We use our guest SSID for devices that rely on bonjour with airgroups enabled. Multicast overall is disabled, airgroups handles any bonjour communication. We use larger /18 nets mainly to facilitate roaming. Airgroups doesn't care what subnet you are on. Devices on our secure SSID can talk to the guest SSID through airgroups.
This past fall, we also enabled the use of fingerprinting to allow certain classes of devices to automatically get onto our guest network without MAC registration (eg. printers, roku, appleTV, etc). We do have clearpass in the mix as well. --Doug Doug Wilkinson Associate Director, Network Technology Group Computing and Information Services Brown University -- On Wed, Nov 30, 2016 at 9:37 AM, Tim Tyler <[email protected]> wrote: > Jon > > We do have the AirGroup functionality enabled. But I also have a pool > of 6 /23 vlans. So my first question is did you set up an independent SSID > for L2 devices to register? Did you use one vlan (subnet)? What size? > I am curious about the details to allow broadcast, but I am guessing I can > ask that of an Aruba engineer if I need. The ability to allow broadcast > seems critical to getting Chromecast to work. > > Tim > > > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto: > [email protected]] *On Behalf Of *Jonathan Miller > *Sent:* Wednesday, November 30, 2016 8:27 AM > *To:* [email protected] > *Subject:* Re: [WIRELESS-LAN] support of L2 peering devices? > > > > Tim, > > > > The AirGroup functionality in Aruba ClearPass is probably what you're > looking for. You can set it up so that when students register their > devices, they can choose whether those devices are allowed to use > broadcast/multicast to talk to their other devices, or even allow sharing > to other users (potentially, depending on your setup). > > > > We've seen it work fairly well, although sometimes a chromecast or > something will freak out and lose connectivity briefly with devices that > it's supposed to be allowed to talk to. > > > > Jon Miller > > Network Analyst > > Franklin and Marshall College > > > > Jonathan Miller > > Network Analyst > > Franklin and Marshall College > > > > On Wed, Nov 30, 2016 at 9:22 AM, Tim Tyler <[email protected]> wrote: > > > > Wireless Lan members, > > We use Aruba Networks for our wireless solution and we do have many L2 > devices working that leverage Bonjour, etc. We simply do mac address > authentication for them. Most L2 devices work fine. My big goal is to > find out the different methods that some of you might be using to support > the most difficult L2 devices such as Chromecast, Sonos speakers, and other > L2 devices that need to peer with another device in order to work. These > type of devices ultimately need to broadcast to see each other. Chromecast > generally needs to broadcast to the phone app so that the phone app can see > it and establish a connection with one another. If you create another > SSID for it, what are the key factors in making it work? > > Back in the earlier Fall, a number of you stated that you were using /16 > subnets or very large subnets so that you only needed one subnet for your > residential wireless network. So the question I have is did you do this > to better support L2 devices? If so, do you allow broadcasts on your > large wireless subnet or did you simply do one /16 subnet to simplify the > administration of your wireless network? > > Bottom line, how are some of you supporting L2 devices that allow > Chromecast and other peering L2 devices to work? > > > > > > Tim Tyler > > Network Engineer > > Beloit College > > > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at http://www.educause.edu/ > groups/. > > > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at http://www.educause.edu/ > groups/. > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at http://www.educause.edu/ > groups/. > > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
