Ruckus Captive Portal Setup: Guest WiFi Email Capture

Hotels, big pubs, holiday parks and conference venues run Ruckus, and sooner or later someone asks what the guest sign-in could do beyond getting people online. Ruckus's own portals can already collect an email address on some of its platforms. The Ruckus guides for those portals describe collecting the address; they don't describe recording marketing consent or sending guests anything afterwards.

That's the gap this guide closes. Ruckus has supported external captive portals for years through the WISPr standard, which means you can point it at a portal that captures email addresses with a separate marketing opt-in, runs your branding and sends review requests after the visit. CaptiFi works with Ruckus Unleashed out of the box, and the configuration isn't hard, though there is one step you can only do over SSH. RUCKUS One (the cloud platform), ZoneDirector and SmartZone support external portals too, but CaptiFi on those is by arrangement, so contact the team before you set one up. I will be honest about where things get fiddly.

CaptiFi is the external portal in this story. We do not sell or ship Ruckus hardware. What we provide is the branded sign-in page, the consented email capture and the marketing automation that sits on top of the network you already run. Ruckus does the redirect; CaptiFi does the marketing.

How Ruckus captive portals actually work

Every Ruckus external portal runs on the same idea, the WISPr standard. When an unauthenticated guest connects and opens a browser, the access point or controller intercepts that HTTP or HTTPS request and redirects the browser to an external web portal you nominate. The guest sees your sign-in page, enters their details, and the portal tells Ruckus to let them online. This redirect-and-authorise pattern is exactly what the Hotspot (WISPr) use case was designed for (Purple technical guide for Ruckus; Ruckus SmartZone Hotspot WISPr Reference Guide 6.0.0).

The important word is external. Ruckus also ships its own guest portals. On ZoneDirector, guest pass self-service asks guests for a name, email address and mobile number before issuing a guest pass code; SmartZone's guest access can use guest passes, self-registration or social media login; and on RUCKUS One, the Self Sign In captive portal has a "Collect email addresses of users who connect to this network" setting, which saves each address to the Guest Pass Credentials list. Those guides don't describe recording marketing consent, sending follow-up email or asking for reviews, so for that you need the external WISPr path. One constraint worth knowing up front: WISPr redirection and survivability are supported only on Ruckus 802.11ac Wave 1 access points and newer (SmartZone Hotspot WISPr Reference Guide). Very old APs will not do this.

Ruckus's own portals authorise the connection, and several of them can collect an email address. The external WISPr portal is the route that adds marketing consent, follow-up emails and review requests.

Setting up Unleashed (controller-less)

Unleashed is the controller-less option, popular in single-site venues that do not want a separate appliance. Unleashed has two guest services with opposite portal models. The Guest Access service hosts an internal portal on the Unleashed controller. The Hotspot (WISPr) service supports only an external portal (Ruckus Unleashed "Creating a Hotspot Service" doc; Fydelia Unleashed external portal guide).

So if you have been clicking around the Guest Access menu wondering where the external portal URL field went, that is why. It is not there. You need the Hotspot service.

With CaptiFi, the splash page signs each guest in to your Unleashed network, and Unleashed checks with CaptiFi's RADIUS server before letting the device online. Here is the short version:

1. In my.captifi.io, add a venue and choose Ruckus. The wizard's Activate your WiFi step shows your portal URL, the RADIUS values, the Start Page URL and the NAS-ID commands.
2. In Unleashed, go to Admin & Services, then Services, then AAA Servers, and create two servers with the shared secret from CaptiFi: a RADIUS server (auth method PAP, IP 46.62.168.7, port 1812) and a RADIUS Accounting server (IP 46.62.168.7, port 1813).
3. Under Hotspot Services, create a service with WISPr Smart Client Support set to None, your CaptiFi portal URL as the Login Page, and the Start Page set to redirect to your venue's connected page. Pick the CaptiFi servers on the Authentication tab and add app.captifi.io, captifi.io and 46.62.168.7 on the Walled Garden tab.
4. Create the guest WLAN with Usage Type Hotspot Service, Authentication Open, Encryption None and your new hotspot service selected.
5. Over SSH to the master access point, set the WLAN's NAS-ID to the NAS identifier CaptiFi gives you. The web interface has no field for it, and without it guests see the splash page but never get online.
6. Connect a phone to the guest SSID and complete the splash page. You should be online within a few seconds, on your connected page and then your venue's redirect URL.

We ran through these steps on a Ruckus R510 running Unleashed 200.15 in October 2026. The Ruckus setup guide has every field, the exact SSH lines and a troubleshooting list. WiFi vouchers and Paid WiFi aren't available on Ruckus. The speed limits and session length you set in CaptiFi do apply on Unleashed.

The exact firmware release that first added WISPr external support is not something I will pin to a number, because Ruckus documents it as the general "Wave 1 and newer AP" rule rather than a specific Unleashed build. If your APs are Wave 1 or later, you are in scope.

RUCKUS One (cloud)

RUCKUS One, at ruckus.cloud, is the current flagship cloud platform. It replaced the legacy RUCKUS Cloud service (the old cloud.ruckuswireless.com), which was phased out and its tenants migrated, with WISPr external portal support carried over (Ruckus Support RUCKUS Cloud product page). If you are still on the old cloud console, that is your cue to move.

In RUCKUS One the external portal is a network type rather than a service buried under a WLAN. You create a Wi-Fi network of type "Third-Party Captive Portal (WISPr Feature)" where login is validated via AAA against a RADIUS server (RUCKUS One user guide, "Creating a Network That Uses a Third-Party Captive Portal (WISPr Feature)"). The network asks for three things:

• Captive Portal URL: the complete address of the external portal.
• Walled Garden: the URLs and IPs a guest can reach before they authenticate.
• Integration Key: a key you copy into the portal vendor's configuration so the portal can talk back to RUCKUS One.

After a successful login, you can optionally redirect guests to a company website or another URL, which is handy for sending people to your menu, booking page or offers. CaptiFi on RUCKUS One is by arrangement: email hello@captifi.io or use the contact page before you set it up.

ZoneDirector and SmartZone

CaptiFi on ZoneDirector or SmartZone is by arrangement, so email hello@captifi.io or use the contact page before you set one up. The notes below cover Ruckus's own WISPr options on those controllers.

The controller families, ZoneDirector and SmartZone, both support external Hotspot (WISPr) portals and are the most configurable of the lot. On SmartZone you find this under Services and Profiles, then Hotspots and Portals, on the Hotspot (WISPr) tab, configured per zone (SmartZone 5.0 Admin Guide, "Creating a Hotspot (WISPr) Portal").

The "Redirect unauthenticated user" option is the heart of it. You set a Primary portal URL, which is where unauthenticated guests get sent to authenticate, and you can set a Secondary or backup portal URL used if the primary is down. The AP periodically polls the primary to detect availability, so a portal outage fails over rather than locking everyone out.

After login, ZoneDirector and SmartZone can send users either to the page they originally requested or to a different URL such as your company website. As with the other families, only ZD-style external WISPr is supported, and the Wave 1 and newer AP rule applies.

Ruckus built-in guest vs Ruckus plus CaptiFi

This is the comparison that decides whether the external portal is worth the extra steps. Ruckus's own portals get people online, and several can collect email addresses. Here's how they line up against CaptiFi, going by the Ruckus guides linked in this post.

If all you need is a terms screen or a guest pass for each visitor, stay built-in. If the WiFi is meant to do marketing work, the consent records, follow-up email and review requests come from the external route. The same logic plays out on other vendors, which is why we have parallel guides for Aruba Instant On, DrayTek and UniFi.

What the external portal captures for you

Once the redirect is live, the portal stops being plumbing and starts being a marketing channel. In CaptiFi's venue data, 55% of the new devices that joined CaptiFi guest WiFi in September 2026 signed in, and a typical venue gained around 50 new guest emails a month from April to September (350 or more at the busiest one in ten). That list is consented and first-party, gathered at the moment of a real visit, not scraped or bought.

From there the automation does the work. The welcome email goes out automatically while the visit is still fresh. The review request is the one most owners care about: our review automation sends it automatically after a visit, at most once every 90 days per guest at each venue. And win-back campaigns give guests who have not returned a reason to come back. More reviews matter for local search too, since Google states that "more reviews and positive ratings can help your business's local ranking" (Google Business Profile Help).

It all runs on consent that holds up. The marketing opt-in is unbundled and separate from WiFi access, which is the line UK GDPR and PECR draw. Our GDPR compliance handling keeps getting online and agreeing to marketing as two different decisions, exactly as the ICO expects.

A note on picking the right Ruckus path

If you are still deciding which Ruckus family to deploy, the portal capability is roughly equal across all three, so let your management style and scale lead. Unleashed suits a single site with no appetite for a controller. RUCKUS One suits anyone who wants cloud management. ZoneDirector and SmartZone suit larger, multi-zone estates where the VLAN and failover controls earn their place.

CaptiFi works with Unleashed out of the box. If you are leaning towards RUCKUS One, ZoneDirector or SmartZone, talk to the team at hello@captifi.io first. If you are shopping for access points more broadly, our guide to choosing an access point for guest WiFi and the hardware page cover what we support, including UniFi, TP-Link Omada, Cisco Meraki, Aruba, MikroTik, Ruckus, Fortinet and DrayTek, plus the CaptiFi plug-and-play device, on a refundable deposit, if you would rather not touch the controller at all.

If you only want guest capture and CSV export on the kit you already run, Lite is $24.99/mo for one site. Start Lite.

You can see the same approach on UniFi in our UniFi captive portal software comparison, or start a 30-day trial (you add a card to start) and point your Ruckus WLAN at it.

Sources: Purple technical guide for Ruckus and Ruckus SmartZone Hotspot WISPr Reference Guide 6.0.0 for the WISPr redirect mechanism; Ruckus Unleashed "Creating a Hotspot Service" doc and Fydelia's Unleashed external portal guide; the RUCKUS One user guides "Creating a Network That Uses a Third-Party Captive Portal (WISPr Feature)" and "Creating a Network That Uses a Captive Portal with Self Sign In" and the Ruckus Support RUCKUS Cloud product page; SmartZone 5.0 Admin Guide "Creating a Hotspot (WISPr) Portal"; and Google Business Profile Help on local ranking. The CaptiFi steps for Unleashed were checked on a Ruckus R510 running Unleashed 200.15.6.212.27 in October 2026. CaptiFi performance figures are typical platform results, not guarantees, and vary by venue. This is general guidance, not legal advice. The built-in portal comparison comes from RUCKUS, ZoneDirector 10.2 Guest Pass Self-Service and RUCKUS One Self Sign In, both read on 28 October 2026, and support article 000014431 (October 2026); verify current vendor documentation before relying on it. RUCKUS, Purple, Fydelia and the other product names here are trade marks of their owners; CaptiFi is not affiliated with or endorsed by them.