If a VLAN pool is not yet defined, you can create a new one; click Add Pool, complete the fields in the Add VLAN Pool dialog box, and click Add. You can then select the newly created VLAN pool from the Select VLAN Pooling drop-down list. Refer to Creating a VLAN Pool for more information.

A VLAN pool policy allows a single VLAN, multiple VLANs (separated by commas), or a VLAN range (from 2 through 4094). By default, VLAN Pooling is disabled.

The valid range is from 1 through 4094. The default value is 1. The VLAN ID option is not available if VLAN Pooling or Enable RUCKUS DHCP service is enabled.

Use Dynamic VLAN only for Passphrase (PSK/SAE), DPSK, Enterprise AAA (802.1X), 3rd‑Party Captive Portal (WISPr), and Open Network types.

If a protocol is not yet defined, you can create a new one; click Add Protocol.

An Add Protocol sidebar is displayed. Complete the following to add a protocol:

• Select the Max devices per user checkbox to limit the maximum number of devices a guest can connect using a single credential.

  Enter a value ranging from 1-1000. You can enter a value directly or adjust it using the spinner. The default value is 1.

• Clear the Max devices per user checkbox to allow unlimited devices.

• Select the Do not redirect to the portal when reconnecting within checkbox to enable this setting. When enabled, select Minutes, Hours, Days, or Weeks from the drop-down list, and then enter the duration. This setting defines the wait time after which the client is redirected to the portal for re-authentication. The valid range is 1-1440 minutes, 1-24 hours, 1-30 days, or 1-7 weeks, depending on the selected time unit.
• Clear the Do not redirect to the portal when reconnecting within checkbox to disable this setting. When disabled, clients are redirected to the portal whenever they reconnect.

Complete the following fields:

• ARP request rate limit: Enter the ARP request rate limit.
• DHCP request rate limit: Enter the DHCP request rate limit.

• Force DHCP: Ensures that all devices on this network obtain their IP addresses through the DHCP server. Force DHCP is disabled by default. Toggle the Force DHCP switch on to enable this setting. If you enable the Anti-spoofing setting, then Force DHCP is disabled and grayed out.
• DHCP Option 82: DHCP Option 82 allows a DHCP relay agent to insert circuit-specific information (such as port or MAC address) into DHCP packets before forwarding them to the DHCP server. This enables the server to assign IP addresses based on client location or relay source. In RUCKUS One, this feature is supported for wireless clients and for wired clients connected via AP LAN ports. By default, this feature is disabled. Toggle the DHCP Option 82 switch on to enable this feature. After enabling DHCP Option 82, configure at least one of the following sub-options:
  • Agent Circuit ID (#1):Click the toggle to enable this option, then select how the AP interface or port is identified from the drop-down list.
  • Agent Remote ID (#2): Click the toggle to enable this option, then select the identifier for the AP forwarding the DHCP request from the drop-down list.
  • DHCPv4 Virtual Subnet Selection (#150): Click the toggle to enable or disable this setting to define whether a virtual subnet should be used for IP address assignment.
  • DHCPv4 Virtual Subnet Selection Control (#151): Click the toggle to enable this option, then select and configure how the virtual subnet is applied. Options include Area and ESSID. If you select Area, a text field appears where you can enter the area name (1 to 26 characters).
  • AP and Client MAC Format Delimiter: Choose the syntax used to format MAC addresses. Options include AA:BB:CC:DD:EE:FF (the default), AA-BB-CC-DD-EE-FF, and AABBCCDDEEFF.

• Max Rate: Choose one of the following options from the drop-down list:
  • Unlimited (default): No limits on bandwidth allocation.
  • Per AP: The maximum bandwidth allocation limit of all connections to that specific network on the AP. If selected, two other options appear (enabled by default), Upload Limit and Download Limit. If either (or both) check boxes are selected, a sliding scale appears and you can drag your cursor along the line to choose the Mbps limits for each. The upload and download limit ranges from 1 through 500 Mbps.
• Max clients per radio: Limits the number of clients that can associate with this network per AP radio (default is 100). The value ranges from 1 through 512.
• Enable load balancing between all radios (enabled by default): Select this check box to enable load balancing for all radios. Load balancing helps improve network performance by helping to spread the client load between the radios on the AP.
• Enable load balancing between APs (enabled by default): Select this check box to spread the client load between nearby access points, so that one AP does not get overloaded while another AP sits idle.

• BSS Min Rate: Select None, 1 Mbps, 2 Mbps, 5.5 Mbps, 12 Mbps, or 24 Mbps from the drop-down list. Use BSS Min Rate option to configure the minimum transmission rate that is supported by the network. If OFDM Only (Disables 802.11b) is enabled, the only valid options are 12 Mbps and 24 Mbps, with Mgmt Tx Rate fixed at 6 Mbps. This option can also be used to prevent 802.11b clients from connecting, and to allow greater client density with higher data rates.
• Mgmt Tx Rate: Select 1, 2, 5.5, 6, 9, 11, 12, or 18 Mbps from the drop-down list. This option is only available if both Enable OFDM only and BSS Min Rate are disabled. (Otherwise, the Mgmt Tx Rate is defined by those settings.) Use the Mgmt Tx Rate setting to configure the rate at which management frames are sent. The default is 6 Mbps.
• OFDM only (Disables 802.11b): Toggle the switch to ON to enable this option. Enabling this option disables CCK rates of 1, 2, 5.5, and 11 Mbps, so no 802.11b-only clients can connect. Beacons and probe responses will be transmitted at 6 Mbps, and data frames at 6, 9, 18, 24, 36, 48, and 54 Mbps. Enforcing higher minimum data rates increases overall network throughput capacity but reduces the distance at which clients are able to remain connected.

Enabling AMB configures the WLAN to send a Multi‑Band Operation announcement that helps guide client roaming decisions. Other roaming‑related features, including 802.11k, 802.11r, and 802.11w, must be enabled or disabled separately.

When enabled, 802.11r Fast BSS Transition improves the efficiency of handoff processes between access points (APs) within the same network. This feature reduces the time required for a client device to authenticate with a new AP, ensuring smoother transitions and maintaining continuous connectivity.

Mobility Domain ID defines the network area for fast roaming in IEEE 802.11r, allowing shared master keys for seamless client transitions.

Over-the-Distributed System (DS) support in the IEEE 802.11r Fast Basic Service Set (BSS) Transition protocol can significantly enhance the efficiency of Fast Transition (FT) support. This feature allows a client device to pre-authenticate with a target Access Point (AP) through the currently connected AP. As a result, when the client device roams, it can complete the transition with a simple re-association handshake, ensuring a smoother and quicker handover process.

Transient Client Management manages clients that frequently connect and disconnect to maintain network stability. This setting is disabled by default.

• Join Wait Time: Enter a value in seconds or use the arrows. Valid values ranges from 1 through 60 seconds. The default value is -1.
• Join Expire Time: Enter a value in seconds or use the arrows. Valid value ranges from 1 through 300 seconds. The default value is -1.
• Join Wait Threshold: Enter a value in seconds or use the arrows. Valid value ranges from 1 through 50 seconds. The default value is 10 seconds.

Optimized Connectivity Experience (OCE) enhances client connectivity and roaming performance. This setting is disabled by default.

• Broadcast Probe Response Delay: Valid values are from 8 through 120 ms. The default value is 15 ms.
• RSSI-Based Association Rejection Threshold: Valid values are from -90 through -60 dBm. The default value is -75 dBm.

Multicast Filter filters multicast traffic to reduce unnecessary network load. When the Multicast Filter option is enabled on an AP, it drops all IPv4 and IPv6 multicast and broadcast traffic from associated wireless clients except for the following, which forms the "multicast filter bypass" list. Note that the downstream multicast is unaffected.

• ARP request
• DHCPv4 request
• DHCPv6 request
• IPv6 NS
• IPv6 NA
• IPv6 RS
• IGMP
• MLD
• All unicast packets

Multicast Filter and Multicast Rate Limiting are mutually exclusive features. From the RUCKUS One web interface, you cannot enable them at the same time. SSID rate limiting will always take precedence if Multicast rate limiting is also configured. Multicast downlink rate limiting should not be greater than 50% of BSS min rate.

• Low: Reduces the priority of the WLAN by limiting the throughput to all clients connected to this WLAN.
• High: Has no throughput limits. By default, the WLAN priority is set to High.

• Enable Wi-Fi 6/ 7: Allows some legacy Wi-Fi 5 clients with out-of-date drivers to interoperate with a Wi-Fi 6/7 AP. Toggle the Enable Wi-Fi 6/ 7 switch on. By default, Enable Wi-Fi 6/ 7 is enabled.
• Enable Multi-Link operation (MLO): Toggle the Enable Multi-Link operation (MLO) switch on to enable the feature. When you enable this feature, all three bands, 2.4 GHz, 5 GHz, and 6 GHz are selected by default.

  MLO allows Wi-Fi 7 devices to use multiple radio channels simultaneously (at least two) for better throughput and efficiency. For MLO to function, radios on APs must be active, and their usage is determined by AP configuration, which limits the number of supported 6 GHz network

  Note: DPSK is not supported for this feature.

  Note: This toggle is only available when the network uses WPA3, WPA2/WPA3 mixed mode, or OWE encryption.

• NAS ID: Identifies clients to a RADIUS server. Select an option from the list.
• MAC Delimiter: Select Dash or Colon.
• NAS Request Timeout: Enter the timeout period (in seconds) after which an expected RADIUS response message is considered to have failed.
• NAS Max Retries: Enter the number of failed connection attempts after which RUCKUS One will failover to the backup RADIUS server.
• NAS Reconnect Primary: Enter the number of minutes after which RUCKUS One will attempt to reconnect to the primary RADIUS server after failover to the backup server.
• Called Station ID: Allows NAS to send the ID, that is called by the user. Select an option from the list.
• Single Session ID Accounting: Allows the APs to maintain one accounting session (including statistics) for a user roaming between APs. This setting is disabled by default. Toggle the switch on to enable the feature.

  This option is not visible unless one of the selected identity providers enables an accounting service. You can find the Accounting Service option in the AAA Settings page by navigating to Network Control > Service Catalog > Identity Provider > Add Identity Provider.

DTIM interval controls how often DTIM messages are transmitted, and this affects the frequency of data transmissions per broadcast beacon. Setting the DTIM interval to a lower value results in more frequent DTIM messages, which can prevent mobile devices from going into power‑save mode and thereby increase battery consumption.

• MSCS requests only (default): When selected, QoS Mirroring is enabled only for clients that send mirrored stream classification service (MSCS) requests.
• All clients: When selected, QoS Mirroring is enabled for all clients.

Click the icon next to QoS Mirroring to view the feature synopsis and the minimum required AP firmware version. Click See the compatibility requirements to view the minimum required AP firmware version and the supported AP model families (denoted by their applicable IEEE 802.11 standard).

If you want to edit a QoS map set, select a specific QoS map set from the table and click the Edit option that appears above the table. In the Edit QoS Map sidebar, edit the required fields and click Apply.

For the Captive Portal network types (except Cloudpath and third-party), you will see an additional screen, Portal Web Page before navigating to the Venue screen to activate the network.