Ruckus Captive Portal Setup: Guest WiFi Email Capture

Ruckus gear has a reputation for being the kit you buy when you are tired of WiFi that falls over. Hotels, big pubs, holiday parks and conference venues run it because the radios are genuinely good and the coverage holds up under a crowd. What surprises people is how plain the guest sign-in looks once it is working. You get an access point that authorises clients beautifully and a portal that, if you use the built-in one, asks for almost nothing useful.

That is the gap this guide closes. Ruckus has supported external captive portals for years through the WISPr standard, which means you can point it at a portal that actually captures email addresses, runs your branding and feeds a Google review engine. The configuration is not hard, but it does differ across the three Ruckus families: Unleashed, RUCKUS One (the cloud platform), and ZoneDirector or SmartZone. I will be honest about where each one is fiddly.

CaptiFi is the external portal in this story. We do not sell or ship Ruckus hardware. What we provide is the branded sign-in page, the consented email capture and the marketing automation that sits on top of the network you already run. Ruckus does the redirect; CaptiFi does the marketing.

How Ruckus captive portals actually work

Every Ruckus external portal runs on the same idea, the WISPr standard. When an unauthenticated guest connects and opens a browser, the access point or controller intercepts that HTTP or HTTPS request and redirects the browser to an external web portal you nominate. The guest sees your sign-in page, enters their details, and the portal tells Ruckus to let them online. This redirect-and-authorise pattern is exactly what the Hotspot (WISPr) use case was designed for (Purple technical guide for Ruckus; Ruckus SmartZone Hotspot WISPr Reference Guide 6.0.0).

The important word is external. Ruckus also ships an internal guest portal, but that one hosts a basic page on the controller itself. It is fine for a click-through terms screen and nothing more. If you want to keep the emails, the analytics and the branding, you need the external WISPr path. One constraint worth knowing up front: WISPr redirection and survivability are supported only on Ruckus 802.11ac Wave 1 access points and newer (SmartZone Hotspot WISPr Reference Guide). Very old APs will not do this.

The built-in Ruckus guest portal authorises the connection. The external WISPr portal is the only one that also captures who that guest is. For marketing, you always want the external route.

Setting up Unleashed (controller-less)

Unleashed is the controller-less option, popular in single-site venues that do not want a separate appliance. Here is the catch that trips people up: Unleashed has two guest services with opposite portal models. The Guest Access service hosts an internal portal on the Unleashed controller. The Hotspot (WISPr) service supports only an external portal (Ruckus Unleashed "Creating a Hotspot Service" doc; Fydelia Unleashed external portal guide).

So if you have been clicking around the Guest Access menu wondering where the external portal URL field went, that is why. It is not there. You need the Hotspot service.

1. In the Unleashed admin, go to the Hotspot Services area and create a new Hotspot (WISPr) service.
2. Set the login (redirect) URL to your CaptiFi portal address. Unauthenticated guests get sent here.
3. Add the walled-garden entries CaptiFi gives you, so the portal assets and the authorisation callback are reachable before login.
4. Create or edit a WLAN and set its authentication type to use the Hotspot (WISPr) service you just made.
5. Save, then connect a phone to the new SSID and confirm the CaptiFi page loads.

Unleashed behaves like ZoneDirector here, which is handy if you ever migrate up. The exact firmware release that first added WISPr external support is not something I will pin to a number, because Ruckus documents it as the general "Wave 1 and newer AP" rule rather than a specific Unleashed build. If your APs are Wave 1 or later, you are in scope.

Setting up RUCKUS One (cloud)

RUCKUS One, at ruckus.cloud, is the current flagship cloud platform. It replaced the legacy RUCKUS Cloud service (the old cloud.ruckuswireless.com), which was phased out and its tenants migrated, with WISPr external portal support carried over (Ruckus Support RUCKUS Cloud product page). If you are still on the old cloud console, that is your cue to move.

In RUCKUS One the external portal is a network type rather than a service buried under a WLAN. You create a Wi-Fi network of type "Third-Party Captive Portal (WISPr Feature)" where login is validated via AAA against a RADIUS server (RUCKUS One user guide, "Creating a Network That Uses a Third-Party Captive Portal (WISPr Feature)"). The fields you fill in map cleanly onto what CaptiFi provides:

• Captive Portal URL: the complete portal address from CaptiFi.
• Walled Garden: the URLs and IPs a guest can reach before they authenticate.
• Integration Key: a key you copy into the vendor (CaptiFi) configuration so the portal can talk back to RUCKUS One.

After a successful login, you can optionally redirect guests to a company website or another URL, which is a nice touch for sending people to your menu, booking page or offers. Two honest caveats. First, RUCKUS One uses RADIUS for the AAA validation in this flow, so it is a more involved setup than the no-RADIUS approach we use on some other platforms. Second, Ruckus is explicit that the third-party WISPr provider or subscription is not included with your RUCKUS One subscription. You bring your own portal. That is where CaptiFi fits.

ZoneDirector and SmartZone

The controller families, ZoneDirector and SmartZone, both support external Hotspot (WISPr) portals and are the most configurable of the lot. On SmartZone you find this under Services and Profiles, then Hotspots and Portals, on the Hotspot (WISPr) tab, configured per zone (SmartZone 5.0 Admin Guide, "Creating a Hotspot (WISPr) Portal").

The "Redirect unauthenticated user" option is the heart of it. You set a Primary portal URL, which is where unauthenticated guests get sent to authenticate, and you can set a Secondary or backup portal URL used if the primary is down. The AP periodically polls the primary to detect availability, so a portal outage fails over rather than locking everyone out.

After login, ZoneDirector and SmartZone can send users either to the page they originally requested or to a different URL such as your company website. As with the other families, only ZD-style external WISPr is supported, and the Wave 1 and newer AP rule applies.

Ruckus built-in guest vs Ruckus plus CaptiFi

This is the comparison that decides whether the external portal is worth the extra steps. The built-in Ruckus guest portal gets people online. It does not build you a customer database or grow your reviews. Here is the honest split.

Put plainly: the built-in portal is a door, the external portal is a doorman who learns everyone's name. If all you need is a terms screen, stay built-in. If the WiFi is meant to do marketing work, the external route is the only one that earns its keep. The same logic plays out on other vendors, which is why we have parallel guides for Aruba Instant On, DrayTek and UniFi.

What the external portal captures for you

Once the redirect is live, the portal stops being plumbing and starts being a marketing channel. Venues using CaptiFi typically capture 40 to 60% of connecting guests as email subscribers, which works out at 300 to 500 or more emails per location every month. That list is consented and first-party, gathered at the moment of a real visit, not scraped or bought.

From there the automation does the work. The welcome email goes out automatically and sees around a 45% open rate, because someone who just sat in your venue actually wants to hear from you. The review request is the one most owners care about: venues see 3 to 5 times more Google reviews within 60 days through our review automation. And win-back campaigns to guests who have not returned drive roughly 25% more repeat visits. More reviews matter for local search too, since Google states that "more reviews and positive ratings can help your business's local ranking" (Google Business Profile Help).

It all runs on consent that holds up. The marketing opt-in is unbundled and separate from WiFi access, which is the line UK GDPR and PECR draw. Our GDPR compliance handling keeps the WiFi tick and the marketing tick as two different decisions, exactly as the ICO expects.

A note on picking the right Ruckus path

If you are still deciding which Ruckus family to deploy, the portal capability is roughly equal across all three, so let your management style and scale lead. Unleashed suits a single site with no appetite for a controller. RUCKUS One suits anyone who wants cloud management and does not mind the RADIUS-backed flow. ZoneDirector and SmartZone suit larger, multi-zone estates where the VLAN and failover controls earn their place.

Whichever you choose, CaptiFi sits on top unchanged, because the WISPr redirect is the common interface. If you are shopping for access points more broadly, our guide to choosing an access point for guest WiFi and the hardware page cover what we support, including UniFi, TP-Link Omada, Cisco Meraki, Aruba, MikroTik, Ruckus, Cambium and DrayTek, plus a free plug-and-play device if you would rather not touch the controller at all.

The setup is a one-off afternoon. The payoff (a growing, consented list and a steadily climbing review count) compounds every week after. You can see the same approach on UniFi in our best UniFi captive portal software roundup, or just start a 30-day free trial with no card and point your Ruckus WLAN at it.

Sources: Purple technical guide for Ruckus and Ruckus SmartZone Hotspot WISPr Reference Guide 6.0.0 for the WISPr redirect mechanism; Ruckus Unleashed "Creating a Hotspot Service" doc and Fydelia's Unleashed external portal guide; the RUCKUS One user guide "Creating a Network That Uses a Third-Party Captive Portal (WISPr Feature)" and the Ruckus Support RUCKUS Cloud product page; SmartZone 5.0 Admin Guide "Creating a Hotspot (WISPr) Portal"; and Google Business Profile Help on local ranking. CaptiFi performance figures are typical platform results, not guarantees, and vary by venue. This is general guidance, not legal advice. All facts were correct at the time of writing in June 2026; verify current vendor documentation before relying on it.