Configuring AirGroup and AirGroup Services on an IAP

You can configure AirGroup services, using the Instant UI or CLI.

In the Instant UI

To enable AirGroup and its services:

1.

Click the More > Services link at the top right corner of the Instant main window.

2.

Click the Air Group tab. The Air Group tab details are displayed.

Figure 1  AirGroup Configuration

3.

To enable support for Bonjour services, select the Enable Bonjour checkbox and select the AirGroup services related to Bonjour as required.

4.

To enable DLNA support, select the Enable DLNA checkbox and select the DLNA services.

5.

To allow the users to use Bonjour services enabled in a guest VLAN, select Enable Guest Bonjour multicast. When this checkbox is enabled, the Bonjour devices are visible only in the guest VLAN and AirGroup will not discover or enforce policies in guest VLAN.

6.

Select the Enable Air Group across mobility domains checkbox to enable inter-cluster mobility. When enabled, the IAP shares the mDNS database information with the other clusters. The DNS records in the Virtual Controller can be shared with the all the Virtual Controllers configured for L3 Mobility.

By default, this feature is disabled. To define clusters, go to System> L3 Mobility tab.

7.

Ensure that the required AirGroup services are selected. To add any service, click New and add. To allow all services, select allowall. If a custom service is added, you can add a corresponding service ID by clicking New under Service ID.

If the IAP is upgraded to current release and if Bonjour is enabled, ensure that the corresponding Bonjour services are selected. Instant supports the use of upto 6 custom services.

8.

Based on the services configured, you can block any user roles from accessing an AirGroup service and restrict the AirGroup servers connected to a specific set of VLANs from being discovered . The user roles and VLANs marked as disallowed are prevented from accessing the corresponding AirGroup service. You can create a list of disallowed user roles and VLANs for all AirGroup services configured on the IAP. For example, If the AirPlay service is selected, the edit links for the airplay disallowed roles and airplay disallowed vlans are displayed. Similarly, if sharing service is selected, the edit links for the sharing disallowed roles and sharing disallowed vlans are displayed.



To select block user roles from accessing an AirGroup service, click the corresponding edit link and select the user roles for which you want to restrict access. By default, an AirGroup service is accessible by all user roles configured in your IAP cluster.



To select VLANs from allowing access to an AirGroup service, click the corresponding edit link and select the VLANs to exclude. By default, the AirGroup services are accessible by users or devices in all VLANs configured in your IAP cluster.

9.

ClearPass Settings— Use this section to configure the CPPM server, CoA server, and enforce ClearPass registering.



CPPM server 1— Indicates the ClearPass Policy Manager server information for AirGroup policy.



Enforce ClearPass registering— When enabled, only devices registered with CPPM will be discovered by Bonjour devices, based on the CPPM policy.

In the CLI

To configure AirGroup:

(Instant AP)(config)# airgroup

(Instant AP)(airgroup)# enable [dlna-only| mdns-only]

(Instant AP)(airgroup)# cppm enforce-registration

(Instant AP)(airgroup)# cppm-server <server>

(Instant AP)(airgroup)# cppm-query-interval <interval>

(Instant AP)(airgroup)# disallow-vlan <vlan-ID>

(Instant AP)(airgroup)# enable-guest-multicast

(Instant AP)(airgroup)# multi-swarm

(Instant AP)(airgroup)# end

(Instant AP)# commit apply

To enable DLNA support:

(Instant AP)(config)# airgroup

(Instant AP)(airgroup)# enable dlna-only

(Instant AP)(airgroup)# end

(Instant AP)# commit apply

To enable support for Bonjour services:

(Instant AP)(config)# airgroup

(Instant AP)(config)# enable mdns-only

(Instant AP)(airgroup)# end

(Instant AP)# commit apply

To configure AirGroup Service

(Instant AP)(config)# airgroupservice <airgroup-service>

(Instant AP)(airgroup-service)# id <airgroupservice-ID>

(Instant AP)(airgroup-service)# description <text>

(Instant AP)(airgroup-service)# disallow-role <role>

(Instant AP)(airgroup-service)# disallow-vlan <vlan-ID>

(Instant AP)(airgroup-service)# end

(Instant AP)# commit apply

To verify the AirGroup configuration status:

(Instant AP)# show airgroup status