Hello, Hrm, but it does work when the clients and Chromecast are on the same VLAN, so it doesn't make sense to me that it'd be an issue with the IP address being public.
I did a bit of tinkering with something along those lines. In our case we have P2P blocking turned on and wanted to keep it that way. So I used 2 different SSIDs. One regular SSID for the phone, and a special SSID just for the Chromecast. There are some quirks of P2P blocking on different SSIDs. I'm going from memory here, so I may not be recalling 100% correctly. I believe that if P2P blocking is enabled and the clients are on different SSIDs *and* different VLANs, then packets aren't dropped by the WLC, but are forwarded upstream (ASA firewall). The firewall has all WLAN client VLAN/SVI's at the same security level and ASA drops same-security-level traffic by default. So either allow same-security-level traffic or give the interface for Chromecast devices a different security level. That made it mostly work for me. The only problems with what I did is that the app still wants the devices on the same SSID for the config to "complete", but that's at the very end of setup. The phone can be moved back to the regular SSID after setup is completed and it still works. Also, having to switch SSIDs is confusing for users. You are using one SSID and multiple VLANs, so a bit different than what I was doing, but I'm thinking that it's actually the FW dropping the traffic that's causing the issue. See if one of those work arounds helps. Regards, Ethan Grinnell CCIE R&S #39723, BS CmpE Network Engineer Office of Information Technology, Technology Infrastructure, Networking Portland State University 503-725-3205 On Mon, Jan 27, 2020 at 11:37 AM Hurt,Trenton W. <[email protected]> wrote: > To get work on public ips try > > > > > > Go to chrome://flags/ > > Search for “Connect to Cast devices on all IP addresses” > > Change from “default” to “enabled” > > > > *From:* The EDUCAUSE Wireless Issues Community Group Listserv < > [email protected]> *On Behalf Of *Carson, Dennis > *Sent:* Monday, January 27, 2020 2:24 PM > *To:* [email protected] > *Subject:* Re: [WIRELESS-LAN] [External] [WIRELESS-LAN] Chromecasts and > App on Phones > > > > We do use public ip space. > > > > *Dennis Carson* > > *California University of Pennsylvania* > > office: 724-938-4215 > > > > *From:* The EDUCAUSE Wireless Issues Community Group Listserv < > [email protected]> *On Behalf Of *Norton, Thomas > (Network Operations) > *Sent:* Monday, January 27, 2020 2:13 PM > *To:* [email protected] > *Subject:* Re: [WIRELESS-LAN] [External] [WIRELESS-LAN] Chromecasts and > App on Phones > > > > *[External]: *This email originated from outside of California University > of Pennsylvania. > > > > Yep, Google developers in their infinite glory! > > > > Chromecast now complete an HTTP request as part of discovery, as well > require you be on the same SSID for initial setup. > > > > Are you utilizing using public IPs? > > > > If so, I believe the chromecast has some weird mechanisim triggering a 403 > forbidden utilizing different IP spaces when utilizing public space. > > > > Private space should work with in different vlans/subnets. > > *T.J. Norton* > > *Wireless Network Architect* > *Network Operations* > > *Office: (434) 592-6552 <(434)%20592-6552> * > > > > [image: http://www.liberty.edu/media/1616/40themail/wordmark-for-email.jpg] > > *Liberty University | Training Champions for Christ since 1971* > > > > On Jan 27, 2020, at 12:09 PM, Carson, Dennis <[email protected]> wrote: > > > ------------------------------ > > [ EXTERNAL EMAIL: Do not click any links or open attachments unless you > know the sender and trust the content. ] > ------------------------------ > > Hello, > > > > We use Cisco AP’s. We have one ssid for students, but it has multiple > subnets. When the Chromecast and Phone end up on different subnets, they > don’t seem to be able to connect. > > Do any colleges have any workarounds or solutions for this? > > Also, with the way these devices work, does anyone know if they need to be > on the same subnet after the initial registration? Ie IF we use a hotspot > to register them, will they work when they go back to their dorm? > > > Thank you, > Dennis > > > ------------------------------ > > > [image: Cal U Logo] > *The content of this email is confidential and intended only for the > recipient(s) specified. If you received this message by mistake, please > reply so the sender can correct the error, and then delete this email > immediately. Do NOT forward it to a third party without the written consent > of the sender. California University of Pennsylvania is a public agency; > consequently, this email may be subject to disclosure under the > commonwealth’s Right-to-Know Law.* > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > <https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7CTrent.hurt%40LOUISVILLE.EDU%7C54b992a2bb0840e5ee5908d7a35e692f%7Cdd246e4a54344e158ae391ad9797b209%7C0%7C0%7C637157498200147859&sdata=i57yqWQTNMHbjAgdVBQ%2Fk7Nj2w%2FGQgioBpZHUVpzOds%3D&reserved=0> > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > <https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7CTrent.hurt%40LOUISVILLE.EDU%7C54b992a2bb0840e5ee5908d7a35e692f%7Cdd246e4a54344e158ae391ad9797b209%7C0%7C0%7C637157498200147859&sdata=i57yqWQTNMHbjAgdVBQ%2Fk7Nj2w%2FGQgioBpZHUVpzOds%3D&reserved=0> > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > <https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7CTrent.hurt%40LOUISVILLE.EDU%7C54b992a2bb0840e5ee5908d7a35e692f%7Cdd246e4a54344e158ae391ad9797b209%7C0%7C0%7C637157498200157854&sdata=c1jELsaZaOOPM%2FGNjmmKpDWquCwqTk3wxM8czgdznnE%3D&reserved=0> > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
