RE: [WIRELESS-LAN] support of L2 peering devices?

2016-11-30 Thread Tim Tyler
Thanks!  I seem to have it working now, though I should probably test
another device.   I am not sure what I did.  I enabled the DNLA protocols
but I am not sure if that was necessary in AirGroup.  One of my problems
might have been related to not being logged into a gmail account when
testing.  It seems that the app won’t finish the connection though the
Chromecast device actually connects to the SSID and does allow apps to cast
to it.  So it does seem to work after all.  Thanks!

Tim



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Cappalli, Tim (Aruba)
*Sent:* Wednesday, November 30, 2016 10:31 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Policy based on AirGroup authorizations from ClearPass.



If I have a Chromecast/AppleTV/whatever on subnet A, when that device
authenticates to the network, the controller will send an AirGroup
Authorization Request to ClearPass. ClearPass will return sharing
properties of the device (personal vs shared and who it should be shared
with, ap group restrictions, time restrictions etc). At that point, the
device is placed into the AirGroup table on the controller.



When my client device in subnet B does a discover for services, any service
advertisements that I’m allowed to see (based on the policy from ClearPass)
will be send out onto subnet B by the controller.



Note that policy via ClearPass is not required, but recommended.



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Tim Tyler
*Sent:* Wednesday, November 30, 2016 11:20
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,

  “subnet based on policy”?  I have a pool of 6 vlans of which devices get
randomly assigned to one of the 6 subnets.   How does Airgoup know which
subnets the two pairing devices are in?  I thought it required a broadcast
to find each other.  I would think that would require a broadcast going out
to all 6 vlans.I am not quite sure what you mean by “policy”.

  I should note that all Bonjour devices work fine.  I just can’t get
Chromecast and other peering devices to work.  And I have enabled just
about everything under AirGroup at one point or another.  If Chromecast
should peer across multiple vlan (subnets), then I may need to contact tech
support again.   I keep wondering what I am missing.

 Tim



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Cappalli, Tim (Aruba)
*Sent:* Wednesday, November 30, 2016 9:43 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Yes, AirGroup sends the mDNS or SSDP advertisement out onto the subnet
where the user is based on policy.





*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Tim Tyler
*Sent:* Wednesday, November 30, 2016 10:32
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,

So even if the two peering devices are on two different subnets, it should
still work?

Tim



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Cappalli, Tim (Aruba)
*Sent:* Wednesday, November 30, 2016 8:41 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,



Chromecast will work with the AirGroup service Googlecast enabled and with
drop broadcast/multicast enabled on the VAP.



This can work in large subnets or multiple smaller subnets.



Tim

Aruba ClearPass Team



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Tim Tyler
*Sent:* Wednesday, November 30, 2016 09:38
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Jon

   We do have the AirGroup functionality enabled.  But I also have a pool
of 6 /23 vlans.  So my first question is did you set up an independent SSID
for L2 devices to register?   Did you use one vlan (subnet)?  What size?
I am curious about the details to allow broadcast, but I am guessing I can
ask that of an Aruba engineer if I need.  The ability to allow broadcast
seems critical to getting Chromecast to work.

Tim



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Jonathan Miller
*Sent:* Wednesday, November 30, 2016 8:27 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,



The AirG

Re: [WIRELESS-LAN] support of L2 peering devices?

2016-11-30 Thread Bucklaew, Jerry
On 11/30/2016 11:20 AM, Tim Tyler wrote:
> Tim,
>
>   “subnet based on policy”?  I have a pool of 6 vlans of which devices get 
> randomly assigned to one of the 6 subnets.
> How does Airgoup know which subnets the two pairing devices are in?  I 
> thought it required a broadcast to find each
> other.  I would think that would require a broadcast going out to all 6 
> vlans.I am not quite sure what you mean by
> “policy”.
>
>   I should note that all Bonjour devices work fine.  I just can’t get 
> Chromecast and other peering devices to work.  And
> I have enabled just about everything under AirGroup at one point or another.  
> If Chromecast should peer across multiple
> vlan (subnets), then I may need to contact tech support again.   I keep 
> wondering what I am missing.
>
>


It works on a request basis.   When "servers" advertise services, they get put 
in a central table.   When a client 
request the service the lookup is done on that table.   So airgroup does not 
cross subnets, it just needs to "see" each 
subnet so that is can respond to clients and add servers to the table.   The 
question is which part does not work?

for chromecast.

1. It does not work with 802.1x so can you properly configure it and get it on 
the network
2. Does the service get added to the table for the controller it is connected to
3. does the client properly request it and get a answer
4. Can the client actually route to and communicate with the server (this has 
nothing to do with airgroup)


I would start the test with everything on the same controller and same ssid.   
Then try moving the client to a different 
ssid.

We have successfully used airgroup for chromecast across subnets on the same 
controller.  I have had hit and miss luck 
with different controllers.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] support of L2 peering devices?

2016-11-30 Thread Cappalli, Tim (Aruba)
Policy based on AirGroup authorizations from ClearPass.

 

If I have a Chromecast/AppleTV/whatever on subnet A, when that device 
authenticates to the network, the controller will send an AirGroup 
Authorization Request to ClearPass. ClearPass will return sharing properties of 
the device (personal vs shared and who it should be shared with, ap group 
restrictions, time restrictions etc). At that point, the device is placed into 
the AirGroup table on the controller.

 

When my client device in subnet B does a discover for services, any service 
advertisements that I’m allowed to see (based on the policy from ClearPass) 
will be send out onto subnet B by the controller. 

 

Note that policy via ClearPass is not required, but recommended.

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tim Tyler
Sent: Wednesday, November 30, 2016 11:20
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?

 

Tim,

  “subnet based on policy”?  I have a pool of 6 vlans of which devices get 
randomly assigned to one of the 6 subnets.   How does Airgoup know which 
subnets the two pairing devices are in?  I thought it required a broadcast to 
find each other.  I would think that would require a broadcast going out to all 
6 vlans.I am not quite sure what you mean by “policy”.   

  I should note that all Bonjour devices work fine.  I just can’t get 
Chromecast and other peering devices to work.  And I have enabled just about 
everything under AirGroup at one point or another.  If Chromecast should peer 
across multiple vlan (subnets), then I may need to contact tech support again.  
 I keep wondering what I am missing. 

 Tim

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> ] On Behalf Of Cappalli, Tim (Aruba)
Sent: Wednesday, November 30, 2016 9:43 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?

 

Yes, AirGroup sends the mDNS or SSDP advertisement out onto the subnet where 
the user is based on policy.

 

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tim Tyler
Sent: Wednesday, November 30, 2016 10:32
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?

 

Tim,

So even if the two peering devices are on two different subnets, it should 
still work?  

Tim

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> ] On Behalf Of Cappalli, Tim (Aruba)
Sent: Wednesday, November 30, 2016 8:41 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?

 

Tim,

 

Chromecast will work with the AirGroup service Googlecast enabled and with drop 
broadcast/multicast enabled on the VAP.

 

This can work in large subnets or multiple smaller subnets.

 

Tim

Aruba ClearPass Team

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tim Tyler
Sent: Wednesday, November 30, 2016 09:38
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?

 

Jon

   We do have the AirGroup functionality enabled.  But I also have a pool of 6 
/23 vlans.  So my first question is did you set up an independent SSID for L2 
devices to register?   Did you use one vlan (subnet)?  What size?   I am 
curious about the details to allow broadcast, but I am guessing I can ask that 
of an Aruba engineer if I need.  The ability to allow broadcast seems critical 
to getting Chromecast to work.

Tim

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> ] On Behalf Of Jonathan Miller
Sent: Wednesday, November 30, 2016 8:27 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?

 

Tim,

 

The AirGroup functionality in Aruba ClearPass is probably what you're looking 
for.  You can set it up so that when students register their devices, they can 
choose whether those devices are allowed to use broadcast/multicast to talk to 
their other devices, or even allow sharing to other users (potentially, 
depending on your setup).

 

We've seen it work fairly well, although sometimes a chromecast or something 
will freak out and lose connectivity briefly with devices that it's supposed to 
be allowed to ta

RE: [WIRELESS-LAN] support of L2 peering devices?

2016-11-30 Thread Tim Tyler
Tim,

  “subnet based on policy”?  I have a pool of 6 vlans of which devices get
randomly assigned to one of the 6 subnets.   How does Airgoup know which
subnets the two pairing devices are in?  I thought it required a broadcast
to find each other.  I would think that would require a broadcast going out
to all 6 vlans.I am not quite sure what you mean by “policy”.

  I should note that all Bonjour devices work fine.  I just can’t get
Chromecast and other peering devices to work.  And I have enabled just
about everything under AirGroup at one point or another.  If Chromecast
should peer across multiple vlan (subnets), then I may need to contact tech
support again.   I keep wondering what I am missing.

 Tim



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Cappalli, Tim (Aruba)
*Sent:* Wednesday, November 30, 2016 9:43 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Yes, AirGroup sends the mDNS or SSDP advertisement out onto the subnet
where the user is based on policy.





*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Tim Tyler
*Sent:* Wednesday, November 30, 2016 10:32
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,

So even if the two peering devices are on two different subnets, it should
still work?

Tim



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Cappalli, Tim (Aruba)
*Sent:* Wednesday, November 30, 2016 8:41 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,



Chromecast will work with the AirGroup service Googlecast enabled and with
drop broadcast/multicast enabled on the VAP.



This can work in large subnets or multiple smaller subnets.



Tim

Aruba ClearPass Team



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Tim Tyler
*Sent:* Wednesday, November 30, 2016 09:38
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Jon

   We do have the AirGroup functionality enabled.  But I also have a pool
of 6 /23 vlans.  So my first question is did you set up an independent SSID
for L2 devices to register?   Did you use one vlan (subnet)?  What size?
I am curious about the details to allow broadcast, but I am guessing I can
ask that of an Aruba engineer if I need.  The ability to allow broadcast
seems critical to getting Chromecast to work.

Tim



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Jonathan Miller
*Sent:* Wednesday, November 30, 2016 8:27 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,



The AirGroup functionality in Aruba ClearPass is probably what you're
looking for.  You can set it up so that when students register their
devices, they can choose whether those devices are allowed to use
broadcast/multicast to talk to their other devices, or even allow sharing
to other users (potentially, depending on your setup).



We've seen it work fairly well, although sometimes a chromecast or
something will freak out and lose connectivity briefly with devices that
it's supposed to be allowed to talk to.



Jon Miller

Network Analyst

Franklin and Marshall College



Jonathan Miller

Network Analyst

Franklin and Marshall College



On Wed, Nov 30, 2016 at 9:22 AM, Tim Tyler <ty...@beloit.edu> wrote:



Wireless Lan members,

We use Aruba Networks for our wireless solution and we do have many L2
devices working that leverage Bonjour, etc.  We simply do mac address
authentication for them.   Most L2 devices work fine.My big goal is to
find out the different methods that some of you might be using to support
the most difficult L2 devices such as Chromecast, Sonos speakers, and other
L2 devices that need to peer with another device in order to work.   These
type of devices ultimately need to broadcast to see each other.  Chromecast
generally needs to broadcast to the phone app so that the phone app can see
it and establish a connection with one another.   If you create another
SSID for it, what are the key factors in making it work?

Back in the earlier Fall, a number of you stated that you were using /16
subnets or very large subnets so that you only needed one subnet for your
residential wireless network.   So the question I have is did you do this
to better support L2 devices?   If so, do you allow broadcasts on your
large wireless subnet or did you simply do one /16 subnet to simplify the
administration of your wireles

RE: [WIRELESS-LAN] support of L2 peering devices?

2016-11-30 Thread Cappalli, Tim (Aruba)
Yes, AirGroup sends the mDNS or SSDP advertisement out onto the subnet where 
the user is based on policy.





From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tim Tyler
Sent: Wednesday, November 30, 2016 10:32
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,

So even if the two peering devices are on two different subnets, it should 
still work?

Tim



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> ] On Behalf Of Cappalli, Tim 
(Aruba)
Sent: Wednesday, November 30, 2016 8:41 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,



Chromecast will work with the AirGroup service Googlecast enabled and with 
drop broadcast/multicast enabled on the VAP.



This can work in large subnets or multiple smaller subnets.



Tim

Aruba ClearPass Team



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tim Tyler
Sent: Wednesday, November 30, 2016 09:38
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?



Jon

   We do have the AirGroup functionality enabled.  But I also have a pool of 6 
/23 vlans.  So my first question is did you set up an independent SSID for L2 
devices to register?   Did you use one vlan (subnet)?  What size?   I am 
curious about the details to allow broadcast, but I am guessing I can ask that 
of an Aruba engineer if I need.  The ability to allow broadcast seems critical 
to getting Chromecast to work.

Tim



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> ] On Behalf Of Jonathan Miller
Sent: Wednesday, November 30, 2016 8:27 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,



The AirGroup functionality in Aruba ClearPass is probably what you're looking 
for.  You can set it up so that when students register their devices, they can 
choose whether those devices are allowed to use broadcast/multicast to talk to 
their other devices, or even allow sharing to other users (potentially, 
depending on your setup).



We've seen it work fairly well, although sometimes a chromecast or something 
will freak out and lose connectivity briefly with devices that it's supposed 
to be allowed to talk to.



Jon Miller

Network Analyst

Franklin and Marshall College





Jonathan Miller

Network Analyst

Franklin and Marshall College



On Wed, Nov 30, 2016 at 9:22 AM, Tim Tyler <ty...@beloit.edu 
<mailto:ty...@beloit.edu> > wrote:



Wireless Lan members,

We use Aruba Networks for our wireless solution and we do have many L2 devices 
working that leverage Bonjour, etc.  We simply do mac address authentication 
for them.   Most L2 devices work fine.My big goal is to find out the 
different methods that some of you might be using to support the most 
difficult L2 devices such as Chromecast, Sonos speakers, and other L2 devices 
that need to peer with another device in order to work.   These type of 
devices ultimately need to broadcast to see each other.  Chromecast generally 
needs to broadcast to the phone app so that the phone app can see it and 
establish a connection with one another.   If you create another SSID for it, 
what are the key factors in making it work?

Back in the earlier Fall, a number of you stated that you were using /16 
subnets or very large subnets so that you only needed one subnet for your 
residential wireless network.   So the question I have is did you do this to 
better support L2 devices?   If so, do you allow broadcasts on your large 
wireless subnet or did you simply do one /16 subnet to simplify the 
administration of your wireless network?

Bottom line, how are some of you supporting L2 devices that allow Chromecast 
and other peering L2 devices to work?





Tim Tyler

Network Engineer

Beloit College



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] support of L2 peering devices?

2016-11-30 Thread Tim Tyler
Tim,

So even if the two peering devices are on two different subnets, it should
still work?

Tim



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Cappalli, Tim (Aruba)
*Sent:* Wednesday, November 30, 2016 8:41 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,



Chromecast will work with the AirGroup service Googlecast enabled and with
drop broadcast/multicast enabled on the VAP.



This can work in large subnets or multiple smaller subnets.



Tim

Aruba ClearPass Team



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Tim Tyler
*Sent:* Wednesday, November 30, 2016 09:38
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Jon

   We do have the AirGroup functionality enabled.  But I also have a pool
of 6 /23 vlans.  So my first question is did you set up an independent SSID
for L2 devices to register?   Did you use one vlan (subnet)?  What size?
I am curious about the details to allow broadcast, but I am guessing I can
ask that of an Aruba engineer if I need.  The ability to allow broadcast
seems critical to getting Chromecast to work.

Tim



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Jonathan Miller
*Sent:* Wednesday, November 30, 2016 8:27 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,



The AirGroup functionality in Aruba ClearPass is probably what you're
looking for.  You can set it up so that when students register their
devices, they can choose whether those devices are allowed to use
broadcast/multicast to talk to their other devices, or even allow sharing
to other users (potentially, depending on your setup).



We've seen it work fairly well, although sometimes a chromecast or
something will freak out and lose connectivity briefly with devices that
it's supposed to be allowed to talk to.



Jon Miller

Network Analyst

Franklin and Marshall College



Jonathan Miller

Network Analyst

Franklin and Marshall College



On Wed, Nov 30, 2016 at 9:22 AM, Tim Tyler <ty...@beloit.edu> wrote:



Wireless Lan members,

We use Aruba Networks for our wireless solution and we do have many L2
devices working that leverage Bonjour, etc.  We simply do mac address
authentication for them.   Most L2 devices work fine.My big goal is to
find out the different methods that some of you might be using to support
the most difficult L2 devices such as Chromecast, Sonos speakers, and other
L2 devices that need to peer with another device in order to work.   These
type of devices ultimately need to broadcast to see each other.  Chromecast
generally needs to broadcast to the phone app so that the phone app can see
it and establish a connection with one another.   If you create another
SSID for it, what are the key factors in making it work?

Back in the earlier Fall, a number of you stated that you were using /16
subnets or very large subnets so that you only needed one subnet for your
residential wireless network.   So the question I have is did you do this
to better support L2 devices?   If so, do you allow broadcasts on your
large wireless subnet or did you simply do one /16 subnet to simplify the
administration of your wireless network?

Bottom line, how are some of you supporting L2 devices that allow
Chromecast and other peering L2 devices to work?





Tim Tyler

Network Engineer

Beloit College



** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.



** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] support of L2 peering devices?

2016-11-30 Thread Chuck Enfield
We were told that for a 7240 controller AirGroup was limited to receiving 
(not necessarily responding to) 200 pps.  Given the typical amount of 
multicast traffic coming from client devices, I would expect 200pps to be 
reached at a tiny fraction of the 32K devices a 7240 claims to support.



Has anybody that uses Airgroup run into the limit of multicast packets per 
seconds that can be processed by their controller?  If yes, what has been 
the practical impact of hitting that limit?  If no, have you taken active 
steps to avoid it, or is my thinking incorrect and the multicast pps count 
is much lower than I expect?



Thanks,



Chuck



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Wilkinson, Doug
Sent: Wednesday, November 30, 2016 9:52 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?



We use our guest SSID for devices that rely on bonjour with airgroups 
enabled.  Multicast overall is disabled, airgroups handles any bonjour 
communication.  We use larger /18 nets mainly to facilitate roaming. 
Airgroups doesn't care what subnet you are on.  Devices on our secure SSID 
can talk to the guest SSID through airgroups.



This past fall, we also enabled the use of fingerprinting to allow certain 
classes of devices to automatically get onto our guest network without MAC 
registration (eg. printers, roku, appleTV, etc).  We do have clearpass in 
the mix as well.






--Doug

Doug Wilkinson
Associate Director, Network Technology Group

Computing and Information Services

Brown University
--





On Wed, Nov 30, 2016 at 9:37 AM, Tim Tyler <ty...@beloit.edu 
<mailto:ty...@beloit.edu> > wrote:

Jon

   We do have the AirGroup functionality enabled.  But I also have a pool of 
6 /23 vlans.  So my first question is did you set up an independent SSID for 
L2 devices to register?   Did you use one vlan (subnet)?  What size?   I am 
curious about the details to allow broadcast, but I am guessing I can ask 
that of an Aruba engineer if I need.  The ability to allow broadcast seems 
critical to getting Chromecast to work.

Tim



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> ] On Behalf Of Jonathan Miller
Sent: Wednesday, November 30, 2016 8:27 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,



The AirGroup functionality in Aruba ClearPass is probably what you're 
looking for.  You can set it up so that when students register their 
devices, they can choose whether those devices are allowed to use 
broadcast/multicast to talk to their other devices, or even allow sharing to 
other users (potentially, depending on your setup).



We've seen it work fairly well, although sometimes a chromecast or something 
will freak out and lose connectivity briefly with devices that it's supposed 
to be allowed to talk to.



Jon Miller

Network Analyst

Franklin and Marshall College





Jonathan Miller

Network Analyst

Franklin and Marshall College



On Wed, Nov 30, 2016 at 9:22 AM, Tim Tyler <ty...@beloit.edu 
<mailto:ty...@beloit.edu> > wrote:



Wireless Lan members,

We use Aruba Networks for our wireless solution and we do have many L2 
devices working that leverage Bonjour, etc.  We simply do mac address 
authentication for them.   Most L2 devices work fine.My big goal is to 
find out the different methods that some of you might be using to support 
the most difficult L2 devices such as Chromecast, Sonos speakers, and other 
L2 devices that need to peer with another device in order to work.   These 
type of devices ultimately need to broadcast to see each other.  Chromecast 
generally needs to broadcast to the phone app so that the phone app can see 
it and establish a connection with one another.   If you create another SSID 
for it, what are the key factors in making it work?

Back in the earlier Fall, a number of you stated that you were using /16 
subnets or very large subnets so that you only needed one subnet for your 
residential wireless network.   So the question I have is did you do this to 
better support L2 devices?   If so, do you allow broadcasts on your large 
wireless subnet or did you simply do one /16 subnet to simplify the 
administration of your wireless network?

Bottom line, how are some of you supporting L2 devices that allow Chromecast 
and other peering L2 devices to work?





Tim Tyler

Network Engineer

Beloit College



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.ed

Re: [WIRELESS-LAN] support of L2 peering devices?

2016-11-30 Thread Wilkinson, Doug
We use our guest SSID for devices that rely on bonjour with airgroups
enabled.  Multicast overall is disabled, airgroups handles any bonjour
communication.  We use larger /18 nets mainly to facilitate roaming.
Airgroups doesn't care what subnet you are on.  Devices on our secure SSID
can talk to the guest SSID through airgroups.

This past fall, we also enabled the use of fingerprinting to allow certain
classes of devices to automatically get onto our guest network without MAC
registration (eg. printers, roku, appleTV, etc).  We do have clearpass in
the mix as well.


--Doug

Doug Wilkinson
Associate Director, Network Technology Group
Computing and Information Services
Brown University
--


On Wed, Nov 30, 2016 at 9:37 AM, Tim Tyler <ty...@beloit.edu> wrote:

> Jon
>
>We do have the AirGroup functionality enabled.  But I also have a pool
> of 6 /23 vlans.  So my first question is did you set up an independent SSID
> for L2 devices to register?   Did you use one vlan (subnet)?  What size?
> I am curious about the details to allow broadcast, but I am guessing I can
> ask that of an Aruba engineer if I need.  The ability to allow broadcast
> seems critical to getting Chromecast to work.
>
> Tim
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Jonathan Miller
> *Sent:* Wednesday, November 30, 2016 8:27 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?
>
>
>
> Tim,
>
>
>
> The AirGroup functionality in Aruba ClearPass is probably what you're
> looking for.  You can set it up so that when students register their
> devices, they can choose whether those devices are allowed to use
> broadcast/multicast to talk to their other devices, or even allow sharing
> to other users (potentially, depending on your setup).
>
>
>
> We've seen it work fairly well, although sometimes a chromecast or
> something will freak out and lose connectivity briefly with devices that
> it's supposed to be allowed to talk to.
>
>
>
> Jon Miller
>
> Network Analyst
>
> Franklin and Marshall College
>
>
>
> Jonathan Miller
>
> Network Analyst
>
> Franklin and Marshall College
>
>
>
> On Wed, Nov 30, 2016 at 9:22 AM, Tim Tyler <ty...@beloit.edu> wrote:
>
>
>
> Wireless Lan members,
>
> We use Aruba Networks for our wireless solution and we do have many L2
> devices working that leverage Bonjour, etc.  We simply do mac address
> authentication for them.   Most L2 devices work fine.My big goal is to
> find out the different methods that some of you might be using to support
> the most difficult L2 devices such as Chromecast, Sonos speakers, and other
> L2 devices that need to peer with another device in order to work.   These
> type of devices ultimately need to broadcast to see each other.  Chromecast
> generally needs to broadcast to the phone app so that the phone app can see
> it and establish a connection with one another.   If you create another
> SSID for it, what are the key factors in making it work?
>
> Back in the earlier Fall, a number of you stated that you were using /16
> subnets or very large subnets so that you only needed one subnet for your
> residential wireless network.   So the question I have is did you do this
> to better support L2 devices?   If so, do you allow broadcasts on your
> large wireless subnet or did you simply do one /16 subnet to simplify the
> administration of your wireless network?
>
> Bottom line, how are some of you supporting L2 devices that allow
> Chromecast and other peering L2 devices to work?
>
>
>
>
>
> Tim Tyler
>
> Network Engineer
>
> Beloit College
>
>
>
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at http://www.educause.edu/
> groups/.
>
>
>
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at http://www.educause.edu/
> groups/.
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at http://www.educause.edu/
> groups/.
>
>

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] support of L2 peering devices?

2016-11-30 Thread Cappalli, Tim (Aruba)
Tim,



Chromecast will work with the AirGroup service Googlecast enabled and with 
drop broadcast/multicast enabled on the VAP.



This can work in large subnets or multiple smaller subnets.



Tim

Aruba ClearPass Team



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tim Tyler
Sent: Wednesday, November 30, 2016 09:38
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?



Jon

   We do have the AirGroup functionality enabled.  But I also have a pool of 6 
/23 vlans.  So my first question is did you set up an independent SSID for L2 
devices to register?   Did you use one vlan (subnet)?  What size?   I am 
curious about the details to allow broadcast, but I am guessing I can ask that 
of an Aruba engineer if I need.  The ability to allow broadcast seems critical 
to getting Chromecast to work.

Tim



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> ] On Behalf Of Jonathan Miller
Sent: Wednesday, November 30, 2016 8:27 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,



The AirGroup functionality in Aruba ClearPass is probably what you're looking 
for.  You can set it up so that when students register their devices, they can 
choose whether those devices are allowed to use broadcast/multicast to talk to 
their other devices, or even allow sharing to other users (potentially, 
depending on your setup).



We've seen it work fairly well, although sometimes a chromecast or something 
will freak out and lose connectivity briefly with devices that it's supposed 
to be allowed to talk to.



Jon Miller

Network Analyst

Franklin and Marshall College





Jonathan Miller

Network Analyst

Franklin and Marshall College



On Wed, Nov 30, 2016 at 9:22 AM, Tim Tyler <ty...@beloit.edu 
<mailto:ty...@beloit.edu> > wrote:



Wireless Lan members,

We use Aruba Networks for our wireless solution and we do have many L2 devices 
working that leverage Bonjour, etc.  We simply do mac address authentication 
for them.   Most L2 devices work fine.My big goal is to find out the 
different methods that some of you might be using to support the most 
difficult L2 devices such as Chromecast, Sonos speakers, and other L2 devices 
that need to peer with another device in order to work.   These type of 
devices ultimately need to broadcast to see each other.  Chromecast generally 
needs to broadcast to the phone app so that the phone app can see it and 
establish a connection with one another.   If you create another SSID for it, 
what are the key factors in making it work?

Back in the earlier Fall, a number of you stated that you were using /16 
subnets or very large subnets so that you only needed one subnet for your 
residential wireless network.   So the question I have is did you do this to 
better support L2 devices?   If so, do you allow broadcasts on your large 
wireless subnet or did you simply do one /16 subnet to simplify the 
administration of your wireless network?

Bottom line, how are some of you supporting L2 devices that allow Chromecast 
and other peering L2 devices to work?





Tim Tyler

Network Engineer

Beloit College



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



smime.p7s
Description: S/MIME cryptographic signature


RE: [WIRELESS-LAN] support of L2 peering devices?

2016-11-30 Thread Tim Tyler
Jon

   We do have the AirGroup functionality enabled.  But I also have a pool
of 6 /23 vlans.  So my first question is did you set up an independent SSID
for L2 devices to register?   Did you use one vlan (subnet)?  What size?
I am curious about the details to allow broadcast, but I am guessing I can
ask that of an Aruba engineer if I need.  The ability to allow broadcast
seems critical to getting Chromecast to work.

Tim



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Jonathan Miller
*Sent:* Wednesday, November 30, 2016 8:27 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] support of L2 peering devices?



Tim,



The AirGroup functionality in Aruba ClearPass is probably what you're
looking for.  You can set it up so that when students register their
devices, they can choose whether those devices are allowed to use
broadcast/multicast to talk to their other devices, or even allow sharing
to other users (potentially, depending on your setup).



We've seen it work fairly well, although sometimes a chromecast or
something will freak out and lose connectivity briefly with devices that
it's supposed to be allowed to talk to.



Jon Miller

Network Analyst

Franklin and Marshall College



Jonathan Miller

Network Analyst

Franklin and Marshall College



On Wed, Nov 30, 2016 at 9:22 AM, Tim Tyler <ty...@beloit.edu> wrote:



Wireless Lan members,

We use Aruba Networks for our wireless solution and we do have many L2
devices working that leverage Bonjour, etc.  We simply do mac address
authentication for them.   Most L2 devices work fine.My big goal is to
find out the different methods that some of you might be using to support
the most difficult L2 devices such as Chromecast, Sonos speakers, and other
L2 devices that need to peer with another device in order to work.   These
type of devices ultimately need to broadcast to see each other.  Chromecast
generally needs to broadcast to the phone app so that the phone app can see
it and establish a connection with one another.   If you create another
SSID for it, what are the key factors in making it work?

Back in the earlier Fall, a number of you stated that you were using /16
subnets or very large subnets so that you only needed one subnet for your
residential wireless network.   So the question I have is did you do this
to better support L2 devices?   If so, do you allow broadcasts on your
large wireless subnet or did you simply do one /16 subnet to simplify the
administration of your wireless network?

Bottom line, how are some of you supporting L2 devices that allow
Chromecast and other peering L2 devices to work?





Tim Tyler

Network Engineer

Beloit College



** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.



** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Re: [WIRELESS-LAN] support of L2 peering devices?

2016-11-30 Thread Jonathan Miller
I should add that there are probably other products that have this
functionality, but I'm not aware of them.


Jonathan Miller
Network Analyst
Franklin and Marshall College

On Wed, Nov 30, 2016 at 9:22 AM, Tim Tyler  wrote:

>
>
> Wireless Lan members,
>
> We use Aruba Networks for our wireless solution and we do have many L2
> devices working that leverage Bonjour, etc.  We simply do mac address
> authentication for them.   Most L2 devices work fine.My big goal is to
> find out the different methods that some of you might be using to support
> the most difficult L2 devices such as Chromecast, Sonos speakers, and other
> L2 devices that need to peer with another device in order to work.   These
> type of devices ultimately need to broadcast to see each other.  Chromecast
> generally needs to broadcast to the phone app so that the phone app can see
> it and establish a connection with one another.   If you create another
> SSID for it, what are the key factors in making it work?
>
> Back in the earlier Fall, a number of you stated that you were using /16
> subnets or very large subnets so that you only needed one subnet for your
> residential wireless network.   So the question I have is did you do this
> to better support L2 devices?   If so, do you allow broadcasts on your
> large wireless subnet or did you simply do one /16 subnet to simplify the
> administration of your wireless network?
>
> Bottom line, how are some of you supporting L2 devices that allow
> Chromecast and other peering L2 devices to work?
>
>
>
>
>
> Tim Tyler
>
> Network Engineer
>
> Beloit College
>
>
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at http://www.educause.edu/
> groups/.
>
>

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Re: [WIRELESS-LAN] support of L2 peering devices?

2016-11-30 Thread Jonathan Miller
Tim,

The AirGroup functionality in Aruba ClearPass is probably what you're
looking for.  You can set it up so that when students register their
devices, they can choose whether those devices are allowed to use
broadcast/multicast to talk to their other devices, or even allow sharing
to other users (potentially, depending on your setup).

We've seen it work fairly well, although sometimes a chromecast or
something will freak out and lose connectivity briefly with devices that
it's supposed to be allowed to talk to.

Jon Miller
Network Analyst
Franklin and Marshall College


Jonathan Miller
Network Analyst
Franklin and Marshall College

On Wed, Nov 30, 2016 at 9:22 AM, Tim Tyler  wrote:

>
>
> Wireless Lan members,
>
> We use Aruba Networks for our wireless solution and we do have many L2
> devices working that leverage Bonjour, etc.  We simply do mac address
> authentication for them.   Most L2 devices work fine.My big goal is to
> find out the different methods that some of you might be using to support
> the most difficult L2 devices such as Chromecast, Sonos speakers, and other
> L2 devices that need to peer with another device in order to work.   These
> type of devices ultimately need to broadcast to see each other.  Chromecast
> generally needs to broadcast to the phone app so that the phone app can see
> it and establish a connection with one another.   If you create another
> SSID for it, what are the key factors in making it work?
>
> Back in the earlier Fall, a number of you stated that you were using /16
> subnets or very large subnets so that you only needed one subnet for your
> residential wireless network.   So the question I have is did you do this
> to better support L2 devices?   If so, do you allow broadcasts on your
> large wireless subnet or did you simply do one /16 subnet to simplify the
> administration of your wireless network?
>
> Bottom line, how are some of you supporting L2 devices that allow
> Chromecast and other peering L2 devices to work?
>
>
>
>
>
> Tim Tyler
>
> Network Engineer
>
> Beloit College
>
>
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at http://www.educause.edu/
> groups/.
>
>

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.