289
| Services
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
7. Ensure that the required AirGroup services are selected. To add any service, click
New
and add. To allow all
services, select
allowall
. If a custom service is added, you can add a corresponding service ID by clicking
New
under
Service ID
.
If an IAP is upgraded to the current release with the
Bonjour
check box enabled, ensure that the
corresponding Bonjour services are selected.
Instant supports the use of up to 6 custom services.
8. Based on the services configured, you can block any user roles from accessing an AirGroup service and
restrict the AirGroup servers connected to a specific set of VLANs from being discovered . The user roles and
VLANs marked as disallowed are prevented from accessing the corresponding AirGroup service. You can
create a list of disallowed user roles and VLANs for all AirGroup services configured on the IAP. For example,
If the AirPlay service is selected, the
edit
links for the
airplay disallowed roles
and
airplay disallowed
vlans
are displayed. Similarly, if sharing service is selected, the
edit
links for the
sharing disallowed roles
and
sharing disallowed vlans
are displayed.
l
To block user roles from accessing an AirGroup service, click the corresponding
edit
link and select the
user roles for which you want to restrict access. By default, an AirGroup service is accessible by all user
roles configured in your IAP cluster.
l
To block VLANs from allowing access to an AirGroup service, click the corresponding
edit
link and select
the VLANs to exclude. By default, the AirGroup services are accessible by users or devices in all VLANs
configured in your IAP cluster.
9.
ClearPass Settings
—Use this section to configure the ClearPass Policy Manager server, CoA server, and
enforce ClearPass registering.
l
CPPM server 1
—Indicates the ClearPass Policy Manager server information for AirGroup policy.
l
Enforce ClearPass registering
—When enabled, only devices registered with ClearPass Policy Manager
will be discovered by Bonjour devices, based on the ClearPass Policy Manager policy.
In the CLI
To configure AirGroup:
(Instant AP)(config)# airgroup
(Instant AP)(airgroup)# enable [dlna-only | mdns-only]
(Instant AP)(airgroup)# cppm enforce-registration
(Instant AP)(airgroup)# cppm-server <server>
(Instant AP)(airgroup)# cppm-query-interval <interval>
(Instant AP)(airgroup)# disallow-vlan <vlan-ID>
(Instant AP)(airgroup)# enable-guest-multicast
(Instant AP)(airgroup)# multi-swarm
(Instant AP)(airgroup)# end
(Instant AP)# commit apply
To enable DLNA support:
(Instant AP)(config)# airgroup
(Instant AP)(airgroup)# enable dlna-only
(Instant AP)(airgroup)# end
(Instant AP)# commit apply
To enable support for Bonjour services:
(Instant AP)(config)# airgroup
(Instant AP)(config)# enable mdns-only
(Instant AP)(airgroup)# end
(Instant AP)# commit apply
To configure AirGroup services:
(Instant AP)(config)# airgroupservice <airgroup-service>
