Ruckus Wireless ZoneDirector 1200, Руководство пользователя

Страница: 133 / 361

Figure 87: Designate an AP as a Bonjour Gateway
Example Network Setup
The following example illustrates how ZoneDirector's Bonjour Gateway can be used to
allow users to access Bonjour resources on different VLANs in a school setting, where
access to certain resources must generally be separated between teachers and students,
but where sharing may sometimes be necessary.
Assume a network with three VLANs mapped to separate SSIDs, all on separate subnets
or multicast domains. The three segments host different devices for different users:
• Classroom SSID (VLAN 100): WEP authentication, includes an iMac desktop for file
sharing and iOS Sync for backup, and an Apple TV attached to a projector.
• Teachers SSID (VLAN 200): 802.1X authentication for a MacBook and iPad, needs
to have access to all classroom resources.
• Students SSID (VLAN 300): Students have a separate SSID with no authentication,
they must be able to backup their iPads to the classroom iMac but should not have
access to the Apple TV or File Sharing services.
Figure 88: Sample Bonjour Gateway configuration for a classroom scenario
In this example, the teacher gains access to AirPlay, AirPrint, iCloud Sync and File
Sharing, while students are given access to iCloud Sync and AirPrint only.
Bonjour Fencing
Bonjour Fencing provides a mechanism to limit the scope of Bonjour (mDNS) service
discovery in the physical/spatial domain.
While Bonjour Fencing is related to Bonjour Gateway, they are two separate features
designed for different purposes. Bonjour Gateway bridges mDNS services across VLANs,
and is useful because Bonjour is designed as a same-VLAN protocol. Bonjour Fencing
133 Ruckus Wireless ZoneDirector™ Release 10.0 User Guide
Configuring Security and Other Services
Bonjour Fencing