Ruckus Wireless ZoneDirector 1200, Руководство пользователя

Страница: 334 / 361

Figure 244: Ruckus PKI certificates successfully installed
You have completed upgrading your ZoneDirector and connected APs with the new
RPKI certificates and keys.
Wildcard Certificate Installation
A wildcard certificate is a generic certificate that can be used for multiple devices in a
specific domain. This is useful for Smart Redundancy installations where you have two
ZoneDirectors. You can purchase and install two certificates, or use a wildcard certificate.
When you try to import a wildcard certificate, the ZoneDirector will notify you that it does
not have the matching private key. At this point, click on the “click here” link to import
the private key. Once the private key is imported, try to import the certificate again. The
ZoneDirector will prompt you for the host name. Enter the hostname and ensure that
your DNS server is configured to resolve that name to the IP address of ZoneDirector.
Wildcard Certificates In Smart Redundancy With Captive Portals
In order to prevent redirect loops when deploying SSL certificates in a Smart Redundant
following wildcard certificate procedure:
1. Purchase or generate a self-signed wildcard certificate such as *.acompany.com and
install it on both ZoneDirectors in the Smart Redundant pair.
2. In DNS, add 3 host/IP entries similar to the following
• management.acompany.com; 192.168.0.100: This is the FQDN you wish to use
for reaching the shared virtual management interface and is mapped to its
configured IP address
• primary-zd.acompany.com; 192.168.0.98: This is the FQDN for the primary ZD
controller and its physical IP address.
• backup-zd.acompany.com; 192.168.0.99: This is the FQDN for the backup ZD
controller and its physical IP address
Ruckus Wireless ZoneDirector™ Release 10.0 User Guide 334
Setting Administrator Preferences
Working with SSL Certificates