Firewall Ports to Open for Ruckus Cloud

The following table lists the ports that must be opened in the network firewall to ensure that managed APs, switches, guest users, DNS servers, and so on can communicate successfully with Ruckus Cloud.

NOTE
APs and switches require the following DNS entries to be reachable to establish secure connectivity to Ruckus Cloud. Ensure that the following DNS entries are whitelisted in your firewall:
  1. AP registrar FQDN ap-registrar.ruckuswireless.com
  2. CA FQDN ocsp.comodoca.com
Table 28 Ports Required for Ruckus Cloud Communication
From (Sender) To (Listener) Port Purpose Symptoms When Blocked
Admin Any TCP:443 Login and access tenant account for managing tenant APs or switches Ruckus Cloud portal is inaccessible.
AP/Switch Ruckus Cloud (vSZ) TCP:22 SSH tunnel between the AP or switch and Ruckus Cloud for management and control traffic The AP or switch is unable to connect to Ruckus Cloud, DIR (newer models have CTL) LED is off.

Tenant account shows that AP or switch is disconnected.

AP /Switch Ruckus Cloud (vSZ) TCP:443 Discovery of vSZ This port is only used when an AP or switch is first added to a tenant account. If this port is blocked, any factory-reset AP or switch will be unable to connect to Ruckus Cloud.
AP/Switch Ruckus AP Registrar TCP:443 Query vSZ associated with registered AP This port is only used when an AP or switch is first added to a tenant account. If this port is blocked, any factory-reset AP or switch will be unable to connect to Ruckus Cloud.
AP/Switch Ruckus NTP Server (ntp.ruckuswireless.com) UDP:123 Synchronization of the AP or switch clock with the NTP server  
AP/Switch DNS server (provided by local DHCP) TCP/UDP:53 Query to resolve Ruckus AP/switch Registrar's FQDN This port is only used when an AP or switch is first added to a tenant account. If this port is blocked, any factory-reset AP switch will be unable to connect to Ruckus Cloud.
Guest Ruckus Cloud (Guest Portal) TCP:443 Guest authentication Guest portal is unreachable
Guest Ruckus Cloud (Guest Portal) TCP:8090 Enabling guest access to a tenant network Guest authentication does not work and guest is unable to connect to the network
Guest Ruckus Cloud (Guest Portal) TCP:8099 Enabling guest access to a tenant network Guest authentication does not work and guest is unable to connect to the network