Ruckus Cloud
Configure Ruckus Cloud-managed access points with IronWifi's cloud-based RADIUS authentication and external captive portal. This guide walks through cloud portal configuration for RADIUS services, guest access portal setup, walled garden configuration, and WPA2-Enterprise deployment for secure guest and employee WiFi networks.
Prerequisites
In Ruckus Cloud:
- Active Ruckus Cloud account
- Access to cloud.ruckuswireless.com
- At least one cloud-managed access point
- Administrative permissions for your organization and venue
In IronWifi Console (complete these first):
-
Create a Network
- Navigate to Networks and click Create Network
- Note the RADIUS server details:
- Primary RADIUS Server IP
- Backup RADIUS Server IP (optional)
- RADIUS Authentication Port (1812)
- RADIUS Accounting Port (1813)
- Shared Secret
-
Create a Captive Portal
- Navigate to Captive Portals and click Create Captive Portal
- Select Vendor: Ruckus
- Note the Splash Page URL provided
- Copy the Walled Garden domains list
Ruckus Cloud Configuration
Access Portal
- Log into cloud.ruckuswireless.com
- Select your organization and venue
Step 1: Configure RADIUS
- Navigate to Admin & Services → Services
- Click Add Service
- Select RADIUS
- Configure:
- Name: IronWifi
- Primary Server:
{Primary IP} - Auth Port:
1812 - Secret:
{Secret}
- Click Save
Step 2: Configure Guest Portal
- Navigate to Admin & Services → Guest Access
- Create new guest portal
- Select External type
- Configure:
- Portal Name: IronWifi-Portal
- Splash Page URL:
{IronWifi Splash URL}
Step 3: Configure Walled Garden
In the Guest Portal settings:
-
Navigate to Walled Garden section
-
Add the following required entries:
107.178.250.42*.ironwifi.com*.ironwifi.netsplash.ironwifi.com
-
If using social login providers, add their domains:
| Provider | Required Entries |
|---|---|
*.google.com, *.googleapis.com, *.gstatic.com, accounts.google.com | |
*.facebook.com, *.fbcdn.net, connect.facebook.net, facebook.com | |
*.linkedin.com, *.licdn.com, linkedin.com | |
| Twitter/X | *.twitter.com, *.twimg.com, twitter.com, *.x.com, x.com |
| Apple | *.apple.com, *.icloud.com, appleid.apple.com |
| Microsoft/Azure AD | *.microsoft.com, *.microsoftonline.com, *.msftauth.net, login.microsoftonline.com |
| Stripe | *.stripe.com, js.stripe.com |
| PayPal | *.paypal.com, *.paypalobjects.com |
| Twilio (SMS) | *.twilio.com |
Step 4: Create WLAN
- Navigate to WiFi Networks
- Click Add WiFi Network
- Configure:
- Name: Guest-WiFi
- Type: Guest
- Portal: IronWifi Guest Portal
- Authentication: IronWifi RADIUS service
WPA-Enterprise
For 802.1X authentication without captive portal:
- Create WiFi Network
- Set security to WPA2-Enterprise
- Select IronWifi RADIUS service
- Configure encryption method (AES recommended)
Testing
Once configuration is complete, verify everything is working properly:
Test Captive Portal
- Connect a test device to the Guest WiFi network
- Open a web browser
- You should be automatically redirected to the IronWifi splash page
- Complete the authentication process
- Verify internet access is granted after authentication
Test Enterprise Authentication
- Connect a device to the WPA-Enterprise network
- Enter valid credentials when prompted
- Verify successful connection
- Check authentication logs in IronWifi Console
Troubleshooting
If you encounter issues during setup or operation, use this reference to diagnose and resolve common problems:
| Symptom | Possible Cause | Solution |
|---|---|---|
| RADIUS service inactive | Service not enabled | Verify RADIUS service is active in Admin & Services |
| RADIUS authentication failed | Incorrect server IP | Check that RADIUS server IP matches IronWifi Console |
| RADIUS authentication failed | Wrong shared secret | Verify shared secret matches exactly in both systems (case-sensitive) |
| RADIUS authentication failed | Firewall blocking traffic | Ensure ports 1812 and 1813 are open to IronWifi servers |
| Guest portal not appearing | Incorrect portal URL | Check that Splash Page URL matches IronWifi Console |
| Guest portal not appearing | Portal not linked to WLAN | Verify guest portal is selected in WiFi Network settings |
| Guest portal not appearing | Missing Walled Garden entries | Add all required IronWifi domains to Walled Garden |
| Authentication succeeds but no internet | Client isolation enabled | Check WiFi Network isolation settings |
| Social login not working | Missing provider domains | Add all required domains for the social provider to Walled Garden |
| Portal appears in cached state | Browser caching | Test from incognito/private browser window |
| Clients not appearing in logs | Accounting not configured | Verify RADIUS accounting is enabled and port 1813 is configured |
For detailed error information:
- Review Ruckus Cloud logs: Monitor → Event Logs
- Review IronWifi logs: Analytics → Authentication Logs
- Check active client sessions: Monitor → Clients