Integrations/Wi-Fi/ruckus-smartzone
SmartZone · Wi-Fi controller · RADIUS

MFA for RUCKUS SmartZone

RUCKUS SmartZone controllers run the wireless network for campuses, hotels and large offices, and whoever signs in to the controller can change every access point and SSID it manages. SmartZone can check administrator logins against an external RADIUS server, but it has no second factor of its own. Authnull becomes that RADIUS server and requires MFA on every controller admin login. You add Authnull as an AAA server, link it to your administrator accounts, and admins must approve a factor before they get in.

At a glance
VendorRUCKUS Networks
Connects viaRADIUS
ProtectsWi-Fi controller admin
DeploymentAgentless
Setup time15 minutes
No rip-and-replace — sits in front of your existing setup
How Authnull connects

RUCKUS SmartZone forwards the login; Authnull adds the factor.

RUCKUS SmartZone
user connects
Authnull
RADIUS
Directory
AD / LDAP
User device
approve factor

SmartZone sends the admin login to Authnull over RADIUS. Authnull checks the password against your directory, asks for the factor, and returns Access-Accept. Set the RADIUS timeout to 60 seconds so admins have time to approve.

Setup

Configure MFA for RUCKUS SmartZone

Real steps — the exact menus, fields, and values. Follow along in your console; the whole thing takes about 15 minutes.

1

Add Authnull as an admin AAA server

Create a RADIUS AAA server for administrators with the Authnull connector IP, port 1812 and the shared secret.

Administration → Admins and Roles → AAA → Create
2

Raise the timeout

Set the RADIUS request timeout to 60 seconds so the push approval is not cut off.

3

Map administrators to roles

Link the RADIUS server to your admin roles so the users Authnull approves get the right SmartZone permissions. Keep a local admin account as a fallback.

Administration → Admins and Roles → Groups
4

Test the login

Use Test AAA, then sign in to the SmartZone web UI with a test admin account, approve the factor, and confirm the login in the Authnull logs.

Reference — connection values
ProtocolRADIUS (PAP)
auth port1812
Timeout60s
ScopeAdmin login

Closes the MFA gap auditors look for

Enforcing MFA on RUCKUS SmartZone gives you evidence for the remote-access and privileged-access controls in SOC 2 and the access requirements under CCPA — with per-login logs you can hand straight to an assessor.

Add MFA to RUCKUS SmartZone — free to start.

Spin up Authnull, point RUCKUS SmartZone at it, and enforce a factor on a pilot group today. No card, no rip-and-replace.

Book a demo