Ruckus Captive Portal Setup: Guest WiFi Email Capture

Ruckus gear has a reputation for being the kit you buy when you are tired of WiFi that falls over. Hotels, big pubs, holiday parks and conference venues run it because the radios are good and the coverage holds up under a crowd. What surprises people is how plain the guest sign-in looks once it is working. You get an access point that authorises clients beautifully and a built-in portal that, at most, keeps a list of email addresses with nothing to send from it.

That is the gap this guide closes. Ruckus has supported external captive portals for years through the WISPr standard, which means you can point it at a portal that actually captures email addresses, runs your branding and feeds a Google review engine. CaptiFi works with Ruckus Unleashed out of the box, and the configuration isn't hard, though there is one step you can only do over SSH. RUCKUS One (the cloud platform), ZoneDirector and SmartZone support external portals too, but CaptiFi on those is by arrangement, so contact the team before you set one up. I will be honest about where things get fiddly.

CaptiFi is the external portal in this story. We do not sell or ship Ruckus hardware. What we provide is the branded sign-in page, the consented email capture and the marketing automation that sits on top of the network you already run. Ruckus does the redirect; CaptiFi does the marketing.

How Ruckus captive portals actually work

Every Ruckus external portal runs on the same idea, the WISPr standard. When an unauthenticated guest connects and opens a browser, the access point or controller intercepts that HTTP or HTTPS request and redirects the browser to an external web portal you nominate. The guest sees your sign-in page, enters their details, and the portal tells Ruckus to let them online. This redirect-and-authorise pattern is exactly what the Hotspot (WISPr) use case was designed for (Purple technical guide for Ruckus; Ruckus SmartZone Hotspot WISPr Reference Guide 6.0.0).

The important word is external. Ruckus also ships its own guest portals. On ZoneDirector, guest pass self-service asks guests for a name, email address and mobile number before issuing a guest pass code; SmartZone's guest access can use guest passes, self-registration or social media login; and on RUCKUS One, the Self Sign In captive portal can also collect the email addresses of guests who connect. None of them records marketing consent, sends follow-up email or asks for reviews, so for marketing you need the external WISPr path. One constraint worth knowing up front: WISPr redirection and survivability are supported only on Ruckus 802.11ac Wave 1 access points and newer (SmartZone Hotspot WISPr Reference Guide). Very old APs will not do this.

Ruckus's own portals authorise the connection, and several of them can collect an email address. The external WISPr portal is the route that adds marketing consent, follow-up emails and review requests.

Setting up Unleashed (controller-less)

Unleashed is the controller-less option, popular in single-site venues that do not want a separate appliance. Unleashed has two guest services with opposite portal models. The Guest Access service hosts an internal portal on the Unleashed controller. The Hotspot (WISPr) service supports only an external portal (Ruckus Unleashed "Creating a Hotspot Service" doc; Fydelia Unleashed external portal guide).

So if you have been clicking around the Guest Access menu wondering where the external portal URL field went, that is why. It is not there. You need the Hotspot service.

With CaptiFi, the splash page signs each guest in to your Unleashed network, and Unleashed checks with CaptiFi's RADIUS server before letting the device online. Here is the short version:

1. In my.captifi.io, add a venue and choose Ruckus. The wizard's Activate your WiFi step shows your portal URL, the RADIUS values, the Start Page URL and the NAS-ID commands.
2. In Unleashed, go to Admin & Services, then Services, then AAA Servers, and create two servers with the shared secret from CaptiFi: a RADIUS server (auth method PAP, IP 46.62.168.7, port 1812) and a RADIUS Accounting server (IP 46.62.168.7, port 1813).
3. Under Hotspot Services, create a service with WISPr Smart Client Support set to None, your CaptiFi portal URL as the Login Page, and the Start Page set to redirect to your venue's connected page. Pick the CaptiFi servers on the Authentication tab and add app.captifi.io, captifi.io and 46.62.168.7 on the Walled Garden tab.
4. Create the guest WLAN with Usage Type Hotspot Service, Authentication Open, Encryption None and your new hotspot service selected.
5. Over SSH to the master access point, set the WLAN's NAS-ID to the NAS identifier CaptiFi gives you. The web interface has no field for it, and without it guests see the splash page but never get online.
6. Connect a phone to the guest SSID and complete the splash page. You should be online within a few seconds, on your connected page and then your venue's redirect URL.

We ran through these steps on a Ruckus R510 running Unleashed 200.15 in October 2026. The Ruckus setup guide has every field, the exact SSH lines and a troubleshooting list. WiFi vouchers and Paid WiFi aren't available on Ruckus. The speed limits and session length you set in CaptiFi do apply on Unleashed.

The exact firmware release that first added WISPr external support is not something I will pin to a number, because Ruckus documents it as the general "Wave 1 and newer AP" rule rather than a specific Unleashed build. If your APs are Wave 1 or later, you are in scope.

RUCKUS One (cloud)

RUCKUS One, at ruckus.cloud, is the current flagship cloud platform. It replaced the legacy RUCKUS Cloud service (the old cloud.ruckuswireless.com), which was phased out and its tenants migrated, with WISPr external portal support carried over (Ruckus Support RUCKUS Cloud product page). If you are still on the old cloud console, that is your cue to move.

In RUCKUS One the external portal is a network type rather than a service buried under a WLAN. You create a Wi-Fi network of type "Third-Party Captive Portal (WISPr Feature)" where login is validated via AAA against a RADIUS server (RUCKUS One user guide, "Creating a Network That Uses a Third-Party Captive Portal (WISPr Feature)"). The network asks for three things:

• Captive Portal URL: the complete address of the external portal.
• Walled Garden: the URLs and IPs a guest can reach before they authenticate.
• Integration Key: a key you copy into the portal vendor's configuration so the portal can talk back to RUCKUS One.

After a successful login, you can optionally redirect guests to a company website or another URL, which is a nice touch for sending people to your menu, booking page or offers. Ruckus is explicit that the third-party WISPr provider or subscription is not included with your RUCKUS One subscription, so you bring your own portal. CaptiFi on RUCKUS One is by arrangement: email hello@captifi.io or use the contact page before you set it up.

ZoneDirector and SmartZone

CaptiFi on ZoneDirector or SmartZone is by arrangement, so email hello@captifi.io or use the contact page before you set one up. The notes below cover Ruckus's own WISPr options on those controllers.

The controller families, ZoneDirector and SmartZone, both support external Hotspot (WISPr) portals and are the most configurable of the lot. On SmartZone you find this under Services and Profiles, then Hotspots and Portals, on the Hotspot (WISPr) tab, configured per zone (SmartZone 5.0 Admin Guide, "Creating a Hotspot (WISPr) Portal").

The "Redirect unauthenticated user" option is the heart of it. You set a Primary portal URL, which is where unauthenticated guests get sent to authenticate, and you can set a Secondary or backup portal URL used if the primary is down. The AP periodically polls the primary to detect availability, so a portal outage fails over rather than locking everyone out.

After login, ZoneDirector and SmartZone can send users either to the page they originally requested or to a different URL such as your company website. As with the other families, only ZD-style external WISPr is supported, and the Wave 1 and newer AP rule applies.

Ruckus built-in guest vs Ruckus plus CaptiFi

This is the comparison that decides whether the external portal is worth the extra steps. Ruckus's own portals get people online, and several can collect email addresses. They do not record marketing consent, send follow-up email or grow your reviews. Here is the split.

If all you need is a terms screen or a guest pass for each visitor, stay built-in. If the WiFi is meant to do marketing work, the consent records, follow-up email and review requests come from the external route. The same logic plays out on other vendors, which is why we have parallel guides for Aruba Instant On, DrayTek and UniFi.

What the external portal captures for you

Once the redirect is live, the portal stops being plumbing and starts being a marketing channel. Venues using CaptiFi typically capture 40 to 60% of connecting guests as email subscribers, which works out at 400 to 1,200 emails per venue every month. That list is consented and first-party, gathered at the moment of a real visit, not scraped or bought.

From there the automation does the work. The welcome email goes out automatically and is opened far more often than a standard marketing send, because someone who just sat in your venue actually wants to hear from you. The review request is the one most owners care about: venues see 3 to 5 times more Google reviews within 60 days through our review automation. And win-back campaigns give guests who have not returned a reason to come back. More reviews matter for local search too, since Google states that "more reviews and positive ratings can help your business's local ranking" (Google Business Profile Help).

It all runs on consent that holds up. The marketing opt-in is unbundled and separate from WiFi access, which is the line UK GDPR and PECR draw. Our GDPR compliance handling keeps getting online and agreeing to marketing as two different decisions, exactly as the ICO expects.

A note on picking the right Ruckus path

If you are still deciding which Ruckus family to deploy, the portal capability is roughly equal across all three, so let your management style and scale lead. Unleashed suits a single site with no appetite for a controller. RUCKUS One suits anyone who wants cloud management. ZoneDirector and SmartZone suit larger, multi-zone estates where the VLAN and failover controls earn their place.

CaptiFi works with Unleashed out of the box. If you are leaning towards RUCKUS One, ZoneDirector or SmartZone, talk to the team at hello@captifi.io first. If you are shopping for access points more broadly, our guide to choosing an access point for guest WiFi and the hardware page cover what we support, including UniFi, TP-Link Omada, Cisco Meraki, Aruba, MikroTik, Ruckus, Fortinet and DrayTek, plus an included plug-and-play device if you would rather not touch the controller at all.

If you only want guest capture and CSV export on the kit you already run, Lite is $24.99/mo for one site. Start Lite.

The setup is a one-off afternoon. The payoff (a growing, consented list and a steadily climbing review count) compounds every week after. You can see the same approach on UniFi in our best UniFi captive portal software roundup, or just start a 30-day free trial and point your Ruckus WLAN at it.

Sources: Purple technical guide for Ruckus and Ruckus SmartZone Hotspot WISPr Reference Guide 6.0.0 for the WISPr redirect mechanism; Ruckus Unleashed "Creating a Hotspot Service" doc and Fydelia's Unleashed external portal guide; the RUCKUS One user guides "Creating a Network That Uses a Third-Party Captive Portal (WISPr Feature)" and "Creating a Network That Uses a Captive Portal with Self Sign In" and the Ruckus Support RUCKUS Cloud product page; SmartZone 5.0 Admin Guide "Creating a Hotspot (WISPr) Portal"; and Google Business Profile Help on local ranking. The CaptiFi steps for Unleashed were checked on a Ruckus R510 running Unleashed 200.15.6.212.27 in October 2026. CaptiFi performance figures are typical platform results, not guarantees, and vary by venue. This is general guidance, not legal advice. All facts were correct at the time of writing in June 2026, with the built-in portal comparison updated in October 2026 from the Ruckus ZoneDirector guest pass guide, Ruckus support article 000014431 and the RUCKUS One Self Sign In guide; verify current vendor documentation before relying on it.