Serial#: 180901007787 Customer ID: 4bss Model: zf7962 rkscli: get version Ruckus 7962 Multimedia Hotzone Wireless AP Version 8.2.1.0.21 rkscli: get device-name device name : ‘mb7962-AP’ rkscli: get ipaddr wan IP Address Configuration Type: static, IP: 192.168.65.15 Netmask 255.255.255.0 Gateway 192.168.65.1 rkscli: get vlan ----------------------------------------------------------------------------------- Network 0: (Management) VID 1 Services: StaticIP Eth Port (no tag): 0,1 Wireless (no tag): - wlan0 (mb7962-bgn) - wlan1 (Wireless 2) - wlan2 (Wireless 3) - wlan3 (Wireless 4) - wlan4 (Wireless 5) - wlan5 (Wireless 6) - wlan6 (Wireless 7) - wlan7 (Wireless 8) - wlan8 (mb7962-an) - wlan9 (mb7962-an2) - wlan10 (Wireless 11) - wlan11 (Wireless 12) - wlan12 (Wireless 13) - wlan13 (Wireless 14) - wlan14 (Wireless 15) - wlan15 (Wireless 16) ----------------------------------------------------------------------------------- OK rkscli: get wlanlist # Note which wlanX have status of ‘up’, and run cmds below on them only. name status type wlanID radioID bssid ----------------------------------------------------------- svcp up AP wlan0 0 00:24:82:3d:35:98 home down AP wlan1 0 00:00:00:00:00:00 rcks down AP wlan2 0 00:00:00:00:00:00 mdfx down AP wlan3 0 00:00:00:00:00:00 wlan4 down AP wlan4 0 00:00:00:00:00:00 wlan5 down AP wlan5 0 00:00:00:00:00:00 wlan6 down AP wlan6 0 00:00:00:00:00:00 wlan7 down AP wlan7 0 00:00:00:00:00:00 wlan8 up AP wlan8 1 00:24:82:3d:35:9c wlan9 up AP wlan9 1 00:24:82:7d:35:9c wlan10 down AP wlan10 1 00:00:00:00:00:00 wlan11 down AP wlan11 1 00:00:00:00:00:00 wlan12 down AP wlan12 1 00:00:00:00:00:00 wlan13 down AP wlan13 1 00:00:00:00:00:00 wlan14 down AP wlan14 1 00:00:00:00:00:00 wlan15 down AP wlan15 1 00:00:00:00:00:00 OK rkscli: rkscli: rkscli: get ssid wlan0 wlan0 SSID: mb7962-bgn OK rkscli: get encryption wlan0 SSID : mb7962-bgn Net Security : Open (plain-text) Authentication : Open Encryption : disabled OK rkscli: get passphrase wlan0 bad key:wlans/wlan0/wlan-wpa-passphrase rkscli: get dvlan wlan0 wlan0 Dynamic-VLAN Mode: Disabled OK rkscli: rkscli: rkscli: rkscli: get ssid wlan8 wlan8 SSID: mb7962an OK rkscli: get encryption wlan8 SSID : mb7962an Net Security : Open (plain-text) Authentication : Open Encryption : disabled OK rkscli: get passphrase wlan8 bad key:wlans/wlan8/wlan-wpa-passphrase rkscli: get dvlan wlan8 wlan8 Dynamic-VLAN Mode: Disabled OK rkscli: rkscli: rkscli: rkscli: get ssid wlan9 wlan9 SSID: mb7962an2 OK rkscli: get encryption wlan9 SSID : mb7962an2 Net Security : WPA Protocol Version : WPA2 Authentication : Open Cipher Algorithm : AES-CCMP WPA PassPhrase : 1234567890 OK rkscli: get passphrase wlan9 wlan9 WPA PassPhrase (10): 1234567890 OK rkscli: get dvlan wlan9 wlan9 Dynamic-VLAN Mode: Disabled OK rkscli: rkscli: rkscli: exit Quit: OK

There is no complete configuration backup and restore functionality in standalone AP mode, but you can collect certain information to make re-creating or setting up a new AP with similar settings easier.

2015-09-08T16:36:35-0700 2015-09-08T21:00:14-0700 https://support.ruckuswireless.com/articles/000002929 2015-09-08T10:02:08-0700 monthly 0.8 admin,premium knowledge_article_2130 knowledge_article_2130 2014-04-17T07:22:28-0700 000002929 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor My Cisco handsets 7945 are having voice problems over Ruckus mesh network Make sure that the customers Zd is configured correctly tunnelling should be enabled on the VoiP WlAN this is the recommended configuration for VoiP devices. also confirm that the MESH configuration is correct. and does not exceed more than t The AP were set up with the following QoS parameters from the ZD CLi debug command Remote_ap_cli -A " set qos eth0 tos mark enable" Remote_ ap_cli - A "set qos tos classify voice 46" Redmote_ap_cli -A "set qos tos mark voice 46" <div>exit On the Cisco LAN switches DSCP CoS by default is set to CS3 this is only used for signalling and not Data so the VoiP packets were not marked correctly with only assurred forwarding. Make sure QoS is enabled with the correct Values. <table border="4" cellpadding="3" cellspacing="1" style="width: 300px;" width="60%"><tbody><tr><th colspan="1" rowspan="1" height="" width="">CoS</th><th colspan="1" rowspan="1" height="" width="">DSCP (decimal)</th><th colspan="1" rowspan="1" height="" width="">DSCP</th></tr><tr><td colspan="1" rowspan="1" height="" width="">0</td><td colspan="1" rowspan="1" height="" width="">0</td><td colspan="1" rowspan="1" height="" width="">Default</td></tr><tr><td colspan="1" rowspan="1" height="" width="">1</td><td colspan="1" rowspan="1" height="" width="">8</td><td colspan="1" rowspan="1" height="" width="">CS1</td></tr><tr><td colspan="1" rowspan="1" height="" width="">2</td><td colspan="1" rowspan="1" height="" width="">16</td><td colspan="1" rowspan="1" height="" width="">CS2</td></tr><tr><td colspan="1" rowspan="1" height="" width="">3</td><td colspan="1" rowspan="1" height="" width="">24</td><td colspan="1" rowspan="1" height="" width="">CS3</td></tr><tr><td colspan="1" rowspan="1" height="" width="">4</td><td colspan="1" rowspan="1" height="" width="">32</td><td colspan="1" rowspan="1" height="" width="">CS4</td></tr><tr><td colspan="1" rowspan="1" height="" width="">5</td><td colspan="1" rowspan="1" height="" width="">40</td><td colspan="1" rowspan="1" height="" width="">CS5</td></tr><tr><td colspan="1" rowspan="1" height="" width="">6</td><td colspan="1" rowspan="1" height="" width="">48</td><td colspan="1" rowspan="1" height="" width="">CS6</td></tr><tr><td colspan="1" rowspan="1" height="" width="">7</td><td colspan="1" rowspan="1" height="" width="">56</td><td colspan="1" rowspan="1" height="" width="">CS7</td></tr></tbody></table> <table border="4" cellpadding="3" cellspacing="1" style="width: 500px;" width="60%"><tbody><tr><th colspan="1" rowspan="1" height="" width="">Precedence Level</th><th colspan="1" rowspan="1" height="" width="">Description</th></tr><tr><td colspan="1" rowspan="1" height="" width="">7</td><td colspan="1" rowspan="1" height="" width="">Stays the same (link layer and routing protocol keep alive)</td></tr><tr><td colspan="1" rowspan="1" height="" width="">6</td><td colspan="1" rowspan="1" height="" width="">Stays the same (used for IP routing protocols)</td></tr><tr><td colspan="1" rowspan="1" height="" width="">5</td><td colspan="1" rowspan="1" height="" width="">Express Forwarding (EF)</td></tr><tr><td colspan="1" rowspan="1" height="" width="">4</td><td colspan="1" rowspan="1" height="" width="">Class 4</td></tr><tr><td colspan="1" rowspan="1" height="" width="">3</td><td colspan="1" rowspan="1" height="" width="">Class 3</td></tr><tr><td colspan="1" rowspan="1" height="" width="">2</td><td colspan="1" rowspan="1" height="" width="">Class 2</td></tr><tr><td colspan="1" rowspan="1" height="" width="">1</td><td colspan="1" rowspan="1" height="" width="">Class 1</td></tr><tr><td colspan="1" rowspan="1" height="" width="">0</td><td colspan="1" rowspan="1" height="" width="">Best effort</td></tr></tbody></table> <table border="4" cellpadding="3" cellspacing="1" style="width: 500px;" width="60%"><tbody><tr><th colspan="1" rowspan="1" height="" width="">DSCP</th><th colspan="1" rowspan="1" height="" width="">DSCP (decimal)</th><th colspan="1" rowspan="1" height="" width="">CoS</th></tr><tr><td colspan="1" rowspan="1" height="" width="">Default</td><td colspan="1" rowspan="1" height="" width="">0-7</td><td colspan="1" rowspan="1" height="" width="">0</td></tr><tr><td colspan="1" rowspan="1" height="" width="">CS1 AF11 AF12 AF13</td><td colspan="1" rowspan="1" height="" width="">8-15</td><td colspan="1" rowspan="1" height="" width="">1</td></tr><tr><td colspan="1" rowspan="1" height="" width="">CS2 AF21 AF22 AF23</td><td colspan="1" rowspan="1" height="" width="">16-23</td><td colspan="1" rowspan="1" height="" width="">2</td></tr><tr><td colspan="1" rowspan="1" height="" width="">CS3 AF31 AF32 AF33</td><td colspan="1" rowspan="1" height="" width="">24-31</td><td colspan="1" rowspan="1" height="" width="">3</td></tr><tr><td colspan="1" rowspan="1" height="" width="">CS4 AF41 AF42 AF43</td><td colspan="1" rowspan="1" height="" width="">32-39</td><td colspan="1" rowspan="1" height="" width="">4</td></tr><tr><td colspan="1" rowspan="1" height="" width="">CS5 EF</td><td colspan="1" rowspan="1" height="" width="">40-47</td><td colspan="1" rowspan="1" height="" width="">5</td></tr><tr><td colspan="1" rowspan="1" height="" width="">CS6</td><td colspan="1" rowspan="1" height="" width="">48-55</td><td colspan="1" rowspan="1" height="" width="">6</td></tr><tr><td colspan="1" rowspan="1" height="" width="">CS7</td><td colspan="1" rowspan="1" height="" width="">56-63</td><td colspan="1" rowspan="1" height="" width="">7</td></tr></tbody></table> To show this on the switch. Distribution1#show mls qos maps cos-dscp Cos-dscp map: cos: 0 1 2 3 4 5 6 7 -------------------------------- dscp: 0 8 16 24 32 40 48 56 Distribution1#show mls qos maps dscp-cos Dscp-cos map: d1 : d2 0 1 2 3 4 5 6 7 8 9 --------------------------------------- 0 : 00 00 00 00 00 00 00 00 01 01 1 : 01 01 01 01 01 01 02 02 02 02 2 : 02 02 02 02 03 03 03 03 03 03 3 : 03 03 04 04 04 04 04 04 04 04 4 : 05 05 05 05 05 05 05 05 06 06 5 : 06 06 06 06 06 06 07 07 07 07 6 : 07 07 07 07 </div> To configure the cisco switch for qos trunk port to the AP ethernet port First enable QoS globally SW(config)#mls qos then add the following configuration l. interface GigabitEthernet1/0/3 description **** Trunk Port **** switchport trunk encapsulation dot1q switchport mode trunk switchport trunk native vlan 1 witchport trunk allowed vlan 1,10,20,30,40 mls qos cos 5 mls qos trust cos exit If the port is an access port or Layer 3 port, you need to configure the mls qos trust dscp command. You cannot use the mls qos trust cos command because the frame from the access port or Layer 3 port does not contain dot1q or ISL tag. CoS bits are present in the dot1q or ISL frame only. interface GigabitEthernet1/0/1 description **** Layer 3 Port **** no switchport ip address 192.168.0.3 255.255.255.0 m mls qos dhcp 46 mls qos trust dscp end <blockquote> </blockquote>

Cisco 7945 phones wired into L2/L3 switch then traversing Ruckus AP Mesh network to Cisco CUCM Gateway voice is disrupted and choppy.

2015-09-08T10:02:08-0700 2015-09-08T15:00:24-0700 https://support.ruckuswireless.com/articles/000003248 2015-09-08T10:38:56-0700 monthly 0.8 admin,premium knowledge_article_2129 knowledge_article_2129 2014-08-14T16:47:26-0700 000003248 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration Performance, Configuration, ZoneDirector Query on Rogue -APs and Rogue -DHCP option on Zone Director A rogue AP is a foreign Access Point within your radio coverage that is not managed by your WLAN system. It can simply be your neighbor's WLAN device or another AP connected to your internal corporate network providing wireless access. Your neighbors’ AP may cause some corporate clients to connect to it by mistake and reveal confidential information. An unmanaged AP that connects to the internal network can compromise security policies the network administrators have applied. For example, an intruder might be able to connect to the corporate internal network from the parking lot. <div style="font-family: Arial; font-size: 13.63636302947998px;"> Details on Rogue Detection in Zone Director </div> Rogue Access Points : On the ZoneDirector Rogue detection options include identifying the presence of a Rogue AP, and locating it on your worksite floorplan prior to its removal. You can also mark Rogue APs as "Known" if they are located in a neighboring network—outside your worksite—and pose no threat. Rogue DHCP server : ZoneDirector has a Rogue DHCP server detection feature that can help you prevent connectivity and security issues caused that Rogue DHCP servers may cause. When this feature is enabled, ZoneDirector scans the network every five seconds for unauthorized DHCP servers and generates an event every time it detects a Rogue DHCP server. The conditions for detecting Rogue DHCP servers depend on whether ZoneDirector's own DHCP server is enabled: - If the built-in DHCP server is enabled, ZoneDirector will generate an event when it detects any other DHCP server on the network. - If the built-in DHCP server is disabled, ZoneDirector will generate events when it detects two or more DHCP servers on the network. You will need to find these DHCP servers on the network, determine which ones are Rogue, and then disconnect them or shut down the DHCP service on them. So in the current available Rogue DHCP sever detection you could only detect but could not make them as known DHCP server in your network as done under Monitor > Rogue Devices for Rogue APs.

Query on Rogue -APs Vs Rogue -DHCP

2015-09-08T10:38:56-0700 2015-09-08T15:00:21-0700 https://support.ruckuswireless.com/articles/000001504 2015-09-08T10:40:07-0700 monthly 0.8 admin,premium knowledge_article_1545 knowledge_article_1545 2013-01-21T08:40:26-0800 000001504 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What is Rogue DHCP server and how to enable Rogue DHCP Server Detection? A rogue DHCP server is a DHCP server that is not under the control of network administrators and is therefore unauthorized. When a rogue DHCP server is introduced to the network, it could start assigning invalid IP addresses, disrupting network connections or preventing client devices from accessing network services. It could also be used by hackers to compromise network security. Typically, rogue DHCP servers are network devices (such as routers) with built-in DHCP server capability that has been enabled (often, unknowingly) by users. ZoneDirector has a rogue DHCP server detection feature that can help you prevent connectivity and security issues caused that rogue DHCP servers may cause. When this feature is enabled, ZoneDirector scans the network every five seconds for unauthorized DHCP servers and generates an event every time it detects a rogue DHCP server. The conditions for detecting rogue DHCP servers depend on whether Zone Director's own DHCP server is enabled: 1. If the built-in DHCP server is enabled, Zone Director will generate an event when it detects any other DHCP server on the network. 2. If the built-in DHCP server is disabled, ZoneDirector will generate events when it detects two or more DHCP servers on the network. You will need to find these DHCP servers on the network, determine which ones are rogue, and then disconnect them or shut down the DHCP service on them. To enable rogue DHCP server detection on Zone Director: Go to ZD GUI-->Configure > WIPS In the Rogue DHCP Server Detection section, select the Enable/Disable rogue DHCP server detection with the check box. Click the Apply button that is in the same section. You have completed enabling rogue DHCP server detection. Ruckus Wireless recommends checking the Monitor > All Events/Activities page periodically to determine if ZoneDirector has detected any rogue DHCP servers. If Zone Director detected any rogue DHCP server, you will see the following event on the All Events/Activities page: Rogue DHCP server on [ IP_address] has been detected. In the Alarms configuration you can also select the Rogue DHCP alarm ( enable the alarm).

The ZD has a built in Rogue DHCP detection feature to enable detection of multiple servers on the local network or IP domain. This can be disabled if its not needed , or is detecting known valid servers as rogues on your network.

2015-09-08T10:40:07-0700 2015-09-08T15:00:20-0700 https://support.ruckuswireless.com/articles/000004157 2015-05-19T14:45:42-0700 monthly 0.8 admin,premium knowledge_article_1874 knowledge_article_1874 2015-03-11T09:37:52-0700 000004157 Validated (External) Premium Virtual smartcell gateway Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, virtual SmartCell Gateway On vSCG can we exclude specific channels like on ZD? vSCG GUI-based channel selection is planned for 3.1.1. Meanwhile, a vSCG CLI script, adjusted for need, can be used. Remember, it's a blacklist, so specify the channels you want to block. Example #1: [ Channelfly mtbc adjustment is optional. ] ie. fw_version=2.5.1.0.189 model=all set blacklist wifi0 clear set blacklist wifi0 2 -1 set blacklist wifi0 3 -1 set blacklist wifi0 5 -1 set blacklist wifi0 6 -1 set blacklist wifi0 8 -1 set blacklist wifi0 9 -1 set blacklist wifi0 10 -1 set blacklist wifi0 12 -1 set blacklist wifi0 13 -1 set channel wifi0 auto set channelfly wifi0 mtbc 400 set blacklist wifi1 clear set blacklist wifi1 36 -1 set blacklist wifi1 40 -1 set blacklist wifi1 44 -1 set blacklist wifi1 48 -1 set blacklist wifi1 52 -1 set blacklist wifi1 56 -1 set blacklist wifi1 60 -1 set blacklist wifi1 64 -1 set channelfly wifi1 mtbc 200 reboot Example #2 <table class="sectionContent"><tbody><tr id="lineAnswer"><td colspan="1" rowspan="1" class="helpCol"> </td><td colspan="1" rowspan="1" class="fieldCol"> <table class="htmlDetailElementTable" border="0" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1"> <div class="sfdc_richtext" id="articleDetail:j_id400:j_id401:sectionRepeat:0:fieldRepeat:7:j_id583articleDetail:j_id400:j_id401:sectionRepeat:0:fieldRepeat:7:j_id583_00N50000002Cf3M_div"> 1. Save the below two sets of commands each in a seperate notepad as txt file. fw_version=2.5.1 0.18 model=all set blacklist wifi0 clear set blacklist wifi0 13 -1 set blacklist wifi0 12 -1 fw_version=3.0.3.0.455 model=all set blacklist wifi0 clear set blacklist wifi0 11 -1 2. Please use the version number of the Firmware that you are using on the AP under fw_version. 3. 'model' should be set to 'all', currently that is the only option supported. 4. "set blacklist wifi0 clear" this command would clear the existing channel black list 5. Use "set blacklist wifi0 x -1" command to block the channel use the channel number in place of 'x' to block that particular channel. 6. The above script would block channel 13 and 12. 7. Load the script on the vSCG by navigating to Administration-->Diagnostics-->select "AP CLI Script" on left. 8. Select the AP Zone on which you want to run this script, browse and load the script; click upload. 9. Click execute under "Script Execution Summary". 10. The script would get executed, and you would be prompted to refresh the screen to see the status on the AP. 11. If you see "Succeed" in the Execution Status, the script is executed successfully, if not verify the script, there is some error. 12. Please verify the same on the AP by logging in to its CLI, if those channels are blocked using the command "get channelavailability <wlan name>". </div> </td></tr></tbody></table> </td></tr></tbody></table> <img alt="User-added image" height="379" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PP8d&feoid=00N50000002Cf3M&refid=0EM50000000Lk3c" width="500"></img>

2015-05-19T14:45:42-0700 2015-09-07T08:25:18-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PIJ4CAO?attachment_index=0 2015-09-07T08:25:18-0700 monthly admin,premium knowledge_article_1874 knowledge_article_1874_attachment_1 vSCG_APCLI_ChannelBlacklists 611.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000005002 2015-08-11T11:06:32-0700 monthly 0.8 admin,premium knowledge_article_2097 knowledge_article_2097 2015-08-10T00:07:41-0700 000005002 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor Why only one port of the R710 is active after enabling LACP? The second port was not getting enabled because of the AP drawing 802.3af power instead of 802.3at. As soon as LLDP was enabled on the AP, the AP started drawing 802.3at power. For the LLDP enable configuration to be persistent, the LLDP needs to be enabled on the AP-group via the ZD CLI. The command is given below: # config # ap-group "AP-group-name" # lldp enable # exit

This article explains a customer scenario where only one port of the R710 is active after configuring the AP for LACP.

2015-08-11T11:06:32-0700 2015-09-03T16:26:27-0700 https://support.ruckuswireless.com/articles/000004910 2015-09-03T10:43:04-0700 monthly 0.8 admin,premium knowledge_article_2125 knowledge_article_2125 2015-09-03T10:43:04-0700 000004910 Validated (External) Premium Virtual smartcell gateway Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, virtual SmartCell Gateway After upgrade to 3.1.1 from 3.0.4, the guest network reported internet connectivity issue We had another SSID with same VLAN mapped and moment we switch user to another SSID(WPA) it started to work. We further checked the configuration of two SSID's and noticed on non-working guest WLAN we had client VLAN/Subnet isolation enabled. Moment we disabled VLAN/Subnet isolation the guest network started to work.

After upgrade to 3.1.1 from 3.0.4, the guest network reported internet connectivity issue

2015-09-03T10:43:04-0700 2015-09-03T15:00:17-0700 https://support.ruckuswireless.com/articles/000004698 2015-06-15T09:34:16-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1937 knowledge_article_1937 2015-06-15T09:34:16-0700 000004698 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector What is SOCIFI and how do I set it up with my Ruckus ZD system? SOCIFI is a cloud based service where it allows a Ruckus system (ZD+controller) to setup an external hotspot with external Radius. It allows users to authenticate through social media or a simple click through login. Ruckus supports this type of service using 9.8.1.0.101 or later SW. See attached document for setup instructions. The same attached document can be used for a ZD1100, ZD3000, or ZD5000.

Document explains how to setup the service through a Ruckus controller and the service interface setup as well.

2015-06-15T09:34:16-0700 2015-09-03T07:26:20-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PIzBCAW?attachment_index=0 2015-09-03T07:26:20-0700 monthly admin,premium,warranty,guest knowledge_article_1937 knowledge_article_1937_attachment_1 SOCIFI_RuckusZoneDirector.pdf 742465.0 application/pdf https://support.ruckuswireless.com/articles/000002537 2015-09-02T10:40:00-0700 monthly 0.8 admin,premium knowledge_article_2122 knowledge_article_2122 2014-04-25T08:17:01-0700 000002537 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;System network management Configuration, System Network Management, SmartCell Gateway, virtual SmartCell Gateway, SZ100 How do I assing roles to user accounts in the SCG / SZ ? The role is selected when you assign the user account to a management domain. This permits users accounts to have different roles on different management domains. The user account and role are independent and are only associated when you assign the account to a Management domain. So you can use an existing user account and from the configure Management domain assign that account to that management domain with a specific role on the management domain. From Configure::Management Domains – select the domain you wish the user to be assigned to and then under Administrators select new. <img alt="User-added image" height="179" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQhU&feoid=00N50000002Cf3M&refid=0EM50000000LTUP" width="500"></img> Hit the down arrow next to account name to get a list of configured accounts: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQhU&feoid=00N50000002Cf3M&refid=0EM50000000LTUU"></img> Then you can choose the role (previously created) <img alt="User-added image" height="119" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQhU&feoid=00N50000002Cf3M&refid=0EM50000000LTUK" width="500"></img> That assigns a user account to a specific management domain with a specific role. The accounts and roles can be re-used on various management domains. If you have already assigned an account to a management domain you can remove that account from the management domain and then add it back with a different role: Check the user account to delete in the specific management domain. <img alt="User-added image" height="69" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQhU&feoid=00N50000002Cf3M&refid=0EM50000000LTUZ" width="500"></img> Then add new and select the new role. <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQhU&feoid=00N50000002Cf3M&refid=0EM50000000LTUj"></img> <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQhU&feoid=00N50000002Cf3M&refid=0EM50000000LTUo"></img> This gives the flexibility to allow the same user account on multiple management domains with different roles.

I've created new administrator roles on our SCG, but can't see how to assign these new roles to accounts. No options to assign, documentation doesn't show how to do this either.

2015-09-02T10:40:00-0700 2015-09-02T15:00:24-0700 https://support.ruckuswireless.com/articles/000001152 2015-08-31T20:08:14-0700 monthly 0.8 admin,premium knowledge_article_1376 knowledge_article_1376 2012-03-21T12:00:13-0700 000001152 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation;Security Configuration, Installation, Security, ZoneFlex Indoor, ZoneFlex Outdoor <h1>Product: AP 7363</h1> Topic: Security <h1>Architecture:</h1> <img alt="User-added image" height="353" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L986" width="500"></img> <h1>Objective</h1> The supplicant should: <ul><li>Pass the EAP authentication against the RADIUS server</li><li>Be assigned to the VLAN statically configured for the WLAN</li><li>Receive an IP address from DHCP server and</li><li>Be able to ping its default gateway.</li></ul> In this way we confirm the STA has access to the wired network. <h1>Components</h1> <ul><li>Server: Windows XP <ul><li>DHCP, DNS Dual Server v6.86 (<a href="http://sourceforge.net/projects/dhcp-dns-server/" target="_blank">http://sourceforge.net/projects/dhcp-dns-server/</a>)</li><li>Freeradius v1.1.7-r0.0.2 (<a href="http://www.freeradius.net/" target="_blank">http://www.freeradius.net</a> )</li></ul> </li><li>AP 7363: 9.3.0.0.87</li><li>STA: Windows XP <ul><li>XSupplicant v2.2.0.710 (<a href="http://open1x.sourceforge.net/" target="_blank">http://open1x.sourceforge.net/</a>)</li></ul> </li></ul> <h1>Configuration</h1> <h2>AP configuration</h2> <h3>WLAN (including Radius server configuration):</h3> The authentication is selected as 802.1x, the access VLAN is assigned to the WLAN and the information regarding Radius server is also configured in this page. <img alt="User-added image" height="789" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L98G" width="500"></img> <h3>Ethernet port:</h3> Port 3 is configured as a trunk port to allow the VLAN assigned to the WLAN. <img alt="User-added image" height="321" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L98L" width="500"></img> <h2>RADIUS configuration</h2> <ul><li>EAP modules: As configured by default</li></ul> <ul><li>User configuration:</li></ul> ruckususer User-Password == “ruckus” User-Name = ruckususer, Session-Timeout = 10000 <h2>XSupplicant in STA</h2> <img alt="User-added image" height="420" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L98Q" width="500"></img> <img alt="User-added image" height="426" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L98V" width="500"></img> <img alt="User-added image" height="426" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L98a" width="500"></img> <img alt="User-added image" height="425" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L97i" width="500"></img> <img alt="User-added image" height="426" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L98f" width="500"></img> <img alt="User-added image" height="423" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L98k" width="500"></img> <img alt="User-added image" height="423" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L98p" width="500"></img> <h1>AP Status</h1> This is the output under Status::Wireless::Station Details: <img alt="User-added image" height="466" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L98W" width="500"></img> <h1>Traces</h1> <h2>Server side</h2> <img alt="User-added image" height="404" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L98u" width="500"></img> <h2>STA side</h2> <img alt="User-added image" height="387" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L98z" width="500"></img> <h2>AP log</h2> When the user gets authenticated, you can see the following log in support-info: <img alt="User-added image" height="113" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQgq&feoid=00N50000002Cf3M&refid=0EM50000000L994" width="500"></img> Please note that if you are using PEAP or EAP-TLS authentication then you can use the Windows Inbuilt Supplicant. However, if you are using EAP-TTLS form of authentication then you need a 3rd Party Supplicant on Windows XP, Vista, or 7. Windows 8 supports EAP-TTLS so you can use Inbuilt Supplicant in case of Windows 8.

This article explains how to configure 802.1x EAP authentication with free radius server on a standalone AP - 7363 - Security

2015-08-31T20:08:14-0700 2015-08-31T21:00:20-0700 https://support.ruckuswireless.com/articles/000005040 2015-08-19T08:41:41-0700 monthly 0.8 admin,premium knowledge_article_2108 knowledge_article_2108 2015-08-19T08:41:41-0700 000005040 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway, SZ100 How do I load-balance requests between SZ NBI interfaces? To leverage the scalability and redundancy offered by the multiple NBI interfaces of an SZ cluster, you should deploy a load-balancer in front of the NBI, which tracks the availability of each SZ’s NBI service. The external web portal would then simply communicate with the load-balancer’s virtual IP (VIP) as though it was a single NBI interface. This method allows minimal changes (if any) on the web portal and provides load-balanced access to both NBI interfaces of the SZ cluster via a number of algorithms e.g. round-robin, least connections etc. If you do not have a load-balancer, you could deploy a light-weight HTTPd, configured as a reverse-proxy. Nginx, for example, is a light weight HTTPd that could even be deployed on the same host as your external web portal if resource constraints are a problem. The nginx daemon is capable of tracking multiple NBI services, scaling as your cluster expands. It also includes health checks and automatic removal of an NBI if it becomes unreachable. Finally, it provides a number of load-balancing algorithms for you to choose from. For more, visit: <a href="http://nginx.org/en/docs/http/load_balancing.html" target="_blank">http://nginx.org/en/docs/http/load_balancing.html</a>

This article explains one approach for load-balancing requests from an external web portal between multiple distinct NBI interfaces in a SmartZone controller cluster

2015-08-19T08:41:41-0700 2015-08-19T09:00:15-0700 https://support.ruckuswireless.com/articles/000002568 2015-08-12T10:40:22-0700 monthly 0.8 admin,premium knowledge_article_740 knowledge_article_740 2014-01-30T07:11:17-0800 000002568 Validated (External) Premium Zoneflex 7762 s Performance;Installation Performance, Installation, ZoneFlex 7762 S What is the range and coverage of ZF7762-S model Acess point? <div style="text-align: center;">ZF7762-S Range and Coverage</div> <div> </div> <div>+ Physical antenna gain up to 12 dBi and 15 dB of interference mitigation within a 120° azimuth. </div> <div> </div> <div>+ This advanced smart Wi-Fi design with concurrent 802.11n radio is desighed to deliver 150 Mbps of sustained throughput between mesh APs 300 meters apart, and 50 Mbps of sustained throughput to clients 150 meters away. </div> <div> <div>See attached file for ZF7762 series data sheet. </div> <div> </div> <div> </div> </div>

ZF7762-S range and coverage

2015-08-12T10:40:22-0700 2015-08-12T15:00:17-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PEeYCAW?attachment_index=0 2015-08-12T15:00:17-0700 monthly admin,premium knowledge_article_740 knowledge_article_740_attachment_1 ds-zoneflex-7762-series.pdf 1775840.0 application/pdf https://support.ruckuswireless.com/articles/000002807 2015-08-11T09:35:23-0700 monthly 0.8 admin,premium knowledge_article_2099 knowledge_article_2099 2014-03-18T19:45:39-0700 000002807 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What might cause problems with Symbol/Motorolla MC 9090 scanners? Access point constantly buffers the unicast data (converted broadcast/multicast) pending for the client and this is indicated in every beacon. The client must be listening for every beacon and wakes up to retrieve data when it sees the indication that it has buffered unicast data. Ruckus APs by default convert incoming broadcast and multicast traffic to unicast.By default both broadcast and multicast traffic go out at a lower data rate over wireless. Converting them to unicast enables the AP to send the data at higher rates. It also enables 802.11 acknowledgements. Acknowledgement from a receiver ensures reliable data transfer. This features is turned on each SSID until the client count reaches 5. This feature gets disabled automatically once a 6th client joins the SSID. ruckus(config-wlan)# qos directed-threshold 0 This command disables BOTH directed broadcast and directed multicast on the SSID. If there is only a single client, it will receive broadcast traffic as broadcast and multicast traffic as multicast. After executing the above command, Symbol scanners are able to sleep enough time till the DTIM value in the Beacon frame gradually decrements to zero. See also KBA-1657: How to set management frame data rate.

Symbol scanners MC9060 devices are not being observed in proper sleep mode and constantly waking up, even after incrementing the DTIM count to 10.

2015-08-11T09:35:23-0700 2015-08-11T15:00:22-0700 https://support.ruckuswireless.com/articles/000004922 2015-08-07T10:29:36-0700 monthly 0.8 admin,premium knowledge_article_2091 knowledge_article_2091 2015-08-07T10:29:36-0700 000004922 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Firmware;Troubleshooting Firmware, Troubleshooting, SmartCell Insight Why is SCI reporting a supported version as unsupported? An install package is made available to update SCI list of supported controllers. ?Follow instruction on support site for SCI controller support update. https://support.ruckuswireless.com/software/719-sci-latest-controller-support-update Note installation example: (support site currently has syntax error with missing space) sci# yum -y install --disablerepo='*' rks-sci-supportmatrix-20150602.rpm

SCI triggers version support event when controller version is not in it's current matrix. The matrix is updated via a package from the support site.

2015-08-07T10:29:36-0700 2015-08-07T15:00:16-0700 https://support.ruckuswireless.com/articles/000004983 2015-08-06T13:15:56-0700 monthly 0.8 admin,premium knowledge_article_2089 knowledge_article_2089 2015-08-06T13:00:32-0700 000004983 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;System network management Configuration, System Network Management, SmartCell Insight SCI: Are there User Roles? The SCI User Guide describes how to create and configure users, but does not describe any difference between standard roles or if they can be customized. 1. There is no special difference between defined SCI Users other than "admin", no other 'permission' scheme within the reporting application. 2. There is only one special user in the system, named 'admin', which can manage the system thru other ports: a. Ports 80 and 8088 up to SCI v1.3 b. Ports 8443 and 9443 from SCI v1.4* (HTTPS versions *when released)

SCI users have no different permissions in the reporting application.

2015-08-06T13:15:56-0700 2015-08-06T15:00:15-0700 https://support.ruckuswireless.com/articles/000004972 2015-08-05T14:18:06-0700 monthly 0.8 admin,premium knowledge_article_2083 knowledge_article_2083 2015-08-05T14:18:06-0700 000004972 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance Performance, ZoneDirector What is ZD sensor and how does it work? Sensor gives information about the Fan, Temperature, and Power Supply of the ZD. All the sensor data have a uniform format to notify of a hardware issue. The format of event log is: sensor [description] status is [status] Description field is the name of the sensor, such as fan1, baseboard or power supply1. Status field is the current status of the hardware issue. The log period is 1 day for the lasting sensor failure. Once the failure being fixed, the period will be set to 0. (Refer to the attached document for more information)

This article gives information on how ZoneDirector sensor works and what kind of information it gives.

2015-08-05T14:18:06-0700 2015-08-05T15:00:25-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PJNwCAO?attachment_index=0 2015-08-05T15:00:25-0700 monthly admin,premium knowledge_article_2083 knowledge_article_2083_attachment_1 FS-9.2-ZD5K-SMSD.pdf 400131.0 application/pdf https://support.ruckuswireless.com/articles/000004967 2015-08-03T13:57:44-0700 monthly 0.8 admin,premium knowledge_article_2073 knowledge_article_2073 2015-08-03T13:57:44-0700 000004967 Validated (External) Premium All;Brocade Mobility 6511 Wallplate Access Point Security Security, All Are Ruckus Products affected by the OpenSSL vulnerability CVE-2015-1793? After examining Ruckus product releases, it was determined that none of the products are impacted by this vulnerability as Ruckus Products are not using the impacted versions of OpenSSL distributions. A security Advisory is posted on Ruckus Support site for this vulnerability <a href="https://support.ruckuswireless.com/security" target="_blank">https://support.ruckuswireless.com/security</a>

Are Ruckus Products affected by the OpenSSL vulnerability CVE-2015-1793?

2015-08-03T13:57:44-0700 2015-08-03T15:00:19-0700 https://support.ruckuswireless.com/articles/000004936 2015-08-03T14:07:16-0700 monthly 0.8 admin,premium knowledge_article_2072 knowledge_article_2072 2015-08-03T14:07:16-0700 000004936 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) System network management System Network Management, SmartCell Insight If SCI custom reports break, can I reset the service? This was probably caused by a previously stuck Analyzer reports, up to some limit. There's a protection to cause the server not to get overloaded: Restart the BI Server, by running, as 'root', the following command: service bi-server restart

CustomReports not getting generated - Java run time error displayed

2015-08-03T14:07:16-0700 2015-08-03T15:00:16-0700 https://support.ruckuswireless.com/articles/000004843 2015-07-29T11:27:06-0700 monthly 0.8 admin,premium knowledge_article_2062 knowledge_article_2062 2015-07-07T14:52:30-0700 000004843 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Performance;Configuration;Firmware;Installation;Security;Troubleshooting;Known issues and workarounds;Registration Performance, Configuration, Firmware, Installation, Security, Troubleshooting, Known Issues and Workarounds, Registration, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway, SZ100 What could cause R710 not to connect with SZ 3.1.1 or have webauth/guest pass issues? Recover the AP Certificate using the following procedure : Step 1. Temporarily disable the controller’s AP Certificate checking via its CLI <ol><li>Connect to the controller CLI and enter the “Enable” mode</li></ol> Please wait. CLI initializing... Welcome to the Ruckus SmartCell Gateway 200 Command Line Interface Version: 3.1.1.0.450 vscg-1> en Password: ********* <ol><li>Enter the Config mode and temporarily disable AP Certificate Checking :</li></ol> Vscg-1> config Vscg-1(config)# no ap-cert-check Do you want to continue to disable (or input ‘no’ to cancel)? [yes/no] yes Vscg-1> (config)# exit <img alt="User-added image" height="101" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQIU&feoid=00N50000002Cf3M&refid=0EM50000000Lopk" width="595"></img> Step 2. Reconnect all R710 APs and wait for them to connect to the controller Step 3. Upload the KSP to the controller For controllers in clustered configurations perform the following steps for each node of the SCG, vSCG/vSZ, SZ cluster : Step 1: Upload the script to the controller from the GUI: <ol><li>Administration > Diagnostics</li><li>Click on the Diagnostic Scripts tab from the left-hand menu</li><li>Click the Browse button next to Upload a diagnostic/patch script to the controller, select the KSP file attached, and upload it</li></ol> Upon successful upload, the script will be visible in the System Uploaded Scripts section. See Figure 1. <img alt="User-added image" height="225" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQIU&feoid=00N50000002Cf3M&refid=0EM50000000Lnx9" width="699"></img> Figure 1 – Script uploaded successfully Step 3. Execute the script on the controller’s CLI: Note: When the script is executed all affected R710 APs will be updated and reboot. <ol><li>Enter the Debug and Diagnostic modes and show the script:</li></ol> vscg-1# debug vscg-1(debug)# diagnostic vscg-1(debug-diagnostic)# show diagnostic-script No. Name Description ----- ------------------- ----------------------------- 1 scg_3_1_1_er_2770_351760 <ol><li>Execute the script :</li></ol> vscg-1(debug-diagnostic)# execute scg_3_1_1_er_2770_351760 Output when APs that have the issue are found and resolved : Fixing TPM certificate issue for all APs... AP[C4:01:7C:1F:1C:A0] patch completed and issue found. Fixing certs and rebooting... OK 1 AP/s applied Output when no APs are found to have the issue : vscg-1(debug-diagnostic)# execute scg_3_1_1_er_2770_351760 Fixing TPM certificate issue for all APs... AP[C4:01:7C:1F:1C:A0] patch completed and no issue. 1 AP/s applied Step 4. Re-enable AP Certificate Checking Vscg-1> (debug-diagnostic) # exit Vscg-1> # config Vscg-1(config)# ap-cert-check Do you want to continue to enable (or input ‘no’ to cancel)? [yes/no] yes Vscg-1> (config)# exit Notes For further assistance please contact <a href="https://support.ruckuswireless.com/" target="_blank">Ruckus Support</a>

AP certificate issues may prevent R710 from connecting to vSZ/SCG/SZ-100, or cause client webauth/guest pass authentication failure.

2015-07-29T11:27:06-0700 2015-07-29T15:00:17-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PJ9BCAW?attachment_index=0 2015-07-29T15:00:17-0700 monthly admin,premium knowledge_article_2062 knowledge_article_2062_attachment_1 scg_3_1_1_er_2770_351760.ksp 8472.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000001376 2015-07-24T09:36:54-0700 monthly 0.8 admin,premium knowledge_article_2049 knowledge_article_2049 2013-01-16T07:56:23-0800 000001376 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Configuration;System network management Performance, Configuration, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor How to find number of Stations connected to a AP using SNMP-MIBs <div style="text-align: center;">Finding number of Stations connected to a AP using SNMP-MIBs</div> <div> Tools: MibBrowser </div> <div>http://www.manageengine.com/products/mibbrowser-free-tool/download.html </div> <div>1. Launch ‘MibBrowser” application</div> <div> 2. Load following MIB’s</div> <div> RUCKUS-ROOT-MIB </div> <div> RUCKUS-TC-MIB</div> <div> RUCKUS-RADIO-MIB</div> <div> RUCKUS-WLAN-MIB</div> <div> <img alt="User-added image" height="329" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQDZ&feoid=00N50000002Cf3M&refid=0EM50000000LF9S" width="500"></img></div> <div> </div> <div>3. Expand RUCKUS-WLAN-MIB you can find “ruckusWLANStatsNumSta” </div> <div> 4. Run ‘ruckusWLANStatsNumSta” you will get number of Stations connected to each WLAN of AP <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQDZ&feoid=00N50000002Cf3M&refid=0EM50000000LF9X"></img> <img alt="User-added image" height="283" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PQDZ&feoid=00N50000002Cf3M&refid=0EM50000000LF9c" width="500"></img></div> <div> </div> <div> </div> <div> </div> <div> </div>

Finding number of Stations connected to a AP using SNMP-MIBs

2015-07-24T09:36:54-0700 2015-07-24T15:00:24-0700 https://support.ruckuswireless.com/articles/000004909 2015-07-23T09:13:50-0700 monthly 0.8 admin,premium knowledge_article_2045 knowledge_article_2045 2015-07-23T09:13:50-0700 000004909 Validated (External) Premium Spot lbs Configuration;Installation;System network management Configuration, Installation, System Network Management, SPoT LBS How to change the Volume Size on the vSPoT Instance Apart from changing the HDD size on the VM for vSPoT instance by following the steps "Change the Volume Size on the vSPoT Instance" in vSPoT installation guide, we also need to resize the file system to match the size of the physical disk. For this please contact Ruckus Support https://support.ruckuswireless.com/contact-us and open a case. Support engineer will request you to open a remote support connection from vSPoT GUI. Remote Support For troubleshooting purposes, you will be able to establish a reverse SSH connection to the Ruckus vSPoT support server, so that a Ruckus Customer Support representative can access your vSPoT VM remotely and assist with troubleshooting. 1 Go to Settings > Support. 2 The support representative will give you a 4-digit support connection number. Enter this number in Support Connection Number and click Connect. 3 Click Disconnect after the support session has ended to end the SSH connection. NOTE: In order for the remote support functionality to work properly, please ensure the following: 1. The vSPoT VM has access to a DNS that is able to resolve public URLs. 2. The firewall, if any, allows outbound traffic on port 5000.

HDD size change for vSPoT instance on VM

2015-07-23T09:13:50-0700 2015-07-23T15:00:15-0700 https://support.ruckuswireless.com/articles/000002071 2014-01-11T14:02:18-0800 monthly 0.8 admin,premium knowledge_article_449 knowledge_article_449 2013-06-03T13:50:08-0700 000002071 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Security;System network management Configuration, Installation, Security, System Network Management, ZoneDirector Using a Zone Director, how do I deny access by filtering on MAC address You will of course need to know the MAC address before hand. Or if you like we can block all MAC address you don't authorize. In the ZD GUI click on the "Configure" tab on the top of the page. Click on "Access Control" on the left side of the screen. The top section of the main page will be marked as "L2/ MAC access control". Click on "Create new". Give this new rule a name and description. The next line allows you to either pick to "only allow all stations (client MAC) or "only deny all stations". You would pick the latter. The next field is where you would put the MAC address of the client you want to block. If you want to add additional MAC addresses click on create new. If you don't click on OK. Now you will need to attach this list to the WLAN where you want to block this client. As you are still under the configuration tab on the top of the page you can click on WLAN's on the left side of the page. On the top of the page you will see your WLANs listed. Choose the WLAN ( or one at a time if you want to assign to all or more then one) and click on "EDIT". A new window will open with orange stripes are the top and bottom. Just above the bottom orange stripe click on "Advanced Options". The second line down will be marked as "Access Control". Click on the pull down menu for L2/MAC and choose the list you just created. At the bottom of the page click on "OK" The MAC address should now be blocked.

How to deny or allow access based on MAC address on a Zone Director

2014-01-11T14:02:18-0800 2015-07-20T13:15:30-0700 https://support.ruckuswireless.com/articles/000002405 2015-07-17T09:26:57-0700 monthly 0.8 admin,premium knowledge_article_2037 knowledge_article_2037 2014-01-10T15:32:28-0800 000002405 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor <div style="font-family: Arial; font-size: 13px;">We can check the following information in the support info logs to know why the mesh AP losing its connection with the root AP. </div> <div style="font-family: Arial; font-size: 13px;"> </div> <div style="font-family: Arial; font-size: 13px;"> <div>1) 'Num State Entrance' logs in the support info file gives the information about the no. of times the Mesh AP went in to waiting mode and Island mode. e.g logs: Num State Entrance : </div> <div>? : 0</div> <div>r : 1</div> <div>R : 0</div> <div>I : 116</div> <div>W : 116</div> <div>M : 82</div> <div>K : 0</div> <div>C : 0</div> <div>O : 0</div> <div> </div> <div> <div>Below is the description for each “alphabet letter” show in the “State Entrance” </div> <div> </div> <div>R -RAP (Root AP) </div> <div>I -Island - AP does not have uplink </div> <div>M -Mesh AP (MAP):AP is connected to Wireless link </div> <div>K -Ethernet Map (eMap): AP is connected to Wired uplink </div> <div>C -Consensus - ensuring all emaps agree its best uplink </div> <div>W -Waiting to connect to uplink (wpa supplicant) </div> <div>O -Dormant - Meshd inactive The Island SSID is known as the Mesh Recovery SSID which assists in recovering isolated Mesh APs in the event that they lose connection to their uplink AP. From the above logs, we see that mesh AP went in to Island and Waiting states for 116 times.</div> </div> <div> </div> <div>2) Low RSSI value. e.g logs: </div> <div>Mesh AP have very low RSSI value to establish a mesh connection to the root AP. The optimum value suggested to have is 30 - 35 RSSI.</div> <div> </div> <div>### MESH Uplink History ###</div> <div> </div> <div>BSSID S LastSeen Ch AdvUpl SmpUpl CalcUpl RSSI/UL/NF Flt IF UR D Seen Management-MAC SSID IP</div> <div>c0:8a:de:a3:1e:c3 U 77079 11 130.00 12.00 12.00 19/13/-105 u - u 1 12 c0:8a:de:23:1e:c0 Mesh-101103000023 192.168.64.78</div> <div>c0:8a:de:a3:1e:c3 U 77045 11 130.00 12.00 12.00 19/13/-105 u - u 1 48 c0:8a:de:23:1e:c0 Mesh-101103000023 192.168.64.78</div> <div>c0:8a:de:a3:1e:c3 U 75446 11 130.00 18.00 18.00 20/14/-105 u - u 1 48 c0:8a:de:23:1e:c0 Mesh-101103000023 192.168.64.78</div> <div>c0:8a:de:a3:1e:c3 U 74336 11 130.00 18.00 18.00 20/14/-105 u - u 1 59 c0:8a:de:23:1e:c0 Mesh-101103000023 192.168.64.78</div> <div>c0:8a:de:a3:1e:c3 U 72896 11 130.00 18.00 18.00 20/14/-105 u - u 1 67 c0:8a:de:23:1e:c0 Mesh-101103000023 192.168.64.78</div> <div>c0:8a:de:a3:1e:c3 U 71239 11 130.00 18.00 18.00 20/14/-105 u - u 1 17 c0:8a:de:23:1e:c0 Mesh-101103000023 192.168.64.78</div> <div>c0:8a:de:a3:1e:c3 U 71064 11 130.00 18.00 18.00 20/14/-105 u - u 1 56 c0:8a:de:23:1e:c0 Mesh-101103000023 192.168.64.78</div> <div>c0:8a:de:a3:1e:c3 U 69805 11 130.00 18.00 18.00 20/14/-105 u - u 1 150 c0:8a:de:23:1e:c0 Mesh-101103000023 192.168.64.78</div> <div>c0:8a:de:a3:1e:c3 U 64836 11 130.00 18.00 18.00 21/14/-105 u - u 1 27 c0:8a:de:23:1e:c0 Mesh-101103000023 192.168.64.78</div> <div> Resolution : </div> <div>Move the mesh AP near to the AP or you can manually configure the mesh uplink to a particular AP under ZD GUI :: Go to configure tab :: Access Points :: Access points :: Click on edit options based on the mac-address of the AP :: Under Advanced Options</div> <div> <div> </div> <div>- As this is a mesh AP, select it as " Mesh AP " in the mesh mode.</div> <div> </div> <div>Under the Uplink Selection, </div> <div> </div> <div>- Select the option manual and select the uplink with better signal. </div> <div> </div> <div>As the uplink of the mesh up is not stable it is loosing connectivity. This might cause client disconnection issues Selecting the mesh uplink manually and keeping the AP in a location where it can get the best RSSI value to connect to the Root AP should fix the issue.</div> </div> </div>

2015-07-17T09:26:57-0700 2015-07-17T15:00:17-0700 https://support.ruckuswireless.com/articles/000004385 2015-07-15T13:45:11-0700 monthly 0.8 admin,premium knowledge_article_2031 knowledge_article_2031 2015-07-01T04:46:48-0700 000004385 Validated (External) Premium Virtual smartcell gateway Known issues and workarounds Known Issues and Workarounds, virtual SmartCell Gateway How do I upgrade to vSCG 3.0.4 from 3.0.3? An upgrade from the vSCG 2.5 release to 3.0.3 was not supported and the customers were supposed to re-spin the instance. However from 3.0.4 onwards, the customers can upgrade to this version from 3.0.3 directly without the need to make a fresh installation.

This article explains the procedure to upgrade from 3.0.3 to 3.0.4

2015-07-15T13:45:11-0700 2015-07-15T15:00:26-0700 https://support.ruckuswireless.com/articles/000004887 2015-07-15T01:54:42-0700 monthly 0.8 admin,premium knowledge_article_2029 knowledge_article_2029 2015-07-15T01:54:42-0700 000004887 Validated (External) Premium Virtual smartcell gateway Installation;Troubleshooting Installation, Troubleshooting, virtual SmartCell Gateway Wait 60 mins for the update to occur

AP External IP does not update in the GUI, unless you delete AP and let it rejoin to controller. After moving APs between sites ( subnets) the APs external IP does not update in vSCG GUI right away while the service is up and fine

2015-07-15T01:54:42-0700 2015-07-15T03:00:15-0700 https://support.ruckuswireless.com/articles/000004874 2015-07-13T13:35:37-0700 monthly 0.8 admin,premium knowledge_article_2024 knowledge_article_2024 2015-07-13T13:35:37-0700 000004874 Validated (External) Premium Mobile apps;RUCKUS One Mobile Apps;Ruckus Cloud Mobile Apps Known issues and workarounds Known Issues and Workarounds, Mobile Apps Any reason I can't find Android version of Speedflex on Google PlayStore? No problems seen in Android KitKat 4.4.2 or Lollipop prior to 5.1.1, ie 5.0.2 patch. If Lollipop device searches 'Ruckus' or 'Ruckus Wireless' they do not find Speedflex App. If Lollipop device searches specifically 'Ruckus Speedflex' they will find the Speedflex App.

Certain versions of Android OS appear to have search related problems finding Speedflex on Google apps PlayStore

2015-07-13T13:35:37-0700 2015-07-13T15:00:15-0700 https://support.ruckuswireless.com/articles/000001851 2015-07-10T09:53:13-0700 monthly 0.8 admin,premium knowledge_article_2018 knowledge_article_2018 2013-03-19T11:27:39-0700 000001851 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector Which Debug components to Enable ? System Management : Runs debug for Zone Director system related things, can be enabled to check the the ZD DHCP server and system related function. Web Authentication: Runs debug on captive portal and web authentication using AAA severs, Zero -IT if authentication is through AD RADIUS: Runs debug on communication between ZD and RADIUS server and , authentication using RADIUS server . Access Points: Enable this in case of AP disconnections, communication difficulty between AP and ZD. AP reboots and anything related with AP <div>802.1x: Runs debug on authentication method using 802.1x, should be enabled in case of issues with 802.1x authentication 802.11: Enabled in most of the cases, runs a debug with everything related to wireless 802.11, Zero - IT Mesh: Enabled in case of Mesh related issues, when APs are not meshing or mesh disconnection RF Management: Runs debug on RF related management, eg: Channel Fly, Band Steering, etc.. Hotspot Services: Enabled in case of Hot Spot related issues like authentication, hotspot redirection issues Network Management: Runs debug on Network Management, communication with Flex master, SNMB ect. Web Server : Runs debug on Web Server related issues, captive portal, Zero -IT, redirection issues etc. Dynamic VLAN: Only need to be enabled if Dynamic VLAN is configured and see issues with the same Smart Redundancy: Runs debug on smart redundancy, should be enabled if facing any problem with smart redundancy Web Pages: Enabled in case of any issue with clients accessing any web page, web page redirection issues in case of web authentication etc , Zero -IT also </div>

2015-07-10T09:53:13-0700 2015-07-10T15:00:27-0700 https://support.ruckuswireless.com/articles/000001608 2015-07-10T09:55:34-0700 monthly 0.8 admin,premium knowledge_article_2015 knowledge_article_2015 2013-02-24T19:44:51-0800 000001608 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor How to Enable or Disable WDS? Wireless Distribution System(WDS) can be Enabled or Disabled by using the following CLI commands for an AP <ul><li>Use the command below to check if WDS is Enabled or Disabled </li></ul> get wds-mode <wlan name> ( eg - rkscli:get wds-mode wlan0 ) <ul><li>Use the command below to Enable or Disable WDS </li></ul> set wds-mode {enable|disable} <wlan name> ( eg- rkscli:set wds-mode disable wlan0 ) NOTE: By default WDS is enabled on APs

Commands to Enable or Disable WDS - Wireless Distribution System

2015-07-10T09:55:34-0700 2015-07-10T15:00:19-0700 https://support.ruckuswireless.com/articles/000001391 2015-07-07T14:07:24-0700 monthly 0.8 admin,premium knowledge_article_2011 knowledge_article_2011 2013-01-16T19:33:14-0800 000001391 Validated (External) Premium Connecting-Wireless-Printer-on-Guest-WLAN <div>Use a Non-Webauth WLAN on the Guest Access VLAN for non-webauth capable guest resources. 1. Create a Standard WLAN with WPA PSK, 2. Connect the printer on this WLAN. - Most printers will work with open and WPA enabled WLAN's. - WPA2/AES combination is prefered if the printer/device supports it. </div> <div>For the above scenario, if the Guest users are placed on a VLAN, then we can allow them to access the printer by creating a Standard WLAN (with/without auth), tagged with the same VLAN as the Guest users'. After connecting the printer to this WLAN on the same VLAN, the Guest users will be able to access the printer/other resource. </div> <div>If a customer wants Full Client Isolation enabled on the Guest WLAN, they will have to allow the printer's IP address under Restricted Subnets (eg: 192.168.2.25/32 - this /32 host address allows only this single IP) to permit/allow the Guests access to the device.</div>

User's on Guest type WLAN unable to access Wireless Printer on same WLAN and VLAN.

2015-07-07T14:07:24-0700 2015-07-08T07:12:09-0700 https://support.ruckuswireless.com/articles/000004842 2015-07-07T14:32:29-0700 monthly 0.8 admin,premium knowledge_article_2010 knowledge_article_2010 2015-07-07T14:30:33-0700 000004842 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Firmware;System network management Performance, Firmware, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How often is are the statistics updated on Montitor / WLANs page? Access Points send periodic updates at 90 second intervals, reporting cumulative client and other statistics. The ZoneDirector aggregates whatever it receives and displays the results whenever the page is refreshed (the blue ball with arrows in the top/right of the WLAN statistics section).

APs report client and other statistics to ZoneDirector at 90 second update intervals

2015-07-07T14:32:29-0700 2015-07-07T15:00:20-0700 https://support.ruckuswireless.com/articles/000002049 2015-07-07T14:50:19-0700 monthly 0.8 admin,premium knowledge_article_2008 knowledge_article_2008 2013-05-20T14:15:20-0700 000002049 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Is Zero-IT or DPSK supported for Chromebooks? DPSK will work with any device since it's based on standard WiFi authentication mechanisms. In cases where it doesn't, there may be issues with non-standard implementation of WPA authentication on the device. For Zero-IT - Chromebooks are not supported at this time. Please contact your Sales Engineer (SE) for more information on this feature. Update July 7, 2015: Google has again confirmed to Ruckus that we won't be able to support Zero-IT in ChromeOS because WLAN configuration API is not supported in their platform. We will not be able to provide a Zero-IT for Chromebook solution, until the platform supports it.

Google ChromeOS does not support the wireless LAN API necessary for Zero-IT.

2015-07-07T14:50:19-0700 2015-07-07T15:00:15-0700 https://support.ruckuswireless.com/articles/000004768 2015-07-07T01:44:31-0700 monthly 0.8 admin,premium knowledge_article_2007 knowledge_article_2007 2015-07-07T01:44:31-0700 000004768 Validated (External) Premium Zoneflex indoor Configuration Configuration, ZoneFlex Indoor How to change AP from one VLAN to another in access mode? - If the AP is powered via PoE, shutdown the port where it is connected to. If the AP is powered via DC or power injector, try to disconnect it (or alternatively reboot the AP and execute the following step right after). - Modify VLAN settings in switch port. - Un-shut the port in the switch again, so the AP will boot up. It will obtain new IP address from DHCP during boot up.

How to change AP from one VLAN to another in access mode?

2015-07-07T01:44:31-0700 2015-07-07T03:00:17-0700 https://support.ruckuswireless.com/articles/000004136 2015-07-02T10:25:16-0700 monthly 0.8 admin,premium knowledge_article_2001 knowledge_article_2001 2015-03-04T15:55:46-0800 000004136 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor How can I extract AP support info via CLI command? Prerequisite is a TFTP server, reachable from the AP, (ie 192.168.0.193) Entering 'support' command from AP CLI will create a /tmp/support file, that you can extract with TFTP. Here is the procedure: <ol><li style="color: navy;">SSH to the AP</li><li style="color: navy;">Type the command ‘support’. Wait until the CLI prompt returns (hit enter if it takes too long)</li><li style="color: navy;">Install a TFTP server somewhere in the remote network</li><li style="color: navy;">Every time you run the 'support' cmd from CLI, it will overwrite the internally stored /tmp/support file, so include date/time information in the filename stored on the TFTP server, eg support200810081740.txt</li></ol> rkscli: tftp put 192.168.0.193 /tmp/support AP_support_2008_10_08_1740.txt If you want to simply see the support info output at the CLI, type "support show" command after you have typed "support" command. This can be collected if you save your SSH session output to a file.

AP CLI commands can manually extract AP support info to a TFTP server or saved SSH session output.

2015-07-02T10:25:16-0700 2015-07-02T15:00:22-0700 https://support.ruckuswireless.com/articles/000004565 2015-07-02T11:27:10-0700 monthly 0.8 admin,premium knowledge_article_1999 knowledge_article_1999 2015-05-17T17:52:19-0700 000004565 Validated (External) Premium Performance;Troubleshooting Performance, Troubleshooting Why are reports showing different results Limitations of any report should be understood and the most appropriate and most correct data source used for each reporting task. Other data sources can be referenced for getting further details of traffic that may not have been revealed in the other data source. This could include total data transferred by a user in a single session where the session spans a reporting period defined in the original report.

SCI reporting shows different results for the same query when data is taken from different source databases. For example AP RX & TX stats show different results when collected from 'AP Statistics' vs "Complete Client Sessions'

2015-07-02T11:27:10-0700 2015-07-02T15:00:19-0700 https://support.ruckuswireless.com/articles/000004821 2015-07-02T04:31:55-0700 monthly 0.8 admin,premium knowledge_article_1997 knowledge_article_1997 2015-07-02T04:31:55-0700 000004821 Validated (External) Premium Flexmaster;FlexMaster Troubleshooting Troubleshooting, FlexMaster Unable the upload the license file in Flexmaster at administer -> License tab and gives an error message as "You don't have the permission" Network administrator role needs to be assigned to user who uploads the License files. If user is assigned with other roles like group administrator, then License files can't be uploaded in Flexmaster. It gives the error message as "You don't have the permission"

Unable the upload the license file in Flexmaster at administer -> License tab and gives an error message as "You don't have the permission"

2015-07-02T04:31:55-0700 2015-07-02T09:00:26-0700 https://support.ruckuswireless.com/articles/000004822 2015-07-02T06:07:54-0700 monthly 0.8 admin,premium knowledge_article_1996 knowledge_article_1996 2015-07-02T06:07:54-0700 000004822 Validated (External) Premium Virtual smartcell gateway Troubleshooting Troubleshooting, virtual SmartCell Gateway Unable to upgrade the vSCG firmware, Error message => Unable to upload the vSCG carrier license file. Reason : The field license file exceeds its maximum permitted size of 1048576 bytes - Image file is uploading at Administration -> Licenses tab instead of Upgrade tab. It gives error message as shown below. - Uploaded the image file at Administration -> Upgrade -> System Upgrade tab and the vSCG got upgraded. <img alt="Unable to upload the vSCG carrier license file. Reason : The field license file exceeds its maximum permitted size of 1048576 bytes" height="217" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPng&feoid=00N50000002Cf3M&refid=0EM50000000LnCX" width="500"></img>

Unable to upgrade the vSCG firmware Error message => Unable to upload the vSCG carrier license file. Reason : The field license file exceeds its maximum permitted size of 1048576 bytes

2015-07-02T06:07:54-0700 2015-07-02T09:00:21-0700 https://support.ruckuswireless.com/articles/000004792 2015-07-02T06:55:24-0700 monthly 0.8 admin,premium knowledge_article_1995 knowledge_article_1995 2015-07-02T06:55:24-0700 000004792 Validated (External) Premium Virtual smartcell gateway Configuration;Installation;Known issues and workarounds Configuration, Installation, Known Issues and Workarounds, virtual SmartCell Gateway Does vSCG support Map View? As of now we do not have an option on vSCG to load floor plans / building maps like Map View feature on ZoneDirector. However we can view the Access Points on the Google Maps by configuring latitude / longitude coordinates on the Access Points settings of vSCG.

Support for Map View on SmartCell Gateway

2015-07-02T06:55:24-0700 2015-07-02T09:00:19-0700 https://support.ruckuswireless.com/articles/000004790 2015-07-02T07:18:13-0700 monthly 0.8 admin,premium knowledge_article_1994 knowledge_article_1994 2015-07-02T07:18:13-0700 000004790 Validated (External) Premium Zoneflex indoor Configuration Configuration, ZoneFlex Indoor Why wireless configuration options are not available when trying to configure a Controller managed Access Point as stand alone Firmware upgrade would resolve the issue.

ZD managed APs,wanted to configure in stand alone mode,but after hard reset wireless configuration options are missing

2015-07-02T07:18:13-0700 2015-07-02T09:00:16-0700 https://support.ruckuswireless.com/articles/000004805 2015-07-01T05:14:51-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1984 knowledge_article_1984 2015-07-01T05:14:51-0700 000004805 Validated (External) Public Virtual smartcell gateway Installation Installation, virtual SmartCell Gateway What is the procedure to migrate vSZ from a KVM host to a VMware host? You can typically use a converter tool available from the VMWare website for this type of migration. If you rather prefer not to deal with a tool, please follow the procedure below: 1. Backup configuration of the vSZ hosted on a KVM machine first. 2. Create a new instance on VMware for the vSCG install. - Latest OVA can be downloaded from https://support.ruckuswireless.com/software?filter=63#firmwares - Minimum system requirements can be obtained from the Getting Started Guide available at https://support.ruckuswireless.com/documents?filter=63#documents 3. Finish the initial install. 4. Restore configuration using the backup taken in step # 1 above. Wait until all services restart which can take upto 15 minutes. 5. RMA existing licenses on KVM so they can be transferred to the VMware based vSZ. This can be done using the "LiMAN" tool on the https://support.ruckuswireless.com/ website.

This article contains procedure for migrating vSZ on a KVM host machine to a VMware machine.

2015-07-01T05:14:51-0700 2015-07-01T09:00:18-0700 https://support.ruckuswireless.com/articles/000004798 2015-06-29T21:53:23-0700 monthly 0.8 admin,premium knowledge_article_1982 knowledge_article_1982 2015-06-29T21:50:34-0700 000004798 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance Performance, ZoneDirector What will be the maximum number of concurrent WPA2-AES encrypted clients connected to a ZD1200 and R700? The ZD1200 supports upto 2000 concurrent clients of any encryption. The concurrent user limit for specific encryption is based on the AP model. The R700 supports upto 128 users in 2.4 GHz and 96 users in 5 GHz respectively for WPA2-AES encryption.

This article explains the capacity of the ZD1200 and the R700 in terms of the maximum number of clients connected with AES encryption.

2015-06-29T21:53:23-0700 2015-06-30T03:00:15-0700 https://support.ruckuswireless.com/articles/000001755 2015-06-25T02:13:02-0700 monthly 0.8 admin,premium knowledge_article_1972 knowledge_article_1972 2013-03-05T22:09:28-0800 000001755 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector

How to install the cert on wireless clients to avoid the server certificate error in EAP-PEAP

2015-06-25T02:13:02-0700 2015-06-25T03:00:26-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PDHDCA4?attachment_index=0 2015-06-25T03:00:26-0700 monthly admin,premium knowledge_article_1972 knowledge_article_1972_attachment_1 install 802.1x server cert.pdf 776097.0 application/pdf https://support.ruckuswireless.com/articles/000004659 2015-06-07T01:18:47-0700 monthly 0.8 admin,premium knowledge_article_1923 knowledge_article_1923 2015-06-07T01:18:47-0700 000004659 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector ZF 7321-U, 7351 and 7962 APs are no longer supported on 9.9 version and hence if you have any ZD managing these APs please do not upgrade to version 9.9. The maximum supported version for the above APs is 9.8.2. Also, ZF 7025 is no longer supported by the ZD 1100 on version 9.9. If you are using a ZD 1100 with ZF 7025 APs please do not upgrade to 9.9.

2015-06-07T01:18:47-0700 2015-06-22T22:34:22-0700 https://support.ruckuswireless.com/articles/000004750 2015-06-22T04:03:46-0700 monthly 0.8 admin,premium knowledge_article_1964 knowledge_article_1964 2015-06-22T04:03:46-0700 000004750 Validated (External) Premium Smartcell insight;Sz100;SmartCell Insight (SCI);SmartZone 100-D (SZ100-D) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Insight, SZ100 How to delete the SZ-100 entries from SCI To remove the SZ entries from the SCI. - Open the SCI Monitoring/setup page. - under the Smart Zone, we should see the list of SZ that were added/manged previously. - Click deactivate on the SZ that you would like to remove. - Once deactivated devices under Sources. Click on show to see them and here we will see the delete option.

How to delete the SZ-100 entries from SCI. The customer has added two SZ-100 with same IP.

2015-06-22T04:03:46-0700 2015-06-22T09:00:28-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PJ38CAG?attachment_index=0 2015-06-22T09:00:28-0700 monthly admin,premium knowledge_article_1964 knowledge_article_1964_attachment_1 SCI.png 87942.0 image/png https://support.ruckuswireless.com/articles/000004663 2015-06-19T03:55:45-0700 monthly 0.8 admin,premium knowledge_article_1961 knowledge_article_1961 2015-06-14T22:04:26-0700 000004663 Validated (External) Premium Virtual smartcell gateway Configuration;Installation;System network management Configuration, Installation, System Network Management, virtual SmartCell Gateway How to extract vSCG configuration backup and restore it from GUI ? <div style="text-align: center;">Extracting configuration backup / Restore Configuration from vSCG GUI</div> Backup Configuration: 1. Navigate to Administration >> Click on "Configuration Backup & Restore" 2. Click on "Back up Configuration" 3. A configuration backup is created under "System Configuration Backups" 4. To download the configuration click on "Download the system configuration backup file" 5. The configuration will be downloaded to the local PC with .bak extension. <img alt="User-added image" height="139" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPPP&feoid=00N50000002Cf3M&refid=0EM50000000Llop" width="500"></img> Restoring backup configuration: 1. Navigate to Administration >> Click on "Configuration Backup & Restore" 2. Click on "Upload" under "System Configuration Backups" <img alt="User-added image" height="146" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPPP&feoid=00N50000002Cf3M&refid=0EM50000000Llou" width="500"></img> 3. Browse the configuration file with .bak extension from local PC and upload on to the vSCG. <img alt="User-added image" height="189" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPPP&feoid=00N50000002Cf3M&refid=0EM50000000Lloz" width="500"></img> 4. Once the file is successfully uploaded it comes under System Configuration Backups, Click on "Restore the system configuration" icon under Actions. <img alt="User-added image" height="138" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPPP&feoid=00N50000002Cf3M&refid=0EM50000000Llp4" width="500"></img> 5. To apply the changes, vSCG will take few minutes and comes up with the new configuration.

Steps for extracting configuration backup and Restoring backup on vSCG via GUI.

2015-06-19T03:55:45-0700 2015-06-19T09:00:18-0700 https://support.ruckuswireless.com/articles/000004739 2015-06-18T19:44:48-0700 monthly 0.8 admin,premium knowledge_article_1954 knowledge_article_1954 2015-06-18T19:44:48-0700 000004739 Validated (External) Premium Flexmaster;FlexMaster Configuration Configuration, FlexMaster Is it possible to send logs from Flexmaster to an External syslog Server? No. There is no option to send logs to an External Syslog Server from Flexmaster.

Can I send logs from Flexmaster to an External syslog Server?

2015-06-18T19:44:48-0700 2015-06-18T21:00:16-0700 https://support.ruckuswireless.com/articles/000004710 2015-06-18T02:30:26-0700 monthly 0.8 admin,premium knowledge_article_1949 knowledge_article_1949 2015-06-15T22:07:41-0700 000004710 Validated (External) Premium Sams;Smart Access Management (SAMs) Firmware;Troubleshooting Firmware, Troubleshooting, SAMs When will SAMS support the R300 AP? The end of sale of the SAMs service has been announced on the Ruckus Wireless Support site. For further details see: https://support.ruckuswireless.com/documents/769-sams-end-of-sale-notification

This article explains that SAMs is EoL and thus R300 will not be supported

2015-06-18T02:30:26-0700 2015-06-18T03:00:17-0700 https://support.ruckuswireless.com/articles/000004718 2015-06-18T02:56:17-0700 monthly 0.8 admin,premium knowledge_article_1948 knowledge_article_1948 2015-06-18T02:56:17-0700 000004718 Validated (External) Premium Ruckus support services Registration Registration, Ruckus Support Services Is there any free online training course for partner/reseller? Please visit https://training.ruckuswireless.com/ and register as Ruckus Wireless Partner/reseller to access free training material.

This article explains how to register on our training portal as a partner/reseller, allowing access to free training material.

2015-06-18T02:56:17-0700 2015-06-18T03:00:15-0700 https://support.ruckuswireless.com/articles/000004715 2015-06-16T23:40:49-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1943 knowledge_article_1943 2015-06-16T23:40:49-0700 000004715 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How can I load DPSK manually on a client device? Please use the attached document.

This article explains procedure to use for manually setting up a DPSK on a user device. Reasons could include, lack of support for the client OS altogether or current OS version, customer doesn't want to run untrusted executables, etc.

2015-06-16T23:40:49-0700 2015-06-17T03:00:24-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PJ0JCAW?attachment_index=0 2015-06-17T03:00:24-0700 monthly admin,premium,warranty,guest knowledge_article_1943 knowledge_article_1943_attachment_1 Manual DPSK setup on Android.pdf 347928.0 application/pdf https://support.ruckuswireless.com/articles/000004720 2015-06-16T23:41:58-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1942 knowledge_article_1942 2015-06-16T23:41:58-0700 000004720 Validated (External) Public Flexmaster;FlexMaster Troubleshooting Troubleshooting, FlexMaster What information need to be collected before I report any issues regarding the FlexMaster? FM management is pretty simple and straightforward. Most of the time the logs and error messages on both ends (FM and ZD/AP/P-to-P bridge) will be enough to give a clue on what went wrong. In case you further need help user guides, forums, and KB articles can be used to diagnose the root cause. If nothing works, you can always approach Ruckus Support. Please do check following parameters before opening a case: 1. Available licenses. This can be checked under Administer --> License page. 2. Firmware version. This can be checked under Administer --> Support page. Ideally this should be same or higher than device versions it is managing. 3. Proper ports are opened for device upgrades, device management, pushing configuration changes, and sending out email alarms. 4. Validity period of ZD's certificate if it is managed by FM. 5. User permissions and device groups they can manage. 6. For Dashboard widget issues, remove all widgets first and start adding with the widget you see issues with. 7. Use the "View Log" button on the Administer --> Support page to see if it gives any clue. You can view through current and old logs using the dropdown list. If you have to open a case please include following details: 1. Time of issue occurrence 2. Relevant screenshots 3. Download "Full Logs" from the Administer --> Support page.

This article explains information that need to be collected and how to collect it to report any FM issues to Ruckus Support.

2015-06-16T23:41:58-0700 2015-06-17T03:00:22-0700 https://support.ruckuswireless.com/articles/000004722 2015-06-17T00:51:46-0700 monthly 0.8 admin,premium knowledge_article_1941 knowledge_article_1941 2015-06-17T00:51:46-0700 000004722 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Installation;System network management;Troubleshooting;Known issues and workarounds Configuration, Installation, System Network Management, Troubleshooting, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway, SZ100 How do I rename an SCG cluster whilst in production? 1. Perform a configuration backup on one of the SCG nodes 2. Download the configuration backup to your PC 3. Power down one of the existing nodes (herein after referred to as node1) 4. Perform a factory reset on node1 5. Reinstall node1 using the new cluster name 6. Once the initial installation is complete, upload and restore the configuration backup downloaded in step 2 7. On one of the nodes of the old cluster, configure and enable the cluster-failover (cluster redundancy) function, adding the control ip of node1 to the list. 8. Verify that all APs receive this new information, by issuing a "get scg" on the AP CLI. Perform the following steps for each node (except node1, already on the new cluster): 1. Factory reset the node 2. Run the installation wizard, having it join the new cluster name you created when deploying node1. The APs will automatically fail over to the new cluster when the last node of the old cluster is no longer available. Important: All statistical data stored on the SCGs will be lost during this process.

This article explains one method for changing the name of an SCG cluster in production. This may be necessary if underscores were used initially and, after upgrading to RuckOS 3.0+ (where underscores are no longer permitted in the cluster name), a new node needs to be joined.

2015-06-17T00:51:46-0700 2015-06-17T03:00:18-0700 https://support.ruckuswireless.com/articles/000004091 2015-06-16T09:39:30-0700 monthly 0.8 admin,premium knowledge_article_1605 knowledge_article_1605 2015-02-26T05:44:31-0800 000004091 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector High System is recovered from failure alerts from the ZD5000 Problem is due to high CPU utilization on the ZD, Try the following steps on the ZD side. - Disable Tunneling for the wlan. - Application Visibility for the specific wlan at Advanced options of the wlan configuration. This helps to reduce the CPU load on the ZD and it wont show the high system failure alerts.

High System is recovered from failure alerts on the ZD5000

2015-06-16T09:39:30-0700 2015-06-16T15:00:22-0700 https://support.ruckuswireless.com/articles/000003862 2015-06-15T14:27:17-0700 monthly 0.8 admin,premium knowledge_article_1547 knowledge_article_1547 2015-01-16T13:00:21-0800 000003862 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell ap Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP Why is my laptop client getting low throughput of 20Mbs when both the client and AP model are 802.11ac compatible and connected as .ac? Low throughput issues was caused by thrid party SW inSSIDer (by Metageek). Every time the SW polled the WiFi client on the laptop, it interuupted all transmission and reception, resulting in a very low throughput. Also noted was wild swings in ping time, from ~4msec to over 1500 msec, nearly every other ping showed this indication. Shutting down Third Party SW (inSSIDer by Metageek) completely cleared the issues with throughput and ping reply time.

Laptops appear to get low throughput when connected to R700 AP

2015-06-15T14:27:17-0700 2015-06-15T15:00:15-0700 https://support.ruckuswireless.com/articles/000004691 2015-06-15T00:16:13-0700 monthly 0.8 admin,premium knowledge_article_1936 knowledge_article_1936 2015-06-15T00:16:13-0700 000004691 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway What are the certificate requirements for anonymous authentication (OSEN) in HS2.0? For a certificate to be used for OSEN (anonymous authentication) in HS2.0 rl2 it should: <ol><li>Be valid</li><li>Be signed by a recognized certificate authority (CA)</li><li>Contain a friendly name</li></ol> If these requirements are not met, the certificate will not be shown on the list of certificates for use with OSEN: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPPU&feoid=00N50000002Cf3M&refid=0EM50000000LlpT"></img>

This article describes the requirements for a certificate to be used with hotspot 2.0 and anonymous authentication (OSEN).

2015-06-15T00:16:13-0700 2015-06-15T03:00:18-0700 https://support.ruckuswireless.com/articles/000004435 2015-06-12T00:23:41-0700 monthly 0.8 admin,premium knowledge_article_1934 knowledge_article_1934 2015-05-12T23:35:21-0700 000004435 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) System network management;Troubleshooting System Network Management, Troubleshooting, SmartCell Gateway, virtual SmartCell Gateway Why are FTP transfers from the SCG failing? FTP command format: <div style="margin-left: 40px;"> copy backup ftp://<username>:<password>@<ip>[/<dir-path>]</div> <div> Note: When password of username is incorrect the error message states the server is unreachable. This can be confusing when confirming correct syntax. Starting to copy the chosen backup to remote FTP server... % Ftp server is not reachable % Failed to copy to remote FTP server tested examples: </div> <div style="margin-left: 40px;">copy backup-config ftp://ruckususer:Ruckus123@ftp.example.com/SCG copy backup-network ftp://ruckususer:Ruckus123@192.168.0.10</div> <div style="margin-left: 40px;"> </div> <div> </div>

2015-06-12T00:23:41-0700 2015-06-12T03:00:14-0700 https://support.ruckuswireless.com/articles/000004683 2015-06-11T17:18:12-0700 monthly 0.8 admin,premium knowledge_article_1933 knowledge_article_1933 2015-06-11T10:38:33-0700 000004683 Validated (External) Premium Zonedirector;Zoneflex indoor;Smartcell gateway;Virtual smartcell gateway;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration Configuration, ZoneDirector, ZoneFlex Indoor, SmartCell Gateway, virtual SmartCell Gateway, SZ100 What behavior is associated with AP Ethernet Port Setting of General? Example Port Settings under AP Group: <img alt="User-added image" height="240" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPOR&feoid=00N50000002Cf3M&refid=0EM50000000Llhe" width="500"></img> The Port Setting options determine how to deal with two aspects of VLANs. a. What VLANs are processed versus dropped b. What to do with untagged packets (aka native VLAN) 1. General port configuration allows you to specify the member VLANs that belong to the trunk, including the ability to configure the untagged 'native' VLAN ID. 2. Trunk port configuration does not allow you to configure the member VLANs, but implies that all VLANs will be processed (1-4094). The only available configuration is whether there is an untagged 'native' VLAN ID as well. If not, every VLAN is tagged. If native VLAN is set to '2', VLAN 1 becomes tagged; if native VLAN is set to '1', VLAN 1 is not tagged. 3. Access port is assigned to an untagged VLAN ID only. The access port doesn't tag any traffic and all untagged traffic received is assumed to be a part of the VLAN assigned to the port. Typically a single VLAN is assigned (*except in the case of DVLAN, where notion of untagged is still true, but depending on mac address, the VLAN is handled based on the station(s) present. So the difference between the Trunk port and General port is that the General port configuration has the ability to specify the members of the trunk, whereas the Trunk port configuration does not. Behavior with untagged ingress traffic is the same between port configurations.

AP Group specific model AP Port Setting types include Access, Trunk, and General that behaves similarly to Trunk

2015-06-11T17:18:12-0700 2015-06-11T21:00:15-0700 https://support.ruckuswireless.com/articles/000004678 2015-06-10T12:20:34-0700 monthly 0.8 admin,premium knowledge_article_1930 knowledge_article_1930 2015-06-10T12:20:34-0700 000004678 Validated (External) Premium Spot;Ruckus SPoT;Calibrator App for SPoT;vSPoT Troubleshooting Troubleshooting, SPoT Why does my vSPoT show a single colored heat-map? Create a new radio map (you may choose to inherit from the existing map). During the creation process, be sure to accurately define the scale of the map.

This article describes why a heat-map for a venue configured in vSPoT may show as a single colour for both historical and real-time data.

2015-06-10T12:20:34-0700 2015-06-10T15:00:15-0700 https://support.ruckuswireless.com/articles/000004664 2015-06-09T11:39:10-0700 monthly 0.8 admin,premium knowledge_article_1928 knowledge_article_1928 2015-06-09T11:39:10-0700 000004664 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Can you override the AP's default group IP address settings? Modify AP default group IP settings from ZoneDirector: 1. Go to Configure/Access Points page, click Edit on the AP you want changed. 2. Under Network Settings sections, click the box marked Override Group Config. <img alt="User-added image" height="281" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PPLX&feoid=00N50000002Cf3M&refid=0EM50000000LlZu" width="500"></img> 3. Update new AP IP address information, and click OK. When the AP reboots, it will no longer accept a push of the IP configuration from the ZoneDirector

You can override default AP IP address settings thru ZD Edit AP

2015-06-09T11:39:10-0700 2015-06-09T15:00:21-0700 https://support.ruckuswireless.com/articles/000004669 2015-06-09T13:35:26-0700 monthly 0.8 admin,premium knowledge_article_1926 knowledge_article_1926 2015-06-09T13:35:26-0700 000004669 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Flexmaster;FlexMaster Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, FlexMaster Why can't FlexMaster see a standalone AP that was previously ZD managed? Enable or disable as required by Customer. 1. Upload standalone AP base image firmware 100.x 2. Set factory, and reboot AP. 3. Login to AP from WebUI Enter Administration::Management, TR069 4. Confirm TR069 status from AP CLI, SSH into AP rkscli: get tr069

The TR069 protocol used for FlexMaster/AP communications is disabled after a previously ZD managed AP installs standalone base image firmware.

2015-06-09T13:35:26-0700 2015-06-09T15:00:15-0700 https://support.ruckuswireless.com/articles/000004638 2015-06-04T06:30:54-0700 monthly 0.8 admin,premium knowledge_article_1920 knowledge_article_1920 2015-06-04T06:30:54-0700 000004638 Validated (External) Premium Zonedirector;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartZone 100-D (SZ100-D) Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector, SZ100 Why does HTTPS redirect fail when apple CNA is bypassed? Enable CNA and allow it to work normally- with Https redirect enabled.

We have ZD Hotspots with CNA enabled, but we "bypass" the CNA log on pop-up, to enable the free wireless users to simply input the desired destination URL into Safari directly. This is done by sending a success message back when an Apple device is seen connecting to the Wispr enabled WLAN

2015-06-04T06:30:54-0700 2015-06-04T09:00:19-0700 https://support.ruckuswireless.com/articles/000004616 2015-05-29T02:52:37-0700 monthly 0.8 admin,premium knowledge_article_1905 knowledge_article_1905 2015-05-29T02:52:37-0700 000004616 Validated (External) Premium Zoneplanner;ZonePlanner Configuration;System network management Configuration, System Network Management, ZonePlanner Why cant I select 80MHz channel in Zone Planner 11AC

Current ZonePlanner SW supporting 11AC AP does not allow you to select an 80MHz wide channel in the properties

2015-05-29T02:52:37-0700 2015-05-29T03:00:17-0700 https://support.ruckuswireless.com/articles/000004617 2015-05-29T02:58:17-0700 monthly 0.8 admin,premium knowledge_article_1904 knowledge_article_1904 2015-05-29T02:58:17-0700 000004617 Validated (External) Premium Smartcell gateway;Smartcell ap;SmartCell Gateway 200 (SCG200) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, SmartCell AP How do I reduce the frequency of channel changes on SCG controlled APs? The Channelfly MTBC (Mean Time Between Changes) attribute is by default set to 100minutes, however it may be configured up to 1440 minutes (24 hours). For APs operating in areas where high noise or significant interference is present, it may be appropriate to increase the MTBC value. It is currently not possible to change this via the SCG UI, however it can be set on the AP using the "set channelfly" command: <pre> rkscli: set chann Commands starting with 'set chann' : set channelfly : set channelfly <wifi name> {options} -> [ mtbc {1...1440} (Set mean time between channels) ] -> [ persistent {enable|disable} (Clean hi-memory backup after rebooting) ] -> [ reset (Reset channelfly and clean backup immediately) ] -- Set mtbc/persistent of channelfly </pre> So, to reduce the channel change frequency from 100 minutes to every 12 hours on wlan32, simply issue the follow command on the AP: <pre> set channelfly wlan32 mtbc 720 </pre>

This article describes how to reduce the frequency between channel changes on SCG APs with channelfly enabled.

2015-05-29T02:58:17-0700 2015-05-29T03:00:15-0700 https://support.ruckuswireless.com/articles/000004605 2015-05-26T04:50:14-0700 monthly 0.8 admin,premium knowledge_article_1897 knowledge_article_1897 2015-05-26T04:50:14-0700 000004605 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor Can I configure a standalone AP to log events in localtime? An AP in standalone mode does not currently support recording events in local time. All events will be recorded in UTC time, which should then be converted to local time by the customer.

This article describes the options for configuring local time on the stand alone AP

2015-05-26T04:50:14-0700 2015-05-26T09:00:17-0700 https://support.ruckuswireless.com/articles/000004599 2015-05-25T03:38:32-0700 monthly 0.8 admin,premium knowledge_article_1896 knowledge_article_1896 2015-05-25T03:38:32-0700 000004599 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway, SZ100 How do I set the AP management VLAN on the SCG? Support for setting the management VLAN via the RuckOS UI is planned for a future release.

This article explains how to assign SCG-managed AP traffic to a specific VLAN.

2015-05-25T03:38:32-0700 2015-05-25T09:00:21-0700 https://support.ruckuswireless.com/articles/000004587 2015-05-20T10:50:32-0700 monthly 0.8 admin,premium knowledge_article_1884 knowledge_article_1884 2015-05-20T10:50:32-0700 000004587 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;Sz100;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Configuration;Installation Configuration, Installation, SmartCell Gateway, virtual SmartCell Gateway, SZ100 Can an admin change the hostname of SCG / vSCG / SZ100? You can change your RuckOS (SCG / vSCG / SZ100) 'hostname', but not cluster name. To change your vSCG hostname: 1. Login to your vSCG (or SCG/SZ100) 2. Go to Enable mode: enable 3. Go to Config mode: config 4. Configure new hostname: hostname <new-host-name> Warning: this will reset some system services, ok to continue (yes/no)? 5. Enter 'yes' You will see the hostname updated with immediate effect.

An Scg / vSCG / SZ100 hostname can be modified with CLI commands

2015-05-20T10:50:32-0700 2015-05-20T11:00:16-0700 https://support.ruckuswireless.com/articles/000004572 2015-05-19T02:36:21-0700 monthly 0.8 admin,premium knowledge_article_1878 knowledge_article_1878 2015-05-19T02:36:21-0700 000004572 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector How do I troubleshoot IP connectivity issues on wireless devices? The steps provided in the troubleshooting section in most cases will provide a resolution to these connectivity issues.

This article describes a few issues to check when troubleshooting IP connectivity issues for end user WiFi devices

2015-05-19T02:36:21-0700 2015-05-19T17:33:04-0700 https://support.ruckuswireless.com/articles/000001588 2015-05-19T11:30:39-0700 monthly 0.8 admin,premium knowledge_article_1875 knowledge_article_1875 2013-02-08T07:12:42-0800 000001588 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector How can I improve the performance of AirPlay on IOS? With the Apple "airplay" protocol, an iPad or iPhone will broadcast video to an AppleTV box attached to a Television. This is based on multicast or mDNS, and you can improve the performance by disabling a Ruckus directed-multicast feature on the WLAN used by the iOS clients. Directed multicast is a spectrum optimization technique wherein multicast and broadcast packets are instead converted to unicast packets. However, this can sometimes affect performance, and so disabling directed multicast can improve the performance of specific protocols at the expense of optimal spectrum utilization. The WLAN commands are configured through config mode. ruckus> enable ruckus# config ruckus(config)# wlan <your-WLAN-ssid> The WLAN service 'xxxxxx' has been loaded. To save the WLAN service, type 'end' or 'exit'. ruckus(config-wlan)# no qos directed-multicast ruckus(config-wlan)# qos directed-threshold 0 with 'end' and 'end' to exit from config mode. Following is the command to view the current settings of directed multicast option. Login to the ZD CLI. Ruckus> enable Ruckus # debug Ruckus (debug) # remote_ap_cli -A get qos <wlan name> <div> wlan name is the name of the wlan on which the directed multicast related command was executed. Sample output for the above mentioned command as follows, <div> UDP Heuristic Classification: Enabled</div> <div> TOS Classification: Enabled</div> <div> Dot1p Classification: Enabled</div> <div> VID Voice Classification:</div> <div> VID Video Classification:</div> <div> VID BE Classification:</div> <div> VID BK Classification:</div> <div> Dot1p Classification VIDs:</div> <div> Dot1p Marking VIDs:</div> <div> Directed Multicast: Enabled</div> <div> IGMP Snooping Mode: Enabled</div> <div> MLD Snooping Mode: Disabled</div> <div> </div> </div>

Customer wants to know if there is some comands on the ZD for improving the performance of IOS clients

2015-05-19T11:30:39-0700 2015-05-19T17:32:58-0700 https://support.ruckuswireless.com/articles/000004468 2015-05-15T16:00:41-0700 monthly 0.8 admin,premium knowledge_article_1871 knowledge_article_1871 2015-05-15T13:54:06-0700 000004468 Validated (External) Premium Zonedirector;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, virtual SmartCell Gateway Which countries can send / receive SMS with Twilio account? <h3 id="sms-enabled-phone-numbers" style="color: rgb(44, 44, 42); background-color: rgb(255, 255, 255);">SMS Enabled Phone Numbers</h3> Twilio phone numbers from the following countries are also able to send and receive SMS. Some of these numbers are able to send SMS internationally and domestically, but others are only able to send and receive SMS domestically. <table style="color: rgb(35, 31, 32); font-size: 16px;"><thead style=""><tr style=""><th colspan="1" rowspan="1" style="text-align: left; font-weight: 400; font-size: 2.4rem; color: rgb(32, 32, 32);">COUNTRY</th><th colspan="1" rowspan="1" style="text-align: left; font-weight: 400; font-size: 2.4rem; color: rgb(32, 32, 32);">BETA/GA?</th><th colspan="1" rowspan="1" style="text-align: left; font-weight: 400; font-size: 2.4rem; color: rgb(32, 32, 32);">PHONE NUMBER TYPE</th><th colspan="1" rowspan="1" style="text-align: left; font-weight: 400; font-size: 2.4rem; color: rgb(32, 32, 32);">DOMESTIC SMS ENABLED</th><th colspan="1" rowspan="1" style="text-align: left; font-weight: 400; font-size: 2.4rem; color: rgb(32, 32, 32);">GLOBAL SMS ENABLED</th><th colspan="1" rowspan="1" style="text-align: left; font-weight: 400; font-size: 2.4rem; color: rgb(32, 32, 32);">DOMESTIC MMS ENABLED</th></tr></thead><tbody style=""><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Australia</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Austria</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Belgium</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Canada</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Local</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Canada</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Toll-Free</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Estonia</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Finland</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Germany</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Hong Kong</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Ireland</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Lithuania</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mexico</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;"><a href="https://www.twilio.com/international/beta" style="display: inline-block; text-decoration: none; color: rgb(225, 33, 39);" target="_blank">Beta</a></td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Norway</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Poland</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Puerto Rico</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Local</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Spain</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Local</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Sweden</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Switzerland</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">United Kingdom</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Local</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">United Kingdom</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Mobile</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">United States</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Local</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td></tr><tr style=""><td colspan="1" rowspan="1" style="font-size: 1.6rem;">United States</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">GA</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Toll-Free</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">Yes</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td><td colspan="1" rowspan="1" style="font-size: 1.6rem;">No</td></tr></tbody></table> <h3 id="rest-of-the-world" style="color: rgb(44, 44, 42);">The rest of the world…</h3> Twilio is in the process of providing phone numbers in more countries as quickly as they can. Each country has different regulations regarding the purchase and sale of telephone numbers, so they are not able to provide a timeline on when numbers in a specific country will be available.

Countries which can send/receive SMS with Twilio account.

2015-05-15T16:00:41-0700 2015-05-15T16:02:13-0700 https://support.ruckuswireless.com/articles/000003217 2015-05-15T12:01:28-0700 monthly 0.8 admin,premium knowledge_article_1865 knowledge_article_1865 2014-07-16T14:40:11-0700 000003217 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Firmware;Installation Firmware, Installation, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway Why is my AP not connecting/registering to the vSCG? There are a few option to get standalone ZD-Based AP to connect and upgrade to SCG/vSCG code: <ol><li>Manually upgrade the AP to an SCG AP image. NOTE: there is only SCG AP image, there is no difference between SCG and vSCG with respect to an AP. <ul><li>Download the SCG version of the AP image <ul><li>https://support.ruckuswireless.com/software/602-scg-2-1-3-mr-ap-images-zip/download</li><li>https://support.ruckuswireless.com/software/544-scg-2-5-lcs-ap-images-zip/download</li></ul> </li><li>Log into the AP's GUI, go to Maintenance>upgrade and use the "Local" mode and select the new scg image.</li><li>Once the AP has been upgrade to an SCG base code ssh into the AP and issue a "set scg ip [Ip address of the SCG's control interface]" Example: set scg ip 10.9.100.5"</li></ul> </li><li>Use the LWAPP2SCG conversion script on the vSCG. <ul><li>Log in to the vSCG, navigate to the conversion context and set the conversion policy to accept-all.</li></ul> </li></ol> <div style="margin-left: 160px;"> <div>sid-blade> enable</div> <div>Password: ***************</div> <div>sid-blade# config</div> <div>sid-blade(config)# lwapp2scg</div> <div>sid-blade(config-lwapp2scg)# policy accept-all</div> <div>sid-blade(config-lwapp2scg)# end</div> <div>Do you want to update this context configuration (or input 'no' to cancel)? [yes /no] yes</div> <div>sid-blade#</div> <div> </div> <div> </div> </div> <ul><li style="margin-left: 80px;">SSH into the ZD-Code AP and issue a "set director ip [ip address off the scg-control interface]</li><li style="margin-left: 80px;">Reboot the AP and it will get upgraded by the SCG</li><li style="margin-left: 80px;">Once the AP has been upgraded to SCG code you can issue a "set scg ip [scg-control-ip]" and the AP should be registered to the SCG.</li></ul>

Early SCG 2.x versions need to enable LWAPP2SCG policy to auto-convert ZD managed APs.

2015-05-15T12:01:28-0700 2015-05-15T12:02:14-0700 https://support.ruckuswireless.com/articles/000004457 2015-05-14T15:05:48-0700 monthly 0.8 admin,premium knowledge_article_1862 knowledge_article_1862 2015-05-12T16:03:25-0700 000004457 Validated (External) Premium Zoneflex 7372;R300;Virtual smartcell gateway;Ruckus R300 Known issues and workarounds Known Issues and Workarounds, ZoneFlex 7372, R300, virtual SmartCell Gateway What to do if R300/7372's 5 GHz LED stays off while service is on? Fix will be available in firmware version 3.2.0.99.251 and later.

vSCG 2.5 - R300 / 7372 5G LEDs are not lit when service is on.

2015-05-14T15:05:48-0700 2015-05-14T15:06:13-0700 https://support.ruckuswireless.com/articles/000004554 2015-05-13T15:03:38-0700 monthly 0.8 admin,premium knowledge_article_1855 knowledge_article_1855 2015-05-13T15:02:37-0700 000004554 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;Smartcell gateway;Smartcell ap;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;Firmware;Installation;Known issues and workarounds Configuration, Firmware, Installation, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell Gateway, SmartCell AP, virtual SmartCell Gateway How can we convert vSCG/SCG image APs to Standalone or ZD managed use? You can change the firmware running on a vSCG/SCG managed AP to run Standalone Base image. You can direct a Standalone AP on base image to connect to a ZoneDirector. 1. Remove vSCG/SCG managed AP from network. 2. Perform hardware factory default on AP (ip = 192.168.0.1) 3. Connect PC on 192.168.0.x (not .1), open AP WebUI (super/sp-admin) 4. From Maintenance/Upgrade, load a 100.x AP base image 5. Reboot AP. For APs to be used in Standalone mode ---- How to configure management VLAN on Standalone AP: https://support.ruckuswireless.com/answers/000002706 If co-locating Standalone AP in a ZD managed network: https://support.ruckuswireless.com/answers/000001959 For ZD management after base image installed ---- Registering an AP with ZoneDirector: https://support.ruckuswireless.com/answers/000001255 Registering an AP to a ZD's particular management VLAN: https://support.ruckuswireless.com/answers/000002256

vSCG/SCG APs: Perform factory default and load new firmware image for Standalone or ZD management use

2015-05-13T15:03:38-0700 2015-05-13T15:04:13-0700 https://support.ruckuswireless.com/articles/000004364 2015-05-11T14:38:43-0700 monthly 0.8 admin,premium knowledge_article_1847 knowledge_article_1847 2015-05-11T14:33:30-0700 000004364 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why can't all users download / install Zero-IT - see "No Zero-IT configured"? Customers need to use "Test" settings to determine as what role users will be mapped to after connecting to WLAN . Based on Role info they can map the correct WLAN to specific Role to download the Zero IT profile .

Customer informed that his staff users are unable to download the file however when he uses admin credentials it works .

2015-05-11T14:38:43-0700 2015-05-11T14:40:13-0700 https://support.ruckuswireless.com/articles/000002652 2015-05-07T16:40:08-0700 monthly 0.8 admin,premium knowledge_article_1843 knowledge_article_1843 2014-02-14T07:44:58-0800 000002652 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to Disable WLAN Service on a Radio of an AP You can disable the WLAN Service for a Radio under Configure :: Access Points :: Edit :: Radio :: WLAN Service :: Uncheck the box(shown in the screenshot). By default WLAN Service would be enabled. <img alt="User-added image" height="401" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000POve&feoid=00N50000002Cf3M&refid=0EM50000000LQrV" width="500"></img>

Enable or Disable WLAN Service on a Radio of an AP

2015-05-07T16:40:08-0700 2015-05-07T16:40:12-0700 https://support.ruckuswireless.com/articles/000001601 2015-05-07T16:15:58-0700 monthly 0.8 admin,premium knowledge_article_1842 knowledge_article_1842 2013-02-24T19:45:00-0800 000001601 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How can I change logo on Captive Portal/Web authentication? Once the logo is changed for the Web Portal Logo under Configure > Guest Access on ZD GUI , it updates on all web portal authentication . There is no specific page to change the Captive portal/Web authentication. It will automatically update when changed on the Guest access page.

2015-05-07T16:15:58-0700 2015-05-07T16:20:17-0700 https://support.ruckuswireless.com/articles/000002858 2015-05-07T01:01:12-0700 monthly 0.8 admin,premium knowledge_article_1840 knowledge_article_1840 2014-03-28T04:45:49-0700 000002858 Validated (External) Premium Zoneflex 7731 Troubleshooting Troubleshooting, ZoneFlex 7731

Frequent link disconnection is observed between the bridges

2015-05-07T01:01:12-0700 2015-05-07T01:10:16-0700 https://support.ruckuswireless.com/articles/000004488 2015-05-07T00:59:34-0700 monthly 0.8 admin,premium knowledge_article_1836 knowledge_article_1836 2015-05-07T00:59:34-0700 000004488 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Why don't I get redirected after a successful login to a captive portal network when using the Chrome browser?

This article explains reason behind "Please wait for a few seconds.." screen when using Chrome browser to login to a captive portal network. Note that guest network doesn't have same issue.

2015-05-07T00:59:34-0700 2015-05-07T01:00:18-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PIieCAG?attachment_index=0 2015-05-07T01:00:18-0700 monthly admin,premium knowledge_article_1836 knowledge_article_1836_attachment_1 A Problem Occured.tiff 356618.0 image/tiff https://support.ruckuswireless.com/articles/000004521 2015-05-06T23:39:10-0700 monthly 0.8 admin,premium knowledge_article_1831 knowledge_article_1831 2015-05-06T23:39:10-0700 000004521 Validated (External) Premium Smartcell gateway;Smartcell insight;SmartCell Gateway 200 (SCG200);SmartCell Insight (SCI) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Gateway, SmartCell Insight Why is my SCG not listed in SCI operational reports? If the AP SCI statistics gathering is not enabled, enable it by: 1. Initiate a connection to each SCG node's CLI using SSH 2. Enter the "enable" command to enter enable mode 3. Enter the "config" command to enter the configuration mode 4. Enable AP statistics gathering for SCI by entering the "ap-sci" command

The customer has recently connected an SCG to an SCI host, however they are not receiving data from the SCG. This article describes how to enable the ap-sci command to have this data collected and submitted to SCI

2015-05-06T23:39:10-0700 2015-05-06T23:40:18-0700 https://support.ruckuswireless.com/articles/000004497 2015-05-05T02:20:33-0700 monthly 0.8 admin,premium knowledge_article_1824 knowledge_article_1824 2015-05-05T02:20:33-0700 000004497 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector By default for the Guest Access clients the ZD's subnet is blocked except for the ZD and the Gateway. Here the Web Filter was also in the ZD's subnet and hence was getting blocked. Allow the Web Filter Ip address and it should work normal.

Guest Access users cannot access the Web Filter for authentication and security

2015-05-05T02:20:33-0700 2015-05-05T02:30:17-0700 https://support.ruckuswireless.com/articles/000004491 2015-05-04T03:09:09-0700 monthly 0.8 admin,premium knowledge_article_1818 knowledge_article_1818 2015-05-04T03:09:09-0700 000004491 Validated (External) Premium Smartcell insight;SmartCell Insight (SCI) Configuration;Troubleshooting Configuration, Troubleshooting, SmartCell Insight Why do my SCI latency reports not show any data? Enable "AP Response Time Tests" on SCI to have the SCI host ping the APs and generate latency-based metrics.

This article describes in what circumstances SCI latency reports may not contain data

2015-05-04T03:09:09-0700 2015-05-04T04:00:18-0700 https://support.ruckuswireless.com/articles/000004476 2015-05-01T13:13:01-0700 monthly 0.8 admin,premium knowledge_article_1816 knowledge_article_1816 2015-05-01T13:13:01-0700 000004476 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why Wired clients are not able to access MDI applications connected wirelessly to Ruckus AP on same Vlan Disabled the directed multicast on wlan interface on AP to which Multiple-Document Interface (MDI) is connected, then Wired clients can able to see and access the MDI interface. rkscli # get wlanlist => To check the wlan interface on which SSID is broadcasting rkscli # set qos <wlan interface> directed multicast disable For ex : rkscli # set qos wlan2 directed multicast disable Directed Multicast ingress packet processing is Disabled on interface wlan2 OK

Clients connected to Lan network are not able to access MDI interface connected wirelessly to Ruckus AP. Wireless clients connecting to same AP can access MDI interface

2015-05-01T13:13:01-0700 2015-05-01T13:20:12-0700 https://support.ruckuswireless.com/articles/000002105 2014-01-11T13:59:14-0800 monthly 0.8 admin,premium knowledge_article_493 knowledge_article_493 2013-06-17T17:05:04-0700 000002105 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What settings should I choose for high-density client installations? System Preferences for a High Density Environment Step 1: Check box for OFDM only User an ssh client like PUTTY or Linux/Mac OS X terminal and a) type the wlan name b) "ofdm-only" OFDM only mode is on a per wlan basis. OFDM is an advanced modulation method and will increase aggregate throughput, especially in dense environments. Step 2: Set 5GHz Radio Channels to 20 MHz <img alt="User-added image" height="262" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIEV&feoid=00N50000002Cf3M&refid=0EM50000000LJB8" width="500"></img> <img alt="User-added image" height="412" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIEV&feoid=00N50000002Cf3M&refid=0EM50000000LJBD" width="500"></img> Step 3: Increase Background Scanning <img alt="User-added image" height="298" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIEV&feoid=00N50000002Cf3M&refid=0EM50000000LJAt" width="500"></img> Step 4: Enable ChannelFly <img alt="User-added image" height="281" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIEV&feoid=00N50000002Cf3M&refid=0EM50000000LJAy" width="500"></img> Step 5: Enable Automatically adjust AP radio power to optimize coverage <img alt="User-added image" height="101" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIEV&feoid=00N50000002Cf3M&refid=0EM50000000LJB3" width="500"></img>

2014-01-11T13:59:14-0800 2015-04-28T05:46:27-0700 https://support.ruckuswireless.com/articles/000002256 2015-04-24T14:25:21-0700 monthly 0.8 admin,premium knowledge_article_1780 knowledge_article_1780 2013-10-07T16:50:41-0700 000002256 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can we connect an AP to a ZD's tagged Management VLAN? <div>Customer needs to deploy some 800+ AP's at a time and all the AP's will join the ZD which is on tagged Access vlan 6 and management vlan 6 and all the AP's will get the IP from the DHCP server (dynamically).</div> <div> </div> <div> </div> We can make the AP to communicate the ZD which is in access vlan 6 and management vlan 6 by executing following commands. Here is an example setup: - Configure a switch with two VLAN's let say 5 and 6. - Configure a few ports as trunk ports - Connect a Zone Director to the trunk port and configure the required configuration (ZD access vlan is 6, management vlan of the ZD {navigate the ZD to configurure -> Access Point -> Access Point Policies ->Management VLAN -> Vlan ID } ). - Connected a DHCP server on the trunk port (as an uplink) - Connected a ZF7363 into a port of vlan 6 and executed the commands Below are the AP CLI commands rkscli : set interface eth1(any interface name) type vlan-trunk untag none OK rkscli: set ipaddr wan vlan <vlanid> dynamic Ok - The command " set interface eth1(any interface name) type vlan-trunk untag 1 " is to make the AP port(interface) a trunk on the particular interface and untagged vlan 1 on the port. - The command " rkscli: set ipaddr wan vlan <vlanid> dynamic " will request the DHCP server to allot an IP address in in the particular vlan (vlan 6) - After executing the above command, the AP got the IP address and the AP joined the ZD, as the ZD management vlan is same with the AP.

To Register an AP to a ZD's management VLAN

2015-04-24T14:25:21-0700 2015-04-24T14:30:20-0700 https://support.ruckuswireless.com/articles/000002706 2015-04-24T13:55:00-0700 monthly 0.8 admin,premium knowledge_article_1779 knowledge_article_1779 2014-02-26T10:55:14-0800 000002706 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor How to configure management VLAN on a standalone AP? The AP needs to be connected to trunk port with the respective VLAN tagged and also the ethernet port settings of AP should be set to trunk port. By default the AP ethernet port will be access port. First to change the AP eth port to trunk port: rkscli: set interface eth (0,1 or 2) type vlan-trunk untag <vlan number> Example: set interface eth1 type vlan-trunk untag 204 rkscli: set ipaddr wan vlan <vlanid> dynamic Example: set ipaddr wan vlan 4024 192.168.10.20 255.255.255.0 192.168.10.1

This article explains to how to configure the management VLAN on Standalone AP that is connected to a tagged VLAN on a trunk port of the swtich

2015-04-24T13:55:00-0700 2015-04-24T14:00:23-0700 https://support.ruckuswireless.com/articles/000003278 2015-04-24T10:44:45-0700 monthly 0.8 admin,premium knowledge_article_1774 knowledge_article_1774 2014-08-08T11:35:51-0700 000003278 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;Known issues and workarounds Configuration, Security, Known Issues and Workarounds, ZoneDirector How to enable TKIP algorithm for an SSID on ZD running 9.8 (or) above? <div class="sfdc_richtext" id="articleDetail:j_id419:j_id420:sectionRepeat:0:fieldRepeat:8:j_id589articleDetail:j_id419:j_id420:sectionRepeat:0:fieldRepeat:8:j_id589_00N50000002ytA1_div">“Impact on Wi-Fi Alliance Certification Wi-Fi Alliance prohibits a Wi-Fi CERTIFIED device from offering a “TKIP-only” configuration option through the device’s primary interface. Wi-Fi CERTIFIED devices may continue to offer a “TKIP-only” mode through a secondary user interface to support legacy devices, when needed. Wi-Fi CERTIFIED devices are allowed, but discouraged to offer use of WPA / WPA2 mixed mode on the primary interface.” (WiFi Alliance, Technical Note, Removal of TKIP from Wi-Fi® Devices, Version 1.0, March 16, 2015) --- If legacy clients are unable to connect to WLAN with WebUI encryption WPA-Mixed/Auto, a ZD CLI WLAN configuration command can be used to set WPA/TKIP. SSH login to the ZoneDirector using a tool such as "Putty" and execute the following set of commands across the ZoneDirector to configure the TKIP based algorithm for the wlan. ruckus>enable ruckus#config ruckus(config)#wlan <Name of the configured wlan/ssid> Eg:- ruckus(config)#wlan "BG-TKIP" ruckus(config-wlan)#open wpa passphrase <give your passphrase here> algorithm TKIP Eg:- ruckus(config-wlan)#open wpa passphrase test1234 algorithm TKIP ruckus(config-wlan)# exit ruckus(config)#exit Once after executing the above command, the WebUI interface will prevent configuring the wlan encryption options. However, still further changes can be made from the command line interface.</div>

This article presents the process of enabling the TKIP algorithm exclusively for the configured SSID across the Zonedirector running firmware version 9.8 (or) above.

2015-04-24T10:44:45-0700 2015-04-24T10:50:18-0700 https://support.ruckuswireless.com/articles/000004437 2015-04-24T05:22:30-0700 monthly 0.8 admin,premium knowledge_article_1778 knowledge_article_1778 2015-04-24T05:22:30-0700 000004437 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, ZoneDirector How do I swap the input and output counters in ZD RADIUS accounting packets? There is currently no option present in the ZD to automatically swap these counters on the controller.

This article describes a work around to swap the input and output counters in a zone director environment, so that the accounting information format matches that of the SCG platform.

2015-04-24T05:22:30-0700 2015-04-24T05:30:13-0700 https://support.ruckuswireless.com/articles/000004427 2015-04-23T06:49:50-0700 monthly 0.8 admin,premium knowledge_article_1769 knowledge_article_1769 2015-04-23T06:49:50-0700 000004427 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Is it possible to change the speed or duplex settings for the ZoneDirector's ethernet interface? No, it is not possible to change the speed or duplex settings of the ZoneDirector's ethernet port unlike that of AP's. The two Ethernet ports on a ZoneDirector are each 1gig (1000 Mbps) capable, but the two Physical interfaces are one Logical interface to the ZoneDirector. However,the speed can be viewed on GUI under the Monitor > System info tab or using CLI as below: However, you can view it using the below commands: Welcome to the Ruckus Wireless ZoneDirector 3000 Command Line Interface ruckus> ruckus> en ruckus# show eth System Ethernet Overview: Port 0: Interface= eth0 MAC Address= 00:24:82:32:d3:d0 Physical Link= up Speed= 1000Mbps Port 1: Interface= eth1 MAC Address= 00:24:82:32:d3:d1 Physical Link= down Speed= 100Mbps

This article explains about ZoneDirector's ethernet port settings

2015-04-23T06:49:50-0700 2015-04-23T06:50:22-0700 https://support.ruckuswireless.com/articles/000004214 2015-04-22T13:34:14-0700 monthly 0.8 admin,premium knowledge_article_1763 knowledge_article_1763 2015-03-18T09:23:21-0700 000004214 Validated (External) Premium Virtual smartcell gateway Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, virtual SmartCell Gateway VSCG: On a 3-node cluster configuration, what happens to the cluster if 2 of the nodes go down?

VSCG: On a 3-node cluster configuration, what happens to the cluster if 2 of the nodes go down?

2015-04-22T13:34:14-0700 2015-04-22T13:40:12-0700 https://support.ruckuswireless.com/articles/000004401 2015-04-21T10:00:19-0700 monthly 0.8 admin,premium knowledge_article_1757 knowledge_article_1757 2015-04-20T14:20:25-0700 000004401 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor What can cause problems with AppleTV between wired and wireless and what settings might help? Disable Channelfly on 2.4GHz radios because AppleTVs do not have 802.11h. Restrict the number of Bonjour services on the VLAN. iOS can only hold something like 64 Bonjour service records and each Apple device is typically >1 service record. If you have more services than this on the LAN it will cause iOS devices to sometimes see them, sometimes not as the service record table will be full. There was an issue with AppleTV mirror sessions dropping, ZF-6235, fixed after 9.7.0. (but might still be getting reported)

What can cause problems with AppleTV between wired and wireless and what settings might help?

2015-04-21T10:00:19-0700 2015-04-21T10:07:20-0700 https://support.ruckuswireless.com/articles/000003880 2015-04-20T16:04:16-0700 monthly 0.8 admin,premium knowledge_article_1538 knowledge_article_1538 2015-01-09T10:03:10-0800 000003880 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell ap Firmware Firmware, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP What AP SKU to purchase Starting January 1, 2015 the default image that ships from the factory on Ruckus access points (APs) will change from ZoneFlex Release 9.8.x to ZoneFlex Base Image Release 100.0.x. Most customers will not notice any difference in AP operation. The APs will continue to support standalone mode and FlexMaster managed mode operations and will automatically discover and connect to ZoneDirector or RuckOS controllers. All APs shipping with Base Image Release 100.0.x and higher now support auto-discovery of all RuckOS controllers in addition to ZoneDirector controllers. It is no longer necessary to order SCG-APs with SKU prefix 9S1-abcd-xxyy for SCG-200 controller deployments. Ruckus recommends ordering APs using the standard SKU prefix 901-abcd-xxyy for all network deployments regardless of controller type being ZoneDirector or RuckOS. Ruckus does not support standalone AP mode operation of APs previously managed by ZD on 9.9+ versions. Attached is a Product Change Notice

Beginning 1st of Jan 2015, ZoneFlex APs ship with a new factory image - "AP base image" release 100.0.x

2015-04-20T16:04:16-0700 2015-04-20T16:10:12-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PI2ICAW?attachment_index=0 2015-04-20T16:10:12-0700 monthly admin,premium knowledge_article_1538 knowledge_article_1538_attachment_1 Product_Change_Notice_ZF-AP_v4.pdf 378434.0 application/pdf https://support.ruckuswireless.com/articles/000004370 2015-04-17T11:54:51-0700 monthly 0.8 admin,premium knowledge_article_1755 knowledge_article_1755 2015-04-17T11:21:05-0700 000004370 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Known issues and workarounds Known Issues and Workarounds, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway Why do the windows 8.1 clients ask for proxy server credentials after the 802.1x authentication? On the windows 8.1 client, follow the below steps to disable "proxy server" settings: Press the Win + C keyboard combination to bring up the Charms Bar then click on the Settings Charm. <img alt="image" border="0" height="307" src="http://cdn5.howtogeek.com/wp-content/uploads/2013/07/656x307ximage5.png.pagespeed.ic.y9InktAsS2.png" style="display: inline;" title="image" width="656"></img> You will then need to head into the Modern Control Panel by clicking on the “Change PC Settings” link in the bottom right hand corner of your screen. <img alt="image" border="0" height="307" src="http://cdn5.howtogeek.com/wp-content/uploads/2013/07/656x307ximage6.png.pagespeed.ic._0NbsfAuMF.png" style="display: inline;" title="image" width="656"></img> Proxy settings fall under the Network category so that is where we will be heading. <img alt="image" border="0" height="307" src="http://cdn5.howtogeek.com/wp-content/uploads/2013/07/656x307ximage7.png.pagespeed.ic.rwtBLhlkLV.png" style="display: inline;" title="image" width="656"></img> <img alt="image" border="0" height="307" src="http://cdn5.howtogeek.com/wp-content/uploads/2013/07/656x307ximage8.png.pagespeed.ic.3ZoIajatCN.png" style="display: inline;" title="image" width="656"></img> Once you have found the proxy settings you will see the "Use a proxy server" in the "On" state. <img alt="image" border="0" height="307" src="http://cdn5.howtogeek.com/wp-content/uploads/2013/07/656x307ximage9.png.pagespeed.ic.y42nDzTMqH.png" style="display: inline;" title="image" width="656"></img> Go ahead and turn it off.

This article explains how to avoid an issue when the windows 8.1 clients ask for proxy credentials after the 802.1x authentication.

2015-04-17T11:54:51-0700 2015-04-17T12:00:18-0700 https://support.ruckuswireless.com/articles/000002121 2014-01-11T13:58:06-0800 monthly 0.8 admin,premium knowledge_article_508 knowledge_article_508 2013-07-01T17:05:05-0700 000002121 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector How can I disable Airtime Fairness There's no way to disable airtime fairness in the latest builds (9.3+) In order to improve aggregation efficiency, the latest version of ATF penalizes legacy (11b) clients while scheduling, by accounting for their access time to channel. Even so, the AP should continue to service the 11b station - it will not be starved. I suggest increasing the FTP client timeout, or reducing the file size.

How can I disable Airtime Fairness

2014-01-11T13:58:06-0800 2015-04-14T16:17:59-0700 https://support.ruckuswireless.com/articles/000004322 2015-04-13T01:35:04-0700 monthly 0.8 admin,premium knowledge_article_1735 knowledge_article_1735 2015-04-13T00:21:22-0700 000004322 Validated (External) Premium Zonedirector;Smartcell gateway;Virtual smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Configuration;System network management Configuration, System Network Management, ZoneDirector, SmartCell Gateway, virtual SmartCell Gateway How do I install and configure a FreeRADIUS server? Assumptions and Delineations This article assumes the Ubuntu Linux host has been deployed as per the official Ubuntu documentation. The installation and configuration of the base Ubuntu server (including repository configuration) falls outside of the scope of this article. The procedures explained herein were tested on Ubuntu 14.04 LTS. Updating host package list As root, issue the following command to receive the latest version of all packages for the system: <pre> # apt-get update</pre> Install FreeRADIUS packages As root, execute the following command to retrieve and install the FreeRADIUS daemon and its related dependancies: <pre> # apt-get install freeradius freeradius-utils </pre> Base configuration of FreeRADIUS All FreeRADIUS configuration files are located in the "/etc/freeradius/" folder. The basic configuration requirements include defining your Ruckus controller as a "client" and specifying a shared secret known only to the controller and FreeRADIUS. A client definition may include a single host, or an entire management subnet. To define your Ruckus controller(s) as clients, insert the following lines at the top of the "/etc/freeradius/clients.conf" file: <pre class="p1"> client 192.168.0.0/24 { secret = MyS3cr3t shortname = Ruckus Controllers }</pre> Where 192.168.0.0/24 should be replaced with the Ruckus controller management prefix (or host address) and the secret with your own secret key. Next, add a test user to confirm the FreeRADIUS server is configured correctly. Add a user by inserting the following lines at the top of the file "/etc/freeradius/users": <pre class="p1"> demo Cleartext-Password := "mypwd123" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = 10.0.0.2, Framed-IP-Netmask = 255.255.255.0, Framed-Routing = Broadcast-Listen, Framed-MTU = 1500, Framed-Compression = Van-Jacobsen-TCP-IP </pre> Once this configuration has been saved, request the FreeRADIUS service to reload its configuration files by issuing the command: <pre> # /etc/init.d/freeradius reload</pre> Use the radtest application to connect to the FreeRADIUS server and attempt to authenticate user "demo" with password "mypwd123" (defined in the "users" file): <pre class="p1"> # radtest demo mypwd123 localhost 1812 testing123 </pre> <div class="p1">Note that "localhost" is already defined as a client in clients.conf, with password "testing123". If all the instructions were followed correctly, an Access-Accept message will be dispatched by the FreeRADIUS server, including the attributes specified for the user "demo": </div> <pre class="p1"> rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=8, length=62 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 10.0.0.2 Framed-IP-Netmask = 255.255.255.0 Framed-Routing = Broadcast-Listen Framed-MTU = 1500 Framed-Compression = Van-Jacobson-TCP-IP</pre> <div class="p1"> See also: <a href="/articles/FAQ/Configuring-FreeRADIUS-with-MySQL-support?q=%0A++++++Select+Id%2C+KnowledgeArticleId%2C+IsDeleted%2C+ValidationStatus%2C+%0A+++++++++++++PublishStatus%2C+VersionNumber%2C+IsLatestVersion%2C+IsVisibleInApp%2C+%0A+++++++++++++IsVisibleInPkb%2C+IsVisibleInCsp%2C+IsVisibleInPrm%2C+CreatedDate%2C+%0A+++++++++++++LastModifiedDate%2C+SystemModstamp%2C+%0A+++++++++++++Language%2C+Title%2C+UrlName%2C+ArchivedDate%2C+Summary%2C+%0A+++++++++++++ArticleNumber%2C+FirstPublishedDate%2C+LastPublishedDate%2C+%0A+++++++++++++Answer__c%2C+Question__c%2C+Attachment__Name__s%2C+%0A+++++++++++++Attachment__ContentType__s%2C+Attachment__Length__s%2C+Attachment__Body__s%2C+%0A+++++++++++++Symptoms_Keywords__c%2C+Customer_Environment__c%2C+Workaround__c%2C+Root_Cause__c%2C+%0A+++++++++++++Related_Articles__c%2C+Defect_Id__c%2C+Version__c%2C+Security__c%2C+A_Loop_Created__c%2C+%0A+++++++++++++Troubleshooting_Steps__c%2C+KCS_Coach__c%0A+++++++From+FAQ__kav+%0A+++++++Where+PublishStatus+%3D+%27Online%27+And+%0A+++++++++++++Language%3D%27en_US%27+And+%0A+++++++++++++IsVisibleInPkb+%3D+true+And%0A+++++++++++++ValidationStatus+IN+%28%27Validated+%28External%29%27%2C+%27Validated+%28Public%29%27%29+And%0A+++++++++++++LastModifiedDate+%3E+2015-04-10T14%3A12%3A51.000Z%0A++++" target="_blank">Configuring FreeRADIUS with MySQL support</a> </div>

This article describes the steps required to install and configure a basic FreeRADIUS instance on a Linux-based host (Ubuntu).

2015-04-13T01:35:04-0700 2015-04-13T01:40:15-0700 https://support.ruckuswireless.com/articles/000004346 2015-04-09T14:40:33-0700 monthly 0.8 admin,premium knowledge_article_1727 knowledge_article_1727 2015-04-09T10:54:55-0700 000004346 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Will LanSchool work with Bonjour Gateway?

*Although LanSchool uses Multicast it does not use mDNS which our Bonjour Gateway relies on, so we cannot bridge LanSchool multicast traffic.

2015-04-09T14:40:33-0700 2015-04-09T14:50:14-0700 https://support.ruckuswireless.com/articles/000004308 2015-04-09T14:41:36-0700 monthly 0.8 admin,premium knowledge_article_1726 knowledge_article_1726 2015-04-03T10:39:41-0700 000004308 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Installation Installation, SmartCell Gateway Why is the SCG200 stuck at "bootstrapping"? Here is an example of how to run the SCG cluster setup: Although this is from a vSCG system the cluster setup should be the same for SCG as vSCG. login as: admin ################################ # Welcome to vSCG # ################################ admin@10.9.52.51's password: admin [Default password is: admin] Please wait. CLI initializing... Welcome to the Ruckus vSCG Carrier Command Line Interface Version: 3.0.3.0.628 vSCG> enable Password: admin vSCG# setup ################################################ Start vSCG setup process: ################################################ Current network settings: ************************************************ Control,Cluster,Management: ************************************************ IP TYPE : STATIC IP Address : 10.9.52.51 Netmask : 255.255.255.0 Gateway : 10.9.52.1 Default Gateway : yes Control NAT IP : ************************************************ ************************************************ DNS Server Settings: ************************************************ Primary DNS Server : 10.9.11.32 Secondary DNS Server : 10.9.11.33 ************************************************ Do you want to setup network? [yes/NO]: NO (C)reate a new cluster or (J)oin an exist cluster (c/j): c Cluster Name ([a-zA-Z0-9-]): TSE-C-Cluster2 Controller Description: TSE-Carrier-02 ************************************************ Create/Join : create DISCOVERY PROTOCOL: tcp Cluster Name : TSE-C-Cluster2 Blade ID : ec182ec4-76b3-4f0f-ab53-16b19d0c5021 DESCRIPTION : TSE-Carrier-02 ************************************************ Are these correct (y/n): y Enter the controller name of the blade ([a-zA-Z0-9-]): TSE-C-Blade-02 NTP Server ([a-zA-Z0-9.-]): [pool.ntp.org] Check if NTP server [pool.ntp.org] is reachable... Convert ZoneDirector APs in factory settings to vSCGc APs automatically (y/n) [N] y Reset admin's password! Enter admin password: [enter the desired Admin password: Keep record, this cannot be recovered] Enter admin password again: [Verify the Admin password] Enter the CLI enable command password: [enter the desired Enable password: Keep record, this cannot be recovered] Enter the CLI enable command password again: [Verify the Enable password] Reset admin's password done! Setup configurations done. Starting setup process after 5 seconds... restart net-snmp net-snmp start/running, process 23954 New hostname: TSE-C-Blade-02 Change admin password done! ************************************************ Check installation status ************************************************ Wait for cluster config operation start! Bootstrapping, Wed Apr 08 18:13:47 UTC 2015 [#####...................................................]10% [#########............................................]20% [##############...................................]30% [##############...................................]40% [##############...................................]50% [##############...................................]60% [##############...................................]70% [##############...................................]80% [############## ...................................]100% ***Wait about 5 minutes*** login as: admin ################################ # Welcome to vSCG # ################################ admin@10.9.52.51's password: Please wait. CLI initializing... Welcome to the Ruckus vSCG Carrier Command Line Interface Version: 3.0.3.0.628 TSE-C-Blade-02> enable Password: *************** TSE-C-Blade-02# show service No. Application Name Health Status Log Level # of Logs ----- ------------------------ ---------------- ------------ ---------- 1 API Online 0 2 AUT Online 0 3 CNR Online 0 4 CaptivePortal Online 0 5 Cassandra Online 3 6 Configurer Online 2 7 Core Online 0 8 MemProxy Online 1 9 Memcached Online 0 10 Mosquitto Online 0 11 NC Online 0 12 RadiusProxy Online 0 13 SMF Online 0 14 SNMP Online 1 15 SubscriberManagement Online 0 16 SubscriberPortal Online 0 17 Web Online 1

SCG200 get stuck at the bootstrapping error when running setup via GUI

2015-04-09T14:41:36-0700 2015-04-09T14:50:11-0700 https://support.ruckuswireless.com/articles/000003143 2015-04-03T15:54:59-0700 monthly 0.8 admin,premium knowledge_article_1702 knowledge_article_1702 2014-06-17T09:36:37-0700 000003143 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor How to configure Rate Limiting on Standalone AP? Rate Limiting on WLAN can be configured from the Web UI of the Access Point and also from the CLI. On Web UI: <img alt="User-added image" height="301" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PONv&feoid=00N50000002Cf3M&refid=0EM50000000LVxd" width="500"></img> From CLI: set shaper <wlan_name> preset_name [uplink_preset_name] set shaper = Available traffic shaping presets. <div><wlan_name> = Specify WLAN interface on which to apply rate limiting.</div> <div>preset_name = Specify traffic shaping preset (uplink and downlink)</div> <div>uplink_preset_name = If the optional second preset is specified, the uplink parameters will override those of the first preset given (i.e., the first preset defines downlink rate limiting and the second defines uplink rate limiting). <div>Example : <img alt="User-added image" height="65" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PONv&feoid=00N50000002Cf3M&refid=0EM50000000LVkj" width="500"></img> <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PONv&feoid=00N50000002Cf3M&refid=0EM50000000LVko"></img></div> </div>

How to configure Rate Limiting on Standalone AP as we do on ZD.

2015-04-03T15:54:59-0700 2015-04-03T16:00:15-0700 https://support.ruckuswireless.com/articles/000003815 2015-04-01T16:54:03-0700 monthly 0.8 admin,premium knowledge_article_1694 knowledge_article_1694 2015-04-01T16:52:17-0700 000003815 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation;System network management Configuration, Installation, System Network Management, SmartCell Gateway What is Link Aggregation? Does Ruckus SCG-RUCKOS-3.0 support Link Aggregation? Link aggregation (LAG) is used to describe various methods of using two Ethernet ports in parallel, to provide trunking, increased throughput beyond one link limit, and network fault tolerance. Currently Ruckus SCG RuckOS 3.0 does not support LAG.

Ruckus SCG-RUCKOS-3.0 does not support Link aggregation.

2015-04-01T16:54:03-0700 2015-04-01T17:00:18-0700 https://support.ruckuswireless.com/articles/000004291 2015-03-31T04:25:11-0700 monthly 0.8 admin,premium knowledge_article_1690 knowledge_article_1690 2015-03-31T04:25:11-0700 000004291 Validated (External) Premium Zonedirector;Smartcell gateway;Sz100;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200);SmartZone 100-D (SZ100-D) Security Security, ZoneDirector, SmartCell Gateway, SZ100 What are the differences between a SAN cert and a Wildcard Cert <div id="main"> <div class="column" id="content"> <div class="node-wrapper"> <div class="field field-name-body field-type-text-with-summary field-label-hidden"> <div class="field-items"> <div class="field-item even"> There are two types of Multi use SSL certificates available today and they are explained here: Wildcard Certificates – Wildcard certificates are widely used to secure multiple subdomains under a single unique fully qualified domain names. The benefit with this certificate is that that it not only makes it simple to manage the certificate, but it also helps you in lowering your administrative costs. It provides immediate protection to your current and future subdomains. <ul><li>Wildcard certificates help you in managing the certificate easily because one certificate is enough for all present and future subdomains. This in turn also reduces your administrative cost as you do not have to buy new SSL certificates often.</li><li>Wildcard certificates are no different than the normal SSL certificates, which support the wildcard character ‘*’ added as a prefix to the fully qualified domain names. This is how it is enabled to secure multiple services. With wildcard certificates there are no specific service names involved, instead they always contain a wildcard character as a prefix to the domain name.</li><li>It is always advisable and preferable to use wildcard certificate, which is so much more flexible than that single purpose certificate and it can be applied to a number of different services. Moreover, you can even make changes like adding or replacing the services without updating or buying a new certificate.</li><li>Take an example to understand how wildcard certificates work – for a domain name exmpl.com you buy a wildcard certificate, then that certificate will also work for exmple.com, xyz.exmpl.com and any other subdomain. Wildcard certificate refers to the fact that it is provisioned for *.exmpl.com</li></ul> SAN Certificates – A SAN certificate is used to protect multiple domain names with a single certificate. They are different than wildcard certificates in a way that they can support an unlimited number of subdomains as long as the domain names are the same. SAN certificates only support the fully qualified domain names which are entered in the certificate. SAN certificates are impressive because they can support more than 100 different fully qualified domain names in a single certificate; this however, depends upon the issuing certificate authority. <ul><li>SAN certificates or Subject Alternate Name certificates are also known as Unified Communications Certificates as they are primarily structured to support real-time communications.</li></ul> <ul><li>SAN or UCC certificates are most useful to the businesses or organizations that are looking to use different root or domain names to perform internet facing services. For an example, if there is an organization which uses two domains, internal domain – abc.exmpl.net and external domain – abc.exmpl.com then only a SAN certificate will provide security to the unified communication of both these fully qualified domain names. While if the organization goes for a wildcard certification then it will need two wildcard certificates for .net and .com as they are two different domains.</li><li>Application service providers (ASP), who host applications for different clients with each client using its own unique domain name, can benefit a lot by using SAN certificates. If ASPs use SAN certificates they can use a single certificate to provide security services to multiple clients. Here, it is important to note that the site seal and certificate provide security only to the primary domain names entered in the certificates and not to any other domain names. The certificate only includes the domain names which were verified at the time of purchase.</li></ul> Limitations of the multi domain certificates: While on one side the multi domain certificates are highly useful and cost effective, there are a few limitations involved as explained here. <ul><li>SAN certificates are not compatible with wildcard certificates and so if you buy a SAN certificate then each of your subdomains must be registered as a unique domain name entry in the certificate at the time of purchase. And every time you decide to add or remove a domain name you will have to update or re-deploy the certificate to each host server.</li></ul> <ul><li>When ASPs host websites for multiple clients, they should be aware that all domain names are there in the SAN certificate. And if the ASP decides that it does not want one site to appear linked with another site then it has to use a different kind of certificate.</li></ul> Which certificate is best for you? Basically the multi use certificates are used to secure multiple web services using one certificate. To achieve this, the certificates either add an alternate name to common single certificate or use a wildcard to replace the subdomain or prefix name in the certificate. If the organization uses one public domain and one private domain name to separate the internal and external name spaces, then SAN certificate is their best bet. And for the organizations that use one and only one public domain name, the wildcard certificate will be the best option. </div> </div> </div> <div class="node-actions-bar"> </div> </div> </div> <div class="region-sidebar-second-wrapper"> <div class="border"> <div class="block block-apachesolr-search first odd" id="block-apachesolr-search-mlt-001"> </div> </div> </div> </div>

Customer installing SAN Cert not able to download Zero IT wildcard cert works

2015-03-31T04:25:11-0700 2015-03-31T04:30:22-0700 https://support.ruckuswireless.com/articles/000004182 2015-03-27T08:13:28-0700 monthly 0.8 admin,premium knowledge_article_1682 knowledge_article_1682 2015-03-27T08:13:28-0700 000004182 Validated (External) Premium Virtual smartcell gateway System network management System Network Management, virtual SmartCell Gateway How to extract the AP S/Ns to a csv file in vSCG? We can extract the S/Ns of the Access Points connected to the vSCG to a csv file under Monitor> Access Points. But in 2.5.0 version of vSCG, the csv file do not have the S/N information and is updated in 3.0 version. So, to get the S/N information of APs connected to the vSCG, then it should be in 3.0 firmware at least.

This article gives you information regarding the AP S/Ns export to a csv file in vSCG

2015-03-27T08:13:28-0700 2015-03-27T08:20:37-0700 https://support.ruckuswireless.com/articles/000004169 2015-03-27T08:13:44-0700 monthly 0.8 admin,premium knowledge_article_1681 knowledge_article_1681 2015-03-27T08:13:44-0700 000004169 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor Why Ruckus SSID doesn't appear in a laptop which is using Cisco wireless USB adapter It is a channel issue. The channel running on the AP is not able to communicate with the channel running on the Wireless NIC card. Manually changing the channel to any another channel on the AP would fix the issue or changing the channel on the NIC card according to the AP operating channels will also help.

Ruckus SSID is not showing up in the laptop when it is using the Cisco wireless USB adapter.

2015-03-27T08:13:44-0700 2015-03-27T08:20:29-0700 https://support.ruckuswireless.com/articles/000004272 2015-03-27T04:23:20-0700 monthly 0.8 admin,premium knowledge_article_1679 knowledge_article_1679 2015-03-27T04:23:20-0700 000004272 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How can we delete a user from the CLI?

This article provides information on how to delete a user from the CLI using the username/MAC address

2015-03-27T04:23:20-0700 2015-03-27T04:30:16-0700 https://support.ruckuswireless.com/articles/000003379 2015-03-17T16:26:56-0700 monthly 0.8 admin,premium knowledge_article_1645 knowledge_article_1645 2014-09-10T02:21:00-0700 000003379 Validated (External) Premium Virtual smartcell gateway Configuration;Troubleshooting Configuration, Troubleshooting, virtual SmartCell Gateway Why captive portal redirection is not working in vSCG? Opening the Wispr ports TCP : 8090, 8099, 8100, 8111, 9997, 9998 on the Firewall resolves the problem.

The wireless clients were able to get an IP address, however they are not able to get the redirection page when they open the web browser.

2015-03-17T16:26:56-0700 2015-03-17T16:30:23-0700 https://support.ruckuswireless.com/articles/000004103 2015-03-17T14:15:19-0700 monthly 0.8 admin,premium knowledge_article_1643 knowledge_article_1643 2015-03-17T14:15:19-0700 000004103 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Why IGMP snooping is not persistent post reboot

2015-03-17T14:15:19-0700 2015-03-17T14:20:12-0700 https://support.ruckuswireless.com/articles/000004186 2015-03-17T13:56:40-0700 monthly 0.8 admin,premium knowledge_article_1642 knowledge_article_1642 2015-03-17T13:56:40-0700 000004186 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to configure TACACS+ from CLI ruckus# config ruckus(config)# aaa TACACS+ ruckus(config-aaa)# ruckus(config-aaa)# type tacplus-auth ruckus(config-aaa)# tacplus-service TACSERVICE ruckus(config-aaa)# tacplus-secret sharedsecret ruckus(config-aaa)# ip-addr 1.1.1.1 #exit---To save the configuration.

This article gives information about the CLI configuration required for ZD to communicate with TACACS+ server and users authenticate against this server.

2015-03-17T13:56:40-0700 2015-03-17T14:00:26-0700 https://support.ruckuswireless.com/articles/000002715 2014-02-28T01:05:50-0800 monthly 0.8 admin,premium knowledge_article_753 knowledge_article_753 2014-02-27T02:23:09-0800 000002715 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Is there an option to automatically delete the used/expired guest passes ? There is no option available to automatically delete the used guest passes via GUI/CLI mode. We need to manually delete from the Zone director GUI. <div style="font-family: Arial; font-size: 13px; "> <div> To delete used guest passes, </div> <div> </div> <div> Lo-gin to ZD GUI :: Go to Monitor tab :: Generated Guest Passes :: Click on delete all/Select the desired guest passes and click on delete.</div> </div>

deleting used/expired guest passes

2014-02-28T01:05:50-0800 2015-03-12T17:41:30-0700 https://support.ruckuswireless.com/articles/000001795 2015-03-10T15:51:31-0700 monthly 0.8 admin,premium knowledge_article_1631 knowledge_article_1631 2013-03-19T11:26:29-0700 000001795 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Here the issue was with the Ethernet cable that connects AP to the switch and after changing the cable the issue got resolved.

2015-03-10T15:51:31-0700 2015-03-10T16:00:14-0700 https://support.ruckuswireless.com/articles/000004149 2015-03-10T01:54:01-0700 monthly 0.8 admin,premium knowledge_article_1626 knowledge_article_1626 2015-03-10T01:54:01-0700 000004149 Validated (External) Premium Flexmaster;FlexMaster Firmware;Known issues and workarounds Firmware, Known Issues and Workarounds, FlexMaster Filenames of AP FW have to be lower case on the file extension.

When uploading AP SW to the FM, for upgrade of APs, SW fails to load properly to the FM node

2015-03-10T01:54:01-0700 2015-03-10T02:00:13-0700 https://support.ruckuswireless.com/articles/000004099 2015-02-26T14:36:41-0800 monthly 0.8 admin,premium knowledge_article_1608 knowledge_article_1608 2015-02-26T14:36:41-0800 000004099 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor;Smartcell ap Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor, SmartCell AP How can I get chromecast devices to communicate on a standalone AP? Depending on which/how many WLANs you define, try enabling ap-bridge mode with disabled directed-multicast (our proprietary broadcast to unicast feature). For example, if you use an SSID on both bands of your AP: set ap-bridge wlan0 enable set qos wlan0 directed multicast disable set ap-bridge wlan9 enable set qos wlan9 directed multicast disable I look forward to hearing your results. Hopefully disabling directed multicast helps the Chrome.

You can manually disable client isolation on standalone APs to allow client devices to communicate

2015-02-26T14:36:41-0800 2015-02-26T14:40:25-0800 https://support.ruckuswireless.com/articles/000004096 2015-02-26T06:10:21-0800 monthly 0.8 admin,premium knowledge_article_1606 knowledge_article_1606 2015-02-26T06:10:21-0800 000004096 Validated (External) Partner Zonedirector;Smartcell gateway;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;SmartCell Gateway 200 (SCG200) Performance;Troubleshooting Performance, Troubleshooting, ZoneDirector, SmartCell Gateway Which MAC OS is supported for ZeroIT?

MAC OS is supported for ZeroIT , however not all legacy MAC OS versions are backwards compatibility tested by our Quality Assurance team.

2015-02-26T06:10:21-0800 2015-02-26T06:20:47-0800 https://support.ruckuswireless.com/articles/000004088 2015-02-25T15:10:51-0800 monthly 0.8 admin,premium knowledge_article_1604 knowledge_article_1604 2015-02-25T15:10:51-0800 000004088 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Installation;Security;Troubleshooting;Known issues and workarounds Performance, Installation, Security, Troubleshooting, Known Issues and Workarounds, ZoneDirector Why does my statically assigned IP client not pingable when I add an ACL rule? The statically assigned IP address client is blocked by design. For device policy to work we depend on operating system fingerprinting by peeking through dhcp packets. To avoid any blackholes, static IP is denied and is a design intent. If we allow statically assigned clients through, then they will not be adhering to the ACL rules. As a result, the client is blocked instead of allowed because it can not be categorized by any ACL rule. This will be documented in the manual for future reference.

Client is being blocked when the client is assigned a static IP address and as the ACL is applied at the WLAN. If the ACL is excluded the client becomes pingable again.

2015-02-25T15:10:51-0800 2015-02-25T15:20:21-0800 https://support.ruckuswireless.com/articles/000004081 2015-02-25T10:20:45-0800 monthly 0.8 admin,premium knowledge_article_1603 knowledge_article_1603 2015-02-25T10:20:45-0800 000004081 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How can you determine if an AP tx_power is manually or ZD controlled and at what settings? Collect an AP support info file and review the Radio0 and Radio1 config settings: ### Radio 0 (wifi0) Config ### Channel: 11 (2462 Mhz) (Smart Auto Select) transmit power set to max ### Radio 1 (wifi1) Config ### Channel: 157 (5785 Mhz) (Smart Auto Select) transmit power set to max This AP is configured with tx_power set to Auto, and the ZD configures the radio to Max power. Verify this in the rpmkey details for wifi0 and wifi1 radios. wifi0/wlan-txpower='max' wifi1/wlan-txpower='max' ------------ Example of ZD managed AP configured with a Manual override of tx_power, having the 2.4G radio set to 1/4 power, 5G radio set to 1/2 power: ### Radio 0 (wifi0) Config ### Channel: 6 (2437 Mhz) (Smart Auto Select) transmit power set to -6 dB from max power ### Radio 1 (wifi1) Config ### Channel: 157 (5785 Mhz) (Smart Auto Select) transmit power set to -3 dB from max power wifi0/wlan-txpower='-6' wifi1/wlan-txpower='-3'

You can determine if AP's tx_power is manually or ZD controlled, and at what settings

2015-02-25T10:20:45-0800 2015-02-25T10:30:30-0800 https://support.ruckuswireless.com/articles/000003132 2014-06-12T17:01:57-0700 monthly 0.8 admin,premium knowledge_article_1116 knowledge_article_1116 2014-06-12T17:01:57-0700 000003132 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why Lutron devices are not connecting to wireless but connects hard wired without any issue ? - Disabled the directed multicast in the ZD for that wlan interface and it worked without any hassle. - The Lutron connected to the Wlan and started getting the IP address with respective vlan id. Commands to disable the directed multicast is given below : " ruckus(config-wlan)# no qos directed-multicast " - Disables QoS for directed multicast traffic.

Lutron devices not connecting to wireless

2014-06-12T17:01:57-0700 2015-02-21T15:53:37-0800 https://support.ruckuswireless.com/articles/000002076 2014-01-11T14:01:31-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_453 knowledge_article_453 2013-06-06T09:07:18-0700 000002076 Validated (External) Public Zoneflex outdoor Installation Installation, ZoneFlex Outdoor What kind of Cable Should I use between AP and External Antenna ? The cable used between AP and external antenna is preferably a RG6/RG8 with male connectors at both end. As the length of the cable increases it is recommended to use a lower loss cable to reduces the RF loss. You can use the link here to calculate the loss according the length of the cable <a href="http://www.net-comber.com/cable-loss.html" target="_blank">http://www.net-comber.com/cable-loss.html</a>

Specification of cable running between the AP and the external antenna

2014-01-11T14:01:31-0800 2015-02-19T01:10:44-0800 https://support.ruckuswireless.com/articles/000004055 2015-02-17T04:32:01-0800 monthly 0.8 admin,premium knowledge_article_1597 knowledge_article_1597 2015-02-17T04:32:01-0800 000004055 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Hotspot has a separate Intrusion Prevention mechanism which is not controlled by the WIPS DOS cfg. It is checked on a STA MAC (same device trying same/different username) or username (same/different device trying the same username) basis. Within 10minutes, if the threshold (30 for MAC, 10 for username) hits at 4th minute, the next MAC/username login attempt will be blocked during the remaining 6(10-4) minutes. You can disable this in Configure > Hotspot service > Advanced options > Intrusion prevention, Uncheck the option “ Temporarily block with repeated authentication attempts"

This article explains why the users get the error message on the ZD - User[username] fails to login WLAN[WiFi] at AP[2c:5d:93:83:20:b2] too many times and is temporarily blocked from login for [-37 seconds]

2015-02-17T04:32:01-0800 2015-02-17T04:40:25-0800 https://support.ruckuswireless.com/articles/000004034 2015-02-10T06:34:47-0800 monthly 0.8 admin,premium knowledge_article_1593 knowledge_article_1593 2015-02-10T06:34:47-0800 000004034 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to retrieve the back up file of the ZD via CLI? Follow the below procedure to extract the back up file from the ZD CLI. 1) A TFTP server should be configured on the PC(It can be downloaded from the internet). 2) Run the TFTP server and note the IP address of the server. (Most of the times it is the PC's IP address) 3) Open the putty tool. Log in to the SSH of the ZoneDirector and execute the below commands. ruckus>en ruckus#debug ruckus(debug)# save-config <tftp server IP address> <file name> <img alt="User-added image" height="217" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNol&feoid=00N50000002Cf3M&refid=0EM50000000LeL1" width="500"></img> 4) The ZD will create a back up file and it will be moved to the tftp root directory.

This article details the process of retrieving the back up file of the configuration from the ZoneDirector's command line interface.

2015-02-10T06:34:47-0800 2015-02-10T06:40:21-0800 https://support.ruckuswireless.com/articles/000004013 2015-02-09T00:59:46-0800 monthly 0.8 admin,premium knowledge_article_1592 knowledge_article_1592 2015-02-09T00:59:46-0800 000004013 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway Why am I not able to access the vSCG GUI when able to access SSH? If the cluster is not configured on the vSCG then GUI must be accessed through port 8080 but not from port 8443. Changing the web interface port from 8443 to 8080 will resolve the issue. In order to configure the cluster settings, please refer the page#49 from the below document: https://support.ruckuswireless.com/documents/514-vscg-version-2-5-getting-started-guide

2015-02-09T00:59:46-0800 2015-02-09T01:00:12-0800 https://support.ruckuswireless.com/articles/000004025 2015-02-05T13:00:02-0800 monthly 0.8 admin,premium knowledge_article_1589 knowledge_article_1589 2015-02-05T13:00:02-0800 000004025 Validated (External) Premium Virtual smartcell gateway Configuration;Installation Configuration, Installation, virtual SmartCell Gateway What is the minimum bandwidth required to setup a vSCG in redundancy? Irrespective of any bandwidth, The important aspect is to make sure that the latency between two nodes within the same cluster has to be less then 10 ms.

2015-02-05T13:00:02-0800 2015-02-05T13:00:14-0800 https://support.ruckuswireless.com/articles/000003229 2015-01-30T14:06:05-0800 monthly 0.8 admin,premium knowledge_article_1579 knowledge_article_1579 2014-07-23T02:05:58-0700 000003229 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Security Security, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Unauthenticated user can access Ruckus Devices <pre style=""> </pre> <div> </div>

An user authentication bypass vulnerability has been discovered during standard internal bug reporting procedures in some of the Ruckus devices. This vulnerability may permit an unauthenticated malicious user with network access to port 22 to tunnel random TCP traffic to other hosts on the network via Ruckus devices.

2015-01-30T14:06:05-0800 2015-01-30T14:10:14-0800 https://support.ruckuswireless.com/articles/000003952 2015-01-26T00:52:18-0800 monthly 0.8 admin,premium knowledge_article_1571 knowledge_article_1571 2015-01-23T09:06:34-0800 000003952 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor Can we enable/disable the 802.11e on a standalone AP Yes, we can achieve this from the CLI access of the AP. Below is the command to enable/disable the WMM/802.11e on the standalone AP. set wmm <wlan name> {enable|disable} To get the information about WMM/802.11e on the standalone AP, follow the below command. get wmm <wlan name>

This article gives you the command for enabling/disabling the 802.11e on standalone AP

2015-01-26T00:52:18-0800 2015-01-26T01:10:13-0800 https://support.ruckuswireless.com/articles/000001680 2015-01-20T08:03:07-0800 monthly 0.8 admin,premium knowledge_article_1564 knowledge_article_1564 2013-02-28T09:19:59-0800 000001680 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector Can both the ethernet ports of the ZD be connected to the network simultaneously? Both the ethernet ports on the ZD are bridged internally. So, it is recommended NOT to use both the ports at the same time. Each physical port has a unique MAC (eth0, eth1) but the ZD responds using it's logical bridge port (br0) that is always the MAC of eth0. So the ZD’s IP address (and source MAC address) is shared among the two physical ports of ZD. We do NOT offer any specific binding on the physical interface. The interface used by outgoing traffic is decided by the bridge (MAC address) table content. So, all ZD’s outgoing traffic is sent to its (software) bridge first. From there, it decides which physical interface the traffic should be put on based on the destined MAC address. Just as a switch would do, if the bridge cannot make decision because the destined address is missing on its MAC table, the packet will be put on both physical interfaces. The two Ethernet ports on the Zone Director are simply bridged together and have no routing capability. If you configure both, a device IP address used by the Access Points and a secondary management only IP address, both of these IP's will be present on both ports. If the Zone Director detects it's own MAC address on one of it's ports it will go into a host only mode for 10 minutes blocking connectivity to attempt to break the loop. A syslog message should be generated if the ZD detects a loop. Note: Usually, using both Ethernet ports on a Zone Director is only permitted if there is NO possible path between the ports, if both connections are completely isolated. It is generally discouraged as no real increase in throughput will be achieved since the bottleneck is the ZD CPU which must manage switching between each physical port. The ZD1100 has a max throughput of 100Mbps even when connected at 1000MBps (gigabit) due to CPU limits.

2015-01-20T08:03:07-0800 2015-01-20T08:10:31-0800 https://support.ruckuswireless.com/articles/000002400 2015-01-19T07:44:59-0800 monthly 0.8 admin,premium knowledge_article_1558 knowledge_article_1558 2013-12-01T08:12:29-0800 000002400 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to configure Standalone Access Point to be managed by SNMP Server? <div style="text-align: center;">Managing Standalone AP using SNMP</div> <div> 1. Login to the web UI of the AP. Under Administration>> Management>> TR069 / SNMP Management Choice, select SNMP only and update the settings. See the attached screen shot for your reference. </div> <div> </div> <div style="text-align: center;"><img alt="User-added image" height="87" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNeC&feoid=00N50000002Cf3M&refid=0EM50000000LORf" width="500"></img> </div> <div>2. Download a MIB browser from the below URL and upload the MIBs. </div> <div> </div> <div>http://www.manageengine.com/products/mibbrowser-free-tool/download.html </div> <div> </div> <div>3. Once you install the MIB browser, do the settings as below : </div> <div> </div> <div>host : IP address of the AP </div> <div>Port : 161 </div> <div>Community : public </div> <div>Write Community : private </div> <div> </div> <div>Once this settings are done, upload the Ruckus-Root-MIB and Ruckus-TC-MIB files first which is mandatory and then upload the files as per your requirement. </div> <div> </div> <div>>> Right click on the Ruckus-System-MIB which appears on the left panel of the MIB browser and click on GET. This will give the details of that on the Right panel of the MIB browser.See the attached screen shot for your reference. </div> <div style="text-align: center;"><img alt="User-added image" height="265" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNeC&feoid=00N50000002Cf3M&refid=0EM50000000LORk" width="500"></img> </div> <div>If you want to learn SNMP configuration on ZoneDirector side, please use the following KB article: How do I setup SNMP on ZD for monitoring purposes? - https://support.ruckuswireless.com/answers/000002904</div>

SNMP management configuration on Standalone Access Point

2015-01-19T07:44:59-0800 2015-01-19T07:51:08-0800 https://support.ruckuswireless.com/articles/000003380 2015-01-19T06:42:34-0800 monthly 0.8 admin,premium knowledge_article_1553 knowledge_article_1553 2014-09-16T02:14:19-0700 000003380 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor The update of neighbour AP's list depends on two factors: <ol><li>Background Scanning.</li><li>Mesh</li></ol> If background scanning is enabled then the update frequency depends on the Background timer and if Mesh is enabled then the update frequency depends on Mesh timer. This information can be useful in planning or redesigning the Smart Mesh topology or in troubleshooting link performance issues. Note : Mesh AP's exchange updates for every 30 seconds so the neighbour AP list will be updated every 30 seconds.

This article provides information regarding the time interval for Updating the Neighbour AP's list

2015-01-19T06:42:34-0800 2015-01-19T06:50:43-0800 https://support.ruckuswireless.com/articles/000003426 2015-01-19T06:42:36-0800 monthly 0.8 admin,premium knowledge_article_1552 knowledge_article_1552 2014-09-23T06:19:52-0700 000003426 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector What is the Maximum number of DPSKs that can be generated as a batch The maximum number of DPSKs that can be generated as a batch is 100. ZD gives the following message if a .csv file with more than 100 profiles is uploaded in the GUI. <img alt="User-added image" height="181" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNSf&feoid=00N50000002Cf3M&refid=0EM50000000LYto" width="434"></img>

This article has information regarding the maximum number of DPSKs that can be generated as a batch

2015-01-19T06:42:36-0800 2015-01-19T06:50:36-0800 https://support.ruckuswireless.com/articles/000003931 2015-01-15T10:04:54-0800 monthly 0.8 admin,premium knowledge_article_1546 knowledge_article_1546 2015-01-14T17:30:29-0800 000003931 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Security Security, ZoneDirector Does Ruckus ZoneDirector include a Firewall? - Ruckus ZoneDirectors do not have a built-in Firewall - Ruckus ZoneDirectors do have ACL (access control list) feature, but not a stateful Firewall.

Does Ruckus ZoneDirector include a firewall

2015-01-15T10:04:54-0800 2015-01-15T10:10:17-0800 https://support.ruckuswireless.com/articles/000003933 2015-01-15T03:50:20-0800 monthly 0.8 admin,premium knowledge_article_1543 knowledge_article_1543 2015-01-15T03:45:44-0800 000003933 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Configure the network setup to forward the DNS requests from the remote site to the DNS server located at the main office/location where ZD is deployed.

This article explains how to troubleshoot when client browser sees redirect loop when connecting to Guest or Captive portal WLAN where ZD and APs are different location

2015-01-15T03:50:20-0800 2015-01-15T04:00:16-0800 https://support.ruckuswireless.com/articles/000003920 2015-01-14T14:54:13-0800 monthly 0.8 admin,premium knowledge_article_1541 knowledge_article_1541 2015-01-13T10:24:01-0800 000003920 Validated (External) Premium Flexmaster;FlexMaster Security Security, FlexMaster What is the security certificate authority supported by FM currently? FlexMaster currently supports only VeriSign security certificates.

2015-01-14T14:54:13-0800 2015-01-14T15:00:18-0800 https://support.ruckuswireless.com/articles/000002771 2015-01-09T15:40:11-0800 monthly 0.8 admin,premium knowledge_article_1539 knowledge_article_1539 2014-03-12T11:21:12-0700 000002771 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Configuration;Security;Troubleshooting Performance, Configuration, Security, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor How to disable Smart select on standalone AP Smart select refers to the algorithm which is used for dynamic channel assignment. Please find the steps below for disabling smart select and enabling static channel selection: Log-in to AP GUI >>Configuration>>2.4 GHZ>>Common>>Channel >>Select any other channel (Non overlapping channel recommended )

This article explains about disabling auto channel assignment by the AP in standalone mode

2015-01-09T15:40:11-0800 2015-01-09T15:50:12-0800 https://support.ruckuswireless.com/articles/000003878 2015-01-09T10:05:31-0800 monthly 0.8 admin,premium knowledge_article_1537 knowledge_article_1537 2015-01-09T10:05:31-0800 000003878 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector It is not recommended to use a static channel in such a deployment because if a Root AP gets disconnected from ZD then corresponding Mesh AP's won't be able to connect to another Root AP as it is on a different channel and will get disconnected from ZD and will go to Isolated Mesh State.

This article discusses the disadvantages of choosing a static channel on AP group when mesh is enabled on ZD

2015-01-09T10:05:31-0800 2015-01-09T10:10:13-0800 https://support.ruckuswireless.com/articles/000003866 2015-01-08T13:33:50-0800 monthly 0.8 admin,premium knowledge_article_1534 knowledge_article_1534 2015-01-08T11:40:48-0800 000003866 Validated (External) Premium Smartcell gateway;Virtual smartcell gateway;SmartCell Gateway 200 (SCG200) Security;Known issues and workarounds Security, Known Issues and Workarounds, SmartCell Gateway, virtual SmartCell Gateway Fix for Ruckus products affected by the Network Time Protocol (NTP) vulnerability <div style="">A new vulnerability was discovered with Network Time Protocol daemon, ntpd, which is based on multiple stack-based buffer overflows. The weakness exists in an ntpd package before the 4.2.8 release, which might allow remote attackers to execute arbitrary code via a crafted packet. Some Ruckus devices use ntpd as their NTP server. ICS Cert has published a <a href="https://ics-cert.us-cert.gov/advisories/ICSA-14-353-01" target="_blank">security advisory</a> regarding this NTP vulnerability. The attached KSP files contain the fixes for the following products and should be applied in your SmartCell Gateway (SCG) environment. “SCG-31665-2_1.ksp” should be applied for the following SCG image versions: <ul><li> 2.1.1.0.236</li><li> 2.1.2.0.146</li><li> 2.1.3.0.40</li><li> 2.5.0.1.174</li><li> 2.5.1.0.177</li></ul> “SCG-31665-2_5_1.ksp” should be applied with the following SCG image versions: <ul style=""><li> 2.5.1.0.182</li><li> 2.6.0.0.402</li></ul> ?“SCG-31665-3_0.ksp” is applicable with the RuckOS image version: <ul style=""><li> 3.0.0.0.558</li></ul> To apply the hotfix: Step 1: Upload the script to the SCG node from the GUI: <ol><li>Administration > Diagnostics.</li><li>Click on the Diagnostics Scripts tab in the left-hand menu.</li><li>Click Browse under Upload Diagnostic Script to SCG, select the KSP file attached, and upload it. Upon successful upload, the script will be visible in the "upload" section.</li></ol> Step 2: Execute the script on the SCG node's CLI: Connect to the SCG CLI and enter the "Enable" mode SCG-1>en Password: ******* SCG-1# Enter the "Debug" and "Diagnostic" modes SCG-1# debug SCG-1(debug)#diagnostic SCG-1(debug-diagnostic)# Execute the script SCG-2-C(debug-diagnostic)#show This will show the list of scripts available. Pick the name of the script for the NTP vulnerability, and execute the script as follows: SCG-2-C(debug-diagnostic)#execute <name of script> Exit from each level of the CLI mode by executing the "exit" command. </div>

2015-01-08T13:33:50-0800 2015-01-08T13:40:13-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PI1UCAW?attachment_index=0 2015-01-08T13:40:13-0800 monthly admin,premium knowledge_article_1534 knowledge_article_1534_attachment_1 NTP_SCG_KSPs.zip 5162119.0 application/zip https://support.ruckuswireless.com/articles/000003747 2015-01-02T15:44:07-0800 monthly 0.8 admin,premium knowledge_article_1523 knowledge_article_1523 2015-01-02T15:44:07-0800 000003747 Validated (External) Premium Zoneflex indoor Configuration Configuration, ZoneFlex Indoor How many clients can be supported by R700 Number of clients that can be connected to R700 Access Point are as below: Authentication/Encryption Type 2.4 Ghz 5 Ghz Per AP Open 500 180 500 WEP 111 180 291 WPA/WPA2 (TKIP) 26 180 206 WPA/WPA2 (AES) 110 180 290 <table border="0" cellpadding="0" cellspacing="0" width="1278"><colgroup><col style="width: 189px;"></col><col style="width: 157px;"></col><col style="width: 149px;"></col><col style="width: 148px;"></col><col style="width: 179px;"></col><col style="width: 76px;"></col></colgroup><tbody><tr height="24" style="height: 24px;"><td colspan="1" rowspan="1" height="24" style="height: 24px; width: 189px;"> </td><td colspan="1" rowspan="2" style="width: 157px;">Key Cache Entries consumed / WLAN</td><td colspan="1" rowspan="2" style="width: 149px;">Key Cache Entries consumed / Client</td><td colspan="1" rowspan="1" style="width: 148px;"> </td><td colspan="7" rowspan="1" style="width: 635px;">MAX CLIENT CAPACITY (1 WLAN)</td></tr><tr height="25" style="height: 25px;"><td colspan="1" rowspan="1" height="25" style="height: 25px;"> </td><td colspan="1" rowspan="1">AP TYPES:</td><td colspan="1" rowspan="1" style="width: 179px;">Single Band AP (.11n)</td><td colspan="3" rowspan="1" style="">Dual Band AP (.11n)</td><td colspan="3" rowspan="1" style="">Dual Band AP (.11ac)</td></tr><tr height="25" style="height: 25px;"><td colspan="1" rowspan="1" height="25" style="height: 25px;"> </td><td colspan="1" rowspan="1" style="width: 157px;"> </td><td colspan="1" rowspan="1" style="width: 149px;"> </td><td colspan="1" rowspan="1">Key Cache Entries</td><td colspan="1" rowspan="1" style="width: 179px;">112</td><td colspan="1" rowspan="1" style="">112</td><td colspan="1" rowspan="1" style="">112</td><td colspan="1" rowspan="1" style="">224</td><td colspan="1" rowspan="1" style="">112</td><td colspan="1" rowspan="1" style="">NA</td><td colspan="1" rowspan="1" style="">NA</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;">AUTH / ENCRYPTION TYPE:</td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1" style=""> </td><td colspan="1" rowspan="1" style="">2.4GHz</td><td colspan="1" rowspan="1" style="">5GHz</td><td colspan="1" rowspan="1" style="">Per AP</td><td colspan="1" rowspan="1" style="">2.4GHz</td><td colspan="1" rowspan="1" style="">5GHz</td><td colspan="1" rowspan="1" style="">Per AP</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;">Open</td><td colspan="1" rowspan="1">0</td><td colspan="1" rowspan="1">1</td><td colspan="1" rowspan="1"> </td><td align="right" colspan="1" rowspan="1" style="">500</td><td align="right" colspan="1" rowspan="1" style="">500</td><td align="right" colspan="1" rowspan="1" style="">500</td><td align="right" colspan="1" rowspan="1" style="">500</td><td align="right" colspan="1" rowspan="1" style="">500</td><td align="right" colspan="1" rowspan="1" style="">180</td><td align="right" colspan="1" rowspan="1" style="">500</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;">WEP</td><td colspan="1" rowspan="1">1</td><td colspan="1" rowspan="1">1</td><td colspan="1" rowspan="1"> </td><td align="right" colspan="1" rowspan="1">111</td><td align="right" colspan="1" rowspan="1">111</td><td align="right" colspan="1" rowspan="1" style="">111</td><td align="right" colspan="1" rowspan="1" style="">222</td><td align="right" colspan="1" rowspan="1">111</td><td align="right" colspan="1" rowspan="1" style="">180</td><td align="right" colspan="1" rowspan="1" style="">291</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;">WPA / WPA2 (TKIP)</td><td colspan="1" rowspan="1">8</td><td colspan="1" rowspan="1">4</td><td colspan="1" rowspan="1"> </td><td align="right" colspan="1" rowspan="1">26</td><td align="right" colspan="1" rowspan="1">26</td><td align="right" colspan="1" rowspan="1" style="">26</td><td align="right" colspan="1" rowspan="1" style="">52</td><td align="right" colspan="1" rowspan="1">26</td><td align="right" colspan="1" rowspan="1" style="">180</td><td align="right" colspan="1" rowspan="1" style="">206</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;">WPA / WPA2 Mixed Mode </td><td colspan="1" rowspan="1">8</td><td colspan="1" rowspan="1">4</td><td colspan="1" rowspan="1">(TKIP)</td><td align="right" colspan="1" rowspan="1">26</td><td align="right" colspan="1" rowspan="1">26</td><td align="right" colspan="1" rowspan="1" style="">26</td><td align="right" colspan="1" rowspan="1" style="">52</td><td align="right" colspan="1" rowspan="1">26</td><td align="right" colspan="1" rowspan="1" style="">180</td><td align="right" colspan="1" rowspan="1" style="">206</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1">1</td><td colspan="1" rowspan="1">(AES)</td><td align="right" colspan="1" rowspan="1">104</td><td align="right" colspan="1" rowspan="1">104</td><td align="right" colspan="1" rowspan="1" style="">104</td><td align="right" colspan="1" rowspan="1" style="">208</td><td align="right" colspan="1" rowspan="1">104</td><td align="right" colspan="1" rowspan="1" style="">180</td><td align="right" colspan="1" rowspan="1" style="">284</td></tr><tr height="22" style="height: 22px;"><td colspan="1" rowspan="1" height="22" style="height: 22px;">WPA / WPA2 (AES)</td><td colspan="1" rowspan="1">2</td><td colspan="1" rowspan="1">1</td><td colspan="1" rowspan="1"> </td><td align="right" colspan="1" rowspan="1">110</td><td align="right" colspan="1" rowspan="1">110</td><td align="right" colspan="1" rowspan="1" style="">110</td><td align="right" colspan="1" rowspan="1" style="">220</td><td align="right" colspan="1" rowspan="1">110</td><td align="right" colspan="1" rowspan="1" style="">180</td><td align="right" colspan="1" rowspan="1" style="">290</td></tr><tr height="21" style="height: 21px;"><td colspan="1" rowspan="1" height="21" style="height: 21px;"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td></tr></tbody></table>

2015-01-02T15:44:07-0800 2015-01-02T15:50:11-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PHt6CAG?attachment_index=0 2015-01-02T15:50:11-0800 monthly admin,premium knowledge_article_1523 knowledge_article_1523_attachment_1 Client Count Table -120514.xlsx 12155.0 application/vnd.openxmlformats-officedocument.spreadsheetml.sheet https://support.ruckuswireless.com/articles/000003624 2014-12-31T22:08:55-0800 monthly 0.8 admin,premium knowledge_article_1436 knowledge_article_1436 2014-11-17T17:10:46-0800 000003624 Validated (External) Premium Zoneflex 7731 Configuration Configuration, ZoneFlex 7731 How to disable transmission on ZF7731 bridges? <div style="text-align: center;">Commands to disable transmission on ZF7731 Bridges</div> Syntex : set state <wlan name> {up|down} get state <wlan name> Description : ? set state <wlan name> {up|down}--Configures the state of a WLAN interface. Note a down set state remains down on the next reboot. ? get state <wlan name>--Displays the state of a WLAN interface. Example : rkscli: set state wlan0 up OK rkscli: get state wlan0 wlan0 State: up OK

How to disable transmission on ZF7731 bridges.

2014-12-31T22:08:55-0800 2014-12-31T22:10:18-0800 https://support.ruckuswireless.com/articles/000002095 2014-12-29T13:08:04-0800 monthly 0.8 admin,premium knowledge_article_471 knowledge_article_471 2013-06-11T17:16:14-0700 000002095 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How to restore the configuration from the backup file while Zone Directors are configured in Smart redundancy mode? The restoration process is almost similar to the upgrade process which initially restore the configuration across the Stand-by Zone director then switch their roles(Primary to secondary and secondary to primary) and finally restores the configuration on the primary(which is stand-by/secondary now) once all the Access points fail-over to the Back-up(which is Active/Primary now). The following step by step procedure will explain the process for restoring the back-up file across the Zone directors configured in the smart redundancy mode and its detailed process. <ul><li>. Log in to the active ZoneDirector or the shared Management Interface.</li><li>Go to Administer > Back up.</li><li>Under the Restore Configuration section, click Browse. The Browse dialog box appears.</li><li>Browse to the location where you saved the initial backup file, and then click Open.</li><li>When the backup file name appears in the text field, the Browse button becomes the Restore button.</li><li> Click Restore. The backup Zone Director is restored first.</li><li>When the Stand-by/Secondary Zone Director upgrade is complete, the backup Zone Director reboots and becomes active (begins accepting AP requests), while the original active Zone Director enters Stand-by state and begins its own restoration process.</li><li>All APs are now associated to the Stand-by Zone Director (which is now the active Zone Director) will update their respective configuration.</li></ul>

2014-12-29T13:08:04-0800 2014-12-29T13:10:15-0800 https://support.ruckuswireless.com/articles/000003720 2014-12-29T09:25:32-0800 monthly 0.8 admin,premium knowledge_article_1517 knowledge_article_1517 2014-12-29T09:25:32-0800 000003720 Validated (External) Premium Virtual smartcell gateway Configuration Configuration, virtual SmartCell Gateway Does VSCG support Guest portal Customization like in ZD As of now the guest portal customization is not available on VSCG also the terms of use option.Kindly contact Support or your regional SE to raise a feature request.

2014-12-29T09:25:32-0800 2014-12-29T09:30:14-0800 https://support.ruckuswireless.com/articles/000003785 2014-12-23T10:05:34-0800 monthly 0.8 admin,premium knowledge_article_1513 knowledge_article_1513 2014-12-23T10:05:34-0800 000003785 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Attributes used in WISPr in redirection URL <pre style="font-family: Arial; font-size: 13.63636302948px;"> See the following URL for an example and common attributes used in redirection URL WISPr http://portal.free.com/?sip=192.168.120.15&mac=74911a20-dac0&client_mac=00216a95b0de&uip=192.168.120.13&lid=101&dn=free.com&url=&ssid=Free-WiFi&loc=London&vlan=101 sip: The IP address of ZoneDirector. mac: The MAC address of the Access Point (Ethernet). lid: The Location ID of the Hotspot service. uip: The client’s real IP address. In a Layer 3 NAT environment, the client’s IP address will be translated to the gateway’s IP address when logging to the Hotspot service. In this case, the login request has to include the client’s real IP address to be handled properly. dn: The domain name of the ZoneDirector. The domain name is obtained from the SSL certificate when importing a certificate to ZoneDirector. uid: The user’s login ID (passed in the UAM login form’s user name parameter). client_mac: The client’s MAC address. SSID: The SSID to which the client is associated. Loc: The location name defined in the AP settings. vlan: The client’s VLAN ID. reason: The reason for redirection; can be empty for first redirect, failed for auth failure, or logout when client logs off</pre> <div style="font-family: Arial; font-size: 13.63636302948px;"> </div>

List of Attributes used in WISPr in redirection URL

2014-12-23T10:05:34-0800 2014-12-23T10:10:12-0800 https://support.ruckuswireless.com/articles/000003801 2014-12-17T15:03:09-0800 monthly 0.8 admin,premium knowledge_article_1505 knowledge_article_1505 2014-12-17T15:03:09-0800 000003801 Validated (External) Premium Flexmaster;FlexMaster Firmware;System network management Firmware, System Network Management, FlexMaster Root cause is software file name extension is in uppercase. Modify file name to zf7372_9.8.1.0.101.bl7 (bl7 in lowercase)

Unable to standalone AP image files in to FM running 9.9 version

2014-12-17T15:03:09-0800 2014-12-17T15:10:25-0800 https://support.ruckuswireless.com/articles/000003800 2014-12-16T21:52:25-0800 monthly 0.8 admin,premium knowledge_article_1503 knowledge_article_1503 2014-12-16T21:52:25-0800 000003800 Validated (External) Premium Scg 200;Virtual smartcell gateway Configuration;Installation Configuration, Installation, SCG 200, virtual SmartCell Gateway Does vSCG / SCG supports IPv6 format? As of now vSCG and SCG doesn't support IPv6 IP address format. They only support IPv4 format.

vSCG / SCG supports only IPv4 but not IPv6

2014-12-16T21:52:25-0800 2014-12-16T22:00:14-0800 https://support.ruckuswireless.com/articles/000003749 2014-12-11T05:37:01-0800 monthly 0.8 admin,premium knowledge_article_1498 knowledge_article_1498 2014-12-05T05:10:10-0800 000003749 Validated (External) Premium Virtual smartcell gateway Installation;Troubleshooting Installation, Troubleshooting, virtual SmartCell Gateway Is R500 AP supported in vSCG running on 2.5.1.0.174 R500 is currently not supported by vSCG, Kindly refer to below article link for supported AP models in vSCG. https://support.ruckuswireless.com/answers/000003718

R500 is not supported AP in vSCG

2014-12-11T05:37:01-0800 2014-12-11T05:40:17-0800 https://support.ruckuswireless.com/articles/000003724 2014-12-08T01:02:47-0800 monthly 0.8 admin,premium knowledge_article_1489 knowledge_article_1489 2014-12-08T01:02:47-0800 000003724 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How-to-retrieve-Mesh-ID-and-pass-phrase-with-out-ZD-debug-or-backup-file As there is no any debug file or backup file taken from the ZD, Mesh ID and pass phrase can be retrieved from the root AP which was previously connected to the Mesh enabled AP. Mesh ID and the Pass phrase will be there in the AP support info file logs. Under RPM Keys, Check for the 5 Ghz wlans if it is dual band and 2.4 ghz wlans if it is single band. Use the Keyword "mesh". We can see the Mesh SSID (Both mesh uplink & downlink) name and also the pass phrase. Note : Copy and paste the same on the new ZD GUI for Mesh SSID and the pass phrase.

How to find the Mesh ID and the pass phrase from the AP support info file which was connected previously to an ZD with mesh enabled.

2014-12-08T01:02:47-0800 2014-12-08T01:10:16-0800 https://support.ruckuswireless.com/articles/000003750 2014-12-05T07:28:56-0800 monthly 0.8 admin,premium knowledge_article_1482 knowledge_article_1482 2014-12-05T07:28:56-0800 000003750 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor - Changed the Authentication method to WPA2-AES - On the Panic device made sure all channels for 2.4Ghz channel are allowed - On the wlan config observed that OFDM-only is enabled and BSS-minrate is set to 5.5, Disabled the OFDM and BSS-minrate on the WLAN - Panic devices was able to connect fine to the wireless

This is a ZD managed setup with wlan configured as standard WPA-mixed, all the wireless devices seem to connect and work fine expect the Panic wireless device.

2014-12-05T07:28:56-0800 2014-12-05T07:30:17-0800 https://support.ruckuswireless.com/articles/000003689 2014-12-05T02:29:48-0800 monthly 0.8 admin,premium knowledge_article_1479 knowledge_article_1479 2014-12-05T02:29:48-0800 000003689 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation;System network management Configuration, Installation, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor If there are free IP addresses available in the DHCP pool for the VLAN, then tagging the VLAN on the switch port where the AP is connected and choosing the AP's uplink Ethernet port as Trunk should allow the Wireless clients to get a Valid IP address and access Internet. Note: You can also select the AP's uplink port as General and Tag the appropriate VLAN instead of selecting the port as Trunk port.

This article has information regarding the troubleshooting steps that can be followed in case of clients connecting to standalone AP not getting a valid IP address from External DHCP server when the SSID is tagged with a VLAN.

2014-12-05T02:29:48-0800 2014-12-05T02:30:12-0800 https://support.ruckuswireless.com/articles/000003746 2014-12-04T08:07:01-0800 monthly 0.8 admin,premium knowledge_article_1477 knowledge_article_1477 2014-12-04T08:05:21-0800 000003746 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Is it possible to delete the generated guest passes from ZD? Yes, but only ZD Admin or an User that has Super admin rights can delete the generated Guest Passes from Monitor :: Generated Guest Passes in the WebUI of the ZD. If either a Monitoring Admin or Operator Admin is trying to delete the generated guest passes below warning messages would be displayed as per the role. Warning message for Monitoring Admin: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNHh&feoid=00N50000002Cf3M&refid=0EM50000000Lbpv"></img> Warning message for Operator Admin: <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNHh&feoid=00N50000002Cf3M&refid=0EM50000000Lbq0"></img> Note : An user that doesn't have any Administration rights of the ZD can be given permission to generate guest passes but will not have the ability to delete an existing guest pass.

This article has information regarding deletion of generated guest passes from ZD.

2014-12-04T08:07:01-0800 2014-12-04T08:10:17-0800 https://support.ruckuswireless.com/articles/000003745 2014-12-04T02:48:45-0800 monthly 0.8 admin,premium knowledge_article_1475 knowledge_article_1475 2014-12-04T02:48:45-0800 000003745 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration Performance, Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What are the best practice recommendations for connecting my Ruckus network accross VPN/ WAN through SonicWall. On the Sonic Wall Firewall check the following. 1. Maximum Transmission Unit (MTU) of the WAN interface of the SonicWALL: The Maximum Transmission Unit size is the maximum size of an Ethernet frame being sent out through a network device. By default this value is 1500 bytes but on WAN xDSL and cable connections this value is often lowered to achieve a more stable connection and/or better performance. Common values are: 1492 SDSL / 1460 ADSL / 1404 Cable. The MTU value is changed with increments of 8 bytes. In the SonicWALL WAN interface this value is by default 1500 bytes. Recommended: Change the MTU size after determining the optimum MTU size. You could also use the tool mturoute to accomplish this 2. Fragment non-VPN outbound packets larger than this Interface’s MTU: This checkbox on the NSA setting works in tandem with MTU, and is enabled by default in Gen5 UTM Firmware for the primary WAN and is considered a best practice to have it enabled. It is likely not enabled in Gen4 UTM products or in migrations from Gen4 to Gen5 UTM models. You must turn it on even on Gen5 UTM models on any additional WAN interfaces. Recommended: Enable this option 3. Ignore Don’t Fragment (DF) Bit: Enabling this option would fragment packets even though DF bit is set. By default this option is unchecked in the WAN interface advanced settings and it is recommended to keep it unchecked. Recommended: Keep it disabled. 4. The interface speed settings of WAN and other interfaces: By default all interfaces in the SonicWALL are set to automatically detect link speed. However, in certain throughput issues, the link speed settings should be manually set according to the device connected to the interface incorrect duplex settings of your WAN, for instance, would have the following detrimental effects: Unable to negotiate a connection with ISP. Dropping internet connection. Dropped packets. Slow throughput. <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNHN&feoid=00N50000002Cf3M&refid=0EM50000000Lbon"></img> <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNHN&feoid=00N50000002Cf3M&refid=0EM50000000Lbos"></img> <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNHN&feoid=00N50000002Cf3M&refid=0EM50000000Lbox"></img>

Best practice recommendations for connecting Ruckus ZD/AP across VPN WAN links through SonicWall firewalls

2014-12-04T02:48:45-0800 2014-12-04T02:50:12-0800 https://support.ruckuswireless.com/articles/000003727 2014-12-01T08:44:01-0800 monthly 0.8 admin,premium knowledge_article_1471 knowledge_article_1471 2014-12-01T08:44:01-0800 000003727 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to add/remove a WLAN from the WLAN group via CLI? - Below are the commands to add/remove a WLAN from the WLAN Group. Adding a WLAN : ruckus>en ruckus#config ruckus(config)#wlan-group ruckus(config-wlangrp)# wlan "New Name" // New Name is the WLAN name on the ZD Removing a WLAN : ruckus>en ruckus#config ruckus(config)#wlan-group ruckus(config-wlangrp)# no wlan "New Name" // New Name is the WLAN name on the ZD

This article gives you information about the CLI commands for adding/removing a WLAN from the WLAN group

2014-12-01T08:44:01-0800 2014-12-01T08:50:21-0800 https://support.ruckuswireless.com/articles/000003726 2014-12-01T05:47:21-0800 monthly 0.8 admin,premium knowledge_article_1467 knowledge_article_1467 2014-12-01T05:47:21-0800 000003726 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Whatever VLAN is configured on the WLAN, it should be tagged at the switch port where the ZD is connected, at the switch port where the AP is connected, at the switch port where the DHCP server resides, at the router port and at all trunk ports uniting the backhaul/core switches needs to.

This article explains about Captive portal redirection issue when ZD/ AP are on managemnt VLAN and WLANs are configured with different VLANs

2014-12-01T05:47:21-0800 2014-12-01T05:50:10-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PHrtCAG?attachment_index=0 2014-12-01T05:50:10-0800 monthly admin,premium knowledge_article_1467 knowledge_article_1467_attachment_1 BPDG-Configuring-Wired-Networks-.pdf 8534809.0 application/pdf https://support.ruckuswireless.com/articles/000003708 2014-11-28T00:10:04-0800 monthly 0.8 admin,premium knowledge_article_1461 knowledge_article_1461 2014-11-25T00:41:33-0800 000003708 Validated (External) Premium Zoneflex indoor Known issues and workarounds Known Issues and Workarounds, ZoneFlex Indoor Power drawn by ZF7055 The ZF7055 AP will be powered using a PoE switch or external power adapter. Power Draw by AP(ZF7055) when connected to the PoEswitch. PoE (PoE Switch): Idle (3.6 w); Typical (4.5 w); Peak (6.5 w) DC-Powered(Power Adapter): Idle (3.8 w); Typical (4.7 w); Peak (6.7 w) For 24 port switch which is capable of providing up to 365W of power can power up 24 ZF7055 AP's with out any issues.

2014-11-28T00:10:04-0800 2014-11-28T00:10:17-0800 https://support.ruckuswireless.com/articles/000003702 2014-11-21T08:07:46-0800 monthly 0.8 admin,premium knowledge_article_1445 knowledge_article_1445 2014-11-21T08:07:46-0800 000003702 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why do my remote office AP fail to join the Zone Director. You can configure the Tunnel MTU transmission size on the ZD Setting global AP policies on the Configure > Access Points page <img alt="User-added image" height="308" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PNAW&feoid=00N50000002Cf3M&refid=0EM50000000LbN3" style="width: 751px; height: 308px;" width="500"></img> Also this command is available from the Zone Director CLi ruckus(config-sys)# tunnel-mtu 1500 It is also advisable to check the following. <ol><li>Make sure your routers do not drop ICMP "Destination Unreachable-Fragmentation Needed and DF Set" messages.</li><li>If your router is set to 1500 bytes, try hardcoding it to a smaller size.</li><li>Hardcode your clients with a smaller MTU size.</li><li>Use DHCP option 26 to set the clients to a smaller MTU size</li></ol> For more information on MTU issues, visit the links below <a href="http://msdn.microsoft.com/en-us/library/aa916746.aspx" target="_blank">Path MTU Discovery</a> <a href="http://support.microsoft.com/kb/900926" target="_blank">Recommended TCP/IP settings for WAN links with a MTU size of less than 576</a> <a href="http://tools.ietf.org/html/rfc1191" target="_blank">RFC 1191 - Path MTU Discovery</a>

2014-11-21T08:07:46-0800 2014-11-21T08:10:13-0800 https://support.ruckuswireless.com/articles/000003694 2014-11-20T15:52:42-0800 monthly 0.8 admin,premium knowledge_article_1444 knowledge_article_1444 2014-11-20T15:52:42-0800 000003694 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Is there an alternative to Hard Reset button recovery of disconnected APs?

Problem: Customer changed AP Policies Management VLAN and only recovery is to factory default APs. Result: Customers don’t want to manually push Hard Reset button on ceiling mounted APs.

2014-11-20T15:52:42-0800 2014-11-20T16:00:34-0800 https://support.ruckuswireless.com/articles/000003688 2014-11-20T07:37:28-0800 monthly 0.8 admin,premium knowledge_article_1443 knowledge_article_1443 2014-11-20T07:37:28-0800 000003688 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Why am I seeing IP conflict messages when i am using Apple devices on my network. This issue can be prevalent on any IP network where iOS devices are connected. The problem is not specific to Ruckus, or any other networking device. In most cases, this IP conflict occurs so briefly that it does not affect network performance and is merely a nuisance. To prevent this happening if your home and corporate networks share the same IP subnet, release and renew your IP or reset the Apple IoS device.

Apple IoS devices IPAD IPHONE causing IP conflicts when connected to the network

2014-11-20T07:37:28-0800 2014-11-20T07:40:17-0800 https://support.ruckuswireless.com/articles/000003687 2014-11-20T05:57:38-0800 monthly 0.8 admin,premium knowledge_article_1442 knowledge_article_1442 2014-11-20T05:56:15-0800 000003687 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why does the my iPAD fail to bridge the content via the BGW over airserver? Make sure you are using a number 0, no the letter o wifi0 is for the 2.4 WIF wifi1 is for the 5GHz WIF Telnet to the AP Set the media Q timers higher To check the settings: rkscli: get mq wifi0 --- Media Queue Options --- Pkt Class Queue Time: Voice : 2000 Video : 2000 Data : 4000 Background : 40 Max Pkts Per Class: Voice : 992 Video : 984 Data : 976 Background : 968 Station-Type Max Credit: G-Station : 0 B-Station : 0 Power-Save Credit : 0 OK Change the Background hold timer to higher value: rkscli: set mq wifi0 qtime 2000 4000 4000 400 OK Verify setttings: rkscli: get mq wifi0 --- Media Queue Options --- Pkt Class Queue Time: Voice : 2000 Video : 4000 Data : 4000 Background : 400 Max Pkts Per Class: Voice : 992 Video : 984 Data : 976 Background : 968 Station-Type Max Credit: G-Station : 0 B-Station : 0 Power-Save Credit : 0 OK rkscli: To apply this to all APs managed by ZD, use the ZD CLI and add this command in front of the AP syntax used : remote_ap_cli -A or for just one AP remote_ap_cli_00:99:88:77:66:55:44 ( =AP mac )

I have enabled BGW and configured the services properly for VLAN mapping of the bridge service I need. The issue is that the iPads can "see" the airserver computers on the other VLAN domain- but they cannot broadcast the iPAD screen successfully over the GW configured

2014-11-20T05:57:38-0800 2014-11-20T06:00:17-0800 https://support.ruckuswireless.com/articles/000003633 2014-11-19T06:45:15-0800 monthly 0.8 admin,premium knowledge_article_1439 knowledge_article_1439 2014-11-12T04:42:33-0800 000003633 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to enable the bonjour gateway debug component from the the CLI of the ZD? Yes, we can enable/disable the Bonjour Gateway debug component on the ZD from CLI. We do not have the Bonjour Gateway debug component on the ZoneDirector web UI under Administer>Diagnosis> Debug Components. Login to the SSH of the ZD and execute the below commands to enable this : ruckus > enable ruckus # debug ruckus(debug)# logs comp bonjour-gateway The command was executed successfully. ruckus(debug)# logs comp mdnsd The command was executed successfully. For disabling the Bonjour Gateway debug component, below are the commands: ruckus(debug)# no logs comp bonjour-gateway The command was executed successfully. ruckus(debug)# no logs comp mdnsd The command was executed successfully.

This article give the information about the commands which are required to enable the Bonjour Gateway debug component from the CLI of the Zone Director

2014-11-19T06:45:15-0800 2014-11-19T06:50:13-0800 https://support.ruckuswireless.com/articles/000003625 2014-11-16T18:20:13-0800 monthly 0.8 admin,premium knowledge_article_1434 knowledge_article_1434 2014-11-16T18:20:13-0800 000003625 Validated (External) Premium Scg 200 Troubleshooting Troubleshooting, SCG 200 Can we use log analyzer tool to analyse SCG debug file ? ~ SCG debug file doesn't need to be decrypted. ~ The debug file downloaded from SCG is in the form of .tgz extension and can be extracted using any of the unzipping tool (Like Winrar) ~ The extracted debug file can be analysed using notepad application. ~ Log Analyzer tool (Rowdy tool) cannot analyze SCG debug file, it only uses to decrypt and analyze ZoneDirector debug file.

SCG debug file analysis.

2014-11-16T18:20:13-0800 2014-11-16T18:30:12-0800 https://support.ruckuswireless.com/articles/000003300 2014-11-14T05:12:55-0800 monthly 0.8 admin,premium knowledge_article_1431 knowledge_article_1431 2014-08-19T03:46:53-0700 000003300 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor <div> If you choose to override the VLAN configured for a WLAN under WLAN Groups then make sure that the required VLAN is tagged on the Switch port where the AP is connected. </div> <div> </div> <div> Available options for VLAN Override are as follows:</div> <div> </div> <div> No Change: Click this option if you want the WLAN to keep the same VLAN tag (if you configured the “Access VLAN” option when you created the WLAN service).</div> <div> </div> <div> Tag: Click this option to override the VLAN configured for the WLAN service.</div> <div> </div> <div> </div> <div> If Tag is selected under VLAN Override and if that VLAN is not tagged on the Switch port then clients would disconnect from the WLAN with small Session Timeout values. Example: If a WLAN is tagged with VLAN100 under Advanced Options and then tagged with VLAN200 under VLAN Override then VLAN200 should be tagged on the Switch port otherwise clients would get disconnected with Session Timeout.</div>

This article has resolution for client disconnection from standard WLAN with Session Timeout

2014-11-14T05:12:55-0800 2014-11-14T05:20:26-0800 https://support.ruckuswireless.com/articles/000003609 2014-11-13T15:51:19-0800 monthly 0.8 admin,premium knowledge_article_1427 knowledge_article_1427 2014-11-13T15:51:19-0800 000003609 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Make sure that basic radius authentication works with Clearbox RADIUS then make the following modification: Modify the "radius.dct" to include the Ruckus Attributes: Step 1: Modify the radius dictionary file: Default location of the file: /Program File/ClearBox Server/RaDict/radius.dct <div style="margin-left: 40px;">################################################################### VENDOR Ruckus type1 25053 MACRO RUCKUS-VSA(t,s) 26 [vid=25053 type1=%t% len1=+2 data=%s%] ATTRIBUTE Ruckus-User-Groups RUCKUS-VSA(1,string) ATTRIBUTE Ruckus-Sta-RSSI RUCKUS-VSA(2,string) ATTRIBUTE Ruckus-SSID RUCKUS-VSA(3,string) ATTRIBUTE Ruckus-WlanID RUCKUS-VSA(4,integer) ATTRIBUTE Ruckus-Location RUCKUS-VSA(5,string) ATTRIBUTE Ruckus-Grace-Period RUCKUS-VSA(6,integer) ATTRIBUTE Ruckus-SCG-CBlade-IP RUCKUS-VSA(7,integer) ATTRIBUTE Ruckus-SCG-DBlade-IP RUCKUS-VSA(8,integer) ATTRIBUTE Ruckus-Session-Type RUCKUS-VSA(125,integer) ATTRIBUTE Ruckus-Acct-Status RUCKUS-VSA(126,integer) ###################################################################</div> Step 2: Modify the radius profile and add the "Ruskus-User-Groups" and set string value of the user group "staff" for example: Step 3: Verify the user group response using the ZD AAA Test: <img alt="User-added image" height="277" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PMtf&feoid=00N50000002Cf3M&refid=0EM50000000LabI" width="500"></img>

2014-11-13T15:51:19-0800 2014-11-13T16:00:32-0800 https://support.ruckuswireless.com/articles/000003583 2014-11-13T15:11:24-0800 monthly 0.8 admin,premium knowledge_article_1426 knowledge_article_1426 2014-11-13T15:11:24-0800 000003583 Validated (External) Premium Zonedirector;Sams;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;Smart Access Management (SAMs) Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, ZoneDirector, SAMs Why am I not able to get the Social login page through SAMs portal on my OnSite ZD? If using an OnSite ZoneDirector with SAMs portal, make sure the ZoneDirector is running software version 9.8 or later.

*Using SAMs portal with OnSite ZD *Using Social login such as Facebook, Twitter, Google and LinkedIn

2014-11-13T15:11:24-0800 2014-11-13T15:20:21-0800 https://support.ruckuswireless.com/articles/000001469 2014-11-12T04:40:43-0800 monthly 0.8 admin,premium knowledge_article_1416 knowledge_article_1416 2013-01-22T15:33:35-0800 000001469 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How-to-configure-Device-Policy-for-a-WLAN? To create a Device Access Policy Go to Configure > Access Control In the Device Access Policy section, click Create New. Enter a Name and optionally a description for the access policy. In Default Mode, select Deny all by default or Allow all by default. In Rules, you can create multiple OS-specific rules for each access policy. Description: Description of the rule. OS/Type: Select from any of the supported client types. Type: Select rule type (allow or deny) Uplink/Downlink: Set rate limiting for this client type. VLAN: Segment this client type into a specified VLAN (1~4094; if no value entered, this policy does not impact device VLAN assignment). Click Save to save the rule you created. You can create up to nine rules per access policy (one for each OS/Type). To change the order in which rules are implemented, click the up or down arrows in the Action column. You can also Edit or Clone rules from the Action column. To delete a rule, select the box next to the rule and click Delete. Click OK to save the access policy. You can create up to 32 access policies (one access policy per WLAN). To apply a Device Access Policy to a WLAN: Go to Configure > WLANs. To edit an existing WLAN, click Edit next to the WLAN you want to edit. Expand the Advanced Options, and locate the Access Control section. In Device Policy, select the policy you created from the list. Click OK to save your changes.

2014-11-12T04:40:43-0800 2014-11-12T04:50:34-0800 https://support.ruckuswireless.com/articles/000003592 2014-11-03T17:43:44-0800 monthly 0.8 admin,premium knowledge_article_1366 knowledge_article_1366 2014-11-03T17:43:44-0800 000003592 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector What is the latency for ZD smart redundancy? From ZD 9.8 User Guide, page 65: When two ZoneDirectors are connected in a Smart Redundancy configuration, the Standby ZD will send heartbeats and the Active will send discovers, at 6 second intervals. If after 15s, no reply is seen, the ZDs will make a decision if it is disconnected with its peer, and the Standby ZD will change to Active. When the two ZoneDirectors are communicating again, one Active ZD will change to the Standby role and an auto-synchronization process will be started. There is a timestamp to judge sync from which ZD, to sync the latest one to the peer. The timestamp is updated by configuration behavior. They will continue trying to communicate, sending discover messages every 6 seconds to peers, until the ZDs are communicating again, when they will determine Active/Standby roles based on: 1) most managed APs, and/or 2) lower MAC address.

ZDs use encrypted heartbeats to maintain Smart Redundancy

2014-11-03T17:43:44-0800 2014-11-03T17:50:37-0800 https://support.ruckuswireless.com/articles/000003582 2014-10-31T06:10:44-0700 monthly 0.8 admin,premium knowledge_article_1362 knowledge_article_1362 2014-10-31T06:10:44-0700 000003582 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector As of January 2014, the Wi-Fi Alliance has mandated the removal of WPA+TKIP as a valid WLAN encryption method for WiFi certification. Therefore, ZoneDirector no longer allows the creation of new WPA or TKIP WLANs. WLANs that were created on an earlier ZoneDirector version will retain their settings after upgrading to 9.8, however some configuration settings will no longer be available (greyed out).

This article has information regarding legacy clients not able to connect with WPA2 AES after 9.8 firmware upgrade.

2014-10-31T06:10:44-0700 2014-10-31T06:21:51-0700 https://support.ruckuswireless.com/articles/000003550 2014-10-30T04:03:37-0700 monthly 0.8 admin,premium knowledge_article_1360 knowledge_article_1360 2014-10-26T23:37:01-0700 000003550 Validated (External) Premium Sams;Smart Access Management (SAMs) Configuration Configuration, SAMs How to edit the "Terms and conditions" section in the SAMs portal 1) Login to the GUI of the SAMs portal 2) Go to "Site management" --> Sites --> Click on the concerned site --> Click on "Design" tab. Under the design tab, on the left side you will see a preview of the Registration page. 3) In the preview, please click on the "Terms and conditions" hyperlink which will take you to a page that will help you in editing the "Terms and conditions". Note: The changes made on the SAMs portal is Auto-Saved and doesn't require any "Save" button to be pressed.

The "Terms and conditions" showing up in the SAMs guest portal page has the default content made by Ruckus. How do the customer edit those and make there own "Terms and Conditions"?

2014-10-30T04:03:37-0700 2014-10-30T04:10:11-0700 https://support.ruckuswireless.com/articles/000003302 2014-09-08T00:30:28-0700 monthly 0.8 admin,premium knowledge_article_1265 knowledge_article_1265 2014-09-08T00:30:28-0700 000003302 Validated (External) Premium Zoneflex 7731 Performance;Configuration Performance, Configuration, ZoneFlex 7731 What is the 7731 distance setting and how can I optimize this for VoiP/Video The distance round trip delay setting is so that any retransmission will not take place until the round trip timer for the 7731 distance setting has lapsed. One limiting factor is the distance between bridge units. A 40 MHz wide channel has a maximum distance of 27 kilometers. Bridge links longer than this will need to use a 20 MHz channel instead. 20 MHz wide channels have a maximum distance of 57 kilometers. Long distance links will also require a large acknowledgement (ACK) timeout value. The ACK timeout is the maximum amount of time a unit will wait for the other end to acknowledge receipt of a packet. If the bridge does not receive a response within the ACK timeout value, it will assume packet loss and resend. In a PtMP network, the ACK timeout on the root bridge must be configured to accommodate the longest of the non-root links. The longer the distance between bridge units, the longer it will take for an acknowledgement. Constant timeouts and retransmission will greatly affect bridge performance and overall throughput. The timeout is adjusted on the 7731 using the web GUI or CLI. The value is set using the intended bridge distance in meters. If a large number of retransmits are still occurring, it is acceptable to increase the timeout value. In general, it is always preferable to err with a larger value rather than one that is too small. The ACK timeout value must be configured the same for both bridge units. To Optimize throughput performance for a particular distance especially voice. 1. Factory default distance = 20 km. Selecting first (blank) entry on Web UI, resets distance to factory default. 2. Distance should be configured at both RB and NRB(s) either from from Web UI or CLi to optimize performance set distance wifi0 20000 3 .User should enter the longest link distance at RB in a PtMP system this by default is 20Km. 4. Choosing 12Km or greater will automatically enables RTS-CTS to regulate contention for better throughput 5. TOS (Type of Service) settings should be enabled by default they are disabled this can be enabled from the Web UI 6. DTIM set to 2. from 7731 CLi set dtim-period <wlan name> [1..255 <img alt="User-added image" height="318" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PM2z&feoid=00N50000002Cf3M&refid=0EM50000000LXqZ" width="500"></img> Also note that even if you have the wrong distance value set, in general, the links still work fine, but with suboptimal throughput. if a packet is not received and the distance is shorter it will wait until the distance setting is reached before retransmitting and if you set it too short, then RTx number will increment considerably

7731 distance explanation and settings for root and non-root bridges installed in PTP and PtmP environments with VoiP or Video applications.

2014-09-08T00:30:28-0700 2014-10-28T06:40:47-0700 https://support.ruckuswireless.com/articles/000003552 2014-10-27T01:44:06-0700 monthly 0.8 admin,premium knowledge_article_1353 knowledge_article_1353 2014-10-27T01:44:06-0700 000003552 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor What does Yellow color exclamation symbol means in wifi icon on the system tray ? Yellow Exclamation mark indicates you have limited or no connectivity with your network. Either you resolve that issue, or the easiest thing to do, go to Start, Control Panel, Network Connections, right-click your local area connection that has your exclamation mark, choose Properties, and un-check "notify me when this connection has limited or no connectivity". Following are the possible causes. 1. If you see a yellow exclamation mark, click the icon to see what the conflict is. Verify that there are adequate system resources. Try to free system resources, then remove and reinstall the network driver. A yellow exclamation mark signifies that the card is incorrectly installed; re-install the driver. 2. That means that the LAN Connection is not working properly and requires troubleshooting. Initial steps for troubleshooting in this scenario would be to see if you are using the proper networking cable (straight-through/cross-over), then see if you have configured the right IP addresses (IP/gateway/subnet/DNSes) If everything checks out, contact your network administrator OR ISP if you are dealing with ISP ADSL Modem.

2014-10-27T01:44:06-0700 2014-10-27T01:50:11-0700 https://support.ruckuswireless.com/articles/000003547 2014-10-26T19:26:32-0700 monthly 0.8 admin,premium knowledge_article_1351 knowledge_article_1351 2014-10-26T19:26:32-0700 000003547 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Troubleshooting Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor What is the meaning of "STA c8:85:50:9d:23:91 WPA: received EAPOL-Key 2/4 Pairwise with unexpected replay counter" . Wireless client and the AP will exchange the EAPOL keys in pre-authentication phase. At that time if any retry happens then a log will be populated on the AP as follows. "WPA: received EAPOL-Key 4/4 Pairwise with unexpected replay counter".

2014-10-26T19:26:32-0700 2014-10-26T19:30:22-0700 https://support.ruckuswireless.com/articles/000003500 2014-10-19T18:02:20-0700 monthly 0.8 admin,premium knowledge_article_1344 knowledge_article_1344 2014-10-19T18:02:20-0700 000003500 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security;Troubleshooting Configuration, Security, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Threshold timers predefined on the ZD for Dos attack prevention The Intrusion prevention service help to protect against 802.11 Denial Of Service(DOS). If an AP detects that a malicious client is sending excessive probe or association request, the AP will drop excessive 802.11 management frames that are received within a short period of time from the client. The ZD will notice the client has failed many authentication attempts in a short period and temporarily block the client for a specified duration. If there are more than 100 probe requests or other management frames within 20 msec interval, the excessive probe requests/management frames will be dropped. If there are more than 120 probe requests/management frames with in 20 msec interval, a notification will be sent to ZD. These thresholds are currently hard coded and cannot be adjusted at this time.

2014-10-19T18:02:20-0700 2014-10-19T18:10:16-0700 https://support.ruckuswireless.com/articles/000003516 2014-10-17T05:38:41-0700 monthly 0.8 admin,premium knowledge_article_1338 knowledge_article_1338 2014-10-17T05:38:41-0700 000003516 Validated (External) Premium Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration Configuration, SmartCell Gateway Can we customize the vSCG guest portal page? No. As of now, we cannot customize the Guest pass portal login page like replacing the logo and changing the text message.

Customizing the vSCG guest pass page.

2014-10-17T05:38:41-0700 2014-10-17T05:40:11-0700 https://support.ruckuswireless.com/articles/000003484 2014-10-08T18:21:40-0700 monthly 0.8 admin,premium knowledge_article_1333 knowledge_article_1333 2014-10-08T17:51:30-0700 000003484 Validated (External) Premium Smartcell gateway;Vscg;SmartCell Gateway 200 (SCG200) Security Security, SmartCell Gateway, vSCG Where do I get the patch script for CVE-2014-7186, CVE-2014-7187, CVE-2014-6271 and CVE-2014-7169? The attached KSP file has been released to address these vulnerabilities and is applicable to all SCG and vSCG releases. Ruckus Wireless plans to release fixes in the 2.1.3 and 2.5.1 products and all future releases. Please contact Ruckus Wireless Customer Support if you have any questions at <a href="https://support.ruckuswireless.com/cases/new" target="_blank">https://support.ruckuswireless.com/cases/new</a> Notes: <ul><li> The attached KSP file is applicable to any SCG release (1.x, 2.x)</li><li> You will need to upload the file and follow the procedure outlined below for each node in the cluster.</li><li> After executing the script, if you upgrade the SCG to a different release with the fix not included, then you will need to apply the script again.</li><li> To avoid confusion in the future, remove the script after executing it from the CLI. Once the script is executed, it does not need to remain on the node.</li></ul> For each node of the SCG cluster, perform the following steps: Step 1: Upload the script to the SCG node from GUI: <ol><li> Administration -> Diagnostics</li><li> Click on the diagnostic scripts tab from the left-hand menu</li><li> Click the Browse button under Upload Diagnostic Script to SCG, select the KSP file attached, and upload it.</li></ol> Upon successful upload, the script (BASH-265971_V3) will be visible in the section below the "upload" section. Step 2: Execute the script on the SCG node's CLI: Connect to the SCG CLI and enter the "Enable" mode SCG-1> en Password: *************** SCG-1# Enter the "Debug" and "Diagnostic" modes SCG-1# debug SCG-1(debug)# diagnostic SCG-1(debug-diagnostic)# Execute the script <pre> SCG-2-C(debug-diagnostic)# show No. Name Description ----- ------------------- ----------------------------- 1 BASH-265971_V3 Patch Bash env and command parser SCG-2-C(debug-diagnostic)# execute BASH-265971_V3 patch BASH for Shell Shock Issue KSP: Shell Shock Patch Bash_265971 applied</pre> Exit from each level of CLI mode by executing the "exit" command. You can delete the uploaded script after the execution on the node, and you will need to follow the same procedure on each node of the cluster. If you have any questions, please contact Ruckus Wireless Customer Support.

All SmartCell Gateway (SCG) and Virtual SmartCell Gateway (vSCG) controller versions are impacted by the following vulnerabilities: - CVE-2014-7186 - CVE-2014-7187 - CVE-2014-6271 - CVE-2014-7169 The attached KSP file has been released to address these vulnerabilities and is applicable to all SCG and vSCG releases. Ruckus Wireless plans to release fixes in the 2.1.3 and 2.5.1 products and all future releases. Please contact Ruckus Wireless Customer Support if you have any questions at https://support.ruckuswireless.com/cases/new

2014-10-08T18:21:40-0700 2014-10-08T18:30:11-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PHZaCAO?attachment_index=0 2014-10-08T18:30:11-0700 monthly admin,premium knowledge_article_1333 knowledge_article_1333_attachment_1 BASH-265971_V3.ksp 968472.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000003476 2014-10-05T18:44:00-0700 monthly 0.8 admin,premium knowledge_article_1328 knowledge_article_1328 2014-10-05T18:44:00-0700 000003476 Validated (External) Premium Zoneflex 7762;Zoneflex 7762 s;Zoneflex 7761 cm;Zoneflex 7055;Zoneflex 7372 Performance;Installation Performance, Installation, ZoneFlex 7762, ZoneFlex 7762 S, ZoneFlex 7761 CM, ZoneFlex 7055, ZoneFlex 7372 What is the maximum Transmit Power of the Access Points set with Sri Lanka country code. <div> The maximum Tx-power of access points on both 2.4 GHz and 5GHz radios specific to Sri Lanka country code. </div> <ul><li> ZF7055 is 2.4GHz - 19dbm 5GHz - 16dbm</li><li> ZF7372 is 2.4GHz - 17dbm 5GHz - 17dbm</li><li> ZF7762 is 2.4GHz - 15dbm 5GHz - 15dbm</li><li> ZF7762-S is 2.4GHz - 12dbm 5GHz - 15dbm</li><li> ZF7762-T is 2.4GHz - 15dbm 5GHz - 15dbm</li><li> ZF7761-CM is 2.4GHz - 13dbm 5GHz - 12dbm</li></ul> Note : These values are set on the APs as per the indoor / outdoor regulations in Sri Lanka.

Maximum Transmit Powers of Access Points specific to Sri Lanka country code

2014-10-05T18:44:00-0700 2014-10-05T18:50:14-0700 https://support.ruckuswireless.com/articles/000003477 2014-10-05T18:30:39-0700 monthly 0.8 admin,premium knowledge_article_1326 knowledge_article_1326 2014-10-05T18:30:39-0700 000003477 Validated (External) Premium Zoneflex indoor;Smartcell gateway;SmartCell Gateway 200 (SCG200) Configuration;Installation Configuration, Installation, ZoneFlex Indoor, SmartCell Gateway How to check whether the specific AP is SCG compatible or not. Following procedure will help us to check the AP is SCG compatible or not. Login to the specific AP CLI. Execute the below command. rkscli : get scg If the AP is compatible with SCG then the output will be as follows. SCG services enabled. AP is manged by SCG. If the AP is not compatible with the SCG then the output will be as follows. Command is not recognized

How to check whether the AP is SCG compatible or not

2014-10-05T18:30:39-0700 2014-10-05T18:40:11-0700 https://support.ruckuswireless.com/articles/000002645 2014-10-01T06:58:07-0700 monthly 0.8 admin,premium knowledge_article_1322 knowledge_article_1322 2014-02-13T15:17:06-0800 000002645 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How do I import a high entropy ssl certificate ?

Describes how to import high entropy SSL certificates into ZoneDirector and ZoneFlex access points and wireless bridges.

2014-10-01T06:58:07-0700 2014-10-01T07:00:12-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PElFCAW?attachment_index=0 2014-10-01T07:00:12-0700 monthly admin,premium knowledge_article_1322 knowledge_article_1322_attachment_1 High Entropy Certificate Import.pdf 698352.0 application/pdf https://support.ruckuswireless.com/articles/000003442 2014-09-25T01:28:14-0700 monthly 0.8 admin,premium knowledge_article_1317 knowledge_article_1317 2014-09-25T01:28:14-0700 000003442 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneDirector Why does MESH ACL not always stay applied as uplink rule? None, by design there is 20 minute timer built in - see workaround.

A MESH ACL is used to nail any MAP uplink to any other MAP or RAP for various topology requirements in any situation, but sometimes the ACL does not seem to be applied, and the MAP moves to another UPlink which is not part of the configured ACL in the ZD configuration.

2014-09-25T01:28:14-0700 2014-09-25T01:30:16-0700 https://support.ruckuswireless.com/articles/000003440 2014-09-24T20:04:08-0700 monthly 0.8 admin,premium knowledge_article_1316 knowledge_article_1316 2014-09-24T20:04:08-0700 000003440 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor Is there any commands on Ruckus APs to configure port aggregation ? Port aggregation is an feature which combines multiple Ethernet ports logically to get more Throughput & Bandwidth. As of now there is no any commands on Ruckus APs to configure port aggregation.

Configuring Port aggregation on Ruckus APs.

2014-09-24T20:04:08-0700 2014-09-24T20:10:21-0700 https://support.ruckuswireless.com/articles/000003430 2014-09-24T04:01:29-0700 monthly 0.8 admin,premium knowledge_article_1312 knowledge_article_1312 2014-09-23T09:59:23-0700 000003430 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How to monitor ZoneDirector CPU utilization by using SNMP? CPU utilization can be monitored from the ZoneDirector GUI but sometimes it might lead GUI unresponsiveness issue in ZD 1100, so alternatively the CPU utilization can be monitored through SNMP. Below are the OID and NODE for the controller CPU utilization: NODE: ruckusZDSystemCPUUtil OID: 1.3.6.1.4.1.25053.1.2.1.1.1.5.58

This article talks about how to monitor the CPU utilization using SNMP from ZoneDirector

2014-09-24T04:01:29-0700 2014-09-24T04:10:18-0700 https://support.ruckuswireless.com/articles/000001678 2014-09-24T02:53:16-0700 monthly 0.8 admin,premium knowledge_article_1311 knowledge_article_1311 2013-02-24T19:44:18-0800 000001678 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to create an additional admin user on the ZoneDirector? How to create the one more user for administrator login? Step – 1 Create Role as per the below instructions ZoneDirector provides a "Default" role that is automatically applied to all new user accounts. This role links all users to the internal WLAN and permits access to all WLANs by default. As an alternative, you can create additional roles that you can assign to select wireless network users, to limit their access to certain WLANs, to allow them to log in with non-standard client devices, or to grant permission to generate guest passes. (You can then edit the "default" role to deactivate the guest pass generation option.) To create a new user Role: <ol><li> Go to Configure> Roles. The Roles and Policies page appears, displaying a Default role in the Roles table. </li><li> Click Create New (below the Roles table). </li><li> Type a Name and a short Description for this role. </li><li> Choose the options for this role from the following: <ul><li> Group Attributes: Fill in this field only if you are creating a user role based on Group Attributes extracted from an Active Directory or LDAP server Enter the User Group name here. Active Directory/LDAP users with the same group attributes are automatically mapped to this user role. </li><li> Allow All WLANs: You have two options: </li></ul> </li></ol> (1) Allow Access to all WLANs, or (2)Specify WLAN Access. If you select the second option, you must specify the WLANs by clicking the check box next to each one. This option requires that you create WLANs prior to setting this policy <ol><li> <ul><li> Guest Pass: If you want users with this role to have permission to generate guest passes, activate this option. </li><li> When creating a guest pass generator Role, you must ensure that this Role is given access to the Guest WLAN. If you create a Role and allow guest pass generation, but do not allow the Role access the relevant WLAN, members of the "Guest Pass Generator" Role will still be unable to generate guest passes for the Guest WLAN. </li><li> Administration: Please check mark this box. This option allows you to create a user role with ZoneDirector administration privileges - either full access or limited access. </li></ul> </li></ol> Select the option out of three options " Super Admin (Perform all configuration and management tasks) " <ol start="5"><li> When you finish, click OK to save your settings. This role is ready for assignment to authorized users. </li></ol> step – 2. Create user as per the below instrctions <ol><li> Go to Configure >Users. </li><li> In the Internal User Database table, click Create New. </li><li> When the Create New options appear, fill in the text fields with the appropriate entries: <ul><li> User Name: Enter a name for this user, up to 32 characters in length, using letters, numbers and the period (.) character. User names are case-sensitive. </li><li> Full Name: Enter the assigned user's first and last name. </li><li> Password/Confirm Password: Enter a unique password for this user, using a combination of letters and numbers, between 4 and 32 characters in length. Do not incorporate any letter spaces. Passwords are case-sensitive. </li></ul> </li></ol> <ol start="4"><li> Choose the role that you created for this user. </li><li> Click OK to save your settings. Be sure to communicate the user name and password to the appropriate end user. </li></ol>

This article explains how to create a new user with admin privileges on the ZD

2014-09-24T02:53:16-0700 2014-09-24T03:00:16-0700 https://support.ruckuswireless.com/articles/000003429 2014-09-23T09:50:15-0700 monthly 0.8 admin,premium knowledge_article_1310 knowledge_article_1310 2014-09-23T09:50:15-0700 000003429 Validated (External) Premium Flexmaster;FlexMaster Installation;System network management Installation, System Network Management, FlexMaster When a FlexMaster is installed, it would only be licensed for 100 devices and if additional licenses are purchased along with the Initial purchase of FlexMaster then the CD will have a license file that should be uploaded in the FlexMaster GUI. The license file can be found in the Root Folder of the FM CD. You can upload the license file in the GUI of FlexMaster under Administer :: License :: Upload a license file (see below):<img alt="User-added image" height="326" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PMQE&feoid=00N50000002Cf3M&refid=0EM50000000LYuS" width="651"></img>

This article has information regarding the License file for FlexMaster and where to find license file on the FM CD

2014-09-23T09:50:15-0700 2014-09-23T09:50:20-0700 https://support.ruckuswireless.com/articles/000003285 2014-09-15T23:33:11-0700 monthly 0.8 admin,premium knowledge_article_1215 knowledge_article_1215 2014-08-12T01:37:11-0700 000003285 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Can wireless client stay connected to wireless network without internet connectivity Below steps are to be configured at client side to make the client as connected to Wifi network without internet access. - Delete all the WLAN profiles on the client device except the WLAN configured on ZD without internet connectivity. - Then the client stay connected to this specific WLAN even without internet connectivity. - Make sure the client has enough signal strength to join the WLAN.

How to make wireless client stay connected to WLAN broadcasting by AP without internet access

2014-09-15T23:33:11-0700 2014-09-15T23:40:18-0700 https://support.ruckuswireless.com/articles/000003259 2014-09-15T22:43:53-0700 monthly 0.8 admin,premium knowledge_article_1276 knowledge_article_1276 2014-08-10T21:19:47-0700 000003259 Validated (External) Premium Zoneflex 7731 Configuration Configuration, ZoneFlex 7731 How to decrease the modulation rate for ZF7731 bridges via Cli mode <div> CLI commands to set modulation rate on ZF7731 bridges. set fixed-rate <wifi name> <rate> {legacy|ss|ds}</div> <div> </div> <div> 6Mb , legacy</div> <div> 9Mb , legacy</div> <div> 12Mb , legacy</div> <div> 18Mb , legacy</div> <div> 24Mb , legacy</div> <div> 36Mb , legacy</div> <div> 48Mb , legacy</div> <div> 54Mb , legacy</div> <div> 6.5Mb , ss</div> <div> 13Mb , ss</div> <div> 19.5Mb , ss</div> <div> 26Mb , ss</div> <div> 39Mb , ss</div> <div> 52Mb , ss</div> <div> 58.5Mb , ss</div> <div> 65Mb , ss</div> <div> 13Mb , ds</div> <div> 26Mb , ds</div> <div> 39Mb , ds</div> <div> 52Mb , ds</div> <div> 78Mb , ds</div> <div> 104Mb , ds</div> <div> 117Mb , ds</div> <div> 130Mb , ds</div> <div> 13.5Mb , ss</div> <div> 27.5Mb , ss</div> <div> 40.5Mb , ss</div> <div> 54Mb , ss</div> <div> 81.5Mb , ss</div> <div> 108Mb , ss</div> <div> 121.5Mb , ss</div> <div> 135Mb , ss</div> <div> 27Mb , ds</div> <div> 54Mb , ds</div> <div> 81Mb , ds</div> <div> 108Mb , ds</div> <div> 162Mb , ds</div> <div> 216Mb , ds</div> <div> 243Mb , ds</div> <div> 270Mb , ds <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255);"> Example: set fixed-rate wlan0 65Mb ss </div> <div style="font-family: Arial; font-size: 13px; background-color: rgb(255, 255, 255);"> Execute above command on both wlan0 / wlan1 of ZF7731 Root and Non-Root bridges.</div> </div> <div> To revert the configuration to Auto.</div> <div> </div> <div> set fixed-rate <wifi name> auto </div> <div id="cke_pastebin" style="width: 1px; height: 1px;"> </div>

Cli commands to decrease the modulation rate for ZF7731 bridges.

2014-09-15T22:43:53-0700 2014-09-15T22:50:18-0700 https://support.ruckuswireless.com/articles/000001787 2014-09-15T02:05:45-0700 monthly 0.8 admin,premium knowledge_article_1269 knowledge_article_1269 2013-03-19T11:26:29-0700 000001787 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Check the Restricted Subnet Access Rule on the ZD Which can be found under ZD GUI >Configure > Guest Access. If there is a rule which allows all then you will be able to communicate with other wireless clients even though they are part of different subnet. In this case, even though Wireless Client Isolation is set to "Full" for the WLAN, restricted subnet Access is taking the first priority.

Clients are able to communicate with each other even though Wireless Client isolation is configured to 'Full' for the WLAN

2014-09-15T02:05:45-0700 2014-09-15T02:10:18-0700 https://support.ruckuswireless.com/articles/000001306 2014-01-11T14:18:01-0800 monthly 0.8 admin,premium knowledge_article_74 knowledge_article_74 2012-04-03T14:05:13-0700 000001306 Validated (External) Premium Configuration Configuration Can ZoneDirector send email alerts? ZoneDirector can send email alerts when eg a new rogue AP is discovered or when a managed AP is disconnected from the network. You can configure the alert settings by going to the Configure ? Alarm Settings page. Here is the full list: <ul><li> Rogue AP Detected</li><li> Rogue Device Detected</li><li> AP Lost Contact</li><li> SSID-spoofing AP Detected</li><li> MAC-spoofing AP Detected</li><li> Rogue DHCP Server Detected</li><li> "Temporary license expired</li><li> Temporary license will expire</li><li> LAN Rogue AP Detected</li><li> AAA Server Unreachable</li><li> AP has hardware problem</li></ul>

Can ZoneDirector send email alerts?

2014-01-11T14:18:01-0800 2014-09-11T10:04:42-0700 https://support.ruckuswireless.com/articles/000003372 2014-09-09T02:04:44-0700 monthly 0.8 admin,premium knowledge_article_1266 knowledge_article_1266 2014-09-09T02:04:44-0700 000003372 Validated (External) Premium Zonedirector;Zoneflex 7962;Zoneflex 7762;Zoneflex 7762 s;Zoneflex 7982;Zoneflex 7363;Zoneflex 7372;Zoneflex 7782;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Known issues and workarounds Configuration, Firmware, Known Issues and Workarounds, ZoneDirector, ZoneFlex 7962, ZoneFlex 7762, ZoneFlex 7762 S, ZoneFlex 7982, ZoneFlex 7363, ZoneFlex 7372, ZoneFlex 7782 How to connect ZF7372 Access Point to ZoneDirector set with Indonesia country code? ZoneDirector was upgraded to 9.7.2.0.9 and ZF7372 joined to ZoneDirector successfully. ZoneDirector should be on 9.7 or above firmware versions to support Dual-Band access points in Indonesia.

Dual Band APs unable to join ZoneDirector after provisioning

2014-09-09T02:04:44-0700 2014-09-09T02:10:27-0700 https://support.ruckuswireless.com/articles/000001187 2014-01-11T14:14:37-0800 monthly 0.8 admin,premium knowledge_article_25 knowledge_article_25 2012-03-21T12:00:50-0700 000001187 Validated (External) Premium Mediaflex 7000 series System network management System Network Management, MediaFlex 7000 Series How much memory space is allocated to store system log messages? A total of 50 KB memory space is allocated for storing log messages. New messages will override existing messages once this space gets full.

How much memory space is allocated to store system log messages?

2014-01-11T14:14:37-0800 2014-09-07T17:04:30-0700 https://support.ruckuswireless.com/articles/000003342 2014-09-02T13:02:52-0700 monthly 0.8 admin,premium knowledge_article_1251 knowledge_article_1251 2014-09-02T13:00:26-0700 000003342 Validated (External) Premium Zonedirector;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Troubleshooting Configuration, Firmware, Troubleshooting, ZoneDirector, ZoneFlex Outdoor What is the minimum supported firmware version for T300 AP series The T300 AP requires a minimum firmware of 9.8.1 MR to operate. This applies to T300/T300n/T300s AP antenna variations.

Minimum supported firmware version for T300 AP

2014-09-02T13:02:52-0700 2014-09-02T13:10:13-0700 https://support.ruckuswireless.com/articles/000003319 2014-08-26T12:34:39-0700 monthly 0.8 admin,premium knowledge_article_1242 knowledge_article_1242 2014-08-21T07:57:56-0700 000003319 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector The issue is due to a corrupt certificate installed on the server.

The EAP authentication using MS-CHAP v2 is failing leaving a reason code 22 in event viewer.

2014-08-26T12:34:39-0700 2014-08-26T12:40:20-0700 https://support.ruckuswireless.com/articles/000003328 2014-08-25T07:29:46-0700 monthly 0.8 admin,premium knowledge_article_1239 knowledge_article_1239 2014-08-25T07:28:04-0700 000003328 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Can NAS-ID per AP group be configured? It is not possible to configure NAS ID for AP group. Currently the supported NAS-ID types include WLAN-BSSID, MAC-ADDR & User defined NASID types.

This article has information regarding the various NAS-ID types supported by Ruckus.

2014-08-25T07:29:46-0700 2014-08-25T07:30:18-0700 https://support.ruckuswireless.com/articles/000003317 2014-08-21T03:49:43-0700 monthly 0.8 admin,premium knowledge_article_1234 knowledge_article_1234 2014-08-21T03:49:43-0700 000003317 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Why Apple's Facetime application is not working with guest access wlan? Facetime is an Apple application which is for Video calling and chatting. For this, Client Isolation should be set to None on the Guest Access WLAN so that clients can communicate with each other and the issue triggers when Client Isolation is set to Full.

Facetime application is not working on the guest access wlan.

2014-08-21T03:49:43-0700 2014-08-21T03:51:12-0700 https://support.ruckuswireless.com/articles/000003316 2014-08-20T21:47:01-0700 monthly 0.8 admin,premium knowledge_article_1231 knowledge_article_1231 2014-08-20T21:47:01-0700 000003316 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor AP is not connecting to ZD which was connected to vSCG previously Hard reset the Access point. Try to access the access point at default IP address (192.168.0.1). From the GUI of the AP , Try upgrading the AP firmware using some other stand alone AP firmware (ex : 9.6 or 9.7 or 9.8). AP will get upgraded to the specific stand alone AP firmware version. Now connect the specific AP to the ZD and it will join the controller.

2014-08-20T21:47:01-0700 2014-08-20T21:50:23-0700 https://support.ruckuswireless.com/articles/000002359 2014-08-14T05:41:18-0700 monthly 0.8 admin,premium knowledge_article_1219 knowledge_article_1219 2013-11-22T15:00:25-0800 000002359 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor <div> This is a bug and fix for it is available in firmware version 9.6.2.0.13 and above. Upgrading the ZD/AP to this version or above should fix the problem.</div>

Wireless clients are observing ping drops for 10 seconds even though they are connected to the AP

2014-08-14T05:41:18-0700 2014-08-14T05:50:12-0700 https://support.ruckuswireless.com/articles/000003291 2014-08-14T02:07:40-0700 monthly 0.8 admin,premium knowledge_article_1218 knowledge_article_1218 2014-08-14T02:07:40-0700 000003291 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to create 2 SSIDs with same name on the ZD ? Please find the resolution below. While creating a wlan (SSID) on the ZD GUI, you will get two options. Name and ESSID. When you leave ESSID as same name and configure wlan Name as different one, You will get two SSIDs but in the wireless clients you will be able to see only one SSID name which is ESSID. Whenever you try to connect a client to the specific SSID name, client will always connect to the SSID which is on top. It uses top to bottom priority. Client will connect to the first SSID which is under the configure ==> wlan on the ZD. Just to avoid this you can create a wlan group and map one SSID to wlan group 1 and other wlan to wlan group 2. After that map the specific wlan group to the AP as per your requirement. This can be done on editing the AP properties under Configure ==> Access Points ==Edit. So that multiple SSIDs with same name will be broadcast by different APs.

2014-08-14T02:07:40-0700 2014-08-14T02:10:11-0700 https://support.ruckuswireless.com/articles/000001615 2014-08-13T08:42:03-0700 monthly 0.8 admin,premium knowledge_article_934 knowledge_article_934 2013-02-24T19:44:51-0800 000001615 Validated (External) Premium Zoneflex outdoor Performance;Installation;Troubleshooting Performance, Installation, Troubleshooting, ZoneFlex Outdoor How-to-interpret-Channel-optimiser-results <div> This task/activity may have adverse impact on all neighboring units for time duration till chano runs as this involves scanning the RF for best channel. Set/fix the best channel found by Chano on Root Bridge.</div> <div> </div> <div> How to run chano, Visit 7731 GUI --> Status --> Wireless --> Channel Optimizer.</div> <div> </div> <div> Channel Optimization requires the RB to be set to SmartSelect. Otherwise the optimization runs, but the configuration will not be updated because the user already chooses a channel manually.</div> <div> </div> <div> To find out and enable the best channel available in the environment, we recommend doing a Chano scan from the RB. The results will show up in the support info file and will let you know which channel is optimal based on the highest throughput achieved through the throughput tests ran for each available channel. </div> <div> </div> <div> In the support info file, CHANO result per channel indicate first downlink value and then uplink value.</div> <div> for example. see below log from chano results</div> <div> </div> <div> Feb 7 10:50:03 Sector1 daemon.warn syslog: chan104 (6727(down)/3670(up))</div> <div> </div> <div> Channel 104</div> <div> 6727 kbps download speed</div> <div> 3670 kbps uplink speed</div> <div> </div> <div> So, once you run chano and find out the better channel from support info file of the Root-Bridge, set the RB to this clean channel and monitor the performance.</div>

How to interpret Channel optimiser results

2014-08-13T08:42:03-0700 2014-08-13T08:50:15-0700 https://support.ruckuswireless.com/articles/000003274 2014-08-08T06:23:51-0700 monthly 0.8 admin,premium knowledge_article_1203 knowledge_article_1203 2014-08-08T06:23:51-0700 000003274 Validated (External) Premium Spot lbs Configuration;Installation Configuration, Installation, SPoT LBS There is no need to delete an existing Venue map as creating a new map will replace the existing Map. Note : Venue map concept is similar to software versions - you don't delete the old version, just create a new one.

This article has information about Venue Map in SPoT Portal

2014-08-08T06:23:51-0700 2014-08-08T06:30:11-0700 https://support.ruckuswireless.com/articles/000003268 2014-08-06T06:49:57-0700 monthly 0.8 admin,premium knowledge_article_1198 knowledge_article_1198 2014-08-06T06:49:57-0700 000003268 Validated (External) Premium Zoneflex 7731 Configuration;Installation Configuration, Installation, ZoneFlex 7731 How to set distance between the Root and Non Root Bridge Devices Distance: This feature can be used to configure the furthest distance between the Root Bridge and its Non-Root Bridges. According to the distance, the 802.11 ACK Timeout and 802.11 Slot Time can be automatically adjusted to meet the environment properly. This feature can be especially useful if you have one Non-Root Bridge that is relatively close to the Root Bridge while another is relatively far. Select the distance (in km) between the Root Bridge and the farthest Non-Root Bridge from the drop-down menu. Setting the Distance automatically adjusts RTS/CTS Thresholds where needed. Therefore, in general, you should not set a Distance and then change RTS/CTS Thresholds. You can select the distance in the GUI of the Root Bridge under Configuration :: Wireless :: Edit Advanced Settings (as shown below): <img alt="User-added image" height="424" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PLwm&feoid=00N50000002Cf3M&refid=0EM50000000LXMt" width="500"></img> Note: This option will not be available in the GUI of the Non-Root Bridge

This article helps in choosing the distance between the ZF-7731 bridge devices

2014-08-06T06:49:57-0700 2014-08-06T06:50:12-0700 https://support.ruckuswireless.com/articles/000003240 2014-07-25T07:16:46-0700 monthly 0.8 admin,premium knowledge_article_1191 knowledge_article_1191 2014-07-25T07:16:46-0700 000003240 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Does-changing-the-DPSK-key-length-result-in-disconnection-of-existing-clients-that-have-already-executed-prov-exe-file-and-are-connected-to-WLAN The existing clients that are already connected (by downloading and executing prov.exe file) will not be able to connect once the key length is modified. This is working as per design. All the users will have to download fresh prov.exe to get connected back to the WLAN if the key length is changed.

Changing the DPSK key length results in clients to get disconnected from the WLAN after changing the DPSL key-length

2014-07-25T07:16:46-0700 2014-07-25T07:20:13-0700 https://support.ruckuswireless.com/articles/000003235 2014-07-24T08:29:43-0700 monthly 0.8 admin,premium knowledge_article_1189 knowledge_article_1189 2014-07-24T08:29:43-0700 000003235 Validated (External) Premium Flexmaster;FlexMaster Configuration;Installation;System network management;Troubleshooting Configuration, Installation, System Network Management, Troubleshooting, FlexMaster Error message seen when trying to push configuration through template on FM Fault Code:9007 Invalid Parameter value This error message is seen when remote HTTP & HTTPS access is disabled.

When trying to push configuration through templates to a standalone AP using FlexMaster the error message 'Fault Code:9007 Invalid Parameter value' is seen

2014-07-24T08:29:43-0700 2014-07-24T08:30:12-0700 https://support.ruckuswireless.com/articles/000002931 2014-07-15T15:24:53-0700 monthly 0.8 admin,premium knowledge_article_1182 knowledge_article_1182 2014-04-17T14:58:32-0700 000002931 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Do we need to install certificate on IOS devices when we use EAP-PEAP as authentication >Yes we need to accept the certificate sent by the server on IOS devices as part of PEAP authentication process. >There will be POP up comes to accept the certificate please find the below picture as a reference. <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PKXc&feoid=00N50000002Cf3M&refid=0EM50000000LTbz"></img> Note: This is mandatory in IOS devices but windows machine will have an option to uncheck the validate server certificate in wlan profile.

When we try to authenticate client by using 802.1x with PEAP it send's server certificate to client which need to be installed.

2014-07-15T15:24:53-0700 2014-07-15T15:30:27-0700 https://support.ruckuswireless.com/articles/000002092 2014-01-11T14:01:18-0800 monthly 0.8 admin,premium knowledge_article_464 knowledge_article_464 2013-06-10T13:28:58-0700 000002092 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;System network management Firmware, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor With ZoneDirector and APs, what IPv6 RFCs do we support? IPv6 Basic specification [RFC2460] IPv6 Addressing Architecture Basic [RFC4291] Default Address Selection [RFC3484(bis)] ULA - Unique Local IPv6 Unicast Addresses [RFC4193] ICMPv6 [RFC4443] These features are supported by the Linux Kernel used in ZoneFlex. SNMP [RFC3411] SNMP capabilities [RFC3412, RFC3413, RFC3414] We do support SNMP over IPv6.

With ZoneDirector and APs, what IPv6 RFCs do we support?

2014-01-11T14:01:18-0800 2014-07-08T09:27:29-0700 https://support.ruckuswireless.com/articles/000003193 2014-07-06T21:06:37-0700 monthly 0.8 admin,premium knowledge_article_1161 knowledge_article_1161 2014-07-06T21:06:37-0700 000003193 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor Can we configure as 11b only or 11bg for 2.4 ghz radio on 11n APs? <div> The set mode command is not valid for most 11n products. Use get mode to display the Phy Mode of a wireless interface. </div> <div> On 11bg APs, the default mode is auto. Ruckus 11bg APs support the association of 11b clients, 11g clients, or a mixture. Use set mode to configure the interface for 11b only, 11g only or both. Default is auto.</div> <div> The set mode command is not valid for most 11n products. For 11n products, wifi0 is the 11gn (2.4GHz) radio. If the 11n AP is a dual-band AP, the wifi1 interface is the 11an (5GHz) radio. These settings are not configurable. Syntax : <div> set mode <wifi name> [auto|11g|11b]</div> <div> set mode <wifi name> [11na|11ng]</div> <div> get mode <wifi name> <radio mode> Description : <div> set mode <wifi name> [auto|11g | 11b]-- Configures the Phy Mode of a named WLAN. </div> <div> get mode <wifi name> -- Displays the Phy Mode of a named WLAN.</div> </div> </div> Example : <div> rkscli: get mode wlan0</div> <div> wlan0 Mode: auto</div> <div> OK</div> <div> rkscli: set mode wlan0 11g</div> <div> OK</div>

2014-07-06T21:06:37-0700 2014-07-06T21:10:11-0700 https://support.ruckuswireless.com/articles/000002080 2014-07-01T09:04:30-0700 monthly 0.8 admin,premium knowledge_article_1159 knowledge_article_1159 2013-06-06T09:05:03-0700 000002080 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to setup AP Groups Access Point Groups are useful for assigning characteristics to a collection of AP’s. These AP’s can be groups based on location or model type. You can assign characteristics to override default settings regarding channelization, channel, transmit power, 11n only mode, WLAN Groups, port settings and more. These characteristics can be applied independently to the different radios in the AP. You can mix and match with different WLAN groups and their SSID characteristics. Step 1: Go to Configure -> Access Points <img alt="User-added image" height="314" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PKUx&feoid=00N50000002Cf3M&refid=0EM50000000LInz" width="500"></img> Step 2: Click on Create New under Access Point Groups <img alt="User-added image" height="351" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PKUx&feoid=00N50000002Cf3M&refid=0EM50000000LIo4" width="500"></img> Apply the characteristics you want. If you want to apply SSID characteristics previously created with WLAN Groups, you can choose them independently for each individual radio. Admins may wish to only apply overriding Tx_power or Channel Selection method to one radio or the other. Step 3: Add Access Points to the group. Go to the Configure -> Access Points and click on edit for each of the AP's and change the Group Tab to the AP Group you just created. <img alt="User-added image" height="406" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PKUx&feoid=00N50000002Cf3M&refid=0EM50000000LIo9" width="500"></img><img alt="User-added image" height="467" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PKUx&feoid=00N50000002Cf3M&refid=0EM50000000LIoE" width="500"></img> <div> </div> <div> Note: Option to select the Mesh mode would not be in Access Point Groups, this can be configured only by going to Access Point Individually under Configure > Access Points under Advanced Options - to select Access Point to be Auto; Root AP; Mesh AP or to disable mesh on the Access Point </div>

Configuration of AP groups

2014-07-01T09:04:30-0700 2014-07-01T09:10:14-0700 https://support.ruckuswireless.com/articles/000002703 2014-06-25T08:02:44-0700 monthly 0.8 admin,premium knowledge_article_1152 knowledge_article_1152 2014-02-26T07:23:10-0800 000002703 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management;Known issues and workarounds Configuration, System Network Management, Known Issues and Workarounds, ZoneDirector What is the minimum time required for the application pie chart to show the results? Starting from 9.8, ZD provides a feature to show the details of network access. Once the Application Visibility is enabled in the SSID Advanced Settings, AP will collect details of network access details and amount of traffic being transferred. This data gets accumulated over a period of 5 minutes and gets transferred to the ZD using secure FTP protocol. Just as a side note, you need to keep port 22 open between APs and ZD to ensure application visibility. The ZD process this data from all APs and show the results over an hour, a day, and over a month. At this moment it will take minimum one hour data before ZD can show the results on the Dashboard and under the monitor wireless clients. This time limit is expected to improve in the later releases.

Client application visibility is introduced in 9.8. This article details how this data is gathered and how long will it take for the pie chart to show the details of client downloads.

2014-06-25T08:02:44-0700 2014-06-25T08:11:31-0700 https://support.ruckuswireless.com/articles/000002661 2014-06-25T08:08:28-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1148 knowledge_article_1148 2014-02-19T09:36:56-0800 000002661 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector How do I disable syslog server settings push to ZD managed APs? 1. Log into the ZD and then go to the Configure --> System page. 2. Scroll down to the Log Settings page. 3. Disable the "Inherit remote syslog for APs" checkbox. Above procedure will ensure syslog will only receive logs from ZD only - not from ZD managed APs.

Starting from v9.8 ZD can disallow syslog server setting push to APs. Previously if a syslog server is configured on a ZD, it will get pushed to all managed APs. There was no way to control it. This is changing from 9.8.

2014-06-25T08:08:28-0700 2014-06-25T08:10:34-0700 https://support.ruckuswireless.com/articles/000003147 2014-06-18T00:22:18-0700 monthly 0.8 admin,premium,warranty,guest knowledge_article_1122 knowledge_article_1122 2014-06-18T00:12:32-0700 000003147 Validated (External) Public Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor who checks the client traffic every time when L3 ACL is enabled

who checks the client traffic every time when L3 ACL is configured and enabled in the Zone director

2014-06-18T00:22:18-0700 2014-06-18T00:30:12-0700 https://support.ruckuswireless.com/articles/000003137 2014-06-15T22:45:26-0700 monthly 0.8 admin,premium knowledge_article_1117 knowledge_article_1117 2014-06-15T22:45:26-0700 000003137 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Unable to login to the ZD managed AP with the credentials configured on the ZD. We have to use the login credentials which is configured under Administer ==> Preferences ==> Administrator name / password on the ZD GUI. The above mentioned credentials has to be used to login to the managed AP GUI.

2014-06-15T22:45:26-0700 2014-06-15T22:50:12-0700 https://support.ruckuswireless.com/articles/000003019 2014-06-06T01:11:16-0700 monthly 0.8 admin,premium knowledge_article_1104 knowledge_article_1104 2014-06-06T01:11:16-0700 000003019 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Do we need to break the SmartRedundancy before changing Management IP on ZoneDirector? Answer : No, we can directly change the Management IP on ZoneDirector without breaking SmartRedundancy

Change of Management IP address on ZoneDirector running on SmartRedundancy

2014-06-06T01:11:16-0700 2014-06-06T01:20:12-0700 https://support.ruckuswireless.com/articles/000002787 2014-05-06T02:03:52-0700 monthly 0.8 admin,premium knowledge_article_950 knowledge_article_950 2014-03-19T03:52:20-0700 000002787 Validated (External) Premium Zoneflex indoor;Zonedirector 1100;Zonedirector 3000;Zonedirector 5000;ZoneDirector 1100;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneFlex Indoor, ZoneDirector 1100, ZoneDirector 3000, ZoneDirector 5000 Why does my Bose sound system work with my standard broadband router WiFi, but fails when connected to a Ruckus WiFi system? On the Ruckus AP enable the following rkscli: set qos directedDHCP disable Direcet DHCP is Disabled OK rkscli: set qos igmp_query v2 enable IGMP Query Version 2 is Enabled OK rkscli: set qos igmp_query v3 enable IGMP Query Version 3 is Enabled OK rkscli: set qos mld_query v1 enable MLD Query Version 1 is Enabled OK rkscli: set qos mld_query v2 enable MLD Query Version 2 is Enabled OK rkscli: If you have Multiple AP the you can use the Ruckus ZD CLI debug mode and push the settings to all AP rruckus(debug)# remote_ap_cli -A " set qos directed DHCP disable rruckus(debug)# remote_ap_cli -A " set qos igmp_query v2 enable rruckus(debug)# remote_ap_cli -A "set qos igmp_query V3 enable rruckus(debug)# remote_ap_cli -A " set qos mld_query v1 enable" rruckus(debug)# remote_ap_cli -A " set qos mld_query v2 enable"

Bose personal media players sound touch and sound touch portable music streaming issues occur when connected to Ruckus wireless equipment ,are unable to stream or identify music stations

2014-05-06T02:03:52-0700 2014-06-04T18:03:14-0700 https://support.ruckuswireless.com/articles/000002630 2014-05-09T14:44:50-0700 monthly 0.8 admin,premium knowledge_article_990 knowledge_article_990 2014-04-29T23:15:38-0700 000002630 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Is it possible to retrieve the already generated DPSK keys using web GUI or CLI?

Customer provides wireless access to the users by DPSK keys using the Dynamic PSK Batch Generation option in Configure -> Wlan, There has been situations where users loose the DPSK keys and request for keys again, which results in generating new DPSK keys, customer is looking for an option to export all the generated DPSK keys by himself using web gui or cli.

2014-05-09T14:44:50-0700 2014-06-04T10:33:14-0700 https://support.ruckuswireless.com/articles/000002998 2014-06-04T05:17:04-0700 monthly 0.8 admin,premium knowledge_article_1048 knowledge_article_1048 2014-06-04T05:17:04-0700 000002998 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Can we categorize the client devices by giving names?

Classifying client devices which connects to the Access Point by giving names.

2014-06-04T05:17:04-0700 2014-06-04T05:20:12-0700 https://support.ruckuswireless.com/articles/000002211 2014-05-28T14:39:14-0700 monthly 0.8 admin,premium knowledge_article_1034 knowledge_article_1034 2013-09-04T07:40:46-0700 000002211 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Firmware;Troubleshooting Configuration, Firmware, Troubleshooting, ZoneDirector This problem usually occurs when Zonedirector is running on older firmware version while Access points are running on advanced version. As a work-around, We have to upgrade the zone-director to the version on which Access points are running on. For example, For some reason, Zonedirector has been initially upgraded directly to 9.6.1.0.15 version series without following the proper upgrade path and noticed all Access points are disconnected. Now, if this Zonedirector is further downgraded to any other stable version like 9.5.2.0.15 and noticed that all Access points are continuously loosing heartbeat while they are still provisioning. We can see the "Get configuration fault" as the reason across the events/activities of Monitor-->Access points page(On zone-director web-UI). If we click on any of the Access points mac address on the same page under currently managed APs. Then we can notice that these Access points are still running on 9.6.1.0.15 firmware version. To troubleshoot this problem, we have upgrade the Zonedirector to 9.6.1.0.15 firmware version. This should bring back all the Access points to their normal operating mode. NOTE:- * Till now, this problem is mostly seen on 9.5 and 9.6 firmware version series. * The above problem can also be noticed, if proper upgrade path is not followed while Zonedirector are operating in smart-redundancy mode.

Upgrading a ZoneDirector without following the proper upgrade path can result in problems of inconsistent software versions in the network.

2014-05-28T14:39:14-0700 2014-05-28T14:40:19-0700 https://support.ruckuswireless.com/articles/000002302 2014-01-11T13:49:50-0800 monthly 0.8 admin,premium knowledge_article_626 knowledge_article_626 2013-11-22T13:58:54-0800 000002302 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor How to check the AP port status Steps to get the AP port status by running Command on CLI. Here is the command: rkscli:get eth >>Helps to know the interface status,802.1x status,Logical link,Physical link Please find the screenshot attached to the article to see the output. <img alt="User-added image" height="281" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIAm&feoid=00N50000002Cf3M&refid=0EM50000000LOEv" width="500"></img>

Standalone Eth command to know (Interface,802.1x,logical link.physical link.Label)

2014-01-11T13:49:50-0800 2014-05-23T13:35:19-0700 https://support.ruckuswireless.com/articles/000003021 2014-05-13T09:13:50-0700 monthly 0.8 admin,premium knowledge_article_1000 knowledge_article_1000 2014-05-13T09:13:50-0700 000003021 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor SSH into the Access point through Putty or any SSH application. rkscli: set ipaddr wan <ipaddr> <netmask> <gateway>

2014-05-13T09:13:50-0700 2014-05-13T09:20:11-0700 https://support.ruckuswireless.com/articles/000003018 2014-05-08T17:13:49-0700 monthly 0.8 admin,premium knowledge_article_989 knowledge_article_989 2014-05-08T17:13:49-0700 000003018 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector What is the command for enabling (or) disabling the console log messages across the Zonedirector? After gaining console (or) SSH access to the Zonedirector's command line interface, execute the following set of commands for turning off (or) turning on the console log messages in debug mode:- ruckus>en ruckus#debug ruckus(debug)#no logs play ----> This command will disable displaying log messages on the Zonedirector's console access. ruckus(debug)#quit ruckus# Similarly, executing the following command will re-enable displaying the console log messages on the Zonedirector:- ruckus(debug)#logs play

This article provides the command to either turn off/on displaying the log message over the zone-director's console access.

2014-05-08T17:13:49-0700 2014-05-08T17:20:16-0700 https://support.ruckuswireless.com/articles/000001781 2014-05-05T02:49:56-0700 monthly 0.8 admin,premium knowledge_article_968 knowledge_article_968 2013-03-12T07:55:58-0700 000001781 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How long can an access point be up and running with out ZD How long can Access point be up and running when the Zone director goes down? An access point Can be up and running with out connection to the Zone-Director from 10 min to 1440 minutes.By default it is 30 min if the auto recovery field on the WB GUI is left to disabled set to 0 the AP will continue to service existing associated clients once authenticated but will not accept any new client associations This feature is avaliable as manual input in minutes in the provided field on 9.5 WEB UI and on version 9.6 their is also is a checkbox option to enable or disable the auto recovery function. the same function can also be enabled from the ZD CLi ruckus(config-ap-policy) auto-recovery (NUMBER) ruckus(config-ap-policy) no auto-recovery From the WEB GUI 9.5 shown <img alt="auto recovery page" height="302" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PJg7&feoid=00N50000002Cf3M&refid=0EM50000000LKtQ" style="width: 500px; height: 362px; " width="500"></img>

AP can still service existing clients even when the ZD is not available

2014-05-05T02:49:56-0700 2014-05-05T02:50:12-0700 https://support.ruckuswireless.com/articles/000002994 2014-05-02T16:34:09-0700 monthly 0.8 admin,premium knowledge_article_966 knowledge_article_966 2014-05-02T16:34:09-0700 000002994 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector What is the retention period of storing the log information on the Zonedirector? As long as client is active over the wireless network, Zonedirector will be able to store all of its related stats. However, the information will be erased once after client is disassociated and removed from the association table of the Zonedirector and Access point. Again, this is entirely dependent on the amount of the client and Access point's traffic. There is a fixed amount of memory chunk that was dedicated to store the syslog event messages on the Zonedirector. During times of high client load and more number of Access points, which paves chance for high inflow of log messages, which in turn erases the old logs for freeing the memory on the Zonedirector. It is usually recommend to make use of a remote syslog server for collecting the syslog information for retaining historical event log messages from the Zonedirector.

This article explains the amount of period and the factors involved in storing the log information on the Zonedirector.

2014-05-02T16:34:09-0700 2014-05-02T16:40:11-0700 https://support.ruckuswireless.com/articles/000001899 2014-01-11T13:46:43-0800 monthly 0.8 admin,premium knowledge_article_669 knowledge_article_669 2013-12-17T13:32:10-0800 000001899 Validated (External) Premium Zoneplanner;ZonePlanner Knowledge base Knowledge Base, ZonePlanner Can a multi-level floor plan be imported onto Zone planner to check the coverage/heatmap of AP's? ZonePlanner does not support multiple layouts or multiple floor plans. You can have just one plan at one instance on the ZD. Multi-level building plans cannot be imported on the ZD map function.

How to import multiple floor plans into ZonePlanner Software for coverage mapping

2014-01-11T13:46:43-0800 2014-05-02T02:02:18-0700 https://support.ruckuswireless.com/articles/000002132 2014-05-02T00:36:06-0700 monthly 0.8 admin,premium knowledge_article_957 knowledge_article_957 2014-02-18T13:53:23-0800 000002132 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How do I manage IP subnets when I have remote APs when doing UAM hotspot wlan ? For managed APs, the ZD will build a routing table of all UAM clients, so in this case, it's important to avoid having duplicate route entries of the same IP addresses in the ZD routing table, or some client may experience login failure. You can solve this by making sure that each remote APs with local DHCP server uses a UNIQUE IP subnet. (10.10.1.x/24, 10.10.2.x/24, etc.) Where standalone APs are used in remote locations, the subnets may be the same or unique, since there is no communication between APs, and there is no ZD with a central routing table.

This article describes how to correctly assign IP subnets for remote APs with a hotspot wlan.

2014-05-02T00:36:06-0700 2014-05-02T00:40:12-0700 https://support.ruckuswireless.com/articles/000001542 2014-05-01T05:52:00-0700 monthly 0.8 admin,premium knowledge_article_822 knowledge_article_822 2013-01-24T16:44:49-0800 000001542 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why are Voice packets getting dropped giving bad call quality? 1. Make sure that the ZD SW version is latest Maintenance release. ( MR) 2. Enable the Tunnel mode option for the specific wlan which is available under the wlan advanced options. Configure ==> wlans ==> edit ==> Advanced Options. 3. If the channel fly is enabled then please disable the channel fly option on the ZD. Which is available under Configure ==> Services ==> self Healing 4. Also please disable the background scanning on the ZD. Which is available under Configure ==> Services ==> Background Scanning If all the above mentioned things did not make any difference then we have to check whether interference is there in the environment or not. Interference will also cause the voice breaking issue.

Voice packets are frequently dropped for the configured wlan which was observed across all the Access points managed by the Zonedirector.

2014-05-01T05:52:00-0700 2014-05-01T06:00:11-0700 https://support.ruckuswireless.com/articles/000002763 2014-04-30T21:43:09-0700 monthly 0.8 admin,premium knowledge_article_953 knowledge_article_953 2014-03-07T03:20:28-0800 000002763 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor All connected APs shows as vlan 1 on the ZD in the network where multiple vlans are configured If the switch ports were the APs are connected to is configured as Access ports and each and every port was configured with different vlans, Still the APs will be showing on the ZD as connected with vlan 1. This behavior is working as per design. As long as the APs are not aware about the vlan configuration of the switch port, the ZD will display as vlan 1 under Monitor ==> Access Points page. If we change the vlan based configuration on the port of the specific AP then the changes will get reflected on the ZD GUI under Monitor ==> Access Points page. Note: Under the Configure ==> Access Points menu on the ZD there is an option called Management vlan. When we use "Keep AP settings" option we will be able to see only the vlan as 1 under Monitor ==> Access points page. When we select the option management vlan as "x" vlan. the specific vlan will be pushed to the connected APs and also the vlan option which comes under Monitor ==> Access Points will show as specific "x" vlan. At the time of using the Management vlan option , please make sure that the specific management vlan is untagged on the switch port where the AP is connected to.

2014-04-30T21:43:09-0700 2014-04-30T21:50:14-0700 https://support.ruckuswireless.com/articles/000001739 2014-04-29T09:50:31-0700 monthly 0.8 admin,premium knowledge_article_944 knowledge_article_944 2013-03-05T22:05:16-0800 000001739 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation Installation, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor E-Mesh (eMAP) is a Ruckus feature that permits hanging additional AP’s connected via a wire to a MESH AP (MAP). The main intention of an eMAP (or Link AP, or LAP) is to have better bandwidth and improve reliability. For example, adding an eMAP is preferred over adding a MAP as throughput is not halfed, the wire connection is more secure than a wireless, and one can use a different channel for the downlink of the eMAP. In 9.0 Ruckus introduced the concept of E-Mesh (Ethernet Mesh, or Link AP, LAP). This configuration was previously not supported as the AP connected via cable would become a Root AP, and the MESH AP that it connects through could (and probably would) connect back to this Root AP’s Mesh downlink, creating a loop and dropping the Real Mesh connection back to the Root AP. eMAP nodes are used to bridge wireless LAN segments together. <img alt="User-added image" height="132" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PJkn&feoid=00N50000002Cf3M&refid=0EM50000000LPrt" width="500"></img> <img alt="eMAP - Hybrid Mesh Topology" height="251" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PJkn&feoid=00N50000002Cf3M&refid=0EM50000000LPry" width="500"></img> A series of beacons are sent over the air and cable so that this AP connected via Ethernet to the Mesh AP can determine that there are two potential uplinks, and only one remains active (Mesh uplink). The E-Mesh connected AP then turns on its Mesh downlink only (to allow other Mesh devices to connect). The connection from the E-Mesh AP to the Mesh AP is considered a network hop, so this eMAP connects back to the network using 2 hops, its own e-mesh hop and then the Mesh AP’s hop. With two (or more) remote AP’s connected via Ethernet ( 2 or more eMAPs), a new AP trying to connect via mesh to either eMAP, will measure the potential uplink speed to each eMAP connection and will choose which of the AP’s will have the best potential throughput to the Root AP and this one will become it’s Mesh AP. This is a self-healing protocol so if the first hop Mesh AP loses contact, then one of the eMAPs should become Mesh and re-connect the remote cluster of AP’s. This process could take several minutes to recover as the beaconing and calculation is performed to determine the actual configuration. This system also sends ARP pings to the Default Gateway at regular intervals to verify Mesh connectivity, verify interface the AP is using to contact the Zone Director (this determines Mesh, Root, or E-Mesh status) and to verify if a loop is created. If a loop is created then this mechanism will turn off the Mesh uplink on the AP to take done the loop, and may eventually reboot the AP to re-establish uplinks. In the case of a network topology changing, it may take a few minutes for the links status to settle down and re-establish themselves.

What conditions lead to an AP being seen as Link AP or eMAP?

2014-04-29T09:50:31-0700 2014-04-29T10:00:11-0700 https://support.ruckuswireless.com/articles/000002872 2014-04-29T09:31:45-0700 monthly 0.8 admin,premium knowledge_article_942 knowledge_article_942 2014-04-29T09:31:45-0700 000002872 Validated (External) Premium Zonedirector;Zoneflex 7025;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration Performance, Configuration, ZoneDirector, ZoneFlex 7025 <ul><li> Disable directed multicast and IGMP snooping on all the ports which are connected to clients and the port which is connected to LAN network</li><li> The commands to disable multicast and IGMP snooping from AP's :</li></ul> <div> set qos <ifname> directed multicast {enable|disable} Ex: rkscli: set qos eth0 directed multicast disable Directed Multicast ingress packet processing is Disabled on interface eth0 OK set qos <ifname> igmp {enable|disable} Ex: rkscli: set qos eth0 igmp disable IGMP Snooping is Disabled on interface eth0 OK </div>

Wired clients which is connected to Ethernet port of AP's are not able to send multicast traffic

2014-04-29T09:31:45-0700 2014-04-29T09:40:14-0700 https://support.ruckuswireless.com/articles/000002361 2014-04-29T09:30:02-0700 monthly 0.8 admin,premium knowledge_article_940 knowledge_article_940 2013-11-12T15:26:48-0800 000002361 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector I see some clients are unable to connect to ssid

Some clients are connecting fine and some clients are not,they can see sisd but they are not getting an IP address

2014-04-29T09:30:02-0700 2014-04-29T09:30:11-0700 https://support.ruckuswireless.com/articles/000002940 2014-04-21T16:25:55-0700 monthly 0.8 admin,premium knowledge_article_922 knowledge_article_922 2014-04-21T16:25:55-0700 000002940 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to disable WMM in all the AP's using CLI ? Commands to disable WMM in all the AP's via CLI is given below : <div> ruckus(debug)# remote_ap_cli -A "set wmm wlan0 disable" à To disable WMM in all the AP’s </div> <div> ---- Command 'rkscli -c "set wmm wlan0 disable "' executed at 8c:0c:90:3b:66:30 </div> <div> OK </div> <div> ---- Command Execution Summary: </div> <div> success: 1 </div> <div> failure: 0 </div> <div> total: 1 </div> <div> </div> <div> ruckus(debug)# remote_ap_cli -A "get wmm wlan0" à Verify using this command </div> <div> ---- Command 'rkscli -c "get wmm wlan0 "' executed at 8c:0c:90:3b:66:30 </div> <div> wlan0 WMM: Disabled </div> <div> WMM Lock: Disabled </div> <div> </div> <div> AP Parameters: </div> <div> ============== </div> <div> Class CWMIN CWMAX AIFSN TXOP </div> <div> 00 04 10 07 0000 </div> <div> 01 04 10 02 0000 </div> <div> 02 03 04 01 3008 </div> <div> 03 02 03 01 1504 </div> <div> </div> <div> Station Parameters: </div> <div> =================== </div> <div> Class CWMIN CWMAX AIFSN TXOP </div> <div> 00 04 10 07 0000 </div> <div> 01 04 10 02 0000 </div> <div> 02 03 04 02 3008 </div> <div> 03 02 03 02 1504 </div> <div> OK </div> <div> ---- Command Execution Summary: </div> <div> success: 1 </div> <div> failure: 0 </div> <div> total: 1 </div> <div> </div> <div> </div> <div> ruckus(debug)# remote_ap_cli -A "set wmm wlan0 enable" à To Enable WMM again </div> <div> ---- Command 'rkscli -c "set wmm wlan0 enable "' executed at 8c:0c:90:3b:66:30 </div> <div> OK </div> <div> ---- Command Execution Summary: </div> <div> success: 1 </div> <div> failure: 0 </div> <div> total: 1 </div> <div> ruckus(debug)# remote_ap_cli -A "get wmm wlan0" àTo Verify </div> <div> ---- Command 'rkscli -c "get wmm wlan0 "' executed at 8c:0c:90:3b:66:30 </div> <div> wlan0 WMM: Enabled </div> <div> Ruckus WMM Parameters :- </div> <div> WMM Lock: Disabled </div> <div> </div> <div> AP Parameters: </div> <div> ============== </div> <div> Class CWMIN CWMAX AIFSN TXOP </div> <div> 00 04 10 07 0000 </div> <div> 01 04 06 03 0000 </div> <div> 02 03 04 01 3008 </div> <div> 03 02 03 01 1504 </div> <div> </div> <div> Station Parameters: </div> <div> =================== </div> <div> Class CWMIN CWMAX AIFSN TXOP </div> <div> 00 04 10 07 0000 </div> <div> 01 04 10 03 0000 </div> <div> 02 03 04 02 3008 </div> <div> 03 02 03 02 1504 </div> <div> OK </div> <div> ---- Command Execution Summary: </div> <div> success: 1 </div> <div> failure: 0 </div> <div> total: 1</div>

2014-04-21T16:25:55-0700 2014-04-21T16:30:12-0700 https://support.ruckuswireless.com/articles/000002924 2014-04-15T22:04:54-0700 monthly 0.8 admin,premium knowledge_article_910 knowledge_article_910 2014-04-15T22:04:54-0700 000002924 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector Is it possible to send ZD email alarms to multiple recipients ? In ZD we can configure only single Email address as a recipient. Which means alarm emails will be triggered to single email address only. To send email alarms to multiple recipients, find the details below. <div> Create one Email alias (group) in your Email server. </div> <div> </div> <div> When you add the email alias to the recipient email address on the ZD, the alarm emails will be send to multiple recipients who are part of the specific alias (group). </div> <div> </div> <div> Example: admin-group@xyz.com is the alias name. </div> <div> </div> <div> Assume that whole admin team members email addresses are part of the above mentioned alias. </div> <div> </div> <div> When you add admin-group@xyz.com on the ZD side, alarm emails will be send to all group members. Hence multiple recipients can receive the alarm emails from the ZD.</div>

2014-04-15T22:04:54-0700 2014-04-15T22:10:11-0700 https://support.ruckuswireless.com/articles/000002918 2014-04-14T01:17:16-0700 monthly 0.8 admin,premium knowledge_article_908 knowledge_article_908 2014-04-14T01:17:16-0700 000002918 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Can we delete the default guest pass printout template from the ZD ? <h3> Default guest pass printout template will be located under the following on the ZD GUI.</h3> <h3> Configure ==> Guest pass ==> Guest Pass Printout Customization As long as the default one is predefined on the ZD, It cann't be deleted. We can delete the guest pass printout templates which are created or customized by the Admin.</h3>

2014-04-14T01:17:16-0700 2014-04-14T01:20:12-0700 https://support.ruckuswireless.com/articles/000001653 2014-04-11T05:49:18-0700 monthly 0.8 admin,premium knowledge_article_907 knowledge_article_907 2013-02-14T17:55:30-0800 000001653 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Troubleshooting Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor The one listed under IP address column is the IP of the AP’s. External IP: Port column displays the public IP and port number for APs connected via Layer 3 behind a NAT device. So when ever AP finds ZoneDirector Via Layer 2 you will not have External IP in the monitor->Access points tab When AP find ZD via Layer 3 then you will have External Ip in the monitor->Access point tab.

In the Monitor tab at access point option I see two IP’s one listed under IP address column and the other listed under External IP: Port column

2014-04-11T05:49:18-0700 2014-04-11T05:50:11-0700 https://support.ruckuswireless.com/articles/000002916 2014-04-11T04:07:50-0700 monthly 0.8 admin,premium knowledge_article_906 knowledge_article_906 2014-04-11T04:07:50-0700 000002916 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Where does the prov.exe file get downloaded on Android/Windows phone? <div> For the android, the packages are installed in one of a few locations:</div> <div> 1. /system/app - for system installed apps - you can't modify this folder.</div> <div> 2. /data/app - any apps installed from the market are installed into here, and you as a user can modify the folder.</div> <div> 3. /sdcard/.android_secure - apps that are moved to the SD card are stored here</div> <div> And for Windows 7 - that file would be stored in the "other"storage, but it is unfortunately not supported on a Windows Phone8. You can only install apps that go through the Store on your Windows Phone</div>

prov.exe download path on Android/Windows phones

2014-04-11T04:07:50-0700 2014-04-11T04:10:12-0700 https://support.ruckuswireless.com/articles/000002694 2014-04-09T02:27:41-0700 monthly 0.8 admin,premium knowledge_article_902 knowledge_article_902 2014-04-09T02:26:37-0700 000002694 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector <ul><li> A user who has " Super Admin " privileges under Administration option of Roles can only create another user account.</li></ul> <ul><li> A user who has " Monitoring Admin " or " Operator admin " privileges under Administration option of Roles cannot create any other user account as they have limited access in the Zone Director configuration.</li></ul> <ul><li style="margin-left: 40px; "> A user with " Operator Admin " Privileges can only change configuration on one AP. They cannot create Users, Roles on ZD as shown below.</li></ul> <img alt="User-added image" height="322" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PJYr&feoid=00N50000002Cf3M&refid=0EM50000000LR58" width="500"></img> <ul><li style="margin-left: 40px; "> A user with " Monitoring Admin " Privileges can only monitor the events on the ZD but cannot configure anything on the ZD as the configure tab will be grayed out for them as shown below.</li></ul> <img alt="User-added image" height="30" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PJYr&feoid=00N50000002Cf3M&refid=0EM50000000LR5D" width="500"></img>

Can a user create another user account in the Zone Director.

2014-04-09T02:27:41-0700 2014-04-09T02:30:17-0700 https://support.ruckuswireless.com/articles/000002902 2014-04-08T10:14:57-0700 monthly 0.8 admin,premium knowledge_article_899 knowledge_article_899 2014-04-08T10:14:57-0700 000002902 Validated (External) Premium Zonedirector;Flexmaster;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;FlexMaster Installation;System network management Installation, System Network Management, ZoneDirector, FlexMaster Why can't the ZoneDirector register with the FlexMaster? One possible resolution is to change the MSS (Maximum Segment Size) on both end of the link. A known working MSS value is 1360. Other value might work as well, but this was tested at one site successfully.

*FM is properly installed *ZDs are working as expected *ZD at some sites are able to register with FM just fine *non-registered ZD and FM can ping each other but ZD can not register properly *Both sites are across VPN link from FM

2014-04-08T10:14:57-0700 2014-04-08T10:20:12-0700 https://support.ruckuswireless.com/articles/000002875 2014-04-08T01:12:41-0700 monthly 0.8 admin knowledge_article_897 knowledge_article_897 2014-04-08T01:12:41-0700 000002875 Validated (External) Partner Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Why does walled garden work abnormally. reboot ZD can resolve this issue, and version 9.7 fixed this issue.

ZD use wrong DNS sever parsing the domain name in walled garden.

2014-04-08T01:12:41-0700 2014-04-08T01:20:16-0700 https://support.ruckuswireless.com/articles/000002815 2014-04-08T01:19:08-0700 monthly 0.8 admin,premium knowledge_article_895 knowledge_article_895 2014-04-08T01:19:08-0700 000002815 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Why can't I use Chinese APP to do portal authentication

Chinese APP always sent HTTP header with parameter "charset=utf-8", but ZD can not recognize it.

2014-04-08T01:19:08-0700 2014-04-08T01:20:12-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PEzHCAW?attachment_index=0 2014-04-08T01:20:12-0700 monthly admin,premium knowledge_article_895 knowledge_article_895_attachment_1 IOS auth failure.pcap 22944.0 application/octet-stream;type=unknown https://support.ruckuswireless.com/articles/000002903 2014-04-07T13:56:29-0700 monthly 0.8 admin,premium knowledge_article_894 knowledge_article_894 2014-04-07T13:56:29-0700 000002903 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Do we have any best practive configuration for Motorolla EWB100 badge-to-badges PTT?

Motorolla EWB100 badges using independent multicast, sometimes miss beginning of conversations or hear choppy audio

2014-04-07T13:56:29-0700 2014-04-07T14:00:12-0700 https://support.ruckuswireless.com/articles/000002892 2014-04-04T07:14:21-0700 monthly 0.8 admin,premium knowledge_article_891 knowledge_article_891 2014-04-04T07:14:21-0700 000002892 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Is-it-possible-to-view-all-generated-guest-passes? At this point of time, we do not have the option to view all historical generated guest passes. Generated Guest pass under Monitor > Generated Guest passes are taken off the moment they expire.

Historical view of Guest passes generated

2014-04-04T07:14:21-0700 2014-04-04T07:20:13-0700 https://support.ruckuswireless.com/articles/000002369 2014-01-11T13:49:41-0800 monthly 0.8 admin,premium knowledge_article_623 knowledge_article_623 2013-11-22T14:01:42-0800 000002369 Validated (External) Premium Zoneflex 7762 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneFlex 7762 How to Hard Reset ZF7762-AC ? <h1 style="text-align: center; "> Hard Reset procedure for ZF7762-AC access point</h1> <div> </div> <div> You can reset the AP to its factory default settings by pressing the reset button that is located next to the RJ-45 PoE Out port.</div> <div> 1. Remove the middle (RJ-45) cable gland.</div> <div> 2. Locate the reset button next to the RJ-45 port.</div> <div> 3. Using a pen or a similar pointed object, press the button for 10 seconds.</div> <div> 4. Verify that the STATUS LED on the AP is off. If the STATUS LED is off, it indicates that the reset process is complete.</div> <div> <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PI7Q&feoid=00N50000002Cf3M&refid=0EM50000000LO6N"></img> Please refer to below link for ZF7762-AC Installation Guide. <a href="https://support.ruckuswireless.com/documents/192-zoneflex-7762-ac-installation-guide/download" target="_blank">https://support.ruckuswireless.com/documents/192-zoneflex-7762-ac-installation-guide/download</a> </div>

ZF7762-AC Hard Reset procedure

2014-01-11T13:49:41-0800 2014-03-31T12:59:14-0700 https://support.ruckuswireless.com/articles/000001527 2014-03-28T16:02:37-0700 monthly 0.8 admin,premium knowledge_article_872 knowledge_article_872 2013-02-24T19:45:11-0800 000001527 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Installation;Known issues and workarounds Installation, Known Issues and Workarounds, ZoneDirector After an upgrade to 9.6 2 of my AP's are stuck in "provisioning" mode Generally this problem occurs due to two reasons: a. If packet in unable to reach the destination less than 100ms. (latency) b. Otherwise, IP packet loss due to packets larger than the available MTU (for example if traversing an IPsec tunnel) There are two ways to troubleshoot this issue: 1.Login to ZD WebGUI, Goto Configure->Access Points, under Access Points Policies section, you will find "LWAPP message MTU". Default value is 1450. Try to reduce the size to less than the default value between 1200-1400 and check whether this resolves the problem. Also try to ping the Access Point from the ZoneDirector. After logging to the ZD WebGUI, on the right upper corner you'll find "Toolbox". place your cursor and the drop down list will be appeared. Now click "Network connectivity" and try to ping the IP address of the Access Point. Now check the "time" value. If it is more than 100ms or packet loss, kindly check the VPN wired link connectivity between ZD and access point. This problem is due to exceeding IP Packet size because of the LWAPP MTU Header size. There will not be any performance issues until the MTU size between 1200-1450. But few configuration update issues will arise, if it is set less than this limit.

AP stuck in provisoning mode

2014-03-28T16:02:37-0700 2014-03-28T16:10:13-0700 https://support.ruckuswireless.com/articles/000002210 2014-03-05T09:05:24-0800 monthly 0.8 admin,premium knowledge_article_865 knowledge_article_865 2013-10-07T16:54:25-0700 000002210 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector After installing third party SSL certificate on the ZD, smart phones still see certificate warning message while laptops work fine Make sure whether an intermediate certificate is installed properly or not. Intermediate certificates provide maximum browser and server coverage to ensure visitors won't receive "invalid SSL" warnings when they visit your site. Most browsers and servers include one or more trusted root certificates, either Go Daddy, Starfield Technologies, or Valicert. The intermediate certificate bundle "chains" your SSL certificate to trusted root certificates, letting your certificate secure connections with older browsers that might have only original Valicert root certificate installed. Using intermediate certificates do not cause installation, performance, or compatibility issues. Also please find the below URL which provides more details regarding Intermediate certificates. <a href="http://www.digicert.com/ssl-support/certificate-not-trusted-error.htm" target="_blank">http://www.digicert.com/ssl-support/certificate-not-trusted-error.htm Z</a>D user guide has additional details regarding installing Intermediate certificate on the ZD.

2014-03-05T09:05:24-0800 2014-03-28T14:24:09-0700 https://support.ruckuswireless.com/articles/000002762 2014-03-07T01:33:18-0800 monthly 0.8 admin,premium knowledge_article_860 knowledge_article_860 2014-03-07T01:33:18-0800 000002762 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Rogue APs & Neighbor APs are not shown on the ZD GUI even after enabling Rogue AP option & Background scanning option on the ZD. If we are not able to see the Rogue APs and Neighbor APs on the ZD GUI even after enabling the following options, 1. Enable Rogue AP detection. 2. Enable Background scanning. Please check the following option on the ZD GUI. Configure ==> Wlans ==> Advanced Options ==> Service Schedule. If the Service Schedule option is enabled for the specific timings then apart from that specific timing, the AP will not be able to detect Rogue APs or Neighbor APs. Service Schedule configuration will be given first priority.

2014-03-07T01:33:18-0800 2014-03-28T14:23:58-0700 https://support.ruckuswireless.com/articles/000002779 2014-03-12T00:02:01-0700 monthly 0.8 admin,premium knowledge_article_845 knowledge_article_845 2014-03-12T00:02:01-0700 000002779 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Known issues and workarounds Performance, Configuration, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor

Customer has selected country code as "south Korea" in the Zone Director. When he enabled channel fly in the Zone Director,clients are being disconnected when the Access points are running in the channel132 ,channel 136.

2014-03-12T00:02:01-0700 2014-03-28T14:23:27-0700 https://support.ruckuswireless.com/articles/000002780 2014-03-12T10:04:10-0700 monthly 0.8 admin,premium knowledge_article_844 knowledge_article_844 2014-03-12T10:04:10-0700 000002780 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneDirector How to add Tunnel-Medium-Type to User Groups for DVLAN with ZD 9.7+ Add/include Tunnel-Medium-Type in user group definition (FreeRADIUS) or user group policy (Win2003/Win2008/Win2012)

Starting in ZoneFlex 9.7, Ruckus has begun to enforce inclusion of Tunnel-Medium-Type option in access-accept and disconnect messages related to DVLAN override. Some customers may need to add the Tunnel-Medium-Type to their DVLAN user groups for compatibility.

2014-03-12T10:04:10-0700 2014-03-28T14:23:26-0700 http://support.ruckuswireless.com/article_attachments/kA250000000PEwNCAW?attachment_index=0 2014-03-28T14:23:26-0700 monthly admin,premium knowledge_article_844 knowledge_article_844_attachment_1 How to add Tunnel-Medium-Type.pdf 647953.0 application/pdf https://support.ruckuswireless.com/articles/000002788 2014-03-13T14:48:47-0700 monthly 0.8 admin,premium knowledge_article_841 knowledge_article_841 2014-03-13T14:48:47-0700 000002788 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Why can't my Win7 client download the PROV.EXE ZeroIT script?

*Script will download on Droid and Mac client *WinXP client get authorized to download the script, but the page to download the script just times out

2014-03-13T14:48:47-0700 2014-03-28T14:23:21-0700 https://support.ruckuswireless.com/articles/000002798 2014-03-18T17:05:23-0700 monthly 0.8 admin,premium knowledge_article_832 knowledge_article_832 2014-03-18T17:05:23-0700 000002798 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Known issues and workarounds Performance, Configuration, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor

Enabling channel fly on the Access point belonging to particular Access point Group

2014-03-18T17:05:23-0700 2014-03-28T14:23:04-0700 https://support.ruckuswireless.com/articles/000002813 2014-03-20T02:07:33-0700 monthly 0.8 admin,premium knowledge_article_831 knowledge_article_831 2014-03-20T02:07:33-0700 000002813 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector “Class” attribute will be copied for roaming station if “roaming-acct-interim-update” is enabled. In ZD 9.4 and later release , there is a new command “roaming-acct-interim-update” in CLI, which allows ZD send Acct-Interim-Update instead of acct-stop/start. SSH to ZD, ruckus>enable ruckus# config ruckus(config)# wlan <wlan-name> ruckus(config-wlan)# show PMK Cache Timeout= 720 minutes PMK Cache for Reconnect= Enabled NAS-ID Type= user-define NAS-ID String= ABC Roaming Acct-Interim-Update= Enabled if it’s disabled, execute “roaming-acct-interim-update” to enable this option

A customer noticed "class" attribute missed in radius accounting start message when a client roaming from AP to AP

2014-03-20T02:07:33-0700 2014-03-28T14:22:59-0700 https://support.ruckuswireless.com/articles/000002833 2014-03-24T15:44:23-0700 monthly 0.8 admin,premium knowledge_article_826 knowledge_article_826 2014-03-24T15:44:23-0700 000002833 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Security Configuration, Security, ZoneDirector Would it be possible to configure a Mac authentication for an SSID without using any valid AAA server? Configuring an SSID as a Mac based authentication requires a valid AAA server. The configured AAA server should make use of Radius service as the authentication mechanism to work with this option. For example, a Windows server configured as Radius server with supported Active directory users as Mac address details should work for this.

Would it be possible to configure a Mac authentication for an SSID without using any valid AAA server?

2014-03-24T15:44:23-0700 2014-03-28T14:22:40-0700 https://support.ruckuswireless.com/articles/000002767 2014-03-24T18:29:13-0700 monthly 0.8 admin,premium knowledge_article_823 knowledge_article_823 2014-03-07T17:39:39-0800 000002767 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;System network management Configuration, System Network Management, ZoneFlex Indoor, ZoneFlex Outdoor Would it be possible to configure ethernet ports on Access points in switch mode? Ethernet ports on all the Access points are bridged by default. Thus, all together work as a plain Layer 2 switch. A network host can either gain access to the Access point (or) to the wired network, by connecting to any of the ethernet port of the Access point.

2014-03-24T18:29:13-0700 2014-03-28T14:22:35-0700 https://support.ruckuswireless.com/articles/000002832 2014-03-24T18:49:21-0700 monthly 0.8 admin,premium knowledge_article_821 knowledge_article_821 2014-03-24T18:49:21-0700 000002832 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to use different DNS servers for wlans ? <div> -->In order to allot different DNS servers information based on wlan, then DNS server information across multiple DHCP scopes which were created for multiple VLANs has to be modified accordingly. </div> <div> </div> <div> -->Please refer to the following image as reference from Microsoft DHCP server.</div> <div> </div> <div> -->From the Zone director, We have to further map the Vlan information in wlan at Configure-->wlans -->Edit-->Advanced options -Access vlan.</div> NOTE:We need to tag the respective Vlan's on switch ports where these access points are connected, by default Ruckus will bridge the traffic locally from access points, If needed we can tunnel the traffic to the controller but this is not a recommend practise for data traffic. <img alt="User-added image" height="369" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PJEL&feoid=00N50000002Cf3M&refid=0EM50000000LS6W" width="500"></img>

2014-03-24T18:49:21-0700 2014-03-28T14:22:31-0700 https://support.ruckuswireless.com/articles/000002516 2014-03-24T19:04:44-0700 monthly 0.8 admin,premium knowledge_article_720 knowledge_article_720 2014-01-21T11:20:21-0800 000002516 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Once you add a new Zone director to establish Smart Redundancy it might get stuck with a error message " Waiting for Config Decision" this means the newly added Zonedirector is yet synchronize with the existing primary Zonedirectror and the configuration is yet to be synchronized, To overcome this and complete the smart redundancy process go to ZD GUI Configure -> System - Under smart redundancy you will see two options "Sync from peer" and Sync to peer", this will be seen in both active and standby Zonedirector as shown below, <img alt="User-added image" height="210" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PJEB&feoid=00N50000002Cf3M&refid=0EM50000000LQ1Z" width="500"></img> If you are accessing this screen from the already Active Zonedirector then use the "Sync to peer" option so that the Active Zone director synchronizes with the standby Zonedirector by pushing the configuration, If you are accessing this screen from the newly added backup Zonedirector then use the "Sync from peer " option so that the newly added backup Zonedirector will fetch the configuration from Active Zonedirector,

Unable to establish Smart redundancy Error shows " Waiting for Config Decision"

2014-03-24T19:04:44-0700 2014-03-28T14:22:29-0700 https://support.ruckuswireless.com/articles/000002838 2014-03-25T02:09:23-0700 monthly 0.8 admin,premium knowledge_article_819 knowledge_article_819 2014-03-25T02:04:17-0700 000002838 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Is-it-possible-for-a-User-to-connect-to-a-specific-WLAN-after-executing-the-prov-exe-file ZoneDirector provides a “Default” role that is automatically applied to all new user accounts. This role links all users to the internal WLAN and permits access to all WLANs by default. As an alternative, you can create additional roles that you can assign to selected wireless network users, to limit their access to certain WLANs, to allow them to log in with non-standard client devices, or to grant permission to generate guest passes. Please refer to Roles under Zero-IT in user guide for more information on this.

User needs to connect to a specific WLAN after executing prov.exe

2014-03-25T02:09:23-0700 2014-03-28T14:22:24-0700 https://support.ruckuswireless.com/articles/000002560 2014-03-25T02:24:58-0700 monthly 0.8 admin,premium knowledge_article_818 knowledge_article_818 2014-03-25T02:24:58-0700 000002560 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Known issues and workarounds Known Issues and Workarounds, ZoneDirector Do application control (after recognition) to make sure port 53 is not abused for none other than the DNS traffic.

client packet with port 53 (DNS) and port 67 (DHCP request) will pass through Guest Wlan without authenticate.

2014-03-25T02:24:58-0700 2014-03-28T14:22:23-0700 https://support.ruckuswireless.com/articles/000002727 2014-03-25T13:47:48-0700 monthly 0.8 admin,premium knowledge_article_816 knowledge_article_816 2014-03-25T13:47:48-0700 000002727 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Steps to change the IP address of the ZD in Smart Redundancy: > Go to Configure > Access Point under Limited ZD Discovery enable/check the option Only connect to the following ZoneDirector: and enter the ZD IP address, check the below snippet. <img alt="ZD" height="109" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIyX&feoid=00N50000002Cf3M&refid=0EM50000000LS9G" width="500"></img> > Once done check on the AP if the configuration is pushed, this could be checked by SSH into any of the AP and execute the command get director(if not updated let the AP get the information) then proceed with the next step <img alt="SSH_AP" height="171" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIyX&feoid=00N50000002Cf3M&refid=0EM50000000LS9L" width="500"></img> > Do an manual Failover by going Dashboard > System Overview; The AP would Join the back up ZD, once all the AP gets connected proceed with next step. If you don't have the wizard go to Dashboard (Add Widgets) by dragging the Smart Redundancy widget onto the workspace <img alt="Failover" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIyX&feoid=00N50000002Cf3M&refid=0EM50000000LS9V"></img> > Then change the IP on the ZD that was Active before Failover, Then under Smart Redundancy and change the IP address of the Primary ZD(that is set now) and hit apply once done let the ZD sync with the Peer and get the configuration > Now log into your stand by ZD and check if the IP address has been updated or need to change the IP change and update the IP address in the Configure > System under Smart Redundancy, if update it should show as 'Standby – Connected' > Now check if AP got connected back and working

2014-03-25T13:47:48-0700 2014-03-28T14:22:10-0700 https://support.ruckuswireless.com/articles/000001697 2014-01-11T14:09:34-0800 monthly 0.8 admin,premium knowledge_article_238 knowledge_article_238 2013-03-01T08:57:57-0800 000001697 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How to clear DHCP entries from the ZoneDirector DHCP server <div> The only option would be Disable/Enable DHCP server on the ZD </div> <div> The DHCP lease information is saved over permanent storage so that, if ZD reboots, it won’t assign an already assigned IP address to other clients. Disable/Enable of DHCP resets the client store.</div>

How to clear DHCP entries from the ZoneDirector DHCP server

2014-01-11T14:09:34-0800 2014-03-07T15:19:49-0800 https://support.ruckuswireless.com/articles/000002586 2014-02-18T11:11:47-0800 monthly 0.8 admin,premium knowledge_article_784 knowledge_article_784 2014-02-04T12:59:39-0800 000002586 Validated (External) Premium Zoneflex 7731 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex 7731 You can change the NTP server to change the Date and Time. Go to Configuration > Bridge under NTP Server use the below website link to select NTP server accordingly. Change the NTP server to see if it makes any difference if still the issue try to reboot the Access Point and check it. Visit : <a href="http://www.pool.ntp.org/en/" target="_blank">http://www.pool.ntp.org/en/</a> and select the appropriate NTP server of your region and use that URL, you could also try the IP address of it. Screen Shot of the page <img alt="NTP Server Configuration" height="251" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIqY&feoid=00N50000002Cf3M&refid=0EM50000000LQWN" width="500"></img>

2014-02-18T11:11:47-0800 2014-03-03T12:07:20-0800 https://support.ruckuswireless.com/articles/000002590 2014-02-19T04:59:13-0800 monthly 0.8 admin,premium knowledge_article_775 knowledge_article_775 2014-02-19T04:59:13-0800 000002590 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;System network management Performance, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to find out the number of associated client on each AP? <div> RUCKUS-ZD-WLAN-MIB has the oid value that can be used for the total number of clients on each AP.</div> <div> </div> <div> Oid: .1.3.6.1.4.1.25053.1.2.2.1.1.2.1.1.15 </div> <div> String: .iso.org.dod.internet.private.enterprises.ruckusRootMIB.ruckusObjects.ruckusZD.ruckusZDWLANModule.ruckusZDWLANMIB.ruckusZDWLANObjects.ruckusZDWLANAPInfo.ruckusZDWLANAPTable.ruckusZDWLANAPEntry.ruckusZDWLANAPNumSta</div> <div> </div> <div> </div>

I use PRTG SNMP tool to identify number clients that are associated with each AP.

2014-02-19T04:59:13-0800 2014-03-03T12:07:04-0800 https://support.ruckuswireless.com/articles/000002657 2014-02-20T08:06:02-0800 monthly 0.8 admin knowledge_article_768 knowledge_article_768 2014-02-14T07:39:31-0800 000002657 Validated (External) Internal Upgrade to 2.1.0.0.312 and latter release can fix this issue

After several days of uptime, various SCGs started to report disconnected DPs. A manual restart of the affected DP brought the system up again.

2014-02-20T08:06:02-0800 2014-03-03T12:06:53-0800 https://support.ruckuswireless.com/articles/000001384 2014-02-25T15:46:14-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_763 knowledge_article_763 2013-01-16T07:53:04-0800 000001384 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Can we use ZD as DHCP server when smart redundancy is enabled ? As of ZoneFlex release 9.7 it is possible to use the ZoneDirector's in Smart Redundancy configuration as DHCP servers. This provides redundant DHCP services in addition to other wireless controller functions.

Can we use ZD as DHCP server when smart redundancy is enabled ?

2014-02-25T15:46:14-0800 2014-03-03T12:06:44-0800 https://support.ruckuswireless.com/articles/000002289 2014-01-27T08:33:01-0800 monthly 0.8 admin,premium knowledge_article_711 knowledge_article_711 2014-01-25T10:21:56-0800 000002289 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Known issues and workarounds Configuration, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor What are the standared RJ-45 PoE pin-outs? 10/100 Ethernet only uses 2 pairs, 2 & 3 (pins 1,2,3,6) for TX and RX data. 803.3af type A uses phantom power with center tap isolation transformers to put DC power on these same 4 conductors. This is the type of PoE used for PoE switches. PoE injectors (803.3af type B) use the spare pairs (1,4) to put unprotected DC power so using an injector requires all 4 pairs. So using a 10/100 PoE switch, not injector, should work (if the correct conductors are used) with only 4 wires/2 pairs. <table class="MsoNormalTable" border="1" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="13" rowspan="1" style="background-color: transparent; "> Table 1. Summary Comparison of Various PoE Standards </td></tr><tr><td colspan="1" rowspan="3" style="background-color: transparent; "> STANDARD </td><td colspan="9" rowspan="1" style="background-color: transparent; "> SOURCE </td><td colspan="2" rowspan="1" style="background-color: transparent; "> LOAD </td><td colspan="1" rowspan="1" style="background-color: transparent; "> REMARKS </td></tr><tr><td colspan="1" rowspan="1" style="background-color: transparent; "> </td><td colspan="8" rowspan="1" style="background-color: transparent; "> Ethernet RJ-45 connector pin number * </td><td colspan="1" rowspan="1" style="background-color: transparent; "> </td><td colspan="1" rowspan="1" style="background-color: transparent; "> </td><td colspan="1" rowspan="1" style="background-color: transparent; "> </td></tr><tr><td colspan="1" rowspan="1" style="background-color: transparent; "> Source Voltage </td><td colspan="1" rowspan="1" style="background-color: transparent; "> 1 </td><td colspan="1" rowspan="1" style="background-color: transparent; "> 2 </td><td colspan="1" rowspan="1" style="background-color: transparent; "> 3 </td><td colspan="1" rowspan="1" style="background-color: transparent; "> 4 </td><td colspan="1" rowspan="1" style="background-color: transparent; "> 5 </td><td colspan="1" rowspan="1" style="background-color: transparent; "> 6 </td><td colspan="1" rowspan="1" style="background-color: transparent; "> 7 </td><td colspan="1" rowspan="1" style="background-color: transparent; "> 8 </td><td colspan="1" rowspan="1" style="background-color: transparent; "> Load Voltage </td><td colspan="1" rowspan="1" style="background-color: transparent; "> DC Load Connector </td><td colspan="1" rowspan="1" style="background-color: transparent; "> </td></tr><tr><td colspan="1" rowspan="1" style="background-color: transparent; "> IEEE 802.3af using data pairs </td><td colspan="1" rowspan="1" style="background-color: transparent; "> 48 V DC, protected </td><td colspan="1" rowspan="1" style="background-color: transparent; "> RX, DC+ </td><td colspan="1" rowspan="1" style="background-color: transparent; "> RX, DC+ </td><td colspan="1" rowspan="1" style="background-color: transparent; "> TX, DC- </td><td colspan="1" rowspan="1" style="background-color: transparent; "> spare </td><td colspan="1" rowspan="1" style="background-color: transparent; "> spare </td><td colspan="1" rowspan="1" style="background-color: transparent; "> TX, DC- </td><td colspan="1" rowspan="1" style="background-color: transparent; "> spare </td><td colspan="1" rowspan="1" style="background-color: transparent; "> spare </td><td colspan="2" rowspan="1" style="background-color: transparent; "> (embedded) </td><td colspan="1" rowspan="1" style="background-color: transparent; "> Industry Standard for embedded PoE </td></tr></tbody></table> 802.3af type B (injectors) <table class="MsoNormalTable" border="1" cellpadding="0" cellspacing="0"><tbody><tr><td colspan="1" rowspan="1" style="background-color: transparent; "> IEEE 802.3af using spare pairs </td><td colspan="1" rowspan="1" style="background-color: transparent; "> 48 V DC, protected </td><td colspan="1" rowspan="1" style="background-color: transparent; "> RX </td><td colspan="1" rowspan="1" style="background-color: transparent; "> RX </td><td colspan="1" rowspan="1" style="background-color: transparent; "> TX </td><td colspan="1" rowspan="1" style="background-color: transparent; "> DC+ </td><td colspan="1" rowspan="1" style="background-color: transparent; "> DC+ </td><td colspan="1" rowspan="1" style="background-color: transparent; "> TX </td><td colspan="1" rowspan="1" style="background-color: transparent; "> DC- </td><td colspan="1" rowspan="1" style="background-color: transparent; "> DC- </td><td colspan="1" rowspan="1" style="background-color: transparent; "> (embedded) </td><td colspan="1" rowspan="1" style="background-color: transparent; "> Industry Standard for embedded PoE </td></tr></tbody></table> Gigabit Ethernet uses all 4 pairs for data and phantom power to power the AP. <img height="187" src="file:///C:/Users/MICHAE~1.BRA/AppData/Local/Temp/msohtmlclip1/01/clip_image001.jpg" width="576"></img>

What are the standard RJ-45 PoE pin-outs

2014-01-27T08:33:01-0800 2014-02-24T13:22:44-0800 https://support.ruckuswireless.com/articles/000002449 2014-02-13T14:37:06-0800 monthly 0.8 admin,premium knowledge_article_748 knowledge_article_748 2014-02-04T23:07:37-0800 000002449 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What happens when we change channel manually on the Root AP when Mesh is enabled ? Root AP and its Mesh AP(s) channels has to be same. When we change the channel manually on the Root AP using ZD GUI, automatically the Mesh AP(s) will get the channel info from the Root AP and will change their channel to match.

2014-02-13T14:37:06-0800 2014-02-13T14:38:12-0800 https://support.ruckuswireless.com/articles/000002626 2014-02-11T17:37:21-0800 monthly 0.8 admin,premium knowledge_article_738 knowledge_article_738 2014-02-11T17:37:21-0800 000002626 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector "Reversibly encrypted password does not exist" while using Radius Server with CHAP Authentication. Find the attached PDF for detailed step by step procedure.

ZD test authentication itself fails and able to see the following log on the Radius server. "Reversibly encrypted password does not exist"

2014-02-11T17:37:21-0800 2014-02-11T17:38:12-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PEjYCAW?attachment_index=0 2014-02-11T17:38:12-0800 monthly admin,premium knowledge_article_738 knowledge_article_738_attachment_1 Radius issue.pdf 132748.0 application/pdf https://support.ruckuswireless.com/articles/000001162 2014-01-11T14:23:33-0800 monthly 0.8 admin,premium knowledge_article_423 knowledge_article_423 2012-03-21T12:00:21-0700 000001162 Validated (External) Premium Zoneflex indoor Performance;Configuration;Firmware;Installation;System network management;Troubleshooting Performance, Configuration, Firmware, Installation, System Network Management, Troubleshooting, ZoneFlex Indoor How to Upgrade firmware version using locally stored image in standalone - AP 7363 <h1> Product: AP 7363</h1> Topic: Firmware <h1> Objective</h1> Upgrade firmware version in standalone AP using locally stored image. <h1> Obtaining firmware image</h1> You can obtain firmware images from Ruckus Wireless support website: <a href="http://support.ruckuswireless.com/" target="_blank">http://support.ruckuswireless.com</a> To be able to download it, you need to log in. The images can be found at Downloads-> Software as shown below: <img alt="User-added image" height="389" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIQ8&feoid=00N50000002Cf3M&refid=0EM50000000L9HS" width="500"></img> Selecting ‘Download now’ you can download the desired image. Once stored locally in a PC folder which has connectivity to the AP, it can be used to upgrade the AP. <h1> Procedure</h1> To use this method you go to AP’s WebUI Maintenance::Upgrade menu and you select Upgrade Method->Local as shown below: Now you select the firmware file from your PC’s folder and click on ‘Perform Upgrade’. This will upload new firmware AND will automatically reboot the AP (in the previous method you had to manually reboot the AP): <img alt="User-added image" height="261" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIQ8&feoid=00N50000002Cf3M&refid=0EM50000000L9HX" width="500"></img> <img alt="User-added image" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIQ8&feoid=00N50000002Cf3M&refid=0EM50000000L9Hc"></img> <img alt="User-added image" height="261" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIQ8&feoid=00N50000002Cf3M&refid=0EM50000000L9Hh" width="500"></img> <img alt="User-added image" height="329" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIQ8&feoid=00N50000002Cf3M&refid=0EM50000000L9HT" width="500"></img>

Upgrade firmware version using locally stored image in standalone AP - v2

2014-01-11T14:23:33-0800 2014-02-07T13:12:39-0800 https://support.ruckuswireless.com/articles/000001158 2014-01-11T14:23:17-0800 monthly 0.8 admin,premium knowledge_article_425 knowledge_article_425 2012-03-21T12:00:21-0700 000001158 Validated (External) Premium Zoneflex 7025 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneFlex 7025 How to Physically Install ZF 7025 Product: AP ZF7025 Topic: Installation/Configuration Physical Installation CAUTION: The AP and all interconnected equipment must be installed indoors within the same building, including the PoE powered network connection as described by Environment A of the 802.3af standard. CAUTION: Ensure that you use a Cat5e or better Ethernet cable to supply PoE power and LAN connectivity running to the outlet box where the AP will be installed. Mount the ZoneFlex 7025 to the Outlet Box 1. Prepare the electrical outlet box. The ZoneFlex 7025 requires a single-gang electrical outlet box mounted in a wall cavity. The US version requires a box conforming to NEMA-WD6, with a minimum depth of 1.4 inches. The EU version requires a box conforming to BS 4662, with a minimum depth of 35mm. • Remove the outlet box cover from the outlet box. • Run the required cables through the electrical outlet box allowing sufficient slack for the cables to reach the not yet installed ZoneFlex 7025. 2. Connect the cables • Connect an Ethernet cable providing PoE power and network connectivity to the PoE In LAN 5 / Uplink port using either a standard RJ-45 connector or the 110 punch-down block. Do not connect both • If required, connect the cable providing support for pass-through devices to the Pass Through port. 3. Mount the ZoneFlex 7025. • Align the mounting bracket with the outlet box so that the two screw holes line up, and pull the Ethernet cable through the center of the mounting bracket. • Affix the mounting bracket to the outlet box using the two mounting screws provided. • Snap the AP onto the mounting bracket by hooking the two locking tabs on one side of the mounting bracket into the two cutouts in the plastic housing on one side of the AP, then push the other side of the AP in toward the wall until it snaps in place. Figure 1. Hook the locking tabs into the housing cutouts <img alt="User-added image" height="280" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PINN&feoid=00N50000002Cf3M&refid=0EM50000000L9BP" width="500"></img> You have completed the physical installation. Using the 110 Punch down Block If you prefer to use the 110 Punch-down block connector rather than the RJ-45 connector for power and network connectivity, refer to the following diagram for wiring details. CAUTION: Do not connect both the Punch-down block and the Uplink port to a network. Only one connection can be used at a time. <img alt="User-added image" height="375" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PINN&feoid=00N50000002Cf3M&refid=0EM50000000L9BU" width="500"></img>

How to Physically Install ZF 7025

2014-01-11T14:23:17-0800 2014-02-07T13:12:31-0800 https://support.ruckuswireless.com/articles/000001178 2014-01-11T14:22:30-0800 monthly 0.8 admin,premium knowledge_article_409 knowledge_article_409 2012-03-21T12:00:40-0700 000001178 Validated (External) Premium Zoneflex indoor Performance;Configuration;Installation;System network management;Troubleshooting Performance, Configuration, Installation, System Network Management, Troubleshooting, ZoneFlex Indoor Network management: SNMP configuration and interrogation in standalone AP - 7363 <h1> Product: AP 7363 firmware version 9.3.0.0.87</h1> Topic: System and network management <h1> Objective</h1> Properly configure SNMP parameters and verify this configuration in standalone AP. SNMP parameters are only available through CLI interface, and not in WebUI. <h1> Default configuration</h1> By default a standalone AP has the following configuration: <div> rkscli: get snmp SNMP enable : enable SNMP version : v2c and v3 SNMPv2 ro community : public SNMPv2 rw community : private SNMPv2 sys contact : support@ruckuswireless.com SNMPv2 sys location : SNMPv2 trap enable : enable SNMPv2 trap server : OK rkscli: get snmpv3 SNMP enable : enable SNMP version : v2c and v3 SNMPv3 ro username : ruckus SNMPv3 ro auth type : SNMPv3 ro auth key : SNMPv3 ro privacy type : SNMPv3 ro privacy key : SNMPv3 rw username : ruckus SNMPv3 rw auth type : SNMPv3 rw auth key : SNMPv3 rw privacy type : SNMPv3 rw privacy key : SNMPv3 trap enable : disable SNMPv3 trap Svr Ip : SNMPv3 trap username : ruckus SNMPv3 trap auth type : SNMPv3 trap auth key : SNMPv3 trap privacy type : SNMPv3 trap privacy key : OK rkscli: get snmp-acl SNMP ACL is disabled OK <h1> SNMP v2c configuration</h1> As seen in the previous point, by default the AP has SNMPv2c enabled with typical community values public/private for read and write operations. To modify these values execute the following commands in CLI: set snmp community ro community-value: Modify read-only community set snmp community rw community-value: Modify read-write community set snmp trap-svr ip-address: Configure trap server IP address (trap community has a fixed value of ‘public’) Example: <div> rkscli: set snmp community ro test-ro OK rkscli: set snmp community rw test-rw OK rkscli: set snmp trap-svr 10.10.10.1 OK rkscli: get snmp SNMP enable : enable SNMP version : v2c and v3 SNMPv2 ro community : test-ro SNMPv2 rw community : test-rw SNMPv2 sys contact : support@ruckuswireless.com SNMPv2 sys location : SNMPv2 trap enable : disable SNMPv2 trap server : 10.10.10.1 OK <h1> SNMP v3 configuration</h1> For SNMP v3 configuration, you need to configure username, authentication and privacy types and keys as follows: set snmpv3 ro username name: To modify read-only user set snmpv3 ro auth type: To select authentication type for read-only between MD5 and SHA, by default MD5 set snmpv3 ro auth-key key: To modify authentication password-phrase for read-only (minimum 8 characters length) set snmpv3 ro privacy type: To select encryption type for read-only between DES and AES, by default DES set snmpv3 ro privacy-key key: To modify encryption password-phrase for read-only (minimum 8 characters length) set snmpv3 rw username name: To modify read-write user set snmpv3 rw auth type: To select authentication type for read-write between MD5 and SHA, by default MD5 set snmpv3 rw auth-key key: To modify authentication password-phrase for read-write (minimum 8 characters length) set snmpv3 rw privacy type: To select encryption type for read-write between DES and AES, by default DES set snmpv3 rw privacy-key key: To modify encryption password-phrase for read-write (minimum 8 characters length) set snmpv3 trap enable/disable: To enable/disable SNMPv3 trap service set snmpv3 trap username name: To modify trap user set snmpv3 trap auth type: To select authentication type for trap between MD5 and SHA, by default MD5 set snmpv3 trap auth-key key: To modify authentication password-phrase for trap (minimum 8 characters length) set snmpv3 trap privacy type: To select encryption type for trap between DES and AES, by default DES set snmpv3 trap privacy-key key: To modify encryption password-phrase for trap (minimum 8 characters length) set snmpv3 trap-svr ip-address: Configure trap server IP address Example: <div> rkscli: set snmpv3 ro username ruckus-ro OK rkscli: set snmpv3 ro auth SHA OK rkscli: set snmpv3 ro auth-key ruckus-key OK rkscli: set snmpv3 ro privacy AES OK rkscli: set snmpv3 ro privacy-key ruckus-enc OK rkscli: set snmpv3 rw username ruckus-rw OK rkscli: set snmpv3 rw auth SHA OK rkscli: set snmpv3 rw auth-key ruckus-key OK rkscli: set snmpv3 rw privacy AES OK rkscli: set snmpv3 rw privacy-key ruckus-enc OK rkscli: set snmpv3 trap enable OK rkscli: set snmpv3 trap username ruckus-trap OK rkscli: set snmpv3 trap auth SHA OK rkscli: set snmpv3 trap auth-key ruckus-key OK rkscli: set snmpv3 trap privacy AES OK rkscli: set snmpv3 trap privacy-key ruckus-enc OK rkscli: set snmpv3 trap-svr 10.10.10.1 OK rkscli: get snmpv3 SNMP enable : enable SNMP version : v2c and v3 SNMPv3 ro username : ruckus-ro SNMPv3 ro auth type : SHA SNMPv3 ro auth key : ruckus-key SNMPv3 ro privacy type : AES SNMPv3 ro privacy key : ruckus-enc SNMPv3 rw username : ruckus-rw SNMPv3 rw auth type : SHA SNMPv3 rw auth key : ruckus-key SNMPv3 rw privacy type : AES SNMPv3 rw privacy key : ruckus-enc SNMPv3 trap enable : enable SNMPv3 trap Svr Ip : 10.10.10.1 SNMPv3 trap username : ruckus-trap SNMPv3 trap auth type : SHA SNMPv3 trap auth key : ruckus-key SNMPv3 trap privacy type : AES SNMPv3 trap privacy key : ruckus-enc OK <h1> SNMP filters</h1> To increase device security, it is possible to configure access-lists filters to allow only selected servers to contact the device through SNMP: set snmp-acl enable/disable: To enable/disable SNMP filter set snmp-acl add ip-addr: To add an allowed server set snmp-acl del ip-addr: To delete an allowed server set snmp-acl clear: To delete all entries Example: <div> rkscli: set snmp-acl enable OK rkscli: set snmp-acl add 10.10.10.1 OK rkscli: get snmp-acl Allow only these IP to access SNMP SNMP ACL list 1: 10.10.10.1 OK rkscli: set snmp-acl del 10.10.10.1 OK rkscli: get snmp-acl Allow only these IP to access SNMP SNMP ACL list OK rkscli: set snmp-acl disable OK rkscli: get snmp-acl SNMP ACL is disabled OK rkscli: <h1> Commands</h1> Here you can find a summary of the available commands to interrogate and configure SNMP through CLI: get snmp: Provides SNMP v2c current values. get snmpv3: Provides SNMP v3 current values. get snmp-acl: Provides SNMP access-list current values. set snmp {options} : Configure SNMP v2c values. The available options are: ->version <value>, SNMP version(v2c,v3,both) ->system contact <value>, SNMP V2c system contact ->system location <value>, SNMP V2c system location ->community ro <name>, read-only community name ->community rw <name>, read-write community name ->trap {enable|disable}, SNMP V2c trap enable flag ->trap-svr <ipaddr>, SNMP V2c trap server ipaddr set snmpv3 {options}: Configure SNMP v3 values. The available options are: ->ro username <name>, SNMP v3 ro username ->ro auth <type>, SNMP v3 auth type(MD5/SHA) ->ro auth-key <key>, SNMP v3 auth key ->ro privacy <type>, SNMP v3 privacy type(DES/AES/NONE) ->ro privacy-key <key>, SNMP v3 privacy key ->rw username <name>, SNMP v3 ro username ->rw auth <type>, SNMP v3 auth type(MD5/SHA) ->rw auth-key <key>, SNMP v3 auth key ->rw privacy <type>, SNMP v3 privacy type(DES/AES) ->rw privacy-key <key>, SNMP v3 privacy key ->trap {enable|disable}, SNMP V3 trap enable ->trap username <name>, SNMP v3 trap username ->trap auth <type>, SNMP v3 trap auth type(MD5/SHA) ->trap auth-key <key>, SNMP v3 trap auth key ->trap privacy <type>, SNMP v3 trap privacy type(DES/AES/NONE) ->trap privacy-key <key>, SNMP v3 trap privacy key ->trap-svr <ipaddr>, SNMP V3 trap server ipaddr set snmpv3 {options}: Configure SNMP v3 values. The available options are: ->ro username <name>, SNMP v3 ro username ->ro auth <type>, SNMP v3 auth type(MD5/SHA) ->ro auth-key <key>, SNMP v3 auth key ->ro privacy <type>, SNMP v3 privacy type(DES/AES/NONE) ->ro privacy-key <key>, SNMP v3 privacy key ->rw username <name>, SNMP v3 ro username ->rw auth <type>, SNMP v3 auth type(MD5/SHA) ->rw auth-key <key>, SNMP v3 auth key ->rw privacy <type>, SNMP v3 privacy type(DES/AES) ->rw privacy-key <key>, SNMP v3 privacy key ->trap {enable|disable}, SNMP V3 trap enable ->trap username <name>, SNMP v3 trap username ->trap auth <type>, SNMP v3 trap auth type(MD5/SHA) ->trap auth-key <key>, SNMP v3 trap auth key ->trap privacy <type>, SNMP v3 trap privacy type(DES/AES/NONE) ->trap privacy-key <key>, SNMP v3 trap privacy key ->trap-svr <ipaddr>, SNMP V3 trap server ipaddr set snmp-acl {options}: Configure SNMP access-list to enable external devices that can access SNMP service. The available options are: -> {enable|disable} -> {add|del} <ipaddr> -> clear -- delete all entries </div> </div> </div> </div>

Network management: SNMP configuration and interrogation in standalone AP

2014-01-11T14:22:30-0800 2014-02-07T13:12:11-0800 https://support.ruckuswireless.com/articles/000001180 2014-01-11T14:22:13-0800 monthly 0.8 admin,premium knowledge_article_408 knowledge_article_408 2012-03-21T12:00:40-0700 000001180 Validated (External) Premium Zoneflex outdoor Performance;Configuration;Troubleshooting Performance, Configuration, Troubleshooting, ZoneFlex Outdoor Zone Flex 7762 Configuration - 5.8GHz 802.11a Band C Topic: 5.8GHz 802.11a Band C <h1> Overview</h1> <h1> 802.11a Band C – 5.8GHz Wireless Links</h1> The 802.11a band C was released in the early part of 2004 and offers the possibility of greater ranges and bandwidth than 802.11b/g systems. The techniques used are largely the same as working at 2.4GHz, however extra care has to be taken with connectors and cable runs. <h2> Improvements in 802.11a</h2> Whilst the range per mW of output power is reduced with 5.8GHz systems, the power levels are much higher and will give a greater achievable range. The maximum EIRP is 100mW for 802.11b/g systems and 2W (2000mW) for 802.11a band C. One of the other improvements offered by 802.11a is its improved tolerance to reflections and multipath interference (like ghosting on the TV). This has been achieved by improved electronics an modulation techniques in the equipment. This will mean that in cluttered areas where previously a circularly polarised signal would need to be used, the normal horizontally or vertically polarised aerials can be used. The equipment is often described as 'non line of sight' – this leads people to think that the signal will pass round obstacles, unfortunately this is not true and just means the entire Fresnel zone does not need to be clear and it will tolerate multiple reflections. Some manufacturers claim non line of sight and in fact are refering to the ability to use an adjacent building as a reflector. Another improvement is that the signals will not be subject to as much interference. The 802.11b/g band suffers from interference from Bluetooth equipment, portable phones, video senders and microwave ovens. As the Fresnel zone at 5.8GHz is smaller compared to that at 2.4GHz, it also means less of the link needs to be clear and the aerial height above ground can also be reduced. This Feature is only Available to Customers in the UK it allows the use of channels 149,153,157,161 and 163 These channels are also restricted by licence and customers must comply with UK Ofcom licensing rules. The Feature is both Supported by the Zone Director and the 7762 Standalone AP Mode it configurable from the GUI and the CLI. ZONE DIRECTOR GUI <img alt="User-added image" height="329" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PITA&feoid=00N50000002Cf3M&refid=0EM50000000L9Ik" width="500"></img> ZONE DIRECTOR CLI ruckus(config-ap)# cband-channels [enable | disable] ruckus(config-apgrp)# model zf7762 cband-channels [enable | disable] ruckus(config-apgrp)# no model zf7762 cband-channels-override 7762 AP GUI <img alt="User-added image" height="263" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PITA&feoid=00N50000002Cf3M&refid=0EM50000000L9Ip" width="500"></img> 7762 CLI rkscli: set dfschannelblock <wifi name> [enable | disable] rkscli: get dfschannelblock <wifi name>

Zone Flex 7762 Configuration

2014-01-11T14:22:13-0800 2014-02-07T13:12:02-0800 https://support.ruckuswireless.com/articles/000001213 2014-01-11T14:20:20-0800 monthly 0.8 admin,premium knowledge_article_379 knowledge_article_379 2012-03-21T12:01:04-0700 000001213 Validated (External) Premium Configuration Configuration How do I configure my switch to work with the Ruckus ZoneDirector? Specific configuration varies of-course based on the switch vendor. If you do not use VLANs then all you need to do is connect all the APs and the ZoneDirector to the switch(es). If you do use VLANs then make sure the native VLAN on each port (that is connected to the APs and the ZoneDirector) is the management VLAN and also that each port has trunk enabled. See below for a sample configuration from a Cisco Catalyst 2950 running IOS software version 12.1(14). In this example there are 3 access points and 4 SSIDs. Each SSID is mapped to a different VLAN (11, 21,31, and 41) and the management VLAN is 172. ! vlan 11,21,31,41,172 ! interface FastEthernet0/13 switchport access vlan 172 switchport trunk native vlan 172 switchport trunk allowed vlan 11, 21,31,41,172 switchport mode trunk no cdp enable ! interface FastEthernet0/14 switchport access vlan 172 switchport trunk native vlan 172 switchport trunk allowed vlan 11, 21,31,41,172 switchport mode trunk no cdp enable ! interface FastEthernet0/15 switchport access vlan 172 switchport trunk native vlan 172 switchport trunk allowed vlan 11, 21,31,41,172 switchport mode trunk no cdp enable ! interface FastEthernet0/16 switchport access vlan 172 switchport trunk native vlan 172 switchport trunk allowed vlan 11, 21,31,41,172 switchport mode trunk no cdp enable !

2014-01-11T14:20:20-0800 2014-02-07T13:11:13-0800 https://support.ruckuswireless.com/articles/000001241 2014-01-11T14:18:41-0800 monthly 0.8 admin,premium knowledge_article_356 knowledge_article_356 2012-03-21T12:01:27-0700 000001241 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;System network management Configuration, System Network Management, ZoneDirector, ZoneFlex Indoor Properly configure SNMP parameters and verify this configuration in standalone AP - Product: AP 7363 firmware version 9.3.0.0.87 <div> Name: Network management: SNMP configuration and interrogation in standalone AP</div> <h1> Product: AP 7363 firmware version 9.3.0.0.87</h1> Topic: System and network management <h1> Objective</h1> Properly configure SNMP parameters and verify this configuration in standalone AP. SNMP parameters are only available through CLI interface, and not in WebUI. <h1> Default configuration</h1> <div> rkscli: get snmp SNMP enable : enable SNMP version : v2c and v3 SNMPv2 ro community : public SNMPv2 rw community : private SNMPv2 sys contact : support@ruckuswireless.com SNMPv2 sys location : SNMPv2 trap enable : enable SNMPv2 trap server : OK rkscli: get snmpv3 SNMP enable : enable SNMP version : v2c and v3 SNMPv3 ro username : ruckus SNMPv3 ro auth type : SNMPv3 ro auth key : SNMPv3 ro privacy type : SNMPv3 ro privacy key : SNMPv3 rw username : ruckus SNMPv3 rw auth type : SNMPv3 rw auth key : SNMPv3 rw privacy type : SNMPv3 rw privacy key : SNMPv3 trap enable : disable SNMPv3 trap Svr Ip : SNMPv3 trap username : ruckus SNMPv3 trap auth type : SNMPv3 trap auth key : SNMPv3 trap privacy type : SNMPv3 trap privacy key : OK rkscli: get snmp-acl SNMP ACL is disabled OK SNMP v2c configuration As seen in the previous point, by default the AP has SNMPv2c enabled with typical community values public/private for read and write operations. To modify these values execute the following commands in CLI: set snmp community ro community-value: Modify read-only community set snmp community rw community-value: Modify read-write community set snmp trap-svr ip-address: Configure trap server IP address (trap community has a fixed value of ‘public’) Example: <div> rkscli: set snmp community ro test-ro OK rkscli: set snmp community rw test-rw OK rkscli: set snmp trap-svr 10.10.10.1 OK rkscli: get snmp SNMP enable : enable SNMP version : v2c and v3 SNMPv2 ro community : test-ro SNMPv2 rw community : test-rw SNMPv2 sys contact : support@ruckuswireless.com SNMPv2 sys location : SNMPv2 trap enable : disable SNMPv2 trap server : 10.10.10.1 OK <h1> SNMP v3 configuration</h1> For SNMP v3 configuration, you need to configure username, authentication and privacy types and keys as follows: set snmpv3 ro username name: To modify read-only user set snmpv3 ro auth type: To select authentication type for read-only between MD5 and SHA, by default MD5 set snmpv3 ro auth-key key: To modify authentication password-phrase for read-only (minimum 8 characters length) set snmpv3 ro privacy type: To select encryption type for read-only between DES and AES, by default DES set snmpv3 ro privacy-key key: To modify encryption password-phrase for read-only (minimum 8 characters length) set snmpv3 rw username name: To modify read-write user set snmpv3 rw auth type: To select authentication type for read-write between MD5 and SHA, by default MD5 set snmpv3 rw auth-key key: To modify authentication password-phrase for read-write (minimum 8 characters length) set snmpv3 rw privacy type: To select encryption type for read-write between DES and AES, by default DES set snmpv3 rw privacy-key key: To modify encryption password-phrase for read-write (minimum 8 characters length) set snmpv3 trap enable/disable: To enable/disable SNMPv3 trap service set snmpv3 trap username name: To modify trap user set snmpv3 trap auth type: To select authentication type for trap between MD5 and SHA, by default MD5 set snmpv3 trap auth-key key: To modify authentication password-phrase for trap (minimum 8 characters length) set snmpv3 trap privacy type: To select encryption type for trap between DES and AES, by default DES set snmpv3 trap privacy-key key: To modify encryption password-phrase for trap (minimum 8 characters length) set snmpv3 trap-svr ip-address: Configure trap server IP address Example: <div> rkscli: set snmpv3 ro username ruckus-ro OK rkscli: set snmpv3 ro auth SHA OK rkscli: set snmpv3 ro auth-key ruckus-key OK rkscli: set snmpv3 ro privacy AES OK rkscli: set snmpv3 ro privacy-key ruckus-enc OK rkscli: set snmpv3 rw username ruckus-rw OK rkscli: set snmpv3 rw auth SHA OK rkscli: set snmpv3 rw auth-key ruckus-key OK rkscli: set snmpv3 rw privacy AES OK rkscli: set snmpv3 rw privacy-key ruckus-enc OK rkscli: set snmpv3 trap enable OK rkscli: set snmpv3 trap username ruckus-trap OK rkscli: set snmpv3 trap auth SHA OK rkscli: set snmpv3 trap auth-key ruckus-key OK rkscli: set snmpv3 trap privacy AES OK rkscli: set snmpv3 trap privacy-key ruckus-enc OK rkscli: set snmpv3 trap-svr 10.10.10.1 OK rkscli: get snmpv3 SNMP enable : enable SNMP version : v2c and v3 SNMPv3 ro username : ruckus-ro SNMPv3 ro auth type : SHA SNMPv3 ro auth key : ruckus-key SNMPv3 ro privacy type : AES SNMPv3 ro privacy key : ruckus-enc SNMPv3 rw username : ruckus-rw SNMPv3 rw auth type : SHA SNMPv3 rw auth key : ruckus-key SNMPv3 rw privacy type : AES SNMPv3 rw privacy key : ruckus-enc SNMPv3 trap enable : enable SNMPv3 trap Svr Ip : 10.10.10.1 SNMPv3 trap username : ruckus-trap SNMPv3 trap auth type : SHA SNMPv3 trap auth key : ruckus-key SNMPv3 trap privacy type : AES SNMPv3 trap privacy key : ruckus-enc OK <h1> SNMP filters</h1> To increase device security, it is possible to configure access-lists filters to allow only selected servers to contact the device through SNMP: set snmp-acl enable/disable: To enable/disable SNMP filter set snmp-acl add ip-addr: To add an allowed server set snmp-acl del ip-addr: To delete an allowed server set snmp-acl clear: To delete all entries Example: <div> rkscli: set snmp-acl enable OK rkscli: set snmp-acl add 10.10.10.1 OK rkscli: get snmp-acl Allow only these IP to access SNMP SNMP ACL list 1: 10.10.10.1 OK rkscli: set snmp-acl del 10.10.10.1 OK rkscli: get snmp-acl Allow only these IP to access SNMP SNMP ACL list OK rkscli: set snmp-acl disable OK rkscli: get snmp-acl SNMP ACL is disabled OK rkscli:</div> <h1> Commands</h1> Here you can find a summary of the available commands to interrogate and configure SNMP through CLI: get snmp: Provides SNMP v2c current values. get snmpv3: Provides SNMP v3 current values. get snmp-acl: Provides SNMP access-list current values. set snmp {options} : Configure SNMP v2c values. The available options are: ->version <value>, SNMP version(v2c,v3,both) ->system contact <value>, SNMP V2c system contact ->system location <value>, SNMP V2c system location ->community ro <name>, read-only community name ->community rw <name>, read-write community name ->trap {enable|disable}, SNMP V2c trap enable flag ->trap-svr <ipaddr>, SNMP V2c trap server ipaddr set snmpv3 {options}: Configure SNMP v3 values. The available options are: ->ro username <name>, SNMP v3 ro username ->ro auth <type>, SNMP v3 auth type(MD5/SHA) ->ro auth-key <key>, SNMP v3 auth key ->ro privacy <type>, SNMP v3 privacy type(DES/AES/NONE) ->ro privacy-key <key>, SNMP v3 privacy key ->rw username <name>, SNMP v3 ro username ->rw auth <type>, SNMP v3 auth type(MD5/SHA) ->rw auth-key <key>, SNMP v3 auth key ->rw privacy <type>, SNMP v3 privacy type(DES/AES) ->rw privacy-key <key>, SNMP v3 privacy key ->trap {enable|disable}, SNMP V3 trap enable ->trap username <name>, SNMP v3 trap username ->trap auth <type>, SNMP v3 trap auth type(MD5/SHA) ->trap auth-key <key>, SNMP v3 trap auth key ->trap privacy <type>, SNMP v3 trap privacy type(DES/AES/NONE) ->trap privacy-key <key>, SNMP v3 trap privacy key ->trap-svr <ipaddr>, SNMP V3 trap server ipaddr set snmp-acl {options}: Configure SNMP access-list to enable external devices that can access SNMP service. The available options are: -> {enable|disable} -> {add|del} <ipaddr> -> clear -- delete all entries </div> </div> </div>

Properly configure SNMP parameters and verify this configuration in standalone AP - Product: AP 7363 firmware version 9.3.0.0.87

2014-01-11T14:18:41-0800 2014-02-07T13:10:42-0800 https://support.ruckuswireless.com/articles/000001247 2014-01-11T14:18:37-0800 monthly 0.8 admin,premium knowledge_article_354 knowledge_article_354 2012-03-21T12:01:35-0700 000001247 Validated (External) Premium Zonedirector;Flexmaster;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000;FlexMaster Configuration;Security Configuration, Security, ZoneDirector, FlexMaster What is the difference between MAC address filtering and MAC address authentication The MAC filter (ACL) list can have a maximum of 128 MAC addresses per list. You can create up to 32 lists, but you can only apply one list (ACL) per WLAN/SSID. This is a filter list that blocks or allows clients to pass traffic through the WLAN interface on the AP filtering on each received packet. Ruckus also offers MAC authentication. This is a different mechanism that involves true authentication using the Zone Director. MAC authentication checks the MAC address of the clients against a RADIUS server, and allows connection to MAC that is listed. The MAC address (written without delimiters, spaces, and colons) needs to be set as the login and password in the user data base of the RADIUS server. The only limit to the number of MAC addresses is the size of the RADIUS data base (essentially unlimited). Once authenticated the client traffic is allowed to pass.

Difference between MAC address filtering and MAC address authentication

2014-01-11T14:18:37-0800 2014-02-07T13:10:36-0800 https://support.ruckuswireless.com/articles/000001265 2014-01-11T14:18:28-0800 monthly 0.8 admin,premium knowledge_article_351 knowledge_article_351 2012-03-21T12:05:15-0700 000001265 Validated (External) Premium Flexmaster;FlexMaster System network management System Network Management, FlexMaster How do I find the disconnected devices from the network? There are several ways: The “Loss of Connectivity” graph on the Dashboard shows devices currently disconnected from the network. The rightmost side of this graph represents the current time. On Inventory ? Manage Devices page show the “Last Seen” time. Depending on the FlexMaster contact interval and current time, administrator know if any of the devices lost contact with the FlexMaster.

How do I find the disconnected devices from the network?

2014-01-11T14:18:28-0800 2014-02-07T13:10:31-0800 https://support.ruckuswireless.com/articles/000001311 2014-01-11T14:17:44-0800 monthly 0.8 admin,premium knowledge_article_70 knowledge_article_70 2012-04-03T14:13:30-0700 000001311 Validated (External) Premium System network management System Network Management What are the various alarms available in a ZoneDirector’s network? <table class="htmlDetailElementTable" border="0"><tbody><tr><td colspan="1" rowspan="1"> <div class="sfdc_richtext"> Here is the list: 1. Rogue AP detection 2. Rogue device detection (ad-hoc mode) 3. AP Lost 4. SSID-spoofing Rogue AP detection 5. MAC-spoofing Rogue AP detection 6. Duplicate DHCP server detection 7. Temporary license expiration 8. Temporary license expires in 24 hours 9. Network-connected rogue AP detection 10. AAA Server Unreachable 11. AP has hardware problem All alarms will trigger email, if email option is enabled. Please see “Can ZoneDirector send email alerts?” article for how to configure this. </div> </td></tr></tbody></table>

What are the various alarms available in a ZoneDirector’s network?

2014-01-11T14:17:44-0800 2014-02-07T13:10:16-0800 https://support.ruckuswireless.com/articles/000001270 2014-01-11T14:17:01-0800 monthly 0.8 admin,premium knowledge_article_60 knowledge_article_60 2012-04-12T20:21:33-0700 000001270 Validated (External) Premium Configuration Configuration I have two buildings connected via two wireless bridges. What do I need to do to manage APs in both buildings via ZoneDirector? Bridges may not be passing LWAPP traffic which is required to manage APs. In order to pass this traffic, you have to make sure the Point-to-Point connection mode is enabled on the each bridge linking these two buildings. Also sometimes you have to specify the MAC address of other bridge on each bridge.

I have two buildings connected via two wireless bridges. What do I need to do to manage APs in both buildings via ZoneDirector?

2014-01-11T14:17:01-0800 2014-02-07T13:10:00-0800 https://support.ruckuswireless.com/articles/000001517 2014-01-11T14:12:59-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_180 knowledge_article_180 2013-01-22T16:37:17-0800 000001517 Validated (External) Public Zapper Installation Installation, Zapper Is Zapper available for Android tablets? No, Zapper is currently available only for Apple iOS devices

Customer would like to run the Zapper mobile app on Android

2014-01-11T14:12:59-0800 2014-02-07T13:08:28-0800 https://support.ruckuswireless.com/articles/000001563 2014-01-11T14:11:55-0800 monthly 0.8 admin,premium knowledge_article_196 knowledge_article_196 2013-01-30T09:15:42-0800 000001563 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor Shows the Error message as "no wlan is configured for guest" ZD1100 with 6 ZF7363 APs running on 9.3.0.0.87 version.He configured a guest wlan and tagged a vlan Id for guestwlan. When he tries to generate the guest passes for users, It gives him an error message like "no wlan is configured for guest". Work Around : Checked the step by step configuration of the guestwlan in the ZD and found that guestwlan is not selected for the role at Configure -> Roles so asked him to check that. Now he can generate the guest passes with out any issues.

Shows the Error message as "no wlan is configured for guest"

2014-01-11T14:11:55-0800 2014-02-07T13:08:03-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PChUCAW?attachment_index=0 2014-02-07T13:08:03-0800 monthly admin,premium knowledge_article_196 knowledge_article_196_attachment_1 There is no guest WLAN.docx 13618.0 application/vnd.openxmlformats-officedocument.wordprocessingml.document https://support.ruckuswireless.com/articles/000001584 2014-01-11T14:11:29-0800 monthly 0.8 admin,premium knowledge_article_208 knowledge_article_208 2013-02-05T13:29:20-0800 000001584 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Finding the forgotten ZD IP address (got from DHCP server) without doing Hard Reset. Note that we recommend always using a static IP address for your ZoneDirector wherever possible. <div> As a first option you can try the below one.</div> <div> </div> <div> Using the MAC address of the ZD, You can easily find the IP address of the ZD from the DHCP server. DHCP server should have an MAC to IP address mapping table with lease details.</div> <div> </div> <div> As a second option you can try the below one.</div> <div> </div> <div> Access the ZD using Terminal emulation program (Hyperterminal) using Console port.</div> <div> </div> <div> Execute the command "enable" to get in to the privileged mode.</div> <div> </div> <div> After getting in to the privileged mode, Execute the command "show sysinfo".</div> <div> </div> <div> The above mentioned command will show the IP address of the ZD.</div>

2014-01-11T14:11:29-0800 2014-02-07T13:07:50-0800 https://support.ruckuswireless.com/articles/000001587 2014-01-11T14:11:12-0800 monthly 0.8 admin,premium knowledge_article_216 knowledge_article_216 2013-02-06T15:49:01-0800 000001587 Validated (External) Premium Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor How many SSIDs can be broadcasted when Mesh is Configured on the ZD ? Mesh Occupies two SSIDs: One for Mesh Up-Link and one for Mesh Down-Link. Because of this the APs which normally can broadcast 8 SSIDs will only be able to broadcast 6 after configuring Mesh. After enabling mesh you can only select 6 SSIDs/WLANs under WLAN-Group.

How many SSIDs can be broadcasted when Mesh is Configured on the ZD

2014-01-11T14:11:12-0800 2014-02-07T13:07:43-0800 https://support.ruckuswireless.com/articles/000001982 2014-01-11T14:05:44-0800 monthly 0.8 admin,premium knowledge_article_313 knowledge_article_313 2013-04-25T13:21:29-0700 000001982 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector Does anyone know, which IPv6 RFC features are supported by ZoneDirector/APs? Q: Does anyone know, which IPv6 RFC features are supported by ZoneDirector/APs? A: Here are those collected so far, based on previous RFP responses: RFC 4213: support for dual stack operation RFC 2463: Compliance with ICMP RFC 2461: Ruckus support ICMPv6 on the AP and ZD, allowing wireless clients to fully pass IPv6 RFC2461 messages for Neighbour discover of downstream IPv6 devices RFC 2462: support stateless auto configuration RFC 3315: support stateful or DHCPv6 RFC 2710: support MLD

Q: Does anyone know, which IPv6 RFC features are supported by ZoneDirector/APs? A: Here are those collected so far, based on previous RFP responses: RFC 4213: support for dual stack operation RFC 2463: Compliance with ICMP RFC 2461: Ruckus support ICMPv6 on the AP and ZD, allowing wireless clients to fully pass IPv6 RFC2461 messages for Neighbour discover of downstream IPv6 devices RFC 2462: support stateless auto configuration RFC 3315: support stateful or DHCPv6 RFC 2710: support MLD

2014-01-11T14:05:44-0800 2014-02-07T13:05:37-0800 https://support.ruckuswireless.com/articles/000001984 2014-01-11T14:05:35-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_311 knowledge_article_311 2013-04-25T13:26:37-0700 000001984 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector AP is not appearing in the ZoneDirector GUI AP not reflecting under ZD GUI>> Configure >>Access point>>No specified AP This is usually a browser cache issue. Try clearing the browser cache, and restarting the browser, or try a different browser. This generally resolves the issue. In some case, restarting the client PC may be required.

2014-01-11T14:05:35-0800 2014-02-07T13:05:34-0800 https://support.ruckuswireless.com/articles/000001975 2014-01-11T14:05:09-0800 monthly 0.8 admin,premium knowledge_article_305 knowledge_article_305 2013-04-25T13:35:53-0700 000001975 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting;Known issues and workarounds Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector How to restore AP configuration alone on ZD First Troubleshooting step: Check with Different browsers and deleting browser cache Importing the APs configuration Analysis on Restoring AP Configuration Settings Only This Feature is available from 9.3 ZD>>Configure>>Access Points 1. ZD backup file can be uploaded in AP Configuration 2. Only the AP related Configuration(Ex.trasmit power,channel port settings) will be applied & all the other configurations will be same(Ex WLAN,roles,users,ACL's). 3. After the file is completely uploaded it asks for 2 options a. Import this backup file and then reboot. b. Import this backup file and additional backup file(s). 4. if you choose the option (a) all the configurations related to AP's will be effected. 5. if u choose (b) and upload another backup file the configurations in 2nd file will be effected.So this option overwrites the previous port configuration. Not sure what is the use case of having multiple backup file upload option Backup file of higher product can be uploaded in lower(Ex. Backup file of ZD-3k can be uploaded to ZD-1K ,ZD-1100) this is only for restoring AP configuration Screenshots: 1. Choose a ZD Backup file and uploded <img alt="User-added image" height="262" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PI77&feoid=00N50000002Cf3M&refid=0EM50000000LHio" width="500"></img> 2.Import the uploaded file. <img alt="User-added image" height="282" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PI77&feoid=00N50000002Cf3M&refid=0EM50000000LHit" width="500"></img> From Help of ZD: <h2> Restoring AP Configuration Settings Only</h2> You can also restore previously saved access point configurations from a backup file without restoring any other ZoneDirector configuration settings. To restore an AP list from a backup file without altering ZoneDirector settings 1. Go to Configure > Access Points. 2. Under the Access Points table, click the Browse button near the line that begins "If you need to import the APs configuration...". 3. Browse to a previously saved backup file, select the file and clickOpen. The page refreshes and the name of the backup file you selected is displayed, along with the option to either import this file and reboot, or import this file and continue importing additional files before reboot. • To import this file only, select Import this backup file and then reboot. ZoneDirector will reboot after loading your AP list. • To import this file and continue importing AP lists from other backup files, select Import this backup file and additional backup file(s). Then click Import. When the import is complete, you will be prompted to import AP configurations from additional backup files. 1. When finished, click Import. ZoneDirector will import all AP configurations from any backup files selected and reboot automatically. You must wait for the reboot process to complete before being able to log back into ZoneDirector. 2. When the reboot process is complete, the restored APs appear in the Access Points table at the top of the page.

Restore AP configuration alone on ZD from GUI

2014-01-11T14:05:09-0800 2014-02-07T13:05:24-0800 https://support.ruckuswireless.com/articles/000002047 2014-01-11T14:03:02-0800 monthly 0.8 admin,premium knowledge_article_343 knowledge_article_343 2013-05-29T11:59:05-0700 000002047 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How to change the IP address of ZDs when they are deployed in smart redundancy mode <div> </div> <div> Question : How to change the Ipaddress of ZDs when they are deployed in smart redundancy mode</div> <div> </div> <div> solution :</div> <div> </div> <div> - First, change the IP address of all the AP's manually by editing each AP at Configure -> Access point's from the active ZD, AP will reboot after changing the IP address.</div> <div> - Next, remove the standby ZD from the network and change the IP address.</div> <div> - Now come to active ZD and change the Peer Device IP Address as same as standby ZD new IP at Configure -> System -> Smart redundancy, then connect standby to network and check what you see in active ZD . </div> <div> - Get confirmed that Smart Redundancy is established, if yes leave the same set up for 15 minutes so that AP reads the information about the changes.</div> <div> - Reboot the active ZD so that all AP's in the active ZD connect to standby ZD.</div> <div> - Remove the active ZD from the network, change the IP address and go to standby ZD and change the Peer Device IP Address as same as active ZD new IP.</div> <div> - Now connect the active ZD to network and check the status in standby ZD. Get confirmed that Smart Redundancy is established, if yes leave the same set up for 15 minutes so that AP reads the information about the changes.</div> <div> - Restart the standby ZD so that all the AP comes back to active ZD.</div> <div> </div> <div> Note: During this process there may or maynot be some network down, please make sure that you do this by taking down time from clients.</div> <div> </div>

2014-01-11T14:03:02-0800 2014-02-07T13:04:36-0800 https://support.ruckuswireless.com/articles/000002079 2014-01-11T14:02:53-0800 monthly 0.8 admin,premium knowledge_article_439 knowledge_article_439 2013-06-01T08:24:39-0700 000002079 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor Is it possible to configure two 7363 AP's in a bridge configuration? No, only the 7731 AP's can function in bridge mode. The 7363 and other indoor/outdoor APs can be part of a mesh configuration, but only in conjunction with a ZoneDirector controller.

2014-01-11T14:02:53-0800 2014-02-07T13:04:32-0800 https://support.ruckuswireless.com/articles/000001369 2014-01-11T14:02:05-0800 monthly 0.8 admin,premium knowledge_article_452 knowledge_article_452 2013-01-15T15:28:25-0800 000001369 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector Configuration file back up inter-operability Yes, provided both units are running the same major version you can migrate a configuration from one ZoneDirector to another of a different model. Note that you cannot go from a ZD3000 to a ZD1100 however. Simply restore the backup from the old unit to the new one.

If I have a ZD1100, can I take a configuration backup and use it on a ZD3000?

2014-01-11T14:02:05-0800 2014-02-07T13:04:13-0800 https://support.ruckuswireless.com/articles/000001900 2014-01-11T14:00:17-0800 monthly 0.8 admin,premium knowledge_article_477 knowledge_article_477 2013-06-12T21:05:46-0700 000001900 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor How do I disable ssh access to the controller/APs? <div> It is not possible to disable SSH login access across the Zonedirector either via GUI or CLI. The only way is to restrict SSH access by configuring your Firewall/Router for blocking SSH port redirection to the Zonedirector. However, we can disable the SSH access on the Access Point. From webgui, Goto Administration : Management > select the Disable SSH. From command line interface, </div> <div> <div> rkscli: get ssh ------- This will get the status of the SSH access.</div> <div> SSH service is enabled</div> <div> OK </div> <div> rkscli: set ssh disable -------- This will disable the SSH access on the Access Point</div> <div> OK</div> <div> rkscli: get ssh</div> <div> SSH service is disabled</div> </div>

2014-01-11T14:00:17-0800 2014-02-07T13:03:28-0800 https://support.ruckuswireless.com/articles/000001623 2014-01-11T13:59:31-0800 monthly 0.8 admin,premium knowledge_article_217 knowledge_article_217 2013-02-12T10:34:33-0800 000001623 Validated (External) Premium Zoneflex 7982 Installation Installation, ZoneFlex 7982 POE switch is not able to power all of our 7982s Please also see Ruckus <a href="https://support.ruckuswireless.com/answers/000001424" target="_blank">7982 POE Switch Interoperability Notice</a> The 7982 advertises itself as a Class 4 PoE device (as do other enterprise class 3-stream APs), which is compatible with 802.3af and 802.3at switches. 802.3af switches re-classify a device with this behavior as 802.3af Class 0 (15.4W), and the vast majority of 802.3at switches classify it as 802.3at Type 1 (15.4W). This implementation is intentional as it maintains compatibility with both 802.3af and 802.3at switches, and allows the 7982 to support full 802.3at power (>15.4W with a future firmware upgrade to support LLDP, if required). Some 802.3at switches will reserve 30W for a Class 4 device by default, and will only power as many devices as their power budget divided by 30W will allow. If a 7982 is plugged in to one of these switches which has already allocated its power budget, that 7982 may be denied power, or another device may be powered down to accommodate the new AP.

Some PoE switches only power a limited number of 7982’s because they reserve 30 Watts per AP and quickly run out of power budget allocation

2014-01-11T13:59:31-0800 2014-02-07T13:03:11-0800 https://support.ruckuswireless.com/articles/000001922 2014-01-11T13:58:34-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_505 knowledge_article_505 2013-06-20T09:34:24-0700 000001922 Validated (External) Public Zoneplanner;ZonePlanner Installation;System network management Installation, System Network Management, ZonePlanner Is there a way to do multi-floor 3D planning with ZonePlanner Q: Is there a way to allow multi-floor planning in a single project? At the moment, it seems that I can only work on a single layout per project. It would be great if we can work on multiple layouts on a single project, and have a way to stack these floors to see how coverage is also affected between floors. A: No currently Zone Planner can’t show multi-floor/3D planning. There is some way to create projects within projects, but it’s really not intuitive to use or view and still doesn’t give you 3D planning. If you just want to show multiple floors on the same project use a screen capture/edit tool to consolidate all the floor plans into 1 project view, but that is likely to make it run very slow if you have lots of structure and APs… Most commonly it's more efficient to use single floor planning for now.

Using a 3D view with AirMagnet ZonePlanner

2014-01-11T13:58:34-0800 2014-02-07T13:02:49-0800 https://support.ruckuswireless.com/articles/000001965 2014-01-11T13:58:10-0800 monthly 0.8 admin,premium knowledge_article_509 knowledge_article_509 2013-07-01T17:04:29-0700 000001965 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor Can AP support info show me radio Tx Power settings? Q: Can AP support info show me radio Tx Power settings? 9.4.3.0.12: ### Radio 1 Config ### wifi1 wifi1 Frequency:5.22 GHz Tx-Power:18 dBm 9.5.1.0.50: ### Radio 1 Config ### 5785-1036 wifi1/wlan-txpower='max' In 9.5+, look thru the rpmkey section of AP support info. The wifi0/wlan-txpower and wifi1/wlan-txpower parameters display current 2.4G and 5G Tx power output settings. Q: Is the 1036 an indicator of Tx power setting? Can we get a list (from code?) of the possibilities? A: We stopped advertising this value as it is not accurate, because this is the value into the antenna and not the EIRP value.

AP Tx Power in Support Info

2014-01-11T13:58:10-0800 2014-02-07T13:02:39-0800 https://support.ruckuswireless.com/articles/000002014 2014-01-11T13:57:58-0800 monthly 0.8 admin,premium knowledge_article_515 knowledge_article_515 2013-07-01T17:10:32-0700 000002014 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor How can I force inactive clients off the AP sooner? --->SSH into cli mode of the AP by using Putty application --->Type rkscli : get inact-timeout <wlan no> EX:get inact-timeout wlan2 rkscli : set inact-timeout <wlan no> <value> Wlan no : wlan0,wlan1,wlan2........ Value : <1-495>

2014-01-11T13:57:58-0800 2014-02-07T13:02:33-0800 https://support.ruckuswireless.com/articles/000002134 2014-01-11T13:57:41-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_517 knowledge_article_517 2013-07-02T11:47:52-0700 000002134 Validated (External) Public Troubleshooting;Known issues and workarounds Troubleshooting, Known Issues and Workarounds Getting error 266 on my Network Policy Server (NPS) "266 NPS received a message that was either unexpected or incorrectly formatted. NPS discarded the message for this reason." The error 266 will occur if there are many unused root certificates in the server. Trouble Shooting Steps: Delete the unused Root certificates from the server.It worked after deleting all the unused certificates on the server. For more information on this please visit http://social.technet.microsoft.com/Forums/en-US/winserverNAP/thread/cd2d5bc8-e89b-474e-a66f-007f20d93a8a/

Customer came with a Query, When the client is trying to authenticate with the NPS server it troughs the error 266.

2014-01-11T13:57:41-0800 2014-02-07T13:02:26-0800 https://support.ruckuswireless.com/articles/000002033 2014-01-11T13:57:24-0800 monthly 0.8 admin,premium knowledge_article_522 knowledge_article_522 2013-07-11T19:10:00-0700 000002033 Validated (External) Premium Zoneflex 7731 Installation;Troubleshooting Installation, Troubleshooting, ZoneFlex 7731 Is it possible to establish connection between a root and non-root bridge when they are working in different firmware ? No it is not possible to establish a link between root and non-root bridge which are running in different firmware, unless you put both the units in same firmware you will be unable to scan the root bridge SSID from the non-root bridge.

Customer is unable to establish connection between a root and non-root bridge

2014-01-11T13:57:24-0800 2014-02-07T13:02:19-0800 https://support.ruckuswireless.com/articles/000002175 2014-01-11T13:57:03-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_525 knowledge_article_525 2013-07-24T18:27:00-0700 000002175 Validated (External) Public Ruckus support services Configuration Configuration, Ruckus Support Services Password to login into the free radius demo application downloaded VMware appliance The password to login into the free radius demo application is ruckus.

Customer downloaded the application free radius demo from http://www.ruckuswireless.com/technology/securehotspot/evaluate want to know the password to login into the application

2014-01-11T13:57:03-0800 2014-02-07T13:02:12-0800 https://support.ruckuswireless.com/articles/000002223 2014-01-11T13:54:11-0800 monthly 0.8 admin,premium knowledge_article_563 knowledge_article_563 2013-09-12T09:08:56-0700 000002223 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector When are SMTP Email Alarms triggered ? Alarm Events On Ruckus ZoneDirector, the customer can be notified by alert Email when an alarm event happens. Those alarm events include: l Rogue AP Detected When ZoneDirector detects a rogue AP on the network, it sends the alarm message. l Rogue Device Detected When ZoneDirector detects an ad hoc network, it sends the alarm message. l AP Lost Connection When ZoneDirector loses connection with an AP and is unable to re-establish connection after 20 minutes, it sends the alarm message. ~ "AP Lost Contact" will be triggered only after 20 mins upon AP gets disconnected from ZD. l SSID-spoofing AP Detected When ZoneDirector detects that an unauthorized AP is spoofing the SSID of one of your APs, it sends the alarm message. l MAC-spoofing AP Detected When ZoneDirector detects that an unauthorized AP is spoofing the MAC address of one of your APs, it sends the alarm message. l Rogue DHCP Server Detected When ZoneDirector detects a rogue DHCP server on the network, it sends the alarm message. l Temporary license expired When ZoneDirector detects that the temporary license expired, it sends the alarm message. l Temporary license will expire When ZoneDirector detects that the temporary license will expire, it sends the alarm message. l LAN Rogue AP Detected When ZoneDirector detects that there is the rogue AP in the LAN, it sends the alarm message. l AAA Server Unreachable When ZoneDirector detects that the AAA server is unreachable, it sends the alarm message. l AP Has Hardware Problem When ZoneDirector detects that the AP has some hardware problem, it sends the alarm message. l Sensor Has Problem When ZoneDirector detects that the sensor has some problem, it sends the alarm message. l Uplink AP Lost When ZoneDirector detects that there is a mesh AP without uplink connection, it sends the alarm message. ~ "Uplink AP Lost" this event is triggered if you see a log on ZD after 90 sec once mesh AP loosing contact with uplink. l Incomplete Primary/Secondary IP Settings When AP keeps no ZoneDirector’s configuration, ZoneDirector sends the alarm message. l [Smart Redundancy] State Changed If the Smart Redundancy is enabled, when ZoneDirector detects that its state has been changed from standby to active, it sends the alarm message. l [Smart Redundancy] Connected (active connected) If the Smart Redundancy is enabled, when standby ZoneDirector detects that it is connected by active ZoneDirector, it sends the alarm message. l [Smart Redundancy] Connected (standby connected) If the Smart Redundancy is enabled, when active ZoneDirector detects that it is connected by standby ZoneDirector, it sends the alarm message. l [Smart Redundancy] Disconnected (active disconnected) If the Smart Redundancy is enabled, when standby ZoneDirector detects that it loses connection with the active one, it sends the alarm message l [Smart Redundancy] Disconnected (standby disconnected) If the Smart Redundancy is enabled, when active ZoneDirector detects that it loses connection with the standby one, it sends the alarm message

Description on SMTP Alarm Events

2014-01-11T13:54:11-0800 2014-02-07T13:01:04-0800 https://support.ruckuswireless.com/articles/000002231 2014-01-11T13:53:53-0800 monthly 0.8 admin,premium knowledge_article_567 knowledge_article_567 2013-09-16T15:33:05-0700 000002231 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector How do I configure Hotspot 2.0/Passpoint? <div> This document addresses the configuration for Hotspot 2.0 on the </div> <div> Samsung Galaxy S4 smartphone. The goal of this document is a successful implementation of this feature. </div> <div> This document provides step-by-step procedures for configuration and testing. Some knowledge of Hotspot 2.0, RADIUS, EAP authentication, WiFi design and 802.11 principles is recommended. <h4> Overview</h4> <div> This document provides a quick guide for configuring a Samsung Galaxy S4</div> <div> as a Hotspot 2.0 client. An understanding of Hotspot 2.0 is assumed. The </div> <div> document is broken into the following main categories: </div> <pre> Configuration file Installing X.509 certificates EAP-SIM EAP-TTLS EAP-TLS EAP-AKA/AKA’ </pre> <h4> What Is Covered Here</h4> <div> The usage cases in this document focus on the functionality listed for </div> <div> Release 1 in the Wi-Fi Alliance Passpoint certification tests.</div> <h4> Requirements for this Document</h4> <div> In order to successfully follow the steps in this document, the following </div> <div> equipment (at a minimum) is required and assumed:</div> <div> ? Samsung Galaxy S4 handset1</div> <div> ? USB cable to connect phone to computer for configuration file loading</div> <div> ? RADIUS server</div> <div> ? Wireless LAN that supports Hotspot 2.0 Release 1 (there is a separate </div> <div> Ruckus Tech Note addressing the ZoneDirector and Radius configurations for Hotspot 2.0)</div> </div>

2014-01-11T13:53:53-0800 2014-02-07T13:00:57-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PE6kCAG?attachment_index=0 2014-02-07T13:00:57-0800 monthly admin,premium knowledge_article_567 knowledge_article_567_attachment_1 RTN_Samsung-GS4-HS2.0v1.1.pdf 1032020.0 application/pdf https://support.ruckuswireless.com/articles/000002299 2014-01-11T13:51:39-0800 monthly 0.8 admin,premium knowledge_article_596 knowledge_article_596 2013-10-29T21:00:09-0700 000002299 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Installation;System network management;Troubleshooting Performance, Installation, System Network Management, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor In PCAP why do I see high DNS Traffic on Swtch port connected to a Standalone AP <div> <img alt="User-added image" height="285" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIC4&feoid=00N50000002Cf3M&refid=0EM50000000LN9u" width="500"></img> Issue: High DNS Traffic on AP </div> <div> Environment: </div> <div> IP address of the AP: 192.168.3.25</div> <div> DNS Configured on the AP: 192.168.3.1</div> <div> In the above network, PCAP on AP port which is connected to the Switch we were able to see DNS packets from the AP to 8.8.8.8. </div> <div> Issue Triggers: </div> <div> When we browse any domain from the client then we were able to see DNS Packets to 8.8.8.8, even though the DNS was set to 192.168.3.1 on the AP. </div> <div> Explanation: </div> <div> When we enable Local Subnet option on the AP, then AP does NAT and the traffic coming out of the AP port would always be from the IP of the AP independent of client IP address. But the DNS traffic coming out of the AP port would actually be coming from the Client. </div> <div> But why 8.8.8.8 when the DNS is set as 192.168.3.1. -> This is because of configuring 8.8.8.8 as Static DNS on the Client machine. </div> <div> So when local subnet option is enabled on the AP and client is assigned a static DNS then PCAP on the AP port will reflect that the traffic is from the AP and to the Static DNS IP configured on Client.</div>

2014-01-11T13:51:39-0800 2014-02-07T13:00:11-0800 https://support.ruckuswireless.com/articles/000002155 2014-01-11T13:51:16-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_603 knowledge_article_603 2013-11-05T17:02:43-0800 000002155 Validated (External) Public Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation Configuration, Installation, ZoneDirector Can I migrate my ZD system to a different model ZD system? One can migrate up but not down. One can go from a ZD1k to a ZD1100 system and even directly to a ZD5k but we do not support loading the backup file of a ZD1100 into a ZD1000. See attached document for further details and procedure.

2014-01-11T13:51:16-0800 2014-02-07T13:00:02-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PDyHCAW?attachment_index=0 2014-02-07T13:00:02-0800 monthly admin,premium,warranty,guest knowledge_article_603 knowledge_article_603_attachment_1 Migrating Ruckus ZDs.pdf 251309.0 application/pdf https://support.ruckuswireless.com/articles/000002242 2014-01-11T13:51:11-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_602 knowledge_article_602 2013-11-05T17:03:08-0800 000002242 Validated (External) Public Zoneflex outdoor Installation Installation, ZoneFlex Outdoor Is there an outdoor AP that supports external antenna on 2.4Ghz ? The only Ruckus outdoor AP that supports External Antenna on 2.4Ghz radio is ZF7782-E, the model of the External Antenna are AT-0005-VP and AT-0006-HP.

2014-01-11T13:51:11-0800 2014-02-07T13:00:00-0800 https://support.ruckuswireless.com/articles/000001920 2014-01-11T13:51:03-0800 monthly 0.8 admin,premium knowledge_article_503 knowledge_article_503 2013-06-20T09:47:32-0700 000001920 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Configuration Performance, Configuration, ZoneFlex Indoor, ZoneFlex Outdoor Q: I'm looking for CLI commands to reactivate BandSteering when I activate SmartMesh I'm looking for the CLI command to reactivate the BandSteering when I activate the SmartMesh I'm sorry, but Band steering will not work when Smart Mesh is enabled. However, we do provide you the CLI commands to generally disable/enable band steering. [Dual-band APs only.] For dual-band Ruckus devices, the band-steering command is used to enable or disable steering clients to the 5GHz band when possible. If the RSSI threshold is set to 1, all 5GHz capable clients will be redirected to the 5GHz radio. Syntax:g et band-steering <wlan name> -- Get band steering RSSI threshold set band-steering <wlan name> mesh-ap [enable|disable] rssi --Enable band steering, modify RSSI threshold Example rkscli: get band-steering Band Steering: Under Mesh AP : Off OK rkscli: set band-steering mesh-ap enable 20 OK rkscli: get band-steering wlan0 Band Steering: Under Mesh AP : On RSSI Threshold: 20 OK

What are the commands to activate BandSteering with SmartMesh

2014-01-11T13:51:03-0800 2014-02-07T12:59:57-0800 https://support.ruckuswireless.com/articles/000001934 2014-01-11T13:49:55-0800 monthly 0.8 admin,premium knowledge_article_627 knowledge_article_627 2013-11-22T13:57:15-0800 000001934 Validated (External) Premium Zonedirector;Zoneflex 7962;Zoneflex 7300 series;Zoneflex 7762;Zoneflex 7762 s;Zoneflex 7761 cm;Zoneflex 7731;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex 7962, ZoneFlex 7300 Series, ZoneFlex 7762, ZoneFlex 7762 S, ZoneFlex 7761 CM, ZoneFlex 7731 Is it possible to disable 802.11h on 5GHz? <div> Is it possoble to Disable/Enable 802.11h on the Ap?</div> <div> </div> <div> Yes,its possible through CLI comands either we can enable or disable 802.11h (interference with satellites and radar using the same 5 GHz frequency band)on the AP </div> <div> </div> <div> </div> <div> CLI commands On ZD managed Access Point</div> <div> </div> <div> ruckus>en </div> <div> ruckus# debug </div> <div> ruckus(debug)#remote_ap_cli -A set 802.11-h wifi1 disable (disable 802.11h on all the access points connected to the ZD) </div> <div> ruckus(debug)#remote_ap_cli -a (MAC address of the AP) set 802.11-h wifi1 disable (disable 80211.h on a particular access point</div> <div> Command Execution Summary: " OK " Success = 1 Failure = 0 Total = 1</div> <div> </div> <div> CLI commands On Standalone Access Point </div> <div> </div> <div> rkscli : set 802.11-h Wifi name(Wifi1) enable/disable (Enabling/Disabling 802.11h on Stand Alone AP, Wifi0 = 2.4GHz Radio, Wifi1 = 5GHz Radio) Command Execution Summary: " OK " </div>

Yes,its possible through CLI commands

2014-01-11T13:49:55-0800 2014-02-07T12:59:33-0800 https://support.ruckuswireless.com/articles/000002356 2014-01-11T13:49:46-0800 monthly 0.8 admin,premium knowledge_article_625 knowledge_article_625 2013-11-22T14:00:25-0800 000002356 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration Configuration, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor What would be the MTU size for MPLS link Issue: AP's Stuck in Provisioning Loop. Environment: Two AP's that are located in Remote Location using MPLS Link are stuck in Provisioning Loop where as some AP's in another remote location using VPN Tunnel are connected to the ZD. Tunnel MTU size is set to 1100 on the ZD Resolution: MTU size should be smaller than the MTU of the MPLS Link. You can determine the MTU for any destination using the below commands and then set MTU accordingly For Windows computers, use the following command for the ping test: ping [url / local server or IP address] –f –l xxxx • For example: “ping www.yahoo.com –f –l 1472” For Mac® computers, use the following command for the ping test: ping [url / local server or IP address] –d –s xxxx • For example: “ping www.yahoo.com –d –s 1472” Minimum size of MTU can be set on the ZD is 850. Change the Tunnel MTU under Configure :: Access Points :: Tunnel MTU Size.

2014-01-11T13:49:46-0800 2014-02-07T12:59:30-0800 https://support.ruckuswireless.com/articles/000002319 2014-01-11T13:49:04-0800 monthly 0.8 admin,premium knowledge_article_660 knowledge_article_660 2013-11-25T09:04:43-0800 000002319 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Troubleshooting Configuration, Troubleshooting, ZoneDirector Why don't I receive email alerts of SNMP Traps from my ZoneDirector? SNMP server associated to ZoneDirector fails to receive Traps messages which caused SNMP to stop sending E-mail alerts. The trap messages are not hitting the SNMP server as there are no event logs generated on ZD with Severity "Low" & "Medium". Changed the Syslog level to "Show more" on the ZD and Issue got resolved. ZoneDirector >> Configure >> System >> Log Settings changed Event Log Level to "Show more" from Critical Events Only

SNMP server integrated with ZoneDirector fails to receive Traps messages which caused SNMP sending to stop sending E-mail alerts.

2014-01-11T13:49:04-0800 2014-02-07T12:59:14-0800 https://support.ruckuswireless.com/articles/000002371 2014-01-11T13:48:59-0800 monthly 0.8 admin,premium,warranty,guest knowledge_article_659 knowledge_article_659 2013-11-25T11:36:02-0800 000002371 Validated (External) Public Zonedirector;Zoneflex indoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Firmware;Troubleshooting;Known issues and workarounds Firmware, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor Version to manage ZF7372 -E by ZD(1100/3000/5000) To manage ZF7372-E the Zone Director(1100/3000/5000) should be in version 9.6 or above

2014-01-11T13:48:59-0800 2014-02-07T12:59:12-0800 https://support.ruckuswireless.com/articles/000002376 2014-01-11T13:48:55-0800 monthly 0.8 admin,premium knowledge_article_658 knowledge_article_658 2013-11-26T07:11:42-0800 000002376 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 System network management System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why the AP's MIB OID sequence is not in order Description: The AP description OID numbers are not displaying in order when we poll the AP through SNMP walk. We see the OID's in random number, if we look in to two consecutive AP OID's as shown below. Example : - .6.36.201.161.0.245.240 - log-car-mr .6.36.201.161.0.255.64 - h1-bay8a <img alt="User-added image" height="76" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PI9t&feoid=00N50000002Cf3M&refid=0EM50000000LOJv" width="500"></img> Reason for the random OID display: <div style="color: rgb(40, 40, 40); font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px; background-color: rgb(255, 255, 255); "> In ruckusZDWLANAPTable, we use AP’s mac address as index to match AP's, so the output cannot have the sequence numbers. The OID value is converted MAC address of the AP. Explanation on the OID value of AP description: In the OID description the first value represents the total length of the string which is '6' and the rest six numbers represents the converted mac address of the AP. Example value: .6.36.201.161.0.245.240 </div> This is how the current design works.

Why the AP's MIB OID numbers are not in a sequence order. Why are they displayed in a random order.

2014-01-11T13:48:55-0800 2014-02-07T12:59:11-0800 https://support.ruckuswireless.com/articles/000002364 2014-01-11T13:48:39-0800 monthly 0.8 admin,premium knowledge_article_655 knowledge_article_655 2013-11-26T07:14:33-0800 000002364 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;Troubleshooting;Known issues and workarounds Performance, Configuration, Troubleshooting, Known Issues and Workarounds, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why Mesh forming messages on root AP <div> When the Mesh Mode of an AP (Configure::Access Point > Edit) is set to Auto, then the AP will regularly verify that it can reach the Zone Director via its wired interface only through heartbeat messages.</div> <div> If the Zone Director stops responding to this heartbeat test then at some point the AP will think it has been turned into a MESH AP, and will try to bring up its MESH interface and connect to another Root AP. </div> <div style="text-align: center; "> </div> <div style="text-align: center; "> <img alt="User-added image" height="121" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PI9e&feoid=00N50000002Cf3M&refid=0EM50000000LNeE" width="500"></img> </div> <div> If the wired connectivity is flapping (going up and down) due to physical connectivity its may because of switch port, AP port, or even ZD port and/or settings, then when it is again connected to the ZD via wire, the MESH connection will temporarily create a loop, causing network issues</div> <div> </div> <div> So firstly this indicates a problem with the wired (Physical) connection that needs to be investigated. Root AP’s should stay solidly connected via wire to the Zone Director with out any issues with physical connectivity. </div> <div> </div> <div> Second, you can prevent loops from occurring .This is important when some wired network, wireless, or non-local connection is used in the backhaul between Root AP’s and Zone Director. </div>

2014-01-11T13:48:39-0800 2014-02-07T12:59:05-0800 https://support.ruckuswireless.com/articles/000002418 2014-01-11T13:48:14-0800 monthly 0.8 admin,premium knowledge_article_648 knowledge_article_648 2013-11-30T13:45:01-0800 000002418 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Why wireless clients are not able to connect to the ssid with 802.1x authentication Wireless clients when they connect to the ssid with 802.1x configuration fail to connect and they throw an error message " unable to connect". Trouble shooting steps tried : <ol><li> Verified the SSID configuration for the client.</li><li> Verified the client side settings to make sure that it is compatible for 802.1x authentication </li><li> Looked in to AAA server settings, we should see that the authentication method is set to CHAP.</li><li> Verified network connectivity between the zone director and the active directory </li><li> Created a new active directory as a AAA server for testing purpose and validate the user name and password between the zd and AD</li><li> Created a test user from the active directory with dial in Access. </li></ol> <div> </div> <div> If we still see the same problem where they see a message " Windows unable to connect" to the network </div> <div> </div> <div> Please check the event viewer , if we see a audit failure message related to user name with a reason code 266 which indicates that there is an issue with NPS server configuration. Below is a KB from Microsoft which states that this is an issue on the server side.</div> <div> </div> <div> http://support.microsoft.com/kb/933430 is link for the reference which says that this is an issue on the server end. </div> <div> </div> <div> Suggestion is to go through the knowledge base of Microsoft and do the necessary steps to fix the issue on the server end.</div>

Why wireless clients are not able to connect to the ssid with 802.1x authentication

2014-01-11T13:48:14-0800 2014-02-07T12:58:55-0800 https://support.ruckuswireless.com/articles/000002413 2014-01-11T13:48:02-0800 monthly 0.8 admin,premium knowledge_article_645 knowledge_article_645 2013-11-30T16:14:33-0800 000002413 Validated (External) Premium Zoneflex indoor Configuration;Security Configuration, Security, ZoneFlex Indoor How to configure WEP-Shared authentication on Standalone ZF7982 From 9.4 standalone Firmware we have removed WEP-Shared authentication method on all standalone Access Points as it's not a secured authentication. And ZF7982 is not supported with firmware below 9.4 version. We have completely removed "Shared" Authentication mode when Encryption Method is WEP. <div style="text-align: center; "> <img alt="User-added image" height="168" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PI9F&feoid=00N50000002Cf3M&refid=0EM50000000LOUZ" width="500"></img></div>

Standalone ZF7982 Access Points support for WEP-Shared authentication

2014-01-11T13:48:02-0800 2014-02-07T12:58:50-0800 https://support.ruckuswireless.com/articles/000002392 2014-01-11T13:47:10-0800 monthly 0.8 admin,premium knowledge_article_633 knowledge_article_633 2013-12-01T14:55:56-0800 000002392 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration Configuration, ZoneFlex Indoor, ZoneFlex Outdoor Client OS and Host name information in stand alone AP The client finger printing will work by looking two options in DHCP request packet. -->Option 55 and option 60. From option 60 we can see the client os type directly from the vendor ID, some clients will not use the option 60 then we will relay on option 55 based on the parameter sequence number order <img alt="User-added image" height="179" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PI8R&feoid=00N50000002Cf3M&refid=0EM50000000LOQI" width="500"></img> Host name: <div> DHCP option 12, clients insert their host name into this option in DHCP requests. we will use this information to indentify the host name.</div> We can find the OS and host information at Status-->2.4g or 5g-->SSID-->connected devices-->click on Mac address, -->To view all clients connected clients with OS and host name use the below command. get client-info wlan0

To find the client OS and host name in stand alone AP

2014-01-11T13:47:10-0800 2014-02-07T12:58:31-0800 https://support.ruckuswireless.com/articles/000002388 2014-01-11T13:47:05-0800 monthly 0.8 admin,premium knowledge_article_631 knowledge_article_631 2013-12-01T14:57:09-0800 000002388 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Performance;Troubleshooting;Known issues and workarounds Performance, Troubleshooting, Known Issues and Workarounds, ZoneFlex Indoor, ZoneFlex Outdoor <div> - Network cards disconnect from the network a and give "limited or no connectivity" error after the connection is idle for a certain period. - Disabling Power Management for the Network Interface Card works around the problem</div> <div> - On Windows device go to Device Manager :: Network Adapters :: Power Management and uncheck "Allow the computer to turn off this device to save power".</div>

2014-01-11T13:47:05-0800 2014-02-07T12:58:29-0800 https://support.ruckuswireless.com/articles/000002458 2014-01-11T13:45:32-0800 monthly 0.8 admin,premium knowledge_article_677 knowledge_article_677 2013-12-26T16:16:57-0800 000002458 Validated (External) Premium Why am I not getting the wire speed on the pass through port on 7055 The Ethernet speed is set to 100 and the duplex is half. The LAN5 POE should support 1000 mbps / Full duplex however is showing 100 Mbps/Half The output below shows the interfaces stats on the 7055 Port Interface 802.1X Logical Link Physical Link Label ----------------------------------------------------------------- 4 eth0 None Up Up 100Mbps half POE IN, LAN5/UPLINK 0 eth1 None Down Down LAN4 1 eth2 None Down Down LAN3 2 eth3 None Down Down LAN2 3 eth4 None Down Down LAN1 Executed the command below to set the eth speed on the AP's port: set ethspeed {<ifname>|<port num>} <connect speed> ifname: The ethernet port number , example eth0/eth1 etc. Applying the manual port speed changes have allowed us to negotiate properly.

2014-01-11T13:45:32-0800 2014-02-07T12:57:57-0800 https://support.ruckuswireless.com/articles/000002170 2014-01-11T13:44:39-0800 monthly 0.8 admin,premium knowledge_article_680 knowledge_article_680 2013-12-30T09:51:12-0800 000002170 Validated (External) Premium Flexmaster;FlexMaster Configuration;Installation Configuration, Installation, FlexMaster How to create CSR through Open SSL for FlexMaster Firstly you have to install OpenSSL, then please follow these steps to generate CSR, 1. Generate private key. Last parameter is key’s length. openssl genrsa -out cakey.pem 4096 2. Generate CSR with private key file. openssl req -new -config ../openssl.cnf -out careq.csr -key cakey.pem After getting careq.csr file, you could use this CSR file to sign a new certificate from certificate authority like VeriSign.

How to create CSR through Open SSL for FlexMaster

2014-01-11T13:44:39-0800 2014-02-07T12:57:42-0800 https://support.ruckuswireless.com/articles/000002228 2014-01-11T13:44:34-0800 monthly 0.8 admin,premium knowledge_article_679 knowledge_article_679 2013-12-30T12:37:07-0800 000002228 Validated (External) Premium Zonedirector;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Troubleshooting Troubleshooting, ZoneDirector Clients are able to browse the internet,But my clients see an exclamation in Yellow color stating " No Internet Access" Often we see windows clients that there is a warning message stating " No internet Access". However you see that clients are able to access the internet without any issues. If the clients are able to go to the internet , however see a status message as stated above, It could be an issue with the DNS server which is not properly configured on the network or the clients are not able to reach the DNS server configured in the network. Trouble shooting steps: 1. Check if a proper DNS entry is configured on stand alone AP. 2. Verify if the clients are able to reach the DNS server configured. 3. Use public DNS ip in place of local DNS server to check if this is an issue with the local DNS server.

Clients are able to browse the internet,But they see an exclamation in Yellow color stating " No Internet Access"

2014-01-11T13:44:34-0800 2014-02-07T12:57:40-0800 https://support.ruckuswireless.com/articles/000001877 2014-01-13T14:03:00-0800 monthly 0.8 admin,premium knowledge_article_268 knowledge_article_268 2013-03-25T11:56:45-0700 000001877 Validated (External) Premium Zoneflex indoor;Zoneflex outdoor Configuration;Troubleshooting Configuration, Troubleshooting, ZoneFlex Indoor, ZoneFlex Outdoor Is it possible to enable/disable 802.11d for specific wlan in stand alone AP? The answer is Yes. We have to execute the below command in standalone AP for enable/disable the 802.11d for specific wlan. Procedure as follows, SSH in to the AP CLI using putty application. rkscli : set countryie <wifi name> {enable|disable} <wifi name> can be wlan1/wlan2/wlan3. Ex: rkscli : set countryie wlan1 enable. Note : By default 802.11d option will be disabled for wlans. To verify setting, get countryie <wifi name> Example: rkscli: get countryie wlan1 Country IE is OFF/ON OK

2014-01-13T14:03:00-0800 2014-02-07T12:57:26-0800 https://support.ruckuswireless.com/articles/000002515 2014-01-21T11:19:50-0800 monthly 0.8 admin,premium knowledge_article_721 knowledge_article_721 2014-01-21T11:19:50-0800 000002515 Validated (External) Premium Zoneflex 7731 Configuration Configuration, ZoneFlex 7731 Is it possible to take a configuration back-up from ZF7731 and restore on another ZF7731 if required ? Its only possible to take a configuration backup from root bridge and restore it on a non root bridge to establish the link, this backup can not be restored on a new root bridge if the earlier one goes faulty, the below Q&A will help you understand better, 1) Is there a option to take a back-up of configuration from root bridge which can be used in case if root bridge goes down or if there is a hardware failure ? - Unfortunately, as of now there is no option to take a back up of configuration that can be restored at a latter point time, the only option is to completely reconfigure the root bridge, 2) Is there a option to take a back-up of configuration from root bridge which can be restored into the non-root bridge in-order to mirror the configuration and establish the the link, - Yes this can be certainly done, which helps to mirror the configuration and establish the link to root bridge, and in-case if the non-root bridge fails, backup can be taken from root bridge to restore to non-root bridge, please use the following steps to achieve this, Manual Provisioning using a Local File To provision a Non-Root Bridge using a local file 1. In the Root Bridge’s Web interface, go to Configuration > Wireless. 2. Locate the Export Configuration section, and click the Save Configuration to local file link. 3. Save the file to a convenient location on your Admin computer. 4. Disconnect the Admin computer from the Root Bridge, and connect it to the new bridge that you will configure as a Non-Root Bridge. 5. Log into the Web interface (Root: 192.168.2.1; Non-Root: 192.168.2.254). 6. The Manual Provisioning Wizard launches. 7. For Wireless Bridge Mode, select Non-Root Bridge, and click Next. <div> 8. Locate the Import Configuration field, and click Browse (or type in the path and</div> <div> filename in the field).</div> <div> 9. Select the file that you saved to your local computer in Step 2, and click Next.</div> <div> 10. The overview page entitled “Your Setup” displays the configuration information</div> <div> that was imported from the Root Bridge.</div> <div> 11. Click Reboot to restart the new Non-Root Bridge and save configuration changes.</div> <div> 12. Once the reboot is complete, the new Non-Root Bridge is provisioned with</div> <div> parameters matching those of the Root Bridge.</div> <div> 13.Repeat this process for additional Non-Root Bridges, if needed. Please note, we already have a open feature request for backup and restore for Access points, but we don't have a ETA on which future release it will be incorporated.</div>

Deployment has a ZF7731 bridge link and would like to know the possibilities of taking a configuration backup in case if the bridge goes down faulty,

2014-01-21T11:19:50-0800 2014-02-07T12:57:09-0800 https://support.ruckuswireless.com/articles/000002533 2014-01-23T02:22:31-0800 monthly 0.8 admin,premium knowledge_article_719 knowledge_article_719 2014-01-23T02:22:31-0800 000002533 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance;Configuration;System network management Performance, Configuration, System Network Management, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Can I adjust the QoS marking of LWAPP traffic? Get an SSH connection into the ZD CLI <ul><li> For DSCP decimal value of 26, use the following syntax to change the LWAPP data and control traffic ToS marking </li><li> (0x68 is mission critical priority)</li><li> NOTE : setting the data ToS on the Tunnel will affect all data in the tunnel which is not otherwise marked.</li></ul> <div> set_qos sys tunnel-tos-val data 0x68</div> <div> </div> <div> set_qos sys tunnel-tos-val ctrl 0x68</div> <ul><li> 0x68 sets DSCP Hex 0x1A</li></ul> Reference the Chart below to determine the desired ToS/DSCP marking for LWAPP traffic ( Ref: URL in related articles) (Note Default setting for ZD tunnel ToS 0xA0 = DSCP Hex 0x28, or DSCP decimal 40) <img alt="User-added image" height="446" src="https://c.na3.content.force.com/servlet/rtaImage?eid=ka250000000PIY0&feoid=00N50000002Cf3M&refid=0EM50000000LQ8a" width="500"></img>

LWAPP traffic is by default set to a high priority over the tunnel between ZD and AP, which sometimes is not desired or may have a negative impact on managed bandwidth over a PTP WAN link between these devices and I would like to lower the priority of LWAPP traffic over my WAN link.

2014-01-23T02:22:31-0800 2014-02-07T12:57:05-0800 http://support.ruckuswireless.com/article_attachments/kA250000000PEbACAW?attachment_index=0 2014-02-07T12:57:05-0800 monthly admin,premium knowledge_article_719 knowledge_article_719_attachment_1 ZD lwapp DSCP.jpg 129146.0 image/jpeg https://support.ruckuswireless.com/articles/000002314 2014-01-24T14:13:56-0800 monthly 0.8 admin,premium knowledge_article_715 knowledge_article_715 2014-01-24T14:13:56-0800 000002314 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Performance Performance, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor The issue was Slow Throughput on a standalone AP. The customer was getting somewhere around 5-10 mbps on the wireless clients. On the wired eth port on the AP the client was getting 50 mbps. There was no interference. The customer was connected at 11 mbps with the data rate settings on the laptop set to "best rates" RTS/CTS was enabled on the 2.4 ghz and 5 Ghz was disabled. The issue was found out to be with the wireless connectivity on the AP itself. WPA Algorithm: was set to TKIP ** 11n performance not available with TKIP algorithm ** Changed it to AES and the wireless client got 46mbps. Issue resolved.

Slow Throughput on a standalone AP

2014-01-24T14:13:56-0800 2014-02-07T12:56:53-0800 https://support.ruckuswireless.com/articles/000002554 2014-01-27T18:43:47-0800 monthly 0.8 admin,premium knowledge_article_710 knowledge_article_710 2014-01-27T18:43:47-0800 000002554 Validated (External) Premium Zonedirector;Zoneflex indoor;Zoneflex outdoor;ZoneDirector Remote Control;ZoneDirector 1000;ZoneDirector 1100;BPG_ZoneDirector;ZoneDirector 1200;ZoneDirector 3000;ZoneDirector 5000 Configuration;Installation;Troubleshooting Configuration, Installation, Troubleshooting, ZoneDirector, ZoneFlex Indoor, ZoneFlex Outdoor Setting the management vlan through the Web GUI --> Hard Reset the AP (factory configuration) -->Connect a Ethernet cable into POE/10/100/1000 port of the access point (Example :eth2) -->Find the IPaddress from the DHCP server. -->Log into the Access Point -->Configure a Static IP address (use the DHCP address if needed) , Subnet Mask, Gateway and DO NOT SET A MANAGEMENT VLAN ID for the Static address yet. -->Create a Local Subnet 1 up with default IP address 192.168.40.1 -->Set DHCP with a small range (192.168.40.100-192.168.40.101) -->Go to Ethernet port configuration and change the Packet forward on Eth0(Example) to Local subnet NAT and route to WAN,Leave VLAN ID to default -->Leave eth2 setup as Access port -->Leave VLAN ID to default -->Connect a laptop(Set to receive IP address from DHCP) directly to Eth0 , it should receive IP from Local subnet1. -->Now we should be able to access the WEB interface with local subnet Local IP address OR the IP address of the Access point. -->Change the Ethernet port status of Eth2 to trunk and also the management vlan on the Access point. SSH into the Access point and give the command set director ip <ip address of ZD> reboot -->Now the device will join the ZD successfully and we will be able to access it

Setting the management vlan through the Web GUI

2014-01-27T18:43:47-0800 2014-02-07T12:56:42-0800