• In Location Information, enter Location ID and Location Name WISPr attributes,
as specified by the WiFi Alliance.
• In Walled Garden, enter network destinations (URL or IP address) that users can
access without going through authentication. A Walled Garden is a limited
environment to which an unauthenticated user is given access for the purpose of
setting up an account. After the account is established, the user is allowed out
of the Walled Garden.
• In Restricted Subnet, define L3/4 IP address access control rules for the hotspot
service to allow or deny wireless devices based on their IP addresses.
• Under Advanced Options, enable Intrusion Prevention to temporarily block hotspot
clients that fail repeated authentication attempts. When this option is enabled, if
the same station attempts to authenticate 10 times unsuccessfully within 300
seconds, the station will be blocked for 300 seconds. If the same user
unsuccessfully attempts to authenticate 30 times within the same time period,
the user will be blocked for 300 seconds.
11.
Click
OK
to save the hotspot settings.
The page refreshes and the hotspot service you created appears in the list. You may
now assign this hotspot service to the WLANs that you want to provide hotspot Internet
access, as described in Assigning a WLAN to Provide Hotspot Service.
Figure 126: Creating a Hotspot service
NOTE
If ZoneDirector is located behind a NAT device and signed certificates are used
with portal authentication, a static entry must be added to the DNS server to resolve
ZoneDirector's private IP address to its FQDN. Otherwise, client browsers may enter an
infinite redirect loop and be unable to reach the login page. Before the signed certificate
gets added the client gets redirected to the IP address of the ZD instead of the FQDN.
Ruckus Wireless ZoneDirector™ Release 10.0 User Guide
182
Managing a Wireless Local Area Network
Working with Hotspot Services
