L

5 Messages

 • 

220 Points

Mon, Apr 12, 2021 2:16 PM

Dynamic VLANs assigned by DPSK

I am trying to determine whether or not Unleashed on an R850 can support dynamic VLAN assignment by shared DPSK using a single WLAN SSID.

I can confirm that both dynamic VLANs and DPSK are supported by unleashed independently. Note, the Ruckus community has some outdated posts indicating otherwise, but these features were added in recent versions of Unleashed. The thing I cannot confirm is whether these features can be configured to work together in Unleashed. 

See DPSK configuration for Unleashed here https://docs.commscope.com/bundle/unleashed-200.9-onlinehelp/page/GUID-3F754D0C-89AC-496D-9FC3-FFEFD9F2E407.html. This includes the ability to use "Shared DPSK", this is what I would need.

Dynamic VLANs can be enabled in Unleashed here https://docs.commscope.com/bundle/unleashed-200.9-onlinehelp/page/GUID-F714A41F-7AF5-4D8D-AA98-808F4E2EF27E.html. "Dynamic VLAN can be used to automatically and dynamically assign wireless clients to different VLANs based on RADIUS attributes. The Dynamic VLAN option is only available for 802.1X EAP WLANs with a RADIUS server configured.".

This seems to imply it is not possible to use dynamic VLANs with DPSK, however, if we look at this same documentation for the Unleashed cli interface, it seems to imply it is possible to assign VLANs by DPSKs. See here https://docs.commscope.com/bundle/unleashed-200.9-commandref/page/GUID-293311F7-10AB-4152-A724-E8F50EA77615.html. "Dynamic VLAN can be enabled or disabled in the following two conditions: 1) The authentication method is '802.1X/EAP' or 'MAC Address', Encryption method is WPA, WPA2, WPA mixed, or none. 2) Authentication method is 'Open', Encryption method is WPA, WPA2 (Algorithm may not be Auto), enable Zero-IT Activation, enable Dynamic PSK."

So I am looking for some clarification of the documentation. Is it or is it not possible using Unleashed to dynamically assign a VLAN based on the shared DPSK a client used to connect to a WLAN?

If this is possible, is there some place I can find documentation on how to do this?

If this is not possible, which Ruckus products can support such a configuration?

Responses

Accepted Solution

5 Messages

 • 

220 Points

23 d ago

I have confirmed that VLANs can be dynamically assigned by DPSK using the internal database on an R850 running Unleashed 200.9.10.4.233.

Unleashed doesn't document the feature anywhere I could find, nor is it suggested anywhere in the Unleashed UI. But it suffices to say that generating DPSKs in Unleashed works the same as ZoneDirector, just follow the ZoneDirector documentation for using a custom batch DPSK profile here zd-10.4.1-userguide. Note the VLAN ID and Role columns shown in the sample for ZoneDirector, those work on Unleashed too, they just aren't documented or shown anywhere in the UI.

(edited)

Important Announcement